inp_readline() Correct slashguard feature

Protect against invalid reads by checking the length.

1 files changed, 6 insertions, 4 deletions

diff --git a/src/ui/inputwin.c b/src/ui/inputwin.c
index 8362ee00..f3383986 100644
--- a/src/ui/inputwin.c
+++ b/src/ui/inputwin.c
@@ -197,10 +197,12 @@ inp_readline(void)
 
     if (inp_line) {
         if (!get_password && prefs_get_boolean(PREF_SLASH_GUARD)) {
-            char *res = (char*) memchr (inp_line+1, '/', 3);
-            if (res) {
-                cons_show("Your text contains a slash in the first 4 characters");
-                return NULL;
+            if (strlen(inp_line) > 1) {
+                char *res = (char*) memchr (inp_line+1, '/', 3);
+                if (res) {
+                    cons_show("Your text contains a slash in the first 4 characters");
+                    return NULL;
+                }
             }
         }
         return strdup(inp_line);