Merge pull request #217 from github/upstream/limit-nested-parens

> 32 nested balanced parens in a link is bananas

1 files changed, 2 insertions, 0 deletions

diff --git a/src/inlines.c b/src/inlines.c
index 3bade11..d0ab253 100644
--- a/src/inlines.c
+++ b/src/inlines.c
@@ -898,6 +898,8 @@ static bufsize_t manual_scan_link_url_2(cmark_chunk *input, bufsize_t offset,
       else if (input->data[i] == '(') {
         ++nb_p;
         ++i;
+        if (nb_p > 32)
+          return -1;
       } else if (input->data[i] == ')') {
         if (nb_p == 0)
           break;