> 32 nested balanced parens in a link is bananas

1 files changed, 2 insertions, 0 deletions

diff --git a/src/inlines.c b/src/inlines.c
index b864e12..c95809c 100644
--- a/src/inlines.c
+++ b/src/inlines.c
@@ -850,6 +850,8 @@ static bufsize_t manual_scan_link_url(cmark_chunk *input, bufsize_t offset) {
       else if (input->data[i] == '(') {
         ++nb_p;
         ++i;
+        if (nb_p > 32)
+          return -1;
       } else if (input->data[i] == ')') {
         if (nb_p == 0)
           break;