summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--src/parse/properties.c8
1 files changed, 8 insertions, 0 deletions
diff --git a/src/parse/properties.c b/src/parse/properties.c
index f9b8c4c..de30f07 100644
--- a/src/parse/properties.c
+++ b/src/parse/properties.c
@@ -3969,6 +3969,10 @@ css_error parse_orphans(css_language *c,
if (consumed != token->ilower->len)
return CSS_INVALID;
+ /* Negative values are nonsensical */
+ if (num < 0)
+ return CSS_INVALID;
+
value = ORPHANS_SET;
} else
return CSS_INVALID;
@@ -6308,6 +6312,10 @@ css_error parse_widows(css_language *c,
if (consumed != token->ilower->len)
return CSS_INVALID;
+ /* Negative values are nonsensical */
+ if (num < 0)
+ return CSS_INVALID;
+
value = WIDOWS_SET;
} else
return CSS_INVALID;