===================================================================
RCS file: /cvs/mandoc/roff.c,v
retrieving revision 1.292
retrieving revision 1.293
diff -u -p -r1.292 -r1.293
--- mandoc/roff.c	2017/03/08 13:18:10	1.292
+++ mandoc/roff.c	2017/03/09 15:29:35	1.293
@@ -1,4 +1,4 @@
-/*	$Id: roff.c,v 1.292 2017/03/08 13:18:10 schwarze Exp $ */
+/*	$Id: roff.c,v 1.293 2017/03/09 15:29:35 schwarze Exp $ */
 /*
  * Copyright (c) 2008-2012, 2014 Kristaps Dzonsons <kristaps@bsd.lv>
  * Copyright (c) 2010-2015, 2017 Ingo Schwarze <schwarze@openbsd.org>
@@ -3092,6 +3092,8 @@ roff_userdef(ROFF_ARGS)
 		else if (++expand_count > EXPAND_LIMIT) {
 			mandoc_msg(MANDOCERR_ROFFLOOP, r->parse,
 			    ln, (int)(cp - n1), NULL);
+			free(buf->buf);
+			buf->buf = n1;
 			return ROFF_IGN;
 		}