Mercurial > vim
diff src/evalfunc.c @ 19121:a51fee786930 v8.2.0120
patch 8.2.0120: virtcol() does not check arguments to be valid
Commit: https://github.com/vim/vim/commit/b3d33d8570bc49a7f90990572d7f9630a1bfae02
Author: Bram Moolenaar <Bram@vim.org>
Date: Wed Jan 15 20:36:55 2020 +0100
patch 8.2.0120: virtcol() does not check arguments to be valid
Problem: virtcol() does not check arguments to be valid, which may lead to
a crash.
Solution: Check the column to be valid. Do not decrement MAXCOL.
(closes #5480)
| author | Bram Moolenaar <Bram@vim.org> |
|---|---|
| date | Wed, 15 Jan 2020 20:45:04 +0100 |
| parents | ba9f50bfda83 |
| children | 94eda51ba9ba |
line wrap: on
line diff
--- a/src/evalfunc.c +++ b/src/evalfunc.c @@ -6605,7 +6605,7 @@ f_setpos(typval_T *argvars, typval_T *re { if (list2fpos(&argvars[1], &pos, &fnum, &curswant) == OK) { - if (--pos.col < 0) + if (pos.col != MAXCOL && --pos.col < 0) pos.col = 0; if (name[0] == '.' && name[1] == NUL) { @@ -8372,11 +8372,21 @@ f_virtcol(typval_T *argvars, typval_T *r colnr_T vcol = 0; pos_T *fp; int fnum = curbuf->b_fnum; + int len; fp = var2fpos(&argvars[0], FALSE, &fnum); if (fp != NULL && fp->lnum <= curbuf->b_ml.ml_line_count && fnum == curbuf->b_fnum) { + // Limit the column to a valid value, getvvcol() doesn't check. + if (fp->col < 0) + fp->col = 0; + else + { + len = (int)STRLEN(ml_get(fp->lnum)); + if (fp->col > len) + fp->col = len; + } getvvcol(curwin, fp, NULL, NULL, &vcol); ++vcol; }