# HG changeset patch # User Bram Moolenaar # Date 1593459904 -7200 # Node ID 334a8a5a6267c205828b3017bb5d4c1c08c06df2 # Parent 42e2fb7ec6e1c45527d1ef3fcee9291cedb498b2 patch 8.2.1088: a very long translation might cause a buffer overflow Commit: https://github.com/vim/vim/commit/6378b21d6dd38cc0f80aa6d31d747db6c287483b Author: Bram Moolenaar Date: Mon Jun 29 21:32:06 2020 +0200 patch 8.2.1088: a very long translation might cause a buffer overflow Problem: A very long translation might cause a buffer overflow. Solution: Trunctate the message if needed. diff --git a/src/fileio.c b/src/fileio.c --- a/src/fileio.c +++ b/src/fileio.c @@ -52,10 +52,14 @@ filemess( if (msg_silent != 0) return; msg_add_fname(buf, name); // put file name in IObuff with quotes + // If it's extremely long, truncate it. - if (STRLEN(IObuff) > IOSIZE - 80) - IObuff[IOSIZE - 80] = NUL; - STRCAT(IObuff, s); + if (STRLEN(IObuff) > IOSIZE - 100) + IObuff[IOSIZE - 100] = NUL; + + // Avoid an over-long translation to cause trouble. + STRNCAT(IObuff, s, 99); + /* * For the first message may have to start a new line. * For further ones overwrite the previous one, reset msg_scroll before diff --git a/src/version.c b/src/version.c --- a/src/version.c +++ b/src/version.c @@ -755,6 +755,8 @@ static char *(features[]) = static int included_patches[] = { /* Add new patch number below this line */ /**/ + 1088, +/**/ 1087, /**/ 1086,