# HG changeset patch # User Christian Brabandt # Date 1452456004 -3600 # Node ID 992fe73d4ee6ed8e7c5721b23cc2426d4d0a720b # Parent 626c631e029fba0e815ea1a2955de6e3af419f5a commit https://github.com/vim/vim/commit/507edf63df75fe228e0f76b845b58d60266e65d8 Author: Bram Moolenaar Date: Sun Jan 10 20:54:17 2016 +0100 patch 7.4.1086 Problem: Crash with an extremely long buffer name. Solution: Limit the return value of vim_snprintf(). (Dominique Pelle) diff --git a/src/buffer.c b/src/buffer.c --- a/src/buffer.c +++ b/src/buffer.c @@ -2793,6 +2793,8 @@ buflist_list(eap) (buf->b_flags & BF_READERR) ? 'x' : (bufIsChanged(buf) ? '+' : ' '), NameBuff); + if (len > IOSIZE - 20) + len = IOSIZE - 20; /* put "line 999" in column 40 or after the file name */ i = 40 - vim_strsize(IObuff); diff --git a/src/version.c b/src/version.c --- a/src/version.c +++ b/src/version.c @@ -742,6 +742,8 @@ static char *(features[]) = static int included_patches[] = { /* Add new patch number below this line */ /**/ + 1086, +/**/ 1085, /**/ 1084,