# HG changeset patch
# User Bram Moolenaar <Bram@vim.org>
# Date 1633866304 -7200
# Node ID 79a5c8238a5d1dbcb3d7aec72ea847e293faec82
# Parent  52792b298baf11be8aea3a80333b4dc3bc6da1b7
patch 8.2.3492: crash when pasting too many times

Commit: https://github.com/vim/vim/commit/eeed1c7ae090c17f4df51cf97b2a9e4d8b4f4dc7
Author: Bram Moolenaar <Bram@vim.org>
Date:   Sun Oct 10 12:35:17 2021 +0100

    patch 8.2.3492: crash when pasting too many times

    Problem:    Crash when pasting too many times.
    Solution:   Limit the size to what fits in an int. (closes https://github.com/vim/vim/issues/8962)

diff --git a/src/errors.h b/src/errors.h
--- a/src/errors.h
+++ b/src/errors.h
@@ -664,3 +664,5 @@ EXTERN char e_blob_required_for_argument
 	INIT(= N_("E1238: Blob required for argument %d"));
 EXTERN char e_invalid_value_for_blob_nr[]
 	INIT(= N_("E1239: Invalid value for blob: %d"));
+EXTERN char e_resulting_text_too_long[]
+	INIT(= N_("E1240: Resulting text too long"));
diff --git a/src/register.c b/src/register.c
--- a/src/register.c
+++ b/src/register.c
@@ -2011,8 +2011,15 @@ do_put(
 	    }
 
 	    do {
-		totlen = count * yanklen;
-		if (totlen > 0)
+		long multlen = count * yanklen;
+
+		totlen = multlen;
+		if (totlen != multlen)
+		{
+		    emsg(_(e_resulting_text_too_long));
+		    break;
+		}
+		else if (totlen > 0)
 		{
 		    oldp = ml_get(lnum);
 		    if (lnum > start_lnum)
diff --git a/src/testdir/test_put.vim b/src/testdir/test_put.vim
--- a/src/testdir/test_put.vim
+++ b/src/testdir/test_put.vim
@@ -134,4 +134,12 @@ func Test_gp_with_count_leaves_cursor_at
   bwipe!
 endfunc
 
+func Test_very_larg_count()
+  new
+  let @" = 'x'
+  call assert_fails('norm 44444444444444p', 'E1240:')
+  bwipe!
+endfunc
+
+
 " vim: shiftwidth=2 sts=2 expandtab
diff --git a/src/version.c b/src/version.c
--- a/src/version.c
+++ b/src/version.c
@@ -758,6 +758,8 @@ static char *(features[]) =
 static int included_patches[] =
 {   /* Add new patch number below this line */
 /**/
+    3492,
+/**/
     3491,
 /**/
     3490,