patch 9.0.1847: [security] potential oob write in do_addsub() Commit: https://github.com/vim/vim/commit/889f6af37164775192e33b233a90e86fd3df0f57 Author: Christian Brabandt <cb@256bit.org> Date: Sat Sep 2 19:43:33 2023 +0200 patch 9.0.1847: [security] potential oob write in do_addsub() Problem: potential oob write in do_addsub() Solution: don't overflow buf2, check size in for loop() Signed-off-by: Christian Brabandt <cb@256bit.org>

|m+0&#ffffff0|a|c| @46
|^+0#0000e05&|J|t+0#0000000&|w|o|^+0#0000e05&|J| +0#0000000&@42
|~+0#4040ff13&| @48
|X+1#0000000&|m|a|c|.|t|x|t| @23|1|,|1| @11|A|l@1
>u+0&&|n|i|x|^+0#0000e05&|M| +0#0000000&@43
|t|w|o| @46
|~+0#4040ff13&| @48
|X+3#0000000&|u|n|i|x|.|t|x|t| @22|1|,|1| @11|A|l@1
| +0&&@49