# HG changeset patch # User Bram Moolenaar # Date 1604424604 -3600 # Node ID 42bb78d46354c9bb4430ac4f285704de75e9d57c # Parent 39efae87751b57ef0bafbeaa6b45316a933a04af patch 8.2.1945: crash when passing NULL function to reduce() Commit: https://github.com/vim/vim/commit/0d90e728fe089ff1bb34d6a17f5591a96b57f734 Author: Bram Moolenaar Date: Tue Nov 3 18:20:19 2020 +0100 patch 8.2.1945: crash when passing NULL function to reduce() Problem: Crash when passing NULL function to reduce(). Solution: Check for NULL pointer and give an error. (Dominique Pell?, closes #7243) diff --git a/src/errors.h b/src/errors.h --- a/src/errors.h +++ b/src/errors.h @@ -286,4 +286,6 @@ EXTERN char e_cannot_add_to_null_list[] INIT(= N_("E1130: Cannot add to null list")); EXTERN char e_cannot_add_to_null_blob[] INIT(= N_("E1131: Cannot add to null blob")); +EXTERN char e_missing_function_argument[] + INIT(= N_("E1132: Missing function argument")); #endif diff --git a/src/list.c b/src/list.c --- a/src/list.c +++ b/src/list.c @@ -2552,8 +2552,11 @@ f_reduce(typval_T *argvars, typval_T *re } else func_name = tv_get_string(&argvars[1]); - if (*func_name == NUL) - return; // type error or empty name + if (func_name == NULL || *func_name == NUL) + { + emsg(_(e_missing_function_argument)); + return; + } vim_memset(&funcexe, 0, sizeof(funcexe)); funcexe.evaluate = TRUE; diff --git a/src/testdir/test_listdict.vim b/src/testdir/test_listdict.vim --- a/src/testdir/test_listdict.vim +++ b/src/testdir/test_listdict.vim @@ -740,6 +740,9 @@ func Test_reduce() call assert_equal(42, reduce(test_null_list(), function('add'), 42)) call assert_equal(42, reduce(test_null_blob(), function('add'), 42)) + + " should not crash + call assert_fails('echo reduce([1], test_null_function())', 'E1132:') endfunc " splitting a string to a List using split() diff --git a/src/version.c b/src/version.c --- a/src/version.c +++ b/src/version.c @@ -751,6 +751,8 @@ static char *(features[]) = static int included_patches[] = { /* Add new patch number below this line */ /**/ + 1945, +/**/ 1944, /**/ 1943,