Mercurial > vim
changeset 29436:6888567953ca v9.0.0060
patch 9.0.0060: accessing uninitialized memory when completing long line
Commit: https://github.com/vim/vim/commit/b9e717367c395490149495cf375911b5d9de889e
Author: Bram Moolenaar <Bram@vim.org>
Date: Sat Jul 23 06:53:08 2022 +0100
patch 9.0.0060: accessing uninitialized memory when completing long line
Problem: Accessing uninitialized memory when completing long line.
Solution: Terminate string with NUL.
| author | Bram Moolenaar <Bram@vim.org> |
|---|---|
| date | Sat, 23 Jul 2022 08:00:03 +0200 |
| parents | 119cdb105611 |
| children | 94d36e0949df |
| files | src/insexpand.c src/testdir/test_ins_complete.vim src/version.c |
| diffstat | 3 files changed, 10 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- a/src/insexpand.c +++ b/src/insexpand.c @@ -642,6 +642,7 @@ ins_compl_infercase_gettext( // growarray. Add the character in the next round. if (ga_grow(&gap, IOSIZE) == FAIL) return (char_u *)"[failed]"; + *p = NUL; STRCPY(gap.ga_data, IObuff); gap.ga_len = (int)STRLEN(IObuff); }
--- a/src/testdir/test_ins_complete.vim +++ b/src/testdir/test_ins_complete.vim @@ -2108,6 +2108,13 @@ func Test_infercase_very_long_line() exe "normal 2Go\<C-X>\<C-L>\<Esc>" call assert_equal(longLine, getline(3)) + " check that the too long text is NUL terminated + %del + norm o + norm 1987ax + exec "norm ox\<C-X>\<C-L>" + call assert_equal(repeat('x', 1987), getline(3)) + bwipe! set noic noinfercase endfunc