Mercurial > vim
changeset 2148:99b225e0dbc1 v7.2.430
updated for version 7.2.430
Problem: The ++bad argument is handled wrong, resulting in an invalid
memory access.
Solution: Use the bad_char field only for the replacement character, add
bad_char_idx to store the position. (Dominique Pelle)
| author | Bram Moolenaar <bram@zimbu.org> |
|---|---|
| date | Fri, 14 May 2010 20:41:05 +0200 |
| parents | 2bd29808d1f6 |
| children | 4c8008ab94d8 |
| files | src/eval.c src/ex_cmds.h src/ex_docmd.c src/version.c |
| diffstat | 4 files changed, 10 insertions(+), 7 deletions(-) [+] |
line wrap: on
line diff
--- a/src/eval.c +++ b/src/eval.c @@ -18309,8 +18309,8 @@ set_cmdarg(eap, oldarg) # ifdef FEAT_MBYTE if (eap->force_enc != 0) len += (unsigned)STRLEN(eap->cmd + eap->force_enc) + 7; - if (eap->bad_char != 0) - len += (unsigned)STRLEN(eap->cmd + eap->bad_char) + 7; + if (eap->bad_char_idx != 0) + len += (unsigned)STRLEN(eap->cmd + eap->bad_char_idx) + 7; # endif newval = alloc(len + 1); @@ -18334,9 +18334,9 @@ set_cmdarg(eap, oldarg) if (eap->force_enc != 0) sprintf((char *)newval + STRLEN(newval), " ++enc=%s", eap->cmd + eap->force_enc); - if (eap->bad_char != 0) + if (eap->bad_char_idx != 0) sprintf((char *)newval + STRLEN(newval), " ++bad=%s", - eap->cmd + eap->bad_char); + eap->cmd + eap->bad_char_idx); # endif vimvars[VV_CMDARG].vv_str = newval; return oldval;
--- a/src/ex_cmds.h +++ b/src/ex_cmds.h @@ -1152,7 +1152,8 @@ struct exarg int force_ff; /* ++ff= argument (index in cmd[]) */ #ifdef FEAT_MBYTE int force_enc; /* ++enc= argument (index in cmd[]) */ - int bad_char; /* ++bad= argument (index in cmd[]) */ + int bad_char_idx; /* ++bad= argument (index in cmd[]) */ + int bad_char; /* BAD_KEEP, BAD_DROP or replacement char */ #endif #ifdef FEAT_USR_CMDS int useridx; /* user command index */
--- a/src/ex_docmd.c +++ b/src/ex_docmd.c @@ -4739,7 +4739,7 @@ getargopt(eap) else if (STRNCMP(arg, "bad", 3) == 0) { arg += 3; - pp = &eap->bad_char; + pp = &eap->bad_char_idx; } #endif @@ -4770,7 +4770,7 @@ getargopt(eap) { /* Check ++bad= argument. Must be a single-byte character, "keep" or * "drop". */ - p = eap->cmd + eap->bad_char; + p = eap->cmd + eap->bad_char_idx; if (STRICMP(p, "keep") == 0) eap->bad_char = BAD_KEEP; else if (STRICMP(p, "drop") == 0)