aniani/vim
0
0
Fork 1
mirror of https://github.com/vim/vim.git synced 2025-09-24 03:44:06 -04:00
Code Activity

patch 8.2.1169: write NUL past allocated space using corrupted spell file

Browse Source 
Problem:    Write NUL past allocated space using corrupted spell file.
            (Markus Vervier)
Solution:   Init "c" every time.
This commit is contained in:
Bram Moolenaar
2020-07-10 20:03:03 +02:00
parent 92053ce59e
commit 97d2f34c87
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
src/spellfile.c
View File

@@ -993,7 +993,6 @@ read_sal_section(FILE *fd, slang_T *slang)
salitem_T *smp; salitem_T *smp;
int ccnt; int ccnt;
char_u *p; char_u *p;
int c = NUL;
slang->sl_sofo = FALSE; slang->sl_sofo = FALSE;
@@ -1017,6 +1016,8 @@ read_sal_section(FILE *fd, slang_T *slang)
// <sal> : <salfromlen> <salfrom> <saltolen> <salto> // <sal> : <salfromlen> <salfrom> <saltolen> <salto>
for (; gap->ga_len < cnt; ++gap->ga_len) for (; gap->ga_len < cnt; ++gap->ga_len)
{ {
int c = NUL;
smp = &((salitem_T *)gap->ga_data)[gap->ga_len]; smp = &((salitem_T *)gap->ga_data)[gap->ga_len];
ccnt = getc(fd); // <salfromlen> ccnt = getc(fd); // <salfromlen>
if (ccnt < 0) if (ccnt < 0)

2
src/version.c
View File

@@ -754,6 +754,8 @@ static char *(features[]) =
static int included_patches[] = static int included_patches[] =
{ /* Add new patch number below this line */ { /* Add new patch number below this line */
/**/
1169,
/**/ /**/
1168, 1168,
/**/ /**/