mirror of
https://github.com/vim/vim.git
synced 2025-09-26 04:04:07 -04:00
updated for version 7.4.256
Problem: Using systemlist() may cause a crash and does not handle NUL characters properly. Solution: Increase the reference count, allocate memory by length. (Yasuhiro Matsumoto)
This commit is contained in:
12
src/eval.c
12
src/eval.c
@@ -18334,16 +18334,17 @@ get_cmd_output_as_rettv(argvars, rettv, retlist)
|
||||
for (i = 0; i < len; ++i)
|
||||
{
|
||||
start = res + i;
|
||||
for (end = start; i < len && *end != NL; ++end)
|
||||
while (i < len && res[i] != NL)
|
||||
++i;
|
||||
end = res + i;
|
||||
|
||||
s = vim_strnsave(start, (int)(end - start));
|
||||
s = alloc((unsigned)(end - start + 1));
|
||||
if (s == NULL)
|
||||
goto errret;
|
||||
|
||||
for (p = s, end = s + (end - start); p < end; ++p)
|
||||
if (*p == NUL)
|
||||
*p = NL;
|
||||
for (p = s; start < end; ++p, ++start)
|
||||
*p = *start == NUL ? NL : *start;
|
||||
*p = NUL;
|
||||
|
||||
li = listitem_alloc();
|
||||
if (li == NULL)
|
||||
@@ -18356,6 +18357,7 @@ get_cmd_output_as_rettv(argvars, rettv, retlist)
|
||||
list_append(list, li);
|
||||
}
|
||||
|
||||
++list->lv_refcount;
|
||||
rettv->v_type = VAR_LIST;
|
||||
rettv->vval.v_list = list;
|
||||
list = NULL;
|
||||
|
Reference in New Issue
Block a user