aniani/vim
0
0
Fork 1
mirror of https://github.com/vim/vim.git synced 2025-08-22 19:27:53 -04:00
Code

patch 9.0.0164: using freed memory with put command

Browse Source 
Problem:    Using freed memory with put command.
Solution:   Get byte offset before replacing the line.
This commit is contained in:
Bram Moolenaar 2022-08-07 18:09:10 +01:00
parent ecb00c7b61
commit c390cc13e5
2 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/register.c
View File

@ -2099,13 +2099,15 @@ do_put(
ptr += yanklen; ptr += yanklen;
} }
STRMOVE(ptr, oldp + col); STRMOVE(ptr, oldp + col);
ml_replace(lnum, newp, FALSE);
inserted_bytes(lnum, col, totlen);
// compute the byte offset for the last character // compute the byte offset for the last character
first_byte_off = mb_head_off(newp, ptr - 1); first_byte_off = mb_head_off(newp, ptr - 1);
// Note: this may free "newp"
ml_replace(lnum, newp, FALSE);
inserted_bytes(lnum, col, totlen);
// Place cursor on last putted char. // Place cursor on last putted char.
if (lnum == curwin->w_cursor.lnum) if (lnum == curwin->w_cursor.lnum)
{ {

2
src/version.c
View File

@ -735,6 +735,8 @@ static char *(features[]) =
static int included_patches[] = static int included_patches[] =
{ /* Add new patch number below this line */ { /* Add new patch number below this line */
/**/
164,
/**/ /**/
163, 163,
/**/ /**/