thac0/vim
1
0
Fork 0
forked from aniani/vim
Code Activity

patch 9.0.1145: invalid memory access with recursive substitute expression

Browse Source 
Problem:    Invalid memory access with recursive substitute expression.
Solution:   Check the return value of vim_regsub().
This commit is contained in:
Bram Moolenaar
2023-01-04 17:17:54 +00:00
parent c32949b077
commit 3ac1d97a1d
3 changed files with 23 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/eval.c
View File

@@ -7312,6 +7312,11 @@ do_string_sub(
* - The text after the match.
*/
sublen = vim_regsub(&regmatch, sub, expr, tail, 0, REGSUB_MAGIC);
if (sublen <= 0)
{
ga_clear(&ga);
break;
}
if (ga_grow(&ga, (int)((end - tail) + sublen -
(regmatch.endp[0] - regmatch.startp[0]))) == FAIL)
{