diff options
| author | Bram Moolenaar <Bram@vim.org> | 2023-01-04 17:17:54 +0000 |
|---|---|---|
| committer | Bram Moolenaar <Bram@vim.org> | 2023-01-04 17:17:54 +0000 |
| commit | 3ac1d97a1d9353490493d30088256360435f7731 (patch) | |
| tree | abb98762b33578fd248937ad21d1099e19a3e081 /src/eval.c | |
| parent | c32949b0779106ed5710ae3bffc5053e49083ab4 (diff) | |
patch 9.0.1145: invalid memory access with recursive substitute expressionv9.0.1145
Problem: Invalid memory access with recursive substitute expression.
Solution: Check the return value of vim_regsub().
Diffstat (limited to 'src/eval.c')
| -rw-r--r-- | src/eval.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/src/eval.c b/src/eval.c index 2fbd867aba..9ca805061d 100644 --- a/src/eval.c +++ b/src/eval.c @@ -7312,6 +7312,11 @@ do_string_sub( * - The text after the match. */ sublen = vim_regsub(®match, sub, expr, tail, 0, REGSUB_MAGIC); + if (sublen <= 0) + { + ga_clear(&ga); + break; + } if (ga_grow(&ga, (int)((end - tail) + sublen - (regmatch.endp[0] - regmatch.startp[0]))) == FAIL) { |