diff options
| author | =?UTF-8?q?Dundar=20G=C3=B6c?= <gocdundar@gmail.com> | 2022-01-29 15:19:23 +0000 |
|---|---|---|
| committer | Bram Moolenaar <Bram@vim.org> | 2022-01-29 15:19:23 +0000 |
| commit | d5cec1f1f055316c353cfa15ad8d5eb0952d50a0 (patch) | |
| tree | 94d3ad44783e3442be7293edb3d5890ac08f0377 /src/ex_docmd.c | |
| parent | f12b7815f6b55c3e2f37366aa45e723b1fcb2e9a (diff) | |
patch 8.2.4255: theoretical computation overflowv8.2.4255
Problem: Theoretical computation overflow.
Solution: Perform multiplication in a wider type. (closes #9657)
Diffstat (limited to 'src/ex_docmd.c')
| -rw-r--r-- | src/ex_docmd.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/ex_docmd.c b/src/ex_docmd.c index aa91539270..c55b34ddb6 100644 --- a/src/ex_docmd.c +++ b/src/ex_docmd.c @@ -4738,7 +4738,7 @@ replace_makeprg(exarg_T *eap, char_u *p, char_u **cmdlinep) while ((pos = (char_u *)strstr((char *)pos + 2, "$*")) != NULL) ++i; len = (int)STRLEN(p); - new_cmdline = alloc(STRLEN(program) + i * (len - 2) + 1); + new_cmdline = alloc(STRLEN(program) + (size_t)i * (len - 2) + 1); if (new_cmdline == NULL) return NULL; // out of memory ptr = new_cmdline; |