mirror of
https://github.com/neovim/neovim.git
synced 2025-09-27 21:48:35 +00:00
vim-patch:8.2.3669: buffer overflow with long help argument (#16971)
Problem: Buffer overflow with long help argument.
Solution: Use snprintf().
bd228fd097
This commit is contained in:
@@ -5071,8 +5071,7 @@ int find_help_tags(const char_u *arg, int *num_matches, char_u ***matches, bool
|
||||
&& ((arg[1] != NUL && arg[2] == NUL)
|
||||
|| (vim_strchr((char_u *)"%_z@", arg[1]) != NULL
|
||||
&& arg[2] != NUL))) {
|
||||
STRCPY(d, "/\\\\");
|
||||
STRCPY(d + 3, arg + 1);
|
||||
vim_snprintf((char *)d, IOSIZE, "/\\\\%s", arg + 1);
|
||||
// Check for "/\\_$", should be "/\\_\$"
|
||||
if (d[3] == '_' && d[4] == '$') {
|
||||
STRCPY(d + 4, "\\$");
|
||||
|
Reference in New Issue
Block a user