diff options
| author | Bram Moolenaar <Bram@vim.org> | 2018-01-27 21:01:34 +0100 |
|---|---|---|
| committer | Bram Moolenaar <Bram@vim.org> | 2018-01-27 21:01:34 +0100 |
| commit | 95dbcbea6d85a5b79d9617ab3863458fdf0217a0 (patch) | |
| tree | 865904c3b8a00001192b1b3f870a9c2b01304063 /src/mbyte.c | |
| parent | 2ec364e94dbc080ccdf6c5dfc6f1653b5b7ded64 (diff) | |
| download | vim-git-95dbcbea6d85a5b79d9617ab3863458fdf0217a0.tar.gz | |
patch 8.0.1433: illegal memory access after undov8.0.1433
Problem: Illegal memory access after undo. (Dominique Pelle)
Solution: Avoid the column becomes negative. (Christian Brabandt,
closes #2533)
Diffstat (limited to 'src/mbyte.c')
| -rw-r--r-- | src/mbyte.c | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/src/mbyte.c b/src/mbyte.c index 742c220df..5ed321ed2 100644 --- a/src/mbyte.c +++ b/src/mbyte.c @@ -1784,6 +1784,7 @@ dbcs_ptr2char(char_u *p) * Convert a UTF-8 byte sequence to a wide character. * If the sequence is illegal or truncated by a NUL the first byte is * returned. + * For an overlong sequence this may return zero. * Does not include composing characters, of course. */ int @@ -4112,7 +4113,10 @@ mb_adjustpos(buf_T *buf, pos_T *lp) ) { p = ml_get_buf(buf, lp->lnum, FALSE); - lp->col -= (*mb_head_off)(p, p + lp->col); + if (*p == NUL || (int)STRLEN(p) < lp->col) + lp->col = 0; + else + lp->col -= (*mb_head_off)(p, p + lp->col); #ifdef FEAT_VIRTUALEDIT /* Reset "coladd" when the cursor would be on the right half of a * double-wide character. */ |