From 97d2f34c8763ab3a46c9f43284cc17bad3cf9568 Mon Sep 17 00:00:00 2001 From: Bram Moolenaar Date: Fri, 10 Jul 2020 20:03:03 +0200 Subject: patch 8.2.1169: write NUL past allocated space using corrupted spell file Problem: Write NUL past allocated space using corrupted spell file. (Markus Vervier) Solution: Init "c" every time. --- src/spellfile.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'src/spellfile.c') diff --git a/src/spellfile.c b/src/spellfile.c index fc365e2a0..8a029dc71 100644 --- a/src/spellfile.c +++ b/src/spellfile.c @@ -993,7 +993,6 @@ read_sal_section(FILE *fd, slang_T *slang) salitem_T *smp; int ccnt; char_u *p; - int c = NUL; slang->sl_sofo = FALSE; @@ -1017,6 +1016,8 @@ read_sal_section(FILE *fd, slang_T *slang) // : for (; gap->ga_len < cnt; ++gap->ga_len) { + int c = NUL; + smp = &((salitem_T *)gap->ga_data)[gap->ga_len]; ccnt = getc(fd); // if (ccnt < 0) -- cgit v1.2.1