Patch 8.2.2779

[Bram Moolenaar]

Patch 8.2.2779
Problem: Memory access error in remove() for blob.
Solution: Adjust length for memmove().
Files: src/blob.c


*** ../vim-8.2.2778/src/blob.c 2021-04-17 20:44:52.442520718 +0200
--- src/blob.c 2021-04-17 21:19:48.147769871 +0200
***************
*** 444,450 ****
{
blob_T *blob;

! // Remove range of items, return list with values.
end = (long)tv_get_number_chk(&argvars[2], &error);
if (error)
return;
--- 444,450 ----
{
blob_T *blob;

! // Remove range of items, return blob with values.
end = (long)tv_get_number_chk(&argvars[2], &error);
if (error)
return;
***************
*** 472,478 ****
rettv->v_type = VAR_BLOB;
rettv->vval.v_blob = blob;

! mch_memmove(p + idx, p + end + 1, (size_t)(len - end));
b->bv_ga.ga_len -= end - idx + 1;
}
}
--- 472,479 ----
rettv->v_type = VAR_BLOB;
rettv->vval.v_blob = blob;

! if (len - end - 1 > 0)
! mch_memmove(p + idx, p + end + 1, (size_t)(len - end - 1));
b->bv_ga.ga_len -= end - idx + 1;
}
}
*** ../vim-8.2.2778/src/version.c 2021-04-17 21:04:22.054657370 +0200
--- src/version.c 2021-04-17 21:21:13.735511442 +0200
***************
*** 752,753 ****
--- 752,755 ----
{ /* Add new patch number below this line */
+ /**/
+ 2779,
/**/

--
Amnesia is one of my favorite words, but I forgot what it means.

/// Bram Moolenaar -- Br...@Moolenaar.net -- http://www.Moolenaar.net \\\
/// \\\
\\\ sponsor Vim, vote for features -- http://www.Vim.org/sponsor/ ///
\\\ help me help AIDS victims -- http://ICCF-Holland.org ///