File tree Expand file tree Collapse file tree 2 files changed +12
-2
lines changed Expand file tree Collapse file tree 2 files changed +12
-2
lines changed Original file line number Diff line number Diff line change @@ -674,11 +674,19 @@ nb_get_buf(int bufno)
674
674
{
675
675
if (bufno >= buf_list_size ) // grow list
676
676
{
677
- nbbuf_T * t_buf_list = buf_list ;
677
+ nbbuf_T * t_buf_list = buf_list ;
678
+ size_t bufsize ;
678
679
679
680
incr = bufno - buf_list_size + 90 ;
680
681
buf_list_size += incr ;
681
- buf_list = vim_realloc (buf_list , buf_list_size * sizeof (nbbuf_T ));
682
+ bufsize = buf_list_size * sizeof (nbbuf_T );
683
+ if (bufsize == 0 || bufsize / sizeof (nbbuf_T )
684
+ != (size_t )buf_list_size )
685
+ {
686
+ // list size overflow, bail out
687
+ return NULL ;
688
+ }
689
+ buf_list = vim_realloc (buf_list , bufsize );
682
690
if (buf_list == NULL )
683
691
{
684
692
vim_free (t_buf_list );
Original file line number Diff line number Diff line change @@ -750,6 +750,8 @@ static char *(features[]) =
750
750
751
751
static int included_patches [] =
752
752
{ /* Add new patch number below this line */
753
+ /**/
754
+ 1843 ,
753
755
/**/
754
756
1842 ,
755
757
/**/
You can’t perform that action at this time.
0 commit comments