updated for version 7.3.809

Problem:    The dosinst.c program has a buffer overflow. (Thomas Gwae)
Solution:   Ignore $VIMRUNTIME if it is too long.

diff --git a/src/dosinst.c b/src/dosinst.c
index 0ff8e69b699f5bec812e4a47c5710559a1f52e44..6bc15fc7d446909d4f5c4a7d5c22177f7ae70f50 100644 (file)
--- a/src/dosinst.c
+++ b/src/dosinst.c
@@ -375,7 +375,7 @@ get_vim_env(void)
 
     /* First get $VIMRUNTIME.  If it's set, remove the tail. */
     vim = getenv("VIMRUNTIME");
-    if (vim != NULL && *vim != 0)
+    if (vim != NULL && *vim != 0 && strlen(vim) < BUFSIZE)
     {
        strcpy(buf, vim);
        remove_tail(buf);

diff --git a/src/version.c b/src/version.c
index c716154e236cd18e03a4450c9adae65a07e57515..b2ea5c0f5407123352922d573ff721890fdc9f16 100644 (file)
--- a/src/version.c
+++ b/src/version.c
@@ -725,6 +725,8 @@ static char *(features[]) =
 
 static int included_patches[] =
 {   /* Add new patch number below this line */
+/**/
+    809,
 /**/
     808,
 /**/