updated for version 7.3.675

Problem:    Using uninitialized memory with very long file name.
Solution:   Put NUL after text when it is truncated. (ZyX)

diff --git a/src/buffer.c b/src/buffer.c
index 0a2ce8ec96afa7eb71fe48fc9b5d8a98b6959387..5998523219b0f31bbf4bbe558f07333c031d1bda 100644 (file)
--- a/src/buffer.c
+++ b/src/buffer.c
@@ -3058,7 +3058,7 @@ fileinfo(fullname, shorthelp, dont_truncate)
 
     *p++ = '"';
     if (buf_spname(curbuf) != NULL)
-       STRCPY(p, buf_spname(curbuf));
+       vim_strncpy(p, buf_spname(curbuf), IOSIZE - (p - buffer) - 1);
     else
     {
        if (!fullname && curbuf->b_fname != NULL)

diff --git a/src/version.c b/src/version.c
index fff0079c27a43c3e791fd4765aad826af3ab936d..1798f053c23a7f953629ecfb5bf05b0c85b1c329 100644 (file)
--- a/src/version.c
+++ b/src/version.c
@@ -719,6 +719,8 @@ static char *(features[]) =
 
 static int included_patches[] =
 {   /* Add new patch number below this line */
+/**/
+    675,
 /**/
     674,
 /**/