- Patch by Roman Pi?l : Fix buffer overflow in EDIT_EM_ReplaceSel().

svn path=/trunk/; revision=73470
This commit is contained in:
James Tabor 2016-12-19 16:37:44 +00:00
parent 1140838644
commit 30ff1f1032

View file

@ -2644,7 +2644,7 @@ static void EDIT_EM_ReplaceSel(EDITSTATE *es, BOOL can_undo, LPCWSTR lpsz_replac
if (es->buffer_limit < (tl - (e-s)))
strl = 0;
else
strl = es->buffer_limit - (tl - (e-s));
strl = min(strl, es->buffer_limit - (tl - (e-s)));
}
if (!EDIT_MakeFit(es, tl - (e - s) + strl))