- Patch by Roman Pi?l : Fix buffer overflow in EDIT_EM_ReplaceSel().

svn path=/trunk/; revision=73470
This commit is contained in:
James Tabor 2016-12-19 16:37:44 +00:00
parent 1140838644
commit 30ff1f1032

View file

@ -2644,7 +2644,7 @@ static void EDIT_EM_ReplaceSel(EDITSTATE *es, BOOL can_undo, LPCWSTR lpsz_replac
if (es->buffer_limit < (tl - (e-s))) if (es->buffer_limit < (tl - (e-s)))
strl = 0; strl = 0;
else else
strl = es->buffer_limit - (tl - (e-s)); strl = min(strl, es->buffer_limit - (tl - (e-s)));
} }
if (!EDIT_MakeFit(es, tl - (e - s) + strl)) if (!EDIT_MakeFit(es, tl - (e - s) + strl))