To: vim_dev@googlegroups.com
Subject: Patch 8.2.2779
Fcc: outbox
From: Bram Moolenaar <Bram@moolenaar.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
------------

Patch 8.2.2779
Problem:    Memory access error in remove() for blob.
Solution:   Adjust length for memmove().
Files:      src/blob.c


*** ../vim-8.2.2778/src/blob.c	2021-04-17 20:44:52.442520718 +0200
--- src/blob.c	2021-04-17 21:19:48.147769871 +0200
***************
*** 444,450 ****
  	{
  	    blob_T  *blob;
  
! 	    // Remove range of items, return list with values.
  	    end = (long)tv_get_number_chk(&argvars[2], &error);
  	    if (error)
  		return;
--- 444,450 ----
  	{
  	    blob_T  *blob;
  
! 	    // Remove range of items, return blob with values.
  	    end = (long)tv_get_number_chk(&argvars[2], &error);
  	    if (error)
  		return;
***************
*** 472,478 ****
  	    rettv->v_type = VAR_BLOB;
  	    rettv->vval.v_blob = blob;
  
! 	    mch_memmove(p + idx, p + end + 1, (size_t)(len - end));
  	    b->bv_ga.ga_len -= end - idx + 1;
  	}
      }
--- 472,479 ----
  	    rettv->v_type = VAR_BLOB;
  	    rettv->vval.v_blob = blob;
  
! 	    if (len - end - 1 > 0)
! 		mch_memmove(p + idx, p + end + 1, (size_t)(len - end - 1));
  	    b->bv_ga.ga_len -= end - idx + 1;
  	}
      }
*** ../vim-8.2.2778/src/version.c	2021-04-17 21:04:22.054657370 +0200
--- src/version.c	2021-04-17 21:21:13.735511442 +0200
***************
*** 752,753 ****
--- 752,755 ----
  {   /* Add new patch number below this line */
+ /**/
+     2779,
  /**/

-- 
Amnesia is one of my favorite words, but I forgot what it means.

 /// Bram Moolenaar -- Bram@Moolenaar.net -- http://www.Moolenaar.net   \\\
///                                                                      \\\
\\\        sponsor Vim, vote for features -- http://www.Vim.org/sponsor/ ///
 \\\            help me help AIDS victims -- http://ICCF-Holland.org    ///