To: vim_dev@googlegroups.com

Subject: Patch 7.3.809

Fcc: outbox

From: Bram Moolenaar <Bram@moolenaar.net>

Mime-Version: 1.0

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

------------

Patch 7.3.809

Problem:    The dosinst.c program has a buffer overflow. (Thomas Gwae)

Solution:   Ignore $VIMRUNTIME if it is too long.

Files:	    src/dosinst.c

*** ../vim-7.3.808/src/dosinst.c	2010-08-15 21:57:28.000000000 +0200

--- src/dosinst.c	2013-02-13 14:34:25.000000000 +0100

***************

*** 375,381 ****

      /* First get $VIMRUNTIME.  If it's set, remove the tail. */

      vim = getenv("VIMRUNTIME");

!     if (vim != NULL && *vim != 0)

      {

  	strcpy(buf, vim);

  	remove_tail(buf);

--- 375,381 ----

      /* First get $VIMRUNTIME.  If it's set, remove the tail. */

      vim = getenv("VIMRUNTIME");

!     if (vim != NULL && *vim != 0 && strlen(vim) < BUFSIZE)

      {

  	strcpy(buf, vim);

  	remove_tail(buf);

*** ../vim-7.3.808/src/version.c	2013-02-13 14:17:00.000000000 +0100

--- src/version.c	2013-02-13 14:36:33.000000000 +0100

***************

*** 727,728 ****

--- 727,730 ----

  {   /* Add new patch number below this line */

+ /**/

+     809,

  /**/

-- 

"I know that there are people who don't love their fellow man,

and I hate those people!" - Tom Lehrer

 /// Bram Moolenaar -- Bram@Moolenaar.net -- http://www.Moolenaar.net   \\\

///        sponsor Vim, vote for features -- http://www.Vim.org/sponsor/ \\\

\\\  an exciting new programming language -- http://www.Zimbu.org        ///

 \\\            help me help AIDS victims -- http://ICCF-Holland.org    ///