Blame SOURCES/0001-patch-8.2.3487-illegal-memory-access-if-buffer-name-.patch

0e4147
diff -up vim80/src/screen.c.cve3872 vim80/src/screen.c
0e4147
--- vim80/src/screen.c.cve3872	2021-10-21 13:20:27.694921335 +0200
0e4147
+++ vim80/src/screen.c	2021-10-21 13:22:42.221732996 +0200
0e4147
@@ -6911,13 +6911,13 @@ win_redr_status(win_T *wp)
0e4147
 	    *(p + len++) = ' ';
0e4147
 	if (bt_help(wp->w_buffer))
0e4147
 	{
0e4147
-	    STRCPY(p + len, _("[Help]"));
0e4147
+	    vim_snprintf((char *)p + len, MAXPATHL - len, "%s", _("[Help]"));
0e4147
 	    len += (int)STRLEN(p + len);
0e4147
 	}
0e4147
 #ifdef FEAT_QUICKFIX
0e4147
 	if (wp->w_p_pvw)
0e4147
 	{
0e4147
-	    STRCPY(p + len, _("[Preview]"));
0e4147
+	    vim_snprintf((char *)p + len, MAXPATHL - len, "%s", _("[Preview]"));
0e4147
 	    len += (int)STRLEN(p + len);
0e4147
 	}
0e4147
 #endif
0e4147
@@ -6927,12 +6927,12 @@ win_redr_status(win_T *wp)
0e4147
 #endif
0e4147
 		)
0e4147
 	{
0e4147
-	    STRCPY(p + len, "[+]");
0e4147
-	    len += 3;
0e4147
+	    vim_snprintf((char *)p + len, MAXPATHL - len, "%s", "[+]");
0e4147
+	    len += (int)STRLEN(p + len);
0e4147
 	}
0e4147
 	if (wp->w_buffer->b_p_ro)
0e4147
 	{
0e4147
-	    STRCPY(p + len, _("[RO]"));
0e4147
+	    vim_snprintf((char *)p + len, MAXPATHL - len, "%s", _("[RO]"));
0e4147
 	    len += (int)STRLEN(p + len);
0e4147
 	}
0e4147