Fix illegal memory access when using expressions in the command line.
diff --git a/runtime/doc/todo.txt b/runtime/doc/todo.txt
index 56faa68..dbb5be7 100644
--- a/runtime/doc/todo.txt
+++ b/runtime/doc/todo.txt
@@ -30,8 +30,6 @@
*known-bugs*
-------------------- Known bugs and current work -----------------------
-Patch for crash with cmdline editing functions. (Dominique Pelle, 2010 Aug 12)
-
Have a close look at :find completion, anything that could be wrong?
Test 73 fails on MS-Windows when compiled with DJGPP and run twice. How to
diff --git a/src/ex_getln.c b/src/ex_getln.c
index d292553..1cf6785 100644
--- a/src/ex_getln.c
+++ b/src/ex_getln.c
@@ -2527,7 +2527,10 @@
ccline.cmdbuff = p; /* keep the old one */
return FAIL;
}
- mch_memmove(ccline.cmdbuff, p, (size_t)ccline.cmdlen + 1);
+ /* There isn't always a NUL after the command, but it may need to be
+ * there, thus copy up to the NUL and add a NUL. */
+ mch_memmove(ccline.cmdbuff, p, (size_t)ccline.cmdlen);
+ ccline.cmdbuff[ccline.cmdlen] = NUL;
vim_free(p);
if (ccline.xpc != NULL