commit 806d037671e133bd28a7864248763f643967973a
author Bram Moolenaar <Bram@vim.org> Tue Jan 25 20:45:16 2022 +0000
committer Bram Moolenaar <Bram@vim.org> Tue Jan 25 20:45:16 2022 +0000
tree 64269f1fedb4fffa3f09da8e79e2db78238566ff
parent 8d02ce1ed75d008c34a5c9aaa51b67cbb9d33baa

patch 8.2.4218: illegal memory access with bracketed paste in Ex mode

Problem:    Illegal memory access with bracketed paste in Ex mode.
Solution:   Reserve space for the trailing NUL.

src/edit.c

diff --git a/src/edit.c b/src/edit.c
index ee3caf0..2b53011 100644
--- a/src/edit.c
+++ b/src/edit.c
@@ -4452,7 +4452,8 @@
 		    break;
 
 		case PASTE_EX:
-		    if (gap != NULL && ga_grow(gap, idx) == OK)
+		    // add one for the NUL that is going to be appended
+		    if (gap != NULL && ga_grow(gap, idx + 1) == OK)
 		    {
 			mch_memmove((char *)gap->ga_data + gap->ga_len,
 							     buf, (size_t)idx);