commit b7081e135a16091c93f6f5f7525a5c58fb7ca9f9
author Bram Moolenaar <Bram@vim.org> Sat Sep 04 18:47:28 2021 +0200
committer Bram Moolenaar <Bram@vim.org> Sat Sep 04 18:47:28 2021 +0200
tree fe04f73c100f22e17137f2dfe0af5c68ac21bcd9
parent 10c83dde554b57ab4db71b96a0a02a5b6d1798e9

patch 8.2.3402: invalid memory access when using :retab with large value

Problem:    Invalid memory access when using :retab with large value.
Solution:   Check the number is positive.

src/optionstr.c

diff --git a/src/optionstr.c b/src/optionstr.c
index a394d8d..ff13218 100644
--- a/src/optionstr.c
+++ b/src/optionstr.c
@@ -2240,7 +2240,7 @@
 	    if (errmsg == NULL)
 	    {
 		int *oldarray = curbuf->b_p_vsts_array;
-		if (tabstop_set(*varp, &(curbuf->b_p_vsts_array)))
+		if (tabstop_set(*varp, &(curbuf->b_p_vsts_array)) == OK)
 		{
 		    if (oldarray)
 			vim_free(oldarray);
@@ -2279,7 +2279,7 @@
 	    {
 		int *oldarray = curbuf->b_p_vts_array;
 
-		if (tabstop_set(*varp, &(curbuf->b_p_vts_array)))
+		if (tabstop_set(*varp, &(curbuf->b_p_vts_array)) == OK)
 		{
 		    vim_free(oldarray);
 #ifdef FEAT_FOLDING