commit f13c8561544dad4f82b7f4f71041d35f55b5feaa
author Hirohito Higashi <h.east.727@gmail.com> Sun Mar 30 15:19:05 2025 +0200
committer Christian Brabandt <cb@256bit.org> Sun Mar 30 15:19:05 2025 +0200
tree 8ab4f4eb5fc8f171f7fdbafabc3f0650a170078b
parent c6336acfe3e80904458d7ea735929b4c91346702

patch 9.1.1262: heap-buffer-overflow with narrow 'pummaxwidth' value

Problem:  heap-buffer-overflow occurs with narrow 'pummaxwidth' value
          (after v9.1.1250)
Solution: test that st_end points after st pointer (Hirohito Higashi)

closes: #17005

Signed-off-by: Hirohito Higashi <h.east.727@gmail.com>
Signed-off-by: Christian Brabandt <cb@256bit.org>

src/version.c

diff --git a/src/version.c b/src/version.c
index 4be2967..ec6acb6 100644
--- a/src/version.c
+++ b/src/version.c
@@ -705,6 +705,8 @@
 static int included_patches[] =
 {   /* Add new patch number below this line */
 /**/
+    1262,
+/**/
     1261,
 /**/
     1260,