On 18/09/12 18:03, Bram Moolenaar wrote:

Patch 7.3.664
Problem:    Buffer overflow in unescaping text. (Raymond Ko)
Solution:   Limit check for multi-byte character to 4 bytes.
Files:      src/mbyte.c
[...]

Note: Maximum value of a Unicode codepoint, as currently defined by the Unicode Consortium, is (and shall never exceed in future versions, they say) U+10FFFD, and for that 4 UTF-8 bytes are indeed enough (U+10FFFD in UTF-8 is hex F4 8F BF BD). But Vim accepts codepoints up to U+7FFFFFFF, as in the first version of the Unicode (or was it ISO 10646?) standard, and that requires up to 6 bytes (U+7FFFFFFF in UTF-8 is hex FD BF BF BF BF BF). See for instance ":help i_CTRL-V_digit".

Best regards,
Tony.
--
Don't let your mind wander -- it's too little to be let out alone.

--
You received this message from the "vim_dev" maillist.
Do not top-post! Type your reply below the text you are replying to.
For more information, visit http://www.vim.org/maillist.php

Raspunde prin e-mail lui