From: Bram Moolenaar <Bram@vim.org>
Date: Wed, 13 Feb 2013 13:36:44 +0000 (+0100)
Subject: updated for version 7.3.809
X-Git-Tag: v7.3.809
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=181ace28ed41ba15078285194a9b9d6e52b46844;p=vim

updated for version 7.3.809
Problem:    The dosinst.c program has a buffer overflow. (Thomas Gwae)
Solution:   Ignore $VIMRUNTIME if it is too long.
---

diff --git a/src/dosinst.c b/src/dosinst.c
index 0ff8e69b6..6bc15fc7d 100644
--- a/src/dosinst.c
+++ b/src/dosinst.c
@@ -375,7 +375,7 @@ get_vim_env(void)
 
     /* First get $VIMRUNTIME.  If it's set, remove the tail. */
     vim = getenv("VIMRUNTIME");
-    if (vim != NULL && *vim != 0)
+    if (vim != NULL && *vim != 0 && strlen(vim) < BUFSIZE)
     {
 	strcpy(buf, vim);
 	remove_tail(buf);
diff --git a/src/version.c b/src/version.c
index c716154e2..b2ea5c0f5 100644
--- a/src/version.c
+++ b/src/version.c
@@ -725,6 +725,8 @@ static char *(features[]) =
 
 static int included_patches[] =
 {   /* Add new patch number below this line */
+/**/
+    809,
 /**/
     808,
 /**/