From: Bram Moolenaar <Bram@vim.org>
Date: Sun, 28 Aug 2022 21:21:01 +0000 (+0100)
Subject: patch 9.0.0309: invalid memory access when cmdheight is zero
X-Git-Tag: v9.0.0309
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=7a99da43d14671cc91a302bcfa34d37a35eaa28d;p=vim

patch 9.0.0309: invalid memory access when cmdheight is zero

Problem:    Invalid memory access when cmdheight is zero.
Solution:   Check index in w_lines is smaller than Rows.
---

diff --git a/src/drawscreen.c b/src/drawscreen.c
index de091e81d..aa5b8f7eb 100644
--- a/src/drawscreen.c
+++ b/src/drawscreen.c
@@ -830,6 +830,9 @@ after_updating_screen(int may_resize_shell UNUSED)
     // handle the drop now.
     handle_any_postponed_drop();
 #endif
+
+    // in case it was changed in dont_use_message_window()
+    cmdline_row = Rows - p_ch;
 }
 
 /*
@@ -2426,7 +2429,8 @@ win_update(win_T *wp)
 			    if (wp->w_lines_valid > wp->w_height)
 				wp->w_lines_valid = wp->w_height;
 			    for (i = wp->w_lines_valid; i - j >= idx; --i)
-				wp->w_lines[i] = wp->w_lines[i - j];
+				if (i < Rows)
+				    wp->w_lines[i] = wp->w_lines[i - j];
 
 			    // The w_lines[] entries for inserted lines are
 			    // now invalid, but wl_size may be used above.
diff --git a/src/version.c b/src/version.c
index eb05f9a0c..c69e46c49 100644
--- a/src/version.c
+++ b/src/version.c
@@ -707,6 +707,8 @@ static char *(features[]) =
 
 static int included_patches[] =
 {   /* Add new patch number below this line */
+/**/
+    309,
 /**/
     308,
 /**/