Commit 2e6813b0 authored by Paul Eggert's avatar Paul Eggert
Browse files

* editfns.c (Finsert_char): Don't dump core with very negative counts.

parent 599a9e4f
2011-06-16 Paul Eggert <eggert@cs.ucla.edu>
* editfns.c (Finsert_char): Don't dump core with very negative counts.
* insdel.c (replace_range): Fix buf overflow when insbytes < outgoing.
* insdel.c, lisp.h (buffer_overflow): New function.
......
......@@ -2343,11 +2343,11 @@ from adjoining text, if those properties are sticky. */)
len = CHAR_STRING (c, str);
else
str[0] = c, len = 1;
if (XINT (count) <= 0)
return Qnil;
if (BUF_BYTES_MAX / len < XINT (count))
buffer_overflow ();
n = XINT (count) * len;
if (n <= 0)
return Qnil;
stringlen = min (n, 256 * len);
string = (char *) alloca (stringlen);
for (i = 0; i < stringlen; i++)
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment