updated for version 7.4.465
Problem: Crash when expanding a very long string.
Solution: Use wsncpy() instead of wcscpy(). (Ken Takata)
diff --git a/src/os_win32.c b/src/os_win32.c
index 21c3ee9..eb66ed2 100644
--- a/src/os_win32.c
+++ b/src/os_win32.c
@@ -2775,9 +2775,10 @@
if (p != NULL)
{
char_u *q;
- WCHAR buf[_MAX_PATH + 2];
+ WCHAR buf[_MAX_PATH + 1];
- wcscpy(buf, p);
+ wcsncpy(buf, p, _MAX_PATH);
+ buf[_MAX_PATH] = L'\0';
vim_free(p);
if (fname_casew(buf, (len > 0) ? _MAX_PATH : 0) == OK)
diff --git a/src/version.c b/src/version.c
index dc9d25d..c502cdc 100644
--- a/src/version.c
+++ b/src/version.c
@@ -742,6 +742,8 @@
static int included_patches[] =
{ /* Add new patch number below this line */
/**/
+ 465,
+/**/
464,
/**/
463,
