ZyX wrote:

> Consider the following script:
> 
>     autocmd BufReadCmd read://* call setline('.', split(expand('<amatch>'), 
> '/')[1:])
>     edit `='read://'.join(range(1000000), '/')`
>     file
> . Being launched with “vim -u NONE -S longfnamebug.vim -s <(<<<
> $'\n')” it causes vim to crash with SIGABRT, but not when using
> debug version, in this case it does not crash but opened buffer
> contains only 1041 lines, with last line containing “103”
> instead of “1039”.

I can reproduct it.  Looks like a size becomes negative and is then used
as size_t, thus dropping the sign.


-- 
FATHER:    Did you kill all those guards?
LAUNCELOT: Yes ...  I'm very sorry ...
FATHER:    They cost fifty pounds each!
                 "Monty Python and the Holy Grail" PYTHON (MONTY) PICTURES LTD

 /// Bram Moolenaar -- [email protected] -- http://www.Moolenaar.net   \\\
///        sponsor Vim, vote for features -- http://www.Vim.org/sponsor/ \\\
\\\  an exciting new programming language -- http://www.Zimbu.org        ///
 \\\            help me help AIDS victims -- http://ICCF-Holland.org    ///

-- 
You received this message from the "vim_dev" maillist.
Do not top-post! Type your reply below the text you are replying to.
For more information, visit http://www.vim.org/maillist.php

Raspunde prin e-mail lui