aboutsummaryrefslogtreecommitdiff
path: root/src/nvim/ex_getln.c
diff options
context:
space:
mode:
Diffstat (limited to 'src/nvim/ex_getln.c')
-rw-r--r--src/nvim/ex_getln.c12
1 files changed, 11 insertions, 1 deletions
diff --git a/src/nvim/ex_getln.c b/src/nvim/ex_getln.c
index 9d0e3d542a..93fd62f107 100644
--- a/src/nvim/ex_getln.c
+++ b/src/nvim/ex_getln.c
@@ -4241,6 +4241,11 @@ int get_list_range(char **str, int *num1, int *num2)
if (**str == '-' || ascii_isdigit(**str)) { // parse "from" part of range
vim_str2nr(*str, NULL, &len, 0, &num, NULL, 0, false, NULL);
*str += len;
+ // overflow
+ if (num > INT_MAX) {
+ return FAIL;
+ }
+
*num1 = (int)num;
first = true;
}
@@ -4249,8 +4254,13 @@ int get_list_range(char **str, int *num1, int *num2)
*str = skipwhite((*str) + 1);
vim_str2nr(*str, NULL, &len, 0, &num, NULL, 0, false, NULL);
if (len > 0) {
- *num2 = (int)num;
*str = skipwhite((*str) + len);
+ // overflow
+ if (num > INT_MAX) {
+ return FAIL;
+ }
+
+ *num2 = (int)num;
} else if (!first) { // no number given at all
return FAIL;
}