From 402eb5b5a6de2b16824eeefa7c4ef8cfd565a7d5 Mon Sep 17 00:00:00 2001 From: Christian Brabandt Date: Sat, 21 Feb 2026 10:50:20 +0000 Subject: [PATCH] patch 9.2.0039: potential integer underflow in screen_line() Problem: In screen_line(), there is a potential integer underflow when accessing ScreenAttrs[off_to - 1] if off_to is zero. (Coverity CID 1681430, after v9.2.0017) Solution: Add a check to ensure off_to > 0 before accessing the previous attribute index. related: #19272 closes: #19479 Signed-off-by: Christian Brabandt --- src/screen.c | 2 +- src/version.c | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/src/screen.c b/src/screen.c index 6e6f11b70b..b3fe3705e0 100644 --- a/src/screen.c +++ b/src/screen.c @@ -848,7 +848,7 @@ skip_opacity: #ifdef FEAT_GUI && !gui.in_use #endif - && col + coloff > 0) + && col + coloff > 0 && off_to > 0) { if (ScreenAttrs[off_to] == ScreenAttrs[off_to - 1]) { diff --git a/src/version.c b/src/version.c index 871f3b2392..336ac8894f 100644 --- a/src/version.c +++ b/src/version.c @@ -734,6 +734,8 @@ static char *(features[]) = static int included_patches[] = { /* Add new patch number below this line */ +/**/ + 39, /**/ 38, /**/