From c75d0454c5e7e4a387da8d3424b97fb9b41d4192 Mon Sep 17 00:00:00 2001
From: Mitchell Foral <unknown>
Date: Tue, 4 Aug 2020 09:29:42 +1000
Subject: Bounds checking for SetSelectionN* APIs.

---
 src/Editor.cxx | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'src')

diff --git a/src/Editor.cxx b/src/Editor.cxx
index 1d7d1047d..86909d5e4 100644
--- a/src/Editor.cxx
+++ b/src/Editor.cxx
@@ -5766,6 +5766,9 @@ sptr_t Editor::StyleGetMessage(unsigned int iMessage, uptr_t wParam, sptr_t lPar
 }
 
 void Editor::SetSelectionNMessage(unsigned int iMessage, uptr_t wParam, sptr_t lParam) {
+	if (wParam >= sel.Count()) {
+		return;
+	}
 	InvalidateRange(sel.Range(wParam).Start().Position(), sel.Range(wParam).End().Position());
 
 	switch (iMessage) {
-- 
cgit v1.2.3