#574 Buffer overflow in TEdit::GetLine

[Vidar Hasfjord]

In TEdit::GetLine, the string null-terminator is written beyond the given buffer, if the line length equals or exceeds the buffer size. Note that EM_GETLINE in this case fills the whole buffer, and the count returned equals the buffer size.

[Vidar Hasfjord]

This issue has now been fixed on the trunk [r7106], and the fix has been merged into 7.0 and 6.44 [r7107], as well as 6.36 [r7108]. Resolution: If the buffer is too small, the string is now truncated and false is returned (as per function documentation).