Fix 'insert-file-contents' when REPLACE is non-nil

* src/fileio.c (maybe_move_gap): New function to move the gap to
the end of a buffer, if it isn't there already.
(Finsert_file_contents): Call 'maybe_move_gap' before using
conversion_buffer's text as a C 'char' array.  (Bug#23659)
* src/coding.c (decode_eol): Compute the byte increment before
calling del_range_2, because the latter can invalidate the pointer
to buffer text.

1 files changed, 8 insertions, 4 deletions

diff --git a/src/coding.c b/src/coding.c
index 804b628d3be..29c90f0a401 100644
--- a/src/coding.c
+++ b/src/coding.c
@@ -6826,7 +6826,14 @@ decode_eol (struct coding_system *coding)
 
       while (pos_byte < pos_end)
         {
+          int incr;
+
           p = BYTE_POS_ADDR (pos_byte);
+          if (coding->dst_multibyte)
+            incr = BYTES_BY_CHAR_HEAD (*p);
+          else
+            incr = 1;
+
           if (*p == '\r' && p[1] == '\n')
             {
               del_range_2 (pos, pos_byte, pos + 1, pos_byte + 1, 0);
@@ -6834,10 +6841,7 @@ decode_eol (struct coding_system *coding)
               pos_end--;
             }
           pos++;
-          if (coding->dst_multibyte)
-            pos_byte += BYTES_BY_CHAR_HEAD (*p);
-          else
-            pos_byte++;
+          pos_byte += incr;
         }
       coding->produced -= n;
       coding->produced_char -= n;