annotate src/typemap @ 33772:7624df087ebf
v9.0.2106
patch 9.0.2106: [security]: Use-after-free in win_close()
Commit: https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a
Author: Christian Brabandt <cb@256bit.org>
Date: Tue Nov 14 19:31:34 2023 +0100
patch 9.0.2106: [security]: Use-after-free in win_close()
Problem: [security]: Use-after-free in win_close()
Solution: Check window is valid, before accessing it
If the current window structure is no longer valid (because a previous
autocommand has already freed this window), fail and return before
attempting to set win->w_closing variable.
Add a test to trigger ASAN in CI
Signed-off-by: Christian Brabandt <cb@256bit.org>
author |
Christian Brabandt <cb@256bit.org> |
date |
Thu, 16 Nov 2023 22:15:05 +0100 |
parents |
dec4338a7da2 |
children |
|
rev |
line source |
7
|
1 TYPEMAP
|
|
2 VIWIN T_VIOBJNOMUNGE
|
|
3 VIBUF T_VIOBJNOMUNGE
|
|
4
|
|
5 INPUT
|
|
6 T_VIOBJNOMUNGE
|
|
7 if (sv_isa($arg, \"${ntype}\")) {
|
|
8 IV tmp = SvIV((SV*)SvRV($arg));
|
3344
|
9 $var = INT2PTR($type, tmp);
|
7
|
10 if (!tmp)
|
|
11 croak(\"$ntype no longer exists\");
|
|
12 }
|
|
13 else
|
|
14 croak(\"$var is not of type ${ntype}\")
|