Mercurial > vim
comparison src/version.c @ 34414:e0d4ce8ebf12 v9.1.0130
patch 9.1.0130: [security]: UAF if win_split_ins autocommands delete "wp"
Commit: https://github.com/vim/vim/commit/abf7030a5c22257f066fa9c4061ad150d5a82577
Author: Sean Dewar <6256228+seandewar@users.noreply.github.com>
Date: Sat Feb 24 10:20:24 2024 +0100
patch 9.1.0130: [security]: UAF if win_split_ins autocommands delete "wp"
Problem: heap-use-after-free in win_splitmove if Enter/Leave
autocommands from win_split_ins immediately closes "wp".
Solution: check that "wp" is valid after win_split_ins.
(Sean Dewar)
closes: #14078
Signed-off-by: Sean Dewar <6256228+seandewar@users.noreply.github.com>
Signed-off-by: Christian Brabandt <cb@256bit.org>
| author | Christian Brabandt <cb@256bit.org> |
|---|---|
| date | Sat, 24 Feb 2024 10:30:07 +0100 |
| parents | b67de41ae869 |
| children | 0a458b49e1e6 |
comparison
equal
deleted
inserted
replaced
| 34413:7c13c892deab | 34414:e0d4ce8ebf12 |
|---|---|
| 702 NULL | 702 NULL |
| 703 }; | 703 }; |
| 704 | 704 |
| 705 static int included_patches[] = | 705 static int included_patches[] = |
| 706 { /* Add new patch number below this line */ | 706 { /* Add new patch number below this line */ |
| 707 /**/ | |
| 708 130, | |
| 707 /**/ | 709 /**/ |
| 708 129, | 710 129, |
| 709 /**/ | 711 /**/ |
| 710 128, | 712 128, |
| 711 /**/ | 713 /**/ |