Mercurial > vim
annotate SECURITY.md @ 32807:0582b3b40319 v9.0.1719
patch 9.0.1719: if_lua: crash for for Lua functions invoked via Vim callbacks
Commit: https://github.com/vim/vim/commit/8a35033782de4e1f43fba15543fc8fb458944194
Author: Jesse Pavel <jpavel@alum.mit.edu>
Date: Sun Aug 13 22:05:45 2023 -0400
patch 9.0.1719: if_lua: crash for for Lua functions invoked via Vim callbacks
Problem: if_lua: crash for Lua functions invoked via Vim callbacks
Solution: Use Lua registry rather than upvalues for udata cache
closes: #12785
Signed-off-by: Christian Brabandt <cb@256bit.org>
Co-authored-by: Jesse Pavel <jpavel@alum.mit.edu>
author | Christian Brabandt <cb@256bit.org> |
---|---|
date | Tue, 15 Aug 2023 23:30:03 +0200 |
parents | b807b0aa8e1f |
children | 965ed6e19279 |
rev | line source |
---|---|
32717
b807b0aa8e1f
Add security policy (#12687)
Christian Brabandt <cb@256bit.org>
parents:
diff
changeset
|
1 # Security Policy |
b807b0aa8e1f
Add security policy (#12687)
Christian Brabandt <cb@256bit.org>
parents:
diff
changeset
|
2 |
b807b0aa8e1f
Add security policy (#12687)
Christian Brabandt <cb@256bit.org>
parents:
diff
changeset
|
3 ## Reporting a vulnerability |
b807b0aa8e1f
Add security policy (#12687)
Christian Brabandt <cb@256bit.org>
parents:
diff
changeset
|
4 |
b807b0aa8e1f
Add security policy (#12687)
Christian Brabandt <cb@256bit.org>
parents:
diff
changeset
|
5 If you want to report a security issue, please use [huntr.dev](https://huntr.dev/bounties/disclose?target=https%3A%2F%2Fgithub.com%2Fvim%2Fvim) to privately disclose the issue to us. |
b807b0aa8e1f
Add security policy (#12687)
Christian Brabandt <cb@256bit.org>
parents:
diff
changeset
|
6 They also have rewards in the form of money, swag and CVEs. |
b807b0aa8e1f
Add security policy (#12687)
Christian Brabandt <cb@256bit.org>
parents:
diff
changeset
|
7 |
b807b0aa8e1f
Add security policy (#12687)
Christian Brabandt <cb@256bit.org>
parents:
diff
changeset
|
8 **Please don't publicly disclose the issue until it has been addressed by us.** |