Mercurial > vim

diff src/testdir/crash/poc_uaf_exec_instructions @ 33879:d418c82f02a4 v9.0.2149

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
patch 9.0.2149: [security]: use-after-free in exec_instructions() Commit: https://github.com/vim/vim/commit/5dd41d4b6370b7b7d09d691f9252b3899c66102a Author: Christian Brabandt <cb@256bit.org> Date: Mon Dec 4 22:52:23 2023 +0100 patch 9.0.2149: [security]: use-after-free in exec_instructions() Problem: [security]: use-after-free in exec_instructions() Solution: get tv pointer again [security]: use-after-free in exec_instructions() exec_instructions may access freed memory, if the GA_GROWS_FAILS() re-allocates memory. When this happens, the typval tv may still point to now already freed memory. So let's get that pointer again and compare it with tv. If those two pointers differ, tv is now invalid and we have to refresh the tv pointer. closes: #13621 Signed-off-by: Christian Brabandt <cb@256bit.org>
author Christian Brabandt <cb@256bit.org>
date Sun, 10 Dec 2023 15:16:17 +0100
parents
children
line wrap: on
line diff
new file mode 100644
index e69de29bb2d1d6434b8b29ae775ad8c2e48c5391..49ae8577ff5bf7c47f86a3691525957b0eb57433
GIT binary patch
literal 69
zc$`Z~O;ZTc&}86BfiZvtSD8LnYF-LZh>NROKSotuQ$NNQBn}o-;L2y<Dl6tPC{8Y7
KNZ~5ZX8-_6G7%L3