Mercurial > vim
view src/libvterm/CODE-MAP @ 33862:242b964d6269 v9.0.2140
patch 9.0.2140: [security]: use-after-free in win-enter
Commit: https://github.com/vim/vim/commit/eec0c2b3a4cfab93dd8d4adaa60638d47a2bbc8a
Author: Christian Brabandt <cb@256bit.org>
Date: Tue Nov 28 22:03:48 2023 +0100
patch 9.0.2140: [security]: use-after-free in win-enter
Problem: [security]: use-after-free in win-enter
Solution: validate window pointer before calling win_enter()
win_goto() may stop visual mode, if it is active. However, this may in
turn trigger the ModeChanged autocommand, which could potentially free
the wp pointer which was valid before now became stale and points to now
freed memory.
So before calling win_enter(), let's verify one more time, that the
wp pointer still points to a valid window structure.
Reported by @henices, thanks!
Signed-off-by: Christian Brabandt <cb@256bit.org>
author | Christian Brabandt <cb@256bit.org> |
---|---|
date | Sun, 10 Dec 2023 15:16:01 +0100 |
parents | b13f723a7ec6 |
children |
line wrap: on
line source
CODE-MAP - high-level list and description of files in the repository CONTRIBUTING - documentation explaining how developers can contribute fixes and features doc/ - contains documentation doc/seqs.txt - documents the sequences recognised by the library include/vterm.h - main include file include/vterm_keycodes.h - include file containing the keyboard input keycode enumerations LICENSE - legalese Makefile - main build file src/ - contains the source code for the library src/encoding.c - handles mapping ISO/IEC 2022 alternate character sets into Unicode codepoints src/keyboard.c - handles sending reported keyboard events to the output stream src/mouse.c - handles sending reported mouse events to the output stream src/parser.c - parses bytes from the input stream into parser-level events src/pen.c - interprets SGR sequences and maintains current rendering attributes src/screen.c - uses state-level events to maintain a buffer of current screen contents src/state.c - follows parser-level events to keep track of the overall terminal state src/unicode.c - utility functions for Unicode and UTF-8 handling src/vterm.c - toplevel object state and miscellaneous functions src/vterm_internal.h - include file for definitions private to the library's internals t/ - contains unit tests t/harness.c - standalone program to embed the library into for unit-test purposes t/run-test.pl - invokes the test harness to run a single unit test script