Mercurial > vim
view src/xpm/README.txt @ 33862:242b964d6269 v9.0.2140
patch 9.0.2140: [security]: use-after-free in win-enter
Commit: https://github.com/vim/vim/commit/eec0c2b3a4cfab93dd8d4adaa60638d47a2bbc8a
Author: Christian Brabandt <cb@256bit.org>
Date: Tue Nov 28 22:03:48 2023 +0100
patch 9.0.2140: [security]: use-after-free in win-enter
Problem: [security]: use-after-free in win-enter
Solution: validate window pointer before calling win_enter()
win_goto() may stop visual mode, if it is active. However, this may in
turn trigger the ModeChanged autocommand, which could potentially free
the wp pointer which was valid before now became stale and points to now
freed memory.
So before calling win_enter(), let's verify one more time, that the
wp pointer still points to a valid window structure.
Reported by @henices, thanks!
Signed-off-by: Christian Brabandt <cb@256bit.org>
| author | Christian Brabandt <cb@256bit.org> |
|---|---|
| date | Sun, 10 Dec 2023 15:16:01 +0100 |
| parents | 219dbe63ad2a |
| children |
line wrap: on
line source
This is XPM library compiled for Windows which is intended for use with Vim 'signs' feature. Libraries in x86 directory were compiled with MSVC6 and MinGW. Proposed commands to compile Vim are: If you want to build XPM library by yourself, you may want to use the following Win32 port: https://github.com/koron/libXpm-win32 Any version of MSVC starting from version 6.0: nmake -f Make_mvc.mak GUI=yes CSCOPE=yes NETBEANS=yes XPM=e:\hg\xpm\x86 MinGW: mingw32-make -f Make_ming.mak GUI=yes CSCOPE=yes XPM=e:/hg/xpm/x86 MinGW 64 for x64: mingw32-make -f Make_ming.mak GUI=yes ARCH=x86-64 XPM=E:\HG\xpm\x64 Microsoft Visual C++ on x64 (tested with versions 2008 and 2010): nmake -f Make_mvc.mak GUI=yes CSCOPE=yes XPM=E:\HG\xpm\x64 To test, open some file in Vim and execute commands below: :exe 'sign define vimxpm icon='.$VIMRUNTIME.'\\vim32x32.xpm' :exe 'sign place 1 line=1 name=vimxpm file='.expand('%:p') See COPYRIGHT for XPM licence. If you have questions please email sergey.khorev@gmail.com.