Mercurial > vim
view src/testdir/test_file_size.vim @ 33915:a49ae967e9ed v9.0.2158
patch 9.0.2158: [security]: use-after-free in check_argument_type
Commit: https://github.com/vim/vim/commit/0f28791b215bd4c22ed580839409c2f7d39d8140
Author: Christian Brabandt <cb@256bit.org>
Date: Mon Dec 11 17:53:25 2023 +0100
patch 9.0.2158: [security]: use-after-free in check_argument_type
Problem: [security]: use-after-free in check_argument_type
Solution: Reset function type pointer when freeing the function type
list
function pointer fp->uf_func_type may point to the same memory, that was
allocated for fp->uf_type_list. However, when cleaning up a function
definition (e.g. because it was invalid), fp->uf_type_list will be
freed, but fp->uf_func_type may still point to the same (now) invalid
memory address.
So when freeing the fp->uf_type_list, check if fp->func_type points to
any of those types and if it does, reset the fp->uf_func_type pointer to
the t_func_any (default) type pointer
closes: #13652
Signed-off-by: Christian Brabandt <cb@256bit.org>
author | Christian Brabandt <cb@256bit.org> |
---|---|
date | Mon, 11 Dec 2023 18:00:03 +0100 |
parents | 08940efa6b4e |
children |
line wrap: on
line source
" Inserts 2 million lines with consecutive integers starting from 1 " (essentially, the output of GNU's seq 1 2000000), writes them to Xtest " and writes its cksum to test.out. " " We need 2 million lines to trigger a call to mf_hash_grow(). If it would mess " up the lines the checksum would differ. " " cksum is part of POSIX and so should be available on most Unixes. " If it isn't available then the test will be skipped. source check.vim func Test_File_Size() CheckExecutable cksum new set fileformat=unix undolevels=-1 for i in range(1, 2000000, 100) call append(i, range(i, i + 99)) endfor 1delete w! Xtest let res = systemlist('cksum Xtest')[0] let res = substitute(res, "\r", "", "") call assert_equal('3678979763 14888896 Xtest', res) enew! call delete('Xtest') set fileformat& undolevels& endfunc " Test for writing and reading a file of over 100 Kbyte func Test_File_Read_Write() enew! " Create a file with the following contents " 1 line: "This is the start" " 3001 lines: "This is the leader" " 1 line: "This is the middle" " 3001 lines: "This is the trailer" " 1 line: "This is the end" call append(0, "This is the start") call append(1, repeat(["This is the leader"], 3001)) call append(3002, "This is the middle") call append(3003, repeat(["This is the trailer"], 3001)) call append(6004, "This is the end") write! Xtest enew! edit! Xtest call assert_equal("This is the start", getline(1)) call assert_equal("This is the middle", getline(3003)) call assert_equal("This is the end", getline(6005)) enew! call delete("Xtest") endfunc " vim: shiftwidth=2 sts=2 expandtab