Mercurial > vim
view SECURITY.md @ 33501:c7c630759e31 v9.0.2000
patch 9.0.2000: Vim9: use-after-free in deep call stack
Commit: https://github.com/vim/vim/commit/1087b8c29ab521106c5b6cc85d5b38244f0d9c1d
Author: Yegappan Lakshmanan <yegappan@yahoo.com>
Date: Sat Oct 7 22:03:18 2023 +0200
patch 9.0.2000: Vim9: use-after-free in deep call stack
Problem: Vim9: use-after-free in deep call stack
Solution: Get the objct pointer from execution stack
closes: #13296
Signed-off-by: Christian Brabandt <cb@256bit.org>
Co-authored-by: Yegappan Lakshmanan <yegappan@yahoo.com>
author | Christian Brabandt <cb@256bit.org> |
---|---|
date | Sat, 07 Oct 2023 22:15:07 +0200 |
parents | b807b0aa8e1f |
children | 965ed6e19279 |
line wrap: on
line source
# Security Policy ## Reporting a vulnerability If you want to report a security issue, please use [huntr.dev](https://huntr.dev/bounties/disclose?target=https%3A%2F%2Fgithub.com%2Fvim%2Fvim) to privately disclose the issue to us. They also have rewards in the form of money, swag and CVEs. **Please don't publicly disclose the issue until it has been addressed by us.**