Mercurial > vim

view runtime/print/cp1255.ps @ 33829:f0132690cdf9 v9.0.2129

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
patch 9.0.2129: [security]: use-after-free in call_dfunc() Commit: https://github.com/vim/vim/commit/a555069b7d790abedc60edc505bd35bda257949d Author: mityu <mityu.mail@gmail.com> Date: Sat Nov 25 15:41:20 2023 +0100 patch 9.0.2129: [security]: use-after-free in call_dfunc() Problem: [security]: use-after-free in call_dfunc() Solution: Refresh dfunc pointer closes: #13571 This Commit fixes a SEGV caused by a use-after-free bug in call_dfunc(). When calling check_ufunc_arg_types() from the call_dfunc() it may cause def functions to be re-compiled and if there are too many def functions, the def_functions array will be re-allocated. Which means, that the dfunc pointer in call_dfunc() now starts pointing to freed memory. So we need to reset the dfunc pointer after calling check_ufunc_arg_types(). Let's also add a test, to ensure we do not regress. Signed-off-by: mityu <mityu.mail@gmail.com> Signed-off-by: Yegappan Lakshmanan <yegappan@yahoo.com> Signed-off-by: Christian Brabandt <cb@256bit.org>
author Christian Brabandt <cb@256bit.org>
date Sat, 25 Nov 2023 16:00:03 +0100
parents 3fc0f57ecb91
children
line wrap: on
line source

%!PS-Adobe-3.0 Resource-Encoding
%%Title: VIM-cp1255
%%Version: 1.0 0
%%EndComments
/VIM-cp1255[
/.notdef /.notdef /.notdef /.notdef /.notdef /.notdef /.notdef /.notdef
/.notdef /.notdef /.notdef /.notdef /.notdef /.notdef /.notdef /.notdef
/.notdef /.notdef /.notdef /.notdef /.notdef /.notdef /.notdef /.notdef
/.notdef /.notdef /.notdef /.notdef /.notdef /.notdef /.notdef /.notdef
/space /exclam /quotedbl /numbersign /dollar /percent /ampersand /quotesingle
/parenleft /parenright /asterisk /plus /comma /minus /period /slash
/zero /one /two /three /four /five /six /seven
/eight /nine /colon /semicolon /less /equal /greater /question
/at /A /B /C /D /E /F /G
/H /I /J /K /L /M /N /O
/P /Q /R /S /T /U /V /W
/X /Y /Z /bracketleft /backslash /bracketright /asciicircum /underscore
/grave /a /b /c /d /e /f /g
/h /i /j /k /l /m /n /o
/p /q /r /s /t /u /v /w
/x /y /z /braceleft /bar /braceright /asciitilde /.notdef
/.notdef /.notdef /quotesinglbase /florin /quotedblbase /ellipsis /dagger /daggerdbl
/circumflex /perthousand /.notdef /guilsinglleft /.notdef /.notdef /.notdef /.notdef
/.notdef /quoteleft /quoteright /quotedblleft /quotedblright /bullet /endash /emdash
/tilde /trademark /.notdef /guilsinglright /.notdef /.notdef /.notdef /.notdef
/space /.notdef /cent /sterling /newsheqelsign /yen /brokenbar /section
/dieresis /copyright /.notdef /guillemotleft /logicalnot /hyphen /registered /macron
/degree /plusminus /twosuperior /threesuperior /acute /mu /paragraph /periodcentered
/.notdef /onesuperior /.notdef /guillemotright /onequarter /onehalf /threequarters /.notdef
/sheva /hatafsegol /hatafpatah /hatafqamats /hiriq /tsere /segol /patah
/qamats /holam /.notdef /qubuts /dagesh /meteg /maqaf /rafe
/paseq /shindot /sindot /sofpasuq /doublevav /vavyod /doubleyod /.notdef
/.notdef /.notdef /.notdef /.notdef /.notdef /.notdef /.notdef /.notdef
/alef /bet /gimel /dalet /he /vav /zayin /het
/tet /yod /finalkaf /kaf /lamed /finalmem /mem /finalnun
/nun /samekh /ayin /finalpe /pe /finaltsadi /tsadi /qof
/resh /shin /tav /.notdef /.notdef /.notdef /.notdef /.notdef]
/Encoding defineresource pop
% vim:ff=unix:
%%EOF