diff options
author | Justin M. Keyes <justinkz@gmail.com> | 2022-06-18 18:53:12 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2022-06-18 09:53:12 -0700 |
commit | ff6b8f54359037790b300cb06a025f84f11d829a (patch) | |
tree | 5f12a1dbad771a375190ef78607a819dbc498f40 /runtime/lua/vim/_meta.lua | |
parent | 9c0f2253a5c014ba1ab7ee6e403a0b07c4e01b40 (diff) | |
download | rneovim-ff6b8f54359037790b300cb06a025f84f11d829a.tar.gz rneovim-ff6b8f54359037790b300cb06a025f84f11d829a.tar.bz2 rneovim-ff6b8f54359037790b300cb06a025f84f11d829a.zip |
fix(terminal): coverity USE_AFTER_FREE #18978
Problem:
Coverity reports use after free:
*** CID 352784: Memory - illegal accesses (USE_AFTER_FREE)
/src/nvim/buffer.c: 1508 in set_curbuf()
1502 if (old_tw != curbuf->b_p_tw) {
1503 check_colorcolumn(curwin);
1504 }
1505 }
1506
1507 if (bufref_valid(&prevbufref) && prevbuf->terminal != NULL) {
>>> CID 352784: Memory - illegal accesses (USE_AFTER_FREE)
>>> Calling "terminal_check_size" dereferences freed pointer "prevbuf->terminal".
1508 terminal_check_size(prevbuf->terminal);
1509 }
1510 }
1511
1512 /// Enter a new current buffer.
1513 /// Old curbuf must have been abandoned already! This also means "curbuf" may
Solution:
Change terminal_destroy and terminal_close to set caller storage to NULL,
similar to XFREE_CLEAR. This aligns with the pattern found already in:
terminal_destroy e897ccad3eb1e
term_delayed_free 3e59c1e20d605
Diffstat (limited to 'runtime/lua/vim/_meta.lua')
0 files changed, 0 insertions, 0 deletions