diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2023-11-22 11:07:00 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-11-22 11:07:00 +0800 |
| commit | 8c6b0a5f21d5f0cf3781ef2b6fdbb306d5604a02 (patch) | |
| tree | 84e6d26913d2324db22aec37a7a8c078fbf65969 /runtime/lua/vim/iter.lua | |
| parent | 059dc3f4a6b94cd028c5041d682982e6eed9bc87 (diff) | |
| download | rneovim-8c6b0a5f21d5f0cf3781ef2b6fdbb306d5604a02.tar.gz rneovim-8c6b0a5f21d5f0cf3781ef2b6fdbb306d5604a02.tar.bz2 rneovim-8c6b0a5f21d5f0cf3781ef2b6fdbb306d5604a02.zip | |
vim-patch:9.0.2117: [security] use-after-free in qf_free_items (#26148)
Problem: [security] use-after-free in qf_free_items
Solution: only access qfpnext, if it hasn't been freed
Coverity discovered a possible use-after-free in qf_free_items. When
freeing the qfline items, we may access freed memory, when qfp ==
qfpnext.
So only access qfpnext, when it hasn't been freed.
https://github.com/vim/vim/commit/567cae2630a51efddc07eacff3b38a295e1f5671
Co-authored-by: Christian Brabandt <cb@256bit.org>
Diffstat (limited to 'runtime/lua/vim/iter.lua')
0 files changed, 0 insertions, 0 deletions