diff options
| author | Sean Dewar <seandewar@users.noreply.github.com> | 2021-11-24 02:48:55 +0000 |
|---|---|---|
| committer | Sean Dewar <seandewar@users.noreply.github.com> | 2021-11-24 03:55:02 +0000 |
| commit | c366c944c2d2f46862f8d3a660e52f2735f816ae (patch) | |
| tree | dc40dd27ac7d9341113897558d313bb29d47ca5a /src/nvim/window.c | |
| parent | dd8a4e2c22ea8018ce3af989134b1e9c4607ce37 (diff) | |
| download | rneovim-c366c944c2d2f46862f8d3a660e52f2735f816ae.tar.gz rneovim-c366c944c2d2f46862f8d3a660e52f2735f816ae.tar.bz2 rneovim-c366c944c2d2f46862f8d3a660e52f2735f816ae.zip | |
vim-patch:8.1.2136: using freed memory with autocmd from fuzzer
Problem: using freed memory with autocmd from fuzzer. (Dhiraj Mishra,
Dominique Pelle)
Solution: Avoid using "wp" after autocommands. (closes vim/vim#5041)
https://github.com/vim/vim/commit/ec66c41d84e574baf8009dbc0bd088d2bc5b2421
Nvim doesn't use Vim's terminal implementation.
Despite this, Nvim has its own *exclusive* way of crashing here.
Requires 'winwidth' > winwidth() and 'nowinfixwidth' to crash; adjust
the test ('nowfw' is the default, but ensure its disabled anyway).
Diffstat (limited to 'src/nvim/window.c')
| -rw-r--r-- | src/nvim/window.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/nvim/window.c b/src/nvim/window.c index e328ff5467..3e6e42dec2 100644 --- a/src/nvim/window.c +++ b/src/nvim/window.c @@ -4525,6 +4525,7 @@ static void win_enter_ext(win_T *const wp, const int flags) fix_current_dir(); + // Careful: autocommands may close the window and make "wp" invalid if (flags & WEE_TRIGGER_NEW_AUTOCMDS) { apply_autocmds(EVENT_WINNEW, NULL, NULL, false, curbuf); } @@ -4558,7 +4559,7 @@ static void win_enter_ext(win_T *const wp, const int flags) } // set window width to desired minimal value - if (curwin->w_width < p_wiw && !curwin->w_p_wfw && !wp->w_floating) { + if (curwin->w_width < p_wiw && !curwin->w_p_wfw && !curwin->w_floating) { win_setwidth((int)p_wiw); } |