aboutsummaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
authorzeertzjq <zeertzjq@outlook.com>2024-08-08 14:51:29 +0800
committerzeertzjq <zeertzjq@outlook.com>2024-08-08 14:54:14 +0800
commit92186be428e84798ac6fa6c69ae575187a0d3da8 (patch)
tree3727bd684e89d18076077de1e085a12cc3bb3129 /src
parentf35d5afbf1bae81896d4b959c7d99cf50e0c306f (diff)
downloadrneovim-92186be428e84798ac6fa6c69ae575187a0d3da8.tar.gz
rneovim-92186be428e84798ac6fa6c69ae575187a0d3da8.tar.bz2
rneovim-92186be428e84798ac6fa6c69ae575187a0d3da8.zip
vim-patch:8.2.3476: renaming a buffer on startup may cause using freed memory
Problem: Renaming a buffer on startup may cause using freed memory. Solution: Check if the buffer is used in a window. (closes vim/vim#8955) https://github.com/vim/vim/commit/d3710cf01ef6ab1b2f233866ff01dab76686f642 Cherry-pick Test_echo_true_in_cmd() from Vim. Co-authored-by: Bram Moolenaar <Bram@vim.org>
Diffstat (limited to 'src')
-rw-r--r--src/nvim/buffer.c12
1 files changed, 11 insertions, 1 deletions
diff --git a/src/nvim/buffer.c b/src/nvim/buffer.c
index 0c301bd5e2..ab648708fc 100644
--- a/src/nvim/buffer.c
+++ b/src/nvim/buffer.c
@@ -2959,7 +2959,17 @@ int setfname(buf_T *buf, char *ffname_arg, char *sfname_arg, bool message)
obuf = buflist_findname_file_id(ffname, &file_id, file_id_valid);
}
if (obuf != NULL && obuf != buf) {
- if (obuf->b_ml.ml_mfp != NULL) { // it's loaded, fail
+ bool in_use = false;
+
+ // during startup a window may use a buffer that is not loaded yet
+ FOR_ALL_TAB_WINDOWS(tab, win) {
+ if (win->w_buffer == obuf) {
+ in_use = true;
+ }
+ }
+
+ // it's loaded or used in a window, fail
+ if (obuf->b_ml.ml_mfp != NULL || in_use) {
if (message) {
emsg(_("E95: Buffer with this name already exists"));
}