diff options
| author | koeleck <779769+koeleck@users.noreply.github.com> | 2023-03-19 22:32:37 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-03-19 14:32:37 -0700 |
| commit | 84027f7515b8ee6f818462f105882fc0052783c4 (patch) | |
| tree | 9e48424644e31cd4af75714328a3be6d408f6910 /test/functional/lua/commands_spec.lua | |
| parent | ecc4d0e435d618828b938d78fbded7fbe1314760 (diff) | |
| download | rneovim-84027f7515b8ee6f818462f105882fc0052783c4.tar.gz rneovim-84027f7515b8ee6f818462f105882fc0052783c4.tar.bz2 rneovim-84027f7515b8ee6f818462f105882fc0052783c4.zip | |
fix: invalid buffer size argument to snprintf #22729
Problem:
Crash in findtags_add_match with FORTIFY_SOURCE=3.
Note: Fedora 38 packages are now built with -D_FORTIFY_SOURCE=3 by default.
1. Compile with overflow protection.
2. nvim --clean
3. :h <Space> <Tab>
4. `*** overflow detected ***: terminated`
The additional checks for the stated buffer size and the actual bounds
of the buffer do not match. See `___snprintf_chk` in the glibc sources:
https://sourceware.org/git/?p=glibc.git;a=blob;f=debug/snprintf_chk.c;h=59577de076c570b81307dd31c8c73e265808cf4c;hb=HEAD#l28
Solution:
Fix arithmetic error: The length of the previously written data is now
subtracted from the total size of the buffer, instead of added on top.
close #22718
Diffstat (limited to 'test/functional/lua/commands_spec.lua')
0 files changed, 0 insertions, 0 deletions