diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2024-08-17 06:33:13 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-08-17 06:33:13 +0800 |
| commit | 4afd4061a23c60de26818bc3847e50c791a8f26c (patch) | |
| tree | ba39530bb13e1eb48760f76f8ed7a72385eadbc7 /test | |
| parent | 8b8096500d08d771a936d8ceca25ef5716c3874f (diff) | |
| parent | 7df6fbb096b4bedef386236213d72daf45d876aa (diff) | |
| download | rneovim-4afd4061a23c60de26818bc3847e50c791a8f26c.tar.gz rneovim-4afd4061a23c60de26818bc3847e50c791a8f26c.tar.bz2 rneovim-4afd4061a23c60de26818bc3847e50c791a8f26c.zip | |
Merge pull request #30068 from zeertzjq/vim-9.1.0678
vim-patch:9.1.{0678,0679}
Diffstat (limited to 'test')
| -rw-r--r-- | test/old/testdir/test_arglist.vim | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/test/old/testdir/test_arglist.vim b/test/old/testdir/test_arglist.vim index ebda332562..952b121aed 100644 --- a/test/old/testdir/test_arglist.vim +++ b/test/old/testdir/test_arglist.vim @@ -360,6 +360,7 @@ func Test_argv() call assert_equal('', argv(1, 100)) call assert_equal([], argv(-1, 100)) call assert_equal('', argv(10, -1)) + %argdelete endfunc " Test for the :argedit command @@ -744,4 +745,26 @@ func Test_all_command() %bw! endfunc +" Test for deleting buffer when creating an arglist. This was accessing freed +" memory +func Test_crash_arglist_uaf() + "%argdelete + new one + au BufAdd XUAFlocal :bw + "call assert_fails(':arglocal XUAFlocal', 'E163:') + arglocal XUAFlocal + au! BufAdd + bw! XUAFlocal + + au BufAdd XUAFlocal2 :bw + new two + new three + arglocal + argadd XUAFlocal2 Xfoobar + bw! XUAFlocal2 + bw! two + + au! BufAdd +endfunc + " vim: shiftwidth=2 sts=2 expandtab |