From 325d349f9da4518447ed34b327c261bfa56fc268 Mon Sep 17 00:00:00 2001 From: zeertzjq Date: Sat, 14 Sep 2024 19:38:33 +0800 Subject: vim-patch:9.1.0728: [security]: heap-use-after-free in garbage collection with location list user data (#30377) Problem: heap-use-after-free in garbage collection with location list user data. Solution: Mark user data as in use when no other window is referencing the location list (zeertzjq) fixes: neovim/neovim#30371 closes: vim/vim#15683 https://github.com/vim/vim/commit/be4bd189d23854ddf1d85ad291d8f7ad3f22b7a0 --- src/nvim/quickfix.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'src') diff --git a/src/nvim/quickfix.c b/src/nvim/quickfix.c index a549e12adc..e7d2da2fc6 100644 --- a/src/nvim/quickfix.c +++ b/src/nvim/quickfix.c @@ -6875,7 +6875,8 @@ bool set_ref_in_quickfix(int copyID) // In a location list window and none of the other windows is // referring to this location list. Mark the location list // context as still in use. - if (mark_quickfix_ctx(win->w_llist_ref, copyID)) { + if (mark_quickfix_ctx(win->w_llist_ref, copyID) + || mark_quickfix_user_data(win->w_llist_ref, copyID)) { return true; } } -- cgit