diff options
| author | Sean Dewar <6256228+seandewar@users.noreply.github.com> | 2025-05-04 03:15:51 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-05-04 03:15:51 +0100 |
| commit | 627c648252e151266928bea501349af5eb24e134 (patch) | |
| tree | de8b76f840c9bc6e91a02e6cdfcdaccb3533370c /runtime/lua/vim/_ftplugin/lua.lua | |
| parent | 2c1f5a6aa587e02748ffe4f153d96703d861828b (diff) | |
| download | rneovim-627c648252e151266928bea501349af5eb24e134.tar.gz rneovim-627c648252e151266928bea501349af5eb24e134.tar.bz2 rneovim-627c648252e151266928bea501349af5eb24e134.zip | |
vim-patch:9.1.1361: [security]: possible use-after-free when closing a buffer (#33820)
Problem: [security]: Possible to open more windows into a closing
buffer without splitting, bypassing existing "b_locked_split"
checks and triggering use-after-free
Solution: Disallow switching to a closing buffer. Editing a closing
buffer (via ":edit", etc.) was fixed in v9.1.0764, but add an
error message and check just "b_locked_split", as "b_locked"
is necessary only when the buffer shouldn't be wiped, and may
be set for buffers that are in-use but not actually closing.
(Sean Dewar)
closes: vim/vim#17246
https://github.com/vim/vim/commit/6cb1c828406dcbb9b67ee788501b94f3a0bac88a
Diffstat (limited to 'runtime/lua/vim/_ftplugin/lua.lua')
0 files changed, 0 insertions, 0 deletions