aboutsummaryrefslogtreecommitdiff
path: root/runtime/lua/vim/provider/python.lua
diff options
context:
space:
mode:
authorzeertzjq <zeertzjq@outlook.com>2026-02-28 08:11:48 +0800
committerzeertzjq <zeertzjq@outlook.com>2026-02-28 08:12:25 +0800
commite85fc92a6ba4b2bf165b360846b6fb460e98ab52 (patch)
treee790070b3f8994ad81ef57befbdf0b86678e9a75 /runtime/lua/vim/provider/python.lua
parent95ddabdb2b0995b39a13f14de0f5ecabcda00dcd (diff)
downloadrneovim-e85fc92a6ba4b2bf165b360846b6fb460e98ab52.tar.gz
rneovim-e85fc92a6ba4b2bf165b360846b6fb460e98ab52.tar.bz2
rneovim-e85fc92a6ba4b2bf165b360846b6fb460e98ab52.zip
vim-patch:9.2.0075: [security]: Buffer underflow with emacs tag file
Problem: When parsing a malformed Emacs-style tags file, a 1-byte heap-buffer-underflow read occurs if the 0x7f delimiter appears at the very beginning of a line. This happens because the code attempts to scan backward for a tag name from the delimiter without checking if space exists. (ehdgks0627, un3xploitable) Solution: Add a check to ensure the delimiter (p_7f) is not at the start of the buffer (lbuf) before attempting to isolate the tag name. GitHub Advisory: https://github.com/vim/vim/security/advisories/GHSA-xcc8-r6c5-hvwv https://github.com/vim/vim/commit/9b7dfa2948c9e1e5e32a5812812d580c7879f4a0 Co-authored-by: Christian Brabandt <cb@256bit.org>
Diffstat (limited to 'runtime/lua/vim/provider/python.lua')
0 files changed, 0 insertions, 0 deletions