diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2026-02-28 08:11:48 +0800 |
|---|---|---|
| committer | zeertzjq <zeertzjq@outlook.com> | 2026-02-28 08:12:25 +0800 |
| commit | e85fc92a6ba4b2bf165b360846b6fb460e98ab52 (patch) | |
| tree | e790070b3f8994ad81ef57befbdf0b86678e9a75 /runtime/lua/vim/provider/python.lua | |
| parent | 95ddabdb2b0995b39a13f14de0f5ecabcda00dcd (diff) | |
| download | rneovim-e85fc92a6ba4b2bf165b360846b6fb460e98ab52.tar.gz rneovim-e85fc92a6ba4b2bf165b360846b6fb460e98ab52.tar.bz2 rneovim-e85fc92a6ba4b2bf165b360846b6fb460e98ab52.zip | |
vim-patch:9.2.0075: [security]: Buffer underflow with emacs tag file
Problem: When parsing a malformed Emacs-style tags file, a 1-byte
heap-buffer-underflow read occurs if the 0x7f delimiter
appears at the very beginning of a line. This happens
because the code attempts to scan backward for a tag
name from the delimiter without checking if space exists.
(ehdgks0627, un3xploitable)
Solution: Add a check to ensure the delimiter (p_7f) is not at the
start of the buffer (lbuf) before attempting to isolate
the tag name.
GitHub Advisory:
https://github.com/vim/vim/security/advisories/GHSA-xcc8-r6c5-hvwv
https://github.com/vim/vim/commit/9b7dfa2948c9e1e5e32a5812812d580c7879f4a0
Co-authored-by: Christian Brabandt <cb@256bit.org>
Diffstat (limited to 'runtime/lua/vim/provider/python.lua')
0 files changed, 0 insertions, 0 deletions