diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2026-08-21 08:51:56 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-08-21 08:51:56 +0800 |
| commit | eaff5417beb715c1e760c17d228e82eec3eb5a14 (patch) | |
| tree | 81dec0d4d05fe8a81b1ec4f7779891391dae1d30 /runtime/lua/vim/range.lua | |
| parent | af37d459a64df0697e2a20132ec79a17718a66cd (diff) | |
| download | rneovim-eaff5417beb715c1e760c17d228e82eec3eb5a14.tar.gz rneovim-eaff5417beb715c1e760c17d228e82eec3eb5a14.tar.bz2 rneovim-eaff5417beb715c1e760c17d228e82eec3eb5a14.zip | |
vim-patch:9.2.0987: heap-buffer-overflow in spell_suggest() (#41406)
Problem: Heap-buffer-overflow in spell_suggest() when the cursor is
beyond the end of the line, because a SpellFileMissing
autocommand changed the buffer (dvaave2025).
Solution: parse_spelllang() may run autocommands, so validate the cursor
position and re-take the saved position afterwards.
fixes: vim/vim#21097
closes: vim/vim#21100
Supported by AI.
https://github.com/vim/vim/commit/6073903cda7b5838f3432b19a0e8293f494b4cd5
Co-authored-by: Christian Brabandt <cb@256bit.org>
Diffstat (limited to 'runtime/lua/vim/range.lua')
0 files changed, 0 insertions, 0 deletions