diff options
| author | phanium <91544758+phanen@users.noreply.github.com> | 2026-07-15 19:48:34 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-07-15 07:48:34 -0400 |
| commit | 6f370f34f2c24aed0d2acebab23c4bcc86a06d69 (patch) | |
| tree | 26450df3ce75e864e369ae663a5e6d68b2ae5766 /runtime/lua | |
| parent | 44d5593afd5e16f8c673ceeed2813967550b3415 (diff) | |
| download | rneovim-6f370f34f2c24aed0d2acebab23c4bcc86a06d69.tar.gz rneovim-6f370f34f2c24aed0d2acebab23c4bcc86a06d69.tar.bz2 rneovim-6f370f34f2c24aed0d2acebab23c4bcc86a06d69.zip | |
fix(window): remove float grid from compositor layers before free #40731
Problem: Closing a floating window from a non-current tab frees its grid
without removing it from the compositor's `layers` table, so the next
`ui_comp_put_grid()` walks a dangling pointer (UAF).
Solution: Call `ui_comp_remove_grid()` (and `ui_call_win_close()` for
multigrid UIs) before `win_free_mem()`, matching `win_close()` since
PR #21551.
Diffstat (limited to 'runtime/lua')
0 files changed, 0 insertions, 0 deletions