diff options
| author | glepnir <glephunter@gmail.com> | 2025-06-12 06:31:48 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-06-11 22:31:48 +0000 |
| commit | 6bee2f686fcfd190e7017fc08115de247ac9afe9 (patch) | |
| tree | 746b254e9ab7b8300d4845e279c9b8adb43f857e /runtime | |
| parent | 6a71239cd5ea2a8e993bddd8e7765d1afe3e79e4 (diff) | |
| download | rneovim-6bee2f686fcfd190e7017fc08115de247ac9afe9.tar.gz rneovim-6bee2f686fcfd190e7017fc08115de247ac9afe9.tar.bz2 rneovim-6bee2f686fcfd190e7017fc08115de247ac9afe9.zip | |
fix(shada): prevent use-after-free when mapping file marks (#34446)
Problem: When ignore_buf skips buffers during initialization,
shada_read_when_writing uses entry.data.filemark.fname directly
as map key, but later frees the entry, leaving dangling pointers.
Solution: Always create independent copies of filenames as map keys
using xstrdup() for new items, and free all keys during cleanup.
Fix #34440
Diffstat (limited to 'runtime')
0 files changed, 0 insertions, 0 deletions