diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2026-09-25 10:13:29 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-09-25 10:13:29 +0800 |
| commit | 7dbca1c4e2e83711df1ecd9f5e2a1612d64cc774 (patch) | |
| tree | 326d3fcaf401c6cf7032f887e58bfe4fe243edbd /scripts | |
| parent | a18bb2eb1eee1f9279aa62e63421977b68f7f6c7 (diff) | |
| download | rneovim-7dbca1c4e2e83711df1ecd9f5e2a1612d64cc774.tar.gz rneovim-7dbca1c4e2e83711df1ecd9f5e2a1612d64cc774.tar.bz2 rneovim-7dbca1c4e2e83711df1ecd9f5e2a1612d64cc774.zip | |
vim-patch:9.2.1129: out of bounds read in the 'complete' F{func} callbacks (#42079)
Problem: set_cpt_callbacks() always uses the F{func} callback array from
the buffer-local value, causing heap-buffer-overflow
(Evaopo, after v9.1.1603)
Solution: Parse the option value that actually changed and check the
callback array index.
closes: vim/vim#21358
https://github.com/vim/vim/commit/7854b1dbdb50b6264cb8b54cdd90e042d19f93b4
Co-authored-by: Christian Brabandt <cb@256bit.org>
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions