diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2026-06-22 10:34:22 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-06-22 02:34:22 +0000 |
| commit | 259f1173e4c3132d88674927527e5e82df32b5b8 (patch) | |
| tree | 7737dc55bb703cacf2121bc7ea0e4e3e53c7ade5 /test/functional/vimscript/executable_spec.lua | |
| parent | 257701b17b4c22fd6f3cb2e5b70e9baee4fbb412 (diff) | |
| download | rneovim-259f1173e4c3132d88674927527e5e82df32b5b8.tar.gz rneovim-259f1173e4c3132d88674927527e5e82df32b5b8.tar.bz2 rneovim-259f1173e4c3132d88674927527e5e82df32b5b8.zip | |
vim-patch:9.2.0698: [security]: Out-of-bounds write with soundfold() (#40362)
Problem: [security]: Out-of-bounds write with soundfold()
(cipher-creator)
Solution: Add an abort condition to the for loop to validate the buffer
size.
Github Security Advisory:
https://github.com/vim/vim/security/advisories/GHSA-q8mh-6qm3-25g4
Supported by AI
https://github.com/vim/vim/commit/497f931f85339d175d7f69588dd249e8ccfed41b
This is N/A as it only changes the !has_mbyte code path.
Co-authored-by: Christian Brabandt <cb@256bit.org>
Diffstat (limited to 'test/functional/vimscript/executable_spec.lua')
0 files changed, 0 insertions, 0 deletions