diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2026-06-17 15:08:37 +0800 |
|---|---|---|
| committer | zeertzjq <zeertzjq@outlook.com> | 2026-06-17 15:22:04 +0800 |
| commit | c4ce10930cef01b67b2d1feeff2c59a7b6777c0b (patch) | |
| tree | 01d860709dc270d1e480fc81c52b338f9778a1f5 /test/functional/vimscript/executable_spec.lua | |
| parent | 52d7bbd1a01d2926d89fbb88d9498b22605102e7 (diff) | |
| download | rneovim-c4ce10930cef01b67b2d1feeff2c59a7b6777c0b.tar.gz rneovim-c4ce10930cef01b67b2d1feeff2c59a7b6777c0b.tar.bz2 rneovim-c4ce10930cef01b67b2d1feeff2c59a7b6777c0b.zip | |
vim-patch:9.2.0663: [security]: runtime(netrw): code injection in local file deletion
Problem: [security]: s:NetrwLocalRmFile() escapes only the backslash in
the file name before passing it to :execute, so a name
containing "|" injects arbitrary Ex commands when the file is
deleted (cipher-creator)
Solution: Use fnameescape() to correctly escape the file name
(Yasuhiro Matsumoto).
Github Security Advisory:
https://github.com/vim/vim/security/advisories/GHSA-vhh8-v6wx-hjjh
Supported by AI
https://github.com/vim/vim/commit/55bc757a5d436e59d50fe43f7cda94b118f86cb2
Co-authored-by: Yasuhiro Matsumoto <mattn.jp@gmail.com>
Diffstat (limited to 'test/functional/vimscript/executable_spec.lua')
0 files changed, 0 insertions, 0 deletions