diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2026-06-27 09:07:56 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-06-27 01:07:56 +0000 |
| commit | d844a276bb0ca7fa721f2d688f8060a990d6ec36 (patch) | |
| tree | 95d7ce74dac40c62eb4fb54c513595aa2665f825 /test/functional/vimscript/executable_spec.lua | |
| parent | 4adf961148d5a0e1a6ce9d6c7104354e51fe7d14 (diff) | |
| download | rneovim-d844a276bb0ca7fa721f2d688f8060a990d6ec36.tar.gz rneovim-d844a276bb0ca7fa721f2d688f8060a990d6ec36.tar.bz2 rneovim-d844a276bb0ca7fa721f2d688f8060a990d6ec36.zip | |
vim-patch:9.2.0735: [security]: arbitrary Ex command execution during C omni-completion (#40441)
Problem: [security]: With C omni-completion, a crafted tags file can execute
arbitrary Ex commands when completing a struct/union member
(cipher-creator)
Solution: Escape the type field before inserting it into the :vimgrep
pattern so it cannot close the pattern and start a new command
(Hirohito Higashi).
Github Security Advisory:
https://github.com/vim/vim/security/advisories/GHSA-mf92-v4xw-j45x
https://github.com/vim/vim/commit/6b611b0d15603c52ebdad17172b0232b4f65704e
Co-authored-by: Hirohito Higashi <h.east.727@gmail.com>
Diffstat (limited to 'test/functional/vimscript/executable_spec.lua')
0 files changed, 0 insertions, 0 deletions