diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2026-01-27 13:12:15 +0800 |
|---|---|---|
| committer | zeertzjq <zeertzjq@outlook.com> | 2026-01-27 13:12:15 +0800 |
| commit | 9540e7470beb1fce987c411564effe6625fd0528 (patch) | |
| tree | 244a899888119446c07e9f85f1cc2ce52866845f /test/functional/vimscript/executable_spec.lua | |
| parent | b4039ec0b026938051061ee93618a0d14e54581c (diff) | |
| download | rneovim-9540e7470beb1fce987c411564effe6625fd0528.tar.gz rneovim-9540e7470beb1fce987c411564effe6625fd0528.tar.bz2 rneovim-9540e7470beb1fce987c411564effe6625fd0528.zip | |
fix(terminal): possible heap-use-after-free during Nvim exit
Usually, terminal_close() calls refresh_terminal(), which allocates the
scrollback buffer, and term_may_alloc_scrollback() in terminal_open()
won't dereference the buffer. However, refresh_terminal() is not called
during Nvim exit, in which case a heap-use-after-free may happen if
TermOpen wipes buffer. Check for non-NULL buf_handle to avoid that.
Diffstat (limited to 'test/functional/vimscript/executable_spec.lua')
0 files changed, 0 insertions, 0 deletions