diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2026-02-06 07:40:51 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-02-06 07:40:51 +0800 |
| commit | db133879b2a115cdf982b2899f154f1851d59a60 (patch) | |
| tree | cb8ad449a4c4a4fac64165b1daadd3da68c98f53 /test/functional/vimscript/executable_spec.lua | |
| parent | e40c5cb06d1ce8aeb2612b95805a6152d9a43aaa (diff) | |
| download | rneovim-db133879b2a115cdf982b2899f154f1851d59a60.tar.gz rneovim-db133879b2a115cdf982b2899f154f1851d59a60.tar.bz2 rneovim-db133879b2a115cdf982b2899f154f1851d59a60.zip | |
vim-patch:9.1.2132: [security]: buffer-overflow in 'helpfile' option handling (#37735)
Problem: [security]: buffer-overflow in 'helpfile' option handling by
using strcpy without bound checks (Rahul Hoysala)
Solution: Limit strncpy to the length of the buffer (MAXPATHL)
Github Advisory:
https://github.com/vim/vim/security/advisories/GHSA-5w93-4g67-mm43
https://github.com/vim/vim/commit/0714b15940b245108e6e9d7aa2260dd849a26fa9
Co-authored-by: Christian Brabandt <cb@256bit.org>
Diffstat (limited to 'test/functional/vimscript/executable_spec.lua')
0 files changed, 0 insertions, 0 deletions