diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2026-07-21 07:02:08 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-07-21 07:02:08 +0800 |
| commit | 32538082eaaab10b3468532d5a807ee25a7f1bf2 (patch) | |
| tree | 6c5e6c4dab30f87d6685920758d0a5c6af82960f /test/functional/vimscript/msgpack_functions_spec.lua | |
| parent | 60b643a815639d7a0c1def6f0f59be03d1ee7ea1 (diff) | |
| download | rneovim-32538082eaaab10b3468532d5a807ee25a7f1bf2.tar.gz rneovim-32538082eaaab10b3468532d5a807ee25a7f1bf2.tar.bz2 rneovim-32538082eaaab10b3468532d5a807ee25a7f1bf2.zip | |
vim-patch:9.2.0813: dict_add_func() may corrupt funcref count on failure (#40877)
Problem: dict_add_func() references the function only after a
successful dict_add(), on failure dictitem_free()
calls func_unref() without a matching func_ref(), corrupting
the reference count of a lambda or numbered function.
Solution: Take the reference before dict_add() so the unref on the
failure path is balanced (Yasuhiro Matsumoto).
related: vim/vim#20668
closes: vim/vim#20742
https://github.com/vim/vim/commit/4a403b48c653461f3c2fa331664d68585f59ea4c
Co-authored-by: Yasuhiro Matsumoto <mattn.jp@gmail.com>
Diffstat (limited to 'test/functional/vimscript/msgpack_functions_spec.lua')
0 files changed, 0 insertions, 0 deletions