diff options
| author | Jan Edmund Lazo <janedmundlazo@hotmail.com> | 2026-06-17 00:44:48 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-06-17 04:44:48 +0000 |
| commit | f50ec42da2e56f72cee22806afd3c3112201e4da (patch) | |
| tree | 63518c2eb74c50fdb8ddb9d83073af291a763177 /test/functional/vimscript | |
| parent | 806af4bd9083f37297f1877e9900be3197878e87 (diff) | |
| download | rneovim-f50ec42da2e56f72cee22806afd3c3112201e4da.tar.gz rneovim-f50ec42da2e56f72cee22806afd3c3112201e4da.tar.bz2 rneovim-f50ec42da2e56f72cee22806afd3c3112201e4da.zip | |
vim-patch:9.2.0567: dict function name allocation failure not handled (#40287)
Problem: When defining a dictionary function, the function name string
is allocated with vim_strnsave() but the result is not
checked. On allocation failure the dict entry is left with
type VAR_FUNC and a NULL name, and in the overwrite case the
previous entry has already been freed before the NULL is
stored.
Solution: Allocate the name before modifying the dict entry and bail out
on failure, freeing it on all error paths (thinca)
closes: vim/vim#20376
https://github.com/vim/vim/commit/2b2dfc4f5a6064efd192c19750b551a01f393e83
Co-authored-by: thinca <thinca@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>
Diffstat (limited to 'test/functional/vimscript')
0 files changed, 0 insertions, 0 deletions