mirror of
https://github.com/neovim/neovim.git
synced 2024-09-17 20:58:20 -04:00
6967c08840
Problem: [security] double-free in dialog_changed()
(SuyueGuo)
Solution: Only clear pointer b_sfname pointer, if it is different
than the b_ffname pointer. Don't try to free b_fname,
set it to NULL instead.
fixes: vim/vim#15403
Github Advisory:
https://github.com/vim/vim/security/advisories/GHSA-46pw-v7qw-xc2f
|
||
---|---|---|
.. | ||
bt_quickfix1_poc | ||
bt_quickfix_poc | ||
crash_scrollbar | ||
dialog_changed_uaf | ||
double_free | ||
editing_arg_idx_POC_1 | ||
poc1 | ||
poc_did_set_langmap | ||
poc_ex_substitute | ||
poc_huaf1 | ||
poc_huaf2 | ||
poc_huaf3 | ||
poc_suggest_trie_walk | ||
poc_tagfunc.vim | ||
poc_uaf_check_argument_types | ||
poc_uaf_exec_instructions | ||
poc_win_enter_ext | ||
vim_msg_trunc_poc | ||
vim_regsub_both | ||
vim_regsub_both_poc |