]> git.feebdaed.xyz Git - 0xmirror/vim.git/commit
patch 9.1.2023: [security]: Use-after-free in alist_add() with nasty autocmd
authorChristian Brabandt <cb@256bit.org>
Sat, 27 Dec 2025 14:10:37 +0000 (14:10 +0000)
committerChristian Brabandt <cb@256bit.org>
Sat, 27 Dec 2025 14:10:37 +0000 (14:10 +0000)
commit9266a2a19790dd3485b1dd32b3e27ba1d93e33d0
tree31179c6ece93c6ffa1958c0134411ef76f783166
parent1ff2239053684add9ead3c121e12169e7682db7a
patch 9.1.2023: [security]: Use-after-free in alist_add() with nasty autocmd

Problem:  A BufAdd autocommand may cause alist_add() to use freed
          memory, this is caused by the w_locked variable unset too
          early (henices)
Solution: in trigger_undo_ftplugin() only set w_locked to false, if it
          was false when calling the function.

related: v9.1.0678
closes: #19023

Signed-off-by: Christian Brabandt <cb@256bit.org>
src/buffer.c
src/testdir/test_arglist.vim
src/version.c