diff options
author | Christian Brabandt <cb@256bit.org> | 2023-09-03 20:20:52 +0200 |
---|---|---|
committer | Christian Brabandt <cb@256bit.org> | 2023-09-03 20:20:52 +0200 |
commit | fc68299d436cf87453e432daa77b6d545df4d7ed (patch) | |
tree | de179fbfbc61e6d9f59d2343f777f2cb83c55fff /src/testdir/crash | |
parent | aa90d4f031f73a34aaef5746931ea746849a2231 (diff) |
patch 9.0.1857: [security] heap-use-after-free in is_qf_win()v9.0.1857
Problem: heap-use-after-free in is_qf_win()
Solution: Check buffer is valid before accessing it
Signed-off-by: Christian Brabandt <cb@256bit.org>
Diffstat (limited to 'src/testdir/crash')
-rw-r--r-- | src/testdir/crash/bt_quickfix_poc | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/src/testdir/crash/bt_quickfix_poc b/src/testdir/crash/bt_quickfix_poc new file mode 100644 index 0000000000..bf02b4dcb8 --- /dev/null +++ b/src/testdir/crash/bt_quickfix_poc @@ -0,0 +1,9 @@ +comman!-narg=* Xexpr <mods>lex<args> +auto BufReadPre * exe"sn" ..expand("<abuf>") +fu Xautocmd_changelist() +cal writefile(['Xtestfile2:4:4'],'Xerr') + sil! edi Xerr +Xexpr 'Xtestfile:4:4' +endf +call Xautocmd_changelist() +call Xautocmd_changelist()
\ No newline at end of file |