summaryrefslogtreecommitdiffstats
path: root/src/testdir/crash
diff options
context:
space:
mode:
authorChristian Brabandt <cb@256bit.org>2023-09-03 20:20:52 +0200
committerChristian Brabandt <cb@256bit.org>2023-09-03 20:20:52 +0200
commitfc68299d436cf87453e432daa77b6d545df4d7ed (patch)
treede179fbfbc61e6d9f59d2343f777f2cb83c55fff /src/testdir/crash
parentaa90d4f031f73a34aaef5746931ea746849a2231 (diff)
patch 9.0.1857: [security] heap-use-after-free in is_qf_win()v9.0.1857
Problem: heap-use-after-free in is_qf_win() Solution: Check buffer is valid before accessing it Signed-off-by: Christian Brabandt <cb@256bit.org>
Diffstat (limited to 'src/testdir/crash')
-rw-r--r--src/testdir/crash/bt_quickfix_poc9
1 files changed, 9 insertions, 0 deletions
diff --git a/src/testdir/crash/bt_quickfix_poc b/src/testdir/crash/bt_quickfix_poc
new file mode 100644
index 0000000000..bf02b4dcb8
--- /dev/null
+++ b/src/testdir/crash/bt_quickfix_poc
@@ -0,0 +1,9 @@
+comman!-narg=* Xexpr <mods>lex<args>
+auto BufReadPre * exe"sn" ..expand("<abuf>")
+fu Xautocmd_changelist()
+cal writefile(['Xtestfile2:4:4'],'Xerr')
+ sil! edi Xerr
+Xexpr 'Xtestfile:4:4'
+endf
+call Xautocmd_changelist()
+call Xautocmd_changelist() \ No newline at end of file