summaryrefslogtreecommitdiffstats
path: root/src/testdir
diff options
context:
space:
mode:
authorChristian Brabandt <cb@256bit.org>2023-10-11 21:08:13 +0200
committerChristian Brabandt <cb@256bit.org>2023-10-11 21:09:53 +0200
commit41e6f7d6ba67b61d911f9b1d76325cd79224753d (patch)
treed2b6fcf5f7daa4712502d693635bcc3125bc38ca /src/testdir
parent54844857fd6933fa4f6678e47610c4b9c9f7a091 (diff)
patch 9.0.2010: [security] use-after-free from buf_contents_changed()v9.0.2010
Problem: [security] use-after-free from buf_contents_changed() Solution: block autocommands Signed-off-by: Christian Brabandt <cb@256bit.org>
Diffstat (limited to 'src/testdir')
-rw-r--r--src/testdir/crash/editing_arg_idx_POC_1bin0 -> 398 bytes
-rw-r--r--src/testdir/test_crash.vim9
2 files changed, 9 insertions, 0 deletions
diff --git a/src/testdir/crash/editing_arg_idx_POC_1 b/src/testdir/crash/editing_arg_idx_POC_1
new file mode 100644
index 0000000000..5d048d0340
--- /dev/null
+++ b/src/testdir/crash/editing_arg_idx_POC_1
Binary files differ
diff --git a/src/testdir/test_crash.vim b/src/testdir/test_crash.vim
index 9a80340c28..5cd07e2a3f 100644
--- a/src/testdir/test_crash.vim
+++ b/src/testdir/test_crash.vim
@@ -78,6 +78,14 @@ func Test_crash1()
\ ' && echo "crash 9: [OK]" >> X_crash1_result.txt' .. "\<cr>")
call TermWait(buf, 1000)
+ let file = 'crash/editing_arg_idx_POC_1'
+ let args = printf(cmn_args, vim, file)
+ call term_sendkeys(buf, args ..
+ \ ' || echo "crash 10: [OK]" >> X_crash1_result.txt' .. "\<cr>")
+ call TermWait(buf, 1000)
+ call delete('Xerr')
+ call delete('@')
+
" clean up
exe buf .. "bw!"
@@ -93,6 +101,7 @@ func Test_crash1()
\ 'crash 7: [OK]',
\ 'crash 8: [OK]',
\ 'crash 9: [OK]',
+ \ 'crash 10: [OK]',
\ ]
call assert_equal(expected, getline(1, '$'))