From 25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a Mon Sep 17 00:00:00 2001 From: Christian Brabandt Date: Tue, 14 Nov 2023 19:31:34 +0100 Subject: patch 9.0.2106: [security]: Use-after-free in win_close() Problem: [security]: Use-after-free in win_close() Solution: Check window is valid, before accessing it If the current window structure is no longer valid (because a previous autocommand has already freed this window), fail and return before attempting to set win->w_closing variable. Add a test to trigger ASAN in CI Signed-off-by: Christian Brabandt --- src/testdir/crash/poc1 | Bin 0 -> 3264 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 src/testdir/crash/poc1 (limited to 'src/testdir/crash') diff --git a/src/testdir/crash/poc1 b/src/testdir/crash/poc1 new file mode 100644 index 0000000000..ec223f16b8 Binary files /dev/null and b/src/testdir/crash/poc1 differ -- cgit v1.2.3