From: Shane Harper <shane@shaneharper.net>
Date: Fri, 20 Mar 2026 22:26:59 +0000 (+0000)
Subject: patch 9.2.0213: Crash when using a partial or lambda as a clipboard provider
X-Git-Tag: v9.2.0213^0
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b1a247d659f4e1049771f2735bc0b0a36cb19323;p=thirdparty%2Fvim.git

patch 9.2.0213: Crash when using a partial or lambda as a clipboard provider

Problem:  Crash when using a partial or lambda as a clipboard provider
Solution: Don't call free_callback() from clip_provider_get_callback()
          (Shane Harper).

closes: #19766

Signed-off-by: Shane Harper <shane@shaneharper.net>
Signed-off-by: Christian Brabandt <cb@256bit.org>
---

diff --git a/src/clipboard.c b/src/clipboard.c
index e4650c1b7a..7ed339689f 100644
--- a/src/clipboard.c
+++ b/src/clipboard.c
@@ -3778,7 +3778,8 @@ clip_provider_get_callback(
 
     // func_tv owns the function name, so we must make a copy for the callback
     set_callback(callback, &cb);
-    free_callback(&cb);
+    if (cb.cb_free_name)
+	vim_free(cb.cb_name);
     clear_tv(&func_tv);
     return OK;
 }
diff --git a/src/testdir/test_eval_stuff.vim b/src/testdir/test_eval_stuff.vim
index 3da9ee303e..e43bd601bb 100644
--- a/src/testdir/test_eval_stuff.vim
+++ b/src/testdir/test_eval_stuff.vim
@@ -866,10 +866,14 @@ endfunc
 func Test_clipboard_provider_copy()
   CheckFeature clipboard_provider
 
+  function s:copy_cb_to_test_partial(_, reg, type, str)
+    call s:Copy(a:reg, a:type, a:str)
+  endfunction
+
   let v:clipproviders["test"] = {
         \ "copy": {
         \       '+': function("s:Copy"),
-        \       '*': function("s:Copy")
+        \       '*': function("s:copy_cb_to_test_partial", [""])
         \   }
         \ }
   set clipmethod=test
diff --git a/src/version.c b/src/version.c
index 83c07847e0..42ebf261eb 100644
--- a/src/version.c
+++ b/src/version.c
@@ -734,6 +734,8 @@ static char *(features[]) =
 
 static int included_patches[] =
 {   /* Add new patch number below this line */
+/**/
+    213,
 /**/
     212,
 /**/