]> git.ipfire.org Git - thirdparty/vim.git/commit
patch 9.2.0513: [security]: memory safety issues in spellfile.c v9.2.0513
authorChristian Brabandt <cb@256bit.org>
Fri, 22 May 2026 21:46:57 +0000 (21:46 +0000)
committerChristian Brabandt <cb@256bit.org>
Fri, 22 May 2026 22:10:57 +0000 (22:10 +0000)
commit25e4e46c584840806b45da20edf8219cf19801a2
tree198f22e8a40cb89178377a64852cae28fc8aaa88
parente9c793bebcad2b585b3f5d25ca6108bcb48772fe
patch 9.2.0513: [security]: memory safety issues in spellfile.c

Problem:  [security]: memory safety issues in spellfile.c
          (tacdm)
Solution: Add recursion limit to read_tree_node(), add length limit
          check in tree_count_words(), use alloc_clear() in
          spell_read_tree().

Github Security Advisory:
https://github.com/vim/vim/security/advisories/GHSA-3h95-3962-mmvf

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: Christian Brabandt <cb@256bit.org>
src/spell.h
src/spellfile.c
src/testdir/test_spell.vim
src/testdir/test_spellfile.vim
src/version.c