]> git.ipfire.org Git - thirdparty/vim.git/commit
projects / thirdparty / vim.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c6336ac) | patch
patch 9.1.1262: heap-buffer-overflow with narrow 'pummaxwidth' value v9.1.1262
authorHirohito Higashi <h.east.727@gmail.com>
Sun, 30 Mar 2025 13:19:05 +0000 (15:19 +0200)
committerChristian Brabandt <cb@256bit.org>
Sun, 30 Mar 2025 13:19:05 +0000 (15:19 +0200)
commitf13c8561544dad4f82b7f4f71041d35f55b5feaa
tree8ab4f4eb5fc8f171f7fdbafabc3f0650a170078btree
parentc6336acfe3e80904458d7ea735929b4c91346702commit | diff
patch 9.1.1262: heap-buffer-overflow with narrow 'pummaxwidth' value

Problem:  heap-buffer-overflow occurs with narrow 'pummaxwidth' value
          (after v9.1.1250)
Solution: test that st_end points after st pointer (Hirohito Higashi)

closes: #17005

Signed-off-by: Hirohito Higashi <h.east.727@gmail.com>
Signed-off-by: Christian Brabandt <cb@256bit.org>
src/popupmenu.c diff | blob | blame | history
src/testdir/dumps/Test_pum_maxwidth_with_many_items_01.dump [new file with mode: 0644] blob
src/testdir/dumps/Test_pum_maxwidth_with_many_items_02.dump [new file with mode: 0644] blob
src/testdir/dumps/Test_pum_maxwidth_with_many_items_03.dump [new file with mode: 0644] blob
src/testdir/dumps/Test_pum_maxwidth_with_many_items_04.dump [new file with mode: 0644] blob
src/testdir/dumps/Test_pum_maxwidth_with_many_items_05.dump [new file with mode: 0644] blob
src/testdir/dumps/Test_pum_maxwidth_with_many_items_06.dump [new file with mode: 0644] blob
src/testdir/dumps/Test_pum_maxwidth_with_many_items_07.dump [new file with mode: 0644] blob
src/testdir/dumps/Test_pum_maxwidth_with_many_items_08.dump [new file with mode: 0644] blob
src/testdir/test_popup.vim diff | blob | blame | history
src/version.c diff | blob | blame | history
Mirror of https://github.com/vim/vim.git