forked from aniani/vim
patch 9.1.0707: [security]: invalid cursor position may cause a crash
Problem: [security]: invalid cursor position may cause a crash (after v9.1.0038) Solution: Set cursor to the last character in a line, if it would otherwise point to beyond the line; no tests added, as it is unclear how to reproduce this. Github Advisory: https://github.com/vim/vim/security/advisories/GHSA-4ghr-c62x-cqfh Co-authored-by: zeertzjq <zeertzjq@outlook.com> Signed-off-by: zeertzjq <zeertzjq@outlook.com> Signed-off-by: Christian Brabandt <cb@256bit.org>
This commit is contained in:
@@ -1678,6 +1678,9 @@ getvcol(
|
||||
}
|
||||
clear_chartabsize_arg(&cts);
|
||||
|
||||
if (*ptr == NUL && pos->col < MAXCOL && pos->col > ptr - line)
|
||||
pos->col = ptr - line;
|
||||
|
||||
if (start != NULL)
|
||||
*start = vcol + head;
|
||||
if (end != NULL)
|
||||
|
@@ -704,6 +704,8 @@ static char *(features[]) =
|
||||
|
||||
static int included_patches[] =
|
||||
{ /* Add new patch number below this line */
|
||||
/**/
|
||||
707,
|
||||
/**/
|
||||
706,
|
||||
/**/
|
||||
|
Reference in New Issue
Block a user