vim-patch:9.1.0764: [security]: use-after-free when closing a buffer (#30705)

Problem:  [security]: use-after-free when closing a buffer
Solution: When splitting the window and editing a new buffer,
          check whether the newly to be edited buffer has been marked
          for deletion and abort in this case

Github Advisory:
https://github.com/vim/vim/security/advisories/GHSA-rj48-v4mq-j4vg

51b62387be

Co-authored-by: Christian Brabandt <cb@256bit.org>
This commit is contained in:
zeertzjq
2024-10-07 10:40:44 +08:00
committed by GitHub
parent bf868e76e1
commit 2377443cd2
3 changed files with 41 additions and 0 deletions

View File

@@ -478,6 +478,11 @@ static bool can_unload_buffer(buf_T *buf)
return can_unload;
}
bool buf_locked(buf_T *buf)
{
return buf->b_locked || buf->b_locked_split;
}
/// Close the link to a buffer.
///
/// @param win If not NULL, set b_last_cursor.