vim-patch:8.2.4739: accessing freed memory after WinScrolled autocmd event (#18090)

Problem:    Accessing freed memory after WinScrolled autocmd event.
Solution:   Check the window pointer is still valid. (closes vim/vim#10156)
            Remove the argument from may_trigger_winscrolled().
d58862d18f
This commit is contained in:
zeertzjq
2022-04-12 19:16:47 +08:00
committed by GitHub
parent dbd5242d8e
commit 7e1e906738
5 changed files with 59 additions and 20 deletions

View File

@@ -5246,8 +5246,8 @@ void shell_new_columns(void)
win_reconfig_floats(); // The size of floats might change
}
/// Trigger WinScrolled autocmd if window has scrolled.
void may_trigger_winscrolled(win_T *wp)
/// Trigger WinScrolled for "curwin" if needed.
void may_trigger_winscrolled(void)
{
static bool recursive = false;
@@ -5255,6 +5255,7 @@ void may_trigger_winscrolled(win_T *wp)
return;
}
win_T *wp = curwin;
if (wp->w_last_topline != wp->w_topline
|| wp->w_last_leftcol != wp->w_leftcol
|| wp->w_last_width != wp->w_width
@@ -5266,10 +5267,13 @@ void may_trigger_winscrolled(win_T *wp)
apply_autocmds(EVENT_WINSCROLLED, winid, winid, false, wp->w_buffer);
recursive = false;
wp->w_last_topline = wp->w_topline;
wp->w_last_leftcol = wp->w_leftcol;
wp->w_last_width = wp->w_width;
wp->w_last_height = wp->w_height;
// an autocmd may close the window, "wp" may be invalid now
if (win_valid_any_tab(wp)) {
wp->w_last_topline = wp->w_topline;
wp->w_last_leftcol = wp->w_leftcol;
wp->w_last_width = wp->w_width;
wp->w_last_height = wp->w_height;
}
}
}