vim-patch:9.0.1763: crash when passing invalid buffer to undotree() (#24807)

Problem:  crash when passing invalid buffer to undotree()
Solution: Use get_buf_arg() instead of tv_get_buf_from_arg().

closes: vim/vim#12862
closes: vim/vim#12830

ab9f2ecfd4
This commit is contained in:
zeertzjq
2023-08-21 07:20:26 +08:00
committed by GitHub
parent d21e6285e9
commit ac99e63d73
2 changed files with 18 additions and 3 deletions

View File

@@ -3171,11 +3171,14 @@ void f_undofile(typval_T *argvars, typval_T *rettv, EvalFuncData fptr)
/// "undotree(expr)" function
void f_undotree(typval_T *argvars, typval_T *rettv, EvalFuncData fptr)
{
typval_T *const tv = &argvars[0];
buf_T *const buf = tv->v_type == VAR_UNKNOWN ? curbuf : tv_get_buf_from_arg(tv);
tv_dict_alloc_ret(rettv);
typval_T *const tv = &argvars[0];
buf_T *const buf = tv->v_type == VAR_UNKNOWN ? curbuf : get_buf_arg(tv);
if (buf == NULL) {
return;
}
dict_T *dict = rettv->vval.v_dict;
tv_dict_add_nr(dict, S_LEN("synced"), (varnumber_T)buf->b_u_synced);