zeertzjq a416494e64 vim-patch:9.2.0078: [security]: stack-buffer-overflow in build_stl_str_hl() (#38102) ...

Problem:  A stack-buffer-overflow occurs when rendering a statusline
          with a multi-byte fill character on a very wide terminal.
          The size check in build_stl_str_hl() uses the cell width
          rather than the byte length, allowing the subsequent fill
          loop to write beyond the 4096-byte MAXPATHL buffer
          (ehdgks0627, un3xploitable).
Solution: Update the size check to account for the byte length of
          the fill character (using MB_CHAR2LEN).

Github Advisory:
https://github.com/vim/vim/security/advisories/GHSA-gmqx-prf2-8mwf

4e5b9e31cb

Co-authored-by: Christian Brabandt <cb@256bit.org>

2026-02-28 09:22:41 +08:00

..

api

fix(tests): use uv.spawn instead of io.popen for unittest helpers

2025-05-22 11:56:46 +02:00

charset

refactor(test): inject after_each differently

2024-04-10 15:53:50 +01:00

eval

vim-patch:8.2.3841: Vim9: outdated TODO items, disabled tests that work (#37900)

2026-02-16 12:32:18 +00:00

fixtures

feat(terminal): support SGR dim, overline attributes #37997

2026-02-27 11:46:22 +00:00

os

fix(logging): don't overwrite NameBuff (#38004)

2026-02-23 08:00:26 +08:00

tui

fix(coverity/637363): out-of-bounds write #37878

2026-02-16 09:51:00 -05:00

viml

fix(api): parse_expression crash with unopened ] and node

2026-01-17 13:22:55 +00:00

buffer_spec.lua

refactor(test): inject after_each differently

2024-04-10 15:53:50 +01:00

fileio_spec.lua

refactor(test): inject after_each differently

2024-04-10 15:53:50 +01:00

formatc.lua

refactor(declarations): also generate prototypes for functions in headers

2024-07-13 12:30:49 +02:00

garray_spec.lua

refactor: rename ga_concat_strings_sep() to ga_concat_strings() (#35498)

2025-08-27 10:17:12 +08:00

indent_spec.lua

refactor(test): inject after_each differently

2024-04-10 15:53:50 +01:00

keycodes_spec.lua

refactor(test): inject after_each differently

2024-04-10 15:53:50 +01:00

marktree_spec.lua

fix(marktree): fix edge case bug regarding changing intersections

2026-02-26 10:30:41 +01:00

mbyte_spec.lua

docs: misc

2025-01-11 10:34:12 +01:00

memory_spec.lua

refactor(test): inject after_each differently

2024-04-10 15:53:50 +01:00

message_spec.lua

refactor(test): inject after_each differently

2024-04-10 15:53:50 +01:00

msgpack_spec.lua

fix(tests): use correct signature for unpacker_teardown()

2025-11-12 14:19:06 +01:00

multiqueue_spec.lua

refactor(multiqueue): rename multiqueue_new_parent #32767

2025-03-08 12:28:15 -08:00

optionstr_spec.lua

fix(options): better handling of empty values

2025-01-13 16:58:25 +00:00

path_spec.lua

vim-patch:9.2.0020: Wrong shortened buffer after :cd with duplicate slashes (#37955)

2026-02-19 07:46:10 +08:00

preload.lua

test: make preload of functional/testnvim.lua explicit (#35919)

2025-09-26 09:05:07 +08:00

preprocess.lua

test: fix some type warnings (#37483)

2026-01-21 15:11:47 +08:00

profile_spec.lua

vim-patch:8.1.1891: functions used in one file are global

2025-07-20 18:37:33 -04:00

search_spec.lua

vim-patch:9.1.0426: too many strlen() calls in search.c

2024-05-22 06:37:26 +08:00

set.lua

build: enable lintlua for test/unit/ dir #26396

2023-12-04 14:32:39 -08:00

statusline_spec.lua

vim-patch:9.2.0078: [security]: stack-buffer-overflow in build_stl_str_hl() (#38102)

2026-02-28 09:22:41 +08:00

strings_spec.lua

test(unit/strings_spec): show ctx when vim_snprintf content check fails #32570

2025-02-22 17:11:15 -08:00

tempfile_spec.lua

refactor(test): inject after_each differently

2024-04-10 15:53:50 +01:00

termkey_spec.lua

refactor(termkey): make termkey use internal terminfo properly

2025-10-29 09:43:36 +01:00

testtest_spec.lua

refactor(test): inject after_each differently

2024-04-10 15:53:50 +01:00

testutil.lua

test: fix some type warnings (#37483)

2026-01-21 15:11:47 +08:00

undo_spec.lua

refactor(test): inject after_each differently

2024-04-10 15:53:50 +01:00

vterm_spec.lua

feat(terminal): support SGR dim, overline attributes #37997

2026-02-27 11:46:22 +00:00