Files
neovim/test/functional
phanium 3a0e6239e9 fix(window): remove float grid from compositor layers before free #40731
Problem: Closing a floating window from a non-current tab frees its grid
without removing it from the compositor's `layers` table, so the next
`ui_comp_put_grid()` walks a dangling pointer (UAF).

Solution: Call `ui_comp_remove_grid()` (and `ui_call_win_close()` for
multigrid UIs) before `win_free_mem()`, matching `win_close()` since
PR #21551.

(cherry picked from commit 6f370f34f2)
2026-07-15 14:22:22 +00:00
..
2026-07-15 07:02:53 +00:00
2026-06-15 00:15:06 +00:00
2026-05-07 12:03:02 +02:00