Files
neovim/src/nvim
zeertzjq a416494e64 vim-patch:9.2.0078: [security]: stack-buffer-overflow in build_stl_str_hl() (#38102)
Problem:  A stack-buffer-overflow occurs when rendering a statusline
          with a multi-byte fill character on a very wide terminal.
          The size check in build_stl_str_hl() uses the cell width
          rather than the byte length, allowing the subsequent fill
          loop to write beyond the 4096-byte MAXPATHL buffer
          (ehdgks0627, un3xploitable).
Solution: Update the size check to account for the byte length of
          the fill character (using MB_CHAR2LEN).

Github Advisory:
https://github.com/vim/vim/security/advisories/GHSA-gmqx-prf2-8mwf

4e5b9e31cb

Co-authored-by: Christian Brabandt <cb@256bit.org>
2026-02-28 09:22:41 +08:00
..
2025-12-20 22:07:27 -05:00
2024-01-11 21:37:23 +01:00
2024-01-11 21:37:23 +01:00
2025-12-15 13:55:15 -05:00
2023-11-28 22:23:56 +01:00
2024-01-11 21:37:23 +01:00
2026-02-12 13:46:45 +01:00
2025-11-16 20:36:07 -08:00
2024-01-11 21:37:23 +01:00
2024-01-11 21:37:23 +01:00
2025-09-13 22:49:50 -04:00
2026-02-14 04:49:34 +00:00
2024-01-11 21:37:23 +01:00
2025-12-06 20:33:02 -05:00
2026-02-26 12:02:20 +08:00
2025-11-19 20:43:15 -08:00