Emanuel Krollmann a512d43716 fix(autocmd): heap UAF with :bwipe in Syntax autocmd ...

Problem:
Creating an autocommand which executes `:bwipe` on the Syntax event
causes a heap-use-after-free.

Solution: set BF_SYN_SET flag before applying autocommands
(cherry picked from commit f36dd7557a)

2026-01-18 18:23:15 +00:00

..

api

fix(api): parse_expression crash with unopened ] and node

2026-01-17 13:48:49 +00:00

autocmd

fix(autocmd): heap UAF with :bwipe in Syntax autocmd

2026-01-18 18:23:15 +00:00

core

fix(channel): unreference list after callback finishes (#37358)

2026-01-12 08:36:14 +08:00

editor

fix(normal): assertion failure with "gk" in narrow window (#37444)

2026-01-18 04:10:59 +00:00

ex_cmds

fix(session): window sizes not stored with float windows (#37344)

2026-01-10 15:15:48 +00:00

fixtures

fix(diff): set default diff flags properly (#35450)

2025-08-24 14:43:19 +08:00

legacy

vim-patch:9.1.2028: [security]: Buffer-overflow with incomplete multi-byte chars (#37133)

2025-12-28 01:05:55 +00:00

lua

fix(lua): vim._with() doesn't save boolean options properly (#37354)

2026-01-11 12:30:12 +00:00

options

test: remove a few more redundant clear() calls

2025-10-03 16:14:14 +08:00

plugin

revert "fix(lsp): _get_workspace_folders does not handle root_dir() function"

2025-10-14 22:31:49 -04:00

provider

fix(clipboard): avoid using stale register width (#36178)

2025-10-14 13:07:09 +08:00

script

docs: misc #31996

2025-03-02 14:27:52 -08:00

shada

refactor(shada): fix coverity warning about leaking memory (#32650)

2025-02-27 10:38:04 +08:00

terminal

fix(terminal): :edit should respect 'bufhidden' with exited job (#37301)

2026-01-10 08:26:45 +08:00

testnvim

test: move exec_lua logic to separate module

2024-11-21 11:35:16 +00:00

treesitter

test: remove a few more redundant clear() calls

2025-10-03 16:14:14 +08:00

ui

fix(window): crash closing split if autocmds close other splits (#37233)

2026-01-05 11:34:49 +08:00

vimscript

vim-patch:partial:9.1.1955: sort() does not handle large numbers correctly (#36840)

2025-12-06 14:30:09 +00:00

example_spec.lua

fix(tests): needing two calls to setup a screen is cringe

2024-11-14 12:40:57 +01:00

preload.lua

test: improve test conventions

2024-04-23 18:17:04 +02:00

testnvim.lua

test: make error clearer for RPC request after crash

2025-10-03 16:14:14 +08:00

testterm.lua

feat(jobs): jobstart(…,{term=true}), deprecate termopen() #31343

2024-12-19 07:07:04 -08:00