neovim

dilim/neovim

0 Fork 0

mirror of https://github.com/neovim/neovim.git synced 2026-11-06 21:37:04 +00:00

Files

T

History

zeertzjqandChristian Brabandt f3fbb3928c vim-patch:9.2.0738: ml_recover() may write beyond block buffer (#40446 )

Problem:  A crafted swap file can cause an out-of-bounds write during
          recovery when the same block is referenced twice with
          different pe_page_count values (cipher-creator)
Solution: Check hp->bh_page_count against page_count after mf_get() and
          clamp page_count to the actual block size.

closes: vim/vim#20645

https://github.com/vim/vim/commit/43939cf9ebf5302bb51c85d00ac83de7e01452d5

Co-authored-by: Christian Brabandt <cb@256bit.org>

2026-06-27 09:21:05 +00:00

box.txt

vim-patch:9.0.2134: ml_get error when scrolling (#26264 )

2023-11-29 13:24:24 +08:00

buffer-test.txt

vim-patch:9.1.2028: [security]: Buffer-overflow with incomplete multi-byte chars (#37133 )

2025-12-28 00:37:55 +00:00

evil.tar

vim-patch:9.1.1552: [security]: path traversal issue in tar.vim

2025-07-18 08:40:23 +08:00

evil.zip

vim-patch:9.2.0299: runtime(zip): may write using absolute paths (#38810 )