diff options
| author | Mingli Yu <mingli.yu@windriver.com> | 2021-11-17 17:18:26 +0800 |
|---|---|---|
| committer | Anuj Mittal <anuj.mittal@intel.com> | 2021-11-22 09:45:46 +0800 |
| commit | 41ba5054fc4d014ab3a2af0cc7673e275aaecee0 (patch) | |
| tree | 8cc1643f861314735c87e67d0511ccee98ffb035 /meta/recipes-support/vim/files/CVE-2021-3927.patch | |
| parent | 918660a2d4bc89a763a5934765ff6a1647709fcc (diff) | |
| download | openembedded-core-contrib-41ba5054fc4d014ab3a2af0cc7673e275aaecee0.tar.gz openembedded-core-contrib-41ba5054fc4d014ab3a2af0cc7673e275aaecee0.tar.bz2 openembedded-core-contrib-41ba5054fc4d014ab3a2af0cc7673e275aaecee0.zip | |
vim: fix CVE-2021-3927 and CVE-2021-3928
Backport patches to fix CVE-2021-3927 and CVE-2021-3928.
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Diffstat (limited to 'meta/recipes-support/vim/files/CVE-2021-3927.patch')
| -rw-r--r-- | meta/recipes-support/vim/files/CVE-2021-3927.patch | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/meta/recipes-support/vim/files/CVE-2021-3927.patch b/meta/recipes-support/vim/files/CVE-2021-3927.patch new file mode 100644 index 0000000000..90b1b6b82e --- /dev/null +++ b/meta/recipes-support/vim/files/CVE-2021-3927.patch @@ -0,0 +1,32 @@ +From f334a87204b4aab76536063b37b4d4a10be46a3a Mon Sep 17 00:00:00 2001 +From: Bram Moolenaar <Bram@vim.org> +Date: Wed, 17 Nov 2021 11:09:48 +0800 +Subject: [PATCH] patch 8.2.3581: reading character past end of line + +Problem: Reading character past end of line. +Solution: Correct the cursor column. + +CVE: CVE-2021-3927 + +Upstream-Status: Backport [https://github.com/vim/vim/commit/0b5b06cb4777d1401fdf83e7d48d287662236e7e] + +Signed-off-by: Mingli Yu <mingli.yu@windriver.com> +--- + src/ex_docmd.c | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/src/ex_docmd.c b/src/ex_docmd.c +index 89d33ba90..54d7f4cb3 100644 +--- a/src/ex_docmd.c ++++ b/src/ex_docmd.c +@@ -6905,6 +6905,7 @@ ex_put(exarg_T *eap) + eap->forceit = TRUE; + } + curwin->w_cursor.lnum = eap->line2; ++ check_cursor_col(); + do_put(eap->regname, eap->forceit ? BACKWARD : FORWARD, 1L, + PUT_LINE|PUT_CURSLINE); + } +-- +2.17.1 + |