From afda2773bea1749289807030d36c886233e08cac Mon Sep 17 00:00:00 2001 From: Agthu Date: Wed, 27 Dec 2023 01:05:53 +0800 Subject: [PATCH 1/2] =?UTF-8?q?CVE-2022-3520=20=E5=AE=89=E5=85=A8=E6=9B=B4?= =?UTF-8?q?=E6=96=B0:=E4=BF=AE=E5=A4=8DVim=209.0.0765=E4=B9=8B=E5=89=8D?= =?UTF-8?q?=E7=89=88=E6=9C=AC=E5=AD=98=E5=9C=A8=E5=AE=89=E5=85=A8=E6=BC=8F?= =?UTF-8?q?=E6=B4=9E=EF=BC=8C=E8=AF=A5=E6=BC=8F=E6=B4=9E=E6=BA=90=E4=BA=8E?= =?UTF-8?q?=E5=8C=85=E5=90=AB=E5=A0=86=E7=9A=84=E7=BC=93=E5=86=B2=E5=8C=BA?= =?UTF-8?q?=E6=BA=A2=E5=87=BA=E9=97=AE=E9=A2=98=E3=80=82?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- debian/changelog | 6 ++++++ src/register.c | 2 ++ src/version.c | 2 ++ 3 files changed, 10 insertions(+) diff --git a/debian/changelog b/debian/changelog index a4073b2a..25df87e9 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +vim (2:8.1.2269-ok9) yangtze; urgency=medium + + * CVE-2022-3520 修复Vim 9.0.0765之前版本存在安全漏洞，该漏洞源于包含堆的缓冲区溢出问题 + + -- Agthu1028 Wed, 27 Dec 2023 00:24:45 +0800 + vim (2:8.1.2269-ok8) yangtze; urgency=medium * close: #I86JQQ 添加openKylin关键字支持 diff --git a/src/register.c b/src/register.c index 267f9b38..c58169e1 100644 --- a/src/register.c +++ b/src/register.c @@ -1841,6 +1841,8 @@ do_put( // adjust '] mark curbuf->b_op_end.lnum = curwin->w_cursor.lnum - 1; curbuf->b_op_end.col = bd.textcol + totlen - 1; + if (curbuf->b_op_end.col < 0) + curbuf->b_op_end.col = 0; curbuf->b_op_end.coladd = 0; if (flags & PUT_CURSEND) { diff --git a/src/version.c b/src/version.c index 5ceb3699..e8b4b5c3 100644 --- a/src/version.c +++ b/src/version.c @@ -741,6 +741,8 @@ static char *(features[]) = static int included_patches[] = { /* Add new patch number below this line */ +/**/ + 2272 /**/ 2271, /**/ -- Gitee From 4bcb7bee3c26c48c22784a0e4946eec28703e248 Mon Sep 17 00:00:00 2001 From: Agthu Date: Wed, 17 Jan 2024 14:21:52 +0800 Subject: [PATCH 2/2] =?UTF-8?q?CVE-2022-3520=20=E5=AE=89=E5=85=A8=E6=9B=B4?= =?UTF-8?q?=E6=96=B0:=E4=BF=AE=E5=A4=8DVim=209.0.0765=E4=B9=8B=E5=89=8D?= =?UTF-8?q?=E7=89=88=E6=9C=AC=E5=AD=98=E5=9C=A8=E5=AE=89=E5=85=A8=E6=BC=8F?= =?UTF-8?q?=E6=B4=9E=EF=BC=8C=E8=AF=A5=E6=BC=8F=E6=B4=9E=E6=BA=90=E4=BA=8E?= =?UTF-8?q?=E5=8C=85=E5=90=AB=E5=A0=86=E7=9A=84=E7=BC=93=E5=86=B2=E5=8C=BA?= =?UTF-8?q?=E6=BA=A2=E5=87=BA=E9=97=AE=E9=A2=98=E3=80=82?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- debian/changelog | 6 ------ 1 file changed, 6 deletions(-) diff --git a/debian/changelog b/debian/changelog index 25df87e9..a4073b2a 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,9 +1,3 @@ -vim (2:8.1.2269-ok9) yangtze; urgency=medium - - * CVE-2022-3520 修复Vim 9.0.0765之前版本存在安全漏洞，该漏洞源于包含堆的缓冲区溢出问题 - - -- Agthu1028 Wed, 27 Dec 2023 00:24:45 +0800 - vim (2:8.1.2269-ok8) yangtze; urgency=medium * close: #I86JQQ 添加openKylin关键字支持 -- Gitee