From a366598006f4d7bf9b4fbcd334a2e5078dcb6ad8 Mon Sep 17 00:00:00 2001 From: Bram Moolenaar Date: Fri, 12 Nov 2021 02:23:38 +0000 Subject: [PATCH] =?UTF-8?q?patch=208.2.3564:=20invalid=20memory=20access?= =?UTF-8?q?=20when=20scrolling=20without=20valid=20sc=E2=80=A6?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit …reen Problem: Invalid memory access when scrolling without a valid screen. Solution: Do not set VALID_BOTLINE in w_valid. CVE: CVE-2021-3903 Upstream-Status: Backport [https://github.com/vim/vim/commit/777e7c21b7627be80961848ac560cb0a9978ff43] Signed-off-by: Mingli Yu --- src/move.c | 1 - 1 file changed, 1 deletion(-) diff --git a/src/move.c b/src/move.c index 8e53d8bcb..10165ef4d 100644 --- a/src/move.c +++ b/src/move.c @@ -198,7 +198,6 @@ update_topline(void) { curwin->w_topline = curwin->w_cursor.lnum; curwin->w_botline = curwin->w_topline; - curwin->w_valid |= VALID_BOTLINE|VALID_BOTLINE_AP; curwin->w_scbind_pos = 1; return; } -- 2.31.1