Christian Brabandt 0a6e57b09b patch 9.1.0678: [security]: use-after-free in alist_add() ...

Problem:  [security]: use-after-free in alist_add()
          (SuyueGuo)
Solution: Lock the current window, so that the reference to
          the argument list remains valid.

This fixes CVE-2024-43374

Signed-off-by: Christian Brabandt <cb@256bit.org>

2024-08-15 22:15:28 +02:00

34 KiB

Raw Blame History

View Raw