Skip to content

fix(window): win_move_after UAF from naughty autocmds#37070

Merged
github-actions[bot] merged 1 commit intorelease-0.11from
backport-37065-to-release-0.11
Dec 22, 2025
Merged

fix(window): win_move_after UAF from naughty autocmds#37070
github-actions[bot] merged 1 commit intorelease-0.11from
backport-37065-to-release-0.11

Conversation

@neovim-backports
Copy link

Description

Backport of #37065 to release-0.11.

@github-actions github-actions bot enabled auto-merge (rebase) December 22, 2025 08:59
@github-actions github-actions bot added window viewport, scrolling, windows, tabpages target:release labels Dec 22, 2025
Problem: use-after-free in win_move_after if win_enter autocommands free win1/2.
Solution: set w_pos_changed before calling win_enter.

(cherry picked from commit d1189ea, also adding
an import of "exec" in the test)
@seandewar seandewar force-pushed the backport-37065-to-release-0.11 branch from 9a31125 to 0668a7f Compare December 22, 2025 09:18
@github-actions github-actions bot merged commit 6338d2d into release-0.11 Dec 22, 2025
26 of 27 checks passed
@github-actions github-actions bot deleted the backport-37065-to-release-0.11 branch December 22, 2025 09:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

target:release window viewport, scrolling, windows, tabpages

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant