commit 0a0764684591c7c6a5d722b628f11dc96208e853
author Pierre Colin <48397990+Pierre-Colin@users.noreply.github.com> Sat Aug 19 11:56:57 2023 +0200
committer Christian Brabandt <cb@256bit.org> Sat Aug 19 11:56:57 2023 +0200
tree c6f4295f155720549fad5a8771c8bf433a076199
parent 38ab19e00f378eeead3baf95ee24b9665c76b350

patch 9.0.1740: segfault when reading invalid viminfo file

Problem: segfault when reading invalid viminfo file
Solution: Check the expected type in the viminfo file

Thanks to @yegappan for the included test.

closes: #12652
closes: #12845

Signed-off-by: Christian Brabandt <cb@256bit.org>
Co-authored-by: Pierre Colin <48397990+Pierre-Colin@users.noreply.github.com>
Co-authored-by: Yegappan Lakshmanan <yegappan@yahoo.com>
Co-authored-by: Christian Brabandt <cb@256bit.org>

src/viminfo.c

diff --git a/src/viminfo.c b/src/viminfo.c
index b772fc8..fbab05e 100644
--- a/src/viminfo.c
+++ b/src/viminfo.c
@@ -1804,6 +1804,11 @@
 	    y_ptr->y_array[i] = vp[i + 6].bv_string;
 	    vp[i + 6].bv_string = NULL;
 	}
+        else if (vp[i + 6].bv_type != BVAL_STRING)
+        {
+            free(y_ptr->y_array);
+            y_ptr->y_array = NULL;
+        }
 	else
 	    y_ptr->y_array[i] = vim_strsave(vp[i + 6].bv_string);
     }