commit 6e60cf444a8839ca1694319bf9a82e7b097e5c4d
author Christian Brabandt <cb@256bit.org> Sun Sep 03 21:43:46 2023 +0200
committer Christian Brabandt <cb@256bit.org> Sun Sep 03 21:43:46 2023 +0200
tree 0ae96b7f0834c9e82cd174dda7683eb209dd46e3
parent ee9166eb3b41846661a39b662dc7ebe8b5e15139

patch 9.0.1859: heap-use-after-free in bt_normal()

Problem:  heap-use-after-free in bt_normal()
Solution: check that buffer is still valid

Signed-off-by: Christian Brabandt <cb@256bit.org>

src/buffer.c

diff --git a/src/buffer.c b/src/buffer.c
index 14eac92..93f9245 100644
--- a/src/buffer.c
+++ b/src/buffer.c
@@ -5777,7 +5777,7 @@
 bt_quickfix(buf_T *buf UNUSED)
 {
 #ifdef FEAT_QUICKFIX
-    return buf != NULL && buf->b_p_bt[0] == 'q';
+    return buf != NULL && buf_valid(buf) && buf->b_p_bt[0] == 'q';
 #else
     return FALSE;
 #endif