Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, jsondecodeitem() in src/json.c can retain a stale pointer after jsondecodestring() invokes channelfill() to refill and free the current buffer, causing the error path to read freed memory instead of reader->jsbuf + reader->js_used when an invalid JSON string spans buffers. This issue is fixed in version 9.2.0844.
{
"binaries": [
{
"binary_version": "2:8.2.3995-1ubuntu2.34",
"binary_name": "vim"
},
{
"binary_version": "2:8.2.3995-1ubuntu2.34",
"binary_name": "vim-athena"
},
{
"binary_version": "2:8.2.3995-1ubuntu2.34",
"binary_name": "vim-common"
},
{
"binary_version": "2:8.2.3995-1ubuntu2.34",
"binary_name": "vim-gtk"
},
{
"binary_version": "2:8.2.3995-1ubuntu2.34",
"binary_name": "vim-gtk3"
},
{
"binary_version": "2:8.2.3995-1ubuntu2.34",
"binary_name": "vim-gui-common"
},
{
"binary_version": "2:8.2.3995-1ubuntu2.34",
"binary_name": "vim-nox"
},
{
"binary_version": "2:8.2.3995-1ubuntu2.34",
"binary_name": "vim-runtime"
},
{
"binary_version": "2:8.2.3995-1ubuntu2.34",
"binary_name": "vim-tiny"
},
{
"binary_version": "2:8.2.3995-1ubuntu2.34",
"binary_name": "xxd"
}
]
}{
"binaries": [
{
"binary_version": "2:9.1.0016-1ubuntu7.18",
"binary_name": "vim"
},
{
"binary_version": "2:9.1.0016-1ubuntu7.18",
"binary_name": "vim-athena"
},
{
"binary_version": "2:9.1.0016-1ubuntu7.18",
"binary_name": "vim-common"
},
{
"binary_version": "2:9.1.0016-1ubuntu7.18",
"binary_name": "vim-gtk3"
},
{
"binary_version": "2:9.1.0016-1ubuntu7.18",
"binary_name": "vim-gui-common"
},
{
"binary_version": "2:9.1.0016-1ubuntu7.18",
"binary_name": "vim-motif"
},
{
"binary_version": "2:9.1.0016-1ubuntu7.18",
"binary_name": "vim-nox"
},
{
"binary_version": "2:9.1.0016-1ubuntu7.18",
"binary_name": "vim-runtime"
},
{
"binary_version": "2:9.1.0016-1ubuntu7.18",
"binary_name": "vim-tiny"
},
{
"binary_version": "2:9.1.0016-1ubuntu7.18",
"binary_name": "xxd"
}
]
}{
"binaries": [
{
"binary_version": "2:9.1.2141-1ubuntu4.7",
"binary_name": "vim"
},
{
"binary_version": "2:9.1.2141-1ubuntu4.7",
"binary_name": "vim-common"
},
{
"binary_version": "2:9.1.2141-1ubuntu4.7",
"binary_name": "vim-gtk3"
},
{
"binary_version": "2:9.1.2141-1ubuntu4.7",
"binary_name": "vim-gui-common"
},
{
"binary_version": "2:9.1.2141-1ubuntu4.7",
"binary_name": "vim-motif"
},
{
"binary_version": "2:9.1.2141-1ubuntu4.7",
"binary_name": "vim-nox"
},
{
"binary_version": "2:9.1.2141-1ubuntu4.7",
"binary_name": "vim-runtime"
},
{
"binary_version": "2:9.1.2141-1ubuntu4.7",
"binary_name": "vim-tiny"
},
{
"binary_version": "2:9.1.2141-1ubuntu4.7",
"binary_name": "xxd"
}
]
}{
"binaries": [
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm31",
"binary_name": "vim"
},
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm31",
"binary_name": "vim-athena"
},
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm31",
"binary_name": "vim-common"
},
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm31",
"binary_name": "vim-gnome"
},
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm31",
"binary_name": "vim-gtk"
},
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm31",
"binary_name": "vim-gui-common"
},
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm31",
"binary_name": "vim-lesstif"
},
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm31",
"binary_name": "vim-nox"
},
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm31",
"binary_name": "vim-runtime"
},
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm31",
"binary_name": "vim-tiny"
}
]
}{
"binaries": [
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm37",
"binary_name": "vim"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm37",
"binary_name": "vim-athena"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm37",
"binary_name": "vim-athena-py2"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm37",
"binary_name": "vim-common"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm37",
"binary_name": "vim-gnome"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm37",
"binary_name": "vim-gnome-py2"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm37",
"binary_name": "vim-gtk"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm37",
"binary_name": "vim-gtk-py2"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm37",
"binary_name": "vim-gtk3"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm37",
"binary_name": "vim-gtk3-py2"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm37",
"binary_name": "vim-gui-common"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm37",
"binary_name": "vim-nox"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm37",
"binary_name": "vim-nox-py2"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm37",
"binary_name": "vim-runtime"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm37",
"binary_name": "vim-tiny"
}
]
}{
"binaries": [
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm22",
"binary_name": "vim"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm22",
"binary_name": "vim-athena"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm22",
"binary_name": "vim-common"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm22",
"binary_name": "vim-gnome"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm22",
"binary_name": "vim-gtk"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm22",
"binary_name": "vim-gtk3"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm22",
"binary_name": "vim-gui-common"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm22",
"binary_name": "vim-nox"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm22",
"binary_name": "vim-runtime"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm22",
"binary_name": "vim-tiny"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm22",
"binary_name": "xxd"
}
]
}{
"binaries": [
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm10",
"binary_name": "vim"
},
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm10",
"binary_name": "vim-athena"
},
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm10",
"binary_name": "vim-common"
},
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm10",
"binary_name": "vim-gtk"
},
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm10",
"binary_name": "vim-gtk3"
},
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm10",
"binary_name": "vim-gui-common"
},
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm10",
"binary_name": "vim-nox"
},
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm10",
"binary_name": "vim-runtime"
},
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm10",
"binary_name": "vim-tiny"
},
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm10",
"binary_name": "xxd"
}
]
}