Arch Linux

Please read this before reporting a bug:

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

FS#57640 - [vim-runtime] archlinux.vim shells out at loading for CVE-2017-1000382

Attached to Project: Arch Linux
Opened by Andy Massimino (vimplication) - Monday, 26 February 2018, 01:58 GMT
Last edited by Levente Polyak (anthraxx) - Monday, 26 February 2018, 22:45 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Levente Polyak (anthraxx)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 4
Private No



The following was recently added,

" Move the swap file location to protect against CVE-2017-1000382
silent !install -d -m 700 ~/.vim/swap/ 2>&1 > /dev/null
set directory=~/.vim/swap/

However, this forces the controlling terminal's prompt to the bottom when
vim exits, because ! produces output when the terminal is not yet properly
set up by vim. It would be preferable to shell-out only if the directory
doesn't exist and to use `system(` which does not cause the issue. E.g.,

if ! isdirectory("~/.vim/swap/")
call system('install -d -m 700 ~/.vim/swap')
set directory=~/.vim/swap//

This task depends upon

Closed by  Levente Polyak (anthraxx)
Monday, 26 February 2018, 22:45 GMT
Reason for closing:  Fixed
Additional comments about closing:  8.0.1542-2
Comment by Patrick (patrick96) - Monday, 26 February 2018, 17:48 GMT
I can confirm this happens and the proposed solution also fixes this. Other people also experience this, as discussed in this reddit post [1]