0
0
mirror of https://github.com/vim/vim.git synced 2025-09-24 03:44:06 -04:00

patch 9.1.0992: Vim9: double-free after v9.1.0988

Problem:  Vim9: double-free after v9.1.0988
          (h-east)
Solution: clear typval pointer, before setting the type
          (Yegappan Lakshmanan)

Otherwise the contents are still referring to some other value.

fixes: #16386
closes: #16388

Signed-off-by: Yegappan Lakshmanan <yegappan@yahoo.com>
Signed-off-by: Christian Brabandt <cb@256bit.org>
This commit is contained in:
Yegappan Lakshmanan
2025-01-06 18:34:49 +01:00
committed by Christian Brabandt
parent 6655bef330
commit 2050dcc20f
3 changed files with 30 additions and 0 deletions

View File

@@ -4855,6 +4855,7 @@ exec_instructions(ectx_T *ectx)
+ iptr->isn_arg.jumparg.jump_arg_off
+ STACK_FRAME_SIZE;
type_T *t = ufunc->uf_arg_types[argidx];
CLEAR_POINTER(tv);
tv->v_type = t->tt_type;
}