aniani/vim
0
0
Fork 1
mirror of https://github.com/vim/vim.git synced 2025-09-23 03:43:49 -04:00
Code Activity

patch 9.0.0047: using freed memory with recursive substitute

Browse Source 
Problem:    Using freed memory with recursive substitute.
Solution:   Always make a copy for reg_prev_sub.
This commit is contained in:
Bram Moolenaar
2022-07-07 22:20:31 +01:00
parent baefde1455
commit 32acf1f1a7
4 changed files with 27 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
src/ex_cmds.c
View File

@@ -3994,7 +3994,16 @@ ex_substitute(exarg_T *eap)
sub_copy = sub;
}
else
sub = regtilde(sub, magic_isset());
{
char_u *newsub = regtilde(sub, magic_isset());
if (newsub != sub)
{
// newsub was allocated, free it later.
sub_copy = newsub;
sub = newsub;
}
}
/*
* Check for a match on each line.