thac0/vim
1
0
Fork 0
forked from aniani/vim
Code Activity

patch 9.0.1050: using freed memory when assigning to variable twice

Browse Source 
Problem:    Using freed memory when assigning to variable twice.
Solution:   Make copy of the list type. (closes #11691)
This commit is contained in:
Bram Moolenaar
2022-12-12 18:56:32 +00:00
parent 67578e5bcf
commit 6342e2c5a6
3 changed files with 34 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
src/vim9type.c
View File

@@ -403,7 +403,8 @@ typval2type_int(typval_T *tv, int copyID, garray_T *type_gap, int flags)
if (l->lv_type != NULL && (l->lv_first == NULL
|| (flags & TVTT_MORE_SPECIFIC) == 0
|| l->lv_type->tt_member != &t_any))
return l->lv_type;
// make a copy, lv_type may be freed if the list is freed
return copy_type(l->lv_type, type_gap);
if (l->lv_first == &range_list_item)
return &t_list_number;
if (l->lv_copyID == copyID)