From ec6fcf3b1ccd788c065a49dfa5e78b01409aceb8 Mon Sep 17 00:00:00 2001 From: watiko Date: Mon, 15 Feb 2016 17:31:53 +0900 Subject: vim-patch:7.4.887 Problem: Using uninitialized memory for regexp with back reference. (Dominique Pelle) Solution: Initialize end_lnum. https://github.com/vim/vim/commit/c2b717ebd6719e722dcb5f10e4c74033a53ff7c7 --- see: "[bug] use of uninitialized memory in regexp_nfa.c with invalid back reference" https://groups.google.com/d/msg/vim_dev/JWmrT5-NnPQ/U_TgaRW8AwAJ --- src/nvim/regexp_nfa.c | 1 + 1 file changed, 1 insertion(+) (limited to 'src/nvim/regexp_nfa.c') diff --git a/src/nvim/regexp_nfa.c b/src/nvim/regexp_nfa.c index 4020fa6e28..dd41535110 100644 --- a/src/nvim/regexp_nfa.c +++ b/src/nvim/regexp_nfa.c @@ -4048,6 +4048,7 @@ skip_add: sub->list.multi[subidx].start_col = (colnr_T)(reginput - regline + off); } + sub->list.multi[subidx].end_lnum = -1; } else { if (subidx < sub->in_use) { save_ptr = sub->list.line[subidx].start; -- cgit