diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2026-08-11 10:19:52 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-08-11 10:19:52 +0800 |
| commit | 7be8a8dda38542ebe8272b86f99e8633275b01cd (patch) | |
| tree | 0fb622f8feabc8687320d5d843d1940bf12047be /runtime/plugin/python_setup.vim | |
| parent | 5bc08dbb461d5232552d8e2e2d05b4b6f7850886 (diff) | |
| download | rneovim-7be8a8dda38542ebe8272b86f99e8633275b01cd.tar.gz rneovim-7be8a8dda38542ebe8272b86f99e8633275b01cd.tar.bz2 rneovim-7be8a8dda38542ebe8272b86f99e8633275b01cd.zip | |
vim-patch:9.2.0932: NFA engine fallback can double free the compiled program (#41268)
Problem: When the automatic regexp engine falls back to the
backtracking engine in vim_regexec_string(), the compiled
program is freed before the replacement is compiled; when
saving the pattern fails from being out of memory the
caller's "regprog" is left pointing to freed memory and
is freed again.
Solution: Free the previous program only after compiling the
replacement succeeded, like vim_regexec_multi() already
does (Samuel Schlesinger).
closes: vim/vim#20986
https://github.com/vim/vim/commit/cab0901f121d0fab74c9a42bb90583d59b3d3c21
Co-authored-by: Samuel Schlesinger <sgschlesinger@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>
Diffstat (limited to 'runtime/plugin/python_setup.vim')
0 files changed, 0 insertions, 0 deletions