mirror of
https://github.com/vim/vim.git
synced 2025-09-23 03:43:49 -04:00
updated for version 7.3.073
Problem: Double free memory when netbeans command follows DETACH. Solution: Only free the node when owned. (Xavier de Gaye)
This commit is contained in:
@@ -643,6 +643,7 @@ netbeans_parse_messages(void)
|
||||
{
|
||||
char_u *p;
|
||||
queue_T *node;
|
||||
int own_node;
|
||||
|
||||
while (head.next != NULL && head.next != &head)
|
||||
{
|
||||
@@ -681,20 +682,25 @@ netbeans_parse_messages(void)
|
||||
*p++ = NUL;
|
||||
if (*p == NUL)
|
||||
{
|
||||
own_node = TRUE;
|
||||
head.next = node->next;
|
||||
node->next->prev = node->prev;
|
||||
}
|
||||
else
|
||||
own_node = FALSE;
|
||||
|
||||
/* now, parse and execute the commands */
|
||||
nb_parse_cmd(node->buffer);
|
||||
|
||||
if (*p == NUL)
|
||||
if (own_node)
|
||||
{
|
||||
/* buffer finished, dispose of the node and buffer */
|
||||
vim_free(node->buffer);
|
||||
vim_free(node);
|
||||
}
|
||||
else
|
||||
/* Check that "head" wasn't changed under our fingers, e.g. when a
|
||||
* DETACH command was handled. */
|
||||
else if (head.next == node)
|
||||
{
|
||||
/* more follows, move to the start */
|
||||
STRMOVE(node->buffer, p);
|
||||
|
@@ -714,6 +714,8 @@ static char *(features[]) =
|
||||
|
||||
static int included_patches[] =
|
||||
{ /* Add new patch number below this line */
|
||||
/**/
|
||||
73,
|
||||
/**/
|
||||
72,
|
||||
/**/
|
||||
|
Reference in New Issue
Block a user