forked from aniani/vim
patch 8.2.0571: double free when passing invalid argument to job_start()
Problem: Double free when passing invalid argument to job_start(). Solution: Clear the argument when freed. (Masato Nishihata, closes #5926)
This commit is contained in:
@@ -4356,7 +4356,10 @@ build_argv_from_list(list_T *l, char ***argv, int *argc)
|
||||
int i;
|
||||
|
||||
for (i = 0; i < *argc; ++i)
|
||||
{
|
||||
vim_free((*argv)[i]);
|
||||
(*argv)[i] = NULL;
|
||||
}
|
||||
return FAIL;
|
||||
}
|
||||
(*argv)[*argc] = (char *)vim_strsave(s);
|
||||
|
||||
@@ -1681,6 +1681,7 @@ func Test_job_start_fails()
|
||||
call assert_fails('let job = job_start([" "])', 'E474:')
|
||||
call assert_fails('let job = job_start("")', 'E474:')
|
||||
call assert_fails('let job = job_start(" ")', 'E474:')
|
||||
call assert_fails('let job = job_start(["ls", []])', 'E730:')
|
||||
%bw!
|
||||
endfunc
|
||||
|
||||
|
||||
@@ -738,6 +738,8 @@ static char *(features[]) =
|
||||
|
||||
static int included_patches[] =
|
||||
{ /* Add new patch number below this line */
|
||||
/**/
|
||||
571,
|
||||
/**/
|
||||
570,
|
||||
/**/
|
||||
|
||||
Reference in New Issue
Block a user