From f3980dc5d0a5f873cf764b8ba3e567e42259e4e5 Mon Sep 17 00:00:00 2001 From: Bram Moolenaar Date: Sat, 26 Mar 2022 16:42:23 +0000 Subject: [PATCH] patch 8.2.4632: using freed memory in flatten() Problem: Using freed memory in flatten(). Solution: Clear typval after recursing into list. --- src/list.c | 2 +- src/version.c | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/src/list.c b/src/list.c index 3354068a4..666fb5ad6 100644 --- a/src/list.c +++ b/src/list.c @@ -953,12 +953,12 @@ list_flatten(list_T *list, listitem_T *first, long maxitems, long maxdepth) list_free_item(list, item); return; } - clear_tv(&item->li_tv); if (maxdepth > 0) list_flatten(list, item->li_prev == NULL ? list->lv_first : item->li_prev->li_next, itemlist->lv_len, maxdepth - 1); + clear_tv(&item->li_tv); list_free_item(list, item); } diff --git a/src/version.c b/src/version.c index 9d78a0e8f..962fa0ba1 100644 --- a/src/version.c +++ b/src/version.c @@ -750,6 +750,8 @@ static char *(features[]) = static int included_patches[] = { /* Add new patch number below this line */ +/**/ + 4632, /**/ 4631, /**/