diff options
| author | Bram Moolenaar <Bram@vim.org> | 2019-08-21 12:54:18 +0200 |
|---|---|---|
| committer | Bram Moolenaar <Bram@vim.org> | 2019-08-21 12:54:18 +0200 |
| commit | f1552d07d715b437d941659479942c2543b02bd4 (patch) | |
| tree | 75f97a65490a0d0ac259eea2eda3c7ae2d2109a0 /src/cmdexpand.c | |
| parent | eaf35241197fc6b9ee9af993095bf5e6f35c8f1a (diff) | |
patch 8.1.1897: may free memory twice when out of memoryv8.1.1897
Problem: May free memory twice when out of memory.
Solution: Check that backslash_halve_save() returns a different pointer.
(Dominique Pelle, closes #4847)
Diffstat (limited to 'src/cmdexpand.c')
| -rw-r--r-- | src/cmdexpand.c | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/src/cmdexpand.c b/src/cmdexpand.c index 1454fd2f53..59d84419c6 100644 --- a/src/cmdexpand.c +++ b/src/cmdexpand.c @@ -646,17 +646,19 @@ showmatches(expand_T *xp, int wildmenu UNUSED) { char_u *halved_slash; char_u *exp_path; + char_u *path; // Expansion was done before and special characters // were escaped, need to halve backslashes. Also // $HOME has been replaced with ~/. exp_path = expand_env_save_opt(files_found[k], TRUE); - halved_slash = backslash_halve_save( - exp_path != NULL ? exp_path : files_found[k]); + path = exp_path != NULL ? exp_path : files_found[k]; + halved_slash = backslash_halve_save(path); j = mch_isdir(halved_slash != NULL ? halved_slash : files_found[k]); vim_free(exp_path); - vim_free(halved_slash); + if (halved_slash != path) + vim_free(halved_slash); } else // Expansion was done here, file names are literal. |