diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2023-06-04 18:46:28 +0100 |
|---|---|---|
| committer | Bram Moolenaar <Bram@vim.org> | 2023-06-04 18:46:28 +0100 |
| commit | 58e1e010454113a7c8a9b0327c54d2ee7d73d2fd (patch) | |
| tree | a9ffdc54b4895a395ca6a114d82992f139def24c /src/drawline.c | |
| parent | 114ec813b3a7f70d7a1c86e87226f5273e9d1def (diff) | |
patch 9.0.1606: using freed memory when 'foldcolumn' is setv9.0.1606
Problem: Using freed memory when 'foldcolumn' is set.
Solution: Save extra pointer to free it later. (closes #12492)
Diffstat (limited to 'src/drawline.c')
| -rw-r--r-- | src/drawline.c | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/src/drawline.c b/src/drawline.c index 2fbfe452cd..848b3ae892 100644 --- a/src/drawline.c +++ b/src/drawline.c @@ -150,6 +150,7 @@ typedef struct { // saved "extra" items for when draw_state becomes WL_LINE (again) int saved_n_extra; char_u *saved_p_extra; + char_u *saved_p_extra_free; int saved_extra_attr; int saved_n_attr_skip; int saved_extra_for_textprop; @@ -230,7 +231,7 @@ handle_foldcolumn(win_T *wp, winlinevars_T *wlv) return; wlv->n_extra = (int)fill_foldcolumn(wlv->p_extra_free, - wp, FALSE, wlv->lnum); + wp, FALSE, wlv->lnum); wlv->p_extra_free[wlv->n_extra] = NUL; wlv->p_extra = wlv->p_extra_free; wlv->c_extra = NUL; @@ -979,6 +980,9 @@ win_line_start(win_T *wp UNUSED, winlinevars_T *wlv, int save_extra) wlv->draw_state = WL_START; wlv->saved_n_extra = wlv->n_extra; wlv->saved_p_extra = wlv->p_extra; + vim_free(wlv->saved_p_extra_free); + wlv->saved_p_extra_free = wlv->p_extra_free; + wlv->p_extra_free = NULL; wlv->saved_extra_attr = wlv->extra_attr; wlv->saved_n_attr_skip = wlv->n_attr_skip; wlv->saved_extra_for_textprop = wlv->extra_for_textprop; @@ -1015,6 +1019,9 @@ win_line_continue(winlinevars_T *wlv) wlv->c_extra = wlv->saved_c_extra; wlv->c_final = wlv->saved_c_final; wlv->p_extra = wlv->saved_p_extra; + vim_free(wlv->p_extra_free); + wlv->p_extra_free = wlv->saved_p_extra_free; + wlv->saved_p_extra_free = NULL; wlv->extra_attr = wlv->saved_extra_attr; wlv->n_attr_skip = wlv->saved_n_attr_skip; wlv->extra_for_textprop = wlv->saved_extra_for_textprop; @@ -4119,5 +4126,6 @@ win_line( #endif vim_free(wlv.p_extra_free); + vim_free(wlv.saved_p_extra_free); return wlv.row; } |