# HG changeset patch
# User Bram Moolenaar <Bram@vim.org>
# Date 1562525105 -7200
# Node ID 0dff534a08077b053c8a77b3316e8960c72a737d
# Parent  7a542332835b3ea43af0404a989b7fd24eff8798
patch 8.1.1649: Illegal memory access when closing popup window

commit https://github.com/vim/vim/commit/3e35d05b1f99419be27ea5be70c7d0610202c163
Author: Bram Moolenaar <Bram@vim.org>
Date:   Sun Jul 7 20:43:34 2019 +0200

    patch 8.1.1649: Illegal memory access when closing popup window

    Problem:    Illegal memory access when closing popup window.
    Solution:   Get w_next before closing the window.

diff --git a/src/popupwin.c b/src/popupwin.c
--- a/src/popupwin.c
+++ b/src/popupwin.c
@@ -1437,6 +1437,7 @@ check_mouse_moved(win_T *wp, win_T *mous
 
 	res.v_type = VAR_NUMBER;
 	res.vval.v_number = -2;
+	// Careful: this makes "wp" invalid.
 	popup_close_and_callback(wp, &res);
     }
 }
@@ -1447,7 +1448,7 @@ check_mouse_moved(win_T *wp, win_T *mous
     void
 popup_handle_mouse_moved(void)
 {
-    win_T   *wp;
+    win_T   *wp, *nextwp;
     win_T   *mouse_wp;
     int	    row = mouse_row;
     int	    col = mouse_col;
@@ -1455,10 +1456,16 @@ popup_handle_mouse_moved(void)
     // find the window where the mouse is in
     mouse_wp = mouse_find_win(&row, &col, FIND_POPUP);
 
-    for (wp = first_popupwin; wp != NULL; wp = wp->w_next)
+    for (wp = first_popupwin; wp != NULL; wp = nextwp)
+    {
+	nextwp = wp->w_next;
 	check_mouse_moved(wp, mouse_wp);
-    for (wp = curtab->tp_first_popupwin; wp != NULL; wp = wp->w_next)
+    }
+    for (wp = curtab->tp_first_popupwin; wp != NULL; wp = nextwp)
+    {
+	nextwp = wp->w_next;
 	check_mouse_moved(wp, mouse_wp);
+    }
 }
 
 /*
diff --git a/src/version.c b/src/version.c
--- a/src/version.c
+++ b/src/version.c
@@ -778,6 +778,8 @@ static char *(features[]) =
 static int included_patches[] =
 {   /* Add new patch number below this line */
 /**/
+    1649,
+/**/
     1648,
 /**/
     1647,