# HG changeset patch # User Bram Moolenaar # Date 1648313103 -3600 # Node ID 183ae001d99d2603afc460b1ae3c85eb3841b241 # Parent 35eab16cffae4c3fee2d3edba546c71c86e71ce8 patch 8.2.4632: using freed memory in flatten() Commit: https://github.com/vim/vim/commit/f3980dc5d0a5f873cf764b8ba3e567e42259e4e5 Author: Bram Moolenaar Date: Sat Mar 26 16:42:23 2022 +0000 patch 8.2.4632: using freed memory in flatten() Problem: Using freed memory in flatten(). Solution: Clear typval after recursing into list. diff --git a/src/list.c b/src/list.c --- a/src/list.c +++ b/src/list.c @@ -953,12 +953,12 @@ list_flatten(list_T *list, listitem_T *f list_free_item(list, item); return; } - clear_tv(&item->li_tv); if (maxdepth > 0) list_flatten(list, item->li_prev == NULL ? list->lv_first : item->li_prev->li_next, itemlist->lv_len, maxdepth - 1); + clear_tv(&item->li_tv); list_free_item(list, item); } diff --git a/src/version.c b/src/version.c --- a/src/version.c +++ b/src/version.c @@ -751,6 +751,8 @@ static char *(features[]) = static int included_patches[] = { /* Add new patch number below this line */ /**/ + 4632, +/**/ 4631, /**/ 4630,