To: vim-dev@vim.org

Subject: Patch 7.2.382

Fcc: outbox

From: Bram Moolenaar <Bram@moolenaar.net>

Mime-Version: 1.0

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

------------

Patch 7.2.382

Problem:    Accessing freed memory when closing the cmdline window when

	    'bufhide' is set to "wipe".

Solution:   Check if the buffer still exists before invoking close_buffer()

	    (Dominique Pelle)

Files:	    src/ex_getln.c

*** ../vim-7.2.381/src/ex_getln.c	2010-03-02 15:55:51.000000000 +0100

--- src/ex_getln.c	2010-03-02 16:29:38.000000000 +0100

***************

*** 6252,6258 ****

  	bp = curbuf;

  	win_goto(old_curwin);

  	win_close(wp, TRUE);

! 	close_buffer(NULL, bp, DOBUF_WIPE);

  	/* Restore window sizes. */

  	win_size_restore(&winsizes);

--- 6252,6262 ----

  	bp = curbuf;

  	win_goto(old_curwin);

  	win_close(wp, TRUE);

! 

! 	/* win_close() may have already wiped the buffer when 'bh' is

! 	 * set to 'wipe' */

! 	if (buf_valid(bp))

! 	    close_buffer(NULL, bp, DOBUF_WIPE);

  	/* Restore window sizes. */

  	win_size_restore(&winsizes);

*** ../vim-7.2.381/src/version.c	2010-03-02 15:55:51.000000000 +0100

--- src/version.c	2010-03-02 17:22:11.000000000 +0100

***************

*** 683,684 ****

--- 683,686 ----

  {   /* Add new patch number below this line */

+ /**/

+     382,

  /**/

-- 

You had connectors?  Eeee, when I were a lad we 'ad to carry the

bits between the computer and the terminal with a spoon...

 /// Bram Moolenaar -- Bram@Moolenaar.net -- http://www.Moolenaar.net   \\\

///        sponsor Vim, vote for features -- http://www.Vim.org/sponsor/ \\\

\\\        download, build and distribute -- http://www.A-A-P.org        ///

 \\\            help me help AIDS victims -- http://ICCF-Holland.org    ///