commit 0ff01835a40f549c5c4a550502f62a2ac9ac447c
author Bram Moolenaar <Bram@vim.org> Sat Sep 24 19:20:30 2022 +0100
committer Bram Moolenaar <Bram@vim.org> Sat Sep 24 19:20:30 2022 +0100
tree b960fbf355eb410814b87b37a4416e0022d3edd3
parent 865bf2ed3039deeaa66312319f3e13db146a9701

patch 9.0.0579: using freed memory when 'tagfunc' wipes out buffer

Problem:    Using freed memory when 'tagfunc' wipes out buffer that holds
            'complete'.
Solution:   Make a copy of the option.  Make sure cursor position is valid.

src/move.c

diff --git a/src/move.c b/src/move.c
index a51d2d1..967dd77 100644
--- a/src/move.c
+++ b/src/move.c
@@ -683,6 +683,7 @@
     void
 validate_cursor(void)
 {
+    check_cursor();
     check_cursor_moved(curwin);
     if ((curwin->w_valid & (VALID_WCOL|VALID_WROW)) != (VALID_WCOL|VALID_WROW))
 	curs_columns(TRUE);