commit 6ef5471afa69a654888bc285a51a6035405d33a0
author Bram Moolenaar <Bram@vim.org> Sun Dec 25 19:31:36 2022 +0000
committer Bram Moolenaar <Bram@vim.org> Sun Dec 25 19:31:36 2022 +0000
tree 129d598f76891f27518586ab04edbd0cbc3b1884
parent 9b99411b93f017609399e04527fdd3b6e83b5a55

patch 9.0.1095: using freed memory when declaration fails

Problem:    Using freed memory when declaration fails. (Yegappan Lakshmanan)
Solution:   After unreferencing an object set the reference to NULL.

src/typval.c

diff --git a/src/typval.c b/src/typval.c
index 98915cc..6eae02b 100644
--- a/src/typval.c
+++ b/src/typval.c
@@ -162,9 +162,11 @@
 		break;
 	    case VAR_CLASS:
 		class_unref(varp->vval.v_class);
+		varp->vval.v_class = NULL;
 		break;
 	    case VAR_OBJECT:
 		object_unref(varp->vval.v_object);
+		varp->vval.v_object = NULL;
 		break;
 	    case VAR_UNKNOWN:
 	    case VAR_ANY: