Re: use-after-free in rl_display_match_list

[Chet Ramey]

On 3/20/23 4:39 PM, Grisha Levit wrote:
> On Mon, Mar 20, 2023 at 12:55 PM Grisha Levit <grishalevit@gmail.com> wrote:
> > A SIGINT received during get_y_or_n in display_matches can leave
> > rl_display_match_list working with an already-freed matches array.
>
> Actually, the same thing can happen during calls to _rl_internal_pager
> within rl_display_match_list.

Thanks for the report. It's the unusual application that receives a SIGINT
and doesn't at least jump back to the top level.

Chet

--
``The lyf so short, the craft so long to lerne.'' - Chaucer
                 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, UTech, CWRU    chet@case.edu    http://tiswww.cwru.edu/~chet/