summaryrefslogtreecommitdiff
path: root/pathspec.c
diff options
context:
space:
mode:
authorBrandon Williams <bmwill@google.com>2017-04-07 19:29:19 (GMT)
committerJunio C Hamano <gitster@pobox.com>2017-04-17 01:04:06 (GMT)
commit5ce10c0a29efeab21567228f8916190f2202fdb3 (patch)
tree8673aab4b15ff406fa4448f884cb87590713111a /pathspec.c
parentc5af19f9ab4cd8582689ca9d9c84f188f4442d10 (diff)
downloadgit-5ce10c0a29efeab21567228f8916190f2202fdb3.zip
git-5ce10c0a29efeab21567228f8916190f2202fdb3.tar.gz
git-5ce10c0a29efeab21567228f8916190f2202fdb3.tar.bz2
pathspec: fix segfault in clear_pathspec
In 'clear_pathspec()' the incorrect index parameter is used to bound an inner-loop which is used to free a 'struct attr_match' value field. Using the incorrect index parameter (in addition to being incorrect) occasionally causes segmentation faults when attempting to free an invalid pointer. Fix this by using the correct index parameter 'i'. Signed-off-by: Brandon Williams <bmwill@google.com> Signed-off-by: Junio C Hamano <gitster@pobox.com>
Diffstat (limited to 'pathspec.c')
-rw-r--r--pathspec.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/pathspec.c b/pathspec.c
index 303efda..69ef86b 100644
--- a/pathspec.c
+++ b/pathspec.c
@@ -724,7 +724,7 @@ void clear_pathspec(struct pathspec *pathspec)
free(pathspec->items[i].match);
free(pathspec->items[i].original);
- for (j = 0; j < pathspec->items[j].attr_match_nr; j++)
+ for (j = 0; j < pathspec->items[i].attr_match_nr; j++)
free(pathspec->items[i].attr_match[j].value);
free(pathspec->items[i].attr_match);