From: Bram Moolenaar <Bram@vim.org>
Date: Sat, 16 Feb 2019 17:07:57 +0000 (+0100)
Subject: patch 8.1.0935: old regexp engine may use invalid buffer
X-Git-Tag: v8.1.0935
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=8bfd9469cef536f171e6666f9d9217192e09d161;p=vim

patch 8.1.0935: old regexp engine may use invalid buffer

Problem:    Old regexp engine may use invalid buffer for 'iskeyword' or
            uninitialized buffer pointer. (Kuang-che Wu)
Solution:   Set rex.reg_buf when compiling the pattern. (closes #3972)
---

diff --git a/src/regexp.c b/src/regexp.c
index 30a604b23..836204895 100644
--- a/src/regexp.c
+++ b/src/regexp.c
@@ -7998,6 +7998,8 @@ vim_regcomp(char_u *expr_arg, int re_flags)
     bt_regengine.expr = expr;
     nfa_regengine.expr = expr;
 #endif
+    // reg_iswordc() uses rex.reg_buf
+    rex.reg_buf = curbuf;
 
     /*
      * First try the NFA engine, unless backtracking was requested.
diff --git a/src/testdir/test_regexp_latin.vim b/src/testdir/test_regexp_latin.vim
index 09104a142..d63b4f958 100644
--- a/src/testdir/test_regexp_latin.vim
+++ b/src/testdir/test_regexp_latin.vim
@@ -104,3 +104,19 @@ func Test_get_equi_class()
   s/^/[[=
   call assert_equal(1, search(getline(1)))
 endfunc
+
+func Test_rex_init()
+  set noincsearch
+  set re=1
+  new
+  setlocal iskeyword=a-z
+  call setline(1, ['abc', 'ABC'])
+  call assert_equal(1, search('[[:keyword:]]'))
+  new
+  setlocal iskeyword=A-Z
+  call setline(1, ['abc', 'ABC'])
+  call assert_equal(2, search('[[:keyword:]]'))
+  bwipe!
+  bwipe!
+  set re=0
+endfunc
diff --git a/src/version.c b/src/version.c
index dbf408341..8dd86f0b0 100644
--- a/src/version.c
+++ b/src/version.c
@@ -779,6 +779,8 @@ static char *(features[]) =
 
 static int included_patches[] =
 {   /* Add new patch number below this line */
+/**/
+    935,
 /**/
     934,
 /**/