Skip to content

Commit

Permalink
Fix #2782: heap-use-after-free in expand.cpp
Browse files Browse the repository at this point in the history
Selector stack got popped during eval, resulting in `extender` deletion.
  • Loading branch information
glebm authored and xzyfer committed Dec 6, 2018
1 parent ace6628 commit b21fb9f
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/expand.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -640,7 +640,7 @@ namespace Sass {

Statement* Expand::operator()(Extension_Ptr e)
{
if (Selector_List_Ptr extender = selector()) {
if (Selector_List_Obj extender = selector()) {
Selector_List_Ptr sl = e->selector();
// abort on invalid selector
if (sl == NULL) return NULL;
Expand Down

0 comments on commit b21fb9f

Please sign in to comment.