diff options
| author | jan.nijtmans <jan.nijtmans@noemail.net> | 2012-12-27 14:41:15 (GMT) |
|---|---|---|
| committer | jan.nijtmans <jan.nijtmans@noemail.net> | 2012-12-27 14:41:15 (GMT) |
| commit | 4a2e7c7103a09e0af5cba879be7adb6885556aeb (patch) | |
| tree | 291afd92fb75aa7117ad7fb895bc76a93c0c978c /generic/tclListObj.c | |
| parent | cf7b247fb99734c43793cdd3ff6c6009acf0ba88 (diff) | |
| download | tcl-4a2e7c7103a09e0af5cba879be7adb6885556aeb.zip tcl-4a2e7c7103a09e0af5cba879be7adb6885556aeb.tar.gz tcl-4a2e7c7103a09e0af5cba879be7adb6885556aeb.tar.bz2 | |
[Bug 3598580]: Tcl_ListObjReplace may release deleted elements too earl
FossilOrigin-Name: a87c1542ffb0f342bb66a94e5514e4477055e20e
Diffstat (limited to 'generic/tclListObj.c')
| -rw-r--r-- | generic/tclListObj.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/generic/tclListObj.c b/generic/tclListObj.c index fffe6a2..b4af98a 100644 --- a/generic/tclListObj.c +++ b/generic/tclListObj.c @@ -655,6 +655,10 @@ Tcl_ListObjReplace(interp, listPtr, first, count, objc, objv) count = 0; } + for (i = 0; i < objc; i++) { + Tcl_IncrRefCount(objv[i]); + } + numRequired = (numElems - count + objc); if (numRequired <= listRepPtr->maxElemCount) { /* @@ -689,7 +693,6 @@ Tcl_ListObjReplace(interp, listPtr, first, count, objc, objv) for (i = 0, j = first; i < objc; i++, j++) { elemPtrs[j] = objv[i]; - Tcl_IncrRefCount(objv[i]); } /* @@ -745,7 +748,6 @@ Tcl_ListObjReplace(interp, listPtr, first, count, objc, objv) for (i = 0, j = first; i < objc; i++, j++) { newPtrs[j] = objv[i]; - Tcl_IncrRefCount(objv[i]); } listRepPtr->elemCount = numRequired; |