Fix Use-After-Free issue for Regexp

Co-authored-by: Isaac Peka <[email protected]>
github · Apr 22, 2024 · c38fc1b · c38fc1b
1 parent 7227b85
commit c38fc1b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/regexec.c b/regexec.c
@@ -3435,8 +3435,8 @@ match_at(regex_t* reg, const UChar* str, const UChar* end,
     CASE(OP_MEMORY_END_PUSH_REC)  MOP_IN(OP_MEMORY_END_PUSH_REC);
       GET_MEMNUM_INC(mem, p);
       STACK_GET_MEM_START(mem, stkp); /* should be before push mem-end. */
-      STACK_PUSH_MEM_END(mem, s);
       mem_start_stk[mem] = GET_STACK_INDEX(stkp);
+      STACK_PUSH_MEM_END(mem, s);
       MOP_OUT;
       JUMP;