Don't recurse into op_size() on op->pmnext.
authorNicholas Clark <nick@ccl4.org>
Sun, 8 May 2011 07:38:02 +0000 (09:38 +0200)
committerNicholas Clark <nick@ccl4.org>
Mon, 9 May 2011 19:50:01 +0000 (21:50 +0200)
commit0914842a8e0fe4df89aa9a872dc6d2ddd414cd86
tree33970b7d5c7f313407c78056d53d6431c2d5e028
parent811a099c10b876edcc1167a58cf80bf42bc5eb4c
Don't recurse into op_size() on op->pmnext.

It doesn't point to an OP owned by the current OP - it is used to form a linked
list that reset uses to find regexps to reset. Moreover, prior to 5.8.0 it can
end up pointing to freed memory, which results in much jollity.
[Bug 20010301.005, a.k.a. RT #5935, fixed in cb55de95c99e4650]
Size.xs