Re: crash caused by FreeConditionMask()

[Viktor Griph]

On Tue, 7 Aug 2007, Daniel Vrcic wrote:

Hi list.
I've following condition that I'm using in some of my conditional
commands

        (CurrentPage, !Iconic, !ktray)

that is causing the crash due the free'ing of invalid pointer that is
triggered on

        free(p->name - (pp->invert ? 1 : 0));

line.

In the previous snapshot I used - 20070630, p->name - 1 would point to
"!ktray" string, but in the recent one it's just non valid address
probably due the changes in CreateConditionMask().

That's correct. With the changes in CreateConditionMask() the name will 
always be allocated, and not the full condition.

Please, fix this.

fixed

/Viktor