Hi,
An explicit null deference happens in /ext/ereg/regex/regcomp.c:
140 g->setbits = NULL;
then this is called:
167 categorize(p, g);
which does this:
1326 if (cats[c] == 0 && isinsets(g, c)) {
And then the isinsets function does this:
1279 for (i = 0, col = g->setbits; i < ncols; i++, col += g->csetsize)
1280 if (col[uc] != 0)
1281 return(1);
which will cause a crash.
Thanks,
