Subject: bug#58042: 29.0.50; ASAN use-after-free in re_match_2_internal

From: Eli Zaretskii <[email-masked]>
Date: Sun, 25 Sep 2022 11:43:48 +0300

> From: Gerd Möllmann <[email-masked]>
> Cc: [email-masked]
> Date: Sun, 25 Sep 2022 10:28:48 +0200
> 
> So, the question seems to be what scenario would create a live string
> that points into a freed sdata struct.

That sounds highly improbable to me.  But stranger things have
happened...