[perl #32332] Perl segfaults; test case available

sub f { s/$var/f()/e } could free the wrong RE

p4raw-id: //depot/perl@28251

1 files changed, 1 insertions, 2 deletions

diff --git a/pp_ctl.c b/pp_ctl.c
index 55ffb1933b..baed3fda58 100644
--- a/pp_ctl.c
+++ b/pp_ctl.c
@@ -197,7 +197,7 @@ PP(pp_substcont)
     if(old != rx) {
 	if(old)
 	    ReREFCNT_dec(old);
-	PM_SETRE(pm,rx);
+	PM_SETRE(pm,ReREFCNT_inc(rx));
     }
 
     rxres_restore(&cx->sb_rxres, rx);
@@ -256,7 +256,6 @@ PP(pp_substcont)
 	    SvTAINT(targ);
 
 	    LEAVE_SCOPE(cx->sb_oldsave);
-	    ReREFCNT_dec(rx);
 	    POPSUBST(cx);
 	    RETURNOP(pm->op_next);
 	}