From 946a492745a282411908a9d0611cc442bb4a1221 Mon Sep 17 00:00:00 2001
From: atlaua <luchsmail-gh@yahoo.com>
Date: Thu, 29 Sep 2011 18:54:32 +0200
Subject: [PATCH] Bugfix: Fixed a segmentation fault in confirm_ui()

confirm_ui() free()ed its msg. This resulted in attemps to free const
strings or and to invalid memoory accesses (because some other functions
wanted to reuse the parameter which they gave to confirm_ui() after
calling this function).

Resolved by removing the call to free() from confirm_ui() and adding it
after the calls to confirm_ui(9, if necessary.
---
 src/interface.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/interface.c b/src/interface.c
index 8bfaa3b3c..6998a9424 100644
--- a/src/interface.c
+++ b/src/interface.c
@@ -1104,8 +1104,6 @@ int confirm_ui(pixel *vid_buf, char *top, char *msg, char *btn)
 			break;
 	}
 
-	free(msg);
-
 	while (!sdl_poll())
 	{
 		b = SDL_GetMouseState(&mx, &my);
@@ -5568,6 +5566,8 @@ int save_filename_ui(pixel *vid_buf)
 					}
 				}
 				fclose(f);
+
+				free(filename);
 				
 			}
 		}