fixing overrelease and out-of-bounds write, fixes #13725

[wxWidgets.git] / src / common / string.cpp

diff --git a/src/common/string.cpp b/src/common/string.cpp
index 4798b67c9c3ea58e54718de03075c502fd6d521c..3dea38ec671f18cb97e66c8eef8c9247224178f6 100644 (file)
--- a/src/common/string.cpp
+++ b/src/common/string.cpp
@@ -1436,7 +1436,7 @@ size_t wxString::Replace(const wxString& strOld,
     }
     else if ( !bReplaceAll)
     {
-        size_t pos = m_impl.find(strOld, 0);
+        size_t pos = m_impl.find(strOld.m_impl, 0);
         if ( pos != npos )
         {
             m_impl.replace(pos, strOld.m_impl.length(), strNew.m_impl);