Fix http://bugs.busybox.net/view.php?id=826 in which "(echo; echo) | sed x"

crashes because the empty state of the hold space is NULL but the empty
state of the pattern space is "".

1 files changed, 1 insertions, 1 deletions

diff --git a/editors/sed.c b/editors/sed.c
index 219a44008..ed584e5df 100644
--- a/editors/sed.c
+++ b/editors/sed.c
@@ -1054,7 +1054,7 @@ restart:
                                         case 'x': /* Exchange hold and pattern space */
                                         {
                                                 char *tmp = pattern_space;
-                                                pattern_space = bbg.hold_space;
+                                                pattern_space = bbg.hold_space ? : xzalloc(1);
                                                 no_newline=0;
                                                 bbg.hold_space = tmp;
                                                 break;