Re: segfault in extract_delimited_string () at subst.c:1291 (bash 4.4.0(1)-beta)

From	Chet Ramey <chet.ramey@case.edu>
Newsgroups	gnu.bash.bug
Subject	Re: segfault in extract_delimited_string () at subst.c:1291 (bash 4.4.0(1)-beta)
Date	2015-09-19 18:22 -0400
Organization	ITS, Case Western Reserve University
Message-ID	<mailman.1420.1442701347.19560.bug-bash@gnu.org> (permalink)
References	<CANMVOuzGiZzFEC-OP=3Uw=FUab06qg4DZY+fG4L4aLCeJgxKig@mail.gmail.com>

Show all headers | View raw

On 9/19/15 12:22 PM, Brian Carpenter wrote:
> While fuzzing bash 4.4.0(1)-beta compiled from the devel branch, I found a
> 'script' that causes a segfault. The attached also crashes bash
> 4.2.37(1)-release. The file is 1012B in size and I was unable to minimize
> it any further using the afl-tmin tool that comes with the AFL fuzzer.

Thanks for the report.  This doesn't crash my latest devel version, but
I will look and see if there's a different bug to fix.

Chet

-- 
``The lyf so short, the craft so long to lerne.'' - Chaucer
		 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, ITS, CWRU    chet@case.edu    http://cnswww.cns.cwru.edu/~chet/

Back to gnu.bash.bug | Previous | Next | Find similar

Thread

Re: segfault in extract_delimited_string () at subst.c:1291 (bash 4.4.0(1)-beta) Chet Ramey <chet.ramey@case.edu> - 2015-09-19 18:22 -0400

csiph-web