Re: '=~' crash on NetBSD

From	Chet Ramey <chet.ramey@case.edu>
Newsgroups	gnu.bash.bug
Subject	Re: '=~' crash on NetBSD
Date	2020-05-07 11:01 -0400
Organization	ITS, Case Western Reserve University
Message-ID	<mailman.2359.1588863686.3066.bug-bash@gnu.org> (permalink)
References	<9f5a02eb-6e79-e369-5106-579060a6f946@inlv.org> <5278b79b-f4ed-96b7-248a-6f5d86d5fde1@case.edu> <9c7b0e18-932a-6d98-8784-9dbb6ad8eea6@inlv.org> <702f219f-a08d-fb45-fa49-ddafa97267e0@case.edu>

Show all headers | View raw

On 5/7/20 10:55 AM, Martijn Dekker wrote:
> Op 07-05-20 om 14:20 schreef Chet Ramey:
>> On 5/6/20 2:08 PM, Martijn Dekker wrote:
>>> On NetBSD, bash (all versions, including current git) dumps core when using
>>> [[ to match against an ERE containing certain UTF-8 characters, for
>>> example, É ($'\303\211').
>>>
>>> | $ bin/bash-5.0-debug -c "[[ c =~ $'\303\211' ]]"
>>> |
>>> | malloc: unknown:0: assertion botched
>>> | malloc: 0x81ba08: allocated: last allocated from unknown:0
>>> | free: start and end chunk sizes differ
>>> | Aborting...Abort trap (core dumped)
>>
>> What version of NetBSD? I don't run NetBSD, and I can't reproduce this on
>> other platforms, so I'll have to go searching for something.
> 
> Sorry about that omission. I've tested NetBSD 8.0, 8.1 and 9.0 (all amd64)
> and the bug occurs on all of these.

It dies in regfree(). The pattern is correct at entry ("\303\211"), and
none of the allocations and frees in sh_regmatch fail. I'm calling it a
NetBSD bug.

-- 
``The lyf so short, the craft so long to lerne.'' - Chaucer
		 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, UTech, CWRU    chet@case.edu    http://tiswww.cwru.edu/~chet/

Back to gnu.bash.bug | Previous | Next | Find similar

Thread

Re: '=~' crash on NetBSD Chet Ramey <chet.ramey@case.edu> - 2020-05-07 11:01 -0400

csiph-web