Path: csiph.com!goblin1!goblin.stu.neva.ru!usenet.stanford.edu!not-for-mail
From: Piotr Grzybowski <narsil.pl@gmail.com>
Newsgroups: gnu.bash.bug
Subject: Re: Crash on jobs 2^32-2
Date: Wed, 11 Jul 2018 16:05:42 +0200
Lines: 38
Approved: bug-bash@gnu.org
Message-ID: <mailman.3428.1531317955.1292.bug-bash@gnu.org>
References: <031c3198-c85d-f2d9-8071-2b3b1a8793ef@rub.de>
NNTP-Posting-Host: lists.gnu.org
Mime-Version: 1.0 (Apple Message framework v1085)
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: bug-bash@gnu.org
To: =?iso-8859-1?Q?Simon_W=F6rner?= <simon.woerner@rub.de>
Envelope-to: bug-bash@gnu.org
In-Reply-To: <031c3198-c85d-f2d9-8071-2b3b1a8793ef@rub.de>
Precedence: list
Xref: csiph.com gnu.bash.bug:14330


 oh wow, this is nice:

#define get_job_by_jid(ind) (jobs[(ind)])

155           if ((job =3D=3D NO_JOB) || jobs =3D=3D 0 || get_job_by_jid =
(job) =3D=3D 0)

definitely this if needs looking into.

cheers,
pg

On 11 Jul 2018, at 15:41, Simon W=F6rner wrote:

> Dear all,
> The following crash was found by a modified
> version of the kAFL fuzzer (https://github.com/RUB-SysSec/kAFL).
>=20
> The crash can be reproduced by running:
> $ ls
> $ jobs 4278190079 # 2^32-2
>=20
> We can the crash for
> - GNU bash, version 4.4.19(1)-release (x86_64-pc-linux-gnu)
> - GNU bash, version 4.4.23(2) (x86_64-unknown-linux-gnu)
> - git master branch (commit 64447609994bfddeef1061948022c074093e9a9f)
> - git devel branch (commit a078e04c3d9163541cce590c3fd00f243fe77613)
>=20
> Credits: Simon W=F6rner, Sergej Schumilo, Cornelius Aschermann (all of
> Ruhr-Universit=E4t Bochum)
>=20
> Best regards,
> Simon W=F6rner
>=20
>=20