Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > gnu.bash.bug > #14416

segfault with ${var[@]@A}

Show all headers | View raw

If `var' is declared but not set, performing an @A or @a
transformation on double-quoted `var[@]' or `var[*]' will trigger a
segfault in dequote_string.

This is present in 4.4 and devel.

    bash -c 'declare var; echo "${var[@]@A}"'
    Segmentation fault: 11

This seems like the easy fix:

diff --git a/subst.c b/subst.c
index dbb38fae..2ae4a1ec 100644
--- a/subst.c
+++ b/subst.c
@@ -7320,7 +7320,7 @@ get_var_and_type (varname, value, ind, quoted,
flags, varp, valp)
          vtype = VT_VARIABLE;
          *varp = v;
          if (quoted & (Q_DOUBLE_QUOTES|Q_HERE_DOCUMENT))
-           *valp = dequote_string (value);
+           *valp = value ? dequote_string (value) : savestring("");
          else
            *valp = dequote_escapes (value);
        }

Back to gnu.bash.bug | Previous | Next | Find similar | Unroll thread

Thread

segfault with ${var[@]@A} Grisha Levit <grishalevit@gmail.com> - 2018-07-29 17:49 -0400

csiph-web