Path: csiph.com!xmission!news.snarked.org!news.linkpendium.com!news.linkpendium.com!panix!usenet.stanford.edu!not-for-mail
From: "" <kfm@plushkava.net>
Newsgroups: gnu.bash.bug
Subject: Large compound commands resulting in a segfault
Date: Fri, 21 Jun 2019 20:22:46 +0100
Lines: 16
Approved: bug-bash@gnu.org
Message-ID: <mailman.608.1561150003.10840.bug-bash@gnu.org>
References: <20190621202246.18fcb57ce720acc9095d3e0f@plushkava.net>
NNTP-Posting-Host: lists.gnu.org
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
To: bug-bash@gnu.org
Envelope-to: bug-bash@gnu.org
Precedence: list
Xref: csiph.com gnu.bash.bug:15064

Hi, 

The following script generates a compound command consisting of many instances of the : command. I have found that it reproducibly induces a segfault in all versions of bash from 2 onwards. I tested various other shells - several more than are implied here - all of which could handle the generated code without issue.

#!/bin/bash
shells=('busybox sh' dash posh ksh mksh bash)
code=$(printf '{ '; printf '%.s:; ' {1..50000}; printf '}')
for shell in "${shells[@]}"; do
    type "${shell%% *}" &>/dev/null || continue
    echo "testing: $shell"
    echo "$code" | $shell || echo "$shell failed"
done

-- 
Kerin Millar <kfm@plushkava.net>