Path: csiph.com!xmission!news.glorb.com!usenet.stanford.edu!not-for-mail
From: isabella parakiss <izaberina@gmail.com>
Newsgroups: gnu.bash.bug
Subject: segfault when indirectly expanding negative numbers
Date: Wed, 12 Aug 2015 21:52:01 +0200
Lines: 8
Approved: bug-bash@gnu.org
Message-ID: <mailman.8222.1439409126.904.bug-bash@gnu.org>
NNTP-Posting-Host: lists.gnu.org
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
X-Trace: usenet.stanford.edu 1439409126 21339 208.118.235.17 (12 Aug 2015 19:52:06 GMT)
X-Complaints-To: action@cs.stanford.edu
To: bug-bash <bug-bash@gnu.org>
Envelope-to: bug-bash@gnu.org
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=X1cjt1UqvmpA0FXVYdDvTNqvHO/eNMI9KnYRzasFVos=; b=MCZRfzVdR3uhdax7XoDxTAQFAGVSuhimpjzORa63/RSuiOhwszVOvDQw/UHdKEOC8r FrVzdtWEwCdioqhMjKabM3BtrvfM5Lf8anq4DK3H/DmCPFsOTkKG/HoTINbS09cYlIwm 0toeFIuGww7Qz4qwpo3Qrn90N/yTprYACKfg0HicHCxv8C0LqLmPvEoVHi7nGQNr11oX Em3PjHuZ8e3grZTgrfcA+IIl6dKUvUZRqQwDwZ7ztlopv3ve9CgC84RCIZ5m8BZE+2Eo tvfV1cIKTdNrrl5WpmkjvrJ8cnVPlfS0ZfFKVoFKzDftPfPYYYiY0RH+roLi+5GaD60X 8aRA==
X-Received: by 10.107.163.11 with SMTP id m11mr34574782ioe.31.1439409121883; Wed, 12 Aug 2015 12:52:01 -0700 (PDT)
X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value).
X-Received-From: 2607:f8b0:4001:c06::235
X-BeenThere: bug-bash@gnu.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: Bug reports for the GNU Bourne Again SHell <bug-bash.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/bug-bash>, <mailto:bug-bash-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/bug-bash>
List-Post: <mailto:bug-bash@gnu.org>
List-Help: <mailto:bug-bash-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/bug-bash>, <mailto:bug-bash-request@gnu.org?subject=subscribe>
Xref: csiph.com gnu.bash.bug:11333

Bash segfaults when trying to do this: x=-3; echo ${!x}
Here's the backtrace from gdb: https://gist.github.com/306f16a358527b267a1e
It looks like the problem is the savestring macro when ind is negative.


---
xoxo iza