If you run a simple command that runs something (not just assignments)
and contains an assignment word with ${|;} that is preceeded by at least
one other assignment word, bash segfaults.
Reproducible with a= b=${|:;} :
$ gdb --args ./bash -c 'a= b=${|:;} :'
Reading symbols from ./bash...
(gdb) r
Starting program: /home/emanuele6/git/bash/bash -c a=\ b=\$\{\|:\;\}\ :
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib64/libthread_db.so.1".
Program received signal SIGSEGV, Segmentation fault.
0x00005555555e2c8d in hash_search (string=string@entry=0x555555769e50 "b",
table=table@entry=0x55555577a0d0, flags=flags@entry=0) at hashlib.c:249
249 for (list = table->bucket_array ? table->bucket_array[bucket] : 0;
list; list = list->next)
(gdb) bt
#0 0x00005555555e2c8d in hash_search (string=string@entry=0x555555769e50 "b",
table=table@entry=0x55555577a0d0, flags=flags@entry=0) at hashlib.c:249
#1 0x00005555555b5673 in hash_lookup (name=0x555555769e50 "b",
hashed_vars=<optimized out>) at variables.c:1933
#2 assign_in_env (word=<optimized out>, flags=1) at variables.c:3616
#3 0x00005555555c895b in do_assignment_statements (varlist=<optimized out>,
command=<optimized out>, is_nullcmd=is_nullcmd@entry=0) at subst.c:13136
#4 0x00005555555e21b7 in expand_word_list_internal (list=<optimized out>,
eflags=31) at subst.c:13240
#5 expand_words (list=<optimized out>) at subst.c:12552
#6 0x00005555555a976a in execute_simple_command
(simple_command=0x555555776490, pipe_in=-1, pipe_out=-1, async=0,
fds_to_close=0x555555776650) at execute_cmd.c:4617
#7 execute_command_internal (command=<optimized out>,
asynchronous=asynchronous@entry=0, pipe_in=pipe_in@entry=-1,
pipe_out=pipe_out@entry=-1, fds_to_close=fds_to_close@entry=0x555555776650) at
execute_cmd.c:938
#8 0x00005555556108f9 in parse_and_execute (string=<optimized out>,
from_file=from_file@entry=0x55555566e080 "-c", flags=flags@entry=20) at
evalstring.c:567
#9 0x000055555558ad9a in run_one_command (command=0x7fffffffde61 "a= b=${|:;}
:") at shell.c:1483
#10 0x0000555555589b26 in main (argc=3, argv=0x7fffffffda98,
env=0x7fffffffdab8) at shell.c:768
o/
emanuele6
