URL: <https://savannah.gnu.org/bugs/?67238>
Summary: Segmentation fault due to invalid struct field access in parse.y Group: The GNU Bourne-Again SHell Submitter: bkallus Submitted: Tue 24 Jun 2025 09:44:31 PM GMT Category: None Severity: 3 - Normal Item Group: None Status: None Privacy: Public Assigned to: None Open/Closed: Open Discussion Lock: Any _______________________________________________________ Follow-up Comments: ------------------------------------------------------- Date: Tue 24 Jun 2025 09:44:31 PM GMT By: bkallus <bkallus> There's a bug in parse.y that causes `bash -c` to dereference 0xcfcfcfcfcfcfcfcf on certain inputs, such as `bash -c '((i=(<))'`. Attached is a Dockerfile that reproduces the bug, as well as a backtrace. Platform: Linux peachpit 6.12.32-1-lts #1 SMP PREEMPT_DYNAMIC Wed, 04 Jun 2025 14:14:48 +0000 x86_64 GNU/Linux _______________________________________________________ File Attachments: ------------------------------------------------------- Name: backtrace.txt Size: 2KiB <https://file.savannah.gnu.org/file/backtrace.txt?file_id=57323> ------------------------------------------------------- Name: Dockerfile Size: 326B <https://file.savannah.gnu.org/file/Dockerfile?file_id=57324> AGPL NOTICE These attachments are served by Savane. You can download the corresponding source code of Savane at https://savannah.gnu.org/source/savane-ef91de49e2976f6d280ab934c829bfe625128396.tar.gz _______________________________________________________ Reply to this item at: <https://savannah.gnu.org/bugs/?67238> _______________________________________________ Message sent via Savannah https://savannah.gnu.org/
signature.asc
Description: PGP signature