Question: is this a bug in BASh (pre-exec trap)

2016-09-09 Thread Matthew Giassa
Good day, I've been doing some testing with the bash-prexec script which uses a DEBUG trap to issue user-supplied functions before executing each command (https://github.com/rcaloras/bash-preexec). Here is a minimal working example (https://github.com/rcaloras/bash-preexec/issues/25) which cause

Re: heap-use-after-free in GNU Bash 4.4.0

2016-09-09 Thread Andreas Schwab
On Sep 09 2016, Franco Costantini wrote: > We tested this issue on Ubuntu 14.04.5 (x86_64) but other configurations > could be affected. To reproduce it, compilation with Address Sanitizer is > required: valgrind also finds the same error. Andreas. -- Andreas Schwab, sch...@linux-m68k.org GPG

heap-use-after-free in GNU Bash 4.4.0

2016-09-09 Thread Franco Costantini
Hi, we recently found an invalid memory access parsing and executing fuzzed bash code in GNU Bash 4.4.0 (bash-20160826 snapshot, found in http://git.savannah.gnu.org/cgit/bash.git/commit/?h=devel&id=79eedac429c5112ae65a430674de5e4be1cd5444 ). We tested this issue on Ubuntu 14.04.5 (x86_64) but oth