Re: Segmentation fault in lib/readline/text.c rl_change_case

2019-01-31 Thread Chet Ramey
On 1/6/19 9:25 PM, Eduardo A. Bustamante López wrote: > I found the issue with AFL (http://lcamtuf.coredump.cx/afl/). > > The crash itself happens due to the following: > > dualbus@system76-pc:~/src/gnu/bash$ cat -n lib/readline/text.c | sed -n > '1455,1460p' > 1455 mlen =

Segmentation fault in lib/readline/text.c rl_change_case

2019-01-06 Thread Eduardo A . Bustamante López
I found the issue with AFL (http://lcamtuf.coredump.cx/afl/). The crash itself happens due to the following: dualbus@system76-pc:~/src/gnu/bash$ cat -n lib/readline/text.c | sed -n '1455,1460p' 1455mlen = wcrtomb (mb, nwc, &mps); // <- mlen is -1, due to `nwc' being an inval