Re: Bash 5.2.21 segfaults when I feed it garbage

[Grisha Levit]

On Fri, Jan 12, 2024, 15:29 Chet Ramey <chet.ramey@case.edu> wrote:

> On 1/10/24 2:06 PM, Grisha Levit wrote:
>
> > Rewriting the original report as:
> >
> >      bash <<<'((X=([))'
> >
> > even after the last fix, there's still a similar issue with input like:
> >
> >      bash <<<'((X=([))]'
>
> Thanks for the report. I debated whether or not to do error handling before
> restoring the parser state; this makes up my mind.
>

See also (even after the fix pushed today):

    bash -c '(( X=([))])'
    heap-use-after-free parse.y:2712:60 in shell_getc

    bash -c '(( X=([))]) ))'
    heap-use-after-free parse.y:2077:11 in parser_expanding_alias

>