oh wow, this is nice:
#define get_job_by_jid(ind) (jobs[(ind)]) 155 if ((job == NO_JOB) || jobs == 0 || get_job_by_jid (job) == 0) definitely this if needs looking into. cheers, pg On 11 Jul 2018, at 15:41, Simon Wörner wrote: > Dear all, > The following crash was found by a modified > version of the kAFL fuzzer (https://github.com/RUB-SysSec/kAFL). > > The crash can be reproduced by running: > $ ls > $ jobs 4278190079 # 2^32-2 > > We can the crash for > - GNU bash, version 4.4.19(1)-release (x86_64-pc-linux-gnu) > - GNU bash, version 4.4.23(2) (x86_64-unknown-linux-gnu) > - git master branch (commit 64447609994bfddeef1061948022c074093e9a9f) > - git devel branch (commit a078e04c3d9163541cce590c3fd00f243fe77613) > > Credits: Simon Wörner, Sergej Schumilo, Cornelius Aschermann (all of > Ruhr-Universität Bochum) > > Best regards, > Simon Wörner > >
