On Fri, Jan 12, 2024, 15:29 Chet Ramey <chet.ra...@case.edu> wrote: > On 1/10/24 2:06 PM, Grisha Levit wrote: > > > Rewriting the original report as: > > > > bash <<<'((X=([))' > > > > even after the last fix, there's still a similar issue with input like: > > > > bash <<<'((X=([))]' > > Thanks for the report. I debated whether or not to do error handling before > restoring the parser state; this makes up my mind. >
See also (even after the fix pushed today): bash -c '(( X=([))])' heap-use-after-free parse.y:2712:60 in shell_getc bash -c '(( X=([))]) ))' heap-use-after-free parse.y:2077:11 in parser_expanding_alias >