On 10/5/26 5:13 PM, abderrahmane sebban wrote:
Hi Chet,

Patch 19 (commit 549639c) changed legal_variable_starter() in general.h
to index sh_syntaxtab[] directly, but without the (unsigned char) cast
that the sibling macros in syntax.h use (shellmeta, shellbreak, shellquote).

The one caller that passes a signed char without pre-casting --
subst.c:9798 in parameter_brace_expand() -- now reads out of bounds of
sh_syntaxtab[] for any input byte in 0x80-0xFF.

Thanks for the report. This is identical to

https://lists.gnu.org/archive/html/bug-bash/2026-08/msg00025.html

which was fixed in the devel branch back in August.

Chet

--
``The lyf so short, the craft so long to lerne.'' - Chaucer
                 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, UTech, CWRU    [email protected]    http://tiswww.cwru.edu/~chet/

Reply via email to