Re: Heap buffer overread in extract_delimited_string

2018-02-21 Thread Chet Ramey
On 2/20/18 2:39 PM, jer...@feusi.co wrote: > Bash Version: 4.4 > Patch Level: 19 > Release Status: release > > Description: > When calling bash -e (where is the attached file) a heap > buffer overread occurs in extract_delimited_string at subst.c:1335. Thanks for the report. This was fi

Re: Heap buffer overread in token_is_assignment

2018-02-21 Thread Chet Ramey
On 2/20/18 3:07 PM, jer...@feusi.co wrote: > Bash Version: 4.4 > Patch Level: 19 > Release Status: release > > Description: > When calling bash -e (where is the attached file) a heap > buffer overread occurs in token_is_assignment at parse.y:4657 ( Thanks for the report. This was fixed b

Re: Heap buffer overread in get_exitstat

2018-02-21 Thread Chet Ramey
On 2/20/18 3:42 PM, jer...@feusi.co wrote: > Bash Version: 4.4 > Patch Level: 19 > Release Status: release > > Description: > When calling bash -e (where is a file conaining > the string "exit -"), a heap buffer overread of size 1 in > builtins/common.c:505 occurs. Thanks for

Re: bash completion crash

2018-02-21 Thread Chet Ramey
On 2/20/18 3:15 PM, Justin Pryzby wrote: > Bash Version: 4.1 > Patch Level: 2 > Release Status: release > > Description: > SIGABRT during readline completion. > > Repeat-By: > Unable to reproduce It's likely that this has been fixed in the eight years since bash-4.1 was released

Re: Heap buffer overread in token_is_assignment

2018-02-21 Thread Chet Ramey
On 2/20/18 4:36 PM, Eduardo Bustamante wrote: > Hi Jeremy. I see that you're fuzzing against 4.4.19. I did a bunch of > fuzzing work last year (mainly in the parser code and readline), so > some of these issues might be fixed already in git. I fixed all of the bugs Eduardo's fuzzing uncovered, s