realloc_jobs_list() in bash 3.1 doesn't zero out the unused entries of
the jobs[] array, so bash may segfault later when trying to dereference
these entries. A reliable way to reproduce the segfault, at least on
i386 linux, is
% seq 0 1 | while read line; do /bin/echo $line ; done | tail -2
40
On Friday 03 February 2006 17:50, Jan Niehusmann wrote:
> realloc_jobs_list() in bash 3.1 doesn't zero out the unused entries of
> the jobs[] array, so bash may segfault later when trying to dereference
> these entries.
this has already been reported & fixed, download patch #7 for bash-3.1
-mike
