On 1/25/24 3:23 AM, Grisha Levit wrote:
If currently_executing_command was a subshell, it can end up freed by
the time executing_line_number checks it.
Thanks for the report. The fix is to have function_substitute save and
restore this, since parse_and_execute can overwrite it.
Chet
--
``The
If currently_executing_command was a subshell, it can end up freed by
the time executing_line_number checks it.
$ bash-asan -c '${ (:); }/'
=
ERROR: AddressSanitizer: heap-use-after-free on address 0x000106208a40
at pc 0x000102c8bf38