Re: use-after-free in read_token_word

Also in parse_matched_pair: diff --git a/parse.y b/parse.y index 0a8c039a..1001ac1b 100644 --- a/parse.y +++ b/parse.y @@ -3906,14 +3906,13 @@ parse_matched_pair (int qc, int open, int close, size_t *lenp, int flags) /* Locale expand $"..." here. */ /* PST_NOEXPAND */ ttrans = locale_e

use-after-free in read_token_word

./bash --norc -O noexpand_translation -in <<<'$":"' =ERROR: AddressSanitizer: heap-use-after-free on address 0x000108102b40 READ of size 1 thread T0 #0 read_token_word parse.y:5236 #1 read_token parse.y:3618 freed by thread T0 here: #1 read_token_word parse.y:5231 #2 read_token pa