Bug 1147581

Summary: [abrt] bash: list_reverse(): bash killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Victor Stinner <victor.stinner>
Component: bashAssignee: Ondrej Oprala <ooprala>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 20CC: admiller, ooprala, ovasik
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/ea6536a397aa37e260c0073fbd41458ad653082e
Whiteboard: abrt_hash:a67163419f31e5ec13621d5a35fbb04a44f4d375
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-01-16 16:53:22 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages none

Description Victor Stinner 2014-09-29 14:18:54 UTC
Description of problem:
I just tried this example found on the Internet:

$ bash -c 'true <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF'
Erreur de segmentation (core dumped)

Version-Release number of selected component:
bash-4.2.47-3.fc20

Additional info:
reporter:       libreport-2.2.3
backtrace_rating: 4
cmdline:        bash -c 'true <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF'
crash_function: list_reverse
executable:     /usr/bin/bash
kernel:         3.14.8-200.fc20.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (6 frames)
 #0 list_reverse at list.c:70
 #1 clean_simple_command at make_cmd.c:866
 #2 yyparse at ./parse.y:729
 #3 parse_command at eval.c:229
 #4 parse_and_execute at evalstring.c:252
 #5 run_one_command at shell.c:1325

Comment 1 Victor Stinner 2014-09-29 14:18:57 UTC
Created attachment 942337 [details]
File: backtrace

Comment 2 Victor Stinner 2014-09-29 14:18:58 UTC
Created attachment 942338 [details]
File: cgroup

Comment 3 Victor Stinner 2014-09-29 14:18:59 UTC
Created attachment 942339 [details]
File: core_backtrace

Comment 4 Victor Stinner 2014-09-29 14:19:00 UTC
Created attachment 942340 [details]
File: dso_list

Comment 5 Victor Stinner 2014-09-29 14:19:02 UTC
Created attachment 942341 [details]
File: environ

Comment 6 Victor Stinner 2014-09-29 14:19:03 UTC
Created attachment 942342 [details]
File: exploitable

Comment 7 Victor Stinner 2014-09-29 14:19:04 UTC
Created attachment 942343 [details]
File: limits

Comment 8 Victor Stinner 2014-09-29 14:19:05 UTC
Created attachment 942344 [details]
File: maps

Comment 9 Victor Stinner 2014-09-29 14:19:06 UTC
Created attachment 942345 [details]
File: open_fds

Comment 10 Victor Stinner 2014-09-29 14:19:07 UTC
Created attachment 942346 [details]
File: proc_pid_status

Comment 11 Victor Stinner 2014-09-29 14:19:08 UTC
Created attachment 942347 [details]
File: var_log_messages

Comment 12 Ondrej Oprala 2015-01-16 16:53:22 UTC
Hey, this should be fixed already. Please reopen this bug if you're still experiencing this issue.

Comment 13 Victor Stinner 2015-01-16 16:58:41 UTC
I cannot reproduce this issue on Fedora 21 with this version of bash:
GNU bash, version 4.3.33(1)-release (x86_64-redhat-linux-gnu)

Thanks for the fix.