Bug 1253075

Summary: [abrt] bash: strlen(): bash killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Eric Blake <eblake>
Component: bashAssignee: Ondrej Oprala <ooprala>
Status: CLOSED UPSTREAM QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 22CC: admiller, ooprala, ovasik
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/9fee06601e11443e054d8594ac0827d031e5a3c0
Whiteboard: abrt_hash:2ee333dc642e76c7009b6ad4decb8dff7a51ee11
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-08-13 07:33:01 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: limits
none
File: maps
none
File: mountinfo
none
File: namespaces
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages none

Description Eric Blake 2015-08-12 21:59:35 UTC
Description of problem:
one-liner crasher from the bug-bash list

Version-Release number of selected component:
bash-4.3.39-6.fc22

Additional info:
reporter:       libreport-2.6.2
backtrace_rating: 4
cmdline:        bash -c 'x=-3; echo ${!x}'
crash_function: strlen
executable:     /usr/bin/bash
global_pid:     23817
kernel:         4.1.3-201.fc22.x86_64
runlevel:       N 5
type:           CCpp
uid:            14986

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 strlen at ../sysdeps/x86_64/strlen.S:106
 #1 get_dollar_var_value at subst.c:2981
 #2 parameter_brace_expand_word at subst.c:5758
 #3 parameter_brace_expand_indir at subst.c:5929
 #4 parameter_brace_expand at subst.c:7378
 #5 param_expand at subst.c:7876
 #6 expand_word_internal at subst.c:8398
 #7 shell_expand_word_list at subst.c:9589
 #8 expand_word_list_internal at subst.c:9709
 #9 expand_words at subst.c:9285

Comment 1 Eric Blake 2015-08-12 21:59:37 UTC
Created attachment 1062271 [details]
File: backtrace

Comment 2 Eric Blake 2015-08-12 21:59:38 UTC
Created attachment 1062272 [details]
File: cgroup

Comment 3 Eric Blake 2015-08-12 21:59:39 UTC
Created attachment 1062273 [details]
File: core_backtrace

Comment 4 Eric Blake 2015-08-12 21:59:40 UTC
Created attachment 1062274 [details]
File: dso_list

Comment 5 Eric Blake 2015-08-12 21:59:41 UTC
Created attachment 1062275 [details]
File: environ

Comment 6 Eric Blake 2015-08-12 21:59:41 UTC
Created attachment 1062276 [details]
File: limits

Comment 7 Eric Blake 2015-08-12 21:59:42 UTC
Created attachment 1062277 [details]
File: maps

Comment 8 Eric Blake 2015-08-12 21:59:43 UTC
Created attachment 1062278 [details]
File: mountinfo

Comment 9 Eric Blake 2015-08-12 21:59:43 UTC
Created attachment 1062279 [details]
File: namespaces

Comment 10 Eric Blake 2015-08-12 21:59:44 UTC
Created attachment 1062280 [details]
File: open_fds

Comment 11 Eric Blake 2015-08-12 21:59:45 UTC
Created attachment 1062281 [details]
File: proc_pid_status

Comment 12 Eric Blake 2015-08-12 21:59:46 UTC
Created attachment 1062282 [details]
File: var_log_messages

Comment 13 Ondrej Oprala 2015-08-13 07:33:01 UTC
This is an upstream bug, we should wait until they fix it and not concont a solution of our own. I'll backport it once Chet issues a fix.