Bug 616853
Summary: | ksh crashes | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
Product: | Red Hat Enterprise Linux 5 | Reporter: | ritz <rkhadgar> | ||||||||
Component: | ksh | Assignee: | Michal Hlavinka <mhlavink> | ||||||||
Status: | CLOSED ERRATA | QA Contact: | qe-baseos-tools-bugs | ||||||||
Severity: | high | Docs Contact: | |||||||||
Priority: | urgent | ||||||||||
Version: | 5.5 | CC: | cww, kvolny, mfranc, ovasik, rbiba | ||||||||
Target Milestone: | rc | Keywords: | Regression, ZStream | ||||||||
Target Release: | --- | ||||||||||
Hardware: | All | ||||||||||
OS: | Linux | ||||||||||
Whiteboard: | |||||||||||
Fixed In Version: | Doc Type: | Bug Fix | |||||||||
Doc Text: |
Assigning a value to an array variable during the execution of the "typeset" command could cause ksh to terminate unexpectedly with a segmentation fault. This update corrects the array handling in this command and ksh no longer crashes.
|
Story Points: | --- | ||||||||
Clone Of: | |||||||||||
: | 637052 (view as bug list) | Environment: | |||||||||
Last Closed: | 2012-02-21 05:50:01 UTC | Type: | --- | ||||||||
Regression: | --- | Mount Type: | --- | ||||||||
Documentation: | --- | CRM: | |||||||||
Verified Versions: | Category: | --- | |||||||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||||
Cloudforms Team: | --- | Target Upstream Version: | |||||||||
Embargoed: | |||||||||||
Bug Depends On: | |||||||||||
Bug Blocks: | 637052, 675135 | ||||||||||
Attachments: |
|
Description
ritz
2010-07-21 14:34:44 UTC
Created attachment 441918 [details]
first reproducer
I have first reproducer. It reproduces fine against 2010-02-02, but does not reproduce against 2010-06-21, so a)reproducer is not trying hard enough b)there are two bugs. I believe this is situation a).
Bug is partially position (in memory) dependant, because some fillers like function fun0001 { return 0; } are needed, despite they are never called. Without them it does not reproduce this problem. (Some of them can be removed from this version of reproducer, but not majority of them.)
I'll try to prepare better reproducer now
Created attachment 443266 [details]
new reproducer
new reproducer, crashes also with ksh 2010-06-21
Created attachment 446041 [details]
patch to fix this
Technical note added. If any revisions are required, please edit the "Technical Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. New Contents: Assigning a value to an array variable during the execution of the "typeset" command could cause ksh to terminate unexpectedly with a segmentation fault. This update corrects the array handling in this command and ksh no longer crashes. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2012-0159.html |