| 1 | BASH PATCH REPORT |
|---|
| 2 | ================= |
|---|
| 3 | |
|---|
| 4 | Bash-Release: 4.3 |
|---|
| 5 | Patch-ID: bash43-036 |
|---|
| 6 | |
|---|
| 7 | Bug-Reported-by: emanuelczirai@cryptolab.net |
|---|
| 8 | Bug-Reference-ID: <f962e4f556da5ebfadaf7afe9c78a8cb@cryptolab.net> |
|---|
| 9 | Bug-Reference-URL: http://lists.gnu.org/archive/html/bug-bash/2015-02/msg00071.html |
|---|
| 10 | |
|---|
| 11 | Bug-Description: |
|---|
| 12 | |
|---|
| 13 | When evaluating and setting integer variables, and the assignment fails to |
|---|
| 14 | create a variable (for example, when performing an operation on an array |
|---|
| 15 | variable with an invalid subscript), bash attempts to dereference a null |
|---|
| 16 | pointer, causing a segmentation violation. |
|---|
| 17 | |
|---|
| 18 | Patch (apply with `patch -p0'): |
|---|
| 19 | |
|---|
| 20 | *** ../bash-20150206/variables.c 2015-01-23 20:39:27.000000000 -0500 |
|---|
| 21 | --- variables.c 2015-02-19 13:56:12.000000000 -0500 |
|---|
| 22 | *************** |
|---|
| 23 | *** 2834,2841 **** |
|---|
| 24 | v = bind_variable (lhs, rhs, 0); |
|---|
| 25 | |
|---|
| 26 | ! if (v && isint) |
|---|
| 27 | ! VSETATTR (v, att_integer); |
|---|
| 28 | ! |
|---|
| 29 | ! VUNSETATTR (v, att_invisible); |
|---|
| 30 | |
|---|
| 31 | return (v); |
|---|
| 32 | --- 2834,2843 ---- |
|---|
| 33 | v = bind_variable (lhs, rhs, 0); |
|---|
| 34 | |
|---|
| 35 | ! if (v) |
|---|
| 36 | ! { |
|---|
| 37 | ! if (isint) |
|---|
| 38 | ! VSETATTR (v, att_integer); |
|---|
| 39 | ! VUNSETATTR (v, att_invisible); |
|---|
| 40 | ! } |
|---|
| 41 | |
|---|
| 42 | return (v); |
|---|
| 43 | *** ../bash-4.3/patchlevel.h 2012-12-29 10:47:57.000000000 -0500 |
|---|
| 44 | --- patchlevel.h 2014-03-20 20:01:28.000000000 -0400 |
|---|
| 45 | *************** |
|---|
| 46 | *** 26,30 **** |
|---|
| 47 | looks for to find the patch level (for the sccs version string). */ |
|---|
| 48 | |
|---|
| 49 | ! #define PATCHLEVEL 35 |
|---|
| 50 | |
|---|
| 51 | #endif /* _PATCHLEVEL_H_ */ |
|---|
| 52 | --- 26,30 ---- |
|---|
| 53 | looks for to find the patch level (for the sccs version string). */ |
|---|
| 54 | |
|---|
| 55 | ! #define PATCHLEVEL 36 |
|---|
| 56 | |
|---|
| 57 | #endif /* _PATCHLEVEL_H_ */ |
|---|
