Re: Heap buffer overread in token_is_assignment

2018-02-21 Thread Chet Ramey
On 2/20/18 3:07 PM, jer...@feusi.co wrote: > Bash Version: 4.4 > Patch Level: 19 > Release Status: release > > Description: > When calling bash -e (where is the attached file) a heap > buffer overread occurs in token_is_assignment at parse.y:4657 ( Thanks for the r

Re: Heap buffer overread in token_is_assignment

2018-02-21 Thread Chet Ramey
On 2/20/18 4:36 PM, Eduardo Bustamante wrote: > Hi Jeremy. I see that you're fuzzing against 4.4.19. I did a bunch of > fuzzing work last year (mainly in the parser code and readline), so > some of these issues might be fixed already in git. I fixed all of the bugs Eduardo's fuzzing uncovered,

Re: Heap buffer overread in token_is_assignment

2018-02-20 Thread Eduardo Bustamante
On Tue, Feb 20, 2018 at 2:07 PM, wrote: > > > > > Configuration Information [Automatically generated, do not change]: > Machine: i686 > OS: linux-gnu > Compiler: afl-gcc > Compilation CFLAGS: -DPROGRAM='bash' -DCONF_HOSTTYPE='i686' > -DCONF_OSTYPE='linux-gnu'

Heap buffer overread in token_is_assignment

2018-02-20 Thread jeremy
Level: 19 Release Status: release Description: When calling bash -e (where is the attached file) a heap buffer overread occurs in token_is_assignment at parse.y:4657 (It may be interesting to note that the attached file consists of an arbitrary character, an ampersand and 496 "=&q