46 lines
1.3 KiB
Diff
46 lines
1.3 KiB
Diff
|
BASH PATCH REPORT
|
||
|
|
=================
|
||
|
|
|
||
|
|
Bash-Release: 4.2
|
||
|
|
Patch-ID: bash42-024
|
||
|
|
|
||
|
|
Bug-Reported-by: Jim Avera <james_avera@yahoo.com>
|
||
|
|
Bug-Reference-ID: <4F29E07A.80405@yahoo.com>
|
||
|
|
Bug-Reference-URL: http://lists.gnu.org/archive/html/bug-bash/2012-02/msg00001.html
|
||
|
|
|
||
|
|
Bug-Description:
|
||
|
|
|
||
|
|
When `printf -v' is used to set an array element, the format string contains
|
||
|
|
`%b', and the corresponding argument is the empty string, the buffer used
|
||
|
|
to store the value to be assigned can be NULL, which results in NUL being
|
||
|
|
assigned to the array element. This causes a seg fault when it's used later.
|
||
|
|
|
||
|
|
Patch (apply with `patch -p0'):
|
||
|
|
|
||
|
|
*** ../bash-4.2-patched/builtins/printf.def 2011-02-25 12:07:41.000000000 -0500
|
||
|
|
--- ./builtins/printf.def 2012-02-02 08:37:12.000000000 -0500
|
||
|
|
***************
|
||
|
|
*** 256,259 ****
|
||
|
|
--- 257,262 ----
|
||
|
|
{
|
||
|
|
vflag = 1;
|
||
|
|
+ if (vbsize == 0)
|
||
|
|
+ vbuf = xmalloc (vbsize = 16);
|
||
|
|
vblen = 0;
|
||
|
|
if (vbuf)
|
||
|
|
*** ../bash-4.2-patched/patchlevel.h Sat Jun 12 20:14:48 2010
|
||
|
|
--- ./patchlevel.h Thu Feb 24 21:41:34 2011
|
||
|
|
***************
|
||
|
|
*** 26,30 ****
|
||
|
|
looks for to find the patch level (for the sccs version string). */
|
||
|
|
|
||
|
|
! #define PATCHLEVEL 23
|
||
|
|
|
||
|
|
#endif /* _PATCHLEVEL_H_ */
|
||
|
|
--- 26,30 ----
|
||
|
|
looks for to find the patch level (for the sccs version string). */
|
||
|
|
|
||
|
|
! #define PATCHLEVEL 24
|
||
|
|
|
||
|
|
#endif /* _PATCHLEVEL_H_ */
|