Bash-2.05b segfaults

[Greg Schafer]

Configuration Information [Automatically generated, do not change]:
Machine: i686
OS: linux-gnu
Compiler: gcc
Compilation CFLAGS:  -DPROGRAM='bash' -DCONF_HOSTTYPE='i686' 
-DCONF_OSTYPE='linux-gnu' -DCONF_MACHTYPE='i686-pc-linux-gnu' 
-DCONF_VENDOR='pc' -DSHELL -DHAVE_CONFIG_H  -I.  -I. -I./include -I./lib  -g -O2
uname output: Linux tigers-lfs 2.4.18 #1 Thu Mar 28 22:44:10 EST 2002 i686 
GenuineIntel
Machine Type: i686-pc-linux-gnu

Bash Version: 2.05b
Patch Level: 0
Release Status: release

Description:
        Latest bash sometimes segfaults in weird circumstances. 

Repeat-By:
        I was just simply trying to run a "configure" script. was very weird 
though.
        It was cvs binutils sources (newly created stable 2.13 branch)

        "../src/configure --prefix=/usr"                 bombs
        "../src/configure"                               ok
        "../src/configure --prefix=/usr"                 ok ??
        (with set -x at top of configure script)

        Happens every time.

        Here is a backtrace:-

This GDB was configured as "i686-pc-linux-gnu"...

warning: core file may not match specified executable file.
Core was generated by `/bin/sh ../src/configure --prefix=/usr'.
Program terminated with signal 11, Segmentation fault.
#0  internal_malloc (n=514, file=0x8167000 <Address 0x8167000 out of bounds>, 
line=135688192, flags=14) at malloc.c:730
730       nextf[nunits] = CHAIN (p);
(gdb) bt
#0  internal_malloc (n=514, file=0x8167000 <Address 0x8167000 out of bounds>, 
line=135688192, flags=14) at malloc.c:730
#1  0x080b2dde in internal_realloc (mem=0x8152908, n=514, file=0x8102b0b 
"make_cmd.c", line=613, flags=1) at malloc.c:998
#2  0x080b304e in sh_realloc (ptr=0x8167000, size=135688192, file=0x8167000 
<Address 0x8167000 out of bounds>, line=135688192) at malloc.c:1130
#3  0x08082233 in sh_xrealloc (pointer=0x8167000, bytes=514, file=0x8102b0b 
"make_cmd.c", line=613) at xmalloc.c:167
#4  0x08052de4 in make_here_document (temp=0x8152e88) at make_cmd.c:613
#5  0x0804c8f7 in gather_here_documents () at 
/usr/homes/chet/src/bash/src/parse.y:2098
#6  0x0804d264 in read_token (command=0) at 
/usr/homes/chet/src/bash/src/parse.y:2436
#7  0x0804c864 in yylex () at /usr/homes/chet/src/bash/src/parse.y:2084
#8  0x0804b799 in yyparse () at /usr/local/share/bison/bison.simple:573
#9  0x0804a6c4 in parse_command () at eval.c:217
#10 0x0804a73f in read_command () at eval.c:261
#11 0x0804a469 in reader_loop () at eval.c:128
#12 0x0804885b in main (argc=3, argv=0xbffffe64, env=0xbffffe74) at shell.c:680
#13 0x080b3ebd in __libc_start_main (main=0x80481f0 <main>, argc=3, 
ubp_av=0xbffffe64, init=0x80480b4 <_init>, fini=0x81009c0 <_fini>, rtld_fini=0, 
stack_end=0x8167000) at ../sysdeps/generic/libc-start.c:129
(gdb)