bug-bash
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

asan report in extmatch


From: Grisha Levit
Subject: asan report in extmatch
Date: Thu, 16 Mar 2023 19:48:53 -0400

The relevant code was added in
https://git.savannah.gnu.org/cgit/bash.git/commit/?id=da43077 with
similar additions to both gmatch and extmatch, but I suspect the test
on line 912 was not meant to be in extmatch:

> .a
bash -O extglob -O dotglob -c ': ./!(.foo)'

ERROR: AddressSanitizer: heap-buffer-overflow on address 0x000102e02daf
READ of size 1 at 0x000102e02daf thread T0
    #0 extmatch sm_loop.c:912

frame #5: bash`extmatch(xc=33, s=".a", se="", p="(.foo)", pe="",
flags=161) at sm_loop.c:912:36
   909
   910   if (m1 == 0 && (flags & FNM_DOTDOT) &&
   911       (SDOT_OR_DOTDOT (s) ||
-> 912        ((flags & FNM_PATHNAME) && s[-1] == L('/') && PDOT_OR_DOTDOT(s))))
   913     return (FNM_NOMATCH);
   914
   915   /* if srest > s, we are not at start of string */



reply via email to

[Prev in Thread] Current Thread [Next in Thread]