Re: Integer overflow of i in string_extract_verbatim

[Chet Ramey]

On 4/28/23 6:25 PM, Eric Li wrote:

> Bash Version: 5.2
> Patch Level: 15
> Release Status: release
>
> Description:
>         Bash runs into segmentation fault when spawning a process with
>         argc larger than 2GB. Can debug using GDB and observe that
>         subst.c:1204 (string_extract_verbatim, "while (c =
> string[i])")
>         crashes because i = -2147483648. string[i] points to invalid
>         memory.

Thanks for the report.

Chet

--
``The lyf so short, the craft so long to lerne.'' - Chaucer
                 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, UTech, CWRU    chet@case.edu    http://tiswww.cwru.edu/~chet/