]>
Commit | Line | Data |
---|---|---|
24acfa14 MT |
1 | BASH PATCH REPORT |
2 | ================= | |
3 | ||
4 | Bash-Release: 3.2 | |
5 | Patch-ID: bash32-023 | |
6 | ||
7 | Bug-Reported-by: Chet Ramey <chet.ramey@cwru.edu> | |
8 | Bug-Reference-ID: | |
9 | Bug-Reference-URL: | |
10 | ||
11 | Bug-Description: | |
12 | ||
13 | When an error occurs during the pattern removal word expansion, the shell | |
14 | can free unallocated memory or free memory multiple times. | |
15 | ||
16 | Patch: | |
17 | ||
18 | *** ../bash-3.2-patched/subst.c Tue Apr 3 16:47:19 2007 | |
19 | --- subst.c Tue Jul 17 09:45:11 2007 | |
20 | *************** | |
21 | *** 3975,3979 **** | |
22 | patstr++; | |
23 | ||
24 | ! pattern = getpattern (patstr, quoted, 1); | |
25 | ||
26 | temp1 = (char *)NULL; /* shut up gcc */ | |
27 | --- 4008,4016 ---- | |
28 | patstr++; | |
29 | ||
30 | ! /* Need to pass getpattern newly-allocated memory in case of expansion -- | |
31 | ! the expansion code will free the passed string on an error. */ | |
32 | ! temp1 = savestring (patstr); | |
33 | ! pattern = getpattern (temp1, quoted, 1); | |
34 | ! free (temp1); | |
35 | ||
36 | temp1 = (char *)NULL; /* shut up gcc */ | |
37 | *** ../bash-3.2/patchlevel.h Thu Apr 13 08:31:04 2006 | |
38 | --- patchlevel.h Mon Oct 16 14:22:54 2006 | |
39 | *************** | |
40 | *** 26,30 **** | |
41 | looks for to find the patch level (for the sccs version string). */ | |
42 | ||
43 | ! #define PATCHLEVEL 22 | |
44 | ||
45 | #endif /* _PATCHLEVEL_H_ */ | |
46 | --- 26,30 ---- | |
47 | looks for to find the patch level (for the sccs version string). */ | |
48 | ||
49 | ! #define PATCHLEVEL 23 | |
50 | ||
51 | #endif /* _PATCHLEVEL_H_ */ |