projects / packages / bash.git / blame
| Commit | Line | Data |
|---|---|---|
| 1b0dc639 AM |
1 | BASH PATCH REPORT |
| 2 | ================= | |
| 3 | ||
| 4 | Bash-Release: 3.2 | |
| 5 | Patch-ID: bash32-023 | |
| 6 | ||
| 7 | Bug-Reported-by: Chet Ramey <chet.ramey@cwru.edu> | |
| 8 | Bug-Reference-ID: | |
| 9 | Bug-Reference-URL: | |
| 10 | ||
| 11 | Bug-Description: | |
| 12 | ||
| 13 | When an error occurs during the pattern removal word expansion, the shell | |
| 14 | can free unallocated memory or free memory multiple times. | |
| 15 | ||
| 16 | Patch: | |
| 17 | ||
| 18 | *** ../bash-3.2-patched/subst.c Tue Apr 3 16:47:19 2007 | |
| 19 | --- subst.c Tue Jul 17 09:45:11 2007 | |
| 20 | *************** | |
| 21 | *** 3975,3979 **** | |
| 22 | patstr++; | |
| 23 | ||
| 24 | ! pattern = getpattern (patstr, quoted, 1); | |
| 25 | ||
| 26 | temp1 = (char *)NULL; /* shut up gcc */ | |
| 27 | --- 4008,4016 ---- | |
| 28 | patstr++; | |
| 29 | ||
| 30 | ! /* Need to pass getpattern newly-allocated memory in case of expansion -- | |
| 31 | ! the expansion code will free the passed string on an error. */ | |
| 32 | ! temp1 = savestring (patstr); | |
| 33 | ! pattern = getpattern (temp1, quoted, 1); | |
| 34 | ! free (temp1); | |
| 35 | ||
| 36 | temp1 = (char *)NULL; /* shut up gcc */ | |
| 37 | *** ../bash-3.2/patchlevel.h Thu Apr 13 08:31:04 2006 | |
| 38 | --- patchlevel.h Mon Oct 16 14:22:54 2006 | |
| 39 | *************** | |
| 40 | *** 26,30 **** | |
| 41 | looks for to find the patch level (for the sccs version string). */ | |
| 42 | ||
| 43 | ! #define PATCHLEVEL 22 | |
| 44 | ||
| 45 | #endif /* _PATCHLEVEL_H_ */ | |
| 46 | --- 26,30 ---- | |
| 47 | looks for to find the patch level (for the sccs version string). */ | |
| 48 | ||
| 49 | ! #define PATCHLEVEL 23 | |
| 50 | ||
| 51 | #endif /* _PATCHLEVEL_H_ */ |