From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <zsh-workers-return-41054-mason-zsh=primenet.com.au@zsh.org>
Received: (qmail 25820 invoked by alias); 7 May 2017 20:43:41 -0000
Mailing-List: contact zsh-workers-help@zsh.org; run by ezmlm
Precedence: bulk
X-No-Archive: yes
List-Id: Zsh Workers List <zsh-workers.zsh.org>
List-Post: <mailto:zsh-workers@zsh.org>
List-Help: <mailto:zsh-workers-help@zsh.org>
X-Seq: 41054
Received: (qmail 26877 invoked from network); 7 May 2017 20:43:41 -0000
X-Qmail-Scanner-Diagnostics: from know-smtprelay-omc-9.server.virginmedia.net by f.primenet.com.au (envelope-from <p.w.stephenson@ntlworld.com>, uid 7791) with qmail-scanner-2.11 
 (clamdscan: 0.99.2/21882. spamassassin: 3.4.1.  
 Clear:RC:0(80.0.253.73):SA:0(-2.8/5.0):. 
 Processed in 1.225864 secs); 07 May 2017 20:43:41 -0000
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on f.primenet.com.au
X-Spam-Level: 
X-Spam-Status: No, score=-2.8 required=5.0 tests=RCVD_IN_DNSWL_NONE,
	RCVD_IN_MSPIKE_H2,SPF_PASS,T_DKIM_INVALID autolearn=unavailable
	autolearn_force=no version=3.4.1
X-Envelope-From: p.w.stephenson@ntlworld.com
X-Qmail-Scanner-Mime-Attachments: |
X-Qmail-Scanner-Zip-Files: |
Received-SPF: pass (ns1.primenet.com.au: SPF record at _smtprelay.virginmedia.com designates 80.0.253.73 as permitted sender)
X-Originating-IP: [86.21.219.59]
X-Authenticated-User: p.w.stephenson@ntlworld.com
X-Spam: 0
X-Authority: v=2.1 cv=VakKRwd9 c=1 sm=1 tr=0 a=utowdAHh8RITBM/6U1BPxA==:117
 a=utowdAHh8RITBM/6U1BPxA==:17 a=L9H7d07YOLsA:10 a=9cW_t1CCXrUA:10
 a=s5jvgZ67dGcA:10 a=kj9zAlcOel0A:10 a=pGLkceISAAAA:8 a=gmmGOReu1HR-YZMY2DwA:9
 a=CjuIK1q_8ugA:10 a=6kGIvZw6iX1k4Y-7sg4_:22
Date: Sun, 7 May 2017 21:36:31 +0100
From: Peter Stephenson <p.w.stephenson@ntlworld.com>
To: zsh-workers@zsh.org
Cc: Eduardo Bustamante <dualbus@gmail.com>
Subject: Re: Zsh parser segmentation fault on taddstr
Message-ID: <20170507213631.2a15e7ad@ntlworld.com>
In-Reply-To: <CAOSMAut8qq+yfOtH3XfU7oGim4CNN=YV0BxZyhU9k80RQ6khgw@mail.gmail.com>
References: <CAOSMAut8qq+yfOtH3XfU7oGim4CNN=YV0BxZyhU9k80RQ6khgw@mail.gmail.com>
X-Mailer: Claws Mail 3.11.1 (GTK+ 2.24.28; x86_64-redhat-linux-gnu)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ntlworld.com;
	s=meg.feb2017; t=1494189392;
	bh=njE7FjZYLs8Y5kiVTlYVIVeLp9Hj5o2TTQgGuoXXPVo=;
	h=Date:From:To:Cc:Subject:In-Reply-To:References;
	b=Sl/wi9VDGeLexpZpPdzJ/ENhwA+3bUm02PTnmAtdsg1nh1kNz4fUArc8INwFnMeCN
	 kgOM8q1Ihyabcxjayd2Daa45N3z3ddcLWB8oCsTA6h5UxDrEJRevszLhP7Skj9mJ3b
	 pcxT/fO0q6jYWYcfn2VO6wVlfgANjpHqC3bdOd1nlO9zhRQbxPvfP2uL51AwKh8gep
	 zEaduc9+tqvv4dire8rO1kvlfi1gyaQdjXgA8O1Ls7ntcgrBy6VswXOsCN3Lw/HS6W
	 YADaT79qfOM3v8XPsFLLGU33+ozKSlD5oU7FL75mTBxKuOuS7As+BLkAuM9gfKxTAc
	 g1nC2B0l51+Aw==

On Sun, 7 May 2017 11:45:57 -0500
Eduardo Bustamante <dualbus@gmail.com> wrote:
> Hi all, the following file crashes Zsh when run with noexec:
> 
> dualbus@mksh-parser-4pxg:~$ cat -A
> cmin-zsh-crashes/output_16_crashes_id:000392,sig:11,src:016511+011323,op:splice,rep:2
> if (a)M-^?^@^@<<^EM-^?^I^F|&^D\
> 
> dualbus@mksh-parser-4pxg:~$ xxd
> cmin-zsh-crashes/output_16_crashes_id:000392,sig:11,src:016511+011323,op:splice,rep:2
> 00000000: 6966 2028 6129 ff00 003c 3c05 ff09 067c  if (a)...<<....|
> 00000010: 2604 5c                                  &.\

I haven't got an actual crash, but I am getting some undefined behaviour
which could do anything so is probably down to the same cause.  I can
get the same behaviour here:


% fn() { cat <<y |& cat
FOO
y
}
% which fn
 text.c:995: unknown word code in gettext2()
fn () {
	time <<y | cat
}


The message is only present with debug enabled.

That's a completely valid function --- I'm guessing it's to do with some
interaction between the here-document and the |&, since | works OK, but
that's as far as I've got.

pws