Re: [Bug-readline] Null pointer dereference in _rl_copy_to_kill_ring

[Clayton Smith]

Thanks for your reply. I didn't think to check the devel branch, but I see now that the issue is addressed there with a null check in _rl_copy_to_kill_ring.

Cheers,

Clayton

On Mon, Jun 26, 2017 at 4:51 PM, Chet Ramey <address@hidden> wrote:

On 6/26/17 1:53 PM, Clayton Smith wrote:
> The following keypresses seem to crash readline:
>
>     0  Escape  0  Backspace  Ctrl-W
>
> Typing those keystrokes into just about any program that uses readline
> (e.g. bash, gdb, python) causes a segfault. I've tested this on Ubuntu
> 14.04, 16.04 and 17.04. Also, I was able to reproduce a crash on OS X when
> I downloaded and built libreadline.

Thanks for the report.  This was fixed back in the May 5 (bash) push,
ironically as the result of a different fuzzing effort.  The past two
readline devel branch pushes include the fix.

Chet

--
``The lyf so short, the craft so long to lerne.'' - Chaucer
                 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, UTech, CWRU    address@hidden    http://cnswww.cns.cwru.edu/~chet/