summary refs log tree commit diff
path: root/src
diff options
context:
space:
mode:
authorJonathan Nieder <jrnieder@gmail.com>2011-03-15 16:01:34 +0800
committerHerbert Xu <herbert@gondor.apana.org.au>2011-03-15 16:01:34 +0800
commita58d301405d96fb8ff87cffa3cabe3b110214a31 (patch)
treeda1a9fe5169b2a9e2b43a30831c912e9f3f8a1b3 /src
parent[SHELL] Improve LINENO support (diff)
downloaddash-a58d301405d96fb8ff87cffa3cabe3b110214a31.tar.gz
dash-a58d301405d96fb8ff87cffa3cabe3b110214a31.zip
[EXPAND] Free IFS state after here document expansion
Here's another bug bisecting to f42e443bb ([EXPAND] Fix
ifsfirst/ifslastp leak, 2010-09-08).  It was found with the following
test case, based on the configure script for Tracker:

	dash -x -c '
		<<-_ACEOF
		$@
		_ACEOF
		exec
	' - abcdefgh
	+
	+ exec   �a
	exec: 1: : Permission denied

The missing ifsfree call is in expandarg when it returns to openhere
during here document expansion.

Reported-by: Aurelien Jarno <aurel32@debian.org>
Signed-off-by: Jonathan Nieder <jrnieder@gmail.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'src')
-rw-r--r--src/expand.c7
1 files changed, 5 insertions, 2 deletions
diff --git a/src/expand.c b/src/expand.c
index f155ea0..ce60fe9 100644
--- a/src/expand.c
+++ b/src/expand.c
@@ -194,7 +194,8 @@ expandarg(union node *arg, struct arglist *arglist, int flag)
 	p = _STPUTC('\0', expdest);
 	expdest = p - 1;
 	if (arglist == NULL) {
-		return;			/* here document expanded */
+		/* here document expanded */
+		goto out;
 	}
 	p = grabstackstr(p);
 	exparg.lastp = &exparg.list;
@@ -212,12 +213,14 @@ expandarg(union node *arg, struct arglist *arglist, int flag)
 		*exparg.lastp = sp;
 		exparg.lastp = &sp->next;
 	}
-	ifsfree();
 	*exparg.lastp = NULL;
 	if (exparg.list) {
 		*arglist->lastp = exparg.list;
 		arglist->lastp = exparg.lastp;
 	}
+
+out:
+	ifsfree();
 }