Zsh Mailing List Archive Messages sorted by: Reverse Date, Date, Thread, Author

infinite recursion in ihungetc()

X-seq: zsh-workers 35851
From: Kamil Dudka <kdudka@xxxxxxxxxx>
To: zsh-workers@xxxxxxx
Subject: infinite recursion in ihungetc()
Date: Wed, 22 Jul 2015 13:45:06 +0200
List-help: <mailto:zsh-workers-help@zsh.org>
List-id: Zsh Workers List <zsh-workers.zsh.org>
List-post: <mailto:zsh-workers@zsh.org>
Mailing-list: contact zsh-workers-help@xxxxxxx; run by ezmlm

Fedora Analysis Framework captured 10 crashes of zsh-5.0.8 due to infinite 
recursion in ihungetc():

https://retrace.fedoraproject.org/faf/reports/717794/

The infinite recursion happens at this line:

http://repo.or.cz/w/zsh/mirror.git/blob/a0862f63:/Src/hist.c#l908

The 'hungetc' code pointer is obviously set to ihungetc() itself.  We do
not have full bakctrace of the crash but shouldn't there be any condition
to actually stop the recursion when the conditions at lines 906-907 are
true and hungetc points at ihungetc()?

There is no single command that could invalidate any of the conditions
after nesting deeper into the recursion...

Kamil

Follow-Ups:
- Re: infinite recursion in ihungetc()
  - From: Peter Stephenson

Messages sorted by: Reverse Date, Date, Thread, Author