From owner-freebsd-bugs  Wed Sep 20 23:10:53 1995
Return-Path: owner-bugs
Received: (from root@localhost)
          by freefall.freebsd.org (8.6.12/8.6.6) id XAA26578
          for bugs-outgoing; Wed, 20 Sep 1995 23:10:53 -0700
Received: from godzilla.zeta.org.au (godzilla.zeta.org.au [203.2.228.34])
          by freefall.freebsd.org (8.6.12/8.6.6) with ESMTP id XAA26573
          for <freebsd-bugs@freebsd.org>; Wed, 20 Sep 1995 23:10:44 -0700
Received: (from bde@localhost) by godzilla.zeta.org.au (8.6.9/8.6.9) id QAA31088; Thu, 21 Sep 1995 16:04:31 +1000
Date: Thu, 21 Sep 1995 16:04:31 +1000
From: Bruce Evans <bde@zeta.org.au>
Message-Id: <199509210604.QAA31088@godzilla.zeta.org.au>
To: freebsd-bugs@freebsd.org, jc@irbs.com
Subject: Re: Shell bug
Sender: owner-bugs@freebsd.org
Precedence: bulk

>This will `Memory fault' on the fifth iteration:

>    while { sleep 1 & wait ; } ; do
>    ...

>It appears that { anything & wait ; } is a problem.

>Fails on -current, -stable, and 1.1.5.1.  Works with bash and
>-current, SunOS 4.0, Irix 5.3

The new malloc() detects something being freed twice.

The problem seems to be fixed in 4.4lite2 (which has a lot of changes
to sh).  However, the problem also seems to be fixed in the current sh
(dated Sep 7) on freeefall.

Bruce