From nobody Fri May 15 15:52:23 2026 X-Original-To: bugs@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4gHBXn6yfnz6dZ4t for ; Fri, 15 May 2026 15:52:25 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4gHBXl0bBgz3TPk for ; Fri, 15 May 2026 15:52:23 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1778860343; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=WoztO7iYHDYrLn4Ul/jDbmrgjNKMkbEBcQScip2CA5Q=; b=OSe5IgWTzUu8ohKEmfFhwDqbJhqppzEDjVLJstFcP2GYtjCiLoANfvdnq6acT+1neTZRVs +pAvKmn7AFIWknOkNXqipx+KMilJ4QvmMM9+JzwvllzKAkw80mqVgQ0NKZ/poySAEKBTJO kOUO2N3Vj4Qpu9/CY7obYm2/0PK3YzrEiwKrVSqFIl1Eiln15RTYdRW+dIBbApzVxJp8Z8 J7bzrtkC8RyxerkQdlKV/P5yOQECUryTX1s0BM0JhMAC36m/i5Zg1VdekWm7wBWa1TbItB A3DAF9wtmLbJFLTX6KvbXNJnDj76zL7Aj0G3EjWT+8J/SMBf64/8KgkGIvAt+g== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1778860343; a=rsa-sha256; cv=none; b=CuYVp9qMva4Iqt+UPRIuAKsXjTyQFmebGaOj0qZ/79V9zkY2B5Lc7HMj232BMfV4mkRpwS 6O4+Km9tbT686D9iiWjJeYXzd2kAQZEiF502Jf0lcaqT/1yKAiUfDqo3HTFjncN48DvAq8 p6/ZGar6nozd2G/O6B5ol7mi71cX+UhNflSxsbTITIL6wEUE2KJrj50Pu4WfixKBNoFKiy a86gPPlWT5Pfk95HGIBB10XFkbp/e3+7zUNHIEGWWdzwDg6FEA7SLilBFouPetwMyx6ycl hOik/eeE3gBFvrHWMc5bWQuBC3FLQsrZocsQMVNzHV+MzdLU5DV5ykBItj9anw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1778860343; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=WoztO7iYHDYrLn4Ul/jDbmrgjNKMkbEBcQScip2CA5Q=; b=t/xJC03e+hIM09fm7MbWlWX7xfUEQoCR032L1uVL1JeClAwDPSmVf5i+HH81Ux6AVB9Idh jbd4W5DHgj+XHO/dzicPsIzIjUKnAsd+03qhDfqWxEBPaBoiGJj1sXK3Cg5qkgHOxQvgXA GUjYCQuImYv35uzJn5D6aN91ipWgaIzdaAttvKtVN5oZeve03O2IRFlpn0Ux/TeE4y7TAX nygPnsjUHNWz3L3mmpoS1CSPPBVQbDfRvAYA3ldkUXnFxeKftzS9zg6xpnHPuBHPYLz4YY lAUn7q0KfDbnbqoXxccT1sjq3bmv1xLBz2eqaG+AzDZyCcf5sm6g1Ia0jmhw1g== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4gHBXk6nrdzgL for ; Fri, 15 May 2026 15:52:22 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 64FFqM0Y077716 for ; Fri, 15 May 2026 15:52:22 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 64FFqMV0077715 for bugs@FreeBSD.org; Fri, 15 May 2026 15:52:22 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 295086] /bin/sh undefined variable in heredoc triggers assertion Date: Fri, 15 May 2026 15:52:23 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: bin X-Bugzilla-Version: 15.0-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: des@FreeBSD.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Bug reports List-Archive: https://lists.freebsd.org/archives/freebsd-bugs List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-bugs@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D295086 Dag-Erling Sm=C3=B8rgrav changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |des@FreeBSD.org --- Comment #2 from Dag-Erling Sm=C3=B8rgrav --- I added some instrumentation to the INTOFF and INTON macros: $ foo=3D$(cat < $bar INTOFF 1 /usr/src/bin/sh/input.c:252 INTON 0 /usr/src/bin/sh/input.c:255 > eof INTOFF 1 /usr/src/bin/sh/input.c:252 INTON 0 /usr/src/bin/sh/input.c:255 INTOFF 1 /usr/src/bin/sh/expand.c:468 INTOFF 1 /usr/src/bin/sh/output.c:208 INTON 0 /usr/src/bin/sh/output.c:212 /usr/obj/usr/src/amd64.amd64/bin/sh/sh: bar: parameter not set INTOFF 1 /usr/src/bin/sh/error.c:78 INTOFF 2 /usr/src/bin/sh/var.c:793 INTON 1 /usr/src/bin/sh/var.c:822 INTON 0 /usr/src/bin/sh/eval.c:514 INTOFF 1 /usr/src/bin/sh/exec.c:434 INTOFF 2 /usr/src/bin/sh/exec.c:582 INTON 1 /usr/src/bin/sh/exec.c:588 INTON 0 /usr/src/bin/sh/exec.c:442 INTOFF 1 /usr/src/bin/sh/jobs.c:754 INTON 0 /usr/src/bin/sh/jobs.c:784 INTOFF 1 /usr/src/bin/sh/jobs.c:790 INTON 0 /usr/src/bin/sh/jobs.c:807 INTOFF 1 /usr/src/bin/sh/jobs.c:896 INTON 0 /usr/src/bin/sh/jobs.c:1001 INTOFF 1 /usr/src/bin/sh/var.c:251 INTON 0 /usr/src/bin/sh/jobs.c:916 INTOFF 2 /usr/src/bin/sh/var.c:751 INTOFF 1 /usr/src/bin/sh/jobs.c:963 INTOFF 2 /usr/src/bin/sh/jobs.c:515 INTON 1 /usr/src/bin/sh/jobs.c:528 INTON 0 /usr/src/bin/sh/jobs.c:967 INTOFF 3 /usr/src/bin/sh/var.c:337 INTON 2 /usr/src/bin/sh/var.c:365 INTON 1 /usr/src/bin/sh/var.c:778 INTOFF 2 /usr/src/bin/sh/var.c:337 INTON 1 /usr/src/bin/sh/var.c:365 INTON 0 /usr/src/bin/sh/var.c:260 INTOFF 1 /usr/src/bin/sh/var.c:793 INTON 0 /usr/src/bin/sh/var.c:822 INTOFF 1 /usr/src/bin/sh/memalloc.c:214 INTON 0 /usr/src/bin/sh/memalloc.c:226 INTOFF 1 /usr/src/bin/sh/redir.c:111 INTON 0 /usr/src/bin/sh/redir.c:153 INTOFF 1 /usr/src/bin/sh/redir.c:154 INTON 0 /usr/src/bin/sh/redir.c:160 INTOFF 1 /usr/src/bin/sh/memalloc.c:146 INTON 0 /usr/src/bin/sh/memalloc.c:153 INTOFF 1 /usr/src/bin/sh/jobs.c:1087 INTOFF 2 /usr/src/bin/sh/jobs.c:1206 INTON 1 /usr/src/bin/sh/jobs.c:1250 INTOFF 2 /usr/src/bin/sh/jobs.c:515 INTON 1 /usr/src/bin/sh/jobs.c:528 INTON 0 /usr/src/bin/sh/jobs.c:1127 INTON -1 /usr/src/bin/sh/expand.c:526 INTOFF 0 /usr/src/bin/sh/redir.c:111 INTON -1 /usr/src/bin/sh/redir.c:160 INTOFF 0 /usr/src/bin/sh/var.c:407 At least part of the issue appears to be that suppressint is off by one. It looks like we never turned interrupts back on after we tripped the undefined variable. --=20 You are receiving this mail because: You are the assignee for the bug.=