helpThe GNU Bourne-Again SHell - Support: sr #109656, Bash segfaults for long unicode...


sr #109656: Bash segfaults for long unicode pathnames

Submitter:  None
Submitted:  Fri 15 Mar 2019 09:14:43 AM UTC
Category:  None Priority:  5 - Normal
Severity:  6 - Security Status:  Works For Me
Privacy:  Public Assigned to:  None
Originator Email:  -email is unavailable- Open/Closed:  Open
Operating System:  GNU/Linux
* Mandatory Fields

Add a New Comment (Rich Markup)

Comment Type & Canned Response:


Thu 21 Mar 2019 12:06:12 PM UTC, comment #2: 

works for me  4.4.19(1)-release (x86_64-pc-linux-gnu)

J <now3d>
Wed 20 Mar 2019 07:50:43 PM UTC, comment #1: 

I can't reproduce this with bash-5.0 or bash-4.4. It's probably dependent on your prompt.

Chet Ramey <chet>
Project Administrator
Fri 15 Mar 2019 09:14:43 AM UTC, original submission:  

Upon CD'ing to a directory with a certain kind of absolute pathname, bash segfaults.

As far as I can tell, the criteria is that it's 145 or more bytes with a unicode character in it, but that could be wrong.

Here is an example of a minimally-sized absolute pathname that triggers the bug:


(mkdir -p for this works, though)

My greatest concern is that this is triggering some potentially-security relevant buffer overflow bug!



(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by now3d (Posted a comment)
  • -email is unavailable- added by chet (Posted a comment)
  • -email is unavailable- added by None (Submitted the item)

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.





    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2019-03-20 chet StatusNone Works For Me

    Back to the top

    Powered by Savane 3.10