From: Denys Vlasenko <vda.linux@googlemail.com>
Date: Fri, 19 Jan 2018 15:58:44 +0000 (+0100)
Subject: hush: fix a case where EXIT trap may modify its code mid-flight
X-Git-Tag: 1_29_0~349
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=46f839c3f7476cb9016c4787729f64a2c24509d1;p=oweals%2Fbusybox.git

hush: fix a case where EXIT trap may modify its code mid-flight

function                                             old     new   delta
hush_exit                                             93      99      +6

Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
---

diff --git a/shell/hush.c b/shell/hush.c
index 85526a9f0..7b83c736c 100644
--- a/shell/hush.c
+++ b/shell/hush.c
@@ -1936,7 +1936,7 @@ static void hush_exit(int exitcode)
 	if (G.exiting <= 0 && G_traps && G_traps[0] && G_traps[0][0]) {
 		char *argv[3];
 		/* argv[0] is unused */
-		argv[1] = G_traps[0];
+		argv[1] = xstrdup(G_traps[0]); /* copy, since EXIT trap handler may modify G_traps[0] */
 		argv[2] = NULL;
 		G.exiting = 1; /* prevent EXIT trap recursion */
 		/* Note: G_traps[0] is not cleared!