>Number:         27765
>Category:       pkg
>Synopsis:       pkgsrc/shells/osh - upstream release is at 041028
>Confidential:   no
>Severity:       non-critical
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Nov 01 19:02:00 UTC 2004
>Closed-Date:
>Last-Modified:
>Originator:     Jeffrey Allen Neitzel
>Release:        1.6.2_STABLE and 2.0_RC4
>Organization:
not applicable
>Environment:
not available
>Description:
The latest release has quite a few changes:
http://jneitzel.sdf1.org/osh/src/CHANGES

In short:
1) There is a problem in 040421 where the shell can touch out of bounds memory when globbing.  This has been fixed.
2) There was a major change to parameter substitution for the sake of compatibility.
3) Also, when the shell is built as osh(1) the compatibility mode can be changed with a run-time toggle.
4) When osh(1) is interactive, it can read initialization files.
5) Lastly, the shell can also be built/installed as sh6(1).  This is just a version of the shell w/o the enhancements.

>How-To-Repeat:
The problem in 1) above can be demonstrated by doing the following:

Build osh-040421 and osh-041028.
Translate the path names below according to where you keep things ;)

Before (unfixed):
% env MALLOC_OPTIONS=AJ ./osh-040421/osh -c '/bin/ls -l ?'
Memory fault -- Core dumped

After (fixed):
% env MALLOC_OPTIONS=AJ ./osh-041028/osh -c '/bin/ls -l ?'
-rw-------  1 jneitzel  arpa  0 Nov  1 18:18 "
-rw-------  1 jneitzel  arpa  0 Nov  1 18:18 '
-rw-------  1 jneitzel  arpa  0 Nov  1 18:18 \

>Fix:
Use the latest release, osh-041028, which is available at:
http://jneitzel.sdf1.org/osh/

>Release-Note:
>Audit-Trail:
>Unformatted: