From root@critter.tfs.com  Mon May 29 14:42:11 1995
Received: from critter.tfs.com (critter.tfs.com [140.145.16.11])
          by freefall.cdrom.com (8.6.10/8.6.6) with ESMTP id OAA08437
          for <FreeBSD-gnats-submit@freebsd.org>; Mon, 29 May 1995 14:42:11 -0700
Received: (from root@localhost) by critter.tfs.com (8.6.11/8.6.9) id OAA03621; Mon, 29 May 1995 14:41:41 -0700
Message-Id: <199505292141.OAA03621@critter.tfs.com>
Date: Mon, 29 May 1995 14:41:41 -0700
From: phk@freebsd.org
Reply-To: phk@freebsd.org
To: FreeBSD-gnats-submit@freebsd.org
Subject: possible csh bug
X-Send-Pr-Version: 3.2

>Number:         457
>Category:       bin
>Synopsis:       We may have an obscure csh bug
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:
>Keywords:
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon May 29 14:50:00 1995
>Closed-Date:    Sun Apr 14 00:00:21 PDT 1996
>Last-Modified:  Sun Apr 14 00:01:39 PDT 1996
>Originator:     Poul-Henning Kamp
>Release:        FreeBSD BUILT-19950423 i386
>Organization:
>Environment:

	unknown

>Description:

 /usr/bin/csh sometimes corrupts its own address
 space [[ malloc()ed memory ]] when the argument
 to the built-in cd command ends in a slash.
 Such corruption happens to the first slash in
 malloc()ed memory that follows the NULL-terminating
 byte of the directory-name if-and-only-if there is
 no NULL-byte between the directory-name
 NULL-terminator and the slash.
 This bug becomes evident to the users when the value
 of an environment variable which contains the slash
 character becomes truncated at the slash.
 This very old bug was inherited from BSD-csh and
 it exist in all BSD-based versions of the csh.

>How-To-Repeat:

	Unknown

>Fix:
	
	Unknown

>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: scrappy 
State-Changed-When: Sun Apr 14 00:00:21 PDT 1996 
State-Changed-Why:  
phk forwarded bug from unknown owner 
>Unformatted:


