[bug #47050] SAY commands cause crash in grub-syslinux2cfg and syslinux_configfile

[nerdopolis]

URL:
  <http://savannah.gnu.org/bugs/?47050>

                 Summary: SAY commands cause crash in grub-syslinux2cfg and
syslinux_configfile
                 Project: GNU GRUB
            Submitted by: nerdopolis
            Submitted on: Wed 03 Feb 2016 03:44:04 AM GMT
                Category: Configuration
                Severity: Major
                Priority: 5 - Normal
              Item Group: Software Error
                  Status: None
                 Privacy: Public
             Assigned to: None
         Originator Name: 
        Originator Email: 
             Open/Closed: Open
         Discussion Lock: Any
                 Release: 
                 Release: 2.02~beta1
         Reproducibility: Every Time
         Planned Release: None

    _______________________________________________________

Details:

Running grub-syslinux2cfg on an ISOLINUX.cfg file with SAY commands such as
SAY _____________________________________________________________________

results in a crash. This also crashes grub if the cfg file calls it in with
syslinux_configfile




The stack trace
(gdb) bt full
#0  0xf7756ba0 in __kernel_vsyscall ()
No symbol table info available.
#1  0xf7525057 in __GI_raise (sig=6) at ../sysdeps/unix/sysv/linux/raise.c:55
        resultvar = <optimized out>
        resultvar = <optimized out>
        pid = -143982592
        selftid = 6349
#2  0xf7526699 in __GI_abort () at abort.c:89
        save_stage = 2
        act = {__sigaction_handler = {sa_handler = 0xf775fb18
<check_match+312>, sa_sigaction = 0xf775fb18 <check_match+312>}, sa_mask =
{__val = {4149264478, 134517367, 4151704441, 225011984, 4151814896, 
              4293708888, 4151704041, 225011984, 4149195160, 523, 4151704041,
4151812096, 4149200244, 1794, 255564379, 4151705829, 4148274888, 1, 1,
4149231348, 1794, 4149240948, 4151655232, 4293708948, 
              4293708944, 0, 3, 4096, 4150126472, 4096, 83, 4150984704}},
sa_flags = -1258024, sa_restorer = 0xf7563118 <__libc_message+520>}
        sigs = {__val = {32, 0 <repeats 31 times>}}
#3  0xf756319e in __libc_message (do_abort=1, fmt=0xf765d444 "*** Error in
`%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175
        ap = <optimized out>
        fd = <optimized out>
        on_2 = <optimized out>
        list = <optimized out>
        nlist = <optimized out>
        cp = <optimized out>
        written = <optimized out>
#4  0xf7568de7 in malloc_printerr (action=<optimized out>, str=0xf7659583
"free(): invalid pointer", ptr=0x955a3e0) at malloc.c:4965
        buf = "0955a3e0"
        cp = <optimized out>
#5  0xf756954d in _int_free (av=0xf76b0840 <main_arena>, p=<optimized out>,
have_lock=0) at malloc.c:3834
        size = <optimized out>
        fb = <optimized out>
        nextchunk = <optimized out>
        nextsize = <optimized out>
        nextinuse = <optimized out>
        prevsize = <optimized out>
        bck = <optimized out>
        fwd = <optimized out>
        errstr = <optimized out>
        locked = <optimized out>
        __func__ = "_int_free"
#6  0x0804dfde in ?? ()
No symbol table info available.
#7  0x0804e2ea in ?? ()
No symbol table info available.
#8  0x0804a1b1 in ?? ()
No symbol table info available.
#9  0xf751172e in __libc_start_main (main=0x804a040, argc=2, argv=0xffecd074,
init=0x80b0fa0, fini=0x80b1000, rtld_fini=0xf7766210 <_dl_fini>,
stack_end=0xffecd06c) at libc-start.c:289





    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?47050>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/