Re: asan report in _rl_free_undo_list

[Grisha Levit]

A couple more in _rl_free_undo_list:

cat >/tmp/irc <<EOF
set revert-all-at-newline on
"F" fetch-history
"E" end-of-history
"N" next-history
"P" previous-history
"B" history-substring-search-backward
"S" history-substring-search-forward
"U" unix-line-discard
"V" vi-movement-mode
EOF

cat >/tmp/hist <<EOF
x
x
EOF

----

HISTFILE=/tmp/hist INPUTRC=/tmp/irc ./bash --norc -in <<<PUBNNx

AddressSanitizer: heap-use-after-free
READ of size 8
    #0  _rl_free_undo_list undo.c:106
    #1  rl_free_undo_list undo.c:122
    #2  readline_internal_teardown readline.c:512
    #3  readline_internal readline.c:740
    #4  readline readline.c:387

freed here:
    #1  xfree xmalloc.c:144
    #2  rl_do_undo undo.c:265
    #3  _rl_revert_previous_lines misc.c:477
    #4  _rl_revert_all_lines misc.c:507
    #5  readline_internal_teardown readline.c:507
    #6  readline_internal readline.c:740
    #7  readline readline.c:387

previously allocated here:
    #1  xmalloc xmalloc.c:111
    #2  alloc_undo_entry undo.c:75
    #3  rl_add_undo undo.c:92
    #4  rl_delete_text text.c:152
    #5  rl_kill_text kill.c:177
    #6  rl_unix_line_discard kill.c:412
    #7  _rl_dispatch_subseq readline.c:922
    #8  _rl_dispatch readline.c:866
    #9  readline_internal_char readline.c:680
    #10  readline_internal_charloop readline.c:727
    #11  readline_internal readline.c:739
    #12  readline readline.c:387

----

HISTFILE=/tmp/hist INPUTRC=/tmp/irc ./bash --norc -in <<<FxEFxSEFV

AddressSanitizer: heap-use-after-free
READ of size 8
    #0  _rl_free_undo_list undo.c:106
    #1  _rl_free_saved_history_line misc.c:403
    #2  _rl_start_using_history misc.c:311
    #3  rl_initialize readline.c:1205
    #4  readline readline.c:379

freed here:
    #1  xfree xmalloc.c:144
    #2  _rl_free_undo_list undo.c:111
    #3  rl_free_undo_list undo.c:122
    #4  rl_vi_movement_mode vi_mode.c:910
    #5  _rl_dispatch_subseq readline.c:922
    #6  _rl_dispatch readline.c:866
    #7  readline_internal_char readline.c:680
    #8  readline_internal_charloop readline.c:727
    #9  readline_internal readline.c:739
    #10  readline readline.c:387

previously allocated here:
    #1  xmalloc xmalloc.c:111
    #2  alloc_undo_entry undo.c:75
    #3  rl_add_undo undo.c:92
    #4  rl_insert_text text.c:113
    #5  _rl_insert_char text.c:903
    #6  rl_insert text.c:955
    #7  _rl_dispatch_subseq readline.c:922
    #8  _rl_dispatch readline.c:866
    #9  readline_internal_char readline.c:680
    #10  readline_internal_charloop readline.c:727
    #11  readline_internal readline.c:739
    #12  readline readline.c:387