PSARC/2014/162 ksh93 update to 2012-08-01 17533968 ksh93 uprev to latest community version 17817727 ksh93: Right shift arithmetic substitution error for shifts of 64 bits or more 17699248 ksh93 double associative array handling bugs 17777549 "kill %%" with no background jobs , coredumps 18119738 ksh93 crashes in sfio area 18229654 ksh93 read not reentrant in alarm context dumps core 16169978 ksh93 memory corruption with redirection 18302723 ksh93 segv in sh_setmatch 16507675 external command in double-nested here-document hangs ksh93 18920300 remove pkglint Warnings in ksh93 build 18355790 /usr/bin/sh and /usr/sbin/sh should point to /usr/bin/ksh93 19907453 Session drop can cause ksh93 to become a fork bomb 18426052 SPARC /usr/bin/ksh is not an XPG6 executable 20808157 attpackagemake.mk test target needs the same environment as the build 20948390 ksh93 should have some master test results to compare against 20948350 attpackagemake.mk tested-and-compared target has mis-matched parentheses

     1

This fix is from the community, details in the following location.

     2

http://lists.research.att.com/pipermail/ast-users/2013q4/004481.html

     3

---

     4

--- a/src/cmd/ksh93/sh/streval.c	2014-01-22 10:39:11.075964500 +0100

     5

+++ b/src/cmd/ksh93/sh/streval.c	2014-01-22 13:21:35.999184260 +0100

     6

@@ -366,13 +366,17 @@

     7

 				num = (Sflong_t)(sp[-1]) / (Sflong_t)(num);

     8

 			break;

     9

 		    case A_LSHIFT:

    10

-			if(tp[-1]==2)

    11

+			if((long)num >= CHAR_BIT*sizeof(Sfulong_t))

    12

+				num = 0;

    13

+			else if(tp[-1]==2)

    14

 				num = U2F((Sfulong_t)(sp[-1]) << (long)(num));

    15

 			else

    16

 				num = (Sflong_t)(sp[-1]) << (long)(num);

    17

 			break;

    18

 		    case A_RSHIFT:

    19

-			if(tp[-1]==2)

    20

+			if((long)num >= CHAR_BIT*sizeof(Sfulong_t))

    21

+				num = 0;

    22

+			else if(tp[-1]==2)

    23

 				num = U2F((Sfulong_t)(sp[-1]) >> (long)(num));

    24

 			else

    25

 				num = (Sflong_t)(sp[-1]) >> (long)(num);