1 			     BASH PATCH REPORT

     2 			     =================

     3 

     4 Bash-Release:	4.3

     5 Patch-ID:	bash43-028

     6 

     7 Bug-Reported-by:	Florian Weimer <[email protected]>

     8 Bug-Reference-ID:

     9 Bug-Reference-URL:

    10 

    11 Bug-Description:

    12 

    13 There are two local buffer overflows in parse.y that can cause the shell

    14 to dump core when given many here-documents attached to a single command

    15 or many nested loops.

    16 

    17 Patch (apply with `patch -p0'):

    18 

    19 *** ../bash-4.3-patched/parse.y	2014-09-25 23:02:35.000000000 -0400

    20 --- parse.y	2014-09-29 16:47:03.000000000 -0400

    21 ***************

    22 *** 169,172 ****

    23 --- 169,175 ----

    24   static int reserved_word_acceptable __P((int));

    25   static int yylex __P((void));

    26 + 

    27 + static void push_heredoc __P((REDIRECT *));

    28 + static char *mk_alexpansion __P((char *));

    29   static int alias_expand_token __P((char *));

    30   static int time_command_acceptable __P((void));

    31 ***************

    32 *** 266,270 ****

    33   /* Variables to manage the task of reading here documents, because we need to

    34      defer the reading until after a complete command has been collected. */

    35 ! static REDIRECT *redir_stack[10];

    36   int need_here_doc;

    37   

    38 --- 269,275 ----

    39   /* Variables to manage the task of reading here documents, because we need to

    40      defer the reading until after a complete command has been collected. */

    41 ! #define HEREDOC_MAX 16

    42 ! 

    43 ! static REDIRECT *redir_stack[HEREDOC_MAX];

    44   int need_here_doc;

    45   

    46 ***************

    47 *** 308,312 ****

    48      index is decremented after a case, select, or for command is parsed. */

    49   #define MAX_CASE_NEST	128

    50 ! static int word_lineno[MAX_CASE_NEST];

    51   static int word_top = -1;

    52   

    53 --- 313,317 ----

    54      index is decremented after a case, select, or for command is parsed. */

    55   #define MAX_CASE_NEST	128

    56 ! static int word_lineno[MAX_CASE_NEST+1];

    57   static int word_top = -1;

    58   

    59 ***************

    60 *** 521,525 ****

    61   			  redir.filename = $2;

    62   			  $$ = make_redirection (source, r_reading_until, redir, 0);

    63 ! 			  redir_stack[need_here_doc++] = $$;

    64   			}

    65   	|	NUMBER LESS_LESS WORD

    66 --- 526,530 ----

    67   			  redir.filename = $2;

    68   			  $$ = make_redirection (source, r_reading_until, redir, 0);

    69 ! 			  push_heredoc ($$);

    70   			}

    71   	|	NUMBER LESS_LESS WORD

    72 ***************

    73 *** 528,532 ****

    74   			  redir.filename = $3;

    75   			  $$ = make_redirection (source, r_reading_until, redir, 0);

    76 ! 			  redir_stack[need_here_doc++] = $$;

    77   			}

    78   	|	REDIR_WORD LESS_LESS WORD

    79 --- 533,537 ----

    80   			  redir.filename = $3;

    81   			  $$ = make_redirection (source, r_reading_until, redir, 0);

    82 ! 			  push_heredoc ($$);

    83   			}

    84   	|	REDIR_WORD LESS_LESS WORD

    85 ***************

    86 *** 535,539 ****

    87   			  redir.filename = $3;

    88   			  $$ = make_redirection (source, r_reading_until, redir, REDIR_VARASSIGN);

    89 ! 			  redir_stack[need_here_doc++] = $$;

    90   			}

    91   	|	LESS_LESS_MINUS WORD

    92 --- 540,544 ----

    93   			  redir.filename = $3;

    94   			  $$ = make_redirection (source, r_reading_until, redir, REDIR_VARASSIGN);

    95 ! 			  push_heredoc ($$);

    96   			}

    97   	|	LESS_LESS_MINUS WORD

    98 ***************

    99 *** 542,546 ****

   100   			  redir.filename = $2;

   101   			  $$ = make_redirection (source, r_deblank_reading_until, redir, 0);

   102 ! 			  redir_stack[need_here_doc++] = $$;

   103   			}

   104   	|	NUMBER LESS_LESS_MINUS WORD

   105 --- 547,551 ----

   106   			  redir.filename = $2;

   107   			  $$ = make_redirection (source, r_deblank_reading_until, redir, 0);

   108 ! 			  push_heredoc ($$);

   109   			}

   110   	|	NUMBER LESS_LESS_MINUS WORD

   111 ***************

   112 *** 549,553 ****

   113   			  redir.filename = $3;

   114   			  $$ = make_redirection (source, r_deblank_reading_until, redir, 0);

   115 ! 			  redir_stack[need_here_doc++] = $$;

   116   			}

   117   	|	REDIR_WORD  LESS_LESS_MINUS WORD

   118 --- 554,558 ----

   119   			  redir.filename = $3;

   120   			  $$ = make_redirection (source, r_deblank_reading_until, redir, 0);

   121 ! 			  push_heredoc ($$);

   122   			}

   123   	|	REDIR_WORD  LESS_LESS_MINUS WORD

   124 ***************

   125 *** 556,560 ****

   126   			  redir.filename = $3;

   127   			  $$ = make_redirection (source, r_deblank_reading_until, redir, REDIR_VARASSIGN);

   128 ! 			  redir_stack[need_here_doc++] = $$;

   129   			}

   130   	|	LESS_LESS_LESS WORD

   131 --- 561,565 ----

   132   			  redir.filename = $3;

   133   			  $$ = make_redirection (source, r_deblank_reading_until, redir, REDIR_VARASSIGN);

   134 ! 			  push_heredoc ($$);

   135   			}

   136   	|	LESS_LESS_LESS WORD

   137 ***************

   138 *** 2637,2640 ****

   139 --- 2642,2660 ----

   140   static int esacs_needed_count;

   141   

   142 + static void

   143 + push_heredoc (r)

   144 +      REDIRECT *r;

   145 + {

   146 +   if (need_here_doc >= HEREDOC_MAX)

   147 +     {

   148 +       last_command_exit_value = EX_BADUSAGE;

   149 +       need_here_doc = 0;

   150 +       report_syntax_error (_("maximum here-document count exceeded"));

   151 +       reset_parser ();

   152 +       exit_shell (last_command_exit_value);

   153 +     }

   154 +   redir_stack[need_here_doc++] = r;

   155 + }

   156 + 

   157   void

   158   gather_here_documents ()

   159 *** ../bash-4.3.27/y.tab.c	2014-10-01 11:38:24.000000000 -0400

   160 --- y.tab.c	2014-10-01 12:46:11.000000000 -0400

   161 ***************

   162 *** 169,173 ****

   163   

   164   /* Copy the first part of user declarations.  */

   165 ! #line 21 "/usr/homes/chet/src/bash/src/parse.y"

   166   

   167   #include "config.h"

   168 --- 169,173 ----

   169   

   170   /* Copy the first part of user declarations.  */

   171 ! #line 21 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   172   

   173   #include "config.h"

   174 ***************

   175 *** 320,323 ****

   176 --- 320,326 ----

   177   static int reserved_word_acceptable __P((int));

   178   static int yylex __P((void));

   179 + 

   180 + static void push_heredoc __P((REDIRECT *));

   181 + static char *mk_alexpansion __P((char *));

   182   static int alias_expand_token __P((char *));

   183   static int time_command_acceptable __P((void));

   184 ***************

   185 *** 417,421 ****

   186   /* Variables to manage the task of reading here documents, because we need to

   187      defer the reading until after a complete command has been collected. */

   188 ! static REDIRECT *redir_stack[10];

   189   int need_here_doc;

   190   

   191 --- 420,426 ----

   192   /* Variables to manage the task of reading here documents, because we need to

   193      defer the reading until after a complete command has been collected. */

   194 ! #define HEREDOC_MAX 16

   195 ! 

   196 ! static REDIRECT *redir_stack[HEREDOC_MAX];

   197   int need_here_doc;

   198   

   199 ***************

   200 *** 459,463 ****

   201      index is decremented after a case, select, or for command is parsed. */

   202   #define MAX_CASE_NEST	128

   203 ! static int word_lineno[MAX_CASE_NEST];

   204   static int word_top = -1;

   205   

   206 --- 464,468 ----

   207      index is decremented after a case, select, or for command is parsed. */

   208   #define MAX_CASE_NEST	128

   209 ! static int word_lineno[MAX_CASE_NEST+1];

   210   static int word_top = -1;

   211   

   212 ***************

   213 *** 493,497 ****

   214   #if ! defined YYSTYPE && ! defined YYSTYPE_IS_DECLARED

   215   typedef union YYSTYPE

   216 ! #line 324 "/usr/homes/chet/src/bash/src/parse.y"

   217   {

   218     WORD_DESC *word;		/* the word that we read. */

   219 --- 498,502 ----

   220   #if ! defined YYSTYPE && ! defined YYSTYPE_IS_DECLARED

   221   typedef union YYSTYPE

   222 ! #line 329 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   223   {

   224     WORD_DESC *word;		/* the word that we read. */

   225 ***************

   226 *** 504,508 ****

   227   }

   228   /* Line 193 of yacc.c.  */

   229 ! #line 507 "y.tab.c"

   230   	YYSTYPE;

   231   # define yystype YYSTYPE /* obsolescent; will be withdrawn */

   232 --- 509,513 ----

   233   }

   234   /* Line 193 of yacc.c.  */

   235 ! #line 512 "y.tab.c"

   236   	YYSTYPE;

   237   # define yystype YYSTYPE /* obsolescent; will be withdrawn */

   238 ***************

   239 *** 517,521 ****

   240   

   241   /* Line 216 of yacc.c.  */

   242 ! #line 520 "y.tab.c"

   243   

   244   #ifdef short

   245 --- 522,526 ----

   246   

   247   /* Line 216 of yacc.c.  */

   248 ! #line 525 "y.tab.c"

   249   

   250   #ifdef short

   251 ***************

   252 *** 887,907 ****

   253   static const yytype_uint16 yyrline[] =

   254   {

   255 !        0,   377,   377,   388,   397,   412,   422,   424,   428,   434,

   256 !      440,   446,   452,   458,   464,   470,   476,   482,   488,   494,

   257 !      500,   506,   512,   518,   525,   532,   539,   546,   553,   560,

   258 !      566,   572,   578,   584,   590,   596,   602,   608,   614,   620,

   259 !      626,   632,   638,   644,   650,   656,   662,   668,   674,   680,

   260 !      686,   692,   700,   702,   704,   708,   712,   723,   725,   729,

   261 !      731,   733,   749,   751,   755,   757,   759,   761,   763,   765,

   262 !      767,   769,   771,   773,   775,   779,   784,   789,   794,   799,

   263 !      804,   809,   814,   821,   826,   831,   836,   843,   848,   853,

   264 !      858,   863,   868,   875,   880,   885,   892,   895,   898,   902,

   265 !      904,   935,   942,   947,   964,   969,   986,   993,   995,   997,

   266 !     1002,  1006,  1010,  1014,  1016,  1018,  1022,  1023,  1027,  1029,

   267 !     1031,  1033,  1037,  1039,  1041,  1043,  1045,  1047,  1051,  1053,

   268 !     1062,  1070,  1071,  1077,  1078,  1085,  1089,  1091,  1093,  1100,

   269 !     1102,  1104,  1108,  1109,  1112,  1114,  1116,  1120,  1121,  1130,

   270 !     1143,  1159,  1174,  1176,  1178,  1185,  1188,  1192,  1194,  1200,

   271 !     1206,  1223,  1243,  1245,  1268,  1272,  1274,  1276

   272   };

   273   #endif

   274 --- 892,912 ----

   275   static const yytype_uint16 yyrline[] =

   276   {

   277 !        0,   382,   382,   393,   402,   417,   427,   429,   433,   439,

   278 !      445,   451,   457,   463,   469,   475,   481,   487,   493,   499,

   279 !      505,   511,   517,   523,   530,   537,   544,   551,   558,   565,

   280 !      571,   577,   583,   589,   595,   601,   607,   613,   619,   625,

   281 !      631,   637,   643,   649,   655,   661,   667,   673,   679,   685,

   282 !      691,   697,   705,   707,   709,   713,   717,   728,   730,   734,

   283 !      736,   738,   754,   756,   760,   762,   764,   766,   768,   770,

   284 !      772,   774,   776,   778,   780,   784,   789,   794,   799,   804,

   285 !      809,   814,   819,   826,   831,   836,   841,   848,   853,   858,

   286 !      863,   868,   873,   880,   885,   890,   897,   900,   903,   907,

   287 !      909,   940,   947,   952,   969,   974,   991,   998,  1000,  1002,

   288 !     1007,  1011,  1015,  1019,  1021,  1023,  1027,  1028,  1032,  1034,

   289 !     1036,  1038,  1042,  1044,  1046,  1048,  1050,  1052,  1056,  1058,

   290 !     1067,  1075,  1076,  1082,  1083,  1090,  1094,  1096,  1098,  1105,

   291 !     1107,  1109,  1113,  1114,  1117,  1119,  1121,  1125,  1126,  1135,

   292 !     1148,  1164,  1179,  1181,  1183,  1190,  1193,  1197,  1199,  1205,

   293 !     1211,  1228,  1248,  1250,  1273,  1277,  1279,  1281

   294   };

   295   #endif

   296 ***************

   297 *** 2094,2098 ****

   298       {

   299           case 2:

   300 ! #line 378 "/usr/homes/chet/src/bash/src/parse.y"

   301       {

   302   			  /* Case of regular command.  Discard the error

   303 --- 2099,2103 ----

   304       {

   305           case 2:

   306 ! #line 383 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   307       {

   308   			  /* Case of regular command.  Discard the error

   309 ***************

   310 *** 2108,2112 ****

   311   

   312     case 3:

   313 ! #line 389 "/usr/homes/chet/src/bash/src/parse.y"

   314       {

   315   			  /* Case of regular command, but not a very

   316 --- 2113,2117 ----

   317   

   318     case 3:

   319 ! #line 394 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   320       {

   321   			  /* Case of regular command, but not a very

   322 ***************

   323 *** 2120,2124 ****

   324   

   325     case 4:

   326 ! #line 398 "/usr/homes/chet/src/bash/src/parse.y"

   327       {

   328   			  /* Error during parsing.  Return NULL command. */

   329 --- 2125,2129 ----

   330   

   331     case 4:

   332 ! #line 403 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   333       {

   334   			  /* Error during parsing.  Return NULL command. */

   335 ***************

   336 *** 2138,2142 ****

   337   

   338     case 5:

   339 ! #line 413 "/usr/homes/chet/src/bash/src/parse.y"

   340       {

   341   			  /* Case of EOF seen by itself.  Do ignoreeof or

   342 --- 2143,2147 ----

   343   

   344     case 5:

   345 ! #line 418 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   346       {

   347   			  /* Case of EOF seen by itself.  Do ignoreeof or

   348 ***************

   349 *** 2149,2163 ****

   350   

   351     case 6:

   352 ! #line 423 "/usr/homes/chet/src/bash/src/parse.y"

   353       { (yyval.word_list) = make_word_list ((yyvsp[(1) - (1)].word), (WORD_LIST *)NULL); }

   354       break;

   355   

   356     case 7:

   357 ! #line 425 "/usr/homes/chet/src/bash/src/parse.y"

   358       { (yyval.word_list) = make_word_list ((yyvsp[(2) - (2)].word), (yyvsp[(1) - (2)].word_list)); }

   359       break;

   360   

   361     case 8:

   362 ! #line 429 "/usr/homes/chet/src/bash/src/parse.y"

   363       {

   364   			  source.dest = 1;

   365 --- 2154,2168 ----

   366   

   367     case 6:

   368 ! #line 428 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   369       { (yyval.word_list) = make_word_list ((yyvsp[(1) - (1)].word), (WORD_LIST *)NULL); }

   370       break;

   371   

   372     case 7:

   373 ! #line 430 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   374       { (yyval.word_list) = make_word_list ((yyvsp[(2) - (2)].word), (yyvsp[(1) - (2)].word_list)); }

   375       break;

   376   

   377     case 8:

   378 ! #line 434 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   379       {

   380   			  source.dest = 1;

   381 ***************

   382 *** 2168,2172 ****

   383   

   384     case 9:

   385 ! #line 435 "/usr/homes/chet/src/bash/src/parse.y"

   386       {

   387   			  source.dest = 0;

   388 --- 2173,2177 ----

   389   

   390     case 9:

   391 ! #line 440 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   392       {

   393   			  source.dest = 0;

   394 ***************

   395 *** 2177,2181 ****

   396   

   397     case 10:

   398 ! #line 441 "/usr/homes/chet/src/bash/src/parse.y"

   399       {

   400   			  source.dest = (yyvsp[(1) - (3)].number);

   401 --- 2182,2186 ----

   402   

   403     case 10:

   404 ! #line 446 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   405       {

   406   			  source.dest = (yyvsp[(1) - (3)].number);

   407 ***************

   408 *** 2186,2190 ****

   409   

   410     case 11:

   411 ! #line 447 "/usr/homes/chet/src/bash/src/parse.y"

   412       {

   413   			  source.dest = (yyvsp[(1) - (3)].number);

   414 --- 2191,2195 ----

   415   

   416     case 11:

   417 ! #line 452 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   418       {

   419   			  source.dest = (yyvsp[(1) - (3)].number);

   420 ***************

   421 *** 2195,2199 ****

   422   

   423     case 12:

   424 ! #line 453 "/usr/homes/chet/src/bash/src/parse.y"

   425       {

   426   			  source.filename = (yyvsp[(1) - (3)].word);

   427 --- 2200,2204 ----

   428   

   429     case 12:

   430 ! #line 458 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   431       {

   432   			  source.filename = (yyvsp[(1) - (3)].word);

   433 ***************

   434 *** 2204,2208 ****

   435   

   436     case 13:

   437 ! #line 459 "/usr/homes/chet/src/bash/src/parse.y"

   438       {

   439   			  source.filename = (yyvsp[(1) - (3)].word);

   440 --- 2209,2213 ----

   441   

   442     case 13:

   443 ! #line 464 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   444       {

   445   			  source.filename = (yyvsp[(1) - (3)].word);

   446 ***************

   447 *** 2213,2217 ****

   448   

   449     case 14:

   450 ! #line 465 "/usr/homes/chet/src/bash/src/parse.y"

   451       {

   452   			  source.dest = 1;

   453 --- 2218,2222 ----

   454   

   455     case 14:

   456 ! #line 470 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   457       {

   458   			  source.dest = 1;

   459 ***************

   460 *** 2222,2226 ****

   461   

   462     case 15:

   463 ! #line 471 "/usr/homes/chet/src/bash/src/parse.y"

   464       {

   465   			  source.dest = (yyvsp[(1) - (3)].number);

   466 --- 2227,2231 ----

   467   

   468     case 15:

   469 ! #line 476 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   470       {

   471   			  source.dest = (yyvsp[(1) - (3)].number);

   472 ***************

   473 *** 2231,2235 ****

   474   

   475     case 16:

   476 ! #line 477 "/usr/homes/chet/src/bash/src/parse.y"

   477       {

   478   			  source.filename = (yyvsp[(1) - (3)].word);

   479 --- 2236,2240 ----

   480   

   481     case 16:

   482 ! #line 482 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   483       {

   484   			  source.filename = (yyvsp[(1) - (3)].word);

   485 ***************

   486 *** 2240,2244 ****

   487   

   488     case 17:

   489 ! #line 483 "/usr/homes/chet/src/bash/src/parse.y"

   490       {

   491   			  source.dest = 1;

   492 --- 2245,2249 ----

   493   

   494     case 17:

   495 ! #line 488 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   496       {

   497   			  source.dest = 1;

   498 ***************

   499 *** 2249,2253 ****

   500   

   501     case 18:

   502 ! #line 489 "/usr/homes/chet/src/bash/src/parse.y"

   503       {

   504   			  source.dest = (yyvsp[(1) - (3)].number);

   505 --- 2254,2258 ----

   506   

   507     case 18:

   508 ! #line 494 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   509       {

   510   			  source.dest = (yyvsp[(1) - (3)].number);

   511 ***************

   512 *** 2258,2262 ****

   513   

   514     case 19:

   515 ! #line 495 "/usr/homes/chet/src/bash/src/parse.y"

   516       {

   517   			  source.filename = (yyvsp[(1) - (3)].word);

   518 --- 2263,2267 ----

   519   

   520     case 19:

   521 ! #line 500 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   522       {

   523   			  source.filename = (yyvsp[(1) - (3)].word);

   524 ***************

   525 *** 2267,2271 ****

   526   

   527     case 20:

   528 ! #line 501 "/usr/homes/chet/src/bash/src/parse.y"

   529       {

   530   			  source.dest = 0;

   531 --- 2272,2276 ----

   532   

   533     case 20:

   534 ! #line 506 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   535       {

   536   			  source.dest = 0;

   537 ***************

   538 *** 2276,2280 ****

   539   

   540     case 21:

   541 ! #line 507 "/usr/homes/chet/src/bash/src/parse.y"

   542       {

   543   			  source.dest = (yyvsp[(1) - (3)].number);

   544 --- 2281,2285 ----

   545   

   546     case 21:

   547 ! #line 512 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   548       {

   549   			  source.dest = (yyvsp[(1) - (3)].number);

   550 ***************

   551 *** 2285,2289 ****

   552   

   553     case 22:

   554 ! #line 513 "/usr/homes/chet/src/bash/src/parse.y"

   555       {

   556   			  source.filename = (yyvsp[(1) - (3)].word);

   557 --- 2290,2294 ----

   558   

   559     case 22:

   560 ! #line 518 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   561       {

   562   			  source.filename = (yyvsp[(1) - (3)].word);

   563 ***************

   564 *** 2294,2358 ****

   565   

   566     case 23:

   567 ! #line 519 "/usr/homes/chet/src/bash/src/parse.y"

   568       {

   569   			  source.dest = 0;

   570   			  redir.filename = (yyvsp[(2) - (2)].word);

   571   			  (yyval.redirect) = make_redirection (source, r_reading_until, redir, 0);

   572 ! 			  redir_stack[need_here_doc++] = (yyval.redirect);

   573   			}

   574       break;

   575   

   576     case 24:

   577 ! #line 526 "/usr/homes/chet/src/bash/src/parse.y"

   578       {

   579   			  source.dest = (yyvsp[(1) - (3)].number);

   580   			  redir.filename = (yyvsp[(3) - (3)].word);

   581   			  (yyval.redirect) = make_redirection (source, r_reading_until, redir, 0);

   582 ! 			  redir_stack[need_here_doc++] = (yyval.redirect);

   583   			}

   584       break;

   585   

   586     case 25:

   587 ! #line 533 "/usr/homes/chet/src/bash/src/parse.y"

   588       {

   589   			  source.filename = (yyvsp[(1) - (3)].word);

   590   			  redir.filename = (yyvsp[(3) - (3)].word);

   591   			  (yyval.redirect) = make_redirection (source, r_reading_until, redir, REDIR_VARASSIGN);

   592 ! 			  redir_stack[need_here_doc++] = (yyval.redirect);

   593   			}

   594       break;

   595   

   596     case 26:

   597 ! #line 540 "/usr/homes/chet/src/bash/src/parse.y"

   598       {

   599   			  source.dest = 0;

   600   			  redir.filename = (yyvsp[(2) - (2)].word);

   601   			  (yyval.redirect) = make_redirection (source, r_deblank_reading_until, redir, 0);

   602 ! 			  redir_stack[need_here_doc++] = (yyval.redirect);

   603   			}

   604       break;

   605   

   606     case 27:

   607 ! #line 547 "/usr/homes/chet/src/bash/src/parse.y"

   608       {

   609   			  source.dest = (yyvsp[(1) - (3)].number);

   610   			  redir.filename = (yyvsp[(3) - (3)].word);

   611   			  (yyval.redirect) = make_redirection (source, r_deblank_reading_until, redir, 0);

   612 ! 			  redir_stack[need_here_doc++] = (yyval.redirect);

   613   			}

   614       break;

   615   

   616     case 28:

   617 ! #line 554 "/usr/homes/chet/src/bash/src/parse.y"

   618       {

   619   			  source.filename = (yyvsp[(1) - (3)].word);

   620   			  redir.filename = (yyvsp[(3) - (3)].word);

   621   			  (yyval.redirect) = make_redirection (source, r_deblank_reading_until, redir, REDIR_VARASSIGN);

   622 ! 			  redir_stack[need_here_doc++] = (yyval.redirect);

   623   			}

   624       break;

   625   

   626     case 29:

   627 ! #line 561 "/usr/homes/chet/src/bash/src/parse.y"

   628       {

   629   			  source.dest = 0;

   630 --- 2299,2363 ----

   631   

   632     case 23:

   633 ! #line 524 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   634       {

   635   			  source.dest = 0;

   636   			  redir.filename = (yyvsp[(2) - (2)].word);

   637   			  (yyval.redirect) = make_redirection (source, r_reading_until, redir, 0);

   638 ! 			  push_heredoc ((yyval.redirect));

   639   			}

   640       break;

   641   

   642     case 24:

   643 ! #line 531 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   644       {

   645   			  source.dest = (yyvsp[(1) - (3)].number);

   646   			  redir.filename = (yyvsp[(3) - (3)].word);

   647   			  (yyval.redirect) = make_redirection (source, r_reading_until, redir, 0);

   648 ! 			  push_heredoc ((yyval.redirect));

   649   			}

   650       break;

   651   

   652     case 25:

   653 ! #line 538 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   654       {

   655   			  source.filename = (yyvsp[(1) - (3)].word);

   656   			  redir.filename = (yyvsp[(3) - (3)].word);

   657   			  (yyval.redirect) = make_redirection (source, r_reading_until, redir, REDIR_VARASSIGN);

   658 ! 			  push_heredoc ((yyval.redirect));

   659   			}

   660       break;

   661   

   662     case 26:

   663 ! #line 545 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   664       {

   665   			  source.dest = 0;

   666   			  redir.filename = (yyvsp[(2) - (2)].word);

   667   			  (yyval.redirect) = make_redirection (source, r_deblank_reading_until, redir, 0);

   668 ! 			  push_heredoc ((yyval.redirect));

   669   			}

   670       break;

   671   

   672     case 27:

   673 ! #line 552 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   674       {

   675   			  source.dest = (yyvsp[(1) - (3)].number);

   676   			  redir.filename = (yyvsp[(3) - (3)].word);

   677   			  (yyval.redirect) = make_redirection (source, r_deblank_reading_until, redir, 0);

   678 ! 			  push_heredoc ((yyval.redirect));

   679   			}

   680       break;

   681   

   682     case 28:

   683 ! #line 559 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   684       {

   685   			  source.filename = (yyvsp[(1) - (3)].word);

   686   			  redir.filename = (yyvsp[(3) - (3)].word);

   687   			  (yyval.redirect) = make_redirection (source, r_deblank_reading_until, redir, REDIR_VARASSIGN);

   688 ! 			  push_heredoc ((yyval.redirect));

   689   			}

   690       break;

   691   

   692     case 29:

   693 ! #line 566 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   694       {

   695   			  source.dest = 0;

   696 ***************

   697 *** 2363,2367 ****

   698   

   699     case 30:

   700 ! #line 567 "/usr/homes/chet/src/bash/src/parse.y"

   701       {

   702   			  source.dest = (yyvsp[(1) - (3)].number);

   703 --- 2368,2372 ----

   704   

   705     case 30:

   706 ! #line 572 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   707       {

   708   			  source.dest = (yyvsp[(1) - (3)].number);

   709 ***************

   710 *** 2372,2376 ****

   711   

   712     case 31:

   713 ! #line 573 "/usr/homes/chet/src/bash/src/parse.y"

   714       {

   715   			  source.filename = (yyvsp[(1) - (3)].word);

   716 --- 2377,2381 ----

   717   

   718     case 31:

   719 ! #line 578 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   720       {

   721   			  source.filename = (yyvsp[(1) - (3)].word);

   722 ***************

   723 *** 2381,2385 ****

   724   

   725     case 32:

   726 ! #line 579 "/usr/homes/chet/src/bash/src/parse.y"

   727       {

   728   			  source.dest = 0;

   729 --- 2386,2390 ----

   730   

   731     case 32:

   732 ! #line 584 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   733       {

   734   			  source.dest = 0;

   735 ***************

   736 *** 2390,2394 ****

   737   

   738     case 33:

   739 ! #line 585 "/usr/homes/chet/src/bash/src/parse.y"

   740       {

   741   			  source.dest = (yyvsp[(1) - (3)].number);

   742 --- 2395,2399 ----

   743   

   744     case 33:

   745 ! #line 590 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   746       {

   747   			  source.dest = (yyvsp[(1) - (3)].number);

   748 ***************

   749 *** 2399,2403 ****

   750   

   751     case 34:

   752 ! #line 591 "/usr/homes/chet/src/bash/src/parse.y"

   753       {

   754   			  source.filename = (yyvsp[(1) - (3)].word);

   755 --- 2404,2408 ----

   756   

   757     case 34:

   758 ! #line 596 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   759       {

   760   			  source.filename = (yyvsp[(1) - (3)].word);

   761 ***************

   762 *** 2408,2412 ****

   763   

   764     case 35:

   765 ! #line 597 "/usr/homes/chet/src/bash/src/parse.y"

   766       {

   767   			  source.dest = 1;

   768 --- 2413,2417 ----

   769   

   770     case 35:

   771 ! #line 602 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   772       {

   773   			  source.dest = 1;

   774 ***************

   775 *** 2417,2421 ****

   776   

   777     case 36:

   778 ! #line 603 "/usr/homes/chet/src/bash/src/parse.y"

   779       {

   780   			  source.dest = (yyvsp[(1) - (3)].number);

   781 --- 2422,2426 ----

   782   

   783     case 36:

   784 ! #line 608 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   785       {

   786   			  source.dest = (yyvsp[(1) - (3)].number);

   787 ***************

   788 *** 2426,2430 ****

   789   

   790     case 37:

   791 ! #line 609 "/usr/homes/chet/src/bash/src/parse.y"

   792       {

   793   			  source.filename = (yyvsp[(1) - (3)].word);

   794 --- 2431,2435 ----

   795   

   796     case 37:

   797 ! #line 614 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   798       {

   799   			  source.filename = (yyvsp[(1) - (3)].word);

   800 ***************

   801 *** 2435,2439 ****

   802   

   803     case 38:

   804 ! #line 615 "/usr/homes/chet/src/bash/src/parse.y"

   805       {

   806   			  source.dest = 0;

   807 --- 2440,2444 ----

   808   

   809     case 38:

   810 ! #line 620 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   811       {

   812   			  source.dest = 0;

   813 ***************

   814 *** 2444,2448 ****

   815   

   816     case 39:

   817 ! #line 621 "/usr/homes/chet/src/bash/src/parse.y"

   818       {

   819   			  source.dest = (yyvsp[(1) - (3)].number);

   820 --- 2449,2453 ----

   821   

   822     case 39:

   823 ! #line 626 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   824       {

   825   			  source.dest = (yyvsp[(1) - (3)].number);

   826 ***************

   827 *** 2453,2457 ****

   828   

   829     case 40:

   830 ! #line 627 "/usr/homes/chet/src/bash/src/parse.y"

   831       {

   832   			  source.filename = (yyvsp[(1) - (3)].word);

   833 --- 2458,2462 ----

   834   

   835     case 40:

   836 ! #line 632 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   837       {

   838   			  source.filename = (yyvsp[(1) - (3)].word);

   839 ***************

   840 *** 2462,2466 ****

   841   

   842     case 41:

   843 ! #line 633 "/usr/homes/chet/src/bash/src/parse.y"

   844       {

   845   			  source.dest = 1;

   846 --- 2467,2471 ----

   847   

   848     case 41:

   849 ! #line 638 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   850       {

   851   			  source.dest = 1;

   852 ***************

   853 *** 2471,2475 ****

   854   

   855     case 42:

   856 ! #line 639 "/usr/homes/chet/src/bash/src/parse.y"

   857       {

   858   			  source.dest = (yyvsp[(1) - (3)].number);

   859 --- 2476,2480 ----

   860   

   861     case 42:

   862 ! #line 644 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   863       {

   864   			  source.dest = (yyvsp[(1) - (3)].number);

   865 ***************

   866 *** 2480,2484 ****

   867   

   868     case 43:

   869 ! #line 645 "/usr/homes/chet/src/bash/src/parse.y"

   870       {

   871   			  source.filename = (yyvsp[(1) - (3)].word);

   872 --- 2485,2489 ----

   873   

   874     case 43:

   875 ! #line 650 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   876       {

   877   			  source.filename = (yyvsp[(1) - (3)].word);

   878 ***************

   879 *** 2489,2493 ****

   880   

   881     case 44:

   882 ! #line 651 "/usr/homes/chet/src/bash/src/parse.y"

   883       {

   884   			  source.dest = 1;

   885 --- 2494,2498 ----

   886   

   887     case 44:

   888 ! #line 656 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   889       {

   890   			  source.dest = 1;

   891 ***************

   892 *** 2498,2502 ****

   893   

   894     case 45:

   895 ! #line 657 "/usr/homes/chet/src/bash/src/parse.y"

   896       {

   897   			  source.dest = (yyvsp[(1) - (3)].number);

   898 --- 2503,2507 ----

   899   

   900     case 45:

   901 ! #line 662 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   902       {

   903   			  source.dest = (yyvsp[(1) - (3)].number);

   904 ***************

   905 *** 2507,2511 ****

   906   

   907     case 46:

   908 ! #line 663 "/usr/homes/chet/src/bash/src/parse.y"

   909       {

   910   			  source.filename = (yyvsp[(1) - (3)].word);

   911 --- 2512,2516 ----

   912   

   913     case 46:

   914 ! #line 668 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   915       {

   916   			  source.filename = (yyvsp[(1) - (3)].word);

   917 ***************

   918 *** 2516,2520 ****

   919   

   920     case 47:

   921 ! #line 669 "/usr/homes/chet/src/bash/src/parse.y"

   922       {

   923   			  source.dest = 0;

   924 --- 2521,2525 ----

   925   

   926     case 47:

   927 ! #line 674 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   928       {

   929   			  source.dest = 0;

   930 ***************

   931 *** 2525,2529 ****

   932   

   933     case 48:

   934 ! #line 675 "/usr/homes/chet/src/bash/src/parse.y"

   935       {

   936   			  source.dest = (yyvsp[(1) - (3)].number);

   937 --- 2530,2534 ----

   938   

   939     case 48:

   940 ! #line 680 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   941       {

   942   			  source.dest = (yyvsp[(1) - (3)].number);

   943 ***************

   944 *** 2534,2538 ****

   945   

   946     case 49:

   947 ! #line 681 "/usr/homes/chet/src/bash/src/parse.y"

   948       {

   949   			  source.filename = (yyvsp[(1) - (3)].word);

   950 --- 2539,2543 ----

   951   

   952     case 49:

   953 ! #line 686 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   954       {

   955   			  source.filename = (yyvsp[(1) - (3)].word);

   956 ***************

   957 *** 2543,2547 ****

   958   

   959     case 50:

   960 ! #line 687 "/usr/homes/chet/src/bash/src/parse.y"

   961       {

   962   			  source.dest = 1;

   963 --- 2548,2552 ----

   964   

   965     case 50:

   966 ! #line 692 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   967       {

   968   			  source.dest = 1;

   969 ***************

   970 *** 2552,2556 ****

   971   

   972     case 51:

   973 ! #line 693 "/usr/homes/chet/src/bash/src/parse.y"

   974       {

   975   			  source.dest = 1;

   976 --- 2557,2561 ----

   977   

   978     case 51:

   979 ! #line 698 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

   980       {

   981   			  source.dest = 1;

   982 ***************

   983 *** 2561,2580 ****

   984   

   985     case 52:

   986 ! #line 701 "/usr/homes/chet/src/bash/src/parse.y"

   987       { (yyval.element).word = (yyvsp[(1) - (1)].word); (yyval.element).redirect = 0; }

   988       break;

   989   

   990     case 53:

   991 ! #line 703 "/usr/homes/chet/src/bash/src/parse.y"

   992       { (yyval.element).word = (yyvsp[(1) - (1)].word); (yyval.element).redirect = 0; }

   993       break;

   994   

   995     case 54:

   996 ! #line 705 "/usr/homes/chet/src/bash/src/parse.y"

   997       { (yyval.element).redirect = (yyvsp[(1) - (1)].redirect); (yyval.element).word = 0; }

   998       break;

   999   

  1000     case 55:

  1001 ! #line 709 "/usr/homes/chet/src/bash/src/parse.y"

  1002       {

  1003   			  (yyval.redirect) = (yyvsp[(1) - (1)].redirect);

  1004 --- 2566,2585 ----

  1005   

  1006     case 52:

  1007 ! #line 706 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

  1008       { (yyval.element).word = (yyvsp[(1) - (1)].word); (yyval.element).redirect = 0; }

  1009       break;

  1010   

  1011     case 53:

  1012 ! #line 708 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

  1013       { (yyval.element).word = (yyvsp[(1) - (1)].word); (yyval.element).redirect = 0; }

  1014       break;

  1015   

  1016     case 54:

  1017 ! #line 710 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

  1018       { (yyval.element).redirect = (yyvsp[(1) - (1)].redirect); (yyval.element).word = 0; }

  1019       break;

  1020   

  1021     case 55:

  1022 ! #line 714 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

  1023       {

  1024   			  (yyval.redirect) = (yyvsp[(1) - (1)].redirect);

  1025 ***************

  1026 *** 2583,2587 ****

  1027   

  1028     case 56:

  1029 ! #line 713 "/usr/homes/chet/src/bash/src/parse.y"

  1030       {

  1031   			  register REDIRECT *t;

  1032 --- 2588,2592 ----

  1033   

  1034     case 56:

  1035 ! #line 718 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

  1036       {

  1037   			  register REDIRECT *t;

  1038 ***************

  1039 *** 2595,2619 ****

  1040   

  1041     case 57:

  1042 ! #line 724 "/usr/homes/chet/src/bash/src/parse.y"

  1043       { (yyval.command) = make_simple_command ((yyvsp[(1) - (1)].element), (COMMAND *)NULL); }

  1044       break;

  1045   

  1046     case 58:

  1047 ! #line 726 "/usr/homes/chet/src/bash/src/parse.y"

  1048       { (yyval.command) = make_simple_command ((yyvsp[(2) - (2)].element), (yyvsp[(1) - (2)].command)); }

  1049       break;

  1050   

  1051     case 59:

  1052 ! #line 730 "/usr/homes/chet/src/bash/src/parse.y"

  1053       { (yyval.command) = clean_simple_command ((yyvsp[(1) - (1)].command)); }

  1054       break;

  1055   

  1056     case 60:

  1057 ! #line 732 "/usr/homes/chet/src/bash/src/parse.y"

  1058       { (yyval.command) = (yyvsp[(1) - (1)].command); }

  1059       break;

  1060   

  1061     case 61:

  1062 ! #line 734 "/usr/homes/chet/src/bash/src/parse.y"

  1063       {

  1064   			  COMMAND *tc;

  1065 --- 2600,2624 ----

  1066   

  1067     case 57:

  1068 ! #line 729 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

  1069       { (yyval.command) = make_simple_command ((yyvsp[(1) - (1)].element), (COMMAND *)NULL); }

  1070       break;

  1071   

  1072     case 58:

  1073 ! #line 731 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

  1074       { (yyval.command) = make_simple_command ((yyvsp[(2) - (2)].element), (yyvsp[(1) - (2)].command)); }

  1075       break;

  1076   

  1077     case 59:

  1078 ! #line 735 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

  1079       { (yyval.command) = clean_simple_command ((yyvsp[(1) - (1)].command)); }

  1080       break;

  1081   

  1082     case 60:

  1083 ! #line 737 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

  1084       { (yyval.command) = (yyvsp[(1) - (1)].command); }

  1085       break;

  1086   

  1087     case 61:

  1088 ! #line 739 "/usr/src/local/chet/src/bash/bash-4.3.28/parse.y"

  1089       {

  1090   			  COMMAND *tc;

  1091 ***************

  1092 *** 2634,2703 ****

  1093   

  1094     case 62:

  1095 ! #line 750 "/usr/homes/chet/src/bash/src/parse.y"

  1096       { (yyval.command) = (yyvsp[(1) - (1)].command); }

  1097       break;

  1098   

  1099     case 63:

  1100 ! #line 752 "/usr/homes/chet/src/bash/src/parse.y"

  1101       { (yyval.command) = (yyvsp[(1) - (1)].command); }

  1102       break;

  1103   

  1104     case 64:

  1105 ! #line 756 "/usr/homes/chet/src/bash/src/parse.y"

  1106       { (yyval.command) = (yyvsp[(1) - (1)].command); }

  1107       break;

  1108   

  1109     case 65:

  1110 ! #line 758 "/usr/homes/chet/src/bash/src/parse.y"

  1111       { (yyval.command) = (yyvsp[(1) - (1)].command); }

  1112       break;

  1113   

  1114     case 66:

  1115 ! #line 760 "/usr/homes/chet/src/bash/src/parse.y"

  1116       { (yyval.command) = make_while_command ((yyvsp[(2) - (5)].command), (yyvsp[(4) - (5)].command)); }

  1117       break;

  1118   

  1119     case 67:

  1120 ! #line 762 "/usr/homes/chet/src/bash/src/parse.y"

  1121       { (yyval.command) = make_until_command ((yyvsp[(2) - (5)].command), (yyvsp[(4) - (5)].command)); }

  1122       break;

  1123   

  1124     case 68:

  1125 ! #line 764 "/usr/homes/chet/src/bash/src/parse.y"

  1126       { (yyval.command) = (yyvsp[(1) - (1)].command); }

  1127       break;

  1128   

  1129     case 69:

  1130 ! #line 766 "/usr/homes/chet/src/bash/src/parse.y"

  1131       { (yyval.command) = (yyvsp[(1) - (1)].command); }

  1132       break;

  1133   

  1134     case 70:

  1135 ! #line 768 "/usr/homes/chet/src/bash/src/parse.y"