[PATCH] Defer SIGCHLD trap handler when waitchld is called from within the signal handler

[Siddhesh Poyarekar]

Configuration Information [Automatically generated, do not change]:
Machine: x86_64
OS: linux-gnu
Compiler: gcc
Compilation CFLAGS:  -DPROGRAM='bash' -DCONF_HOSTTYPE='x86_64' 
-DCONF_OSTYPE='linux-gnu' -DCONF_MACHTYPE='x86_64-redhat-linux-gnu' 
-DCONF_VENDOR='redhat' -DLOCALEDIR='/usr/share/\
locale' -DPACKAGE='bash' -DSHELL -DHAVE_CONFIG_H   -I.  -I. -I./include -I./lib 
 -D_GNU_SOURCE -DRECYCLES_PIDS  -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 
-fexceptions -fstack-pr\
otector --param=ssp-buffer-size=4  -m64 -mtune=generic
uname output: Linux hostname.removed 3.1.6-1.fc16.x86_64 #1 SMP Wed Dec 21 
22:41:17 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux
Machine Type: x86_64-redhat-linux-gnu

Bash Version: 4.2
Patch Level: 20
Release Status: release

Description:

When a SIGCHLD is received in job control mode and a handler for the
signal is installed, bash calls the trap handler within the signal
handler itself. This is unsafe because the trap handler function
run_sigchld_trap() uses the glibc malloc functions quite extensively
(within the function itself and also the function it calls, i.e.
parse_and_execute() ). This results in a deadlock and sometimes even a
segmentation fault due to memory corruption.

Repeat-By:

$ cat > foo.sh
#!/bin/sh

check_stop_child_trap() {
        echo "child died!"
}

do_something() {
        while true; do
                true &
        done
}

trap check_stop_child_trap SIGCHLD
do_something &
do_something

^d

$ bash
$ . foo.sh

------------------

The above may either hang or result in a segmentation fault.

Fix:

The attached patch fixes this by deferring execution of the trap
handler by adding it to pending_sigs.

Regards,
Siddhesh

bash-defer-sigchld-trap.patch
Description: Text document