On Wed, Sep 17, 2025 at 5:31 PM Chet Ramey <chet.ra...@case.edu> wrote: > Thanks, this is a mostly-unrelated issue that is easily fixed.
Ah, you beat me to it. The problem is `i' ends up with -1 here https://cgit.git.savannah.gnu.org/cgit/bash.git/tree/builtins/read.def?h=devel#n595 and then the SIGTERM and SIGCONT send bash here https://cgit.git.savannah.gnu.org/cgit/bash.git/tree/builtins/read.def?h=devel#n541 and it corrupts the malloc header by writing to `input_string[-1]', isn't it?
