Ha! I haven't analyzed this yet (and might never) but running bash
under GDB (actually, I attached GDB to the child bash proc) yields:
Program received signal SIGABRT, Aborted.
0x400497b1 in kill () from /lib/libc.so.6
(gdb) where
#0 0x400497b1 in kill () from /lib/libc.so.6
#1 0x40049494 in raise () from /lib/libc.so.6
#2 0x4004ac11 in abort () from /lib/libc.so.6
#3 0x0806c27d in programming_error () at error.c:258
#4 0x080acd69 in xbotch (mem=0x8229148, e=4,
s=0x80c3020 "free: underflow detected; mh_nbytes out of range",
file=0x80b1e19 "array.c", line=78) at malloc.c:286
#5 0x080ad297 in internal_free (mem=0x8229148, file=0x80b1e19 "array.c",
line=78, flags=1) at malloc.c:759
#6 0x080ad6ee in sh_free (mem=0x8229148, file=0x80b1e19 "array.c", line=78)
at malloc.c:1006
#7 0x08088a1c in sh_xfree (string=0x8229148, file=0x80b1e19 "array.c",
line=78) at xmalloc.c:189
#8 0x0807dee1 in destroy_array_element (ae=0x80d78a8) at array.c:78
#9 0x0807df7c in empty_array (a=0x80d7868) at array.c:108
#10 0x0806b976 in set_pipestatus_array (ps=0x80c4764) at variables.c:3276
#11 0x0806b9cb in set_pipestatus_from_exit (s=0) at variables.c:3293
#12 0x08066de1 in execute_simple_command (simple_command=0x80faa28,
pipe_in=-1, pipe_out=-1, async=0, fds_to_close=0x80fb188)
at execute_cmd.c:2721
#13 0x0806434e in execute_command_internal (command=0x80fadc8, asynchronous=0,
pipe_in=-1, pipe_out=-1, fds_to_close=0x80fb188) at execute_cmd.c:623
#14 0x08063e07 in execute_command (command=0x80fadc8) at execute_cmd.c:317
#15 0x0806613b in execute_while_or_until (while_command=0x80faf28, type=0)
at execute_cmd.c:2139
#16 0x080660e3 in execute_while_command (while_command=0x80faf28)
at execute_cmd.c:2107
#17 0x080644d5 in execute_command_internal (command=0x80faf48, asynchronous=0,
pipe_in=-1, pipe_out=-1, fds_to_close=0x80fb048) at execute_cmd.c:725
#18 0x08064f8d in execute_in_subshell (command=0x80faf48, asynchronous=0,
pipe_in=5, pipe_out=-1, fds_to_close=0x80fb048) at execute_cmd.c:1257
#19 0x08064061 in execute_command_internal (command=0x80faf48, asynchronous=0,
pipe_in=5, pipe_out=-1, fds_to_close=0x80fb048) at execute_cmd.c:502
#20 0x08065229 in execute_pipeline (command=0x80fafa8, asynchronous=0,
pipe_in=-1, pipe_out=-1, fds_to_close=0x80fb048) at execute_cmd.c:1377
#21 0x080653e9 in execute_connection (command=0x80fafa8, asynchronous=0,
pipe_in=-1, pipe_out=-1, fds_to_close=0x80fb048) at execute_cmd.c:1488
#22 0x0806458e in execute_command_internal (command=0x80fafa8, asynchronous=0,
pipe_in=-1, pipe_out=-1, fds_to_close=0x80fb048) at execute_cmd.c:785
#23 0x08063e07 in execute_command (command=0x80fafa8) at execute_cmd.c:317
#24 0x0805b3b0 in reader_loop () at eval.c:139
#25 0x08059a37 in main (argc=1, argv=0xbffff674, env=0xbffff67c) at shell.c:668
#26 0x4003917f in __libc_start_main () from /lib/libc.so.6
*****************************************************************
To unsubscribe from this list, send mail to [EMAIL PROTECTED]
with the text 'unsubscribe gnhlug' in the message body.
*****************************************************************
