[Bug 283934] The jail.conf(5) parser crashes when expanding a multi-valued variable inside an other variable.

From: <bugzilla-noreply_at_freebsd.org>
Date: Wed, 08 Jan 2025 17:21:31 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=283934

            Bug ID: 283934
           Summary: The jail.conf(5) parser crashes when expanding a
                    multi-valued variable inside an other variable.
           Product: Base System
           Version: 14.2-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: misc
          Assignee: bugs@FreeBSD.org
          Reporter: crest@rlwinm.de

The following jail.conf minimal reproducer snippet is enough to segfault
jail(8) during parsing (e.g. when invoked as `jail -e $'\n'`):

        $x  = "foo";
        $x += "bar";
        $y += "$x";

Instead of crashing jail(8) should either expand the multi-valued $x variable
(with values joined by newlines) or at least refuse to expand multi-valued
variables with a error message containing the configuration file path, line
number, and a short description of the configuration error.

-- 
You are receiving this mail because:
You are the assignee for the bug.