Regression in ash (crashing)

[Rich Felker]

[Resending to list; I hate the reply defaults on this list...]

On Wed, Dec 12, 2012 at 03:48:49PM +0600, Vladislav Grishenko wrote:
> Hi Denys, Rich
> 
> Before 4ba6c5d3ba3d2c7922aff6b5c2e73b8325f1cf17 expfname pointer was never
> freed. 
> But after, under some circumstances expfname pointer contains garbage due
> copynode() doesn't handle it yet.
> Trivial fix attached, or different option would be to move that field out
> from nfile struct. 

This doesn't fix it; the crash happens in exactly the same place
still. There must be some other place the pointer is set to something
invalid or left uninitialized.

Rich