sed bug report - Segfault on L command with long address

Jodie Cunningham <[email protected]> Tue, 9 Dec 2014 17:26:49 -0600
Newsgroups gmane.comp.gnu.utils.bugs
Message-ID <CABfY0L1WJ4uKx0vQDxmwfn3Tv6RUUZFFi2+Fh1w34r240svGEA@mail.gmail.com>
To reproduce, run:
sed 'L222222' <<<d

These do not segfault:
sed 'L22222' <<<d
sed 'L2222222222222222222222222' <<<d

I do not have any expected behavior for this as it was just found by
the fuzzer American Fuzzy Lop (lcamtuf.coredump.cx/afl/) .

Test machine:
Distributor ID: Ubuntu
Description: Ubuntu 14.04.1 LTS
Release: 14.04
Codename: trusty

sed:
  Installed: 4.2.2-4ubuntu1
  Candidate: 4.2.2-4ubuntu1
  Version table:
 *** 4.2.2-4ubuntu1 0
        500 http://us.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages
        100 /var/lib/dpkg/status

$ sed --version
sed (GNU sed) 4.2.2

Tracked downstream at Ubuntu:
https://bugs.launchpad.net/ubuntu/+source/sed/+bug/1400575


Thank you,
-Jodie Cunningham