--- trunk/mkinitrd-magellan/busybox/shell/ash.c	2010/05/30 11:32:42	984
+++ trunk/mkinitrd-magellan/busybox/shell/ash.c	2010/05/30 11:39:38	985
@@ -5424,7 +5424,11 @@
 		size_t fulllen = len + strlen(p) + 1;
 
 		if (flag & RMESCAPE_GROW) {
+			int strloc = str - (char *)stackblock();
 			r = makestrspace(fulllen, expdest);
+			/* p and str may be invalidated by makestrspace */
+			str = (char *)stackblock() + strloc;
+			p = str + len;
 		} else if (flag & RMESCAPE_HEAP) {
 			r = ckmalloc(fulllen);
 		} else {