I would conclude that nv_putval () is not a safe place from which to call sh_subfork () as it is also used for restoring the state after leaving a virtual subshell. The forking should probably happen ...

While working on the fix for issue #4211 I noticed that the exec_subshell() function only collects the stdout of the sub shell. This means that any output written to stderr by fish script run via that ...