From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <zsh-workers-return-28162-mason-zsh=primenet.com.au@zsh.org>
Received: (qmail 14000 invoked by alias); 12 Aug 2010 23:07:27 -0000
Mailing-List: contact zsh-workers-help@zsh.org; run by ezmlm
Precedence: bulk
X-No-Archive: yes
List-Id: Zsh Workers List <zsh-workers.zsh.org>
List-Post: <mailto:zsh-workers@zsh.org>
List-Help: <mailto:zsh-workers-help@zsh.org>
X-Seq: 28162
Received: (qmail 10301 invoked from network); 12 Aug 2010 23:07:25 -0000
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on f.primenet.com.au
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_NONE
	autolearn=ham version=3.3.1
Received-SPF: none (ns1.primenet.com.au: domain at closedmail.com does not designate permitted sender hosts)
From: Bart Schaefer <schaefer@brasslantern.com>
Message-id: <100812160702.ZM20648@torch.brasslantern.com>
Date: Thu, 12 Aug 2010 16:07:01 -0700
In-reply-to: <20100812173356.GC24998@ph>
Comments: In reply to Philipp Hartwig <ph.hartwig@googlemail.com>
 "Re: segfault on menu-select" (Aug 12,  7:33pm)
References: <20100812144626.GI28144@ph>
 <8762zf6fwo.fsf@ft.bewatermyfriend.org>	<20100812152044.GJ28144@ph>
	<87wrrv4yrg.fsf@ft.bewatermyfriend.org>	<20100812165307.GA24998@ph>
	<87r5i34v51.fsf@ft.bewatermyfriend.org>	<20100812173356.GC24998@ph>
X-Mailer: OpenZMail Classic (0.9.2 24April2005)
To: zsh-workers@zsh.org
Subject: Re: segfault on menu-select
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii

On Aug 12,  7:33pm, Philipp Hartwig wrote:
}
} #1  0x00007f5cb63b76eb in instmatch (m=0x1776660, scs=0x7fff5707cf2c) at compresult.c:634
} #2  0x00007f5cb63b87bb in do_single (m=0x1776660) at compresult.c:989
} #3  0x00007f5cb63a3616 in do_completion (dummy=0x7f5cb6810f68, dat=0x7fff5707d060) at compcore.c:413
} #4  0x00000000004632a9 in runhookdef (h=0x7f5cb6810f68, d=0x7fff5707d060) at module.c:996

Interesting.  I can't even reproduce that stack trace.  If I put a
breakpoint in instmatch I get this trace:

#0  instmatch (m=0x8211d18, scs=0xbfebb2c4)
    at ../../../zsh-4.0/Src/Zle/compresult.c:580
#1  0x081032b3 in do_single (m=0x8211d18)
    at ../../../zsh-4.0/Src/Zle/compresult.c:989
#2  0x081041c6 in do_ambig_menu ()
    at ../../../zsh-4.0/Src/Zle/compresult.c:1404
#3  0x08102b1f in do_ambiguous () at ../../../zsh-4.0/Src/Zle/compresult.c:767
#4  0x080f31b3 in do_completion (dummy=0x815f8b4, dat=0xbfebb3d0)
    at ../../../zsh-4.0/Src/Zle/compcore.c:401
#5  0x080914da in runhookdef (h=0x815f8b4, d=0xbfebb3d0)
    at ../../zsh-4.0/Src/module.c:996

So that means you've hit this branch in compcore.c:

        } else if (nmatches == 1 || (nmatches > 1 && !diffmatches)) {

So I can force my shell through that same branch by hitting ^o in a
directory containing exactly one file, but I still don't get a crash.

What does "ls" show just before you begin completing?

--