Crash during tab completion

Crash during tab completion

[Tilman Keskinoz]

Hi,

I have fairly reproducable crash during tab completion in svn log on NFS mounted volume with zsh 5.2 on Ubuntu 16.10

Any help appreciated

Backtrace:

#0  0x00005555555cedd0 in patmatch (prog=prog@entry=0x5555558ca728) at ../../Src/pattern.c:3195
#1  0x00005555555cf939 in pattryrefs (prog=prog@entry=0x5555558ca6f0, string=<optimized out>, 
    string@entry=0x7ffff7facd68 "log: Show the log messages for a set of revision(s) and/or path(s).\nusage: 1. log [PATH][@REV]\n       2. log URL[@REV] [PATH...]\n\n  1. Print the log messages for the URL corresponding to PATH\n     (de"..., stringlen=<optimized out>, stringlen@entry=3032, unmetalenin=<optimized out>, unmetalenin@entry=0, 
    patstralloc=patstralloc@entry=0x7ffffffe0310, patoffset=patoffset@entry=0, nump=0x0, begp=0x0, endp=0x0)
    at ../../Src/pattern.c:2457
#2  0x00005555555d008f in pattrylen (prog=prog@entry=0x5555558ca6f0, 
    string=string@entry=0x7ffff7facd68 "log: Show the log messages for a set of revision(s) and/or path(s).\nusage: 1. log [PATH][@REV]\n       2. log URL[@REV] [PATH...]\n\n  1. Print the log messages for the URL corresponding to PATH\n     (de"..., len=len@entry=3032, unmetalen=unmetalen@entry=0, patstralloc=patstralloc@entry=0x7ffffffe0310, 
    offset=offset@entry=0) at ../../Src/pattern.c:2195
#3  0x000055555558db60 in igetmatch (sp=sp@entry=0x7ffffffe0540, p=0x5555558ca6f0, fl=16, n=n@entry=1, 
    replstr=<optimized out>, repllistp=repllistp@entry=0x0) at ../../Src/glob.c:2854
#4  0x00005555555930e5 in getmatch (sp=sp@entry=0x7ffffffe0540, pat=<optimized out>, fl=<optimized out>, fl@entry=16, 
    n=n@entry=1, replstr=<optimized out>, replstr@entry=0x0) at ../../Src/glob.c:2637
#5  0x00005555555df333 in paramsubst (ret_flags=<optimized out>, pf_flags=<optimized out>, qt=<optimized out>, 
    str=0x7ffffffe0530, n=<optimized out>, l=<optimized out>) at ../../Src/subst.c:3013
#6  stringsubst (list=list@entry=0x7ffffffe0810, node=<optimized out>, pf_flags=<optimized out>, pf_flags@entry=64, 
    ret_flags=ret_flags@entry=0x7ffffffe09d4, asssub=asssub@entry=0) at ../../Src/subst.c:243
#7  0x00005555555e0fb1 in prefork (list=list@entry=0x7ffffffe0810, flags=flags@entry=64, 
    ret_flags=ret_flags@entry=0x7ffffffe09d4) at ../../Src/subst.c:85
#8  0x00005555555e1a4e in multsub (s=s@entry=0x7ffffffe09f0, pf_flags=pf_flags@entry=64, a=a@entry=0x7ffffffe09f8, 
    isarr=isarr@entry=0x7ffffffe09d0, ms_flags=ms_flags@entry=0x7ffffffe09d4, sep=0x0) at ../../Src/subst.c:527
#9  0x00005555555dc928 in paramsubst (ret_flags=<optimized out>, pf_flags=<optimized out>, qt=<optimized out>, 
    str=0x7ffffffe09e0, n=<optimized out>, l=<optimized out>) at ../../Src/subst.c:2298
#10 stringsubst (list=list@entry=0x7ffffffe0cc0, node=<optimized out>, pf_flags=<optimized out>, pf_flags@entry=64, 
    ret_flags=ret_flags@entry=0x7ffffffe0e84, asssub=asssub@entry=0) at ../../Src/subst.c:243
#11 0x00005555555e0fb1 in prefork (list=list@entry=0x7ffffffe0cc0, flags=flags@entry=64, 
    ret_flags=ret_flags@entry=0x7ffffffe0e84) at ../../Src/subst.c:85
#12 0x00005555555e1a4e in multsub (s=s@entry=0x7ffffffe0ea0, pf_flags=pf_flags@entry=64, a=a@entry=0x7ffffffe0ea8, 
    isarr=isarr@entry=0x7ffffffe0e80, ms_flags=ms_flags@entry=0x7ffffffe0e84, sep=0x0) at ../../Src/subst.c:527
#13 0x00005555555dc928 in paramsubst (ret_flags=<optimized out>, pf_flags=<optimized out>, qt=<optimized out>, 
    str=0x7ffffffe0e90, n=<optimized out>, l=<optimized out>) at ../../Src/subst.c:2298
#14 stringsubst (list=list@entry=0x7ffffffe1170, node=<optimized out>, pf_flags=<optimized out>, pf_flags@entry=64, 
    ret_flags=ret_flags@entry=0x7ffffffe1334, asssub=asssub@entry=0) at ../../Src/subst.c:243
#15 0x00005555555e0fb1 in prefork (list=list@entry=0x7ffffffe1170, flags=flags@entry=64, 
    ret_flags=ret_flags@entry=0x7ffffffe1334) at ../../Src/subst.c:85
#16 0x00005555555e1a4e in multsub (s=s@entry=0x7ffffffe1350, pf_flags=pf_flags@entry=64, a=a@entry=0x7ffffffe1358, 
    isarr=isarr@entry=0x7ffffffe1330, ms_flags=ms_flags@entry=0x7ffffffe1334, sep=0x0) at ../../Src/subst.c:527
#17 0x00005555555dc928 in paramsubst (ret_flags=<optimized out>, pf_flags=<optimized out>, qt=<optimized out>, 
    str=0x7ffffffe1340, n=<optimized out>, l=<optimized out>) at ../../Src/subst.c:2298
#18 stringsubst (list=list@entry=0x7ffffffe1620, node=<optimized out>, pf_flags=<optimized out>, pf_flags@entry=64, 
    ret_flags=ret_flags@entry=0x7ffffffe17e4, asssub=asssub@entry=0) at ../../Src/subst.c:243
#19 0x00005555555e0fb1 in prefork (list=list@entry=0x7ffffffe1620, flags=flags@entry=64, 
    ret_flags=ret_flags@entry=0x7ffffffe17e4) at ../../Src/subst.c:85
#20 0x00005555555e1a4e in multsub (s=s@entry=0x7ffffffe1800, pf_flags=pf_flags@entry=64, a=a@entry=0x7ffffffe1808, 
    isarr=isarr@entry=0x7ffffffe17e0, ms_flags=ms_flags@entry=0x7ffffffe17e4, sep=0x0) at ../../Src/subst.c:527
#21 0x00005555555dc928 in paramsubst (ret_flags=<optimized out>, pf_flags=<optimized out>, qt=<optimized out>, 
    str=0x7ffffffe17f0, n=<optimized out>, l=<optimized out>) at ../../Src/subst.c:2298
#22 stringsubst (list=list@entry=0x7ffff7fc9dc8, node=<optimized out>, pf_flags=<optimized out>, pf_flags@entry=0, 
    ret_flags=ret_flags@entry=0x7ffffffe199c, asssub=asssub@entry=0) at ../../Src/subst.c:243
#23 0x00005555555e0fb1 in prefork (list=list@entry=0x7ffff7fc9dc8, flags=flags@entry=2, ret_flags=0x7ffffffe199c, 
    ret_flags@entry=0x0) at ../../Src/subst.c:85
#24 0x0000555555580aad in addvars (state=state@entry=0x7ffffffe78d0, pc=pc@entry=0x555555918aec, 

Re: Crash during tab completion

[Peter Stephenson]

On Fri, 13 Jan 2017 11:56:18 +0100
Tilman Keskinoz <arved@arved.at> wrote:
> I have fairly reproducable crash during tab completion in svn log on
> NFS mounted volume with zsh 5.2 on Ubuntu 16.10

We're going to need to be able to reproduce this ourselves, and with
5.3.1 if it's still happening.  There are various possibly relevant
fixes in 5.3.1, and one vague possibility since then, though I don't
think it's that in this case, unless you're interrupting the shell.
Probably all your backtrace is telling us is the memory being examined
at the point of the crash was already invalid due to some previous
problem.

pws