Another Zsh parser segmentation fault (heredoc)

[Eduardo Bustamante <dualbus@gmail.com>]

dualbus@debian:~/src/zsh/zsh$ git rev-parse HEAD
f25d01a97c61fdac5d6e0a6a8fb63b5b2b5f3393

dualbus@debian:~/bash-fuzzing/zsh-parser$ cat -v getredirs
0 {^X}<<0

dualbus@debian:~/bash-fuzzing/zsh-parser$ base64 getredirs
MCB7GH08PDAK

(gdb) r -n getredirs
Starting program: /home/dualbus/src/zsh/zsh/Src/zsh -n getredirs
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".

Program received signal SIGSEGV, Segmentation fault.
strlen () at ../sysdeps/x86_64/strlen.S:106
106     ../sysdeps/x86_64/strlen.S: No such file or directory.
(gdb) bt
#0  strlen () at ../sysdeps/x86_64/strlen.S:106
#1  0x00000000004c38e5 in taddstr (s=0x800035df20d2 <error: Cannot
access memory at address 0x800035df20d2>) at text.c:148
#2  0x00000000004c3df9 in taddlist (state=0x7fffffffcc28, num=0) at text.c:174
#3  0x00000000004c1b72 in gettext2 (state=0x7fffffffcc28) at text.c:510
#4  0x00000000004c3150 in getjobtext (prog=0x7ffff7e5b360,
c=0x7ffff7e5b3a4) at text.c:337
#5  0x000000000043b78b in execpline2 (state=0x7fffffffde20, pcode=131,
how=18, input=0, output=0, last1=0) at exec.c:1865
#6  0x0000000000433f6e in execpline (state=0x7fffffffde20,
slcode=9218, how=18, last1=0) at exec.c:1602
#7  0x0000000000432dfe in execlist (state=0x7fffffffde20,
dont_change_job=0, exiting=0) at exec.c:1360
#8  0x000000000043277e in execode (p=0x7ffff7e5b360,
dont_change_job=0, exiting=0, context=0x4d90c4 "toplevel") at
exec.c:1141
#9  0x000000000045e366 in loop (toplevel=1, justonce=0) at init.c:208
#10 0x00000000004627d6 in zsh_main (argc=3, argv=0x7fffffffe448) at init.c:1692
#11 0x0000000000411a32 in main (argc=3, argv=0x7fffffffe448) at ./main.c:93