core dump with completion

[Tanaka Akira <akr@jaist.ac.jp>]

zsh patched upto 9421 dumps core on Solaris 7 as follows:

Z:akr@is27e1u11% cvs co -r zsh-workers_9421 -d zsh9421 zsh
Z:akr@is27e1u11% cd zsh9421
Z:akr@is27e1u11% Util/preconfig
Z:akr@is27e1u11%  ./configure --prefix=/space/akr/zsh/tmp --enable-zsh-debug --enable-zsh-mem-debug && make && make install
Z:akr@is27e1u11% Src/zsh -f
is27e1u11% bindkey -e; autoload -U compinit; compinit -D
is27e1u11% ls c<TAB>
is27e1u11% ls config<TAB>
zsh: segmentation fault (core dumped)  Src/zsh -f
Z:akr@is27e1u11% 

(gdb) where
#0  0xff145c8c in realfree ()
#1  0xff146460 in cleanfree ()
#2  0xff145628 in _malloc_unlocked ()
#3  0xff145544 in malloc ()
#4  0x681d0 in zalloc (size=45) at mem.c:491
#5  0x683d8 in dupstring (
    s=0x10eeb8 "no=0:fi=0:di=0:ln=0:pi=0:so=0:bd=0:cd=0:ex=0") at mem.c:555
#6  0xff023604 in getcols (c=0xff038304) at complist.c:360
#7  0xff025340 in complistmatches (dummy=0xff0967e4, dat=0xffbeefe0)
    at complist.c:767
#8  0x6d370 in runhookdef (h=0xff0967e4, d=0xffbeefe0) at module.c:1613
#9  0xff0849dc in list_matches (dummy=0xff0ee4c8, dummy2=0x0)
    at compresult.c:1842
#10 0x6d370 in runhookdef (h=0xff0ee4c8, d=0x0) at module.c:1613
#11 0xff0c0fb8 in zrefresh () at zle_refresh.c:602
#12 0xff0b6cc0 in zleread (lp=0xd5eb0 "%m%# ", rp=0x0, flags=3)
    at zle_main.c:589
#13 0x53ab4 in inputline () at input.c:265
#14 0x53880 in ingetc () at input.c:210
#15 0x490fc in ihgetc () at hist.c:242
#16 0x5ba70 in gettok () at lex.c:560
#17 0x5adcc in yylex () at lex.c:313
#18 0x7a0a0 in parse_event () at parse.c:292
#19 0x4fcf0 in loop (toplevel=1, justonce=0) at init.c:115
#20 0x1b2a8 in main (argc=2, argv=0xffbef6ac) at ./main.c:89
(gdb) 
-- 
Tanaka Akira