Bug 1846990

Summary: [abrt] zsh: free_cline(): zsh killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Allan Lewis <allanlewis99>
Component: zshAssignee: Kamil Dudka <kdudka>
Status: CLOSED INSUFFICIENT_DATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 32CC: dmaphy, james.antill, j, kdudka, svashisht
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/ede75617d10b1aae767fe145509fab4ef32e4566
Whiteboard: abrt_hash:29d126808bfc8890bf9528efa2fcd7bbf9a73936;VARIANT_ID=workstation;
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-06-15 15:34:02 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: cpuinfo
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: mountinfo
none
File: open_fds
none
File: proc_pid_status none

Description Allan Lewis 2020-06-15 11:07:43 UTC 
Description of problem:
I was searching for a command in my shell history (via Terminator) then it crashed. I think I might have pressed the wrong Ctrl combo, but I'm not sure which key(s).

Version-Release number of selected component:
zsh-5.8-1.fc32

Additional info:
reporter:       libreport-2.13.1
backtrace_rating: 4
cmdline:        -/bin/zsh
crash_function: free_cline
executable:     /usr/bin/zsh
journald_cursor: s=f95d9e7836534ee6b56831304246487c;i=57d6;b=5b1a33e09b934639842ce456ba4d2e03;m=22a4f4046;t=5a81d50f67230;x=1bb1b31ba7a49f8f
kernel:         5.6.13-300.fc32.x86_64
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (1 frames)
 #0 free_cline at compmatch.c:176
Comment 1 Allan Lewis 2020-06-15 11:07:49 UTC 
Created attachment 1697379 [details]
File: backtrace
Comment 2 Allan Lewis 2020-06-15 11:07:50 UTC 
Created attachment 1697380 [details]
File: cgroup
Comment 3 Allan Lewis 2020-06-15 11:07:53 UTC 
Created attachment 1697381 [details]
File: core_backtrace
Comment 4 Allan Lewis 2020-06-15 11:07:55 UTC 
Created attachment 1697382 [details]
File: cpuinfo
Comment 5 Allan Lewis 2020-06-15 11:07:57 UTC 
Created attachment 1697383 [details]
File: dso_list
Comment 6 Allan Lewis 2020-06-15 11:07:58 UTC 
Created attachment 1697384 [details]
File: environ
Comment 7 Allan Lewis 2020-06-15 11:08:00 UTC 
Created attachment 1697385 [details]
File: exploitable
Comment 8 Allan Lewis 2020-06-15 11:08:02 UTC 
Created attachment 1697386 [details]
File: limits
Comment 9 Allan Lewis 2020-06-15 11:08:04 UTC 
Created attachment 1697387 [details]
File: maps
Comment 10 Allan Lewis 2020-06-15 11:08:07 UTC 
Created attachment 1697388 [details]
File: mountinfo
Comment 11 Allan Lewis 2020-06-15 11:08:09 UTC 
Created attachment 1697389 [details]
File: open_fds
Comment 12 Allan Lewis 2020-06-15 11:08:12 UTC 
Created attachment 1697390 [details]
File: proc_pid_status
Comment 13 Kamil Dudka 2020-06-15 15:29:48 UTC 
The stack overflows after free_cline() enters an infinite recursion through call of free_cline(l->prefix).  The data structure is supposed to be acyclic but for some reason it is not.  Unfortunately, the backtrace is truncated, so it is not clear how we got there.  I am afraid that, without a reliable reproducer, there is not much we can do to proceed with this bug report.