Bug 2449939
| Summary: | [abrt] zsh: _IO_putc(): zsh killed by SIGSEGV | ||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | fedora | ||||||||||||||||||||||||||
| Component: | zsh | Assignee: | Lukáš Zaoral <lzaoral> | ||||||||||||||||||||||||||
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||||||||||||||||||||||
| Severity: | unspecified | Docs Contact: | |||||||||||||||||||||||||||
| Priority: | unspecified | ||||||||||||||||||||||||||||
| Version: | 44 | CC: | dmaphy, fedora, jantill, j, kdudka, lzaoral, vmihalko | ||||||||||||||||||||||||||
| Target Milestone: | --- | Flags: | lzaoral:
mirror+
|
||||||||||||||||||||||||||
| Target Release: | --- | ||||||||||||||||||||||||||||
| Hardware: | x86_64 | ||||||||||||||||||||||||||||
| OS: | Unspecified | ||||||||||||||||||||||||||||
| Whiteboard: | abrt_hash:86ca7154cf6bc7b61bd9b5559aed07b54e42bc27;VARIANT_ID=kde; | ||||||||||||||||||||||||||||
| Fixed In Version: | zsh-5.9-20.fc45 zsh-5.9-18.fc42 zsh-5.9-19.fc43 zsh-5.9-20.fc44 | Doc Type: | --- | ||||||||||||||||||||||||||
| Doc Text: | Story Points: | --- | |||||||||||||||||||||||||||
| Clone Of: | Environment: | ||||||||||||||||||||||||||||
| Last Closed: | 2026-03-24 09:57:51 UTC | Type: | --- | ||||||||||||||||||||||||||
| Regression: | --- | Mount Type: | --- | ||||||||||||||||||||||||||
| Documentation: | --- | CRM: | |||||||||||||||||||||||||||
| Verified Versions: | Category: | --- | |||||||||||||||||||||||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||||||||||||||||||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||||||||||||||||||||||
| Embargoed: | |||||||||||||||||||||||||||||
| Attachments: |
|
||||||||||||||||||||||||||||
|
Description
fedora
2026-03-21 10:49:09 UTC
Created attachment 2134392 [details]
File: dso_list
Created attachment 2134393 [details]
File: core_backtrace
Created attachment 2134394 [details]
File: cpuinfo
Created attachment 2134395 [details]
File: limits
Created attachment 2134396 [details]
File: open_fds
Created attachment 2134397 [details]
File: proc_pid_status
Created attachment 2134398 [details]
File: maps
Created attachment 2134399 [details]
File: mountinfo
Created attachment 2134400 [details]
File: environ
Created attachment 2134401 [details]
File: backtrace
Created attachment 2134402 [details]
File: exploitable
Created attachment 2134403 [details]
File: os_info
Thnak you for the report! Generally, the ABRT reports for zsh are useless for me since they are really complex. However, I has the idea to try Claude on this report and it was able to find the issue and even to assemble a simple reproducer using the provided gdb backtrace:
$ autoload -Uz compinit && compinit -u 2>/dev/null
$ _crash_repro() {
builtin compadd -X '%F{red}colored explanation%f' -- foo bar baz
local _l=$(echo $compstate[list_lines])
}
$ compdef _crash_repro crashtest
// press tab after entering 'crashtest '
$ crashtest <TAB>
colored explanation
bar baz foo
$ coredumpctl info
PID: 858709 (zsh)
UID: 1000 (lzaoral)
GID: 1000 (lzaoral)
Signal: 11 (SEGV)
Timestamp: Sat 2026-03-21 15:04:58 CET (1min 44s ago)
Command Line: zsh
Executable: /usr/bin/zsh
Control Group: /user.slice/user-1000.slice/session-12.scope
Unit: session-12.scope
Slice: user-1000.slice
Session: 12
Owner UID: 1000 (lzaoral)
Boot ID: cd178e0a36b84573b2d22e87bac6a870
Machine ID: 2b54b975991c4af1b63ea16fedbcf8e6
Hostname: fedora-vm-lzaoral
Storage: /var/lib/systemd/coredump/core.zsh.1000.cd178e0a36b84573b2d22e87bac6a870.858709.1774101898000000.zst (present)
Size on Disk: 896.4K
Package: zsh/5.9-19.fc44
build-id: 29e388fac2bd84929a9dfd201fb06e123f976457
Message: Process 858709 (zsh) of user 1000 dumped core.
Module /usr/bin/zsh from rpm zsh-5.9-19.fc44.aarch64
Module computil.so from rpm zsh-5.9-19.fc44.aarch64
Module complist.so from rpm zsh-5.9-19.fc44.aarch64
Module socket.so from rpm zsh-5.9-19.fc44.aarch64
Module zleparameter.so from rpm zsh-5.9-19.fc44.aarch64
Module termcap.so from rpm zsh-5.9-19.fc44.aarch64
Module mathfunc.so from rpm zsh-5.9-19.fc44.aarch64
Module zutil.so from rpm zsh-5.9-19.fc44.aarch64
Module complete.so from rpm zsh-5.9-19.fc44.aarch64
Module files.so from rpm zsh-5.9-19.fc44.aarch64
Module parameter.so from rpm zsh-5.9-19.fc44.aarch64
Module datetime.so from rpm zsh-5.9-19.fc44.aarch64
Module stat.so from rpm zsh-5.9-19.fc44.aarch64
Module system.so from rpm zsh-5.9-19.fc44.aarch64
Module terminfo.so from rpm zsh-5.9-19.fc44.aarch64
Module langinfo.so from rpm zsh-5.9-19.fc44.aarch64
Module zle.so from rpm zsh-5.9-19.fc44.aarch64
Module libtinfo.so.6 from rpm ncurses-6.6-1.fc44.aarch64
Stack trace of thread 858709:
#0 0x0000ffffb6552178 _IO_putc (libc.so.6 + 0x82178)
#1 0x0000aaaac8d90b08 putshout (/usr/bin/zsh + 0xa0b08)
#2 0x0000ffffb67853b8 tputs_sp (libtinfo.so.6 + 0x153b8)
#3 0x0000ffffb678571c tputs (libtinfo.so.6 + 0x1571c)
#4 0x0000ffffa85c1cc0 printfmt (zle.so + 0x31cc0)
#5 0x0000ffffa840e0c8 calclist (complete.so + 0x1e0c8)
#6 0x0000ffffa841011c list_lines (complete.so + 0x2011c)
#7 0x0000aaaac8d6755c getstrvalue (/usr/bin/zsh + 0x7755c)
#8 0x0000aaaac8d629b4 getarg (/usr/bin/zsh + 0x729b4)
#9 0x0000aaaac8d639a4 getindex (/usr/bin/zsh + 0x739a4)
#10 0x0000aaaac8d64038 fetchvalue (/usr/bin/zsh + 0x74038)
#11 0x0000aaaac8d89ae8 paramsubst (/usr/bin/zsh + 0x99ae8)
#12 0x0000aaaac8d8ef6c stringsubst (/usr/bin/zsh + 0x9ef6c)
#13 0x0000aaaac8d8f6dc prefork (/usr/bin/zsh + 0x9f6dc)
#14 0x0000aaaac8d1f170 execcmd_exec (/usr/bin/zsh + 0x2f170)
#15 0x0000aaaac8d22a84 execpline2 (/usr/bin/zsh + 0x32a84)
#16 0x0000aaaac8d22eec execpline (/usr/bin/zsh + 0x32eec)
#17 0x0000aaaac8d24894 execlist (/usr/bin/zsh + 0x34894)
#18 0x0000aaaac8d24ca0 execode (/usr/bin/zsh + 0x34ca0)
#19 0x0000aaaac8d25ce0 getoutput (/usr/bin/zsh + 0x35ce0)
#20 0x0000aaaac8d8f1e8 stringsubst (/usr/bin/zsh + 0x9f1e8)
#21 0x0000aaaac8d8f6dc prefork (/usr/bin/zsh + 0x9f6dc)
#22 0x0000aaaac8d22618 execcmd_exec (/usr/bin/zsh + 0x32618)
#23 0x0000aaaac8d22a84 execpline2 (/usr/bin/zsh + 0x32a84)
#24 0x0000aaaac8d22eec execpline (/usr/bin/zsh + 0x32eec)
#25 0x0000aaaac8d24894 execlist (/usr/bin/zsh + 0x34894)
#26 0x0000aaaac8d24ca0 execode (/usr/bin/zsh + 0x34ca0)
#27 0x0000aaaac8d278a4 runshfunc (/usr/bin/zsh + 0x378a4)
#28 0x0000ffffa83fab2c comp_wrapper (complete.so + 0xab2c)
#29 0x0000aaaac8d27850 runshfunc (/usr/bin/zsh + 0x37850)
#30 0x0000aaaac8d28000 doshfunc (/usr/bin/zsh + 0x38000)
#31 0x0000aaaac8d295cc execshfunc.part.0.lto_priv.0 (/usr/bin/zsh + 0x395cc)
#32 0x0000aaaac8d2225c execcmd_exec (/usr/bin/zsh + 0x3225c)
#33 0x0000aaaac8d22a84 execpline2 (/usr/bin/zsh + 0x32a84)
#34 0x0000aaaac8d22eec execpline (/usr/bin/zsh + 0x32eec)
#35 0x0000aaaac8d24894 execlist (/usr/bin/zsh + 0x34894)
#36 0x0000aaaac8d24ca0 execode (/usr/bin/zsh + 0x34ca0)
#37 0x0000aaaac8d1913c eval (/usr/bin/zsh + 0x2913c)
#38 0x0000aaaac8d01518 execbuiltin (/usr/bin/zsh + 0x11518)
#39 0x0000aaaac8d222bc execcmd_exec (/usr/bin/zsh + 0x322bc)
#40 0x0000aaaac8d22a84 execpline2 (/usr/bin/zsh + 0x32a84)
#41 0x0000aaaac8d22eec execpline (/usr/bin/zsh + 0x32eec)
#42 0x0000aaaac8d248bc execlist (/usr/bin/zsh + 0x348bc)
#43 0x0000aaaac8d53e20 execif (/usr/bin/zsh + 0x63e20)
#44 0x0000aaaac8d211e4 execcmd_exec (/usr/bin/zsh + 0x311e4)
#45 0x0000aaaac8d22a84 execpline2 (/usr/bin/zsh + 0x32a84)
#46 0x0000aaaac8d22eec execpline (/usr/bin/zsh + 0x32eec)
#47 0x0000aaaac8d24894 execlist (/usr/bin/zsh + 0x34894)
#48 0x0000aaaac8d24ca0 execode (/usr/bin/zsh + 0x34ca0)
#49 0x0000aaaac8d278a4 runshfunc (/usr/bin/zsh + 0x378a4)
#50 0x0000ffffa83fab2c comp_wrapper (complete.so + 0xab2c)
#51 0x0000aaaac8d27850 runshfunc (/usr/bin/zsh + 0x37850)
#52 0x0000aaaac8d28000 doshfunc (/usr/bin/zsh + 0x38000)
#53 0x0000aaaac8d295cc execshfunc.part.0.lto_priv.0 (/usr/bin/zsh + 0x395cc)
#54 0x0000aaaac8d2225c execcmd_exec (/usr/bin/zsh + 0x3225c)
#55 0x0000aaaac8d22a84 execpline2 (/usr/bin/zsh + 0x32a84)
#56 0x0000aaaac8d22eec execpline (/usr/bin/zsh + 0x32eec)
#57 0x0000aaaac8d24894 execlist (/usr/bin/zsh + 0x34894)
#58 0x0000aaaac8d24ca0 execode (/usr/bin/zsh + 0x34ca0)
#59 0x0000aaaac8d278a4 runshfunc (/usr/bin/zsh + 0x378a4)
#60 0x0000ffffa83fab2c comp_wrapper (complete.so + 0xab2c)
#61 0x0000aaaac8d27850 runshfunc (/usr/bin/zsh + 0x37850)
#62 0x0000aaaac8d28000 doshfunc (/usr/bin/zsh + 0x38000)
#63 0x0000aaaac8d295cc execshfunc.part.0.lto_priv.0 (/usr/bin/zsh + 0x395cc)
ELF object binary architecture: AARCH64
The crash has been fixed upstream already, though through commit which should have been a plain refactoring: https://sourceforge.net/p/zsh/code/ci/667ead3a64e590ac758e9f0a053849c7aaccec66/ The following patch fixes the issue: diff --git a/Src/Zle/zle_tricky.c b/Src/Zle/zle_tricky.c index 8f32c68e3..bd4a67cee 100644 --- a/Src/Zle/zle_tricky.c +++ b/Src/Zle/zle_tricky.c @@ -2490,15 +2490,17 @@ printfmt(char *fmt, int n, int dopr, int doesc) p--; } else atr = match_colour(NULL, is_fg, arg); - if (atr != TXT_ERROR) + if (atr != TXT_ERROR && dopr) set_colour_attribute(atr, is_fg ? COL_SEQ_FG : COL_SEQ_BG, 0); break; case 'f': - set_colour_attribute(TXTNOFGCOLOUR, COL_SEQ_FG, 0); + if (dopr) + set_colour_attribute(TXTNOFGCOLOUR, COL_SEQ_FG, 0); break; case 'k': - set_colour_attribute(TXTNOBGCOLOUR, COL_SEQ_BG, 0); + if (dopr) + set_colour_attribute(TXTNOBGCOLOUR, COL_SEQ_BG, 0); break; case '{': if (arg) FEDORA-2026-ccadae2b14 (zsh-5.9-20.fc45) has been submitted as an update to Fedora 45. https://bodhi.fedoraproject.org/updates/FEDORA-2026-ccadae2b14 FEDORA-2026-ccadae2b14 (zsh-5.9-20.fc45) has been pushed to the Fedora 45 stable repository. If problem still persists, please make note of it in this bug report. FEDORA-2026-3b1346c47a (zsh-5.9-18.fc42) has been submitted as an update to Fedora 42. https://bodhi.fedoraproject.org/updates/FEDORA-2026-3b1346c47a FEDORA-2026-b8dd76d8ce (zsh-5.9-19.fc43) has been submitted as an update to Fedora 43. https://bodhi.fedoraproject.org/updates/FEDORA-2026-b8dd76d8ce FEDORA-2026-3b1346c47a has been pushed to the Fedora 42 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-3b1346c47a` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-3b1346c47a See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2026-b8dd76d8ce has been pushed to the Fedora 43 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-b8dd76d8ce` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-b8dd76d8ce See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2026-d0a473011e has been pushed to the Fedora 44 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-d0a473011e` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-d0a473011e See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2026-3b1346c47a (zsh-5.9-18.fc42) has been pushed to the Fedora 42 stable repository. If problem still persists, please make note of it in this bug report. FEDORA-2026-b8dd76d8ce (zsh-5.9-19.fc43) has been pushed to the Fedora 43 stable repository. If problem still persists, please make note of it in this bug report. FEDORA-2026-d0a473011e (zsh-5.9-20.fc44) has been pushed to the Fedora 44 stable repository. If problem still persists, please make note of it in this bug report. |