Bug 705786

abrt version: 1.1.18
architecture: x86_64
Attached file: backtrace, 219988 bytes
cmdline: zsh
component: zsh
Attached file: coredump, 1957888 bytes
crash_function: cv_parse_word
executable: /bin/zsh
kernel: 2.6.35.13-91.fc14.x86_64
package: zsh-4.3.10-5.fc14
rating: 4
reason: Process /bin/zsh was killed by signal 11 (SIGSEGV)
release: Fedora release 14 (Laughlin)
time: 1305723976
uid: 500

comment
-----
My ".zshrc" contains the following for autocompletion:

---
fpath+=/usr/share/doc/task/scripts/zsh
zstyle ':completion:*' completer _expand _complete
zstyle :compinstall filename '/home/steven/.zshrc'
autoload -Uz compinit
compinit
---

This crash does not always happen, but so far, I've managed to crash the shell three times sequences like:

   task add proj<TAB><TAB>

And:
 
   task add proj<TAB>

And:

  task add<TAB><TAB>

If I do this in a "fresh" shell, it never crashes. However, when it is preceded by some other completion attempts, at some point it crashes.

I don't think it the sequences themselves are significant, but I did notice the following, inconsistent behaviour:

1. Fresh shell
2. "task ad<TAB>"

This _should_ expand to "task add ", since "ad" is a unique prefix for "add". However, this doesn't happen. It only happens on the second <TAB>. After this, however, any subsequent "task ad<TAB>" immediately expands to "task add ". The same goes for "task add proj<TAB>" in a fresh shell, or any other expansion attempt. After the first expansion, all other expansions happen correctly.

Could be an off-by-one error? Or just a red herring?

Whatever the case, there's definitely something wrong with user-defined completion. Not sure if this is unique to the "task" case, or something more general.

How to reproduce
-----
1. Install task-1.9.4-1.fc14.x86_64
2. Set up autocompletion for "task" in .zshrc (see below).
3. Use auto completion on "task" command.