Bug 1846990 - [abrt] zsh: free_cline(): zsh killed by SIGSEGV
Summary: [abrt] zsh: free_cline(): zsh killed by SIGSEGV
Keywords:
Status: CLOSED INSUFFICIENT_DATA
Alias: None
Product: Fedora
Classification: Fedora
Component: zsh
Version: 32
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Kamil Dudka
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:29d126808bfc8890bf9528efa2f...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-06-15 11:07 UTC by Allan Lewis
Modified: 2020-06-15 15:34 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-06-15 15:34:02 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: backtrace (151.82 KB, text/plain)
2020-06-15 11:07 UTC, Allan Lewis
no flags Details
File: cgroup (465 bytes, text/plain)
2020-06-15 11:07 UTC, Allan Lewis
no flags Details
File: core_backtrace (71.15 KB, text/plain)
2020-06-15 11:07 UTC, Allan Lewis
no flags Details
File: cpuinfo (2.48 KB, text/plain)
2020-06-15 11:07 UTC, Allan Lewis
no flags Details
File: dso_list (1.63 KB, text/plain)
2020-06-15 11:07 UTC, Allan Lewis
no flags Details
File: environ (2.27 KB, text/plain)
2020-06-15 11:07 UTC, Allan Lewis
no flags Details
File: exploitable (82 bytes, text/plain)
2020-06-15 11:08 UTC, Allan Lewis
no flags Details
File: limits (1.29 KB, text/plain)
2020-06-15 11:08 UTC, Allan Lewis
no flags Details
File: maps (10.02 KB, text/plain)
2020-06-15 11:08 UTC, Allan Lewis
no flags Details
File: mountinfo (4.13 KB, text/plain)
2020-06-15 11:08 UTC, Allan Lewis
no flags Details
File: open_fds (339 bytes, text/plain)
2020-06-15 11:08 UTC, Allan Lewis
no flags Details
File: proc_pid_status (1.34 KB, text/plain)
2020-06-15 11:08 UTC, Allan Lewis
no flags Details

Description Allan Lewis 2020-06-15 11:07:43 UTC
Description of problem:
I was searching for a command in my shell history (via Terminator) then it crashed. I think I might have pressed the wrong Ctrl combo, but I'm not sure which key(s).

Version-Release number of selected component:
zsh-5.8-1.fc32

Additional info:
reporter:       libreport-2.13.1
backtrace_rating: 4
cmdline:        -/bin/zsh
crash_function: free_cline
executable:     /usr/bin/zsh
journald_cursor: s=f95d9e7836534ee6b56831304246487c;i=57d6;b=5b1a33e09b934639842ce456ba4d2e03;m=22a4f4046;t=5a81d50f67230;x=1bb1b31ba7a49f8f
kernel:         5.6.13-300.fc32.x86_64
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (1 frames)
 #0 free_cline at compmatch.c:176

Comment 1 Allan Lewis 2020-06-15 11:07:49 UTC
Created attachment 1697379 [details]
File: backtrace

Comment 2 Allan Lewis 2020-06-15 11:07:50 UTC
Created attachment 1697380 [details]
File: cgroup

Comment 3 Allan Lewis 2020-06-15 11:07:53 UTC
Created attachment 1697381 [details]
File: core_backtrace

Comment 4 Allan Lewis 2020-06-15 11:07:55 UTC
Created attachment 1697382 [details]
File: cpuinfo

Comment 5 Allan Lewis 2020-06-15 11:07:57 UTC
Created attachment 1697383 [details]
File: dso_list

Comment 6 Allan Lewis 2020-06-15 11:07:58 UTC
Created attachment 1697384 [details]
File: environ

Comment 7 Allan Lewis 2020-06-15 11:08:00 UTC
Created attachment 1697385 [details]
File: exploitable

Comment 8 Allan Lewis 2020-06-15 11:08:02 UTC
Created attachment 1697386 [details]
File: limits

Comment 9 Allan Lewis 2020-06-15 11:08:04 UTC
Created attachment 1697387 [details]
File: maps

Comment 10 Allan Lewis 2020-06-15 11:08:07 UTC
Created attachment 1697388 [details]
File: mountinfo

Comment 11 Allan Lewis 2020-06-15 11:08:09 UTC
Created attachment 1697389 [details]
File: open_fds

Comment 12 Allan Lewis 2020-06-15 11:08:12 UTC
Created attachment 1697390 [details]
File: proc_pid_status

Comment 13 Kamil Dudka 2020-06-15 15:29:48 UTC
The stack overflows after free_cline() enters an infinite recursion through call of free_cline(l->prefix).  The data structure is supposed to be acyclic but for some reason it is not.  Unfortunately, the backtrace is truncated, so it is not clear how we got there.  I am afraid that, without a reliable reproducer, there is not much we can do to proceed with this bug report.


Note You need to log in before you can comment on or make changes to this bug.