core dump with vim 1:7.1-138+1ubuntu3

2008-10-13 Fir de Conversatie frankjas

I have been encountering an intermittent coredump using vim 7.1 under
Hardy, see the subject for the exact version.  Please let me know if
this is not the correct forum for this message.

I rebuilt vim from source with symbols after I stumbled on a
reproduceable test case today.  The backtrace from the core dump is as
follows. It looks like the field uh_next_alt is being corrupted. Often
in the backtrace it also contains the value 0x11.

The coredump is sensitive to the value of VIMINIT. I can write up the
exact steps to reproduce this error for anyone interested/capable of
debugging this error.

Frank

(gdb) bt
#0  0x00587e19 in u_unch_branch (uhp=0xa2d07f4eac59) at
undo.c:1576
#1  0x00587e42 in u_unch_branch (uhp=0x8ad450) at undo.c:1578
#2  0x00587def in u_unchanged (buf=0x8151a0) at undo.c:1564
#3  0x004988b4 in buf_write (buf=0x8151a0, fname=0x817200 t,
sfname=0x817200 t, start=1, end=47,
eap=0x7fffb5727a60, append=0, forceit=0, reset_changed=1,
filtering=0) at fileio.c:4517
#4  0x0046724e in do_write (eap=0x7fffb5727a60) at ex_cmds.c:
2687
#5  0x0047e082 in ex_exit (eap=0x7fffb5727a60) at ex_docmd.c:
6590
#6  0x004775cc in do_one_cmd (cmdlinep=0x7fffb5727cc8,
sourcing=0, cstack=0x7fffb5727d00,
fgetline=0x48acd9 getexline, cookie=0x0) at ex_docmd.c:2621
#7  0x00474dc8 in do_cmdline (cmdline=0x0, getline=0x48acd9
getexline, cookie=0x0, flags=0)
at ex_docmd.c:1099
#8  0x004f74b0 in nv_colon (cap=0x7fffb5728250) at normal.c:
5168
#9  0x004f1080 in normal_cmd (oap=0x7fffb5728320, toplevel=1)
at normal.c:1141
#10 0x004b5735 in main_loop (cmdwin=0, noexmode=0) at main.c:
1181
#11 0x004b5334 in main (argc=2, argv=0x7fffb57285e8) at main.c:
940

(gdb) f 1
#1  0x00587e42 in u_unch_branch (uhp=0x8ad450) at undo.c:1578
1578u_unch_branch(uh-uh_alt_next); /*
recursive */
(gdb) p uh-uh_alt_next
$1 = (u_header_T *) 0xa2d07f4eac59

--~--~-~--~~~---~--~~
You received this message from the vim_dev maillist.
For more information, visit http://www.vim.org/maillist.php
-~--~~~~--~~--~--~---



Re: core dump with vim 1:7.1-138+1ubuntu3

2008-10-13 Fir de Conversatie John Little



On Oct 14, 12:13 pm, frankjas [EMAIL PROTECTED] wrote:
 I have been encountering an intermittent coredump ...

 I rebuilt vim from source with symbols after I stumbled on a
 reproduceable test case today...

Brilliant.

 follows. It looks like the field uh_next_alt is being corrupted. Often
 in the backtrace it also contains the value 0x11.

 I can write up the
 exact steps to reproduce this error for anyone interested/capable of
 debugging this error.

Yes, please.  An early step will be to try it with an up to date
version of vim,
which is at 7.2.025, some hundreds of fixes after 7.1.138.

Regards, John

--~--~-~--~~~---~--~~
You received this message from the vim_dev maillist.
For more information, visit http://www.vim.org/maillist.php
-~--~~~~--~~--~--~---



Re: core dump with vim 1:7.1-138+1ubuntu3

2008-10-13 Fir de Conversatie Matt Wozniski

On Mon, Oct 13, 2008 at 8:37 PM, John Little wrote:
 On Oct 14, 12:13 pm, frankjas wrote:
 I have been encountering an intermittent coredump ...

 I rebuilt vim from source with symbols after I stumbled on a
 reproduceable test case today...

 Brilliant.

 follows. It looks like the field uh_next_alt is being corrupted. Often
 in the backtrace it also contains the value 0x11.

 I can write up the
 exact steps to reproduce this error for anyone interested/capable of
 debugging this error.

 Yes, please.  An early step will be to try it with an up to date
 version of vim,
 which is at 7.2.025, some hundreds of fixes after 7.1.138.

 Regards, John

https://bugs.launchpad.net/ubuntu/+source/vim/+bug/219546

In short, Ubuntu Hardy shipped with a seriously buggy version - any
vim version between 7.1.127 and 7.1.146 suffers from double-frees
leading to crashes.  Your best bet is to rebuild from source, either
from the package source with the latest 7.1 patches, or from the
up-to-date 7.2 sources, or to install the Ubuntu Intrepid vim.

~Matt

--~--~-~--~~~---~--~~
You received this message from the vim_dev maillist.
For more information, visit http://www.vim.org/maillist.php
-~--~~~~--~~--~--~---



Re: core dump with vim 1:7.1-138+1ubuntu3

2008-10-13 Fir de Conversatie frankjas


On Oct 13, 6:41 pm, Matt Wozniski [EMAIL PROTECTED] wrote:
 On Mon, Oct 13, 2008 at 8:37 PM, John Little wrote:
  On Oct 14, 12:13 pm, frankjas wrote:
  I have been encountering an intermittent coredump ...

  I rebuilt vim from source with symbols after I stumbled on a
  reproduceable test case today...

  Brilliant.

  follows. It looks like the field uh_next_alt is being corrupted. Often
  in the backtrace it also contains the value 0x11.

  I can write up the
  exact steps to reproduce this error for anyone interested/capable of
  debugging this error.

  Yes, please.  An early step will be to try it with an up to date
  version of vim,
  which is at 7.2.025, some hundreds of fixes after 7.1.138.

  Regards, John

 https://bugs.launchpad.net/ubuntu/+source/vim/+bug/219546

 In short, Ubuntu Hardy shipped with a seriously buggy version - any
 vim version between 7.1.127 and 7.1.146 suffers from double-frees
 leading to crashes.  Your best bet is to rebuild from source, either
 from the package source with the latest 7.1 patches, or from the
 up-to-date 7.2 sources, or to install the Ubuntu Intrepid vim.

 ~Matt

I built 7.2 from standard vim sources, with ./configure --with-
features=huge --with-gnome and
no seg-fault on the test case, so apparently the intermediate patches
from 7.1.138 to 7.2 did the trick.

Thanks for the info on buggy vim in hardy. I've been googling around
for a while, didn't stumble on that one.

Frank

--~--~-~--~~~---~--~~
You received this message from the vim_dev maillist.
For more information, visit http://www.vim.org/maillist.php
-~--~~~~--~~--~--~---