Starting with 7.4.497 (found by git bisect), I get the following crash:

1. put the attached files in current directory
2. run vim -u vimrc --noplugin
3. vim crashes, backtrace:

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff5141434 in __memmove_ssse3_back () from /usr/lib/libc.so.6
(gdb) bt
#0  0x00007ffff5141434 in __memmove_ssse3_back () from /usr/lib/libc.so.6
#1  0x0000000000475203 in memmove (__len=18446744073700127088, __src=0x8f9790, 
__dest=<optimized out>) at /usr/include/bits/string3.h:57
#2  do_string_sub (
    str=str@entry=0x8f9790 "contained role oncontextmenu onchange onmousewheel 
onselect onsubmit onkeydown onloadeddata contextmenu ondragenter 
onvolumechange\n", ' ' <repeats 19 times>, "contained onemptied onended 
onmousedown onseeking "..., 
    pat=pat@entry=0x8b5080 "\\%(\\<match 
\\/[^/]\\{-}\\)\\@<=\\<\\w\\{1,2}\\>\\ze.\\{-}\\\\\\@<!\\/\\%(\\%(ms\\|me\\|hs\\|he\\|rs\\|re\\|lc\\)\\S\\+\\)\\?\\s\\+",
 sub=sub@entry=0x8b21d0 "", flags=<optimized out>) at eval.c:25145
#3  0x00000000004753f6 in f_substitute (argvars=0x7fffffffc8d0, 
rettv=0x7fffffffcdc0) at eval.c:18357
#4  0x0000000000468880 in call_func (funcname=0x10 <error: Cannot access memory 
at address 0x10>, 
    funcname@entry=0x8b4c01 "substitute( syn_list, '\\%(\\<match 
\\/[^/]\\{-}\\)\\@<=\\<\\w\\{1,2}\\>\\ze.\\{-}\\\\\\@<!\\/\\%(\\%(ms\\|me\\|hs\\|he\\|rs\\|re\\|lc\\)\\S\\+\\)\\?\\s\\+',
 '', 'g' )", len=9410464, len@entry=10, rettv=0x1, argcount=0, 
argcount@entry=4, argvars=0x0, 
    argvars@entry=0x7fffffffc8d0, firstline=72057594028466577, 
firstline@entry=1, lastline=1, doesrange=0x7fffffffcaa8, evaluate=1, 
selfdict=0x0)
    at eval.c:8626
#5  0x000000000046c813 in get_func_tv (
    name=0x8b4c01 "substitute( syn_list, '\\%(\\<match 
\\/[^/]\\{-}\\)\\@<=\\<\\w\\{1,2}\\>\\ze.\\{-}\\\\\\@<!\\/\\%(\\%(ms\\|me\\|hs\\|he\\|rs\\|re\\|lc\\)\\S\\+\\)\\?\\s\\+',
 '', 'g' )", len=10, rettv=0x7fffffffcdc0, arg=0x7fffffffcd48, firstline=1, 
lastline=1, doesrange=0x7fffffffcaa8, 
    evaluate=1, selfdict=0x0) at eval.c:8433
#6  0x000000000046b258 in eval7 (arg=0x7fffffffcd48, rettv=0x7fffffffcdc0, 
evaluate=1, want_string=-13656) at eval.c:5210
#7  0x000000000046b424 in eval6 (arg=arg@entry=0x7fffffffcd48, 
rettv=rettv@entry=0x7fffffffcdc0, evaluate=evaluate@entry=1, 
    want_string=want_string@entry=0) at eval.c:4861
#8  0x000000000046b68e in eval5 (arg=0x7fffffffcd48, rettv=0x7fffffffcdc0, 
evaluate=1) at eval.c:4677
#9  0x000000000046c295 in eval4 (evaluate=1, rettv=0x7fffffffcdc0, 
arg=0x7fffffffcd48) at eval.c:4370
#10 eval3 (arg=arg@entry=0x7fffffffcd48, rettv=rettv@entry=0x7fffffffcdc0, 
evaluate=evaluate@entry=1) at eval.c:4282
#11 0x000000000046c415 in eval2 (evaluate=1, rettv=0x7fffffffcdc0, 
arg=0x7fffffffcd48) at eval.c:4211
#12 eval1 (arg=0x7fffffffcd48, rettv=0x7fffffffcdc0, evaluate=1) at eval.c:4136
#13 0x000000000046cd2e in eval0 (
    arg=0x8b4c01 "substitute( syn_list, '\\%(\\<match 
\\/[^/]\\{-}\\)\\@<=\\<\\w\\{1,2}\\>\\ze.\\{-}\\\\\\@<!\\/\\%(\\%(ms\\|me\\|hs\\|he\\|rs\\|re\\|lc\\)\\S\\+\\)\\?\\s\\+',
 '', 'g' )", rettv=rettv@entry=0x7fffffffcdc0, 
nextcmd=nextcmd@entry=0x7fffffffcfb8, evaluate=1) at eval.c:4093
#14 0x00000000004737c1 in ex_let (eap=0x7fffffffcfb0) at eval.c:1913
#15 0x00000000004908be in do_one_cmd (cookie=<optimized out>, fgetline=0x48a7e0 
<get_loop_line>, cstack=0x7fffffffd060, sourcing=1, 
    cmdlinep=0x7fffffffcf08) at ex_docmd.c:2705
#16 do_cmdline (cmdline=cmdline@entry=0x8f8b70 "let syn_list = 
join(readfile('syn_list'), \"\\n\")", 
    fgetline=fgetline@entry=0x485800 <getsourceline>, 
cookie=cookie@entry=0x7fffffffd5b0, flags=flags@entry=7) at ex_docmd.c:1131
#17 0x0000000000485df2 in do_source (fname=0x613ca3 "~/.vim/vimrc", 
check_other=<optimized out>, is_vimrc=<optimized out>) at ex_cmds2.c:3315
#18 0x0000000000437018 in source_startup_scripts (parmp=<optimized out>, 
parmp=<optimized out>) at main.c:3012
#19 main (argc=0, argv=0x7fffffffd901) at main.c:614

These files are from a HTML 5 syntax file and the official
autoload/syntaxcomplete.vim file.

-- 
Best regards,
lilydjwg

-- 
-- 
You received this message from the "vim_dev" maillist.
Do not top-post! Type your reply below the text you are replying to.
For more information, visit http://www.vim.org/maillist.php

--- 
You received this message because you are subscribed to the Google Groups 
"vim_dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.
let syn_list = join(readfile('syn_list'), "\n")
while syn_list =~ '\<match\>\s\+\/'
  let syn_list = substitute( syn_list, '\%(\<match 
\/[^/]\{-}\)\@<=\<\w\{1,2}\>\ze.\{-}\\\@<!\/\%(\%(ms\|me\|hs\|he\|rs\|re\|lc\)\S\+\)\?\s\+',
 '', 'g' )
endwhile

-- 
-- 
You received this message from the "vim_dev" maillist.
Do not top-post! Type your reply below the text you are replying to.
For more information, visit http://www.vim.org/maillist.php

--- 
You received this message because you are subscribed to the Google Groups 
"vim_dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.
contained role oncontextmenu onchange onmousewheel onselect onsubmit onkeydown 
onloadeddata contextmenu ondragenter onvolumechange
                   contained onemptied onended onmousedown onseeking spellcheck 
ondurationchange lang onerror onstalled ondrag onfocus onmousemove
                   contained onwaiting itemtype oncanplay xml:lang onsuspend 
contenteditable ondragend onformchange onloadedmetadata class item
                   contained onkeyup onscroll oninput onmouseout onpause 
oninvalid itemscope ontimeupdate onloadstart onshow itemprop onabort dir
                   contained onload onseeked onratechange oncanplaythrough 
onforminput onprogress onmouseup xml:base hidden onkeypress onplaying
                   contained ondragstart draggable onmouseover onplay 
onreadystatechange ondrop accesskey ondblclick id onblur onclick title xml:space
                   contained ondragleave itemid style tabindex ondragover
                   contained charoff target bgcolor bordercolor defer shape 
usemap multiple language lowsrc scheme headers above maxlength nowrap
                   contained style vlink colspan nohref left align scope code 
disabled src color classid alt marginheight cellspacing data cellpadding
                   contained gutter url class scrolling standby link accept 
coords codebase wrap alink checked content longdesc cols rel rev size lang
                   contained action datetime archive below name media noresize 
object frame readonly rowspan start span selected hspace type hreflang
                   contained visibility charset id id version background vspace 
width compact border top dir height accesskey cite declare method axis
                   contained valuetype frameborder enctype summary char abbr 
for rows ismap codetype noshade rules tabindex valign text pagex pagey
                   contained clear clip profile marginwidth prompt value face
                   match /\<\(data(\-[a-z]\+)\+\)=/  contained 
                   match /\<aria-\(atomic\|busy\|controls\|describedby\)\>/  
contained 
                   match /\<aria-\(disabled\|dropeffect\|flowto\|grabbed\)\>/  
contained 
                   match /\<aria-\(haspopup\|hidden\|invalid\|label\)\>/  
contained 
                   match /\<aria-\(labelledby\|live\|owns\|relevant\)\>/  
contained 
                   match 
/\<aria-\(autocomplete\|checked\|disabled\|expanded\)\>/  contained 
                   match /\<aria-\(haspopup\|hidden\|invalid\|label\)\>/  
contained 
                   match 
/\<aria-\(level\|multiline\|multiselectable\|orientation\)\>/  contained 
                   match /\<aria-\(pressed\|readonly\|required\|selected\)\>/  
contained 
                   match 
/\<aria-\(sort\|valuemax\|valuemin\|valuenow\|valuetext\|\)\>/  contained 
                   match /\<aria-\(atomic\|busy\|live\|relevant\|\)\>/  
contained 
                   match /\<aria-\(dropeffect\|grabbed\)\>/  contained 
                   match 
/\<aria-\(activedescendant\|controls\|describedby\|flowto\|\)\>/  contained 
                   match /\<aria-\(labelledby\|owns\|posinset\|setsize\|\)\>/  
contained 
                   match /\<\(http-equiv\|href\|title\)=/me=e-1  contained 
                   match /\<z-index\>/  contained 
                   match /\<\(accept-charset\|label\)\>/  contained 
                   

-- 
-- 
You received this message from the "vim_dev" maillist.
Do not top-post! Type your reply below the text you are replying to.
For more information, visit http://www.vim.org/maillist.php

--- 
You received this message because you are subscribed to the Google Groups 
"vim_dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Raspunde prin e-mail lui