[Pkg-zsh-devel] Bug#1105830: Bug#1105830: /bin/zsh: invalid memory access in wcs_nicechar_sel?

[Rob Leslie]

> On May 18, 2025, at 2:09 PM, Michael Prokop <mika at debian.org> wrote:
> 
> * Rob Leslie [Thu May 15, 2025 at 12:18:22PM -0700]:
>> Package: zsh
>> Version: 5.9-4+b5
>> Severity: normal
>> File: /bin/zsh
>> 
>> Dear Maintainer,
>> 
>> A zsh process dumped core when the login session was ended (likely due
>> to a failed network connection). Here are the relevant logs:
>> 
>> -----
>> May 14 17:56:27 host sshd[1733250]: pam_unix(sshd:session): session closed for user
>> May 14 17:56:27 host systemd-logind[566]: Session 18 logged out. Waiting for processes to exit.
>> May 14 17:56:27 host kernel: show_signal_msg: 1 callbacks suppressed
>> May 14 17:56:27 host kernel: zsh[1733257]: segfault at 0 ip 0000558b81d54b3e sp 00007ffc254531f0 error 6 in zsh[558b81cc8000+9a000] likely on CPU 1 (core 0, socket 1)
>> May 14 17:56:27 host kernel: Code: b6 13 48 8d 41 01 48 83 c3 01 83 f2 20 88 51 01 48 8d 48 01 48 39 de 74 1c 0f b6 13 f6 44 57 01 10 75 d9 48 89 c8 48 83 c3 01 <88> 11 48 8d 48 01 48 39 de 75 e4 c6 01 00 48 83 c4 18 4c 89 e0 5b
>> May 14 17:56:27 host systemd-coredump[3885063]: Process 1733257 (zsh) of user 1000 dumped core.
>> May 14 17:56:27 host systemd-logind[566]: Removed session 18.
>> -----
>> 
>> Here is the relevant coredump info:
> [...]
> 
> Is that reproducible for you somehow?

I can’t say it’s reliably reproducible, however I do have a record of 12 other coredumps across several machines, including one from Debian 11. All have similar stack traces.

> FTR, there's zsh 5.9-4+b6 with:
> 
> | * Binary-only non-maintainer upload for amd64; no source changes.
> | * Rebuild for outdated Built-Using (glibc/2.36-9+deb12u5)
> 
> And latest Debian point-release 12.11 provides libc6
> v2.36-9+deb12u10, wondering whether this would change anything,
> assuming that it's even reproducible in some way at all.

It looks like libc6 2.36-9+deb12u10 was installed on one machine on 2025-03-15 and a coredump followed on 2025-05-17, so that didn’t seem to change anything.

Thanks,
  -rob

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-zsh-devel/attachments/20250601/01f543e6/attachment.htm>