[Pkg-zsh-devel] Bug#1105830: Bug#1105830: /bin/zsh: invalid memory access in wcs_nicechar_sel?

[Michael Prokop]

* Rob Leslie [Sun Jun 01, 2025 at 01:07:10PM -0400]:
> > On May 18, 2025, at 2:09 PM, Michael Prokop <mika at debian.org> wrote:
> > 
> > * Rob Leslie [Thu May 15, 2025 at 12:18:22PM -0700]:

> >> A zsh process dumped core when the login session was ended (likely due
> >> to a failed network connection). Here are the relevant logs:
> >> 
> >> -----
> >> May 14 17:56:27 host sshd[1733250]: pam_unix(sshd:session): session closed for user
> >> May 14 17:56:27 host systemd-logind[566]: Session 18 logged out. Waiting for processes to exit.
> >> May 14 17:56:27 host kernel: show_signal_msg: 1 callbacks suppressed
> >> May 14 17:56:27 host kernel: zsh[1733257]: segfault at 0 ip 0000558b81d54b3e sp 00007ffc254531f0 error 6 in zsh[558b81cc8000+9a000] likely on CPU 1 (core 0, socket 1)
> >> May 14 17:56:27 host kernel: Code: b6 13 48 8d 41 01 48 83 c3 01 83 f2 20 88 51 01 48 8d 48 01 48 39 de 74 1c 0f b6 13 f6 44 57 01 10 75 d9 48 89 c8 48 83 c3 01 <88> 11 48 8d 48 01 48 39 de 75 e4 c6 01 00 48 83 c4 18 4c 89 e0 5b
> >> May 14 17:56:27 host systemd-coredump[3885063]: Process 1733257 (zsh) of user 1000 dumped core.
> >> May 14 17:56:27 host systemd-logind[566]: Removed session 18.
> >> -----
> >> 
> >> Here is the relevant coredump info:
> > [...]
> > 
> > Is that reproducible for you somehow?
> 
> I can’t say it’s reliably reproducible, however I do have a record of 12 other coredumps across several machines, including one from Debian 11. All have similar stack traces.

Hm, would be interesting to have steps to reproduce this,
I never observed such a behavior on my own.

> > FTR, there's zsh 5.9-4+b6 with:
> > 
> > | * Binary-only non-maintainer upload for amd64; no source changes.
> > | * Rebuild for outdated Built-Using (glibc/2.36-9+deb12u5)
> > 
> > And latest Debian point-release 12.11 provides libc6
> > v2.36-9+deb12u10, wondering whether this would change anything,
> > assuming that it's even reproducible in some way at all.
> 
> It looks like libc6 2.36-9+deb12u10 was installed on one machine on 2025-03-15 and a coredump followed on 2025-05-17, so that didn’t seem to change anything.

Was the system rebooted in between?
Was the system fully upgraded to what Debian v12 provides?
Do the ~13 occurences you observed so far have anything in common?

regards
-mika-
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-zsh-devel/attachments/20250601/34956758/attachment.sig>