reassign 1056314 readline 8.2-1.3
retitle 1056314 readline: double free when using PageDown

the same input causes bash to crash in the same way (see attachment), so I assume this is a bug in readline rather than Python
gdb bash
GNU gdb (Debian 13.1-3) 13.1
Copyright (C) 2023 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<https://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
    <http://www.gnu.org/software/gdb/documentation/>.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from bash...
(No debugging symbols found in bash)
(gdb) run
Starting program: /usr/bin/bash 
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[Detaching after fork from child process 809178]
val@particle:~$ 2+2
[Detaching after fork from child process 809179]
bash: 2+2 : commande introuvable
val@particle:~$ 1234+5678
[Detaching after fork from child process 809184]
bash: 1234+5678 : commande introuvable
val@particle:~$ 2+2
[Detaching after fork from child process 809217]
bash: 2+2 : commande introuvable
val@particle:~$ 1000+5678
free(): double free detected in tcache 2

Program received signal SIGABRT, Aborted.
__pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, 
no_tid=no_tid@entry=0) at ./nptl/pthread_kill.c:44
44      ./nptl/pthread_kill.c: Aucun fichier ou dossier de ce type.
(gdb) bt
#0  __pthread_kill_implementation (threadid=<optimized out>, 
signo=signo@entry=6, no_tid=no_tid@entry=0) at ./nptl/pthread_kill.c:44
#1  0x00007ffff7e07d9f in __pthread_kill_internal (signo=6, threadid=<optimized 
out>) at ./nptl/pthread_kill.c:78
#2  0x00007ffff7db8f32 in __GI_raise (sig=sig@entry=6) at 
../sysdeps/posix/raise.c:26
#3  0x00007ffff7da3472 in __GI_abort () at ./stdlib/abort.c:79
#4  0x00007ffff7dfc340 in __libc_message (action=action@entry=do_abort, 
fmt=fmt@entry=0x7ffff7f16459 "%s\n") at ../sysdeps/posix/libc_fatal.c:155
#5  0x00007ffff7e116ba in malloc_printerr (str=str@entry=0x7ffff7f19098 
"free(): double free detected in tcache 2") at ./malloc/malloc.c:5660
#6  0x00007ffff7e13946 in _int_free (av=0x7ffff7f4fc60 <main_arena>, 
p=0x5555556ccb00, have_lock=have_lock@entry=0) at ./malloc/malloc.c:4469
#7  0x00007ffff7e15d9f in __GI___libc_free (mem=<optimized out>) at 
./malloc/malloc.c:3385
#8  0x0000555555635ce5 in rl_do_undo ()
#9  0x00005555556360b5 in rl_revert_line ()
#10 0x000055555561986d in readline_internal_teardown ()
#11 0x000055555561ac7c in readline ()
#12 0x0000555555586fe2 in ?? ()
#13 0x0000555555589ae1 in ?? ()
#14 0x000055555558bf5b in ?? ()
#15 0x00005555555900bb in yyparse ()
#16 0x00005555555865b6 in parse_command ()
#17 0x0000555555586744 in read_command ()
#18 0x00005555555868f6 in reader_loop ()
#19 0x00005555555853d9 in main ()

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Reply via email to