bugGNU nano - Bugs: bug #29392, nano-2.2.2 crashes when using...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #29392: nano-2.2.2 crashes when using spell check on new file

Submitter:  Mike Frysinger <vapier>
Submitted:  Wed 31 Mar 2010 10:43:20 AM UTC
   
 
Severity:  4 - Important Status:  Fixed
Assigned to:  astyanax Open/Closed:  Closed

Wed 14 Apr 2010 06:04:57 AM UTC, comment #1: 

Hey Mike,

Okay this should be fixed in r4500.  Actually this fix was bigger than just the case you reported, since it seems we were doing a couple dumb things in the code involving current_stat, so hopefully those are all fixed.  And thus I'm going to sit on this 2.2.4 release a little longer now.

Chris Allegretta <astyanax>
Group administrator
Wed 31 Mar 2010 10:43:20 AM UTC, original submission:  

this is new to 2.2.2, but i wasnt able to put together a reduced test case for a while.  crash also occurs in latest svn.

configured with:
--prefix=/usr --mandir=/usr/share/man --infodir=/usr/share/info --datadir=/usr/share --sysconfdir=/etc --localstatedir=/var/lib  --bindir=/bin --enable-color --enable-multibuffer --enable-nanorc --disable-wrapping-as-root --enable-speller --disable-justify --disable-debug --enable-nls --enable-utf8 --disable-tiny --without-slang

to reproduce:
 - run `nano`
 - hit CTRL+R to insert a new buffer
 - hit enter to start an unnamed buffer
 - hit CTRL+T to spell check (it should exit immediately since there's nothing to check)
 - hit CTRL+X to close new buffer
 - memory corruption!

here is the gdb info on the core file:
(gdb) bt
#0  0x00007f3a509ad1b5 in *__GI_raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#1  0x00007f3a509ae5e0 in *__GI_abort () at abort.c:92
#2  0x00007f3a509e7e77 in __libc_message (do_abort=<value optimized out>, fmt=<value optimized out>) at ../sysdeps/unix/sysv/linux/libc_fatal.c:186
#3  0x00007f3a509ed406 in malloc_printerr (action=0x3, str=0x7f3a50a9bb18 "munmap_chunk(): invalid pointer", ptr=<value optimized out>) at malloc.c:6264
#4  0x00000000004131c2 in delete_opennode (fileptr=0x15ffef0) at nano.c:562
#5  0x0000000000413178 in unlink_opennode (fileptr=0x15ffef0) at nano.c:550
#6  0x0000000000408146 in close_buffer () at files.c:286
#7  0x0000000000413e72 in do_exit () at nano.c:1055
#8  0x000000000040f14b in iso_me_harder_funcmap (func=0x12) at global.c:1242
#9  0x0000000000414a3e in do_input (meta_key=0x7fffbf9baa9f, func_key=0x7fffbf9baa9e, s_or_t=0x7fffbf9baa9d, ran_func=0x7fffbf9baa9c, finished=0x7fffbf9baa9b, allow_funcs=0x1) at nano.c:1634
#10 0x0000000000416238 in main (argc=0x1, argv=0x7fffbf9bb0f8) at nano.c:2671

(gdb) bt full -7
#4  0x00000000004131c2 in delete_opennode (fileptr=0x15ffef0) at nano.c:562
No locals.
#5  0x0000000000413178 in unlink_opennode (fileptr=0x15ffef0) at nano.c:550
No locals.
#6  0x0000000000408146 in close_buffer () at files.c:286
No locals.
#7  0x0000000000413e72 in do_exit () at nano.c:1055
        i = 0x0
#8  0x000000000040f14b in iso_me_harder_funcmap (func=0x12) at global.c:1242
No locals.
#9  0x0000000000414a3e in do_input (meta_key=0x7fffbf9baa9f, func_key=0x7fffbf9baa9e, s_or_t=0x7fffbf9baa9d, ran_func=0x7fffbf9baa9c, finished=0x7fffbf9baa9b, allow_funcs=0x1) at nano.c:1634
        f = 0x15e05b0
        input = 0x18
        kbinput = 0x0
        kbinput_len = 0x0
        cut_copy = 0x0
        s = 0x15e06d0
        have_shortcut = 0x1

Mike Frysinger <vapier>
Group Member

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by bens (Updated the item)
  • -email is unavailable- added by astyanax (Posted a comment)
  • -email is unavailable- added by vapier (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 6 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2014-02-24 bens StatusReady For Test Fixed
        Open/ClosedOpen Closed
    2010-04-14 astyanax Severity3 - Normal 4 - Important
        StatusNone Ready For Test
        Assigned toNone astyanax
        ReleaseNone 2.2

    Back to the top

    Powered by Savane 3.13-f8d8.
    Corresponding source code