Path: csiph.com!xmission!news.snarked.org!news.linkpendium.com!news.linkpendium.com!panix!usenet.stanford.edu!not-for-mail
From: Chet Ramey <chet.ramey@case.edu>
Newsgroups: gnu.bash.bug
Subject: Re: Crash when moving full-width glyphs across lines
Date: Sat, 21 Dec 2019 14:09:17 -0500
Organization: ITS, Case Western Reserve University
Lines: 33
Approved: bug-bash@gnu.org
Message-ID: <mailman.1233.1576955377.1979.bug-bash@gnu.org>
References: <d9e015f7-aa5c-4c5e-90dc-8cf0a341ab0a@www.fastmail.com> <20191219190032.m2p7vsuowclcp355@RedPanda.localdomain> <8a669137-3205-e8a0-5e0f-84d87ca7a126@case.edu> <7b613a14-2513-c999-589e-9254c831b73c@case.edu>
Reply-To: chet.ramey@case.edu
NNTP-Posting-Host: lists.gnu.org
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Cc: chet.ramey@case.edu, wooledg@eeg.ccf.org, bug-bash@gnu.org, nathan@nixpulvis.com
To: Kirill Chibisov <wchibisovkirill@gmail.com>, =?UTF-8?Q?Christian_D=c3=bcrr?= <contact@christianduerr.com>
Envelope-to: bug-bash@gnu.org
Autocrypt: addr=chet.ramey@case.edu; prefer-encrypt=mutual; keydata= mQGiBEEOsGwRBACFa0A1oa71HSZLWxAx0svXzhOZNQZOzqHmSuGOG92jIpQpr8DpvgRh40Yp AwdcXb8QG1J5yGAKeevNE1zCFaA725vGSdHUyypHouV0xoWwukYO6qlyyX+2BZU+okBUqoWQ koWxiYaCSfzB2Ln7pmdys1fJhcgBKf3VjWCjd2XJTwCgoFJOwyBFJdugjfwjSoRSwDOIMf0D /iQKqlWhIO1LGpMrGX0il0/x4zj0NAcSwAk7LaPZbN4UPjn5pqGEHBlf1+xDDQCkAoZ/VqES GZragl4VqJfxBr29Ag0UDvNbUbXoxQsARdero1M8GiAIRc50hj7HXFoERwenbNDJL86GPLAQ OTGOCa4W2o29nFfFjQrsrrYHzVtyA/9oyKvTeEMJ7NA3VJdWcmn7gOu0FxEmSNhSoV1T4vP2 1Wf7f5niCCRKQLNyUy0wEApQi4tSysdz+AbgAc0b/bHYVzIf2uO2lIEZQNNt+3g2bmXgloWm W5fsm/di50Gm1l1Na63d3RZ00SeFQos6WEwLUHEB0yp6KXluXLLIZitEJLQwQ2hldCBSYW1l eSAoQ2FzZSBzdGFuZGFyZCkgPGNoZXQucmFtZXlAY2FzZS5lZHU+iF8EExECAB8FAkPi19EC GwMHCwkIBwMCAQMVAgMDFgIBAh4BAheAAAoJELtYafBk6nSrelkAn31Gsuib7GcCZHbv5L5t VKYR9LklAJ4hzUHKA49Z0QXR+qCb80osIcmPSbkBDQRBDrBvEAQAkK6TAOKBEM+EC4j6V/7o /riVZqcgU5cid2qG9TXdwNtD9a3kvA/ObZBO93sX59wc6Bnwo4VJxsOmMlpGrAjJsxNwg3QH akEtf8LXRbVpj5xStdmBdQZUhIQyalo/2/TZq5OijtddUQcL5cs70hTv/FpT3wUvr2Xr8rjF 41IFEz8AAwcD/A0CZEGlzIrT5WCBnl6xBog/8vKiUCbarByat3d1mL6DbizvKNXQRTC9E/vE dENAWCQCjr75Bu55xT8n3SXGtWdDC5xmZ/P3OBYORP8yl8H8I1FIosWOFirbIeYdZPq8SPD1 HL+EXo9zSiHVrrZRJ19ooCKKbSdXHFCY+aJG+0KZiEkEGBECAAkFAkEOsG8CGwwACgkQu1hp 8GTqdKvjcACfZlkVCDwaz/NTO9cy3t69oWpVPNwAnRwe0qk/WL/gfhH346xh5B3HFbFN
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:68.0) Gecko/20100101 Thunderbird/68.3.1
In-Reply-To: <8a669137-3205-e8a0-5e0f-84d87ca7a126@case.edu>
Content-Language: en-US
Precedence: list
Xref: csiph.com gnu.bash.bug:15766

On 12/20/19 3:43 PM, Chet Ramey wrote:
> On 12/19/19 2:00 PM, Kirill Chibisov wrote:
>> I was able to capture the stack trace under gdb. However you should
>> probably use the following command in it to repro the issue.
>>
>> `set disable-randomization off`
>>
>> The issue happens quite randomly, however the important thing is exit code
>> from bash (139). So there's something with memory access, I guess.
>>
>> (gdb) info stack
>> #0  0x00007fe30e6955ba in _rl_col_width (flags=<optimized out>,
>> end=1735628519, start=<optimized out>, str=0x557e988c691a "/こんにち")
>>      at
>> /usr/src/debug/sys-libs/readline-8.0_p1-r1/readline-8.0/display.c:3206
>> #1  _rl_col_width (str=0x557e988c691a "/こんにち", start=<optimized out>,
>> end=1735628519, flags=<optimized out>)
> 
> Well, the values for `end' are obviously suspicious, but you can't really
> tell too much from this traceback, especially since other values of
> interest are optimized out. The value of `end' is computed in the caller,
> from `oe - old'. Since those are pointers into the same string, the value
> shouldn't be that far out of whack. The values of `old' and `new' are
> helpful, though. I'll see if I can find it.

I found it.


-- 
``The lyf so short, the craft so long to lerne.'' - Chaucer
		 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, UTech, CWRU    chet@case.edu    http://tiswww.cwru.edu/~chet/