Bug#446268: vim ABRT: glibc: vim: invalid next size (fast): 0x00000000007fd430

2007-10-17 Thread martin f krafft 
also sprach James Vega [EMAIL PROTECTED] [2007.10.16.1421 +0100]:
 Yes, it was included in 1:7.1-135+1.  I was just noting the actual
 patch that fixed the bug in case someone has to use a hypothetical
 7.1-080 package from distribution X.  If they check for
 has('patch073') instead of patch('135') they'll rightly have
 'preserveindent' enabled.

Oh, doh! I was running +058 before, wasn't I?

Sorry, I was a bit slow today...

-- 
 .''`.   martin f. krafft [EMAIL PROTECTED]
: :'  :  proud Debian developer, author, administrator, and user
`. `'`   http://people.debian.org/~madduck - http://debiansystem.info
  `-  Debian - when you have better things to do than fixing systems
 
solange man nicht die moral des christentums
 als kapitalverbrechen am leben empfindet,
 haben dessen verteidiger gutes spiel.
 - friedrich nietzsche


digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)

Bug#446268: vim ABRT: glibc: vim: invalid next size (fast): 0x00000000007fd430

2007-10-16 Thread martin f krafft 
also sprach martin f krafft [EMAIL PROTECTED] [2007.10.11.1625 +0100]:
 set et pi

if has('patch135')
  set pi
endif

for those who can't upgrade.

-- 
 .''`.   martin f. krafft [EMAIL PROTECTED]
: :'  :  proud Debian developer, author, administrator, and user
`. `'`   http://people.debian.org/~madduck - http://debiansystem.info
  `-  Debian - when you have better things to do than fixing systems


digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)

Bug#446268: vim ABRT: glibc: vim: invalid next size (fast): 0x00000000007fd430

2007-10-16 Thread James Vega 
On Tue, Oct 16, 2007 at 12:09:36PM +0100, martin f krafft wrote:
 also sprach martin f krafft [EMAIL PROTECTED] [2007.10.11.1625 +0100]:
  set et pi
 
 if has('patch135')

'patch073' was the actual patch that fixed the bug, so that would be a
more distribution agnostic check for those of us that have to use more
than just  Debian systems.

   set pi
 endif
 
 for those who can't upgrade.

James
-- 
GPG Key: 1024D/61326D40 2003-09-02 James Vega [EMAIL PROTECTED]


signature.asc
Description: Digital signature

Bug#446268: vim ABRT: glibc: vim: invalid next size (fast): 0x00000000007fd430

2007-10-16 Thread martin f krafft 
also sprach James Vega [EMAIL PROTECTED] [2007.10.16.1252 +0100]:
 'patch073' was the actual patch that fixed the bug, so that would be a
 more distribution agnostic check for those of us that have to use more
 than just  Debian systems.

And patch073 was not included in 1:7.1-135+1? That seems a bit odd.

-- 
 .''`.   martin f. krafft [EMAIL PROTECTED]
: :'  :  proud Debian developer, author, administrator, and user
`. `'`   http://people.debian.org/~madduck - http://debiansystem.info
  `-  Debian - when you have better things to do than fixing systems


digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)

Bug#446268: vim ABRT: glibc: vim: invalid next size (fast): 0x00000000007fd430

2007-10-16 Thread James Vega 
On Tue, Oct 16, 2007 at 01:42:44PM +0100, martin f krafft wrote:
 also sprach James Vega [EMAIL PROTECTED] [2007.10.16.1252 +0100]:
  'patch073' was the actual patch that fixed the bug, so that would be a
  more distribution agnostic check for those of us that have to use more
  than just  Debian systems.
 
 And patch073 was not included in 1:7.1-135+1? That seems a bit odd.

Yes, it was included in 1:7.1-135+1.  I was just noting the actual patch
that fixed the bug in case someone has to use a hypothetical 7.1-080
package from distribution X.  If they check for has('patch073') instead
of patch('135') they'll rightly have 'preserveindent' enabled.

James
-- 
GPG Key: 1024D/61326D40 2003-09-02 James Vega [EMAIL PROTECTED]


signature.asc
Description: Digital signature

Bug#446268: vim ABRT: glibc: vim: invalid next size (fast): 0x00000000007fd430

2007-10-11 Thread martin f krafft 
Package: vim
Version: 1:7.1-056+2
Severity: grave

Grave since I've lost data, though not a lot thanks to .swp files.

Verified with 1:7.1-056+2 on i386 and amd64 by me.
and
 jamessan madduck: I've reproduce in vim.full and vim.basic
and
 mgedmin yes, gutsy, vim-gnome 1:7.1-056+2ubuntu2



# script courtesy of James Vega
$ cat crash.vim 
set et pi
insert
-- #debian-devel
.
right



$ /usr/bin/vim -u NONE -S crash.vim
*** glibc detected *** vim: malloc(): memory corruption: 0x08238a20 ***
=== Backtrace: =
/lib/i686/cmov/libc.so.6[0xb76035b6]
/lib/i686/cmov/libc.so.6(__libc_malloc+0x90)[0xb7604f40]
vim(lalloc+0x18)[0x8118618]
vim(alloc_clear+0x1f)[0x811874f]
vim(ga_grow+0x4c)[0x81187cc]
vim[0x80b1753]
vim(getsourceline+0x1d7)[0x80b3e47]
vim(do_cmdline+0xbcf)[0x80c257f]
vim(do_source+0x377)[0x80b41d7]
vim[0x80b4651]
vim[0x80c0a86]
vim(do_cmdline+0x3a9)[0x80c1d59]
vim(do_cmdline_cmd+0x29)[0x80c2da9]
vim(main+0x99a)[0x80f633a]
/lib/i686/cmov/libc.so.6(__libc_start_main+0xe0)[0xb75af050]
vim[0x8071731]
=== Memory map: 
08048000-081f2000 r-xp  fe:02 229297 /usr/bin/vim.python
081f2000-081ff000 rw-p 001a9000 fe:02 229297 /usr/bin/vim.python
081ff000-0824b000 rw-p 081ff000 00:00 0  [heap]
b700-b7021000 rw-p b700 00:00 0 
b7021000-b710 ---p b7021000 00:00 0 
b7181000-b718b000 r-xp  fe:00 93891  /lib/libgcc_s.so.1
b718b000-b718c000 rw-p 9000 fe:00 93891  /lib/libgcc_s.so.1
b718c000-b7195000 r-xp  fe:00 65370  
/lib/i686/cmov/libnss_files-2.6.1.so
b7195000-b7197000 rw-p 8000 fe:00 65370  
/lib/i686/cmov/libnss_files-2.6.1.so
b7197000-b719f000 r-xp  fe:00 65373  
/lib/i686/cmov/libnss_nis-2.6.1.so
b719f000-b71a1000 rw-p 7000 fe:00 65373  
/lib/i686/cmov/libnss_nis-2.6.1.so
b71a1000-b71b5000 r-xp  fe:00 65360  /lib/i686/cmov/libnsl-2.6.1.so
b71b5000-b71b7000 rw-p 00013000 fe:00 65360  /lib/i686/cmov/libnsl-2.6.1.so
b71b7000-b71b9000 rw-p b71b7000 00:00 0 
b71b9000-b71c r-xp  fe:00 65363  
/lib/i686/cmov/libnss_compat-2.6.1.so
b71c-b71c2000 rw-p 6000 fe:00 65363  
/lib/i686/cmov/libnss_compat-2.6.1.so
b71ce000-b7345000 r--p  fe:02 65164  /usr/lib/locale/locale-archive
b7345000-b7348000 rw-p b7345000 00:00 0 
b7348000-b734c000 r-xp  fe:02 65666  /usr/lib/libXdmcp.so.6.0.0
b734c000-b734d000 rw-p 3000 fe:02 65666  /usr/lib/libXdmcp.so.6.0.0
b734d000-b736 r-xp  fe:00 65390  
/lib/i686/cmov/libpthread-2.6.1.so
b736-b7362000 rw-p 00013000 fe:00 65390  
/lib/i686/cmov/libpthread-2.6.1.so
b7362000-b7364000 rw-p b7362000 00:00 0 
b7364000-b7389000 r-xp  fe:02 65265  /usr/lib/libpcre.so.3.12.1
b7389000-b738a000 rw-p 00025000 fe:02 65265  /usr/lib/libpcre.so.3.12.1
b738a000-b73ac000 r-xp  fe:02 65675  /usr/lib/libpng12.so.0.15.0
b73ac000-b73ad000 rw-p 00021000 fe:02 65675  /usr/lib/libpng12.so.0.15.0
b73ad000-b73ae000 rw-p b73ad000 00:00 0 
b73ae000-b73b r-xp  fe:02 0  /usr/lib/libXau.so.6.0.0
b73b-b73b1000 rw-p 1000 fe:02 0  /usr/lib/libXau.so.6.0.0
b73b1000-b73cf000 r-xp  fe:02 67439  /usr/lib/libexpat.so.1.0.0
b73cf000-b73d1000 rw-p 0001d000 fe:02 67439  /usr/lib/libexpat.so.1.0.0
b73d1000-b73e5000 r-xp  fe:02 66403  /usr/lib/libz.so.1.2.3.3
b73e5000-b73e6000 rw-p 00013000 fe:02 66403  /usr/lib/libz.so.1.2.3.3
b73e6000-b7451000 r-xp  fe:02 67905  /usr/lib/libfreetype.so.6.3.16
b7451000-b7455000 rw-p 0006a000 fe:02 67905  /usr/lib/

Vim: Caught deadly signal ABRT
Vim: preserving files...
Vim: Finished.



# valgrind run courtesy of Marius Gedminas
$ valgrind --log-file=vim.log /usr/bin/vim -u NONE -S crash.vim ; reset

$ cat vim.log

==12613== Memcheck, a memory error detector.
==12613== Copyright (C) 2002-2007, and GNU GPL'd, by Julian Seward et al.
==12613== Using LibVEX rev 1732, a library for dynamic binary translation.
==12613== Copyright (C) 2004-2007, and GNU GPL'd, by OpenWorks LLP.
==12613== Using valgrind-3.2.3-Debian, a dynamic binary instrumentation 
framework.
==12613== Copyright (C) 2000-2007, and GNU GPL'd, by Julian Seward et al.
==12613== For more details, rerun with: -v
==12613== 
==12613== My PID = 12613, parent PID = 12444.  Prog and args are:
==12613==/usr/bin/vim
==12613==-u
==12613==NONE
==12613==-S
==12613==crash.vim
==12613== 
==12613== Invalid write of size 1
==12613==at 0x8118170: set_indent (misc1.c:286)
==12613==by 0x80B1EA9: ex_align (ex_cmds.c:233)
==12613==by 0x80C3C72: do_one_cmd (ex_docmd.c:2622)
==12613==by 0x80C5001: do_cmdline (ex_docmd.c:1100)
==12613==by 0x80B6ECA: do_source (ex_cmds2.c:3054)
==12613==by 0x80B74E0: cmd_source (ex_cmds2.c:2684)
==12613==by 0x80C3C72: do_one_cmd (ex_docmd.c:2622)
==12613==by 0x80C5001: do_cmdline (ex_docmd.c:1100)
==12613==by 0x80C6228: do_cmdline_cmd (ex_docmd.c:706)