(bug) segfault with menu-select

[Maurice <mauricex@xxxxxxx>]

Hi,

I didn't find this in the archives, so I thought you might be
interested.

I can reproduce this bug on my debian-woody machine, using zsh
version 4.0.4 from the woody-package.

<TAB> is expand-or-complete and ^G is bound to menu-select:

  $ cd<TAB><BACKSPACE>^G
  zsh: segmentation fault (core dumped)  zsh

The output of gdb core:

  Program terminated with signal 11, Segmentation fault
  [...]
  (gdb) where
  #0  0x40223a72 in printfmt () from /usr/lib/zsh/4.0.4/zsh/zle.so
  #1  0x40246788 in calclist () from /usr/lib/zsh/4.0.4/zsh/complete.so
  #2  0x4028bf4b in _init () from /usr/lib/zsh/4.0.4/zsh/complist.so
  #3  0x0807e681 in runhookdef ()
  #4  0x40248792 in list_matches () from /usr/lib/zsh/4.0.4/zsh/complete.so
  #5  0x0807e681 in runhookdef ()
  #6  0x4021d8d4 in zrefresh () from /usr/lib/zsh/4.0.4/zsh/zle.so
  #7  0x4028cd57 in _init () from /usr/lib/zsh/4.0.4/zsh/complist.so
  #8  0x4028e627 in _init () from /usr/lib/zsh/4.0.4/zsh/complist.so
  #9  0x4021775a in execzlefunc () from /usr/lib/zsh/4.0.4/zsh/zle.so
  #10 0x40217321 in zleread () from /usr/lib/zsh/4.0.4/zsh/zle.so
  #11 0x080707b5 in ingetc ()
  #12 0x080706e5 in ingetc ()
  #13 0x08069f70 in iaddtoline ()
  #14 0x08074cd7 in gettok ()
  #15 0x08074715 in yylex ()
  #16 0x080857a1 in parse_event ()
  #17 0x0806e212 in loop ()
  #18 0x0807044c in zsh_main ()
  #19 0x080514d4 in main ()
  #20 0x400b414f in __libc_start_main () from /lib/libc.so.6


As I'm not subscribed to the list, please reply or cc to me
directly, if you want.