completion crash

["Mikael Magnusson" <mikachu@xxxxxxxxx>]

I got this when playing with _git, I had
_wanted files expl 'tree file' compadd $multi_parts_opts -f -a tree_trees
and added -p $Path to get
_wanted files expl 'tree file' compadd $multi_parts_opts -p $Path -f
-a tree_trees
which in turn gave me this backtrace (hold on to your hat):

0x41b66273 in strlen () from /lib/libc.so.6
(gdb) bt
#0  0x41b66273 in strlen () from /lib/libc.so.6
#1  0x080bf8c1 in ztrdup (s=0xa77fe7c8 <Address 0xa77fe7c8 out of
bounds>) at string.c:52
#2  0xa7a749e0 in dupmatch (m=0xa7bbb990, nbeg=0, nend=0) at compcore.c:3225
#3  0xa7a74f35 in permmatches (last=0) at compcore.c:3339
#4  0xa7a6a3bc in get_nmatches (pm=0x82ddbb0) at complete.c:1261
#5  0x080a54ae in getstrvalue (v=0xafeaa7ec) at params.c:1885
#6  0x080a362c in getarg (str=0xafeaa624, inv=0xafeaa628,
v=0xafeaa7ec, a2=0, w=0xafeaa618,
    prevcharlen=0xafeaa60c, nextcharlen=0xafeaa608) at params.c:1227
#7  0x080a4ab1 in getindex (pptr=0xafeaa68c, v=0xafeaa7ec, flags=256)
at params.c:1601
#8  0x080a5138 in fetchvalue (v=0xafeaa7ec, pptr=0xafeaa810, bracks=1,
flags=256)
    at params.c:1818
#9  0x080c3c21 in paramsubst (l=0xafeaaccc, n=0xafeaacc0,
str=0xafeaaa28, qt=1, ssub=4)
    at subst.c:1912
#10 0x080c05c7 in stringsubst (list=0xafeaaccc, node=0xafeaacc0,
ssub=4, asssub=0) at subst.c:193
#11 0x080bfe84 in prefork (list=0xafeaaccc, flags=4) at subst.c:91
#12 0x080c0ac0 in singsub (s=0xafeaaddc) at subst.c:348
#13 0x0806863d in evalcond (state=0xafeab5ac, fromtest=0x0) at cond.c:179
#14 0x08072cb8 in execcond (state=0xafeab5ac, do_exec=0) at exec.c:3826
#15 0x0806b7f9 in execsimple (state=0xafeab5ac) at exec.c:999
#16 0x0806ba14 in execlist (state=0xafeab5ac, dont_change_job=1,
exiting=0) at exec.c:1092
#17 0x08093b56 in execif (state=0xafeab5ac, do_exec=0) at loop.c:515
#18 0x08070fb5 in execcmd (state=0xafeab5ac, input=0, output=0,
how=18, last1=2) at exec.c:2978
#19 0x0806cf78 in execpline2 (state=0xafeab5ac, pcode=19459, how=18,
input=0, output=0, last1=0)
    at exec.c:1540
#20 0x0806c30e in execpline (state=0xafeab5ac, slcode=1296386, how=18,
last1=0) at exec.c:1326
#21 0x0806bb51 in execlist (state=0xafeab5ac, dont_change_job=1,
exiting=0) at exec.c:1124
#22 0x0806b6c0 in execode (p=0x830dbf0, dont_change_job=1, exiting=0)
at exec.c:965
#23 0x08073ea7 in runshfunc (prog=0x830dbf0, wrap=0x0, name=0xa7803910
"_arguments")
    at exec.c:4355
---Type <return> to continue, or q <return> to quit---
#24 0xa7a6a9fc in comp_wrapper (prog=0x830dbf0, w=0x0, name=0xa7803910
"_arguments")
    at complete.c:1449
#25 0x08073e36 in runshfunc (prog=0x830dbf0, wrap=0xa7a85720,
name=0xa7803910 "_arguments")
    at exec.c:4343
#26 0x08073c1a in doshfunc (name=0x82c3240 "_arguments",
prog=0x830dbf0, doshargs=0xa78035e0,
    flags=270336, noreturnval=0) at exec.c:4264
#27 0x0807350d in execshfunc (shf=0x82c31e8, args=0xa78035e0) at exec.c:4041
#28 0x080711ac in execcmd (state=0xafeabe7c, input=0, output=0, how=2,
last1=2) at exec.c:3026
#29 0x0806cf78 in execpline2 (state=0xafeabe7c, pcode=323, how=2,
input=0, output=0, last1=0)
    at exec.c:1540
#30 0x0806c30e in execpline (state=0xafeabe7c, slcode=13346, how=2,
last1=0) at exec.c:1326
#31 0x0806bb9d in execlist (state=0xafeabe7c, dont_change_job=1,
exiting=0) at exec.c:1131
#32 0x0806b6c0 in execode (p=0x82ecc78, dont_change_job=1, exiting=0)
at exec.c:965
#33 0x08073ea7 in runshfunc (prog=0x82ecc78, wrap=0x0, name=0xa78034d8
"_git-ls-tree")
    at exec.c:4355
#34 0xa7a6a9fc in comp_wrapper (prog=0x82ecc78, w=0x0, name=0xa78034d8
"_git-ls-tree")
    at complete.c:1449
#35 0x08073e36 in runshfunc (prog=0x82ecc78, wrap=0xa7a85720,
name=0xa78034d8 "_git-ls-tree")
    at exec.c:4343
#36 0x08073c1a in doshfunc (name=0x82ecf58 "_git-ls-tree",
prog=0x82ecc78, doshargs=0xa7803488,
    flags=0, noreturnval=0) at exec.c:4264
#37 0x0807350d in execshfunc (shf=0x82ecf40, args=0xa7803488) at exec.c:4041
#38 0x080711ac in execcmd (state=0xafeacd6c, input=0, output=0, how=2,
last1=2) at exec.c:3026
#39 0x0806cf78 in execpline2 (state=0xafeacd6c, pcode=1475, how=2,
input=0, output=0, last1=0)
    at exec.c:1540
#40 0x0806c30e in execpline (state=0xafeacd6c, slcode=3074, how=2,
last1=0) at exec.c:1326
#41 0x0806bb51 in execlist (state=0xafeacd6c, dont_change_job=1,
exiting=0) at exec.c:1124
#42 0x08093b56 in execif (state=0xafeacd6c, do_exec=0) at loop.c:515
#43 0x08070fb5 in execcmd (state=0xafeacd6c, input=0, output=0, how=2,
last1=2) at exec.c:2978
---Type <return> to continue, or q <return> to quit---
#44 0x0806cf78 in execpline2 (state=0xafeacd6c, pcode=1411, how=2,
input=0, output=0, last1=0)
    at exec.c:1540
#45 0x0806c30e in execpline (state=0xafeacd6c, slcode=40962, how=2,
last1=0) at exec.c:1326
#46 0x0806bb51 in execlist (state=0xafeacd6c, dont_change_job=1,
exiting=0) at exec.c:1124
#47 0x0806b6c0 in execode (p=0x831bbc0, dont_change_job=1, exiting=0)
at exec.c:965
#48 0x08073ea7 in runshfunc (prog=0x831bbc0, wrap=0x0, name=0xa7803118
"_call_function")
    at exec.c:4355
#49 0xa7a6a9fc in comp_wrapper (prog=0x831bbc0, w=0x0, name=0xa7803118
"_call_function")
    at complete.c:1449
#50 0x08073e36 in runshfunc (prog=0x831bbc0, wrap=0xa7a85720,
name=0xa7803118 "_call_function")
    at exec.c:4343
#51 0x08073c1a in doshfunc (name=0x82c3f10 "_call_function", prog=0x831bbc0,
    doshargs=0xa7809fc8, flags=270336, noreturnval=0) at exec.c:4264
#52 0x0807350d in execshfunc (shf=0x82c3eb8, args=0xa7809fc8) at exec.c:4041
#53 0x080711ac in execcmd (state=0xafeae2bc, input=0, output=0,
how=18, last1=2) at exec.c:3026
#54 0x0806cf78 in execpline2 (state=0xafeae2bc, pcode=278019, how=18,
input=0, output=0, last1=0)
    at exec.c:1540
#55 0x0806c30e in execpline (state=0xafeae2bc, slcode=5122, how=18,
last1=0) at exec.c:1326
#56 0x0806bb51 in execlist (state=0xafeae2bc, dont_change_job=1,
exiting=0) at exec.c:1124
#57 0x08093efb in execcase (state=0xafeae2bc, do_exec=0) at loop.c:593
#58 0x08070fb5 in execcmd (state=0xafeae2bc, input=0, output=0,
how=18, last1=2) at exec.c:2978
#59 0x0806cf78 in execpline2 (state=0xafeae2bc, pcode=277635, how=18,
input=0, output=0, last1=0)
    at exec.c:1540
#60 0x0806c30e in execpline (state=0xafeae2bc, slcode=27650, how=18,
last1=0) at exec.c:1326
#61 0x0806bb51 in execlist (state=0xafeae2bc, dont_change_job=1,
exiting=0) at exec.c:1124
#62 0x08093b56 in execif (state=0xafeae2bc, do_exec=0) at loop.c:515
#63 0x08070fb5 in execcmd (state=0xafeae2bc, input=0, output=0,
how=18, last1=2) at exec.c:2978
#64 0x0806cf78 in execpline2 (state=0xafeae2bc, pcode=276867, how=18,
input=0, output=0, last1=0)
    at exec.c:1540
---Type <return> to continue, or q <return> to quit---
#65 0x0806c30e in execpline (state=0xafeae2bc, slcode=81922, how=18,
last1=0) at exec.c:1326
#66 0x0806bb51 in execlist (state=0xafeae2bc, dont_change_job=1,
exiting=0) at exec.c:1124
#67 0x0806b6c0 in execode (p=0x82e15a8, dont_change_job=1, exiting=0)
at exec.c:965
#68 0x08073ea7 in runshfunc (prog=0x82e15a8, wrap=0x0, name=0xa784bae0
"_git") at exec.c:4355
#69 0xa7a6a9fc in comp_wrapper (prog=0x82e15a8, w=0x0, name=0xa784bae0
"_git") at complete.c:1449
#70 0x08073e36 in runshfunc (prog=0x82e15a8, wrap=0xa7a85720,
name=0xa784bae0 "_git")
    at exec.c:4343
#71 0x08073c1a in doshfunc (name=0x82e1570 "_git", prog=0x82e15a8,
doshargs=0xa784bab0, flags=0,
    noreturnval=0) at exec.c:4264
#72 0x0807350d in execshfunc (shf=0x82e15d0, args=0xa784bab0) at exec.c:4041
#73 0x080711ac in execcmd (state=0xafeaeb6c, input=0, output=0,
how=18, last1=2) at exec.c:3026
#74 0x0806cf78 in execpline2 (state=0xafeaeb6c, pcode=131, how=18,
input=0, output=0, last1=0)
    at exec.c:1540
#75 0x0806c30e in execpline (state=0xafeaeb6c, slcode=3074, how=18,
last1=0) at exec.c:1326
#76 0x0806bb51 in execlist (state=0xafeaeb6c, dont_change_job=1,
exiting=0) at exec.c:1124
#77 0x0806b6c0 in execode (p=0xa784ba58, dont_change_job=1, exiting=0)
at exec.c:965
#78 0x08064cb0 in bin_eval (nam=0xa784ba00 "eval", argv=0xafeaebc0,
ops=0xafeaec00, func=14)
    at builtin.c:4726
#79 0x08055abb in execbuiltin (args=0xa784b9d8, bn=0x80de63c) at builtin.c:438
#80 0x0807122b in execcmd (state=0xafeaf92c, input=0, output=0, how=2,
last1=2) at exec.c:3037
#81 0x0806cf78 in execpline2 (state=0xafeaf92c, pcode=3779, how=2,
input=0, output=0, last1=0)
    at exec.c:1540
#82 0x0806c30e in execpline (state=0xafeaf92c, slcode=4130, how=2,
last1=0) at exec.c:1326
#83 0x0806bb9d in execlist (state=0xafeaf92c, dont_change_job=1,
exiting=0) at exec.c:1131
#84 0x08093b56 in execif (state=0xafeaf92c, do_exec=0) at loop.c:515
#85 0x08070fb5 in execcmd (state=0xafeaf92c, input=0, output=0, how=2,
last1=2) at exec.c:2978
#86 0x0806cf78 in execpline2 (state=0xafeaf92c, pcode=3651, how=2,
input=0, output=0, last1=0)
    at exec.c:1540
#87 0x0806c30e in execpline (state=0xafeaf92c, slcode=43010, how=2,
last1=0) at exec.c:1326
---Type <return> to continue, or q <return> to quit---
#88 0x0806bb51 in execlist (state=0xafeaf92c, dont_change_job=1,
exiting=0) at exec.c:1124
#89 0x0806b6c0 in execode (p=0x82e0e28, dont_change_job=1, exiting=0)
at exec.c:965
#90 0x08073ea7 in runshfunc (prog=0x82e0e28, wrap=0x0, name=0xa784b5a0
"_dispatch")
    at exec.c:4355
#91 0xa7a6a9fc in comp_wrapper (prog=0x82e0e28, w=0x0, name=0xa784b5a0
"_dispatch")
    at complete.c:1449
#92 0x08073e36 in runshfunc (prog=0x82e0e28, wrap=0xa7a85720,
name=0xa784b5a0 "_dispatch")
    at exec.c:4343
#93 0x08073c1a in doshfunc (name=0x82c5c58 "_dispatch",
prog=0x82e0e28, doshargs=0xa784b470,
    flags=270336, noreturnval=0) at exec.c:4264
#94 0x0807350d in execshfunc (shf=0x82c5c00, args=0xa784b470) at exec.c:4041
#95 0x080711ac in execcmd (state=0xafeb01dc, input=0, output=0,
how=18, last1=2) at exec.c:3026
#96 0x0806cf78 in execpline2 (state=0xafeb01dc, pcode=1667, how=18,
input=0, output=0, last1=0)
    at exec.c:1540
#97 0x0806c30e in execpline (state=0xafeb01dc, slcode=8194, how=18,
last1=0) at exec.c:1326
#98 0x0806bb51 in execlist (state=0xafeb01dc, dont_change_job=1,
exiting=0) at exec.c:1124
#99 0x0806b6c0 in execode (p=0x82e0838, dont_change_job=1, exiting=0)
at exec.c:965
#100 0x08073ea7 in runshfunc (prog=0x82e0838, wrap=0x0,
name=0xa784b358 "_normal") at exec.c:4355
#101 0xa7a6a9fc in comp_wrapper (prog=0x82e0838, w=0x0,
name=0xa784b358 "_normal")
    at complete.c:1449
#102 0x08073e36 in runshfunc (prog=0x82e0838, wrap=0xa7a85720,
name=0xa784b358 "_normal")
    at exec.c:4343
#103 0x08073c1a in doshfunc (name=0x82cb980 "_normal", prog=0x82e0838,
doshargs=0xa784b310,
    flags=270336, noreturnval=0) at exec.c:4264
#104 0x0807350d in execshfunc (shf=0x82cb928, args=0xa784b310) at exec.c:4041
#105 0x080711ac in execcmd (state=0xafeb10cc, input=0, output=0,
how=2, last1=2) at exec.c:3026
#106 0x0806cf78 in execpline2 (state=0xafeb10cc, pcode=7555, how=2,
input=0, output=0, last1=0)
    at exec.c:1540
#107 0x0806c30e in execpline (state=0xafeb10cc, slcode=4130, how=2,
last1=0) at exec.c:1326
---Type <return> to continue, or q <return> to quit---
#108 0x0806bb9d in execlist (state=0xafeb10cc, dont_change_job=1,
exiting=0) at exec.c:1131
#109 0x08093b56 in execif (state=0xafeb10cc, do_exec=0) at loop.c:515
#110 0x08070fb5 in execcmd (state=0xafeb10cc, input=0, output=0,
how=2, last1=2) at exec.c:2978
#111 0x0806cf78 in execpline2 (state=0xafeb10cc, pcode=7427, how=2,
input=0, output=0, last1=0)
    at exec.c:1540
#112 0x0806c30e in execpline (state=0xafeb10cc, slcode=114690, how=2,
last1=0) at exec.c:1326
#113 0x0806bb51 in execlist (state=0xafeb10cc, dont_change_job=1,
exiting=0) at exec.c:1124
#114 0x0806b6c0 in execode (p=0x82cbae8, dont_change_job=1, exiting=0)
at exec.c:965
#115 0x08073ea7 in runshfunc (prog=0x82cbae8, wrap=0x0,
name=0xa784ae50 "_complete")
    at exec.c:4355
#116 0xa7a6a9fc in comp_wrapper (prog=0x82cbae8, w=0x0,
name=0xa784ae50 "_complete")
    at complete.c:1449
#117 0x08073e36 in runshfunc (prog=0x82cbae8, wrap=0xa7a85720,
name=0xa784ae50 "_complete")
    at exec.c:4343
#118 0x08073c1a in doshfunc (name=0x82c4620 "_complete",
prog=0x82cbae8, doshargs=0xa784ae00,
    flags=270336, noreturnval=0) at exec.c:4264
#119 0x0807350d in execshfunc (shf=0x82c45c8, args=0xa784ae00) at exec.c:4041
#120 0x080711ac in execcmd (state=0xafeb2cdc, input=0, output=0,
how=18, last1=2) at exec.c:3026
#121 0x0806cf78 in execpline2 (state=0xafeb2cdc, pcode=10371, how=18,
input=0, output=0, last1=0)
    at exec.c:1540
#122 0x0806c30e in execpline (state=0xafeb2cdc, slcode=3074, how=18,
last1=0) at exec.c:1326
#123 0x0806bb51 in execlist (state=0xafeb2cdc, dont_change_job=1,
exiting=0) at exec.c:1124
#124 0x08093ab1 in execif (state=0xafeb2cdc, do_exec=0) at loop.c:500
#125 0x08070fb5 in execcmd (state=0xafeb2cdc, input=0, output=0,
how=2, last1=2) at exec.c:2978
#126 0x0806cf78 in execpline2 (state=0xafeb2cdc, pcode=10051, how=2,
input=0, output=0, last1=0)
    at exec.c:1540
#127 0x0806c30e in execpline (state=0xafeb2cdc, slcode=48130, how=2,
last1=0) at exec.c:1326
#128 0x0806bb51 in execlist (state=0xafeb2cdc, dont_change_job=1,
exiting=0) at exec.c:1124
#129 0x08092d78 in execfor (state=0xafeb2cdc, do_exec=0) at loop.c:159
---Type <return> to continue, or q <return> to quit---
#130 0x08070fb5 in execcmd (state=0xafeb2cdc, input=0, output=0,
how=2, last1=2) at exec.c:2978
#131 0x0806cf78 in execpline2 (state=0xafeb2cdc, pcode=9539, how=2,
input=0, output=0, last1=0)
    at exec.c:1540
#132 0x0806c30e in execpline (state=0xafeb2cdc, slcode=90114, how=2,
last1=0) at exec.c:1326
#133 0x0806bb51 in execlist (state=0xafeb2cdc, dont_change_job=1,
exiting=0) at exec.c:1124
#134 0x08092d78 in execfor (state=0xafeb2cdc, do_exec=0) at loop.c:159
#135 0x08070fb5 in execcmd (state=0xafeb2cdc, input=0, output=0,
how=2, last1=2) at exec.c:2978
#136 0x0806cf78 in execpline2 (state=0xafeb2cdc, pcode=8067, how=2,
input=0, output=0, last1=0)
    at exec.c:1540
#137 0x0806c30e in execpline (state=0xafeb2cdc, slcode=220162, how=2,
last1=0) at exec.c:1326
#138 0x0806bb51 in execlist (state=0xafeb2cdc, dont_change_job=1,
exiting=0) at exec.c:1124
#139 0x0806b6c0 in execode (p=0x82dcb00, dont_change_job=1, exiting=0)
at exec.c:965
#140 0x08073ea7 in runshfunc (prog=0x82dcb00, wrap=0x0,
name=0xa7849030 "_main_complete")
    at exec.c:4355
#141 0xa7a6a9fc in comp_wrapper (prog=0x82dcb00, w=0x0,
name=0xa7849030 "_main_complete")
    at complete.c:1449
#142 0x08073e36 in runshfunc (prog=0x82dcb00, wrap=0xa7a85720,
name=0xa7849030 "_main_complete")
    at exec.c:4343
#143 0x08073c1a in doshfunc (name=0x829d390 "_main_complete",
prog=0x82dcb00, doshargs=0x0,
    flags=0, noreturnval=0) at exec.c:4264
#144 0xa7a6d2e1 in callcompfunc (s=0xa7bbb738 "HEAD:", fn=0x829d390
"_main_complete")
    at compcore.c:817
#145 0xa7a6dbb3 in makecomplist (s=0xa7bbb738 "HEAD:", incmd=0, lst=0)
at compcore.c:968
#146 0xa7a6b942 in do_completion (dummy=0xa7ac39d4, dat=0xafeb3138) at
compcore.c:349
#147 0x0809abcc in runhookdef (h=0xa7ac39d4, d=0xafeb3138) at module.c:996
#148 0xa7ab3993 in docompletion (s=0x831a570 "HEAD:", lst=0, incmd=0)
at zle_tricky.c:2135
#149 0xa7aafa13 in docomplete (lst=0) at zle_tricky.c:859
#150 0xa7aae493 in expandorcomplete (args=0xa7ac3cbc) at zle_tricky.c:315
#151 0xa7aae036 in completecall (args=0xa7ac3cbc) at zle_tricky.c:208
---Type <return> to continue, or q <return> to quit---
#152 0xa7a9dbf2 in execzlefunc (func=0xa7ac1cd0, args=0xa7ac3cbc,
set_bindk=0) at zle_main.c:1291
#153 0xa7a9d122 in zlecore () at zle_main.c:1043
#154 0xa7a9d833 in zleread (lp=0x80f3adc, rp=0x80f3a64, flags=7,
context=0) at zle_main.c:1205
#155 0xa7a9f9c1 in zle_main_entry (cmd=1, ap=0xafeb35a4 "") at zle_main.c:1834
#156 0x08086ef8 in zleentry (cmd=1) at init.c:1237
#157 0x080877d6 in inputline () at input.c:278
#158 0x08087645 in ingetc () at input.c:214
#159 0x0807dc26 in ihgetc () at hist.c:263
#160 0x0808f96f in gettok () at lex.c:663
#161 0x0808f1fa in yylex () at lex.c:350
#162 0x080abb8d in parse_event () at parse.c:451
#163 0x0808463f in loop (toplevel=1, justonce=0) at init.c:129
#164 0x08087279 in zsh_main (argc=1, argv=0xafeb3804) at init.c:1388
#165 0x080551c6 in main (argc=Cannot access memory at address 0x0
) at ./main.c:93

-- 
Mikael Magnusson