/bin/nano:*** Error in `nano': munmap_chunk(): invalid pointer: ADDR ***

[errors.ubuntu.com bug bridge]

The Ubuntu Error Tracker has been receiving reports about a problem regarding nano. This problem was most recently seen with package version 2.5.3-2, the problem page at https://errors.ubuntu.com/problem/295eb585019cebe203e4b05aec3f4a4fb98932b1 contains more details, including versions of packages affected, stacktrace or traceback, and individual crash reports.
If you do not have access to the Ubuntu Error Tracker you can request it at http://forms.canonical.com/reports/.

[Benno Schulenberg (bennoschulenberg)]

Why not apply the patch that I referred to in bug #1595607? It will solve the crashes. Why do you have this crash reporting system when you don't do anything with the reports?

[Benno Schulenberg (bennoschulenberg)]

Brian? Can you show me the backtrace for this one too, please?

[Brian Murray (brian-murray)]

#0 0x00007fb32f9ed428 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:54
        resultvar = 0
        pid = 3997
        selftid = 3997
#1 0x00007fb32f9ef02a in __GI_abort () at abort.c:89
        save_stage = 2
        act = {__sigaction_handler = {sa_handler = 0x2e33322e322d646c, sa_sigaction = 0x2e33322e322d646c}, sa_mask = {__val = {3689400710896185203, 3256155515023405872, 3473454209073047095, 3276212736508309552, 3474019345111195760, 3544397105330139184, 3689067352599901472, 2314885530818453536, 2314885530818453536, 7091318037929795616, 3257288213055174703, 7955377262162766188, 3615882721364815733, 7090415181300444723, 3472328296294789939, 3473176235347488048}}, sa_flags = 808529972, sa_restorer = 0x4d}
        sigs = {__val = {32, 0 <repeats 15 times>}}
#2 0x00007fb32fa2f7ea in __libc_message (do_abort=do_abort@entry=2, fmt=fmt@entry=0x7fb32fb482e0 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175
        ap = <error reading variable ap (Attempt to dereference a generic pointer.)>
        fd = 4
        on_2 = <optimized out>
        list = <optimized out>
        nlist = <optimized out>
        cp = <optimized out>
        written = <optimized out>
#3 0x00007fb32fa3bae8 in malloc_printerr (ar_ptr=0x0, ptr=<optimized out>, str=0x7fb32fb48308 "munmap_chunk(): invalid pointer", action=<optimized out>) at malloc.c:5004
        buf = "0000000001520410"
        cp = <optimized out>
        ar_ptr = 0x0
        ptr = <optimized out>
        str = 0x7fb32fb48308 "munmap_chunk(): invalid pointer"
        action = <optimized out>
#4 munmap_chunk (p=<optimized out>) at malloc.c:2840
        size = <optimized out>
        block = <optimized out>
        total_size = <optimized out>
#5 __GI___libc_free (mem=<optimized out>) at malloc.c:2961
        ar_ptr = <optimized out>
        p = <optimized out>
        hook = <optimized out>
#6 0x00007fb32ffbdd83 in _nc_freewin (win=0x15415b0) at /build/ncurses-pKZ1BN/ncurses-6.0+20160213/ncurses/base/lib_newwin.c:118
        p = 0x15415a0
        q = <optimized out>
        i = <optimized out>
        result = -1
#7 0x00007fb32ffb5f90 in delwin (win=<optimized out>) at /build/ncurses-pKZ1BN/ncurses-6.0+20160213/ncurses/base/lib_delwin.c:88
        result = -1
#8 0x0000000000412f87 in window_init () at ../../src/nano.c:726
No locals.
#9 0x0000000000414189 in regenerate_screen () at ../../src/nano.c:1378
        tty = <optimized out>
        result = 0
        win = {ws_row = 24, ws_col = 81, ws_xpixel = 0, ws_ypixel = 0}
#10 0x00000000004201b9 in get_key_buffer (win=0x1520d20) at ../../src/winio.c:136
        input = -1
        errcount = 0
#11 0x00000000004203d2 in get_key_buffer (win=0x1520d20) at ../../src/winio.c:300
No locals.
#12 get_input (win=win@entry=0x1520d20, input_len=input_len@entry=1) at ../../src/winio.c:262
        input = <optimized out>
#13 0x00000000004224fd in parse_kbinput (win=win@entry=0x1520d20) at ../../src/winio.c:345
        escapes = 0
        byte_digits = 0
        kbinput = <optimized out>
        retval = -1
#14 0x0000000000422ab8 in get_kbinput (win=0x1520d20) at ../../src/winio.c:316
        kbinput = <optimized out>
...

[Benno Schulenberg (bennoschulenberg)]

Thanks. Problem is the same as with bug #1641592: a long path that makes the prompt exceed 128 characters. So the patch attached to bug #1641592 should fix this crash too.