Vim crash when trying to expand a path

[Sylvain Defresne]

Launching vim in a terminal (I don't have .vimrc file), and typing ":e ~s<Tab>" (where <Tab> is the tabulation key) crash vim in free. Stacktrace :

(gdb) bt
#0 0x00007fef38fcc095 in raise () from /lib/libc.so.6
#1 0x00007fef38fcdaf0 in abort () from /lib/libc.so.6
#2 0x00007fef39006a7b in ?? () from /lib/libc.so.6
#3 0x00007fef3900e08a in ?? () from /lib/libc.so.6
#4 0x00007fef39011c1c in free () from /lib/libc.so.6
#5 0x000000000048e481 in ExpandOne ()
#6 0x000000000049036f in ?? ()
#7 0x000000000049221f in getcmdline ()
#8 0x0000000000486f15 in do_cmdline ()
#9 0x00000000004efb8f in ?? ()
#10 0x00000000004f253c in normal_cmd ()
#11 0x00000000004b7961 in main_loop ()
#12 0x00000000004baa57 in main ()
(gdb)

[Marcus Asshauer (mcas)]

Thank you for reporting this bug. Please add your ubuntu version and the output of "apt-cache policy vim".

[Sylvain Defresne (sdefresne)]

I'm using Hardy.

$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=8.04
DISTRIB_CODENAME=hardy
DISTRIB_DESCRIPTION="Ubuntu hardy (development branch)"
$ apt-cache policy vim
vim:
  Installé : (aucun)
  Candidat : 1:7.1-138+1ubuntu3
 Table de version :
     1:7.1-138+1ubuntu3 0
        500 http://archive.ubuntu.com hardy/main Packages

[Marcus Asshauer (mcas)]

I can reproduce this only if i want to complete a path using ~USERNAME for the home folder of USERNAME. A normal path can be completed with tab.

[Stephane Wirtel (OpenERP) (stephane-openerp)]

I have the same bug since I have upgraded from gutsy to hardy. I use the rails plugin from http://rails.vim.tpope.net/ and it uses paths to help the user. I can see that there is a fix for this bug on https://bugs.launchpad.net/ubuntu/+source/vim/+bug/183935

# cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=8.04
DISTRIB_CODENAME=hardy
DISTRIB_DESCRIPTION="Ubuntu 8.04"
# apt-cache policy vim
vim:
  Installed: (none)
  Candidate: 1:7.1-138+1ubuntu3
  Version table:
     1:7.1-138+1ubuntu3 0
        500 http://be.archive.ubuntu.com hardy/main Packages

[Dominique Pellé (dominique-pelle)]

Yes, I can reproduce that too.

This bug has already been fixed in latest vim from CVS (in patch 7.1.147
which was released on Tue, Oct 30, 2007). But Ubuntu Hardy is using
an older version: vim-7.1.138 (which was released on Oct 9, 2007).

Here is the patch description which fixes it:

7.1.147 (after 7.1.127) freeing memory twice completing user name

Can we backport a more recent vim? It would fix several issues.

The latest vim from CVS is vim-7.1.293 (apr-9) which I've been using and
testing since it was released looks very stable. Updating would fix not
only this issue but other opened vim issues which I have investigated
such as at least:

- bug #215374 (this bug) (fixed in vim-7.1.147)
- bug #129106 vim crashes when gnome-terminal tab is detached (fixed in vim-7.1.166)
- bug #68960 fix hangs when editing a specific file (fixed in vim 7.1.227)
- bug #219546 vim crashes when pressing tab and using rails.vim (no longer happens in latest vim-7.1.293, not sure which patch fixes it, possibly also 7.1.147)

[Ralph Corderoy (ralph-inputplus)]

This is an annoying bug. Some of us have fingers that are trained to do `:r ~fo<TAB>' and can't stop ourselves. Could an importance be assigned please?