bash crashes when attempting to run a "X!" where X is a single letter

[Craig Miskell]

Attempting to run "q!" (yes, I was wrong-window typing vim commands into bash) causes:
q!: command not found

malloc: /usr/homes/chet/src/bash/src/parse.y:2314: assertion botched
realloc: start and end chunk sizes differ
Aborting...Connection to machinename closed.

Occurs with any single letter followed by !, or a lone !. Does not occur with ! followed by one or more characters.

It is not the command-not-found package (removing that was my first diagnosis attempt). I don't really know what else to try.

It happens on the two Trusty Tahr servers available to me, but not Saucy or earlier.

[Brian Murray (brian-murray)]

I received a core dump when trying to recreate this bug. The crash should result in a .crash file in /var/crash/ and then an apport dialog offering to file the bug. It'd be great if you could submit the automatic crash report for this and then we can mark this bug as a duplicate of that one. Thanks in advance.

[Craig Miskell (3-crjig-7)]

The affected boxes are headless servers, on networks without outbound HTTP(S) access. Is the attached upload of the crash report sufficient?

[Brian Murray (brian-murray)]

It isn't sufficient as the retracers need a specifically formatted bug to retrace the crash. I've created one in bug 1298522.

[MeneM (mark-maas-martin)]

This sequence of commands consistently ends in that crash:

root@tribble:~# !
root@tribble:~# lshw

malloc: /usr/homes/chet/src/bash/src/parse.y:2314: assertion botched
realloc: start and end chunk sizes differ
last command: !
Aborting...mark@tribble:~$

My gnome-terminal even crashes!