bash crashed with SIGSEGV in _IO_vfprintf_internal()

[Dmitry Shachnev]

Paste of my session log ("fg &" was an accident mistake, I wanted just "fg"):

mandriver@mandriver-laptop:~/Desktop/testdir$ firefox html/index.html
^Z
[1]+ Stopped firefox html/index.html
mandriver@mandriver-laptop:~/Desktop/testdir$ python3 ~/retext-git/wpgen/wpgen.py usestyle SimpleGrey
mandriver@mandriver-laptop:~/Desktop/testdir$ fg &
[2] 29080
mandriver@mandriver-laptop:~/Desktop/testdir$ fg
firefox html/index.html
Stopped
[2] Segmentation fault (core dumped) fg
mandriver@mandriver-laptop:~/Рабочий стол/testdir$

ProblemType: Crash
DistroRelease: Ubuntu 12.04
Package: bash 4.2-1ubuntu1
ProcVersionSignature: Ubuntu 3.2.0-17.27-generic 3.2.6
Uname: Linux 3.2.0-17-generic i686
ApportVersion: 1.94-0ubuntu1
Architecture: i386
Date: Sun Mar 4 19:09:17 2012
ExecutablePath: /bin/bash
InstallationMedia: Ubuntu 10.04 "Lucid Lynx" - Beta i386 (20100318)
ProcCmdline: bash
SegvAnalysis:
 Segfault happened at: 0x889a14 <_IO_vfprintf_internal+12836>: repnz scas %es:(%edi),%al
 PC (0x00889a14) ok
 source "%es:(%edi)" (0xffff03fa) not located in a known VMA region (needed readable region)!
 destination "%al" ok
SegvReason: reading unknown VMA
Signal: 11
SourcePackage: bash
StacktraceTop:
 _IO_vfprintf_internal (s=0x9e6980, format=<optimized out>, ap=0xbfbfc478 "\b.\227\b") at vfprintf.c:1621
 ___vfprintf_chk (fp=0x9e6980, flag=1, format=0xb7454cb1 <Address 0xb7454cb1 out of bounds>, ap=0xbfbfc474 "\177\003\377\377\b.\227\b") at vfprintf_chk.c:35
 builtin_error ()
 fg_builtin ()
 ?? ()
Title: bash crashed with SIGSEGV in _IO_vfprintf_internal()
UpgradeStatus: Upgraded to precise on 2012-02-10 (23 days ago)
UserGroups: adm admin audio cdrom dialout dip fax floppy fuse lpadmin netdev nopasswdlogin plugdev sambashare tape video

[Apport retracing service (apport)]

StacktraceTop:
 _IO_vfprintf_internal (s=0x9e6980, format=<optimized out>, ap=0xbfbfc478 "\b.\227\b") at vfprintf.c:1621
 ___vfprintf_chk (fp=0x9e6980, flag=1, format=0xb7454cb1 <Address 0xb7454cb1 out of bounds>, ap=0xbfbfc474 "\177\003\377\377\b.\227\b") at vfprintf_chk.c:35
 vfprintf (__ap=0xbfbfc474 "\177\003\377\377\b.\227\b", __fmt=0xb7454cb1 <Address 0xb7454cb1 out of bounds>, __stream=<optimized out>) at /usr/include/i386-linux-gnu/bits/stdio2.h:128
 builtin_error (format=0xb7454cb1 <Address 0xb7454cb1 out of bounds>) at ../../bash/builtins/common.c:122
 fg_builtin (list=0x0) at ../../bash/builtins/../../bash/builtins/fg_bg.def:68

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.