I've been able to manually reproduce the crash for a specimen package. Note that I had to copy-type this backtrace because I was unable to capture it using stdin/stderr redirection to a file.
$ chroot /target
# /usr/bin/dpkg-reconfigure docbook-xml *** glibc detected *** /usr/bin/perl: double free or corruption (out) 0x107e3940 ======= Backtrace: ======= /lib/libc.so.6(+0x82fe4)[0xfc2dfe4] /lib/libc.so.6(cfree+0x8c)[0xfc3367c] /usr/lib/libperl.so.5.10(Perl_safesysfree+0x2c)[0xfef9f4c] /usr/lib/libperl.so.5.10(Perl_sv_eq+0xd0)[0xff32cd0] /usr/lib/libperl.so.5.10(Perl_pp_seq+0xd4)[0xff44364] /usr/lib/libperl.so.5.10(Perl_runops_standard+0x40)[0xff12880] /usr/lib/libperl.so.5.10(perl_run+0x360)[0xfeb4b70] /usr/bin/perl(main+0x110)[0x10000af0] /lib/libc.so.6(+0x1f73c)[0xfbca73c] /lib/libc.so.6(+0x1f900)[0xfbca900] ======= Memory map: ======= Aborted Segmentation fault *** glibc detected *** /usr/bin/perl: double free or corruption (out) 0x101a5878 ======= Backtrace: ======= /lib/libc.so.6(+0x82fe4)[0xfc2dfe4] /lib/libc.so.6(cfree+0x8c)[0xfc3367c] /usr/lib/libperl.so.5.10(Perl_safesysfree+0x2c)[0xfef9f4c] /usr/lib/libperl.so.5.10(Perl_sv_eq+0xd0)[0xff32cd0] /usr/lib/libperl.so.5.10(Perl_pp_seq+0xd4)[0xff44364] /usr/lib/libperl.so.5.10(Perl_runops_standard+0x40)[0xff12880] /usr/lib/libperl.so.5.10(perl_run+0x360)[0xfeb4b70] /usr/bin/perl(main+0x110)[0x10000af0] /lib/libc.so.6(+0x1f73c)[0xfbca73c] /lib/libc.so.6(+0x1f900)[0xfbca900] ======= Memory map: ======= Aborted #
I've been able to manually reproduce the crash for a specimen package. Note that I had to copy-type this backtrace because I was unable to capture it using stdin/stderr redirection to a file.
$ chroot /target
# /usr/bin/ dpkg-reconfigur e docbook-xml so.6(+0x82fe4) [0xfc2dfe4] so.6(cfree+ 0x8c)[0xfc3367c ] libperl. so.5.10( Perl_safesysfre e+0x2c) [0xfef9f4c] libperl. so.5.10( Perl_sv_ eq+0xd0) [0xff32cd0] libperl. so.5.10( Perl_pp_ seq+0xd4) [0xff44364] libperl. so.5.10( Perl_runops_ standard+ 0x40)[0xff12880 ] libperl. so.5.10( perl_run+ 0x360)[ 0xfeb4b70] perl(main+ 0x110)[ 0x10000af0] so.6(+0x1f73c) [0xfbca73c] so.6(+0x1f900) [0xfbca900] so.6(+0x82fe4) [0xfc2dfe4] so.6(cfree+ 0x8c)[0xfc3367c ] libperl. so.5.10( Perl_safesysfre e+0x2c) [0xfef9f4c] libperl. so.5.10( Perl_sv_ eq+0xd0) [0xff32cd0] libperl. so.5.10( Perl_pp_ seq+0xd4) [0xff44364] libperl. so.5.10( Perl_runops_ standard+ 0x40)[0xff12880 ] libperl. so.5.10( perl_run+ 0x360)[ 0xfeb4b70] perl(main+ 0x110)[ 0x10000af0] so.6(+0x1f73c) [0xfbca73c] so.6(+0x1f900) [0xfbca900]
*** glibc detected *** /usr/bin/perl: double free or corruption (out) 0x107e3940
======= Backtrace: =======
/lib/libc.
/lib/libc.
/usr/lib/
/usr/lib/
/usr/lib/
/usr/lib/
/usr/lib/
/usr/bin/
/lib/libc.
/lib/libc.
======= Memory map: =======
Aborted
Segmentation fault
*** glibc detected *** /usr/bin/perl: double free or corruption (out) 0x101a5878
======= Backtrace: =======
/lib/libc.
/lib/libc.
/usr/lib/
/usr/lib/
/usr/lib/
/usr/lib/
/usr/lib/
/usr/bin/
/lib/libc.
/lib/libc.
======= Memory map: =======
Aborted
#