tcsh crashes with segv when listing directories

[Hadmut Danisch]

Since upgrading from 16.04 to 16.10 the tcsh crashes which a SEGV when opening directories, i.e. using the builtin ls command or file name completion (pressing tab).

ProblemType: Bug
DistroRelease: Ubuntu 16.10
Package: tcsh 6.18.01-5
ProcVersionSignature: Ubuntu 4.4.0-43.63-generic 4.4.21
Uname: Linux 4.4.0-43-generic x86_64
NonfreeKernelModules: zunicode zcommon znvpair zavl
ApportVersion: 2.20.3-0ubuntu8
Architecture: amd64
CurrentDesktop: XFCE
Date: Thu Oct 20 10:06:50 2016
Dependencies:
 gcc-6-base 6.2.0-5ubuntu12
 libc6 2.24-3ubuntu1
 libgcc1 1:6.2.0-5ubuntu12
 libtinfo5 6.0+20160625-1ubuntu1
InstallationDate: Installed on 2016-04-22 (180 days ago)
InstallationMedia: Lubuntu 16.04 LTS "Xenial Xerus" - Release amd64 (20160420)
SourcePackage: tcsh
UpgradeStatus: Upgraded to yakkety on 2016-10-17 (2 days ago)
modified.conffile..etc.csh.cshrc: [modified]
mtime.conffile..etc.csh.cshrc: 2016-04-25T12:00:09.929453

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Anatoly Borodin (anatoly.borodin)]

I can confirm the same problem: linux kernel 4.8.0-26.28 (Yakkety), tcsh 6.18.01-5. Tcsh crashes during auto completion, gdb says:

#0 0x00007fae17e031d8 in rewinddir () from /lib/x86_64-linux-gnu/libc.so.6
#1 0x0000000000427985 in ?? ()
#2 0x0000000000429431 in ?? ()
#3 0x000000000042a8bb in ?? ()
#4 0x000000000042b8bc in ?? ()
#5 0x000000000043a2f9 in ?? ()
#6 0x0000000000419eda in ?? ()
#7 0x000000000041c8cf in ?? ()
#8 0x000000000040589d in ?? ()
#9 0x000000000040495a in ?? ()
#10 0x00007fae17d5b3f1 in __libc_start_main () from /lib/x86_64-linux-gnu/libc.so.6
#11 0x0000000000404ee9 in ?? ()

[Anatoly Borodin (anatoly.borodin)]

PS bash, ksh and mksh don't crash.