[perl #24898] Segfault with complicated regex inside map. 5.8.1 and beyond.

# New Ticket Created by  abigail@abigail.nl 
# Please include the string:  [perl #24898]
# in the subject line of all future correspondence about this issue. 
# <URL: http://rt.perl.org/rt3/Ticket/Display.html?id=24898 >



This is a bug report for perl from abigail@abigail.nl,
generated with the help of perlbug 1.34 running under perl v5.8.2.


-----------------------------------------------------------------
[Please enter your report here]

I'm getting a segmentation fault when using a complicated regex inside
a map. Consider the following program:

    $ cat bug

    #!/usr/bin/perl

    use strict;
    use warnings;

    my $MAX = shift || 100;

    my $re = qr /^(1+)(??{"(?:$1){" . (length ($1) - 1) . "}" })$/;

    map {printf "%3d is a square\n" => $_ if (1 x $_) =~ /$re/} 1 .. $MAX;

    __END__


Running this gives:

    $ /opt/perl/5.8.2/bin/perl bug 100
      1 is a square
      4 is a square
      9 is a square
     16 is a square
     25 is a square
     36 is a square
     49 is a square
    Out of memory!
    Segmentation fault

It doesn't happen with lower values:

    $  /opt/perl/5.8.2/bin/perl bug 65 
      1 is a square
      4 is a square
      9 is a square
     16 is a square
     25 is a square
     36 is a square
     49 is a square
     64 is a square


Remarkably, it doesn't happen with larger values either!

    $ /opt/perl/5.8.2/bin/perl bug 200
      1 is a square
      4 is a square
      9 is a square
     16 is a square
     25 is a square
     36 is a square
     49 is a square
     64 is a square
     81 is a square
    100 is a square
    121 is a square
    144 is a square
    169 is a square
    196 is a square


It also doesn't happen if you write:

    do  {printf "%3d is a square\n" => $_ if (1 x $_) =~ /$re/} for 1 .. $MAX;

or

    for (1 .. $MAX)
        {printf "%3d is a square\n" => $_ if (1 x $_) =~ /$re/}


Regardless of the value of $MAX. This segmentation fault happens with
5.8.1, 5.8.2, 5.8.3-RC1 and 5.9.0. Running it in 5.8.0 or 5.6.x seems to
be fine. People from perlmonks have replicated this behaviour with
Activeperl.


And here's the output of

    $ /opt/valgrind/bin/valgrind --error-limit=no --verbose --leak-check=yes /opt/perl/5.8.2/bin/perl bug 100


==26468== Memcheck, a.k.a. Valgrind, a memory error detector for x86-linux.
==26468== Copyright (C) 2002, and GNU GPL'd, by Julian Seward.
==26468== Using valgrind-1.9.4, a program instrumentation system for x86-linux.
==26468== Copyright (C) 2000-2002, and GNU GPL'd, by Julian Seward.
==26468== Startup, with flags:
==26468==    --suppressions=/opt/valgrind/lib/valgrind/default.supp
==26468==    --error-limit=no
==26468==    --verbose
==26468==    --leak-check=yes
==26468== Reading suppressions file: /opt/valgrind/lib/valgrind/default.supp
==26468== Estimated CPU clock rate is 1801 MHz
==26468== 
==26468== Reading syms from /opt/perl/5.8.2/bin/perl
==26468== Reading syms from /lib/ld-2.2.5.so
==26468==    object doesn't have any debug info
==26468== Reading syms from /opt/valgrind/lib/valgrind/vgskin_memcheck.so
==26468== Reading syms from /opt/valgrind/lib/valgrind/valgrind.so
==26468== Reading syms from /lib/libnsl-2.2.5.so
==26468==    object doesn't have any debug info
==26468== Reading syms from /lib/libdl-2.2.5.so
==26468==    object doesn't have any debug info
==26468== Reading syms from /lib/libm-2.2.5.so
==26468==    object doesn't have any debug info
==26468== Reading syms from /lib/libcrypt-2.2.5.so
==26468==    object doesn't have any debug info
==26468== Reading syms from /lib/libutil-2.2.5.so
==26468==    object doesn't have any debug info
==26468== Reading syms from /lib/libc-2.2.5.so
==26468==    object doesn't have any debug info
==26468== Reading syms from /lib/libgcc_s.so.1
==26468==    object doesn't have any debug info
==26468== Invalid write of size 4
==26468==    at 0x80C9D60: Perl_pp_gvsv (pp_hot.c:52)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80EB8FF: Perl_pp_repeat (pp.c:1388)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid write of size 4
==26468==    at 0x80CA6ED: Perl_pp_padsv (pp_hot.c:201)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80FED60: Perl_pp_regcomp (pp_ctl.c:74)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid write of size 4
==26468==    at 0x80C9D60: Perl_pp_gvsv (pp_hot.c:52)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x8130E90: S_regmatch (regexec.c:2846)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80CA387: Perl_pp_concat (pp_hot.c:138)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x8130E90: S_regmatch (regexec.c:2846)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid write of size 4
==26468==    at 0x80C9C64: Perl_pp_const (pp_hot.c:32)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x8130E90: S_regmatch (regexec.c:2846)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80F49A7: Perl_pp_length (pp.c:2918)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x8130E90: S_regmatch (regexec.c:2846)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid write of size 4
==26468==    at 0x80F4A5A: Perl_pp_length (pp.c:2923)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x8130E90: S_regmatch (regexec.c:2846)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80EBF82: Perl_pp_subtract (pp.c:1476)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x8130E90: S_regmatch (regexec.c:2846)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80EBFC0: Perl_pp_subtract (pp.c:1480)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x8130E90: S_regmatch (regexec.c:2846)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    Address 0x41155C5C is 4 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80EC01B: Perl_pp_subtract (pp.c:1481)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x8130E90: S_regmatch (regexec.c:2846)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    Address 0x41155C5C is 4 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80EC06A: Perl_pp_subtract (pp.c:1495)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x8130E90: S_regmatch (regexec.c:2846)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80EC0D5: Perl_pp_subtract (pp.c:1496)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x8130E90: S_regmatch (regexec.c:2846)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80EC0ED: Perl_pp_subtract (pp.c:1497)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x8130E90: S_regmatch (regexec.c:2846)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80EC132: Perl_pp_subtract (pp.c:1500)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x8130E90: S_regmatch (regexec.c:2846)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80EC184: Perl_pp_subtract (pp.c:1515)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x8130E90: S_regmatch (regexec.c:2846)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    Address 0x41155C5C is 4 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80EC1BF: Perl_pp_subtract (pp.c:1520)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x8130E90: S_regmatch (regexec.c:2846)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    Address 0x41155C5C is 4 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid write of size 4
==26468==    at 0x80EC371: Perl_pp_subtract (pp.c:1562)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x8130E90: S_regmatch (regexec.c:2846)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid write of size 4
==26468==    at 0x80C9C64: Perl_pp_const (pp_hot.c:32)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80EBAEF: Perl_pp_repeat (pp.c:1436)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid write of size 4
==26468==    at 0x80EBE04: Perl_pp_repeat (pp.c:1467)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80CDA59: Perl_pp_match (pp_hot.c:1229)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80CA395: Perl_pp_concat (pp_hot.c:138)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x8130E90: S_regmatch (regexec.c:2846)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid write of size 4
==26468==    at 0x80CA683: Perl_pp_concat (pp_hot.c:193)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x8130E90: S_regmatch (regexec.c:2846)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80CA253: Perl_pp_concat (pp_hot.c:136)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x8130E90: S_regmatch (regexec.c:2846)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x8130EAF: S_regmatch (regexec.c:2851)
==26468==    by 0x81344A8: S_regmatch (regexec.c:3784)
==26468==    by 0x812EA91: S_regtry (regexec.c:2185)
==26468==    by 0x812D528: Perl_regexec_flags (regexec.c:1739)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid write of size 4
==26468==    at 0x80CE5ED: Perl_pp_match (pp_hot.c:1458)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80C9EB1: Perl_pp_and (pp_hot.c:91)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80C9EBD: Perl_pp_and (pp_hot.c:91)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80C9ECE: Perl_pp_and (pp_hot.c:91)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80CFE8B: Perl_pp_leave (pp_hot.c:1815)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80CFE9F: Perl_pp_leave (pp_hot.c:1816)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid write of size 4
==26468==    at 0x80CFEAE: Perl_pp_leave (pp_hot.c:1816)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468==    Address 0x41155C58 is 0 bytes after a block of size 512 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6ABF: Perl_av_extend (av.c:151)
==26468==    by 0x80FB30F: Perl_new_stackinfo (scope.c:76)
==26468== 
==26468== Invalid write of size 4
==26468==    at 0x80CE350: Perl_pp_match (pp_hot.c:1402)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468==    Address 0x41155C78 is 16 bytes before a block of size 8064 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80FB380: Perl_new_stackinfo (scope.c:84)
==26468==    by 0x8065D50: Perl_init_stacks (perl.c:3674)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x811F6F9: Perl_do_sprintf (doop.c:699)
==26468==    by 0x81111AB: Perl_pp_prtf (pp_sys.c:1485)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    Address 0x41155C78 is 16 bytes before a block of size 8064 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80FB380: Perl_new_stackinfo (scope.c:84)
==26468==    by 0x8065D50: Perl_init_stacks (perl.c:3674)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x811F70A: Perl_do_sprintf (doop.c:699)
==26468==    by 0x81111AB: Perl_pp_prtf (pp_sys.c:1485)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    Address 0x41155C78 is 16 bytes before a block of size 8064 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80FB380: Perl_new_stackinfo (scope.c:84)
==26468==    by 0x8065D50: Perl_init_stacks (perl.c:3674)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x811F717: Perl_do_sprintf (doop.c:699)
==26468==    by 0x81111AB: Perl_pp_prtf (pp_sys.c:1485)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    Address 0x41155C78 is 16 bytes before a block of size 8064 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80FB380: Perl_new_stackinfo (scope.c:84)
==26468==    by 0x8065D50: Perl_init_stacks (perl.c:3674)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x811F75C: Perl_do_sprintf (doop.c:703)
==26468==    by 0x81111AB: Perl_pp_prtf (pp_sys.c:1485)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    Address 0x41155C78 is 16 bytes before a block of size 8064 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80FB380: Perl_new_stackinfo (scope.c:84)
==26468==    by 0x8065D50: Perl_init_stacks (perl.c:3674)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80E4411: Perl_sv_vcatpvfn (sv.c:8305)
==26468==    by 0x80E4197: Perl_sv_vsetpvfn (sv.c:8223)
==26468==    by 0x811F7AD: Perl_do_sprintf (doop.c:705)
==26468==    by 0x81111AB: Perl_pp_prtf (pp_sys.c:1485)
==26468==    Address 0x41155C7C is 12 bytes before a block of size 8064 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80FB380: Perl_new_stackinfo (scope.c:84)
==26468==    by 0x8065D50: Perl_init_stacks (perl.c:3674)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80E4F28: Perl_sv_vcatpvfn (sv.c:8580)
==26468==    by 0x80E4197: Perl_sv_vsetpvfn (sv.c:8223)
==26468==    by 0x811F7AD: Perl_do_sprintf (doop.c:705)
==26468==    by 0x81111AB: Perl_pp_prtf (pp_sys.c:1485)
==26468==    Address 0x41155C7C is 12 bytes before a block of size 8064 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80FB380: Perl_new_stackinfo (scope.c:84)
==26468==    by 0x8065D50: Perl_init_stacks (perl.c:3674)
==26468== 
==26468== Invalid write of size 4
==26468==    at 0x8111212: Perl_pp_prtf (pp_sys.c:1495)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468==    Address 0x41155C78 is 16 bytes before a block of size 8064 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80FB380: Perl_new_stackinfo (scope.c:84)
==26468==    by 0x8065D50: Perl_init_stacks (perl.c:3674)
==26468== Warning: set address range perms: large range 134217712, a 0, v 1
==26468== 
==26468== Conditional jump or move depends on uninitialised value(s)
==26468==    at 0x8101795: Perl_pp_mapwhile (pp_ctl.c:880)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468== 
==26468== Conditional jump or move depends on uninitialised value(s)
==26468==    at 0x8101987: Perl_pp_mapwhile (pp_ctl.c:923)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468==    by 0x806236A: perl_run (perl.c:1779)
==26468== 
==26468== Conditional jump or move depends on uninitialised value(s)
==26468==    at 0x80FB5D7: Perl_pop_scope (scope.c:137)
==26468==    by 0x80CFEFD: Perl_pp_leave (pp_hot.c:1823)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468==    by 0x80627FA: S_run_body (perl.c:1860)
==26468== 
==26468== Conditional jump or move depends on uninitialised value(s)
==26468==    at 0x80FD1BB: Perl_leave_scope (scope.c:688)
==26468==    by 0x80FB5E3: Perl_pop_scope (scope.c:137)
==26468==    by 0x80CFEFD: Perl_pp_leave (pp_hot.c:1823)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468== 
==26468== Conditional jump or move depends on uninitialised value(s)
==26468==    at 0x80FD1D8: Perl_leave_scope (scope.c:690)
==26468==    by 0x80FB5E3: Perl_pop_scope (scope.c:137)
==26468==    by 0x80CFEFD: Perl_pp_leave (pp_hot.c:1823)
==26468==    by 0x80B3974: Perl_runops_debug (dump.c:1438)
==26468== 
==26468== Conditional jump or move depends on uninitialised value(s)
==26468==    at 0x80FB5D7: Perl_pop_scope (scope.c:137)
==26468==    by 0x80623B1: perl_run (perl.c:1784)
==26468==    by 0x805E706: main (perlmain.c:86)
==26468==    by 0x4028C14E: __libc_start_main (in /lib/libc-2.2.5.so)
==26468== 
==26468== Invalid read of size 4
==26468==    at 0x80FB5C9: Perl_pop_scope (scope.c:136)
==26468==    by 0x80623B1: perl_run (perl.c:1784)
==26468==    by 0x805E706: main (perlmain.c:86)
==26468==    by 0x4028C14E: __libc_start_main (in /lib/libc-2.2.5.so)
==26468==    Address 0x41A82020 is 4 bytes before a block of size 134217712 alloc'd
==26468==    at 0x40164BA0: malloc (vg_clientfuncs.c:100)
==26468==    by 0x80B3E51: Perl_safesysmalloc (util.c:70)
==26468==    by 0x80C6955: Perl_av_extend (av.c:130)
==26468==    by 0x80FB2A2: Perl_stack_grow (scope.c:56)
==26468== 
==26468== Invalid read of size 1
==26468==    at 0x80B548B: S_closest_cop (util.c:919)
==26468==    by 0x80B5569: Perl_vmess (util.c:960)
==26468==    by 0x80B62BC: Perl_vcroak (util.c:1146)
==26468==    by 0x80B6936: Perl_croak (util.c:1246)
==26468==    Address 0x15 is not stack'd, malloc'd or free'd

[Please do not change anything below this line]
-----------------------------------------------------------------
---
Flags:
    category=core
    severity=medium
---
Site configuration information for perl v5.8.2:

Configured by abigail at Tue Nov 11 22:46:17 CET 2003.

Summary of my perl5 (revision 5.0 version 8 subversion 2) configuration:
  Platform:
    osname=linux, osvers=2.4.18-bf2.4, archname=i686-linux-64int-ld
    uname='linux alexandra 2.4.18-bf2.4 #1 son apr 14 09:53:28 cest 2002 i686 unknown '
    config_args='-des -Dusedevel -Dusemorebits -Uversiononly -Dmydomain=.abigail.nl -Dcf_email=abigail@abigail.nl -Dperladmin=camel@abigail.nl -Doptimize=-g -Dcc=gcc -Dprefix=/opt/perl/5.8.2'
    hint=recommended, useposix=true, d_sigaction=define
    usethreads=undef use5005threads=undef useithreads=undef usemultiplicity=undef
    useperlio=define d_sfio=undef uselargefiles=define usesocks=undef
    use64bitint=define use64bitall=undef uselongdouble=define
    usemymalloc=n, bincompat5005=undef
  Compiler:
    cc='gcc', ccflags ='-DDEBUGGING -fno-strict-aliasing -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64',
    optimize='-g',
    cppflags='-DDEBUGGING -fno-strict-aliasing -I/usr/local/include'
    ccversion='', gccversion='3.0.4', gccosandvers=''
    intsize=4, longsize=4, ptrsize=4, doublesize=8, byteorder=12345678
    d_longlong=define, longlongsize=8, d_longdbl=define, longdblsize=12
    ivtype='long long', ivsize=8, nvtype='long double', nvsize=12, Off_t='off_t', lseeksize=8
    alignbytes=4, prototype=define
  Linker and Libraries:
    ld='gcc', ldflags =' -L/usr/local/lib'
    libpth=/usr/local/lib /lib /usr/lib
    libs=-lnsl -ldl -lm -lcrypt -lutil -lc
    perllibs=-lnsl -ldl -lm -lcrypt -lutil -lc
    libc=/lib/libc-2.2.5.so, so=so, useshrplib=false, libperl=libperl.a
    gnulibc_version='2.2.5'
  Dynamic Linking:
    dlsrc=dl_dlopen.xs, dlext=so, d_dlsymun=undef, ccdlflags='-rdynamic'
    cccdlflags='-fpic', lddlflags='-shared -L/usr/local/lib'

Locally applied patches:
    

---
@INC for perl v5.8.2:
    /home/abigail/Perl
    /opt/perl/5.8.2/lib/5.8.2/i686-linux-64int-ld
    /opt/perl/5.8.2/lib/5.8.2
    /opt/perl/5.8.2/lib/site_perl/5.8.2/i686-linux-64int-ld
    /opt/perl/5.8.2/lib/site_perl/5.8.2
    /opt/perl/5.8.2/lib/site_perl
    .

---
Environment for perl v5.8.2:
    HOME=/home/abigail
    LANG=C
    LANGUAGE (unset)
    LD_LIBRARY_PATH=/home/abigail/Lib:/usr/local/lib:/usr/lib:/lib:/usr/X11R6/lib
    LOGDIR (unset)
    PATH=/home/abigail/Bin:/opt/perl/bin:/usr/local/bin:/usr/local/X11/bin:/usr/bin:/bin:/usr/local/sbin:/usr/sbin:/sbin:/usr/X11R6/bin:/usr/games:/usr/share/texmf/bin:/opt/Acrobat/bin:/opt/java/blackdown/j2sdk1.3.1/bin:/usr/local/games/bin
    PERL5LIB=/home/abigail/Perl
    PERLDIR=/opt/perl
    PERL_BADLANG (unset)
    SHELL=/bin/bash

• [perl #24898] Segfault with complicated regex inside map. 5.8.1 and beyond. by perlbug-followup
• Re: [perl #24898] Segfault with complicated regex inside map. 5.8.1 and beyond. by Abigail
• Re: [perl #24898] Segfault with complicated regex inside map. 5.8.1 and beyond. by demerphq
• Re: [perl #24898] Segfault with complicated regex inside map. 5.8.1 and beyond. by Abigail
• Re: [perl #24898] Segfault with complicated regex inside map. 5.8.1 and beyond. by Gisle Aas
• Re: [perl #24898] Segfault with complicated regex inside map. 5.8.1 and beyond. by Gisle Aas