[Bug 1572807] Re: /bin/nano:*** Error in `nano': double free or corruption (!prev): ADDR ***

[Brian Murray]

It's possible the stacktrace in the Error Tracker contains sensitive
information, that's why access to it is restricted and it's not
automatically added to the bug report here.

Here's the Stacktrace though:

#0  0x00007f38ce77e428 in __GI_raise (sig=sig at entry=6) at ../sysdeps/unix/sysv/linux/raise.c:54
        resultvar = 0
        pid = 6528
        selftid = 6528
#1  0x00007f38ce78002a in __GI_abort () at abort.c:89
        save_stage = 2
        act = {__sigaction_handler = {sa_handler = 0x2020202020383939, sa_sigaction = 0x2020202020383939}, sa_mask = {__val = {2314885530818453536, 2314885530818453536, 7091318039310988591, 3257288213055174703, 7955377262162766188, 3420042391722602357, 8029123697353646951, 7017503717531088228, 4049692876519860323, 3472328519700276835, 3559641648514610989, 8606977229197436472, 3472328296226648109, 3475143045726351408, 3703708260188037168, 3472387704235647800}}, sa_flags = 1714892080, sa_restorer = 0x4f}
        sigs = {__val = {32, 0 <repeats 15 times>}}
#2  0x00007f38ce7c07ea in __libc_message (do_abort=do_abort at entry=2, fmt=fmt at entry=0x7f38ce8d92e0 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175
        ap = <error reading variable ap (Attempt to dereference a generic pointer.)>
        fd = 4
        on_2 = <optimized out>
        list = <optimized out>
        nlist = <optimized out>
        cp = <optimized out>
        written = <optimized out>
#3  0x00007f38ce7c8e0a in malloc_printerr (ar_ptr=<optimized out>, ptr=<optimized out>, str=0x7f38ce8d9410 "double free or corruption (!prev)", action=3) at malloc.c:5004
        buf = "0000000000692690"
        cp = <optimized out>
        ar_ptr = <optimized out>
        str = 0x7f38ce8d9410 "double free or corruption (!prev)"
        action = 3
#4  _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:3865
        size = <optimized out>
        fb = <optimized out>
        nextchunk = <optimized out>
        nextsize = <optimized out>
        nextinuse = <optimized out>
        prevsize = <optimized out>
        bck = <optimized out>
        fwd = <optimized out>
        errstr = <optimized out>
        locked = <optimized out>
#5  0x00007f38ce7cc98c in __GI___libc_free (mem=mem at entry=0x692690) at malloc.c:2966
        ar_ptr = <optimized out>
        p = 0x692680
        hook = <optimized out>
#6  0x0000000000408b56 in do_lockfile (filename=filename at entry=0x7ffee0fb074d "**removed**/COMMIT_EDITMSG") at ../../src/files.c:374
        readtot = <optimized out>
        promptstr = 0x692690 "File **removed**/COMMIT_EDITMSG is being edited (by **removed** with nano 2.5.3, PID 12547); continue?"
        readamt = <optimized out>
        lockbuf = <optimized out>
        ans = 1
        namecopy1 = <optimized out>
        namecopy2 = <optimized out>
        locknamesize = <optimized out>
        lockfilename = 0x6999c0 "**removed**/.COMMIT_EDITMSG.swp"
        lockprog = "nano 2.5.3"
        lockuser = "khazizovroman\000\000\000"
        fileinfo = {st_dev = 2050, st_ino = 3733172, st_nlink = 1, st_mode = 33204, st_uid = 1000, st_gid = 1000, __pad0 = 0, st_rdev = 0, st_size = 1024, st_blksize = 4096, st_blocks = 8, st_atim = {tv_sec = 1472024225, tv_nsec = 596574479}, st_mtim = {tv_sec = 1468485463, tv_nsec = 186453909}, st_ctim = {tv_sec = 1468485463, tv_nsec = 186453909}, __glibc_reserved = {0, 0, 0}}
        lockpid = 12547
        retval = -1
#7  0x000000000040ccf1 in open_buffer (filename=0x7ffee0fb074d "**removed**/COMMIT_EDITMSG", undoable=undoable at entry=false) at ../../src/files.c:457
        lockstatus = <optimized out>
        quiet = false
        new_buffer = true
        f = 0x3b
        rc = <optimized out>
#8  0x000000000040431c in main (argc=2, argv=0x7ffee0fae2f8) at ../../src/nano.c:2599
        optchr = <optimized out>
        startline = 0
        startcol = 0
        fill_used = <optimized out>
        forced_wrapping = <optimized out>
        old_multibuffer = false
        long_options = {{name = 0x428236 "boldtext", has_arg = 0, flag = 0x0, val = 68}, {name = 0x42826d "multibuffer", has_arg = 0, flag = 0x0, val = 70}, {name = 0x4282c8 "ignorercfiles", has_arg = 0, flag = 0x0, val = 73}, {name = 0x4282d8 "rebindkeypad", has_arg = 0, flag = 0x0, val = 75}, {name = 0x4282e7 "nonewlines", has_arg = 0, flag = 0x0, val = 76}, {name = 0x42831e "morespace", has_arg = 0, flag = 0x0, val = 79}, {name = 0x42875d "quotestr", has_arg = 1, flag = 0x0, val = 81}, {name = 0x428371 "restricted", has_arg = 0, flag = 0x0, val = 82}, {name = 0x428766 "tabsize", has_arg = 1, flag = 0x0, val = 84}, {name = 0x4283cd "version", has_arg = 0, flag = 0x0, val = 86}, {name = 0x4298ca "syntax", has_arg = 1, flag = 0x0, val = 89}, {name = 0x4283fc "constantshow", has_arg = 0, flag = 0x0, val = 99}, {name = 0x42840e "rebinddelete", has_arg = 0, flag = 0x0, val = 100}, {name = 0x42843d "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x428474 "mouse", has_arg = 0, flag = 0x0, val = 109}, {name = 0x428487 "noread", has_arg = 0, flag = 0x0, val = 110}, {name = 0x42876e "operatingdir", has_arg = 1, flag = 0x0, val = 111}, {name = 0x4284c9 "preserve", has_arg = 0, flag = 0x0, val = 112}, {name = 0x4284d7 "quiet", has_arg = 0, flag = 0x0, val = 113}, {name = 0x42877b "fill", has_arg = 1, flag = 0x0, val = 114}, {name = 0x428526 "speller", has_arg = 1, flag = 0x0, val = 115}, {name = 0x428530 "tempfile", has_arg = 0, flag = 0x0, val = 116}, {name = 0x42855e "view", has_arg = 0, flag = 0x0, val = 118}, {name = 0x428583 "nowrap", has_arg = 0, flag = 0x0, val = 119}, {name = 0x4285ad "nohelp", has_arg = 0, flag = 0x0, val = 120}, {name = 0x4285cb "suspend", has_arg = 0, flag = 0x0, val = 122}, {name = 0x428206 "smarthome", has_arg = 0, flag = 0x0, val = 65}, {name = 0x428212 "backup", has_arg = 0, flag = 0x0, val = 66}, {name = 0x428780 "backupdir", has_arg = 1, flag = 0x0, val = 67}, {name = 0x42825e "tabstospaces", has_arg = 0, flag = 0x0, val = 69}, {name = 0x428296 "locking", has_arg = 0, flag = 0x0, val = 71}, {name = 0x4282a0 "historylog", has_arg = 0, flag = 0x0, val = 72}, {name = 0x4282f4 "noconvert", has_arg = 0, flag = 0x0, val = 78}, {name = 0x42878a "poslog", has_arg = 0, flag = 0x0, val = 80}, {name = 0x42832a "positionlog", has_arg = 0, flag = 0x0, val = 80}, {name = 0x42837e "smooth", has_arg = 0, flag = 0x0, val = 83}, {name = 0x4283c0 "quickblank", has_arg = 0, flag = 0x0, val = 85}, {name = 0x4283d7 "wordbounds", has_arg = 0, flag = 0x0, val = 87}, {name = 0x428447 "autoindent", has_arg = 0, flag = 0x0, val = 105}, {name = 0x42a482 "cut", has_arg = 0, flag = 0x0, val = 107}, {name = 0x42853e "unix", has_arg = 0, flag = 0x0, val = 117}, {name = 0x4285f2 "softwrap", has_arg = 0, flag = 0x0, val = 36}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}}
        keyvalue = <optimized out>

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to nano in Ubuntu.
https://bugs.launchpad.net/bugs/1572807

Title:
  /bin/nano:*** Error in `nano': double free or corruption (!prev): ADDR
  ***

Status in nano package in Ubuntu:
  Confirmed

Bug description:
  The Ubuntu Error Tracker has been receiving reports about a problem
  regarding nano.  This problem was most recently seen with version
  2.5.3-2, the problem page at
  https://errors.ubuntu.com/problem/7dd7f74a72fca06513544d8af66b623efa15b26c
  contains more details.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nano/+bug/1572807/+subscriptions