Crash with Neovim 24beb2996af9c4e675a7b3655c967d174a694891
*** buffer overflow detected ***: vi terminated
======= Backtrace: =========
/usr/lib/libc.so.6(+0x732ae)[0x7f5b7ec5f2ae]
/usr/lib/libc.so.6(__fortify_fail+0x37)[0x7f5b7ece4907]
/usr/lib/libc.so.6(+0xf6ac0)[0x7f5b7ece2ac0]
/usr/lib/libc.so.6(+0xf8877)[0x7f5b7ece4877]
/usr/lib/libtickit.so.0(tickit_term_input_wait+0x59)[0x7f5b7f6c0409]
/usr/lib/libtickit.so.0(tickit_term_await_started+0xc7)[0x7f5b7f6c05b7]
vi(tui_start+0x238)[0x57d11a]
vi(ui_builtin_start+0x9)[0x49ecc5]
vi(main+0x44d)[0x56f52d]
/usr/lib/libc.so.6(__libc_start_main+0xf0)[0x7f5b7ec0c040]
vi[0x4252c9]
======= Memory map: ========
00400000-005ea000 r-xp 00000000 00:11 15880823 /usr/bin/nvim
007ea000-007eb000 r--p 001ea000 00:11 15880823 /usr/bin/nvim
007eb000-007fd000 rw-p 001eb000 00:11 15880823 /usr/bin/nvim
007fd000-0080a000 rw-p 00000000 00:00 0
02613000-02959000 rw-p 00000000 00:00 0 [heap]
7f5b7e150000-7f5b7e166000 r-xp 00000000 00:11 15604597 /usr/lib/libgcc_s.so.1
7f5b7e166000-7f5b7e365000 ---p 00016000 00:11 15604597 /usr/lib/libgcc_s.so.1
7f5b7e365000-7f5b7e366000 rw-p 00015000 00:11 15604597 /usr/lib/libgcc_s.so.1
7f5b7e3b7000-7f5b7e3c5000 r-xp 00000000 00:11 15680762 /usr/lib/libunibilium.so.0.2.0
7f5b7e3c5000-7f5b7e5c5000 ---p 0000e000 00:11 15680762 /usr/lib/libunibilium.so.0.2.0
7f5b7e5c5000-7f5b7e5c8000 rw-p 0000e000 00:11 15680762 /usr/lib/libunibilium.so.0.2.0
7f5b7e5c8000-7f5b7e5cb000 r-xp 00000000 00:11 15602683 /usr/lib/libdl-2.20.so
7f5b7e5cb000-7f5b7e7ca000 ---p 00003000 00:11 15602683 /usr/lib/libdl-2.20.so
7f5b7e7ca000-7f5b7e7cb000 r--p 00002000 00:11 15602683 /usr/lib/libdl-2.20.so
7f5b7e7cb000-7f5b7e7cc000 rw-p 00003000 00:11 15602683 /usr/lib/libdl-2.20.so
7f5b7e7cc000-7f5b7e7e1000 r-xp 00000000 00:11 15602679 /usr/lib/libnsl-2.20.so
7f5b7e7e1000-7f5b7e9e0000 ---p 00015000 00:11 15602679 /usr/lib/libnsl-2.20.so
7f5b7e9e0000-7f5b7e9e1000 r--p 00014000 00:11 15602679 /usr/lib/libnsl-2.20.so
7f5b7e9e1000-7f5b7e9e2000 rw-p 00015000 00:11 15602679 /usr/lib/libnsl-2.20.so
7f5b7e9e2000-7f5b7e9e4000 rw-p 00000000 00:00 0
7f5b7e9e4000-7f5b7e9eb000 r-xp 00000000 00:11 15602720 /usr/lib/librt-2.20.so
7f5b7e9eb000-7f5b7ebea000 ---p 00007000 00:11 15602720 /usr/lib/librt-2.20.so
7f5b7ebea000-7f5b7ebeb000 r--p 00006000 00:11 15602720 /usr/lib/librt-2.20.so
7f5b7ebeb000-7f5b7ebec000 rw-p 00007000 00:11 15602720 /usr/lib/librt-2.20.so
7f5b7ebec000-7f5b7ed85000 r-xp 00000000 00:11 15602710 /usr/lib/libc-2.20.so
7f5b7ed85000-7f5b7ef85000 ---p 00199000 00:11 15602710 /usr/lib/libc-2.20.so
7f5b7ef85000-7f5b7ef89000 r--p 00199000 00:11 15602710 /usr/lib/libc-2.20.so
7f5b7ef89000-7f5b7ef8b000 rw-p 0019d000 00:11 15602710 /usr/lib/libc-2.20.so
7f5b7ef8b000-7f5b7ef8f000 rw-p 00000000 00:00 0
7f5b7ef8f000-7f5b7efa6000 r-xp 00000000 00:11 15602690 /usr/lib/libpthread-2.20.so
7f5b7efa6000-7f5b7f1a5000 ---p 00017000 00:11 15602690 /usr/lib/libpthread-2.20.so
7f5b7f1a5000-7f5b7f1a6000 r--p 00016000 00:11 15602690 /usr/lib/libpthread-2.20.so
7f5b7f1a6000-7f5b7f1a7000 rw-p 00017000 00:11 15602690 /usr/lib/libpthread-2.20.so
7f5b7f1a7000-7f5b7f1ab000 rw-p 00000000 00:00 0
7f5b7f1ab000-7f5b7f2ae000 r-xp 00000000 00:11 15602709 /usr/lib/libm-2.20.so
7f5b7f2ae000-7f5b7f4ae000 ---p 00103000 00:11 15602709 /usr/lib/libm-2.20.so
7f5b7f4ae000-7f5b7f4af000 r--p 00103000 00:11 15602709 /usr/lib/libm-2.20.so
7f5b7f4af000-7f5b7f4b0000 rw-p 00104000 00:11 15602709 /usr/lib/libm-2.20.so
7f5b7f4b0000-7f5b7f4b8000 r-xp 00000000 00:11 15752234 /usr/lib/libtermkey.so.1.11.0
7f5b7f4b8000-7f5b7f6b8000 ---p 00008000 00:11 15752234 /usr/lib/libtermkey.so.1.11.0
7f5b7f6b8000-7f5b7f6b9000 r--p 00008000 00:11 15752234 /usr/lib/libtermkey.so.1.11.0
7f5b7f6b9000-7f5b7f6ba000 rw-p 00009000 00:11 15752234 /usr/lib/libtermkey.so.1.11.0
7f5b7f6ba000-7f5b7f6cc000 r-xp 00000000 00:11 15752322 /usr/lib/libtickit.so.0.0.0
7f5b7f6cc000-7f5b7f8cb000 ---p 00012000 00:11 15752322 /usr/lib/libtickit.so.0.0.0
7f5b7f8cb000-7f5b7f8cc000 r--p 00011000 00:11 15752322 /usr/lib/libtickit.so.0.0.0
7f5b7f8cc000-7f5b7f8cd000 rw-p 00012000 00:11 15752322 /usr/lib/libtickit.so.0.0.0
7f5b7f8cd000-7f5b7f8d2000 r-xp 00000000 00:11 15680635 /usr/lib/libmsgpack.so.4.0.0
7f5b7f8d2000-7f5b7fad1000 ---p 00005000 00:11 15680635 /usr/lib/libmsgpack.so.4.0.0
7f5b7fad1000-7f5b7fad2000 r--p 00004000 00:11 15680635 /usr/lib/libmsgpack.so.4.0.0
7f5b7fad2000-7f5b7fad3000 rw-p 00005000 00:11 15680635 /usr/lib/libmsgpack.so.4.0.0
7f5b7fad3000-7f5b7faf5000 r-xp 00000000 00:11 15680626 /usr/lib/libuv.so.1.0.0
7f5b7faf5000-7f5b7fcf4000 ---p 00022000 00:11 15680626 /usr/lib/libuv.so.1.0.0
7f5b7fcf4000-7f5b7fcf5000 r--p 00021000 00:11 15680626 /usr/lib/libuv.so.1.0.0
7f5b7fcf5000-7f5b7fcf6000 rw-p 00022000 00:11 15680626 /usr/lib/libuv.so.1.0.0
7f5b7fcf6000-7f5b7fd18000 r-xp 00000000 00:11 15602687 /usr/lib/ld-2.20.so
7f5b7fd32000-7f5b7febb000 r--p 00000000 00:11 15819672 /usr/lib/locale/locale-archive
7f5b7febb000-7f5b7fec2000 rw-p 00000000 00:00 0
7f5b7ff12000-7f5b7ff13000 rw-p 00000000 00:00 0
7f5b7ff13000-7f5b7ff15000 r--p 00000000 00:00 0 [vvar]
7f5b7ff15000-7f5b7ff17000 r-xp 00000000 00:00 0 [vdso]
7f5b7ff17000-7f5b7ff18000 r--p 00021000 00:11 15602687 /usr/lib/ld-2.20.so
7f5b7ff18000-7f5b7ff19000 rw-p 00022000 00:11 15602687 /usr/lib/ld-2.20.so
7f5b7ff19000-7f5b7ff1a000 rw-p 00000000 00:00 0
7ffff2dde000-7ffff2dff000 rw-p 00000000 00:00 0 [stack]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
[1] 31159 abort (core dumped) vi
Backtrace:
#0 0x00007f03e18f2a97 in raise () from /usr/lib/libc.so.6
#1 0x00007f03e18f3e6a in abort () from /usr/lib/libc.so.6
#2 0x00007f03e19322b3 in __libc_message () from /usr/lib/libc.so.6
#3 0x00007f03e19b7907 in __fortify_fail () from /usr/lib/libc.so.6
#4 0x00007f03e19b5ac0 in __chk_fail () from /usr/lib/libc.so.6
#5 0x00007f03e19b7877 in __fdelt_warn () from /usr/lib/libc.so.6
#6 0x00007f03e2393409 in tickit_term_input_wait () from /usr/lib/libtickit.so.0
#7 0x00007f03e23935b7 in tickit_term_await_started () from /usr/lib/libtickit.so.0
#8 0x000000000057d11a in tui_start ()
#9 0x000000000049ecc5 in ui_builtin_start ()
#10 0x000000000056f52d in main ()