tmux set-buffer crash

bisect.log

git bisect start
# bad: [57c514d2f85f9d1c81601bae32131f1cd2948422] Remove <vis.h>; not used on Linux.
git bisect bad 57c514d2f85f9d1c81601bae32131f1cd2948422
# bad: [1b083aa0fd2d8ac000504488135bf58e35c3361e] Update CHANGES and configure.ac for 1.8 release.
git bisect bad 1b083aa0fd2d8ac000504488135bf58e35c3361e
# good: [2b5c3fc49f9f96dd84fb26f75be7d634ea4c282c] Update NOTES, CHANGES, configure.ac for 1.7 release
git bisect good 2b5c3fc49f9f96dd84fb26f75be7d634ea4c282c
# good: [357da035b9d052b4cba8db806c6237272ade6673] Merge send-prefix into send-keys.
git bisect good 357da035b9d052b4cba8db806c6237272ade6673
# skip: [599dd2a56009300df999c54c73aa9e83268809e8] Create a new context when copying instead of using the input context. The input context may not exist yet. Fixes crash when copying from config file errors.
git bisect skip 599dd2a56009300df999c54c73aa9e83268809e8
# skip: [43fb9835fabee828c46d54b656a90a77eb756384] Add -P and -F to new-session.
git bisect skip 43fb9835fabee828c46d54b656a90a77eb756384
# good: [a2f52d422418af489e8eeb386d989b848a09891b] Remove previous
git bisect good a2f52d422418af489e8eeb386d989b848a09891b
# skip: [114d822d27b2d4d20d707361629aaab6ba5a1a9f] Don't zoom windows with one pane, from Romain Francoise.
git bisect skip 114d822d27b2d4d20d707361629aaab6ba5a1a9f
# skip: [114d822d27b2d4d20d707361629aaab6ba5a1a9f] Don't zoom windows with one pane, from Romain Francoise.
git bisect skip 114d822d27b2d4d20d707361629aaab6ba5a1a9f
# bad: [9e879b4aabc925fc1fbf02e25c331317a3881d17] Merge branch 'master' of ssh://git.code.sf.net/p/tmux/tmux-code
git bisect bad 9e879b4aabc925fc1fbf02e25c331317a3881d17
# bad: [89d3f13945fb790b97f25824009f1424d0934009] Merge branch 'master' of ssh://git.code.sf.net/p/tmux/tmux-code
git bisect bad 89d3f13945fb790b97f25824009f1424d0934009
# bad: [d05debbe198699a84ddeaacfa4d5bf57e6afaac8] Unzoom on last-pane and fix a typo, from Romain Francoise.
git bisect bad d05debbe198699a84ddeaacfa4d5bf57e6afaac8
# good: [43d904dbf396f5ce90e29915b416fd26e32c6c3e] tty.path can be NULL, don't dereference it. From George Nachman.
git bisect good 43d904dbf396f5ce90e29915b416fd26e32c6c3e
# good: [2c9cddd8760300af8d9ee6f80662f89e43a8f2ce] Continue the parent cmdq after sourcing a file.
git bisect good 2c9cddd8760300af8d9ee6f80662f89e43a8f2ce
# bad: [f8c86a9515ae863fcbc38769544be983ce494a3c] Add some additional debug logging.
git bisect bad f8c86a9515ae863fcbc38769544be983ce494a3c
# first bad commit: [f8c86a9515ae863fcbc38769544be983ce494a3c] Add some additional debug logging.

crash_fix.patch

diff --git a/cmd-queue.c b/cmd-queue.c
index 17955b8..43883fa 100644
--- a/cmd-queue.c
+++ b/cmd-queue.c
@@ -214,9 +214,9 @@ cmdq_continue(struct cmd_q *cmdq)
 		next = TAILQ_NEXT(cmdq->item, qentry);
 
 		while (cmdq->cmd != NULL) {
-			cmd_print(cmdq->cmd, s, sizeof s);
-			log_debug("cmdq %p: %s (client %d)", cmdq, s,
-			    cmdq->client != NULL ? cmdq->client->ibuf.fd : -1);
+			//cmd_print(cmdq->cmd, s, sizeof s);
+			//log_debug("cmdq %p: %s (client %d)", cmdq, s,
+			//    cmdq->client != NULL ? cmdq->client->ibuf.fd : -1);
 
 			cmdq->time = time(NULL);
 			cmdq->number++;

crash_tmux.sh

#!/bin/bash

TMUX=tmux
#TMUX=/home/julien/programs/tmux-1.9a/_install/bin/tmux
#TMUX=/home/julien/programs/tmux-1.8/_install/bin/tmux
#TMUX=/home/julien/programs/tmux-1.6/_install/bin/tmux
$TMUX start-server
$TMUX new-session -d -s test -n test
$TMUX rename-window 'test'

$TMUX set-buffer "\"##
def laplacian_smoothing(verts, faces):
    \"\"\"
    Laplacian mesh smoothing
    http://en.wikipedia.org/wiki/Laplacian_smoothing

    Basically, each vertex is replaced by a weighted average of its neighbors

    The smoothed vertex, xbar is obtained as

    xbar_i = 1 / N \sum_{j}^N x_j

    where N is the number of adjacent vertices to x_i.
    \"\"\"
    Ni = np.zeros(len(verts), dtype=int)
    Si = np.zeros((len(verts), 3), dtype=float)
    for f in faces:
        for fi in xrange(3):
            Ni[f[fi]] += 2
            Si[f[fi], :] += verts[f[(fi+1) % 3], :]
            Si[f[fi], :] += verts[f[(fi+2) % 3], :]

    for i,v in enumerate(verts):
        Ni[i] += 1
        Si[i, :] += 2*verts[i]

    return Si / Ni.reshape(-1, 1).astype(float)

scloud = laplacian_smoothing(icoarse, coarse_faces)

if True:
    mlab.figure(size=(800, 600))
    mlab.triangular_mesh(scloud[:,0],
                         scloud[:,1],
                         scloud[:,2],
                         coarse_faces,
   (client 13)
   "

$TMUX list-sessions