[New-bugs-announce] [issue35924] curses segfault resizing window

[Josiah Ulfers]

New submission from Josiah Ulfers <josiah.ulfers at gmail.com>:

To provoke a segmentation fault, run the attached, then grab the top or
bottom edge of the window. Move it down or up until it overlaps the box.
Might need to wiggle the edge a little, but it's reliably reproducible.

Expected error, which is what happens when dragging the left or right edge
instead of the top or bottom:

    Traceback (most recent call last):
      File "cursesfault.py", line 12, in <module>
        curses.wrapper(main)
      File "/usr/lib64/python3.6/curses/__init__.py", line 94, in wrapper
        return func(stdscr, *args, **kwds)
      File "cursesfault.py", line 9, in main
        w.addstr(0, 0, box)
    _curses.error: addwstr() returned ERR

Actual error message varies a little. It's either:

    *** Error in `python3': corrupted size vs. prev_size: 0x000055b3055ba820 ***
        Aborted (core dumped)

Or:

    *** Error in `python3': double free or corruption (!prev): 0x000055b61e1ffbb0 ***
        Aborted (core dumped)

Or:

    *** Error in `python': malloc(): memory corruption: 0x0000564907a5a4f0 ***
        Aborted (core dumped)

Possibly relates to issue15581

---

Python 2.7.14 and 3.6.5
OpenSUSE 15.0
KDE Plasma 5.12.6

uname -a
Linux ... 4.12.14-lp150.12.45-default #1 SMP Mon Jan 14 20:29:59 UTC 2019 (7a62739) x86_64 x86_64 x86_64 GNU/Linux

----------
components: Extension Modules
files: cursesfault.py
messages: 334991
nosy: Josiah Ulfers
priority: normal
severity: normal
status: open
title: curses segfault resizing window
type: crash
versions: Python 2.7, Python 3.6
Added file: https://bugs.python.org/file48108/cursesfault.py

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue35924>
_______________________________________