Seg fault in history-incremental-search-backward

[Bart Schaefer <schaefer@xxxxxxxxxxxxxxxx>]

Latest CVS as of 2006-10-15 at about 2pm.

Program received signal SIGSEGV, Segmentation fault.
0x08119723 in zwcwrite (s=0x9a488e8, i=4294967295)
    at ../../../zsh-4.0/Src/Zle/zle_refresh.c:204
204             zwcputc(s[j]);
(gdb) where
#0  0x08119723 in zwcwrite (s=0x9a488e8, i=4294967295)
    at ../../../zsh-4.0/Src/Zle/zle_refresh.c:204
#1  0x0811bb9c in refreshline (ln=0)
    at ../../../zsh-4.0/Src/Zle/zle_refresh.c:1127
#2  0x0811b03f in zrefresh () at ../../../zsh-4.0/Src/Zle/zle_refresh.c:838
#3  0x0810e373 in doisearch (args=0x8156cdc, dir=-1)
    at ../../../zsh-4.0/Src/Zle/zle_hist.c:1000
#4  0x0810dbc9 in historyincrementalsearchbackward (args=0x8156cdc)
    at ../../../zsh-4.0/Src/Zle/zle_hist.c:809
#5  0x0811393c in execzlefunc (func=0x8141668, args=0x8156cdc, set_bindk=0)
    at ../../../zsh-4.0/Src/Zle/zle_main.c:1259
#6  0x08113075 in zlecore () at ../../../zsh-4.0/Src/Zle/zle_main.c:1018
#7  0x081135f7 in zleread (lp=0x8157aa0, rp=0x0, flags=3, context=0)
    at ../../../zsh-4.0/Src/Zle/zle_main.c:1172
#8  0x0807a97d in inputline () at ../../zsh-4.0/Src/input.c:278
#9  0x0807a834 in ingetc () at ../../zsh-4.0/Src/input.c:214
#10 0x0807147a in ihgetc () at ../../zsh-4.0/Src/hist.c:240
#11 0x08081c3f in gettok () at ../../zsh-4.0/Src/lex.c:628
#12 0x080815a3 in yylex () at ../../zsh-4.0/Src/lex.c:344
#13 0x080999cc in parse_event () at ../../zsh-4.0/Src/parse.c:451
#14 0x08077638 in loop (toplevel=1, justonce=0) at ../../zsh-4.0/Src/init.c:128
#15 0x0807a47f in zsh_main (argc=1, argv=0xbffb8ae4)
    at ../../zsh-4.0/Src/init.c:1334

(gdb) p j
$3 = 25030

(gdb) l
199     {
200     #ifdef MULTIBYTE_SUPPORT
201         size_t j;
202
203         for (j = 0; j < i; j++)
204             zwcputc(s[j]);
205         return i; /* TODO something better for error indication */
206     #else
207         return fwrite(s, i, 1, shout);
208     #endif

(gdb) p i
$5 = 4294967295

1124                if (!*ol) {
1125                    i = (col_cleareol >= 0) ? col_cleareol : nllen;
1126                    i -= vcs;
1127                    zwrite(nl, i);

(gdb) p vcs
$6 = 14
(gdb) p col_cleareol
$7 = -1
(gdb) p nllen
$8 = 13