> I tested the patch and the testcase in > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=561203 > still segfaults. I think the expect/tcl bug and the bug 561203 are related. Looking at the minifail core dump, I see: Core was generated by `./minifail'. Program terminated with signal 11, Segmentation fault. #0 0x00000000 in ?? () So, how did we get to 0? $rp is 0, so we might have executed a return to this location. $r31 conains 0x4157cc4f. (gdb) disass 0x4157cc3c 0x4157cc5c Dump of assembler code from 0x4157cc3c to 0x4157cc5c: 0x4157cc3c <_IO_puts+332>: copy rp,r25 0x4157cc40 <_IO_puts+336>: copy r6,r24 0x4157cc44 <_IO_puts+340>: be,l b0(sr2,r0),sr0,r31 0x4157cc48 <_IO_puts+344>: ldi 0,r20 0x4157cc4c <_IO_puts+348>: ldi -b,r24 0x4157cc50 <_IO_puts+352>: cmpb,=,n r24,r21,0x4157cc38 <_IO_puts+328> 0x4157cc54 <_IO_puts+356>: nop 0x4157cc58 <_IO_puts+360>: ldi -2d,r25 So, it would see $r31 was last set by a call to the lws code. (gdb) info thread 2 Thread 2397 *__GI__IO_list_lock () at genops.c:1297 * 1 Thread 2398 0x00000000 in ?? () (gdb) thread 2 [Switching to thread 2 (Thread 2397)]#0 *__GI__IO_list_lock () at genops.c:1297 1297 genops.c: No such file or directory. in genops.c (gdb) bt #0 *__GI__IO_list_lock () at genops.c:1297 #1 0x415c06d0 in __libc_fork () at ../nptl/sysdeps/unix/sysv/linux/fork.c:117 #2 0x00011068 in pure_test () at minifail.cpp:55 #3 0x00011350 in main (argc=1, argv=0xc0497028) at minifail.cpp:80 Dave -- J. David Anglin dave.anglin@xxxxxxxxxxxxxx National Research Council of Canada (613) 990-0752 (FAX: 952-6602) -- To unsubscribe from this list: send the line "unsubscribe linux-parisc" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html