Comment # 3 on bug 928749 from Timo B�hme

(In reply to Timo B�hme from comment #2)
> Created attachment 633117 [details]
> produces sort error on 32bit (withLANG=en_US.UTF-8  sort -f)

Now I had the same error as described above with 32bit, but another file to
sort (see attachment) is needed to trigger it. It appears the UTF-8 LATIN SMALL
LETTER ALPHA (c9 91) is one part of the problem (in both files to sort). With
additional checks I found that the other characters may be any ASCII ones, only
the character count is important (remove/add a character and the problem
disappears).

Here the error output from LANG=en_US.UTF-8 sort -f problem_sort_32bit.txt
on a 32bit OpenSuSe:
% LANG=en_US.UTF-8 sort -f problem_sort_32bit.txt
*** Error in `sort': double free or corruption (!prev): 0x083fed70 ***
======= Backtrace: =========
/lib/libc.so.6(+0x6cdf3)[0xb757cdf3]
/lib/libc.so.6(+0x72f3a)[0xb7582f3a]
/lib/libc.so.6(+0x73b9d)[0xb7583b9d]
sort[0x8051051]
sort[0x804f3bd]
sort[0x80523f8]
sort[0x804bfaf]
/lib/libc.so.6(__libc_start_main+0xf3)[0xb7529993]
sort[0x804d115]
======= Memory map: ========
08048000-08063000 r-xp 00000000 08:07 921969     /usr/bin/sort
08063000-08064000 r--p 0001a000 08:07 921969     /usr/bin/sort
08064000-08065000 rw-p 0001b000 08:07 921969     /usr/bin/sort
083fa000-0841b000 rw-p 00000000 00:00 0          [heap]
b7358000-b7373000 r-xp 00000000 08:07 1060218    /lib/libgcc_s.so.1
b7373000-b7374000 r--p 0001a000 08:07 1060218    /lib/libgcc_s.so.1
b7374000-b7375000 rw-p 0001b000 08:07 1060218    /lib/libgcc_s.so.1
b73a0000-b73df000 r--p 00000000 08:07 1705521   
/usr/lib/locale/en_US.utf8/LC_CTYPE
b73df000-b750f000 r--p 00000000 08:07 1705519   
/usr/lib/locale/en_US.utf8/LC_COLLATE
b750f000-b7510000 rw-p 00000000 00:00 0
b7510000-b76b6000 r-xp 00000000 08:07 1059966    /lib/libc-2.19.so
b76b6000-b76b8000 r--p 001a6000 08:07 1059966    /lib/libc-2.19.so
b76b8000-b76b9000 rw-p 001a8000 08:07 1059966    /lib/libc-2.19.so
b76b9000-b76bc000 rw-p 00000000 00:00 0
b76bc000-b76d4000 r-xp 00000000 08:07 1088299    /lib/libpthread-2.19.so
b76d4000-b76d5000 r--p 00017000 08:07 1088299    /lib/libpthread-2.19.so
b76d5000-b76d6000 rw-p 00018000 08:07 1088299    /lib/libpthread-2.19.so
b76d6000-b76d8000 rw-p 00000000 00:00 0
b76f1000-b76f2000 rw-p 00000000 00:00 0
b76f2000-b76f3000 r--p 00000000 08:07 1726581   
/usr/lib/locale/en_US.utf8/LC_NUMERIC
b76f3000-b76f4000 r--p 00000000 08:07 1596041   
/usr/lib/locale/en_US.utf8/LC_TIME
b76f4000-b76f5000 r--p 00000000 08:07 1575647   
/usr/lib/locale/en_US.utf8/LC_MONETARY
b76f5000-b76f6000 r--p 00000000 08:07 1705679   
/usr/lib/locale/en_US.utf8/LC_MESSAGES/SYS_LC_MESSAGES
b76f6000-b76f7000 r--p 00000000 08:07 1731923   
/usr/lib/locale/en_US.utf8/LC_PAPER
b76f7000-b76f8000 r--p 00000000 08:07 1705619   
/usr/lib/locale/en_US.utf8/LC_NAME
b76f8000-b76f9000 r--p 00000000 08:07 1575643   
/usr/lib/locale/en_US.utf8/LC_ADDRESS
b76f9000-b76fa000 r--p 00000000 08:07 1705681   
/usr/lib/locale/en_US.utf8/LC_TELEPHONE
b76fa000-b76fb000 r--p 00000000 08:07 1705678   
/usr/lib/locale/en_US.utf8/LC_MEASUREMENT
b76fb000-b7702000 r--s 00000000 08:07 923094    
/usr/lib/gconv/gconv-modules.cache
b7702000-b7703000 r--p 00000000 08:07 1575646   
/usr/lib/locale/en_US.utf8/LC_IDENTIFICATION
b7703000-b7704000 rw-p 00000000 00:00 0
b7704000-b7705000 r-xp 00000000 00:00 0          [vdso]
b7705000-b7707000 r--p 00000000 00:00 0          [vvar]
b7707000-b7727000 r-xp 00000000 08:07 1059909    /lib/ld-2.19.so
b7727000-b7728000 r--p 00020000 08:07 1059909    /lib/ld-2.19.so
b7728000-b7729000 rw-p 00021000 08:07 1059909    /lib/ld-2.19.so
bfac9000-bfaea000 rw-p 00000000 00:00 0          [stack]
Abgebrochen