I got a first "segmentation fault" just after updating ('u' in the TUI).
Now, each time I run aptitude, a segmentation occurs one second after
starting it.

I suppose that it doesn't like some data that have been fetched.
Tagging security for this reason.

The backtrace:

(gdb) bt
#0  0x00007f4149ad4f1c in ?? () from /usr/lib/x86_64-linux-gnu/libapt-pkg.so.6.0
#1  0x00007f4149ad64c4 in ?? () from /usr/lib/x86_64-linux-gnu/libapt-pkg.so.6.0
#2  0x00007f4149ad87f6 in ?? () from /usr/lib/x86_64-linux-gnu/libapt-pkg.so.6.0
#3  0x00007f4149ab96bd in pkgDebianIndexFile::Merge(pkgCacheGenerator&, OpProgress*) () from /usr/lib/x86_64-linux-gnu/libapt-pkg.so.6.0
#4  0x00007f4149ad33b6 in ?? () from /usr/lib/x86_64-linux-gnu/libapt-pkg.so.6.0
#5  0x00007f4149ad9c30 in ?? () from /usr/lib/x86_64-linux-gnu/libapt-pkg.so.6.0
#6  0x00007f4149adbd05 in ?? () from /usr/lib/x86_64-linux-gnu/libapt-pkg.so.6.0
#7  0x00005579892393ff in ?? ()
#8  0x0000557989242c83 in ?? ()
#9  0x00005579890dc9f6 in ?? ()
#10 0x00007f4148f5cd0a in __libc_start_main (main=0x5579890daae0, argc=1, argv=0x7fffbe441bf8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffbe441be8) at ../csu/libc-start.c:308
#11 0x00005579890e5f2a in ?? ()

However, if I run "strace -f -o str.out aptitude", I don't always
get a segmentation fault. So there may be another reason.

It may be a bug in libapt-pkg6.0, or perhaps a change in the upgrade
to apt 2.1.17 triggered an existing issue in aptitude.

Here's the end of the str.out file when "strace -f -o str.out aptitude"
crashed:

2237416 stat("/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_binary-all_Packages", 0x7ffdb54ba240) = -1 ENOENT (No such file or directory)
2237416 stat("/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_binary-all_Packages.xz", 0x7ffdb54ba240) = -1 ENOENT (No such file or directory)
2237416 stat("/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_binary-all_Packages.bz2", 0x7ffdb54ba240) = -1 ENOENT (No such file or directory)
2237416 stat("/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_binary-all_Packages.lzma", 0x7ffdb54ba240) = -1 ENOENT (No such file or directory)
2237416 stat("/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_binary-all_Packages.gz", 0x7ffdb54ba240) = -1 ENOENT (No such file or directory)
2237416 stat("/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_binary-all_Packages.lz4", 0x7ffdb54ba240) = -1 ENOENT (No such file or directory)
2237416 stat("/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_binary-all_Packages.zst", 0x7ffdb54ba240) = -1 ENOENT (No such file or directory)
2237416 stat("/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_binary-all_Packages.uncompressed", 0x7ffdb54ba240) = -1 ENOENT (No such file or directory)
2237416 stat("/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_binary-all_Packages", 0x7ffdb54ba330) = -1 ENOENT (No such file or directory)
2237416 stat("/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_i18n_Translation-en", {st_mode=S_IFREG|0644, st_size=1187463, ...}) = 0
2237416 stat("/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_i18n_Translation-en", {st_mode=S_IFREG|0644, st_size=1187463, ...}) = 0
2237416 stat("/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_i18n_Translation-en", {st_mode=S_IFREG|0644, st_size=1187463, ...}) = 0
2237416 stat("/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_i18n_Translation-en", {st_mode=S_IFREG|0644, st_size=1187463, ...}) = 0
2237416 stat("/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_i18n_Translation-en", {st_mode=S_IFREG|0644, st_size=1187463, ...}) = 0
2237416 stat("/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_i18n_Translation-en", {st_mode=S_IFREG|0644, st_size=1187463, ...}) = 0
2237416 openat(AT_FDCWD, "/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_i18n_Translation-en", O_RDONLY) = 3
2237416 fcntl(3, F_SETFD, FD_CLOEXEC)   = 0
2237416 fstat(3, {st_mode=S_IFREG|0644, st_size=1187463, ...}) = 0
2237416 close(3)                        = 0
2237416 rt_sigaction(SIGTSTP, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, {sa_handler=0x7fc6f0772ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, 8) = 0
2237416 poll([{fd=0, events=POLLIN}], 1, 0) = 0 (Timeout)
2237416 poll([{fd=0, events=POLLIN}], 1, 0) = 0 (Timeout)
2237416 rt_sigaction(SIGTSTP, {sa_handler=0x7fc6f0772ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, NULL, 8) = 0
2237416 rt_sigaction(SIGTSTP, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, {sa_handler=0x7fc6f0772ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, 8) = 0
2237416 poll([{fd=0, events=POLLIN}], 1, 0) = 0 (Timeout)
2237416 poll([{fd=0, events=POLLIN}], 1, 0) = 0 (Timeout)
2237416 write(1, "\33[106;246H", 10)    = 10
2237416 write(1, "\33(B\33[0;1m\33[37m\33[44m1\33[39;49m\33(B\33"..., 34) = 34
2237416 rt_sigaction(SIGTSTP, {sa_handler=0x7fc6f0772ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, NULL, 8) = 0
2237416 stat("/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_i18n_Translation-en", {st_mode=S_IFREG|0644, st_size=1187463, ...}) = 0
2237416 stat("/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_i18n_Translation-en", {st_mode=S_IFREG|0644, st_size=1187463, ...}) = 0
2237416 openat(AT_FDCWD, "/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_i18n_Translation-en", O_RDONLY) = 3
2237416 fcntl(3, F_SETFD, FD_CLOEXEC)   = 0
2237416 read(3, "Package: libcaf-core0.18\nDescrip"..., 32771) = 32771
2237416 rt_sigaction(SIGTSTP, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, {sa_handler=0x7fc6f0772ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, 8) = 0
2237416 poll([{fd=0, events=POLLIN}], 1, 0) = 0 (Timeout)
2237416 poll([{fd=0, events=POLLIN}], 1, 0) = 0 (Timeout)
2237416 write(1, "\33[H", 3)            = 3
2237416 rt_sigaction(SIGTSTP, {sa_handler=0x7fc6f0772ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, NULL, 8) = 0
2237416 rt_sigaction(SIGTSTP, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, {sa_handler=0x7fc6f0772ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, 8) = 0
2237416 poll([{fd=0, events=POLLIN}], 1, 0) = 0 (Timeout)
2237416 poll([{fd=0, events=POLLIN}], 1, 0) = 0 (Timeout)
2237416 rt_sigaction(SIGTSTP, {sa_handler=0x7fc6f0772ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, NULL, 8) = 0
2237416 stat("/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_i18n_Translation-en", {st_mode=S_IFREG|0644, st_size=1187463, ...}) = 0
2237416 openat(AT_FDCWD, "/var/lib/apt/lists/ftp.fr.debian.org_debian_dists_experimental_main_i18n_Translation-en", O_RDONLY) = 4
2237416 fcntl(4, F_SETFD, FD_CLOEXEC)   = 0
2237416 fstat(4, {st_mode=S_IFREG|0644, st_size=1187463, ...}) = 0
2237416 close(4)                        = 0
2237416 fstat(3, {st_mode=S_IFREG|0644, st_size=1187463, ...}) = 0
2237416 fstat(3, {st_mode=S_IFREG|0644, st_size=1187463, ...}) = 0
2237416 read(3, "5attica-doc\nDescription-md5: db6"..., 32757) = 32757
2237416 read(3, "elated processes together\n with "..., 32298) = 32298
2237416 read(3, "ilable are: low/high pass filter"..., 32531) = 32531
2237416 read(3, "eve;\n  - mail users without logi"..., 32310) = 32310
2237416 read(3, " file system. They are the main "..., 32563) = 32563
2237416 read(3, "4c54bac8e1eca97a6eb9a7\nDescripti"..., 32728) = 32728
2237416 read(3, "gets the REAL(16) type in the GN"..., 32486) = 32486
2237416 read(3, "his is the GNU Objective-C++ com"..., 32612) = 32612
2237416 read(3, "5441936718b11f39\nDescription-en:"..., 32704) = 32704
2237416 read(3, " This package contains files for"..., 32371) = 32371
2237416 read(3, "entation)\n Git is popular versio"..., 32630) = 32630
2237416 read(3, "er's root filesystem as a\n     f"..., 32087) = 32087
2237416 read(3, "y\n with debug extensions.\n\nPacka"..., 31573) = 31573
2237416 read(3, "l image processing and graphics,"..., 32498) = 32498
2237416 read(3, "des an advanced configuration sy"..., 32603) = 32603
2237416 read(3, "ns additional widgets for ItemMo"..., 32599) = 32599
2237416 read(3, "iblensfun2\nDescription-md5: 9b24"..., 32761) = 32761
2237416 read(3, "n\n be integrated with, or used a"..., 32577) = 32577
2237416 read(3, "uage using the locales system.\n "..., 32239) = 32239
2237416 read(3, " interface language using the lo"..., 32260) = 32260
2237416 read(3, "languages, you can\n install extr"..., 31936) = 31936
2237416 read(3, "component model\n of LibreOffice,"..., 32549) = 32549
2237416 read(3, "I compatibility with gcc's libst"..., 32420) = 32420
2237416 read(3, "e (CW) source.\n   * \316\265/\316\274 and fi"..., 31529) = 31529
2237416 read(3, "a highly flexible and powerful s"..., 32628) = 32628
2237416 read(3, "-md5: c4d7dbc29b7ab0bd870c15daec"..., 32732) = 32732
2237416 read(3, "widget toolkit as a test platfor"..., 32412) = 32412
2237416 read(3, "he data scheme as defined in\n   "..., 32553) = 32553
2237416 read(3, "IT infrastructure, then automati"..., 32567) = 32567
2237416 read(3, "ault version)\n Ruby is the inter"..., 32629) = 32629
2237416 read(3, "gs\n are possible, even if not ea"..., 32355) = 32355
2237416 read(3, "ybrid systems and to\n enhance st"..., 31185) = 31185
2237416 read(3, "igBundle integrates Twig with th"..., 32601) = 32601
2237416 read(3, "n of Thunderbird in Indonesian.\n"..., 32403) = 32403
2237416 read(3, "t loaders for various imx platfo"..., 32349) = 32349
2237416 read(3, "nd\n    custom schemes;\n  * wirel"..., 32289) = 20657
2237416 read(3, "", 11632)              = 0
2237416 close(3)                        = 0
2237416 stat("/var/lib/apt/lists/debug.mirrors.debian.org_debian-debug_dists_unstable-debug_InRelease", {st_mode=S_IFREG|0644, st_size=43910, ...}) = 0
2237416 stat("/var/lib/apt/lists/debug.mirrors.debian.org_debian-debug_dists_unstable-debug_InRelease", {st_mode=S_IFREG|0644, st_size=43910, ...}) = 0
2237416 stat("/tmp", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=73728, ...}) = 0
2237416 geteuid()                       = 1000
2237416 faccessat(AT_FDCWD, "/tmp", R_OK|W_OK|X_OK) = 0
2237416 openat(AT_FDCWD, "/tmp", O_RDWR|O_EXCL|O_CLOEXEC|O_TMPFILE, 0600) = 3
2237416 openat(AT_FDCWD, "/var/lib/apt/lists/debug.mirrors.debian.org_debian-debug_dists_unstable-debug_InRelease", O_RDONLY) = 4
2237416 fstat(4, {st_mode=S_IFREG|0644, st_size=43910, ...}) = 0
2237416 read(4, "-----BEGIN PGP SIGNED MESSAGE---"..., 4096) = 4096
2237416 read(4, "0ef69c17f6b1b4cd7664a037ec      "..., 4096) = 4096
2237416 write(3, "Origin: Debian\nLabel: Debian deb"..., 4096) = 4096
2237416 read(4, "nary-i386/Packages.xz\n 8972c8210"..., 4096) = 4096
2237416 write(3, "nts-udeb-amd64.gz\n e3b0c44298fc1"..., 4096) = 4096
2237416 read(4, "49afbf4c8996fb92427ae41e4649b934"..., 4096) = 4096
2237416 write(3, "e02ba1fd4eaaeda5897c37b75b4fb4a6"..., 4096) = 4096
2237416 read(4, "a47fdabfe04c1d4cba52b3cae650ad48"..., 4096) = 4096
2237416 write(3, "        0 contrib/debian-install"..., 4096) = 4096
2237416 read(4, "32452515e7fde1e779e52b586faca1d3"..., 4096) = 4096
2237416 write(3, "0f82e8f73d5e    23143 main/Conte"..., 4096) = 4096
2237416 read(4, "6fb92427ae41e4649b934ca495991b78"..., 4096) = 4096
2237416 write(3, "binary-arm64/Packages\n 775f69fdf"..., 4096) = 4096
2237416 read(4, "fbf4c8996fb92427ae41e4649b934ca4"..., 4096) = 4096
2237416 write(3, "ain/debian-installer/binary-arm6"..., 4096) = 4096
2237416 read(4, "1e4649b934ca495991b7852b855     "..., 4096) = 4096
2237416 write(3, "     0 non-free/Contents-arm64\n "..., 4096) = 4096
2237416 read(4, "\n ef565338dbc0381274dbf9b6e1e50b"..., 4096) = 4096
2237416 write(3, "tents-udeb-mips64el\n f61f27bd17d"..., 4096) = 4096
2237416 read(4, "d0039505328a90b2ff48968db873e9e7"..., 4096) = 2950
2237416 write(3, "87983fcbd58efbe9c      121 non-f"..., 4096) = 4096
2237416 read(4, "", 4096)               = 0
2237416 write(3, "79275       32 non-free/debian-i"..., 1299) = 1299
2237416 close(4)                        = 0
2237416 lseek(3, 0, SEEK_SET)           = 0
2237416 stat("/var/lib/apt/lists/debug.mirrors.debian.org_debian-debug_dists_unstable-debug_InRelease", {st_mode=S_IFREG|0644, st_size=43910, ...}) = 0
2237416 fstat(3, {st_mode=S_IFREG|0600, st_size=42259, ...}) = 0
2237416 read(3, "Origin: Debian\nLabel: Debian deb"..., 42262) = 42259
2237416 read(3, "", 3)                  = 0
2237416 close(3)                        = 0
2237416 stat("/var/lib/apt/lists/debug.mirrors.debian.org_debian-debug_dists_unstable-debug_main_binary-amd64_Packages", {st_mode=S_IFREG|0644, st_size=13672027, ...}) = 0
2237416 stat("/var/lib/apt/lists/debug.mirrors.debian.org_debian-debug_dists_unstable-debug_main_binary-amd64_Packages", {st_mode=S_IFREG|0644, st_size=13672027, ...}) = 0
2237416 stat("/var/lib/apt/lists/debug.mirrors.debian.org_debian-debug_dists_unstable-debug_main_binary-amd64_Packages", {st_mode=S_IFREG|0644, st_size=13672027, ...}) = 0
2237416 stat("/var/lib/apt/lists/debug.mirrors.debian.org_debian-debug_dists_unstable-debug_main_binary-amd64_Packages", {st_mode=S_IFREG|0644, st_size=13672027, ...}) = 0
2237416 openat(AT_FDCWD, "/var/lib/apt/lists/debug.mirrors.debian.org_debian-debug_dists_unstable-debug_main_binary-amd64_Packages", O_RDONLY) = 3
2237416 fcntl(3, F_SETFD, FD_CLOEXEC)   = 0
2237416 fstat(3, {st_mode=S_IFREG|0644, st_size=13672027, ...}) = 0
2237416 close(3)                        = 0
2237416 rt_sigaction(SIGTSTP, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, {sa_handler=0x7fc6f0772ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, 8) = 0
2237416 poll([{fd=0, events=POLLIN}], 1, 0) = 0 (Timeout)
2237416 poll([{fd=0, events=POLLIN}], 1, 0) = 0 (Timeout)
2237416 rt_sigaction(SIGTSTP, {sa_handler=0x7fc6f0772ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, NULL, 8) = 0
2237416 rt_sigaction(SIGTSTP, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, {sa_handler=0x7fc6f0772ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, 8) = 0
2237416 poll([{fd=0, events=POLLIN}], 1, 0) = 0 (Timeout)
2237416 poll([{fd=0, events=POLLIN}], 1, 0) = 0 (Timeout)
2237416 rt_sigaction(SIGTSTP, {sa_handler=0x7fc6f0772ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, NULL, 8) = 0
2237416 stat("/var/lib/apt/lists/debug.mirrors.debian.org_debian-debug_dists_unstable-debug_main_binary-amd64_Packages", {st_mode=S_IFREG|0644, st_size=13672027, ...}) = 0
2237416 openat(AT_FDCWD, "/var/lib/apt/lists/debug.mirrors.debian.org_debian-debug_dists_unstable-debug_main_binary-amd64_Packages", O_RDONLY) = 3
2237416 fcntl(3, F_SETFD, FD_CLOEXEC)   = 0
2237416 read(3, "Package: 0ad-dbgsym\nSource: 0ad "..., 32771) = 32771
2237416 rt_sigaction(SIGTSTP, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, {sa_handler=0x7fc6f0772ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, 8) = 0
2237416 poll([{fd=0, events=POLLIN}], 1, 0) = 0 (Timeout)
2237416 poll([{fd=0, events=POLLIN}], 1, 0) = 0 (Timeout)
2237416 rt_sigaction(SIGTSTP, {sa_handler=0x7fc6f0772ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, NULL, 8) = 0
2237416 rt_sigaction(SIGTSTP, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, {sa_handler=0x7fc6f0772ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, 8) = 0
2237416 poll([{fd=0, events=POLLIN}], 1, 0) = 0 (Timeout)
2237416 poll([{fd=0, events=POLLIN}], 1, 0) = 0 (Timeout)
2237416 rt_sigaction(SIGTSTP, {sa_handler=0x7fc6f0772ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6f0289140}, NULL, 8) = 0
2237416 stat("/var/lib/apt/lists/debug.mirrors.debian.org_debian-debug_dists_unstable-debug_main_binary-amd64_Packages", {st_mode=S_IFREG|0644, st_size=13672027, ...}) = 0
2237416 openat(AT_FDCWD, "/var/lib/apt/lists/debug.mirrors.debian.org_debian-debug_dists_unstable-debug_main_binary-amd64_Packages", O_RDONLY) = 4
2237416 fcntl(4, F_SETFD, FD_CLOEXEC)   = 0
2237416 fstat(4, {st_mode=S_IFREG|0644, st_size=13672027, ...}) = 0
2237416 close(4)                        = 0
2237416 fstat(3, {st_mode=S_IFREG|0644, st_size=13672027, ...}) = 0
2237416 fstat(3, {st_mode=S_IFREG|0644, st_size=13672027, ...}) = 0
2237416 read(3, "Multi-Arch: same\nAuto-Built-Pack"..., 32517) = 32517
2237416 read(3, "08a38a47be09f3311d1950d\n\nPackage"..., 31868) = 31868
2237416 read(3, "e ce9ccc83d9b326d2f0d37c7c49aeb6"..., 31981) = 31981
2237416 read(3, "chitecture: amd64\nDepends: libkf"..., 32580) = 32580
2237416 read(3, "2.24+dfsg1-1\nInstalled-Size: 422"..., 32725) = 32725
2237416 read(3, "a06cb945e4f7ecfa443634336b10171c"..., 32473) = 32473
2237416 read(3, "8340c21a1cea\n\nPackage: android-l"..., 32171) = 32171
2237416 read(3, "ion: debug\nPriority: optional\nFi"..., 32355) = 32355
2237416 read(3, "6e00ebaf9\nDescription-md5: 89a0f"..., 32336) = 32336
2237416 read(3, "ces: libaprutil1-dbg (<= 1.6.1-3"..., 32593) = 32593
2237416 read(3, " optional\nFilename: pool/main/a/"..., 32365) = 32365
2237416 read(3, ".9.28+dfsg-3\nInstalled-Size: 417"..., 32725) = 32725
2237416 read(3, "Built-Package: debug-symbols\nBui"..., 32402) = 32402
2237416 read(3, "218a46e43b 972e5ea7af7e4c495c3e1"..., 25626) = 25626
2237416 read(3, "tr/libattr1-dbgsym_2.4.48-6_amd6"..., 32343) = 32343
2237416 read(3, "27bb7b432edcd7c20f1b6aa34\nSectio"..., 32442) = 32442
2237416 read(3, "bc74921f756a27c9d0\nDescription-m"..., 32439) = 32439
2237416 read(3, "main/b/ballerburg/ballerburg-dbg"..., 32337) = 32337
2237416 read(3, "n: 2.3.3+dfsg-1.1\nInstalled-Size"..., 32725) = 32725
2237416 read(3, "HA256: 03ab4ae71a72208e5c46ec9d2"..., 32131) = 32131
2237416 read(3, "HA256: f071a578b1674b2ee4a255422"..., 32228) = 32228
2237416 read(3, "n-med-packaging@lists.alioth.deb"..., 32644) = 32644
2237416 read(3, "\nPackage: libblis64-3-pthread-db"..., 32095) = 32095
2237416 read(3, "-4\nInstalled-Size: 85\nMaintainer"..., 32713) = 32713
2237416 read(3, "4e3aed2fa2a8c295b42e0c0330cd1158"..., 32027) = 32027
2237416 read(3, "1f085134ef5b12d66b9770e59e0\n\nPac"..., 32273) = 32273
2237416 read(3, "71bb\n\nPackage: brickos-dbgsym\nSo"..., 32171) = 32171
2237416 read(3, "\nInstalled-Size: 5451\nMaintainer"..., 32698) = 32698
2237416 read(3, "47\nDescription-md5: ffbdf5563d9e"..., 32430) = 32430
2237416 read(3, ": Debian Cairo-dock Maintainers "..., 32651) = 32651
2237416 read(3, "ock-toons-plug-in-dbgsym_3.4.1+g"..., 32194) = 32194
2237416 read(3, "e50fc315157b22516 6df5cd9153983b"..., 32020) = 32020
2237416 read(3, "cantor-backend-sage\nAuto-Built-P"..., 32504) = 32504
2237416 read(3, "ize: 51628\nSHA256: cc2bfe60868aa"..., 32272) = 32272
2237416 read(3, ")\nDescription: Debug symbols for"..., 32578) = 32578
2237416 read(3, "435ee593b8d450918cbd43b0e64806bc"..., 30994) = 30994
2237416 read(3, "e: 37\nMaintainer: Alvin Chen <so"..., 32702) = 32702
2237416 read(3, "6c1418a893d5bc57289e c6f58567e25"..., 31123) = 31123
2237416 read(3, "aa3a898584ace5ec7b02af51 3cac1c0"..., 32121) = 32121
2237416 read(3, "amd64.deb\nSize: 57772\nSHA256: 2a"..., 32237) = 32237
2237416 read(3, "06c8\nSection: debug\nPriority: op"..., 32288) = 32288
2237416 read(3, "c4368\nSection: debug\nPriority: o"..., 32342) = 32342
2237416 read(3, "ym_19981025-8_amd64.deb\nSize: 11"..., 32324) = 32324
2237416 read(3, "ds: libcolorhug2 (= 1.4.5-3)\nDes"..., 32604) = 32604
2237416 read(3, "62e8f4b0 baeda553779dac49b00a6b2"..., 32336) = 32336
2237416 read(3, "83243673985ebc90635ba4337487ab 9"..., 17767) = 17767
2237416 read(3, "256: 588bb0e2a387be5494af07d9909"..., 32237) = 32237
2237416 read(3, "5688ba1f31dcc90cda9499 14b2ffe0c"..., 32391) = 32391
2237416 read(3, "2ecd4ea9d8b9d23afa9d5b67d7b8f2a3"..., 32481) = 32481
2237416 read(3, "fbef99d590e1cac8f0801e2fbcd2835e"..., 32449) = 32449
2237416 mremap(0x7fc6dc600000, 60817408, 61865984, MREMAP_MAYMOVE) = 0x7fc6d4500000
2237416 --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=0x7fc6dffef750} ---
2237416 write(1, "\33[?1006;1000l", 13) = 13
2237416 write(1, "\33[106;1H\33[?12l\33[?25h", 20) = 20
2237416 write(1, "\33[?1049l\33[23;0;0t\r\33[?1l\33>", 25) = 25
2237416 ioctl(1, TCGETS, {B38400 opost isig -icanon -echo ...}) = 0
2237416 ioctl(1, SNDCTL_TMR_STOP or TCSETSW, {B38400 opost isig icanon echo ...}) = 0
2237416 ioctl(1, TCGETS, {B38400 opost isig icanon echo ...}) = 0
2237416 write(2, "Ouch!  Got SIGSEGV, dying..\n", 28) = 28
2237416 rt_sigaction(SIGSEGV, {sa_handler=SIG_DFL, sa_mask=[SEGV], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6efdbed60}, {sa_handler=0x7fc6f069fcb0, sa_mask=[SEGV], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc6efdbed60}, 8) = 0
2237416 rt_sigprocmask(SIG_BLOCK, ~[RTMIN RT_1], [SEGV WINCH], 8) = 0
2237416 getpid()                        = 2237416
2237416 gettid()                        = 2237416
2237416 tgkill(2237416, 2237416, SIGSEGV) = 0
2237416 rt_sigprocmask(SIG_SETMASK, [SEGV WINCH], NULL, 8) = 0
2237416 rt_sigreturn({mask=[WINCH]})    = 60806594
2237416 --- SIGSEGV {si_signo=SIGSEGV, si_code=SI_TKILL, si_pid=2237416, si_uid=1000} ---
2237418 <... rt_sigtimedwait resumed> <unfinished ...>) = ?
2237417 <... select resumed> <unfinished ...>) = ?
2237419 <... futex resumed>)            = ?
2237419 +++ killed by SIGSEGV (core dumped) +++
2237418 +++ killed by SIGSEGV (core dumped) +++
2237417 +++ killed by SIGSEGV (core dumped) +++
2237416 +++ killed by SIGSEGV (core dumped) +++

When it crashes, this seems to be at the same place:

[...]
2237416 read(3, "ym_19981025-8_amd64.deb\nSize: 11"..., 32324) = 32324
2237416 read(3, "ds: libcolorhug2 (= 1.4.5-3)\nDes"..., 32604) = 32604
2237416 read(3, "62e8f4b0 baeda553779dac49b00a6b2"..., 32336) = 32336
2237416 read(3, "83243673985ebc90635ba4337487ab 9"..., 17767) = 17767
2237416 read(3, "256: 588bb0e2a387be5494af07d9909"..., 32237) = 32237
2237416 read(3, "5688ba1f31dcc90cda9499 14b2ffe0c"..., 32391) = 32391
2237416 read(3, "2ecd4ea9d8b9d23afa9d5b67d7b8f2a3"..., 32481) = 32481
2237416 read(3, "fbef99d590e1cac8f0801e2fbcd2835e"..., 32449) = 32449
2237416 mremap(0x7fc6dc600000, 60817408, 61865984, MREMAP_MAYMOVE) = 0x7fc6d4500000
2237416 --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=0x7fc6dffef750} ---
[...]

[...]
2237777 read(3, "ym_19981025-8_amd64.deb\nSize: 11"..., 32324) = 32324
2237777 read(3, "ds: libcolorhug2 (= 1.4.5-3)\nDes"..., 32604) = 32604
2237777 read(3, "62e8f4b0 baeda553779dac49b00a6b2"..., 32336) = 32336
2237777 read(3, "83243673985ebc90635ba4337487ab 9"..., 17767) = 17767
2237777 read(3, "256: 588bb0e2a387be5494af07d9909"..., 32237) = 32237
2237777 read(3, "5688ba1f31dcc90cda9499 14b2ffe0c"..., 32391) = 32391
2237777 read(3, "2ecd4ea9d8b9d23afa9d5b67d7b8f2a3"..., 32481) = 32481
2237777 read(3, "fbef99d590e1cac8f0801e2fbcd2835e"..., 32449) = 32449
2237777 mremap(0x7fad28600000, 60817408, 61865984, MREMAP_MAYMOVE) = 0x7fad20500000
2237777 --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=0x7fad2bfef750} ---
[...]

[...]
2238354 read(3, "ym_19981025-8_amd64.deb\nSize: 11"..., 32324) = 32324
2238354 read(3, "ds: libcolorhug2 (= 1.4.5-3)\nDes"..., 32604) = 32604
2238354 read(3, "62e8f4b0 baeda553779dac49b00a6b2"..., 32336) = 32336
2238354 read(3, "83243673985ebc90635ba4337487ab 9"..., 17767) = 17767
2238354 read(3, "256: 588bb0e2a387be5494af07d9909"..., 32237) = 32237
2238354 read(3, "5688ba1f31dcc90cda9499 14b2ffe0c"..., 32391) = 32391
2238354 read(3, "2ecd4ea9d8b9d23afa9d5b67d7b8f2a3"..., 32481) = 32481
2238354 read(3, "fbef99d590e1cac8f0801e2fbcd2835e"..., 32449) = 32449
2238354 mremap(0x7f9754600000, 60817408, 61865984, MREMAP_MAYMOVE) = 0x7f974c500000
2238354 --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=0x7f9757fef750} ---
[...]

And when it doesn't:

[...]
2237967 read(3, "ym_19981025-8_amd64.deb\nSize: 11"..., 32324) = 32324
2237967 read(3, "ds: libcolorhug2 (= 1.4.5-3)\nDes"..., 32604) = 32604
2237967 read(3, "62e8f4b0 baeda553779dac49b00a6b2"..., 32336) = 32336
2237967 read(3, "83243673985ebc90635ba4337487ab 9"..., 17767) = 17767
2237967 read(3, "256: 588bb0e2a387be5494af07d9909"..., 32237) = 32237
2237967 read(3, "5688ba1f31dcc90cda9499 14b2ffe0c"..., 32391) = 32391
2237967 read(3, "2ecd4ea9d8b9d23afa9d5b67d7b8f2a3"..., 32481) = 32481
2237967 read(3, "fbef99d590e1cac8f0801e2fbcd2835e"..., 32449) = 32449
2237967 mremap(0x7ff909d00000, 60817408, 61865984, MREMAP_MAYMOVE) = 0x7ff909d00000
2237967 read(3, "b\n\nPackage: cue2toc-dbgsym\nSourc"..., 32156) = 32156
2237967 read(3, "fc5e9475f8ea1996ad1d1\nDescriptio"..., 32468) = 32468
2237967 read(3, "noit <calculus@rezozer.net>\nArch"..., 32635) = 32635
2237967 read(3, "446f87a121ed255bd081 e3830a9a187"..., 26866) = 26866
[...]

A bundle is available for a limited time:

https://www.vinc17.net/aptitude-segv.bundle

I can reproduce the crash (but not always) with

  aptitude-run-state-bundle aptitude-segv.bundle

on this machine and on another one.

When it doesn't crash, aptitude doesn't suggest any action.

But on a 3rd machine, which has the same aptitude version, but older
versions of dependencies, aptitude never crashes, and I get:

[1(1)/...] Actions: 2 keeps, 1 upgrade
e: Examine  !: Apply  .: Next  ,: Previous

and 'e' says:

                Packages                          Resolve Dependencies
  --\ Keep the following packages at their current version:                     
    desktop-file-utils                         [0.26-1 (now, testing, unstable)]
    gvfs-common                              [1.46.1-2 (now, testing, unstable)]
  --\ Upgrade the following packages:
    libmtp-common     [1.1.17-3 now, testing, unstable -> 1.1.18-1 experimental]

(suggesting to upgrade a package to experimental like that is
incorrect, unless aptitude already broke the system).

Smells like 980037? Bug in APT's cache building upon mremap() in new
code path in 2.1.16/17.

Yes, I first rebuilt apt, and

  aptitude-run-state-bundle aptitude-segv.bundle

was still crashing, then applied the patch suggested at

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=980037#10

and I no longer get any crash.

But I don't have a patched kernel, just the one provided by Debian,
and the crashes were almost 100% reproducible when "aptitude" was
run alone.

Hi Julian and Vincent,

Julian Andres Klode wrote:

Hmmmm, works still fine for me so far with 2.1.17.

Yep, smells like something which came in with apt 2.1.17.

I'd rather guess 2.1.17 only given the time of the bug report.

Then again, I so far didn't run into it, neither with "aptitude -u"
(as I usually do on several boxes several times per day) nor with
pressing "u" inside the TUI.

Vincent: Got the bundle, thanks! Wasn't able to provoke a segfault
with it, even not after pressing "u". But as mentioned in #980037 this
seems normal in such a case without a special kernel. So thanks for
the bug report!

Then again, it argued about some missing files. Seems as if
aptitude-create-state-bundle should copy way more files when handling
file:/// URLs:

# aptitude-run-state-bundle ~abe/aptitude/aptitude-segv-#980035.bundle aptitude update
[…]
Get: 33 file:/var/local/apt ./ Packages
Err file:/var/local/apt ./ Packages
  File not found - /var/local/apt/./Packages (2: No such file or directory)
Get: 34 file:/var/local/apt ./ Translation-en
[…]
Fetched 87.9 MB in 10s (8426 kB/s)
W: Download is performed unsandboxed as root as file '/tmp/aptitudebug.9E6xy9EY0/var/lib/apt/lists/partial/ftp.fr.debian.org_debian_dists_stable_InRelease' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)
E: Failed to download some files
[…]
W: Failed to fetch file:/var/local/apt/./Packages: File not found - /var/local/apt/./Packages (2: No such file or directory)
E: Some index files failed to download. They have been ignored, or old ones used instead.

Created a new bug report for that.

		Regards, Axel

[moved to Cc: 980053]

Hi,

Well, 980053 is about aptitude-create-state-bundle. The above issue
is about aptitude-run-state-bundle. Perhaps this is due to the
aptitude-create-state-bundle bug, but I think that if a file is
missing, aptitude-run-state-bundle should fail, not fall back to
/var/lib files.