渡辺哲也です。

-g -O の状態で、コマンドラインから再現することが
できて core とれました。けっこう深いです。とりあ
えず送ります。

#0  0x4007b811 in __kill ()
#1  0x4007b63f in raise (sig=6) at ../sysdeps/posix/raise.c:27
#2  0x4007c84f in abort () at ../sysdeps/generic/abort.c:83
#3  0x809e81c in rb_check_type (x=134930358, t=-1073761244) at error.c:154
#4  0x808b6e5 in sigsegv (sig=11) at signal.c:377
#5  <signal handler called>
#6  st_lookup (table=0x0, key=0x1a11 <Address 0x1a11 out of bounds>, value=0xbfffb444) at st.c:216
#7  0x804fb8e in search_method (klass=1075012152, id=6673, origin=0xbfffb46c) at eval.c:150
#8  0x804fbd6 in rb_get_method_body (klassp=0xbfffb4a4, idp=0xbfffb498, noexp=0xbfffb494) at eval.c:171
#9  0x80577b9 in rb_call (klass=1075012152, recv=1075012172, mid=6673, argc=0, argv=0x0, scope=0)
    at eval.c:3984
#10 0x80537b8 in rb_eval (self=1075007188, node=0x40127284) at eval.c:2183
#11 0x8054102 in rb_eval (self=1075007188, node=0x401272ac) at eval.c:2337
#12 0x80523b2 in rb_eval (self=1075007188, node=0x40127248) at eval.c:1740
#13 0x8055daa in rb_yield_0 (val=1075012392, self=1075007188, klass=0, acheck=0) at eval.c:3189
#14 0x8055f05 in rb_yield (val=1075012392) at eval.c:3229
#15 0x809d087 in dir_each (dir=1075191152) at dir.c:152
#16 0x8056d8b in call_cfunc (func=0x809d03c <dir_each>, recv=1075191152, len=0, argc=0, argv=0x0)
    at eval.c:3677
#17 0x8057216 in rb_call0 (klass=1074967188, recv=1075191152, id=3489, argc=0, argv=0x0, body=0x4012b190, 
    nosuper=1) at eval.c:3813
#18 0x805789c in rb_call (klass=1074967188, recv=1075191152, mid=3489, argc=0, argv=0x0, scope=0)
    at eval.c:4007
#19 0x80537b8 in rb_eval (self=1075007188, node=0x401277ac) at eval.c:2183
#20 0x8052a7d in rb_eval (self=1075007188, node=0x40126e9c) at eval.c:1932
#21 0x80523b2 in rb_eval (self=1075007188, node=0x40126e74) at eval.c:1740
#22 0x8055daa in rb_yield_0 (val=1074845308, self=1075007188, klass=0, acheck=0) at eval.c:3189
#23 0x8055f05 in rb_yield (val=1074845308) at eval.c:3229
#24 0x809817b in rb_ary_each (ary=1075191432) at array.c:557
#25 0x8056d8b in call_cfunc (func=0x8098160 <rb_ary_each>, recv=1075191432, len=0, argc=0, argv=0x0)
    at eval.c:3677
#26 0x8057216 in rb_call0 (klass=1074984508, recv=1075191432, id=3489, argc=0, argv=0x0, body=0x4012f2e0, 
    nosuper=1) at eval.c:3813
#27 0x805789c in rb_call (klass=1074984508, recv=1075191432, mid=3489, argc=0, argv=0x0, scope=0)
    at eval.c:4007
#28 0x80537b8 in rb_eval (self=1075007188, node=0x40127a68) at eval.c:2183
#29 0x8052a7d in rb_eval (self=1075007188, node=0x40126dd4) at eval.c:1932
#30 0x80523b2 in rb_eval (self=1075007188, node=0x40126dac) at eval.c:1740
#31 0x805755d in rb_call0 (klass=1075010848, recv=1075007188, id=8657, argc=0, argv=0xbfffdf84, 
    body=0x40127ce8, nosuper=0) at eval.c:3917
#32 0x805789c in rb_call (klass=1075010848, recv=1075007188, mid=8657, argc=6, argv=0xbfffdf6c, scope=1)
    at eval.c:4007
#33 0x80537b8 in rb_eval (self=1075007188, node=0x4011c2a8) at eval.c:2183
#34 0x8054082 in rb_eval (self=1075007188, node=0x4011c49c) at eval.c:2322
#35 0x80523b2 in rb_eval (self=1075007188, node=0x4011c244) at eval.c:1740
#36 0x805755d in rb_call0 (klass=1075010848, recv=1075007188, id=8969, argc=0, argv=0xbfffecec, 
    body=0x4011d0f4, nosuper=0) at eval.c:3917
#37 0x805789c in rb_call (klass=1075010848, recv=1075007188, mid=8969, argc=1, argv=0xbfffece8, scope=1)
    at eval.c:4007
#38 0x80537b8 in rb_eval (self=1075007188, node=0x401181a8) at eval.c:2183
#39 0x80523b2 in rb_eval (self=1075007188, node=0x40118130) at eval.c:1740
#40 0x8050bac in eval_node (self=1075007188) at eval.c:987
#41 0x8050c9a in ruby_run () at eval.c:1023
#42 0x804fa5c in main (argc=3, argv=0xbffff690, envp=0xbffff6a0) at main.c:39

スクリプトは CGI なんですが、ファイルを山のよう
に開いて検索しています。

簡単な再現スクリプトが書ければいいのですが...

# 別のところをみていたかな?

--
WATANABE Tetsuya
 e-mail: Tetsuya_WATANABE / hp.com
         tetsu / jpn.hp.com