sed bugreport

Hello,
i found bug in my sed (current distribution (Debian) version).

sed --version
GNU sed verze 4.2.1

command:
cat kills_sed_small_ | sed 's;..-..-.... \(..:..\):.. [<>] 
\([^!]*\)!~;/1 </2> ;'

output:
/1 </2> [email protected]: dawwwwm: jakto ze uz nehrajes draw 
something??? :D
*** glibc detected *** sed: double free or corruption (!prev): 
0x09558ff8 ***
======= Backtrace: =========
/lib/i686/cmov/libc.so.6(+0x6b381)[0xb768c381]
/lib/i686/cmov/libc.so.6(+0x6cbd8)[0xb768dbd8]
/lib/i686/cmov/libc.so.6(cfree+0x6d)[0xb7690cbd]
/lib/i686/cmov/libc.so.6(+0xb1630)[0xb76d2630]
/lib/i686/cmov/libc.so.6(+0xb3c59)[0xb76d4c59]
/lib/i686/cmov/libc.so.6(re_search+0x34)[0xb76d5194]
sed[0x804f31b]
sed[0x804e0ed]
sed[0x804f0d8]
sed[0x8049fd6]
/lib/i686/cmov/libc.so.6(__libc_start_main+0xe6)[0xb7637ca6]
sed[0x80498f1]
======= Memory map: ========
08048000-08055000 r-xp 00000000 fe:02 309477     /bin/sed
08055000-08056000 rw-p 0000c000 fe:02 309477     /bin/sed
08056000-0805b000 rw-p 00000000 00:00 0
0954e000-0956f000 rw-p 00000000 00:00 0          [heap]
b7400000-b7421000 rw-p 00000000 00:00 0
b7421000-b7500000 ---p 00000000 00:00 0
b757f000-b759c000 r-xp 00000000 fe:02 179171     /lib/libgcc_s.so.1
b759c000-b759d000 rw-p 0001c000 fe:02 179171     /lib/libgcc_s.so.1
b75a5000-b75a6000 rw-p 00000000 00:00 0
b75a6000-b761b000 r--p 00000000 fe:02 440499 
/usr/lib/locale/locale-archive
b761b000-b761c000 rw-p 00000000 00:00 0
b761c000-b761e000 r-xp 00000000 fe:02 439886 
/lib/i686/cmov/libdl-2.11.3.so
b761e000-b761f000 r--p 00001000 fe:02 439886 
/lib/i686/cmov/libdl-2.11.3.so
b761f000-b7620000 rw-p 00002000 fe:02 439886 
/lib/i686/cmov/libdl-2.11.3.so
b7620000-b7621000 rw-p 00000000 00:00 0
b7621000-b7761000 r-xp 00000000 fe:02 442473 
/lib/i686/cmov/libc-2.11.3.so
b7761000-b7762000 ---p 00140000 fe:02 442473 
/lib/i686/cmov/libc-2.11.3.so
b7762000-b7764000 r--p 00140000 fe:02 442473 
/lib/i686/cmov/libc-2.11.3.so
b7764000-b7765000 rw-p 00142000 fe:02 442473 
/lib/i686/cmov/libc-2.11.3.so
b7765000-b7768000 rw-p 00000000 00:00 0
b7768000-b7781000 r-xp 00000000 fe:02 179207     /lib/libselinux.so.1
b7781000-b7782000 r--p 00018000 fe:02 179207     /lib/libselinux.so.1
b7782000-b7783000 rw-p 00019000 fe:02 179207     /lib/libselinux.so.1
b7783000-b7784000 rw-p 00000000 00:00 0
b7784000-b778b000 r--s 00000000 fe:02 422226 
/usr/lib/gconv/gconv-modules.cache
b778b000-b778d000 rw-p 00000000 00:00 0
b778d000-b778e000 r-xp 00000000 00:00 0          [vdso]
b778e000-b77a9000 r-xp 00000000 fe:02 254161     /lib/ld-2.11.3.so
b77a9000-b77aa000 r--p 0001b000 fe:02 254161     /lib/ld-2.11.3.so
b77aa000-b77ab000 rw-p 0001c000 fe:02 254161     /lib/ld-2.11.3.so
bfe88000-bfea9000 rw-p 00000000 00:00 0          [stack]
Neúspěšně ukončen (SIGABRT)


sed in gdb:

gdb sed
GNU gdb (GDB) 7.0.1-debian
Copyright (C) 2009 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later 
<http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /bin/sed...(no debugging symbols found)...done.
(gdb) run 's;..-..-.... \(..:..\):.. [<>] \([^!]*\)!~;/1 </2> ;' < 
kills_sed_small_
Starting program: /bin/sed 's;..-..-.... \(..:..\):.. [<>] 
\([^!]*\)!~;/1 </2> ;' < kills_sed_small_
/1 </2> [email protected]: dawwwwm: jakto ze uz nehrajes draw 
something??? :D
*** glibc detected *** /bin/sed: double free or corruption (!prev): 
0x08065ff8 ***
======= Backtrace: =========
/lib/i686/cmov/libc.so.6(+0x6b381)[0xb7ee1381]
/lib/i686/cmov/libc.so.6(+0x6cbd8)[0xb7ee2bd8]
/lib/i686/cmov/libc.so.6(cfree+0x6d)[0xb7ee5cbd]
/lib/i686/cmov/libc.so.6(+0xb1630)[0xb7f27630]
/lib/i686/cmov/libc.so.6(+0xb3c59)[0xb7f29c59]
/lib/i686/cmov/libc.so.6(re_search+0x34)[0xb7f2a194]
/bin/sed[0x804f31b]
/bin/sed[0x804e0ed]
/bin/sed[0x804f0d8]
/bin/sed[0x8049fd6]
/lib/i686/cmov/libc.so.6(__libc_start_main+0xe6)[0xb7e8cca6]
/bin/sed[0x80498f1]
======= Memory map: ========
08048000-08055000 r-xp 00000000 fe:02 309477     /bin/sed
08055000-08056000 rw-p 0000c000 fe:02 309477     /bin/sed
08056000-0807c000 rw-p 00000000 00:00 0          [heap]
b7c00000-b7c21000 rw-p 00000000 00:00 0
b7c21000-b7d00000 ---p 00000000 00:00 0
b7dd4000-b7df1000 r-xp 00000000 fe:02 179171     /lib/libgcc_s.so.1
b7df1000-b7df2000 rw-p 0001c000 fe:02 179171     /lib/libgcc_s.so.1
b7dfa000-b7dfb000 rw-p 00000000 00:00 0
b7dfb000-b7e70000 r--p 00000000 fe:02 440499 
/usr/lib/locale/locale-archive
b7e70000-b7e71000 rw-p 00000000 00:00 0
b7e71000-b7e73000 r-xp 00000000 fe:02 439886 
/lib/i686/cmov/libdl-2.11.3.so
b7e73000-b7e74000 r--p 00001000 fe:02 439886 
/lib/i686/cmov/libdl-2.11.3.so
b7e74000-b7e75000 rw-p 00002000 fe:02 439886 
/lib/i686/cmov/libdl-2.11.3.so
b7e75000-b7e76000 rw-p 00000000 00:00 0
b7e76000-b7fb6000 r-xp 00000000 fe:02 442473 
/lib/i686/cmov/libc-2.11.3.so
b7fb6000-b7fb7000 ---p 00140000 fe:02 442473 
/lib/i686/cmov/libc-2.11.3.so
b7fb7000-b7fb9000 r--p 00140000 fe:02 442473 
/lib/i686/cmov/libc-2.11.3.so
b7fb9000-b7fba000 rw-p 00142000 fe:02 442473 
/lib/i686/cmov/libc-2.11.3.so
b7fba000-b7fbd000 rw-p 00000000 00:00 0
b7fbd000-b7fd6000 r-xp 00000000 fe:02 179207     /lib/libselinux.so.1
b7fd6000-b7fd7000 r--p 00018000 fe:02 179207     /lib/libselinux.so.1
b7fd7000-b7fd8000 rw-p 00019000 fe:02 179207     /lib/libselinux.so.1
b7fd8000-b7fd9000 rw-p 00000000 00:00 0
b7fd9000-b7fe0000 r--s 00000000 fe:02 422226 
/usr/lib/gconv/gconv-modules.cache
b7fe0000-b7fe2000 rw-p 00000000 00:00 0
b7fe2000-b7fe3000 r-xp 00000000 00:00 0          [vdso]
b7fe3000-b7ffe000 r-xp 00000000 fe:02 254161     /lib/ld-2.11.3.so
b7ffe000-b7fff000 r--p 0001b000 fe:02 254161     /lib/ld-2.11.3.so
b7fff000-b8000000 rw-p 0001c000 fe:02 254161     /lib/ld-2.11.3.so
bffdf000-c0000000 rw-p 00000000 00:00 0          [stack]

Program received signal SIGABRT, Aborted.
0xb7fe2424 in __kernel_vsyscall ()
(gdb) bt
#0  0xb7fe2424 in __kernel_vsyscall ()
#1  0xb7ea0781 in raise () from /lib/i686/cmov/libc.so.6
#2  0xb7ea3bb2 in abort () from /lib/i686/cmov/libc.so.6
#3  0xb7ed7285 in ?? () from /lib/i686/cmov/libc.so.6
#4  0xb7ee1381 in ?? () from /lib/i686/cmov/libc.so.6
#5  0xb7ee2bd8 in ?? () from /lib/i686/cmov/libc.so.6
#6  0xb7ee5cbd in free () from /lib/i686/cmov/libc.so.6
#7  0xb7f27630 in ?? () from /lib/i686/cmov/libc.so.6
#8  0xb7f29c59 in ?? () from /lib/i686/cmov/libc.so.6
#9  0xb7f2a194 in re_search () from /lib/i686/cmov/libc.so.6
#10 0x0804f31b in ?? ()
#11 0x0804e0ed in ?? ()
#12 0x0804f0d8 in ?? ()
#13 0x08049fd6 in ?? ()
#14 0xb7e8cca6 in __libc_start_main () from /lib/i686/cmov/libc.so.6
#15 0x080498f1 in ?? ()
(gdb)



file kills_sed_small_ attached; content (2 lines):
--satrt of kills_sed_small
11-04-2012 18:02:03 < [email protected]: dawwwwm: jakto ze uz 
nehrajes draw something??? :D
11-04-2012 18:02:24 > dawwwwm: Tewwok: aaaa, ja vedel ze jsem na nec
--end of kills_sed_small

my system:
uname -a
Linux eliska 3.3.2-my-compilation #3 SMP Mon Apr 16 18:16:37 CEST 2012 
i686 GNU/Linux

cat /proc/cpuinfo
processor	: 0
vendor_id	: GenuineIntel
cpu family	: 15
model		: 2
model name	: Intel(R) Xeon(TM) CPU 2.40GHz
stepping	: 7
microcode	: 0x34
cpu MHz		: 2392.213
cache size	: 512 KB
physical id	: 0
siblings	: 1
core id		: 0
cpu cores	: 1
apicid		: 0
initial apicid	: 0
fdiv_bug	: no
hlt_bug		: no
f00f_bug	: no
coma_bug	: no
fpu		: yes
fpu_exception	: yes
cpuid level	: 2
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov 
pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe pebs bts cid xtpr
bogomips	: 4784.42
clflush size	: 64
cache_alignment	: 128
address sizes	: 36 bits physical, 32 bits virtual
power management:

processor	: 1
vendor_id	: GenuineIntel
cpu family	: 15
model		: 2
model name	: Intel(R) Xeon(TM) CPU 2.40GHz
stepping	: 9
microcode	: 0xf
cpu MHz		: 2392.213
cache size	: 512 KB
physical id	: 3
siblings	: 1
core id		: 0
cpu cores	: 1
apicid		: 6
initial apicid	: 6
fdiv_bug	: no
hlt_bug		: no
f00f_bug	: no
coma_bug	: no
fpu		: yes
fpu_exception	: yes
cpuid level	: 2
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov 
pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe pebs bts cid xtpr
bogomips	: 4784.78
clflush size	: 64
cache_alignment	: 128
address sizes	: 36 bits physical, 32 bits virtual
power management:


Thanks for your interest,
Roman Diba, Czech Republic.

11-04-2012 18:02:03 < [email protected]: dawwwwm: jakto ze uz nehrajes draw something??? :D
11-04-2012 18:02:24 > dawwwwm: Tewwok: aaaa, ja vedel ze jsem na nec