tcsh-6.14-17.el5_5.2 core dumps with backtick subsistution in Red Hat Enterprise Linux 5

Issue

• segfault occurs when specific command is performed.

Core was generated by `-csh'.
Program terminated with signal 11, Segmentation fault.
#0  pword (bufsiz=10240) at sh.glob.c:1094
1094        pargv[pargc++] = Strsave(pargs);
(gdb) bt
#0  pword (bufsiz=10240) at sh.glob.c:1094
#1  0x000000000041527c in dobackp (cp=0x2a33158 L"f", literal=0)
    at sh.glob.c:835
#2  0x00000000004159f6 in globexpand (v=0x7fffa9dad218) at sh.glob.c:356
#3  0x0000000000415ddc in globall (v=0x7fffa9dad210) at sh.glob.c:707
#4  0x000000000040d258 in doexec (t=0x2a91a50, do_glob=1) at sh.exec.c:171
#5  0x000000000041f61f in execute (t=0x2a91a50, wanttty=25699, pipein=0x0, 
    pipeout=0x0, do_glob=1) at sh.sem.c:665
#6  0x000000000041f828 in execute (t=0x2a3cfe0, wanttty=25699, pipein=0x0, 
    pipeout=0x0, do_glob=1) at sh.sem.c:740
#7  0x0000000000403bc5 in process (catch=1) at sh.c:2180
#8  0x0000000000405f93 in main (argc=<value optimized out>, argv=0x0)
    at sh.c:1362