M-/ in edit replacement string

[Kevin Spiteri <kevinspiteri@falmalta.com>]

In GNU Emacs 21.2.1 (i386-msvc-nt5.0.2195)
  of 2002-03-19 on buffy
configured using `configure --with-msvc (12.00)'
Important settings:
   value of $LC_ALL: nil
   value of $LC_COLLATE: nil
   value of $LC_CTYPE: nil
   value of $LC_MESSAGES: nil
   value of $LC_MONETARY: nil
   value of $LC_NUMERIC: nil
   value of $LC_TIME: nil
   value of $LANG: ENU
   locale-coding-system: iso-latin-1
   default-enable-multibyte-characters: t

Please describe exactly what actions triggered the bug
and the precise symptoms of the bug:

In a buffer containing the following two lines only:
abc
def
run query-replace to "abc" to "ghi". When there is the query,
delete the replacement, type d, and press M-/ <return>.
An error message is given:
perform-replace: Args out of range: 26, 27
When using M-/ in larger buffers, there is no error message, but
there is some unexpected behaviour.


Relevant input:
C-x b h e l l o <return> a b c <return> d e f <return>
M-< M-% a b c <return> g h i <return> e <M-backspace>
d M-/ <return>

Relevant messages:
perform-replace: Args out of range: 26, 27


-- 
Kevin Spiteri
R&D Engineer
FAL Malta Ltd.
kevinspiteri@falmalta.com
(+356) 21 435315 ext 124