Trying to autocomplete the set command in configure mode gives

(config)#set ?
CLIgen subtree C not found

Running show ip route crashes the clicon_cli frontend:

>sh ip route 
Oct  2 11:10:41: quaggapi_exec: write show ip route

Oct  2 11:10:45: UNIX error: read: Bad address
Segmentation fault (core dumped)

Same with show ip route bgp

>sh ip route bgp 
Oct  2 11:11:38: quaggapi_exec: write show ip route bgp

Oct  2 11:11:41: UNIX error: read: Bad address
Segmentation fault (core dumped)

This is with a full bgp:

>sh ip bgp summary 
Oct  2 11:15:26: quaggapi_exec: write show ip bgp summary

BGP router identifier 80.252.167.34, local AS number 12381
RIB entries 927745, using 64 MiB of memory
Peers 1, using 2528 bytes of memory

Neighbor        V    AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
80.252.167.33   4 16150  429172    2661        0    0    0 22:10:34   504929

Total number of neighbors 1

Running show ip route 0.0.0.0/4 longer-prefixes works, whereas show ip route 0.0.0.0/3 longer-prefixes segfaults

Crash when typing '?' to see any further options.

(config)#ip as-path access-list a deny ^$ ?
  <cr>
Segmentation fault (core dumped)

ip as-path access-list has only deny as option. Should have permit as well.

Running archive config in enabled mode gives

#archive config 
Oct  2 10:25:00: unknown: 
CLI command error

show running-config displays
'ip route route->nexthop'
instead of
'ip route x.y.z.w a.b.c.d'

diff --git a/frontend/ios/ios.d2t b/frontend/ios/ios.d2t
index 8939955..d9ebf5e 100644
--- a/frontend/ios/ios.d2t
+++ b/frontend/ios/ios.d2t
@@ -43,7 +43,7 @@
@if($router.bgp->as)
@include("${ROST_PLUGIN_DIR}/ios-router-bgp.d2t")
@EnD
-@each($ipv4.route.static[], $rt, "ip route $rt->prefix route->nexthop $rt->distance\n")
+@each($ipv4.route.static[], $rt, "ip route $rt->prefix $rt->nexthop $rt->distance\n")
@each($ipv4.route.static.null[], $rt)
ip route $rt->prefix @if($rt->reject ? "reject" : "blackhole") $rt->distance\n
@EnD

Might be the solution.