Subject: 24.5; Emacs crashes when caching an image
From: Christian Kellermann <[email-masked]>
To: [email-masked]
Date: Wed, 16 Mar 2016 12:05:34 +0100
List-Id: <debbugs-submit.debbugs.gnu.org>

This bug report will be sent to the Bug-GNU-Emacs mailing list
and the GNU bug tracker at debbugs.gnu.org.  Please check that
the From: line contains a valid email address.  After a delay of up
to one day, you should receive an acknowledgment at that address.

Please write in English if possible, as the Emacs maintainers
usually do not have translators for other languages.

Please describe exactly what actions triggered the bug, and
the precise symptoms of the bug.  If you can, give a recipe
starting from `emacs -Q':

I cannot give a recipe for this crash as it happens after running
approximately for a week. I ran emacs compiled with debugging symbols
and in gdb to get a backtrace which I will include below:

Program received signal SIGSEGV, Segmentation fault.
0x000000000064b962 in cache_image (f=0xde02648, img=0x28330980) at image.c:1782
1782      for (i = 0; i < c->used; ++i)
(gdb) bt full
#0  0x000000000064b962 in cache_image (f=0xde02648, img=0x28330980) at image.c:1782
        c = 0x0
        i = 0
#1  0x000000000064b590 in lookup_image (f=0xde02648, spec=586761094) at image.c:1693
        img = 0x28330980
        hash = 938885388837103303
#2  0x00000000004399b2 in handle_single_display_spec (it=0x7fffffffa0e0, spec=586761094, object=515945509, overlay=12885874, position=0x7fffffffa218, bufpos=1, display_replaced_p=0, frame_window_p=1) at xdisp.c:5310
        retval = 1
        form = 12885922
        location = 12885874
        value = 586761094
        start_pos = {charpos = 1, bytepos = 1}
        valid_p = 1
#3  0x0000000000438411 in handle_display_spec (it=0x7fffffffa0e0, spec=586761094, object=515945509, overlay=12885874, position=0x7fffffffa218, bufpos=1, frame_window_p=1) at xdisp.c:4836
        replacing_p = 0
        rv = 0
#4  0x0000000000438135 in handle_display_prop (it=0x7fffffffa0e0) at xdisp.c:4759
        propval = 586761094
        object = 515945509
        overlay = 12885874
        position = 0x7fffffffa218
        bufpos = 1
        display_replaced_p = 0
#5  0x00000000004353c3 in handle_stop (it=0x7fffffffa0e0) at xdisp.c:3492
        handled = HANDLED_NORMALLY
        handle_overlay_change_p = 1
        p = 0x8cc930 <it_props+48>
#6  0x000000000043d235 in reseat (it=0x7fffffffa0e0, pos=..., force_p=1) at xdisp.c:6572
        original_pos = 1
#7  0x00000000004346df in init_iterator (it=0x7fffffffa0e0, w=0xea17598, charpos=1, bytepos=1, row=0xc61b7d0, base_face_id=DEFAULT_FACE_ID) at xdisp.c:3107
        remapped_base_face_id = DEFAULT_FACE_ID
#8  0x00000000004348e0 in start_display (it=0x7fffffffa0e0, w=0xea17598, pos=...) at xdisp.c:3123
        row = 0xc61b7d0
        first_vpos = 0
#9  0x0000000000459a2e in try_window (window=245462429, pos=..., flags=1) at xdisp.c:17002
        w = 0xea17598
        it = {window = 245462429, w = 0xea17598, f = 0xde02648, method = GET_FROM_BUFFER, stop_charpos = 2, prev_stop = 1, base_level_stop = 0, end_charpos = 1008, s = 0x0, string_nchars = 0, redisplay_end_trigger_charpos = 0, multibyte_p = true, header_line_p = false, string_from_display_prop_p = false, string_from_prefix_prop_p = false, from_disp_prop_p = true, ellipsis_p = false, avoid_cursor_p = false, dp = 0x0, dpvec = 0x0, dpend = 0x0, dpvec_char_len = 0, dpvec_face_id = 0, saved_face_id = 0, ctl_chars = {0 <repeats 16 times>}, start = {pos = {charpos = 1, bytepos = 1}, overlay_string_index = -1, string_pos = {charpos = -1, bytepos = -1}, dpvec_index = -1}, current = {pos = {charpos = 2, bytepos = 2}, overlay_string_index = -1, string_pos = {charpos = -1, bytepos = -1}, dpvec_index = -1}, n_overlay_strings = 0, overlay_strings_charpos = 0, overlay_strings = {0 <repeats 16 times>}, string_overlays = {0 <repeats 16 times>}, string = 12885874, from_overlay = 12885874, stack = {{string = 12885874, string_nchars = 0, end_charpos = 1008, stop_charpos = 2, prev_stop = 1, base_level_stop = 0, cmp_it = {stop_pos = 0, id = -1, ch = 0, rule_idx = 0, lookback = 0, nglyphs = 0, reversed_p = false, charpos = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0}, face_id = 0, u = {image = {object = 0, slice = {x = 0, y = 0, width = 0, height = 0}, image_id = 0}, comp = {object = 0}, stretch = {object = 0}}, position = {charpos = 2, bytepos = 2}, current = {pos = {charpos = 2, bytepos = 2}, overlay_string_index = -1, string_pos = {charpos = -1, bytepos = -1}, dpvec_index = -1}, from_overlay = 0, area = TEXT_AREA, method = GET_FROM_BUFFER, paragraph_embedding = NEUTRAL_DIR, multibyte_p = true, string_from_display_prop_p = false, string_from_prefix_prop_p = false, display_ellipsis_p = false, avoid_cursor_p = false, bidi_p = true, from_disp_prop_p = false, line_wrap = WINDOW_WRAP, voffset = 0, space_width = 12885874, font_height = 12885874}, {string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0, prev_stop = 0, base_level_stop = 0, cmp_it = {stop_pos = 0, id = 0, ch = 0, rule_idx = 0, lookback = 0, nglyphs = 0, reversed_p = false, charpos = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0}, face_id = 0, u = {image = {object = 0, slice = {x = 0, y = 0, width = 0, height = 0}, image_id = 0}, comp = {object = 0}, stretch = {object = 0}}, position = {charpos = 0, bytepos = 0}, current = {pos = {charpos = 0, bytepos = 0}, overlay_string_index = 0, string_pos = {charpos = 0, bytepos = 0}, dpvec_index = 0}, from_overlay = 0, area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, paragraph_embedding = NEUTRAL_DIR, multibyte_p = false, string_from_display_prop_p = false, string_from_prefix_prop_p = false, display_ellipsis_p = false, avoid_cursor_p = false, bidi_p = false, from_disp_prop_p = false, line_wrap = TRUNCATE, voffset = 0, space_width = 0, font_height = 0}, {string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0, prev_stop = 0, base_level_stop = 0, cmp_it = {stop_pos = 0, id = 0, ch = 0, rule_idx = 0, lookback = 0, nglyphs = 0, reversed_p = false, charpos = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0}, face_id = 0, u = {image = {object = 0, slice = {x = 0, y = 0, width = 0, height = 0}, image_id = 0}, comp = {object = 0}, stretch = {object = 0}}, position = {charpos = 0, bytepos = 0}, current = {pos = {charpos = 0, bytepos = 0}, overlay_string_index = 0, string_pos = {charpos = 0, bytepos = 0}, dpvec_index = 0}, from_overlay = 0, area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, paragraph_embedding = NEUTRAL_DIR, multibyte_p = false, string_from_display_prop_p = false, string_from_prefix_prop_p = false, display_ellipsis_p = false, avoid_cursor_p = false, bidi_p = false, from_disp_prop_p = false, line_wrap = TRUNCATE, voffset = 0, space_width = 0, font_height = 0}, {string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0, prev_stop = 0, base_level_stop = 0, cmp_it = {stop_pos = 0, id = 0, ch = 0, rule_idx = 0, lookback = 0, nglyphs = 0, reversed_p = false, charpos = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0}, face_id = 0, u = {image = {object = 0, slice = {x = 0, y = 0, width = 0, height = 0}, image_id = 0}, comp = {object = 0}, stretch = {object = 0}}, position = {charpos = 0, bytepos = 0}, current = {pos = {charpos = 0, bytepos = 0}, overlay_string_index = 0, string_pos = {charpos = 0, bytepos = 0}, dpvec_index = 0}, from_overlay = 0, area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, paragraph_embedding = NEUTRAL_DIR, multibyte_p = false, string_from_display_prop_p = false, string_from_prefix_prop_p = false, display_ellipsis_p = false, avoid_cursor_p = false, bidi_p = false, from_disp_prop_p = false, line_wrap = TRUNCATE, voffset = 0, space_width = 0, font_height = 0}, {string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0, prev_stop = 0, base_level_stop = 0, cmp_it = {stop_pos = 0, id = 0, ch = 0, rule_idx = 0, lookback = 0, nglyphs = 0, reversed_p = false, charpos = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0}, face_id = 0, u = {image = {object = 0, slice = {x = 0, y = 0, width = 0, height = 0}, image_id = 0}, comp = {object = 0}, stretch = {object = 0}}, position = {charpos = 0, bytepos = 0}, current = {pos = {charpos = 0, bytepos = 0}, overlay_string_index = 0, string_pos = {charpos = 0, bytepos = 0}, dpvec_index = 0}, from_overlay = 0, area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, paragraph_embedding = NEUTRAL_DIR, multibyte_p = false, string_from_display_prop_p = false, string_from_prefix_prop_p = false, display_ellipsis_p = false, avoid_cursor_p = false, bidi_p = false, from_disp_prop_p = false, line_wrap = TRUNCATE, voffset = 0, space_width = 0, font_height = 0}}, sp = 1, selective = 0, what = IT_IMAGE, face_id = 0, selective_display_ellipsis_p = true, ctl_arrow_p = true, face_box_p = false, start_of_box_run_p = false, end_of_box_run_p = false, overlay_strings_at_end_processed_p = false, ignore_overlay_strings_at_pos_p = false, glyph_not_available_p = false, starts_in_middle_of_char_p = false, face_before_selective_p = false, constrain_row_ascent_descent_p = false, line_wrap = WINDOW_WRAP, base_face_id = 0, c = 0, len = 0, cmp_it = {stop_pos = 0, id = -1, ch = 0, rule_idx = 0, lookback = 0, nglyphs = 0, reversed_p = false, charpos = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0}, char_to_display = 0, glyphless_method = GLYPHLESS_DISPLAY_THIN_SPACE, image_id = 0, slice = {x = 12885874, y = 12885874, width = 12885874, height = 12885874}, space_width = 12885874, voffset = 0, tab_width = 8, font_height = 12885874, object = 515945509, position = {charpos = 1, bytepos = 1}, truncation_pixel_width = 0, continuation_pixel_width = 9, first_visible_x = 0, last_visible_x = 1890, last_visible_y = 1140, extra_line_spacing = 0, max_extra_line_spacing = 0, override_ascent = -1, override_descent = 0, override_boff = 0, glyph_row = 0xc61b7d0, area = TEXT_AREA, nglyphs = 1, pixel_width = 0, ascent = 0, descent = 0, max_ascent = 0, max_descent = 0, phys_ascent = 0, phys_descent = 0, max_phys_ascent = 0, max_phys_descent = 0, current_x = 0, continuation_lines_width = 0, eol_pos = {charpos = 0, bytepos = 0}, current_y = 0, first_vpos = 0, vpos = 0, hpos = 0, left_user_fringe_bitmap = 0, right_user_fringe_bitmap = 0, left_user_fringe_face_id = 0, right_user_fringe_face_id = 0, bidi_p = true, bidi_it = {bytepos = 1, charpos = 1, ch = 0, nchars = -1, ch_len = 0, type = NEUTRAL_B, type_after_w1 = NEUTRAL_B, orig_type = NEUTRAL_B, resolved_level = 0, invalid_levels = 0, invalid_rl_levels = -1, prev = {bytepos = 0, charpos = 0, type = UNKNOWN_BT, type_after_w1 = UNKNOWN_BT, orig_type = UNKNOWN_BT}, last_strong = {bytepos = 0, charpos = 0, type = UNKNOWN_BT, type_after_w1 = UNKNOWN_BT, orig_type = UNKNOWN_BT}, next_for_neutral = {bytepos = 0, charpos = -1, type = UNKNOWN_BT, type_after_w1 = UNKNOWN_BT, orig_type = UNKNOWN_BT}, prev_for_neutral = {bytepos = 0, charpos = -1, type = UNKNOWN_BT, type_after_w1 = UNKNOWN_BT, orig_type = UNKNOWN_BT}, next_for_ws = {bytepos = 0, charpos = 0, type = UNKNOWN_BT, type_after_w1 = UNKNOWN_BT, orig_type = UNKNOWN_BT}, next_en_pos = 0, next_en_type = UNKNOWN_BT, ignore_bn_limit = 0, sor = L2R, scan_dir = 0, disp_pos = -1, disp_prop = 0, stack_idx = 0, level_stack = {{level = 0, override = NEUTRAL_DIR} <repeats 64 times>}, string = {lstring = 12885874, s = 0x0, schars = 0, bufpos = 0, from_disp_str = false, unibyte = false}, w = 0xea17598, paragraph_dir = NEUTRAL_DIR, separator_limit = -1, prev_was_pdf = false, first_elt = true, new_paragraph = true, frame_window_p = true}, paragraph_embedding = NEUTRAL_DIR}
        last_text_row = 0x0
        f = 0xde02648
        frame_line_height = 19
#10 0x0000000000457319 in redisplay_window (window=245462429, just_this_one_p=false) at xdisp.c:16486
        d2 = 0
        d6 = 0
        d1 = -17424
        d5 = 306
        rtop = 0
        rbot = 0
        w = 0xea17598
        f = 0xde02648
        buffer = 0x1ec0b420
        old = 0x1ec0b420
        lpoint = {charpos = 133, bytepos = 133}
        opoint = {charpos = 133, bytepos = 133}
        startp = {charpos = 1, bytepos = 1}
        update_mode_line = 1
        tem = 0
        it = {window = 14930288, w = 0x0, f = 0x25, method = 4263168, stop_charpos = 140737488337856, prev_stop = 4409568, base_level_stop = 1, end_charpos = 1, s = 0xde02a18 "\024 \002\004", string_nchars = -17424, redisplay_end_trigger_charpos = 1, multibyte_p = false, header_line_p = false, string_from_display_prop_p = false, string_from_prefix_prop_p = false, from_disp_prop_p = false, ellipsis_p = false, avoid_cursor_p = false, dp = 0xaeda8e0, dpvec = 0x0, dpend = 0xaeda8e0, dpvec_char_len = 232794648, dpvec_face_id = 0, saved_face_id = -14064, ctl_chars = {4561936, 1, 1, 0, 232794653, 232794653, 232794648, 232793672, 0, 36, 0, 0, 36, 0, 0, 0}, start = {pos = {charpos = 0, bytepos = 0}, overlay_string_index = 0, string_pos = {charpos = 0, bytepos = 0}, dpvec_index = 0}, current = {pos = {charpos = 0, bytepos = 0}, overlay_string_index = 0, string_pos = {charpos = 0, bytepos = 0}, dpvec_index = 0}, n_overlay_strings = 0, overlay_strings_charpos = 0, overlay_strings = {0, 0, 0, 0, 0, 0, 0, 0, 36, 36, -1, -1, -1, 4294967295, 36, 36}, string_overlays = {-1, -1, -1, 4294967295, 0, 36, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, string = 0, from_overlay = 0, stack = {{string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0, prev_stop = 0, base_level_stop = 0, cmp_it = {stop_pos = 0, id = 0, ch = 0, rule_idx = 0, lookback = 0, nglyphs = 0, reversed_p = false, charpos = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0}, face_id = 0, u = {image = {object = 0, slice = {x = 0, y = 0, width = 0, height = 12885874}, image_id = 0}, comp = {object = 0}, stretch = {object = 0}}, position = {charpos = 0, bytepos = 0}, current = {pos = {charpos = 0, bytepos = 0}, overlay_string_index = 0, string_pos = {charpos = 0, bytepos = 0}, dpvec_index = 0}, from_overlay = 0, area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, paragraph_embedding = NEUTRAL_DIR, multibyte_p = false, string_from_display_prop_p = false, string_from_prefix_prop_p = false, display_ellipsis_p = false, avoid_cursor_p = false, bidi_p = false, from_disp_prop_p = false, line_wrap = TRUNCATE, voffset = 0, space_width = 0, font_height = 0}, {string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0, prev_stop = 0, base_level_stop = 0, cmp_it = {stop_pos = 0, id = 0, ch = 0, rule_idx = 0, lookback = 0, nglyphs = 0, reversed_p = false, charpos = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0}, face_id = 0, u = {image = {object = 0, slice = {x = 0, y = 0, width = 0, height = 0}, image_id = 0}, comp = {object = 0}, stretch = {object = 0}}, position = {charpos = 0, bytepos = 0}, current = {pos = {charpos = 0, bytepos = 0}, overlay_string_index = 0, string_pos = {charpos = 0, bytepos = 0}, dpvec_index = 0}, from_overlay = 0, area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, paragraph_embedding = NEUTRAL_DIR, multibyte_p = false, string_from_display_prop_p = false, string_from_prefix_prop_p = false, display_ellipsis_p = false, avoid_cursor_p = false, bidi_p = false, from_disp_prop_p = false, line_wrap = TRUNCATE, voffset = 0, space_width = 0, font_height = 0}, {string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0, prev_stop = 0, base_level_stop = 0, cmp_it = {stop_pos = 0, id = 0, ch = 0, rule_idx = 0, lookback = 0, nglyphs = 0, reversed_p = false, charpos = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0}, face_id = 0, u = {image = {object = 0, slice = {x = 0, y = 0, width = 0, height = 0}, image_id = 0}, comp = {object = 0}, stretch = {object = 0}}, position = {charpos = 0, bytepos = 0}, current = {pos = {charpos = 0, bytepos = 0}, overlay_string_index = 0, string_pos = {charpos = 0, bytepos = 0}, dpvec_index = 0}, from_overlay = 0, area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, paragraph_embedding = NEUTRAL_DIR, multibyte_p = false, string_from_display_prop_p = false, string_from_prefix_prop_p = false, display_ellipsis_p = false, avoid_cursor_p = false, bidi_p = false, from_disp_prop_p = false, line_wrap = TRUNCATE, voffset = 0, space_width = 0, font_height = 0}, {string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0, prev_stop = 0, base_level_stop = 0, cmp_it = {stop_pos = 0, id = 0, ch = 0, rule_idx = 0, lookback = 0, nglyphs = 0, reversed_p = false, charpos = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0}, face_id = 0, u = {image = {object = 0, slice = {x = 0, y = 0, width = 0, height = 0}, image_id = 0}, comp = {object = 0}, stretch = {object = 0}}, position = {charpos = 0, bytepos = 0}, current = {pos = {charpos = 0, bytepos = 0}, overlay_string_index = 0, string_pos = {charpos = 0, bytepos = 0}, dpvec_index = 0}, from_overlay = 0, area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, paragraph_embedding = NEUTRAL_DIR, multibyte_p = false, string_from_display_prop_p = false, string_from_prefix_prop_p = false, display_ellipsis_p = false, avoid_cursor_p = false, bidi_p = false, from_disp_prop_p = false, line_wrap = TRUNCATE, voffset = 0, space_width = 0, font_height = 0}, {string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0, prev_stop = 0, base_level_stop = 0, cmp_it = {stop_pos = 0, id = 0, ch = 0, rule_idx = 0, lookback = 0, nglyphs = 0, reversed_p = false, charpos = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0}, face_id = 0, u = {image = {object = 0, slice = {x = 0, y = 0, width = 0, height = 0}, image_id = 0}, comp = {object = 0}, stretch = {object = 0}}, position = {charpos = 0, bytepos = 0}, current = {pos = {charpos = 0, bytepos = 0}, overlay_string_index = 0, string_pos = {charpos = 0, bytepos = 0}, dpvec_index = 0}, from_overlay = 0, area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, paragraph_embedding = NEUTRAL_DIR, multibyte_p = false, string_from_display_prop_p = false, string_from_prefix_prop_p = false, display_ellipsis_p = false, avoid_cursor_p = false, bidi_p = false, from_disp_prop_p = false, line_wrap = TRUNCATE, voffset = 0, space_width = 0, font_height = 0}}, sp = 0, selective = 0, what = IT_CHARACTER, face_id = 0, selective_display_ellipsis_p = false, ctl_arrow_p = false, face_box_p = false, start_of_box_run_p = false, end_of_box_run_p = false, overlay_strings_at_end_processed_p = false, ignore_overlay_strings_at_pos_p = false, glyph_not_available_p = false, starts_in_middle_of_char_p = false, face_before_selective_p = false, constrain_row_ascent_descent_p = false, line_wrap = TRUNCATE, base_face_id = 0, c = 0, len = 0, cmp_it = {stop_pos = 0, id = 0, ch = 0, rule_idx = 0, lookback = 0, nglyphs = 0, reversed_p = false, charpos = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0}, char_to_display = 0, glyphless_method = GLYPHLESS_DISPLAY_THIN_SPACE, image_id = 0, slice = {x = 0, y = 0, width = 0, height = 0}, space_width = 0, voffset = 0, tab_width = 0, font_height = 0, object = 5, position = {charpos = 8589934627, bytepos = 150323855360}, truncation_pixel_width = 1, continuation_pixel_width = 0, first_visible_x = 0, last_visible_x = 36, last_visible_y = 0, extra_line_spacing = -1, max_extra_line_spacing = -1, override_ascent = -2, override_descent = 0, override_boff = 0, glyph_row = 0x0, area = LEFT_MARGIN_AREA, nglyphs = 0, pixel_width = 0, ascent = 0, descent = 0, max_ascent = 0, max_descent = 0, phys_ascent = 0, phys_descent = 35, max_phys_ascent = 0, max_phys_descent = 0, current_x = 0, continuation_lines_width = 12885874, eol_pos = {charpos = 12885874, bytepos = 12885874}, current_y = 12885874, first_vpos = 0, vpos = 12885874, hpos = 0, left_user_fringe_bitmap = 0, right_user_fringe_bitmap = 8, left_user_fringe_face_id = 0, right_user_fringe_face_id = 302962, bidi_p = false, bidi_it = {bytepos = 14930293, charpos = 36, ch = 36, nchars = 589824, ch_len = 81604380514, type = UNKNOWN_BT, type_after_w1 = UNKNOWN_BT, orig_type = 4294967295, resolved_level = 0, invalid_levels = 0, invalid_rl_levels = 0, prev = {bytepos = 183347680, charpos = 4294967297, type = LRO, type_after_w1 = FSI, orig_type = WEAK_AN}, last_strong = {bytepos = 0, charpos = 0, type = UNKNOWN_BT, type_after_w1 = UNKNOWN_BT, orig_type = UNKNOWN_BT}, next_for_neutral = {bytepos = 0, charpos = 0, type = WEAK_CS, type_after_w1 = UNKNOWN_BT, orig_type = STRONG_L}, prev_for_neutral = {bytepos = 0, charpos = 0, type = UNKNOWN_BT, type_after_w1 = UNKNOWN_BT, orig_type = UNKNOWN_BT}, next_for_ws = {bytepos = 0, charpos = 0, type = UNKNOWN_BT, type_after_w1 = UNKNOWN_BT, orig_type = UNKNOWN_BT}, next_en_pos = 0, next_en_type = UNKNOWN_BT, ignore_bn_limit = 0, sor = NEUTRAL_DIR, scan_dir = 0, disp_pos = 0, disp_prop = 0, stack_idx = 0, level_stack = {{level = 0, override = NEUTRAL_DIR} <repeats 42 times>, {level = 12646576, override = NEUTRAL_DIR}, {level = -14416, override = (L2R | R2L | unknown: 32764)}, {level = 5936208, override = NEUTRAL_DIR}, {level = 0, override = NEUTRAL_DIR}, {level = 12646576, override = NEUTRAL_DIR}, {level = 0, override = (L2R | unknown: 4)}, {level = 515945504, override = NEUTRAL_DIR}, {level = -14448, override = (L2R | R2L | unknown: 32764)}, {level = 515945509, override = NEUTRAL_DIR}, {level = 5, override = NEUTRAL_DIR}, {level = 5, override = NEUTRAL_DIR}, {level = -14416, override = (L2R | R2L | unknown: 32764)}, {level = 5604381, override = NEUTRAL_DIR}, {level = 579575846, override = NEUTRAL_DIR}, {level = 579575846, override = (R2L | unknown: 4)}, {level = 12979840, override = NEUTRAL_DIR}, {level = -14360, override = (L2R | R2L | unknown: 32764)}, {level = 5429516, override = NEUTRAL_DIR}, {level = 12646576, override = (R2L | unknown: 4)}, {level = 12979845, override = NEUTRAL_DIR}, {level = 12570032, override = NEUTRAL_DIR}, {level = -14256, override = (L2R | R2L | unknown: 32764)}}, string = {lstring = 5936094, s = 0x1ec0b420 "E \003\006", schars = 12570032, bufpos = 140737488341016, from_disp_str = false, unibyte = false}, w = 0xc60e80, paragraph_dir = (unknown: 4294960112), separator_limit = 12885874, prev_was_pdf = false, first_elt = false, new_paragraph = true, frame_window_p = true}, paragraph_embedding = (unknown: 12570032)}
        current_matrix_up_to_date_p = false
        used_current_matrix_p = false
        buffer_unchanged_p = true
        temp_scroll_step = 0
        count = 5
        rc = 0
        centering_position = -1
        last_line_misfit = 0
        beg_unchanged = 1007
        end_unchanged = 0
        frame_line_height = 19
#11 0x0000000000450930 in redisplay_window_0 (window=245462429) at xdisp.c:14373
No locals.
#12 0x00000000005c2293 in internal_condition_case_1 (bfun=0x4508ee <redisplay_window_0>, arg=245462429, handlers=12855878, hfun=0x4508bd <redisplay_window_error>) at eval.c:1372
        val = 5429733
        c = 0x1426600
#13 0x000000000045089e in redisplay_windows (window=245462429) at xdisp.c:14353
        w = 0xea17598
#14 0x000000000044fb0e in redisplay_internal () at xdisp.c:13949
        gcscrollbars = true
        f = 0xde02648
        w = 0xea17598
        sw = 0xea17598
        fr = 0xde02648
        pending = 0
        must_finish = true
        match_p = true
        tlbufpos = {charpos = 1, bytepos = 1}
        tlendpos = {charpos = 0, bytepos = 0}
        number_of_visible_frames = 1
        count = 2
        sf = 0xde02648
        polling_stopped_here = 0
        tail = 590213478
        frame = 232793677
        consider_all_windows_p = true
        update_miniwindow_p = false
#15 0x000000000044df36 in redisplay () at xdisp.c:13229
No locals.
#16 0x0000000000536bc3 in read_char (commandflag=1, map=508938294, prev_event=12885874, used_mouse_menu=0x7fffffffdd9f, end_time=0x0) at keyboard.c:2571
        echo_current = false
        c = 12885874
        jmpcount = 232793672
        local_getcjmp = {{__jmpbuf = {17274582, 17087408, 140737488345664, 5937288, 17087408, 17025792, 3402895032761498368, 17025794}, __mask_was_saved = -1, __saved_mask = {__val = {17087408, 140737488345712, 5937561, 140737488345712, 17025794, 17087408, 17025792, 140737488345856, 5549996, 12885874, 2, 25782689650, 508938374, 140737488345792, 5425618, 508938422}}}}
        save_jump = {{__jmpbuf = {140737488319120, 5425618, 197398182, 197398166, 140737488319184, 5902446, 197398182, 12885874}, __mask_was_saved = -36144, __saved_mask = {__val = {5430797, 12885874, 1, 694730191, 27227848451, 515945504, 30064761288, 515945504, 140737488345560, 21480265996, 515945504, 515945509, 515945509, 5, 5, 140737488345600}}}}
        tem = 508938294
        save = 87878918
        previous_echo_area_message = 12885874
        also_record = 12885874
        reread = false
        gcpro1 = {next = 0x0, var = 0x0, nvars = 0}
        gcpro2 = {next = 0x0, var = 0x0, nvars = 0}
        polling_stopped_here = false
        orig_kboard = 0x1417d60
#17 0x0000000000542b14 in read_key_sequence (keybuf=0x7fffffffdf80, bufsize=30, prompt=12885874, dont_downcase_last=false, can_return_switch_frame=true, fix_current_buffer=true, prevent_redisplay=false) at keyboard.c:9089
        interrupted_kboard = 0x1417d60
        interrupted_frame = 0xde02648
        key = -8
        used_mouse_menu = false
        echo_local_start = 0
        last_real_key_start = 0
        keys_local_start = 0
        new_binding = 12571488
        count = 2
        t = 0
        echo_start = 0
        keys_start = 0
        current_binding = 508938294
        first_event = 12885874
        first_unbound = 31
        mock_input = 0
        fkey = {parent = 16737734, map = 16737734, start = 0, end = 0}
        keytran = {parent = 12866118, map = 12866118, start = 0, end = 0}
        indec = {parent = 16737750, map = 16737750, start = 0, end = 0}
        shift_translated = false
        delayed_switch_frame = 12885874
        original_uppercase = 12926098
        original_uppercase_position = -1
        dummyflag = false
        starting_buffer = 0x1ec0b420
        fake_prefixed_keys = 12885874
        gcpro1 = {next = 0x52d885 <BUFFER_OBJFWDP+24>, var = 0xc49f72, nvars = 140737488346672}
#18 0x0000000000534627 in command_loop_1 () at keyboard.c:1453
        cmd = 12928370
        keybuf = {577235622, 428, 3, 9258657, 12885874, 9246197, 0, 12885874, 140737488347184, 6048937, 12885874, 9258657, 105238278, 12933298, 12933298, 105238278, 9258657, 12885874, 140737488347184, 5432150, 4, 12885874, 140737488347232, 5455268, 140737488347264, 105238278, 140737488347232, 0, 140737488347344, 5455053}
        i = 1
        prev_modiff = 5552
        prev_buffer = 0x1ec0b420
        already_adjusted = false
#19 0x00000000005c211f in internal_condition_case (bfun=0x53426c <command_loop_1>, handlers=12937410, hfun=0x533b78 <cmd_error>) at eval.c:1348
        val = 21129168
        c = 0x1426160
#20 0x0000000000533fc6 in command_loop_2 (ignore=12885874) at keyboard.c:1178
        val = 0
#21 0x00000000005c1910 in internal_catch (tag=12933346, func=0x533fa0 <command_loop_2>, arg=12885874) at eval.c:1112
        val = 12885874
        c = 0x1426790
#22 0x0000000000533f74 in command_loop () at keyboard.c:1157
No locals.
#23 0x0000000000533770 in recursive_edit_1 () at keyboard.c:778
        count = 1
        val = 12885874
#24 0x00000000005338e0 in Frecursive_edit () at keyboard.c:849
        count = 0
        buffer = 12885874
#25 0x00000000005318f1 in main (argc=1, argv=0x7fffffffe3f8) at emacs.c:1642
        dummy = 140737488347824
        stack_bottom_variable = 0 '\000'
        do_initial_setlocale = true
        dumping = false
        skip_args = 0
        rlim = {rlim_cur = 8720000, rlim_max = 18446744073709551615}
        no_loadup = false
        junk = 0x0
        dname_arg = 0x0
        ch_to_dir = 0x0
        original_pwd = 0x0

The emacs binary has been built with the debugging flag added "-g". I
don't know the code base and the image cache logic well enough, but it
seems that cache_image lacks a check for the FRAME_IMAGE_CACHE macro
returning 0x0.

I will happily retry to reproduce this with further debugging info
added should that be of help.

If Emacs crashed, and you have the Emacs process in the gdb debugger,
please include the output from the following gdb commands:
    `bt full' and `xbacktrace'.
    For information about debugging Emacs, please read the file
    /usr/local/share/emacs/24.5/etc/DEBUG.

In GNU Emacs 24.5.1 (x86_64-unknown-linux-gnu, X toolkit, Xaw scroll bars)
 of 2016-02-19 on devpool28
 System Description:     Debian GNU/Linux 8.3 (jessie)

Configured using:
 `configure --enable-gnutls CFLAGS=-g'

Important settings:
  value of $LANG: en_US.UTF-8
    locale-coding-system: utf-8-unix

Major mode: Lisp Interaction

Minor modes in effect:
  tooltip-mode: t
  electric-indent-mode: t
  mouse-wheel-mode: t
  tool-bar-mode: t
  menu-bar-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t
  line-number-mode: t
  transient-mark-mode: t

Recent messages:
For information about GNU Emacs and the GNU system, type C-h C-a.
Making completion list...
user-error: Beginning of history; no preceding item [2 times]
user-error: End of history; no default available [2 times]

Load-path shadows:
None found.

Features:
(shadow sort gnus-util mail-extr emacsbug message format-spec rfc822 mml
mml-sec mm-decode mm-bodies mm-encode mail-parse rfc2231 mailabbrev
gmm-utils mailheader sendmail rfc2047 rfc2045 ietf-drums mm-util
help-fns mail-prsvr mail-utils help-mode easymenu xterm time-date
tooltip electric uniquify ediff-hook vc-hooks lisp-float-type mwheel
x-win x-dnd tool-bar dnd fontset image regexp-opt fringe tabulated-list
newcomment lisp-mode prog-mode register page menu-bar rfn-eshadow timer
select scroll-bar mouse jit-lock font-lock syntax facemenu font-core
frame cham georgian utf-8-lang misc-lang vietnamese tibetan thai
tai-viet lao korean japanese hebrew greek romanian slovak czech european
ethiopic indian cyrillic chinese case-table epa-hook jka-cmpr-hook help
simple abbrev minibuffer nadvice loaddefs button faces cus-face macroexp
files text-properties overlay sha1 md5 base64 format env code-pages mule
custom widget hashtable-print-readable backquote make-network-process
dbusbind gfilenotify dynamic-setting system-font-setting
font-render-setting x-toolkit x multi-tty emacs)

Memory information:
((conses 16 78638 5470)
 (symbols 48 18176 0)
 (miscs 40 33 91)
 (strings 32 9959 5169)
 (string-bytes 1 260923)
 (vectors 16 7920)
 (vector-slots 8 353740 23365)
 (floats 8 68 247)
 (intervals 56 174 0)
 (buffers 960 13)
 (heap 1024 24805 1668))