GNU bug report logs - #1493
23.0.60; make-frame-on-display segfaults

Previous Next

Package: emacs;

Reported by: "Oscar Fuentes" <ofv <at> wanadoo.es>

Date: Thu, 4 Dec 2008 18:15:03 UTC

Severity: normal

Merged with 4078, 5802, 8750, 11741

Found in versions 24.0.50, 24.1

Done: Chong Yidong <cyd <at> stupidchicken.com>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 1493 in the body.
You can then email your comments to 1493 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to bug-submit-list <at> lists.donarmstrong.com, Emacs Bugs <bug-gnu-emacs <at> gnu.org>:
bug#1493; Package emacs. Full text and rfc822 format available.

Acknowledgement sent to "Oscar Fuentes" <ofv <at> wanadoo.es>:
New bug report received and forwarded. Copy sent to Emacs Bugs <bug-gnu-emacs <at> gnu.org>. Full text and rfc822 format available.

Message #5 received at submit <at> emacsbugs.donarmstrong.com (full text, mbox):

From: "Oscar Fuentes" <ofv <at> wanadoo.es>
To: emacs-pretest-bug <at> gnu.org
Subject: 23.0.60; make-frame-on-display segfaults
Date: Thu, 04 Dec 2008 19:05:23 +0100
Just after executing `make-frame-on-display', emacs segfaults. This is the gdb session:

Starting program: /home/oscar/dev/other/emacs/src/emacs -Q                        
[Thread debugging using libthread_db enabled]                                     
[New Thread 0x7fea5045b770 (LWP 19420)]                                           
Xlib:  extension "RANDR" missing on display "k7:0.0".                             
Locking assertion failure.  Backtrace:                                            
#0 /usr/lib/libxcb-xlib.so.0 [0x7fea49b1e9fc]                                     
#1 /usr/lib/libxcb-xlib.so.0(xcb_xlib_lock+0x17) [0x7fea49b1eb77]                 
#2 /usr/lib/libX11.so.6 [0x7fea4c6158c0]                                          
#3 /usr/lib/libX11.so.6(XFlush+0x12) [0x7fea4c5ee092]                             
#4 /usr/lib/libgdk-x11-2.0.so.0(gdk_window_process_all_updates+0xd0) [0x7fea4fa1eb20]                                                                               
#5 /home/oscar/dev/other/emacs/src/emacs [0x4a1063]                               
#6 /home/oscar/dev/other/emacs/src/emacs [0x4a114e]                               
#7 /home/oscar/dev/other/emacs/src/emacs [0x4a1830]                               
#8 /home/oscar/dev/other/emacs/src/emacs [0x4a189d]                               
#9 /usr/lib/libX11.so.6(_XError+0xf4) [0x7fea4c60e784]                            
#10 /usr/lib/libX11.so.6(_XReply+0x243) [0x7fea4c616673]                          
#11 /usr/lib/libX11.so.6(XGetGeometry+0x8f) [0x7fea4c5f1cff]                      
#12 /usr/lib/libgdk-x11-2.0.so.0(gdk_pixmap_foreign_new_for_display+0xa0) [0x7fea4fa3eb60]                                                                          
#13 /usr/lib/gtk-2.0/2.10.0/engines/libqt4engine.so [0x7fea48cc979e]              
#14 /usr/lib/gtk-2.0/2.10.0/engines/libqt4engine.so [0x7fea48cc3021]              
#15 /usr/lib/libgtk-x11-2.0.so.0 [0x7fea4fd7b2fd]                                 
#16 /usr/lib/libgtk-x11-2.0.so.0 [0x7fea4fdb8908]                                 
#17 /usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x16d) [0x7fea4dea825d]         
#18 /usr/lib/libgobject-2.0.so.0 [0x7fea4debdc3b]                                 
#19 /usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x63a) [0x7fea4debf48a]     

(emacs:19420): GLib-GObject-CRITICAL **: g_object_unref: assertion `G_IS_OBJECT (object)' failed                                                                    

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fea5045b770 (LWP 19420)]
0x000000000044753e in redisplay_internal (
    preserve_echo_area=<value optimized out>) at xdisp.c:11799
11799                 if (FRAME_TERMINAL (f)->judge_scroll_bars_hook)
(gdb) bt
#0  0x000000000044753e in redisplay_internal (
    preserve_echo_area=<value optimized out>) at xdisp.c:11799
#1  0x00000000004dfe98 in read_char (commandflag=1, nmaps=2,
    maps=0x7fff58488d60, prev_event=10919649, used_mouse_menu=0x7fff58488e74,
    end_time=0x0) at keyboard.c:3058
#2  0x00000000004e24cd in read_key_sequence (keybuf=0x7fff58488f00, bufsize=30,
    prompt=10919649, dont_downcase_last=0, can_return_switch_frame=1,
    fix_current_buffer=1) at keyboard.c:9340
#3  0x00000000004e4338 in command_loop_1 () at keyboard.c:1621
#4  0x0000000000545c9f in internal_condition_case (
    bfun=0x4e4120 <command_loop_1>, handlers=11006817, hfun=0x4dbf30 <cmd_error>)
    at eval.c:1511
#5  0x00000000004db38e in command_loop_2 () at keyboard.c:1338
#6  0x0000000000545db7 in internal_catch (tag=<value optimized out>,
    func=0x4db370 <command_loop_2>, arg=10919649) at eval.c:1247
#7  0x00000000004dbd68 in command_loop () at keyboard.c:1317
#8  0x00000000004dc17a in recursive_edit_1 () at keyboard.c:942
#9  0x00000000004dc2f4 in Frecursive_edit () at keyboard.c:1004
#10 0x00000000004d2037 in main (argc=2, argv=0x7fff58489718) at emacs.c:1777



If Emacs crashed, and you have the Emacs process in the gdb debugger,
please include the output from the following gdb commands:
    `bt full' and `xbacktrace'.
If you would like to further debug the crash, please read the file
/home/oscar/dev/other/emacs/etc/DEBUG for instructions.


In GNU Emacs 23.0.60.2 (x86_64-unknown-linux-gnu, GTK+ Version 2.14.4)
 of 2008-12-03 on qcore
Windowing system distributor `The X.Org Foundation', version 11.0.10502000
Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: nil
  value of $LC_CTYPE: nil
  value of $LC_MESSAGES: nil
  value of $LC_MONETARY: nil
  value of $LC_NUMERIC: nil
  value of $LC_TIME: nil
  value of $LANG: en_US.UTF-8
  value of $XMODIFIERS: nil
  locale-coding-system: utf-8-unix
  default-enable-multibyte-characters: t

Major mode: Lisp Interaction

Minor modes in effect:
  tooltip-mode: t
  tool-bar-mode: t
  mouse-wheel-mode: t
  menu-bar-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  blink-cursor-mode: t
  global-auto-composition-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t
  line-number-mode: t
  transient-mark-mode: t

Recent input:
<help-echo> <help-echo> <help-echo> <help-echo> <help-echo> 
<help-echo> <help-echo> <help-echo> <help-echo> <help-echo> 
<help-echo> <help-echo> <help-echo> <help-echo> <help-echo> 
<help-echo> <help-echo> <menu-bar> <help-menu> <se
nd-emacs-bug-report>

Recent messages:
For information about GNU Emacs and the GNU system, type C-h C-a.




Information forwarded to bug-submit-list <at> lists.donarmstrong.com, Emacs Bugs <bug-gnu-emacs <at> gnu.org>:
bug#1493; Package emacs. Full text and rfc822 format available.

Acknowledgement sent to "Oscar Fuentes" <ofv <at> wanadoo.es>:
Extra info received and forwarded to list. Copy sent to Emacs Bugs <bug-gnu-emacs <at> gnu.org>. Full text and rfc822 format available.

Message #10 received at 1493 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: "Oscar Fuentes" <ofv <at> wanadoo.es>
To: 1493 <at> debbugs.gnu.org
Subject: Re: bug#1493: Acknowledgement (23.0.60; make-frame-on-display segfaults)
Date: Thu, 04 Dec 2008 20:29:05 +0100
Forgot to do a bt full and xbacktrace:

(gdb) bt full                                                        
#0  0x000000000044753e in redisplay_internal (                       
    preserve_echo_area=<value optimized out>) at xdisp.c:11799       
        f = (struct frame *) 0x3528fb0                               
        tail = 10919649                                              
        frame = 55745652                                             
        w = (struct window *) 0x3529a10                              
        pause = 0                                                    
        must_finish = 1                                              
        tlbufpos = {                                                 
  charpos = 256,                                                     
  bytepos = 0                                                        
}                                                                    
        number_of_visible_frames = 2                                 
        count = 2                                                    
        polling_stopped_here = 0                                     
        old_frame = 55742388                                         
        consider_all_windows_p = 1                                   
#1  0x00000000004dfe98 in read_char (commandflag=1, nmaps=2,         
    maps=0x7fff3c22ab00, prev_event=10919649, used_mouse_menu=0x7fff3c22ac14, 
    end_time=0x0) at keyboard.c:3058                                          
        c = 10919649                                                          
        local_getcjmp = {{                                                    
    __jmpbuf = {17219040, 6060252397380434030, 1, 1, 0, 11,                   
      -6060668096715949970, 6060251514074036334},                             
    __mask_was_saved = 0,                                                     
    __saved_mask = {                                                          
      __val = {11180833, 10919649, 11180832, 0, 5838539, 8192, 0, 0, 0, 0, 0, 0, 
        0, 0, 0, 0}                                                              
    }                                                                            
  }}                                                                             
---Type <return> to continue, or q <return> to quit---                           
        save_jump = {{                                                           
    __jmpbuf = {0, 0, 0, 0, 0, 0, 0, 0},                                         
    __mask_was_saved = 0,                                                        
    __saved_mask = {                                                             
      __val = {0 <repeats 16 times>}                                             
    }                                                                            
  }}                                                                             
        key_already_recorded = 0                                                 
        tem = 55691376                                                           
        save = 10919649                                                          
        previous_echo_area_message = 10919649                                    
        also_record = 10919649                                                   
        reread = 0                                                               
        polling_stopped_here = <value optimized out>                             
        orig_kboard = (struct kboard *) 0x351c870                                
#2  0x00000000004e24cd in read_key_sequence (keybuf=0x7fff3c22aca0, bufsize=30,  
    prompt=10919649, dont_downcase_last=0, can_return_switch_frame=1,            
    fix_current_buffer=1) at keyboard.c:9340                                     
        interrupted_kboard = (KBOARD *) 0x351c870                                
        key = 11                                                                 
        used_mouse_menu = 0                                                      
        echo_local_start = 0                                                     
        last_real_key_start = 0                                                  
        keys_local_start = 0                                                     
        local_first_binding = 0                                                  
        from_string = 10919649                                                   
        count = 2                                                                
        t = 0                                                                    
        echo_start = 0                                                           
        keys_start = 0                                                           
---Type <return> to continue, or q <return> to quit---                           
        nmaps = 2                                                                
        nmaps_allocated = 2                                                      
        defs = (Lisp_Object * volatile) 0x7fff3c22aae0                           
        submaps = (Lisp_Object * volatile) 0x7fff3c22ab00                        
        orig_local_map = 16718485                                                
        orig_keymap = 10919649                                                   
        localized_local_map = 0                                                  
        first_binding = 0                                                        
        first_unbound = 31                                                       
        mock_input = 0                                                           
        fkey = {                                                                 
  parent = 16659653,                                                             
  map = 16659653,                                                                
  start = 0,                                                                     
  end = 0                                                                        
}                                                                                
        keytran = {                                                              
  parent = 10911509,                                                             
  map = 10911509,                                                                
  start = 0,                                                                     
  end = 0                                                                        
}                                                                                
        indec = {                                                                
  parent = 16659637,                                                             
  map = 16659637,                                                                
  start = 0,                                                                     
  end = 0                                                                        
}                                                                                
        shift_translated = 0                                                     
        delayed_switch_frame = 10919649                                          
---Type <return> to continue, or q <return> to quit---                           
        original_uppercase = 0                                                   
        original_uppercase_position = -1                                         
        starting_buffer = (struct buffer *) 0xa73bd0                             
        fake_prefixed_keys = 10919649                                            
#3  0x00000000004e4338 in command_loop_1 () at keyboard.c:1621                   
        cmd = <value optimized out>                                              
        lose = <value optimized out>                                             
        nonundocount = 0                                                         
        keybuf = {16694549, -274473286657255168, 140059686639844, 8830536,       
  4611686018427389952, 4611686018427404288, 1, 0, 140734202293696, 5538683,      
  140059686695272, 4212696, 4294967296, 4294968231, 0, 140059758216024,          
  140734202293936, 2822930839, 140734202293856, 0, 140734202293880,              
  140059756040862, 0, 140734202293632, 140734202293376, 0, 140733193388033,      
  10919649, 12712161, -274473286657255168}                                       
        i = 17218976                                                             
        prev_modiff = 11                                                         
        prev_buffer = (struct buffer *) 0xa73bd0                                 
        already_adjusted = 0                                                     
#4  0x0000000000545c9f in internal_condition_case (                              
    bfun=0x4e4120 <command_loop_1>, handlers=11006817, hfun=0x4dbf30 <cmd_error>)
    at eval.c:1511                                                               
        val = <value optimized out>                                              
        c = {                                                                    
  tag = 10919649,                                                                
  val = 10919649,                                                                
  next = 0x7fff3c22af60,                                                         
  gcpro = 0x0,                                                                   
  jmp = {{                                                                       
      __jmpbuf = {0, 6060252315073640558, 11547600, 1, 1, 0,                     
        -6060668096921470866, 6060251458991683694},                              
---Type <return> to continue, or q <return> to quit---                           
      __mask_was_saved = 0,                                                      
      __saved_mask = {                                                           
        __val = {51539607552, 140059686667000, 140059758067712, 140734202293903, 
          4294967295, 52548513424, 8282192, 11547600, 1, 1, 0, 0,                
          140059756057770, 140733193388033, 0, 1760}                             
      }                                                                          
    }},                                                                          
  backlist = 0x0,                                                                
  handlerlist = 0x0,                                                             
  lisp_eval_depth = 0,                                                           
  pdlcount = 2,                                                                  
  poll_suppress_count = 1,                                                       
  interrupt_input_blocked = 0,                                                   
  byte_stack = 0x0                                                               
}                                                                                
        h = {                                                                    
  handler = 11006817,                                                            
  var = 10919649,                                                                
  chosen_clause = 10919649,                                                      
  tag = 0x7fff3c22adf0,                                                          
  next = 0x0                                                                     
}                                                                                
#5  0x00000000004db38e in command_loop_2 () at keyboard.c:1338                   
        val = 0                                                                  
#6  0x0000000000545db7 in internal_catch (tag=<value optimized out>,             
    func=0x4db370 <command_loop_2>, arg=10919649) at eval.c:1247                 
        c = {                                                                    
  tag = 10988113,                                                                
  val = 10919649,                                                                
  next = 0x0,                                                                    
---Type <return> to continue, or q <return> to quit---                           
  gcpro = 0x0,                                                                   
  jmp = {{                                                                       
      __jmpbuf = {0, 6060252315073640558, 11547600, 1, 1, 0,                     
        -6060668097005356946, 6060251458971236462},                              
      __mask_was_saved = 0,                                                      
      __saved_mask = {                                                           
        __val = {42949672970, 384, 140734202294319, 140734202294336,             
          140734202294320, 344, 94489280512, 11117016, 11339904, 11330970,       
          10959824, 11339905, 10919649, 11330968, 5465351, 11339904}             
      }
    }},
  backlist = 0x0,
  handlerlist = 0x0,
  lisp_eval_depth = 0,
  pdlcount = 2,
  poll_suppress_count = 1,
  interrupt_input_blocked = 0,
  byte_stack = 0x0
}
#7  0x00000000004dbd68 in command_loop () at keyboard.c:1317
No locals.
#8  0x00000000004dc17a in recursive_edit_1 () at keyboard.c:942
        val = <value optimized out>
#9  0x00000000004dc2f4 in Frecursive_edit () at keyboard.c:1004
        buffer = 10919649
#10 0x00000000004d2037 in main (argc=2, argv=0x7fff3c22b4b8) at emacs.c:1777
        dummy = 140059667469512
        stack_bottom_variable = 0 '\0'
        do_initial_setlocale = 1
        skip_args = 0
---Type <return> to continue, or q <return> to quit---
        rlim = {
  rlim_cur = 8720000,
  rlim_max = 18446744073709551615
}
        no_loadup = 0
        junk = 0x0
        dname_arg = 0x0
(gdb) xbacktrace
(gdb)




Information forwarded to bug-submit-list <at> lists.donarmstrong.com, Emacs Bugs <bug-gnu-emacs <at> gnu.org>:
bug#1493; Package emacs. Full text and rfc822 format available.

Acknowledgement sent to Chong Yidong <cyd <at> stupidchicken.com>:
Extra info received and forwarded to list. Copy sent to Emacs Bugs <bug-gnu-emacs <at> gnu.org>. Full text and rfc822 format available.

Message #15 received at 1493 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: Chong Yidong <cyd <at> stupidchicken.com>
To: "Oscar Fuentes" <ofv <at> wanadoo.es>
Cc: 1493 <at> debbugs.gnu.org
Subject: 23.0.60; make-frame-on-display segfaults
Date: Thu, 04 Dec 2008 23:14:03 -0500
Do you have a way to reproduce this crash?  I can't trigger it.

Looking at your backtrace, it looks like the crash is coming from deep
in xlib, so it may or may not be an Emacs bug.




Information forwarded to bug-submit-list <at> lists.donarmstrong.com, Emacs Bugs <bug-gnu-emacs <at> gnu.org>:
bug#1493; Package emacs. Full text and rfc822 format available.

Acknowledgement sent to "Oscar Fuentes" <ofv <at> wanadoo.es>:
Extra info received and forwarded to list. Copy sent to Emacs Bugs <bug-gnu-emacs <at> gnu.org>. Full text and rfc822 format available.

Message #20 received at 1493 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: "Oscar Fuentes" <ofv <at> wanadoo.es>
To: Chong Yidong <cyd <at> stupidchicken.com>
Cc: 1493 <at> debbugs.gnu.org
Subject: Re: 23.0.60; make-frame-on-display segfaults
Date: Fri, 05 Dec 2008 07:38:12 +0100
Chong Yidong <cyd <at> stupidchicken.com> writes:

> Do you have a way to reproduce this crash?  I can't trigger it.

It is as simple as

emacs -Q

M-x make-frame-on-display RET some_host:0 RET

> Looking at your backtrace, it looks like the crash is coming from deep
> in xlib, so it may or may not be an Emacs bug.

I'm using Ubuntu 8.10, which IIRC uses the latest XOrg release.

-- 
Oscar




Information forwarded to bug-submit-list <at> lists.donarmstrong.com, Emacs Bugs <bug-gnu-emacs <at> gnu.org>:
bug#1493; Package emacs. Full text and rfc822 format available.

Acknowledgement sent to Chong Yidong <cyd <at> stupidchicken.com>:
Extra info received and forwarded to list. Copy sent to Emacs Bugs <bug-gnu-emacs <at> gnu.org>. Full text and rfc822 format available.

Message #25 received at 1493 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: Chong Yidong <cyd <at> stupidchicken.com>
To: emacs-devel <at> gnu.org
Cc: "Oscar Fuentes" <ofv <at> wanadoo.es>, 1493 <at> debbugs.gnu.org
Subject: Re: 23.0.60; make-frame-on-display segfaults
Date: Sat, 06 Dec 2008 09:01:48 -0500
"Oscar Fuentes" <ofv <at> wanadoo.es> wrote:

> Just after executing `make-frame-on-display', emacs segfaults.

Can anyone reproduce this?  I currently don't have access to a computer
setup to test make-frame-on-display for remote hosts.

Oscar, could you try compiling without optimizations (CFLAGS="-g") and
gettting a backtrace again?




Information forwarded to bug-submit-list <at> lists.donarmstrong.com, Emacs Bugs <bug-gnu-emacs <at> gnu.org>:
bug#1493; Package emacs. Full text and rfc822 format available.

Acknowledgement sent to Óscar Fuentes <ofv <at> wanadoo.es>:
Extra info received and forwarded to list. Copy sent to Emacs Bugs <bug-gnu-emacs <at> gnu.org>. Full text and rfc822 format available.

Message #30 received at 1493 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: Óscar Fuentes <ofv <at> wanadoo.es>
To: Chong Yidong <cyd <at> stupidchicken.com>
Cc: emacs-devel <at> gnu.org, 1493 <at> debbugs.gnu.org
Subject: Re: 23.0.60; make-frame-on-display segfaults
Date: Sat, 06 Dec 2008 20:29:53 +0100
Chong Yidong <cyd <at> stupidchicken.com> writes:

>> Just after executing `make-frame-on-display', emacs segfaults.
>
> Can anyone reproduce this?  I currently don't have access to a computer
> setup to test make-frame-on-display for remote hosts.
>
> Oscar, could you try compiling without optimizations (CFLAGS="-g") and
> gettting a backtrace again?

Starting program: /home/oscar/dev/other/emacs/src/emacs -Q                   
[Thread debugging using libthread_db enabled]                                
[New Thread 0x7f2e60e53770 (LWP 14057)]                                      
Locking assertion failure.  Backtrace:                                       
#0 /usr/lib/libxcb-xlib.so.0 [0x7f2e5a5169fc]                                
#1 /usr/lib/libxcb-xlib.so.0(xcb_xlib_lock+0x17) [0x7f2e5a516b77]            
#2 /usr/lib/libX11.so.6 [0x7f2e5d00d8c0]                                     
#3 /usr/lib/libX11.so.6(XFlush+0x12) [0x7f2e5cfe6092]                        
#4 /usr/lib/libgdk-x11-2.0.so.0(gdk_window_process_all_updates+0xd0) [0x7f2e60416b20]                                                                               
#5 /home/oscar/dev/other/emacs/src/emacs [0x4edfa7]                               
#6 /home/oscar/dev/other/emacs/src/emacs [0x4ee2c6]                               
#7 /home/oscar/dev/other/emacs/src/emacs [0x4eea2d]                               
#8 /home/oscar/dev/other/emacs/src/emacs [0x4ee98b]                               
#9 /usr/lib/libX11.so.6(_XError+0xf4) [0x7f2e5d006784]                            
#10 /usr/lib/libX11.so.6(_XReply+0x243) [0x7f2e5d00e673]                          
#11 /usr/lib/libX11.so.6(XGetGeometry+0x8f) [0x7f2e5cfe9cff]                      
#12 /usr/lib/libgdk-x11-2.0.so.0(gdk_pixmap_foreign_new_for_display+0xa0) [0x7f2e60436b60]                                                                          
#13 /usr/lib/gtk-2.0/2.10.0/engines/libqt4engine.so [0x7f2e596c179e]              
#14 /usr/lib/gtk-2.0/2.10.0/engines/libqt4engine.so [0x7f2e596bb021]              
#15 /usr/lib/libgtk-x11-2.0.so.0 [0x7f2e607732fd]                                 
#16 /usr/lib/libgtk-x11-2.0.so.0 [0x7f2e607b0908]                                 
#17 /usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x16d) [0x7f2e5e8a025d]         
#18 /usr/lib/libgobject-2.0.so.0 [0x7f2e5e8b5c3b]                                 
#19 /usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x63a) [0x7f2e5e8b748a]     

(emacs:14057): GLib-GObject-CRITICAL **: g_object_unref: assertion `G_IS_OBJECT (object)' failed                                                                    

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7f2e60e53770 (LWP 14057)]    
0x00000000005629d9 in marker_byte_position (marker=11677457) at marker.c:823
823       if (i < BUF_BEG_BYTE (buf) || i > BUF_Z_BYTE (buf))               
(gdb) bt full                                                               
#0  0x00000000005629d9 in marker_byte_position (marker=11677457) at marker.c:823
        m = (struct Lisp_Marker *) 0xb22ee1                                     
        buf = (struct buffer *) 0x8a9463                                        
        i = 11677409                                                            
#1  0x000000000054f769 in set_buffer_internal_1 (b=0xb22ee0) at buffer.c:1904   
        old_buf = (struct buffer *) 0xb2cbd0                                    
        tail = 4294967296                                                       
        valcontents = 43328032                                                  
        tem = 0                                                                 
#2  0x000000000044bb76 in redisplay_window (window=43752452, just_this_one_p=0) 
    at xdisp.c:13292                                                            
        w = (struct window *) 0x29b9c00                                         
        f = (struct frame *) 0x29b9790                                          
        buffer = (struct buffer *) 0xb22ee0                                     
        old = (struct buffer *) 0xb2cbd0                                        
        lpoint = {charpos = 192, bytepos = 192}                                 
        opoint = {charpos = 192, bytepos = 192}                                 
        startp = {charpos = 1, bytepos = 1}                                     
        update_mode_line = 1                                                    
        tem = 0                                                                 
        it = {window = 0, w = 0x2, f = 0x2932da0, method = 4294967275,          
  stop_charpos = 1, end_charpos = 1760032800, s = 0x4320b8 "H\201Ĩ",            
  string_nchars = 0, region_beg_charpos = 0, region_end_charpos = 43752448,     
  redisplay_end_trigger_charpos = 0, multibyte_p = 0, header_line_p = 0,        
  string_from_display_prop_p = 0, ellipsis_p = 0, avoid_cursor_p = 0,           
  dp = 0x48596f, dpvec = 0x0, dpend = 0x29f3180, dpvec_char_len = 1,            
  dpvec_face_id = 1, saved_face_id = 43752448, ctl_chars = {140734953420944,    
    4338268288, 1760032752, 43751904, 0, 128, 140734953420896, 4399669,         
    140734953420832, 11677409, 43987328, 0, 4338719200, 0, 0, 4294967297},      
  start = {pos = {charpos = 43752448, bytepos = 0},                             
---Type <return> to continue, or q <return> to quit---                          
    overlay_string_index = 1760032912, string_pos = {charpos = 32767,           
      bytepos = 43300992}, dpvec_index = 0}, current = {pos = {                 
      charpos = 43987328, bytepos = 0}, overlay_string_index = 11677409,        
    string_pos = {charpos = -1, bytepos = 1}, dpvec_index = 0},                 
  n_overlay_strings = 1760034608, overlay_strings = {4513159, 43751312, 1,      
    4294967297, 43752452, 43752452, 43752448, 43751312, 4294967296, 1, 0,       
    -4294967296, 4294967295, 1, 0, 0}, string_overlays = {0, 0, 4294967295,     
    0 <repeats 13 times>}, string = 0, from_overlay = 0, stack = {{string = 0,  
      string_nchars = 1, end_charpos = 1, stop_charpos = -1, cmp_it = {         
        stop_pos = -1, id = 1, ch = 1, lookback = -1, nglyphs = -1, nchars = -1, 
        nbytes = -1, from = 0, to = 0, width = 0}, face_id = 0, u = {image = {   
          object = 0, slice = {x = 0, y = 0, width = 0, height = 0},             
          image_id = 0}, comp = {object = 0}, stretch = {object = 0}},           
      position = {charpos = 0, bytepos = 0}, current = {pos = {charpos = 0,      
          bytepos = 0}, overlay_string_index = 0, string_pos = {charpos = 0,     
          bytepos = 0}, dpvec_index = 0}, from_overlay = 0,                      
      area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, multibyte_p = 0,        
      string_from_display_prop_p = 0, display_ellipsis_p = 0,                    
      avoid_cursor_p = 0, voffset = 0, space_width = 0, font_height = 0}, {      
      string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0,          
      cmp_it = {stop_pos = 0, id = 0, ch = 0, lookback = 0, nglyphs = 0,         
        nchars = 0, nbytes = 0, from = 0, to = 0, width = 0}, face_id = 0, u = { 
        image = {object = 0, slice = {x = 0, y = 0, width = 0, height = 0},      
          image_id = 11677409}, comp = {object = 0}, stretch = {object = 0}},    
      position = {charpos = 0, bytepos = 0}, current = {pos = {charpos = 0,      
          bytepos = 0}, overlay_string_index = 0, string_pos = {charpos = 0,     
          bytepos = 0}, dpvec_index = 0}, from_overlay = 0,                      
      area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, multibyte_p = 0,        
      string_from_display_prop_p = 0, display_ellipsis_p = 0,                    
      avoid_cursor_p = 0, voffset = 0, space_width = 0, font_height = 0}, {      
---Type <return> to continue, or q <return> to quit---                           
      string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0,          
      cmp_it = {stop_pos = 0, id = 0, ch = 0, lookback = 0, nglyphs = 0,         
        nchars = 0, nbytes = 0, from = 0, to = 0, width = 0}, face_id = 0, u = { 
        image = {object = 0, slice = {x = 0, y = 0, width = 0, height = 0},      
          image_id = 0}, comp = {object = 0}, stretch = {object = 0}},           
      position = {charpos = 0, bytepos = 0}, current = {pos = {charpos = 0,      
          bytepos = 0}, overlay_string_index = 0, string_pos = {charpos = 0,     
          bytepos = 0}, dpvec_index = 0}, from_overlay = 0,                      
      area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, multibyte_p = 0,        
      string_from_display_prop_p = 0, display_ellipsis_p = 0,                    
      avoid_cursor_p = 0, voffset = 0, space_width = 0, font_height = 0}, {      
      string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0,          
      cmp_it = {stop_pos = 0, id = 0, ch = 0, lookback = 0, nglyphs = 0,         
        nchars = 0, nbytes = 0, from = 0, to = 0, width = 0}, face_id = 0, u = { 
        image = {object = 0, slice = {x = 0, y = 0, width = 0, height = 0},      
          image_id = 0}, comp = {object = 0}, stretch = {object = 0}},           
      position = {charpos = 0, bytepos = 0}, current = {pos = {charpos = 0,      
          bytepos = 0}, overlay_string_index = 0, string_pos = {charpos = 0,     
          bytepos = 0}, dpvec_index = 0}, from_overlay = 0,                      
      area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, multibyte_p = 0,        
      string_from_display_prop_p = 0, display_ellipsis_p = 0,                    
      avoid_cursor_p = 0, voffset = 0, space_width = 0, font_height = 0}},       
  sp = 0, selective = 0, what = IT_CHARACTER, face_id = 0,                       
  selective_display_ellipsis_p = 0, ctl_arrow_p = 0, face_box_p = 0,             
  start_of_box_run_p = 0, end_of_box_run_p = 0,                                  
  overlay_strings_at_end_processed_p = 0, ignore_overlay_strings_at_pos_p = 0,   
  glyph_not_available_p = 0, starts_in_middle_of_char_p = 0,                     
  face_before_selective_p = 0, constrain_row_ascent_descent_p = 0,               
  line_wrap = TRUNCATE, base_face_id = 0, c = 0, len = 0, cmp_it = {             
    stop_pos = 0, id = 0, ch = 0, lookback = 0, nglyphs = 0, nchars = 0,         
---Type <return> to continue, or q <return> to quit---                           
    nbytes = 0, from = 0, to = 0, width = 0}, char_to_display = 0, image_id = 0, 
  slice = {x = 0, y = 0, width = 0, height = 0}, space_width = 0, voffset = 0,   
  tab_width = 0, font_height = 11677505, object = 12038658, position = {         
    charpos = 0, bytepos = 0}, truncation_pixel_width = 0,                       
  continuation_pixel_width = 0, first_visible_x = 0, last_visible_x = 12042033,  
  last_visible_y = 0, extra_line_spacing = 0, max_extra_line_spacing = 0,        
  override_ascent = 0, override_descent = 0, override_boff = 0, glyph_row = 0x0, 
  area = LEFT_MARGIN_AREA, nglyphs = 1, pixel_width = 13901429, ascent = 0,      
  descent = 13901429, max_ascent = 0, max_descent = 11677505, phys_ascent = 0,   
  phys_descent = 1760034256, max_phys_ascent = 32767,                            
  max_phys_descent = 5963182, current_x = 0, continuation_lines_width = 0,       
  current_y = 0, first_vpos = 13901429, vpos = 0, hpos = 36714434,               
  left_user_fringe_bitmap = 1, right_user_fringe_bitmap = 0,                     
  left_user_fringe_face_id = 504322, right_user_fringe_face_id = 0}              
        current_matrix_up_to_date_p = 0                                          
        used_current_matrix_p = 0                                                
        buffer_unchanged_p = 0                                                   
        temp_scroll_step = 0                                                     
        count = 4                                                                
        rc = 11783090                                                            
        centering_position = -1                                                  
        last_line_misfit = 0                                                     
        beg_unchanged = 191                                                      
        end_unchanged = 0                                                        
#3  0x0000000000448491 in redisplay_window_0 (window=43752452) at xdisp.c:12240  
No locals.                                                                       
#4  0x00000000005c97cc in internal_condition_case_1 (                            
    bfun=0x448455 <redisplay_window_0>, arg=43752452, handlers=12035877,         
    hfun=0x44842a <redisplay_window_error>) at eval.c:1559                       
        val = 0                                                                  
---Type <return> to continue, or q <return> to quit---                           
        c = {tag = 11677409, val = 11677409, next = 0x7fff68e819a0, gcpro = 0x0, 
  jmp = {{__jmpbuf = {128, 5511773701653979467, 4261088, 140734953431312, 0, 0,  
        5511773610299941195, -5511542193504722613}, __mask_was_saved = 0,        
      __saved_mask = {__val = {43752452, 11677409, 17191546593, 11785617,        
          6400000, 0, 0, 0, 11677409, 43752448, 4460194, 11783090, 43752448,     
          43199908, 21480779403, 4294967296}}}}, backlist = 0x0,                 
  handlerlist = 0x7fff68e81ab0, lisp_eval_depth = 0, pdlcount = 4,               
  poll_suppress_count = 1, interrupt_input_blocked = 0, byte_stack = 0x0}        
        h = {handler = 12035877, var = 11677409, chosen_clause = 12035861,       
  tag = 0x7fff68e7ff00, next = 0x7fff68e81ab0}                                   
#5  0x000000000044840b in redisplay_windows (window=43752452) at xdisp.c:12219   
        w = (struct window *) 0x29b9c00                                          
#6  0x0000000000447589 in redisplay_internal (preserve_echo_area=0)              
    at xdisp.c:11795                                                             
        f = (struct frame *) 0x29b9790                                           
        tail = 17421957                                                          
        frame = 43751316                                                         
        w = (struct window *) 0x29b99e0                                          
        f = (struct frame *) 0x29b9790                                           
        pause = 0                                                                
        must_finish = 1                                                          
        tlbufpos = {charpos = 1, bytepos = 1}                                    
        tlendpos = {charpos = 0, bytepos = 0}                                    
        number_of_visible_frames = 2                                             
        count = 2                                                                
        count1 = 4                                                               
        sf = (struct frame *) 0x29b9790                                          
        polling_stopped_here = 0                                                 
        old_frame = 43751316                                                     
        consider_all_windows_p = 1                                               
---Type <return> to continue, or q <return> to quit---                           
#7  0x0000000000445427 in redisplay () at xdisp.c:11001                          
No locals.                                                                       
#8  0x000000000052d241 in read_char (commandflag=1, nmaps=2,                     
    maps=0x7fff68e812a0, prev_event=11677409, used_mouse_menu=0x7fff68e81668,    
    end_time=0x0) at keyboard.c:3058                                             
        c = 11677409                                                             
        count = 0                                                                
        jmpcount = 2                                                             
        local_getcjmp = {{__jmpbuf = {6669888, 5511773701180023115, 4261088,     
      140734953431312, 0, 0, 5511773702102769995, -5511542212346584757},         
    __mask_was_saved = 0, __saved_mask = {__val = {5997980, 0, 11677409,         
        11938593, 11677409, 140734953427136, 11933402, 11933402, 11933402,       
        140734953427248, 17085653, 6055006592, 11717584, 11938593, 11677409,     
        140734953427328}}}}                                                      
        save_jump = {{__jmpbuf = {0, 0, 0, 0, 0, 0, 0, 0}, __mask_was_saved = 0, 
    __saved_mask = {__val = {0 <repeats 16 times>}}}}                            
        key_already_recorded = 0                                                 
        tem = 14175313                                                           
        save = 11677409                                                          
        previous_echo_area_message = 11677409                                    
        also_record = 11677409                                                   
        reread = 0                                                               
        gcpro1 = {next = 0x7fff68e81180, var = 0x29b9794, nvars = 11677409}      
        gcpro2 = {next = 0xb62b21, var = 0xb22ee1, nvars = 0}                    
        polling_stopped_here = 0                                                 
        orig_kboard = (struct kboard *) 0x29a5150                                
#9  0x0000000000538e8e in read_key_sequence (keybuf=0x7fff68e81810, bufsize=30,  
    prompt=11677409, dont_downcase_last=0, can_return_switch_frame=1,            
    fix_current_buffer=1) at keyboard.c:9340                                     
        interrupted_kboard = (KBOARD *) 0x29a5150                                
---Type <return> to continue, or q <return> to quit---                           
        interrupted_frame = (struct frame *) 0x29b9790                           
        key = 40428656                                                           
        used_mouse_menu = 0                                                      
        echo_local_start = 0                                                     
        last_real_key_start = 0                                                  
        keys_local_start = 0                                                     
        local_first_binding = 0                                                  
        from_string = 11677409                                                   
        count = 2                                                                
        t = 0                                                                    
        echo_start = 0                                                           
        keys_start = 0                                                           
        nmaps = 2                                                                
        nmaps_allocated = 2                                                      
        defs = (Lisp_Object * volatile) 0x7fff68e81280                           
        submaps = (Lisp_Object * volatile) 0x7fff68e812a0                        
        orig_local_map = 17425205                                                
        orig_keymap = 11677409                                                   
        localized_local_map = 0                                                  
        first_binding = 0                                                        
        first_unbound = 31                                                       
        mock_input = 0                                                           
        fkey = {parent = 17392741, map = 17392741, start = 0, end = 0}           
        keytran = {parent = 11669269, map = 11669269, start = 0, end = 0}        
        indec = {parent = 17392725, map = 17392725, start = 0, end = 0}          
        shift_translated = 0                                                     
        delayed_switch_frame = 11677409                                          
        original_uppercase = 140734953428512                                     
        original_uppercase_position = -1                                         
        dummyflag = 0                                                            
---Type <return> to continue, or q <return> to quit---                           
        starting_buffer = (struct buffer *) 0xb2cbd0                             
        fake_prefixed_keys = 11677409                                            
        gcpro1 = {next = 0x0, var = 0x0, nvars = 0}                              
#10 0x00000000005293cf in command_loop_1 () at keyboard.c:1621                   
        cmd = 12036865                                                           
        lose = 0                                                                 
        nonundocount = 0                                                         
        keybuf = {17085653, 12258229, 0, 139837170870384, 27, 12951045,          
  2822930839, 139837168873558, 44108294, 23, 139837099473124, 140734953429120,   
  140734953429544, 139837099477840, 0, 140734953429296, 140734953428784, 0,      
  139837099528552, 4212880, 4294967296, 4294968231, 16134272, 139837171049304,   
  140734953429600, 2822930839, 140734953429520, 0, 140734953429544,              
  139837168874142}                                                               
        i = 1                                                                    
        prev_modiff = 11                                                         
        prev_buffer = (struct buffer *) 0xb2cbd0                                 
        already_adjusted = 0                                                     
#11 0x00000000005c9642 in internal_condition_case (                              
    bfun=0x529035 <command_loop_1>, handlers=11764577, hfun=0x52897a <cmd_error>)
    at eval.c:1511                                                               
        val = 12258229                                                           
        c = {tag = 11677409, val = 11677409, next = 0x7fff68e81b20, gcpro = 0x0, 
  jmp = {{__jmpbuf = {6669888, 5511773701431681355, 4261088, 140734953431312, 0, 
        0, 5511773701410709835, -5511542193588477621}, __mask_was_saved = 0,     
      __saved_mask = {__val = {323677304120, 139837099500280, 139837170900992,   
          4261088, 4294967295, 476741369856, 9035904, 4261088, 140734953431312,  
          0, 0, 0, 139837168891050, 139835545223169, 0, 140734953431312}}}},     
  backlist = 0x0, handlerlist = 0x0, lisp_eval_depth = 0, pdlcount = 2,          
  poll_suppress_count = 1, interrupt_input_blocked = 0, byte_stack = 0x0}        
        h = {handler = 11764577, var = 11677409, chosen_clause = 12477232,       
---Type <return> to continue, or q <return> to quit---                           
  tag = 0x7fff68e819a0, next = 0x0}                                              
#12 0x0000000000528d54 in command_loop_2 () at keyboard.c:1338                   
        val = -1099511627776
#13 0x00000000005c901e in internal_catch (tag=11745873,
    func=0x528d3a <command_loop_2>, arg=11677409) at eval.c:1247
        c = {tag = 11745873, val = 11677409, next = 0x0, gcpro = 0x0, jmp = {{
      __jmpbuf = {6669888, 5511773701521858891, 4261088, 140734953431312, 0, 0,
        5511773701494595915, -5511542193734098613}, __mask_was_saved = 0,
      __saved_mask = {__val = {5964914, 384, 11677409, 12097665, 11677409,
          8589934936, 12088730, 12088730, 12088730, 140734953430016, 5963358,
          4306842072, 11717584, 12088730, 12097665, 140734953430096}}}},
  backlist = 0x0, handlerlist = 0x0, lisp_eval_depth = 0, pdlcount = 2,
  poll_suppress_count = 1, interrupt_input_blocked = 0, byte_stack = 0x0}
#14 0x0000000000528d14 in command_loop () at keyboard.c:1317
No locals.
#15 0x00000000005284c0 in recursive_edit_1 () at keyboard.c:942
        count = 1
        val = 11677409
#16 0x0000000000528663 in Frecursive_edit () at keyboard.c:1004
        count = 0
        buffer = 11677409
#17 0x0000000000526abd in main (argc=2, argv=0x7fff68e82118) at emacs.c:1777
        dummy = 4249513
        stack_bottom_variable = 0 '\0'
        do_initial_setlocale = 1
        skip_args = 0
        rlim = {rlim_cur = 8720000, rlim_max = 18446744073709551615}
        no_loadup = 0
        junk = 0x0
        dname_arg = 0x0

-- 
Oscar




Information forwarded to bug-submit-list <at> lists.donarmstrong.com, Emacs Bugs <bug-gnu-emacs <at> gnu.org>:
bug#1493; Package emacs. Full text and rfc822 format available.

Acknowledgement sent to Óscar Fuentes <ofv <at> wanadoo.es>:
Extra info received and forwarded to list. Copy sent to Emacs Bugs <bug-gnu-emacs <at> gnu.org>. Full text and rfc822 format available.

Message #35 received at 1493 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: Óscar Fuentes <ofv <at> wanadoo.es>
To: Chong Yidong <cyd <at> stupidchicken.com>
Cc: 1493 <at> debbugs.gnu.org
Subject: Re: 23.0.60; make-frame-on-display segfaults
Date: Sun, 07 Dec 2008 04:56:29 +0100
Chong Yidong <cyd <at> stupidchicken.com> writes:

> Óscar Fuentes <ofv <at> wanadoo.es> writes:
>
>> Program received signal SIGSEGV, Segmentation fault.
>> [Switching to Thread 0x7f2e60e53770 (LWP 14057)]    
>> 0x00000000005629d9 in marker_byte_position (marker=11677457) at marker.c:823
>> 823       if (i < BUF_BEG_BYTE (buf) || i > BUF_Z_BYTE (buf))               
>> (gdb) bt full                                                               
>> #0  0x00000000005629d9 in marker_byte_position (marker=11677457) at marker.c:823
>>         m = (struct Lisp_Marker *) 0xb22ee1                                     
>>         buf = (struct buffer *) 0x8a9463                                        
>>         i = 11677409                                                            
>> #1  0x000000000054f769 in set_buffer_internal_1 (b=0xb22ee0) at buffer.c:1904   
>>         old_buf = (struct buffer *) 0xb2cbd0                                    
>>         tail = 4294967296                                                       
>>         valcontents = 43328032                                                  
>>         tem = 0                                                                 
>> #2  0x000000000044bb76 in redisplay_window (window=43752452, just_this_one_p=0) 
>>     at xdisp.c:13292                                                            
>
> In frame 0, could you do
>
> p *buf
>
> and report what the buffer structure is?

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7f7b26496770 (LWP 20004)]    
0x00000000005629d9 in marker_byte_position (marker=11677457) at marker.c:823
823       if (i < BUF_BEG_BYTE (buf) || i > BUF_Z_BYTE (buf))               
(gdb) frame 0                                                               
#0  0x00000000005629d9 in marker_byte_position (marker=11677457) at marker.c:823
823       if (i < BUF_BEG_BYTE (buf) || i > BUF_Z_BYTE (buf))                   
(gdb) p *buf                                                                    
$1 = {size = 18446742974197923840, next = 0xffffffffff, own_text = {            
    beg = 0xaa9eef0000000000 <Address 0xaa9eef0000000000 out of bounds>,        
    gpt = 1099511627776, z = -1099511627776, gpt_byte = 1099511627775,          
    z_byte = -6152219456685735936, gap_size = 24189255811072, modiff = 0,       
    chars_modiff = -256, save_modiff = -1, overlay_modiff = 255,                
    beg_unchanged = -6152244745453174784, end_unchanged = 13194139533312,       
    unchanged_modified = 0, overlay_unchanged_modified = -256,                  
    intervals = 0xffffffffff, markers = 0xaa9ec90000000000,                     
    inhibit_shrinking = 0}, text = 0xffffff0000000000, pt = 1099511627775,      
  pt_byte = -6152284327871774720, begv = 15393162788864,                        
  begv_byte = -1099511627776, zv = 1099511627775,                               
  zv_byte = -6152300820546191360, base_buffer = 0xa0000000000,                  
  local_flags = "\000\000\000\000\000��������\000\000\000\000\000\000\000\000\230\236�\000\000\000\000\000\020\000\000\000\000\000\000\000��������\000\000\000\000", modtime = -1432451328, auto_save_modified = 0, display_error_modiff = 2560,      
  auto_save_failure_time = 0, last_window_start = 1099511627775,                  
  clip_changed = 0, newline_cache = 0xf0000000000,                                
  width_run_cache = 0xffffff0000000000, prevent_redisplay_optimizations_p = 1,    
  overlays_before = 0xaa9e6c0000000000, overlays_after = 0xf0000000000,           
  overlay_center = -1099511627776, undo_list = 1099511627775,                     
  name = -6152378885871763456, filename = 17592186044416,                         
  directory = -1099511627776, backed_up = 1099511627775,                          
  save_length = -6152397577569435648, auto_save_file_name = 25288767438848,       
  read_only = -1099511627776, mark = 1099511627775,                               
  local_var_alist = -6152423965848502272, major_mode = 4398046511104,             
  mode_name = -1099511627776, mode_line_format = 1099511627775,                   
  header_line_format = -6152429463406641152, keymap = 16492674416640,             
  abbrev_table = -1099511627776, syntax_table = 1099511627775,                    
  category_table = -6152447055592685568, case_fold_search = 14293651161088,       
  tab_width = -1099511627776, fill_column = 1099511627775,
---Type <return> to continue, or q <return> to quit---
  left_margin = -6152462448755474432, auto_fill_function = 27487790694400,
  buffer_file_type = -1099511627776, downcase_table = 1099511627775,
  upcase_table = -6152491036057796608, case_canon_table = 7696581394432,
  case_eqv_table = -1099511627776, truncate_lines = 1099511627775,
  word_wrap = -6152499832150818816, ctl_arrow = 7696581394432,
  direction_reversed = -1099511627776, selective_display = 1099511627775,
  selective_display_ellipses = -6152508628243841024,
  minor_modes = 7696581394432, overwrite_mode = -1099511627776,
  abbrev_mode = 1099511627775, display_table = -6152517424336863232,
  mark_active = 6597069766656, enable_multibyte_characters = -1099511627776,
  buffer_file_coding_system = 1099511627775, file_format = -6152525120918257664,
  auto_save_file_format = 10995116277760,
  cache_long_line_scans = -1099511627776, width_table = 1099511627775,
  pt_marker = -6152537215546163200, begv_marker = 15393162788864,
  zv_marker = -1099511627776, point_before_scroll = 1099511627775,
  file_truename = -6152553708220579840, invisibility_spec = 15393162788864,
  last_selected_window = -1099511627776, display_count = 1099511627775,
  left_margin_cols = -6152570200894996480, right_margin_cols = 12094627905536,
  left_fringe_width = -1099511627776, right_fringe_width = 1099511627775,
  fringes_outside_margins = -6152583395034529792,
  scroll_bar_width = 12094627905536, vertical_scroll_bar_type = -1099511627776,
  indicate_empty_lines = 1099511627775,
  indicate_buffer_boundaries = -6152596589174063104,
  fringe_indicator_alist = 8796093022208, fringe_cursor_alist = -1099511627776,
  display_time = 1099511627775, scroll_up_aggressively = -6152606484778713088,
  scroll_down_aggressively = 6597069766656, cursor_type = -1099511627776,
  extra_line_spacing = 1099511627775,
  cursor_in_non_selected_windows = -6152614181360107520}
(gdb)

-- 
Oscar




Information forwarded to bug-submit-list <at> lists.donarmstrong.com, Emacs Bugs <bug-gnu-emacs <at> gnu.org>:
bug#1493; Package emacs. Full text and rfc822 format available.

Acknowledgement sent to Chong Yidong <cyd <at> stupidchicken.com>:
Extra info received and forwarded to list. Copy sent to Emacs Bugs <bug-gnu-emacs <at> gnu.org>. Full text and rfc822 format available.

Message #40 received at 1493 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: Chong Yidong <cyd <at> stupidchicken.com>
To: Óscar Fuentes <ofv <at> wanadoo.es>
Cc: 1493 <at> debbugs.gnu.org
Subject: Re: 23.0.60; make-frame-on-display segfaults
Date: Sun, 07 Dec 2008 12:20:05 -0500
Thanks.  What is the output from

f 2
p window
xwindow
p *w
p *f




Information forwarded to bug-submit-list <at> lists.donarmstrong.com, Emacs Bugs <bug-gnu-emacs <at> gnu.org>:
bug#1493; Package emacs. Full text and rfc822 format available.

Acknowledgement sent to Óscar Fuentes <ofv <at> wanadoo.es>:
Extra info received and forwarded to list. Copy sent to Emacs Bugs <bug-gnu-emacs <at> gnu.org>. Full text and rfc822 format available.

Message #45 received at 1493 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: Óscar Fuentes <ofv <at> wanadoo.es>
To: Chong Yidong <cyd <at> stupidchicken.com>
Cc: 1493 <at> debbugs.gnu.org
Subject: Re: 23.0.60; make-frame-on-display segfaults
Date: Sun, 07 Dec 2008 18:50:14 +0100
Chong Yidong <cyd <at> stupidchicken.com> writes:

> Thanks.  What is the output from
>
> f 2
> p window
> xwindow
> p *w
> p *f

(gdb) f 2                                                           
#2  0x000000000044bb76 in redisplay_window (window=50766436, just_this_one_p=0)
    at xdisp.c:13292                                                           
13292     set_buffer_internal_1 (XBUFFER (w->buffer));                         
(gdb) p window                                                                 
$4 = 50766436                                                                  
(gdb) x window                                                                 
0x306a264:      0x40000000                                                     
(gdb) p *w                                                                     
$5 = {size = 4611686018427392051, vec_next = 0x306a000, frame = 50763108,      
  mini_p = 11677505, next = 11677409, prev = 50765828, hchild = 11677409,      
  vchild = 11677409, parent = 11677409, left_col = 0, top_line = 312,          
  total_lines = 11875332, total_cols = 688, buffer = 11677409, start = 50292394, 
  pointm = 50292434, force_start = 11677409, optional_new_start = 11677409,      
  hscroll = 0, min_hscroll = 0, use_time = 0, sequence_number = 48,              
  temslot = 11677409, last_modified = 0, last_overlay_modified = 0,              
  last_point = 0, last_had_star = 11677409, vertical_scroll_bar = 11677409,      
  left_margin_cols = 11677409, right_margin_cols = 11677409,                     
  left_fringe_width = 11677409, right_fringe_width = 11677409,                   
  fringes_outside_margins = 11677409, scroll_bar_width = 11677409,               
  vertical_scroll_bar_type = 11677505, last_mark_x = 11677409,                   
  last_mark_y = 11677409, window_end_pos = 0, window_end_vpos = 0,               
  window_end_valid = 11677409, update_mode_line = 11677409,                      
  start_at_line_beg = 11677409, display_table = 11677409, dedicated = 11677409,  
  base_line_number = 11677409, base_line_pos = 11677409,                         
  region_showing = 11677409, column_number_displayed = 11677409,                 
  redisplay_end_trigger = 11677409, resize_proportionally = 11677409,            
  orig_total_lines = 11677409, orig_top_line = 11677409,                         
  window_parameters = 11677409, current_matrix = 0x0, desired_matrix = 0x0,      
  nrows_scale_factor = 1, ncols_scale_factor = 1, last_cursor = {x = 0, y = 0,   
    hpos = 0, vpos = 0}, cursor = {x = 0, y = 0, hpos = 0, vpos = 0},            
  phys_cursor = {x = 0, y = 0, hpos = 0, vpos = 0}, phys_cursor_type = -1,       
  phys_cursor_width = -1, phys_cursor_ascent = -520050297,                       
  phys_cursor_height = -520050041, phys_cursor_on_p = 0, cursor_off_p = 0,       
  last_cursor_off_p = 0, must_be_updated_p = 1, pseudo_window_p = 0,             
  frozen_window_start_p = 0, vscroll = 0, window_end_bytepos = 0}                
(gdb) p *f                                                                       
$6 = {size = 4611686018427388949, next = 0x3055a70, name = 14976691,             
  icon_name = 11677409, title = 11677409, focus_frame = 11677409,                
  root_window = 11677409, selected_window = 50765828,                            
  minibuffer_window = 50766436, param_alist = 12517653, scroll_bars = 11677409,  
  condemned_scroll_bars = 11677409, menu_bar_items = 50992452,                   
  face_alist = 13996101, menu_bar_vector = 51950020,                             
  buffer_predicate = 11677409, buffer_list = 17392885,                           
  buried_buffer_list = 11677409, menu_bar_window = 11677409,                     
  tool_bar_window = 11677409, tool_bar_items = 46677444,                         
  desired_tool_bar_string = 11677409, current_tool_bar_string = 11677409,        
  face_cache = 0x0, menu_bar_items_used = 5267, namebuf = 0x0,                   
  current_pool = 0x0, desired_pool = 0x0, desired_matrix = 0x0,                  
  current_matrix = 0x0, glyphs_initialized_p = 0, resized_p = 0,                 
  force_flush_display_p = 1, default_face_done_p = 1, already_hscrolled_p = 0,
  updated_p = 0, minimize_tool_bar_window_p = 0, external_tool_bar = 1,
  tool_bar_lines = 0, n_tool_bar_rows = 0, n_tool_bar_items = 14,
  decode_mode_spec_buffer = 0x30a1040 '-' <repeats 200 times>...,
  insert_line_cost = 0x0, delete_line_cost = 0x0, insert_n_lines_cost = 0x0,
  delete_n_lines_cost = 0x0, text_lines = 40, text_cols = 80, total_lines = 0,
  total_cols = 86, new_text_lines = 0, new_text_cols = 0, left_pos = 48,
  top_pos = 67, pixel_height = 600, pixel_width = 602, resx = 74.95561959654178,
  resy = 75.027692307692291, x_pixels_diff = 0, y_pixels_diff = 22,
  win_gravity = 1, size_hint_flags = 0, border_width = 2,
  internal_border_width = 0, column_width = 7, space_width = 7,
  line_height = 15, output_method = output_x_window, terminal = 0x0,
  output_data = {tty = 0x0, x = 0x0, w32 = 0x0, ns = 0x0, nothing = 0},
  font_driver_list = 0x306a820, font_data_list = 0x0, fringe_cols = 3,
  left_fringe_width = 10, right_fringe_width = 11,
  want_fullscreen = FULLSCREEN_NONE, menu_bar_lines = 0, external_menu_bar = 1,
  display_preempted = 0 '\0', visible = 0 '\0', iconified = 0 '\0',
---Type <return> to continue, or q <return> to quit---
  async_visible = 0 '\0', async_iconified = 0 '\0', garbaged = 0 '\0',
  has_minibuffer = 1 '\001', wants_modeline = 1 '\001',
  can_have_scroll_bars = 1 '\001', auto_raise = 0 '\0', auto_lower = 0 '\0',
  no_split = 0 '\0', explicit_name = 0 '\0', window_sizes_changed = 0 '\0',
  mouse_moved = 1 '\001', vertical_scroll_bar_type = vertical_scroll_bar_left,
  desired_cursor = FILLED_BOX_CURSOR, cursor_width = 0,
  blink_off_cursor = DEFAULT_CURSOR, blink_off_cursor_width = 0,
  message_buf = 0x30d8630 "`7\n\003", scroll_bottom_vpos = -1,
  config_scroll_bar_width = 16, config_scroll_bar_cols = 3,
  scroll_bar_actual_width = 21, cost_calculation_baud_rate = 19200, alpha = {-1,
    -1}, gamma = 0, extra_line_spacing = 0, background_pixel = 16777215,
  foreground_pixel = 0}


-- 
Oscar




Severity set to `serious' from `normal' Request was from Chong Yidong <cyd <at> stupidchicken.com> to control <at> emacsbugs.donarmstrong.com. (Tue, 07 Apr 2009 04:25:06 GMT) Full text and rfc822 format available.

Information forwarded to bug-submit-list <at> lists.donarmstrong.com, Emacs Bugs <bug-gnu-emacs <at> gnu.org>:
bug#1493; Package emacs. (Thu, 23 Apr 2009 04:35:03 GMT) Full text and rfc822 format available.

Acknowledgement sent to Chong Yidong <cyd <at> stupidchicken.com>:
Extra info received and forwarded to list. Copy sent to Emacs Bugs <bug-gnu-emacs <at> gnu.org>. (Thu, 23 Apr 2009 04:35:03 GMT) Full text and rfc822 format available.

Message #52 received at 1493 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: Chong Yidong <cyd <at> stupidchicken.com>
To: "Oscar Fuentes" <ofv <at> wanadoo.es>
Cc: 1493 <at> debbugs.gnu.org, Dan Nicolaescu <dann <at> ics.uci.edu>
Subject: Re: Serious bug#1493
Date: Thu, 23 Apr 2009 00:29:23 -0400
Dan Nicolaescu <dann <at> ics.uci.edu> writes:

> I can't reproduce it.
>
> From the backtrace it seems that it's using qtengine and AFAIR we've
> had bugs in the past that were actually due to qtengine, and not bugs
> in emacs.  Maybe ask the OP to try to reproduce the problem with
> another theme...

Hi Oscar,

Can you reproduce the bug you reported without qtengine?




Severity set to `normal' from `serious' Request was from Chong Yidong <cyd <at> stupidchicken.com> to control <at> emacsbugs.donarmstrong.com. (Thu, 23 Apr 2009 04:35:05 GMT) Full text and rfc822 format available.

Information forwarded to bug-submit-list <at> lists.donarmstrong.com, Emacs Bugs <bug-gnu-emacs <at> gnu.org>:
bug#1493; Package emacs. (Thu, 23 Apr 2009 11:40:03 GMT) Full text and rfc822 format available.

Acknowledgement sent to "Oscar Fuentes" <ofv <at> wanadoo.es>:
Extra info received and forwarded to list. Copy sent to Emacs Bugs <bug-gnu-emacs <at> gnu.org>. (Thu, 23 Apr 2009 11:40:03 GMT) Full text and rfc822 format available.

Message #59 received at 1493 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: "Oscar Fuentes" <ofv <at> wanadoo.es>
To: Chong Yidong <cyd <at> stupidchicken.com>
Cc: 1493 <at> debbugs.gnu.org, Dan Nicolaescu <dann <at> ics.uci.edu>
Subject: Re: Serious bug#1493
Date: Thu, 23 Apr 2009 13:31:25 +0200
Chong Yidong <cyd <at> stupidchicken.com> writes:

> Dan Nicolaescu <dann <at> ics.uci.edu> writes:
>
>> I can't reproduce it.
>>
>> From the backtrace it seems that it's using qtengine and AFAIR we've
>> had bugs in the past that were actually due to qtengine, and not bugs
>> in emacs.  Maybe ask the OP to try to reproduce the problem with
>> another theme...
>
> Can you reproduce the bug you reported without qtengine?

I'm not sure about what qtengine is, but I'll guess:

Choosing "Use my KDE style in GTK applications" on the appearance
settings, section "GTK Styles and Fonts", make-frame-on-display produces
a segfault, as reported. Choosing "Use another style: Raleigh" works
fine, except for this message on the console:

(emacs:12482): GLib-GObject-CRITICAL **: g_object_unref: assertion `G_IS_OBJECT (object)' failed

just after `delete-frame' on the frame created with `make-frame-on-display'.

I'm working on Kubuntu 8.10 x86_64 KDE 4.2.2.

Hope this helps.

-- 
Oscar




Information forwarded to bug-submit-list <at> lists.donarmstrong.com, Emacs Bugs <bug-gnu-emacs <at> gnu.org>:
bug#1493; Package emacs. (Thu, 23 Apr 2009 15:30:03 GMT) Full text and rfc822 format available.

Message #62 received at 1493 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: Dan Nicolaescu <dann <at> ics.uci.edu>
To: Oscar Fuentes <ofv <at> wanadoo.es>
Cc: 1493 <at> debbugs.gnu.org, Chong Yidong <cyd <at> stupidchicken.com>
Subject: Re: bug#1493: Serious bug#1493
Date: Thu, 23 Apr 2009 08:20:55 -0700 (PDT)
"Oscar Fuentes" <ofv <at> wanadoo.es> writes:

  > Chong Yidong <cyd <at> stupidchicken.com> writes:
  > 
  > > Dan Nicolaescu <dann <at> ics.uci.edu> writes:
  > >
  > >> I can't reproduce it.
  > >>
  > >> From the backtrace it seems that it's using qtengine and AFAIR we've
  > >> had bugs in the past that were actually due to qtengine, and not bugs
  > >> in emacs.  Maybe ask the OP to try to reproduce the problem with
  > >> another theme...
  > >
  > > Can you reproduce the bug you reported without qtengine?
  > 
  > I'm not sure about what qtengine is, but I'll guess:
  > 
  > Choosing "Use my KDE style in GTK applications" on the appearance
  > settings, section "GTK Styles and Fonts", make-frame-on-display produces
  > a segfault, as reported. Choosing "Use another style: Raleigh" works
  > fine, except for this message on the console:
  > 
  > (emacs:12482): GLib-GObject-CRITICAL **: g_object_unref: assertion `G_IS_OBJECT (object)' failed
  > 
  > just after `delete-frame' on the frame created with `make-frame-on-display'.
  > 
  > I'm working on Kubuntu 8.10 x86_64 KDE 4.2.2.

This sounds very much like a very long standing Gtk+ bug: 
http://bugzilla.gnome.org/show_bug.cgi?id=85715

we have had a few bug reports in emacs about it.

You could verify that by configuring emacs with --enable-toolkit=lucid

I think we should have a big warning in NEWS pointing to that Gtk bug
and saying that if people want to connect/disconnect to X11 display,
they'd better avoid using Gtk.





bug closed, send any further explanations to "Oscar Fuentes" <ofv <at> wanadoo.es> Request was from Chong Yidong <cyd <at> stupidchicken.com> to control <at> emacsbugs.donarmstrong.com. (Tue, 11 Aug 2009 04:55:06 GMT) Full text and rfc822 format available.

bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> emacsbugs.donarmstrong.com. (Tue, 08 Sep 2009 14:25:11 GMT) Full text and rfc822 format available.

bug unarchived. Request was from Glenn Morris <rgm <at> gnu.org> to control <at> debbugs.gnu.org. (Fri, 03 Sep 2010 18:00:03 GMT) Full text and rfc822 format available.

Merged 1493 4078 5802. Request was from Glenn Morris <rgm <at> gnu.org> to control <at> debbugs.gnu.org. (Fri, 03 Sep 2010 18:00:03 GMT) Full text and rfc822 format available.

bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Sat, 02 Oct 2010 11:24:03 GMT) Full text and rfc822 format available.

bug unarchived. Request was from Glenn Morris <rgm <at> gnu.org> to control <at> debbugs.gnu.org. (Tue, 31 May 2011 21:30:03 GMT) Full text and rfc822 format available.

Forcibly Merged 1493 4078 5802 8750. Request was from Glenn Morris <rgm <at> gnu.org> to control <at> debbugs.gnu.org. (Tue, 31 May 2011 21:30:04 GMT) Full text and rfc822 format available.

bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Wed, 29 Jun 2011 11:24:04 GMT) Full text and rfc822 format available.

bug unarchived. Request was from Glenn Morris <rgm <at> gnu.org> to control <at> debbugs.gnu.org. (Wed, 20 Jun 2012 17:15:03 GMT) Full text and rfc822 format available.

Merged 1493 4078 5802 8750 11741. Request was from Glenn Morris <rgm <at> gnu.org> to control <at> debbugs.gnu.org. (Wed, 20 Jun 2012 17:15:03 GMT) Full text and rfc822 format available.

bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Thu, 19 Jul 2012 11:24:03 GMT) Full text and rfc822 format available.

bug unarchived. Request was from Alejandro Benitez <benitezalejandrogm <at> gmail.com> to control <at> debbugs.gnu.org. (Mon, 23 Jul 2012 04:07:02 GMT) Full text and rfc822 format available.

bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Mon, 17 Sep 2012 11:24:02 GMT) Full text and rfc822 format available.

This bug report was last modified 12 years and 277 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.