Subject: bug#15204: crash in imagemagick_compute_animated_image

From: Glenn Morris <[email-masked]>
Date: Wed, 28 Aug 2013 21:27:35 -0400

Package: emacs
Version: 24.3.50
Severity: important

Current trunk on x86_64 RHEL6 GNU/Linux, Lucid toolkit,
ImageMagick-6.5.4.7-6.el6_2.x86_64.

emacs -Q
M-x eww RET localhost RET

It contacts duckduckgo, fetches some stuff, then crashes.

#0  0x0000003a282328a5 in raise () from /lib64/libc.so.6
No symbol table info available.
#1  0x0000003a28234085 in abort () from /lib64/libc.so.6
No symbol table info available.
#2  0x0000003a2822ba1e in __assert_fail_base () from /lib64/libc.so.6
No symbol table info available.
#3  0x0000003a2822bae0 in __assert_fail () from /lib64/libc.so.6
No symbol table info available.
#4  0x0000003a37ae55e6 in PixelSetMagickColor ()
   from /usr/lib64/libMagickWand.so.2
No symbol table info available.
#5  0x0000000000651c14 in imagemagick_compute_animated_image (super_wand=
    0x196e780, ino=1) at image.c:8054
        x = 16
        source = 0x18f0490
        source_width = 32
        pixel = {
          storage_class = DirectClass, 
          colorspace = RGBColorspace, 
          matte = MagickFalse, 
          fuzz = 0, 
          depth = 16, 
          red = 65535, 
          green = 65535, 
          blue = 65535, 
          opacity = 0, 
          index = 0
        }
        sub_wand = 0x19043b0
        source_top = 0
        source_iterator = 0x199ec80
        dest_iterator = 0x1926d50
        dest = 0x193de60
        source_height = 32
        source_left = 0
        dispose = UnrecognizedDispose
        lines = 1
        i = 1
        composite_wand = 0x18d6530
        dest_width = 16
        dest_height = 16
        cache = 0x1680670
#6  0x0000000000651f0e in imagemagick_load_image (f=0x11e63a0, img=0x1905650, 
    contents=0x167b168 "", size=5430, filename=0x0) at image.c:8155
        super_wand = 0x196e780
        width = 26318710
        height = 7
        status = MagickTrue
        ximg = 0x2ffff1f10
        x = 1
        y = 0
        image_wand = 0x196e780
        iterator = 0x7fff0000000e
        pixels = 0x3
        bg_wand = 0x0
        pixel = {
          storage_class = 4294909632, 
          colorspace = 32767, 
          matte = 6069516, 
          fuzz = 6.3659588830944152e-314, 
          depth = 12706370, 
          red = 4.9406564584124654e-324, 
          green = 2.1254121136034898e-314, 
          blue = 4.9406564584124654e-324, 
          opacity = 3.3683708005209996e-316, 
          index = 6.9533558049891862e-310
        }
        image = 4
        value = 0
        crop = 0
        ino = 1
        desired_width = 0
        desired_height = 1
        rotation = 1.0822178534614581e-312
        pixelwidth = 124
        hint_buffer = 
              "/tmp/foo.ico\000\000\000\000\001\000\000\000\000\000\000\000ð\017ÿÿÿÿÿÿ\001\000\000\000\000\000\000\000#\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000#\000\000\000\000\000\000\000À\016ÿÿ\001\000\000\000\"\000\000\000\"\000\000\000\020\001\000\000\020\001\000\000\001", '\000' <repeats 23 times>, "#\000\000\000\000\000\000\000#\000\000\000\000\000\000\000`\017ÿÿÿ\177\000\000\220\025C\000\000\000\000\000\030\017ÿÿ\000\000\000\000Àæè\000\000\000\000\000\001\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000Pu\036\001\000\000\000\000ð\017ÿÿÿ\177\000\000å!é\000\000\000\000\000ÿÿÿÿÿÿÿÿà!é\000\000\000\000\000"...
        filename_hint = 0x7fffffff0e70 "/tmp/foo.ico"
#7  0x00000000006529a7 in imagemagick_load (f=0x11e63a0, img=0x1905650)
    at image.c:8445
        data = 23487105
        success_p = false
        file_name = 12706370
#8  0x0000000000648387 in lookup_image (f=0x11e63a0, spec=23327910)
    at image.c:1695
        img = 0x1905650
        hash = 3066148608898614389
#9  0x0000000000646cc5 in Fimage_metadata (spec=23327910, frame=12706370)
    at image.c:946
        f = 0x11e63a0
        id = 12144773
        img = 0xb95085
        ext = 12706370
#10 0x00000000005bcc67 in Ffuncall (nargs=2, args=0x7fffffff2168)
    at eval.c:2858
        fun = 12144773
        original_fun = 12989330
        funcar = 12706370
        numargs = 1
        lisp_numargs = 10860221
        val = 140737488298312
        internal_args = 0x7fffffff20d0
        i = 2
#11 0x00000000005fd3eb in exec_byte_code (bytestr=10860185, vector=10860221, 
    maxdepth=12, args_template=12706370, nargs=0, args=0x0) at bytecode.c:905
        targets =           {0x600d3c,
          0x600d4b,
          0x600d4d,
          0x600d4f,
          0x600d51,
          0x600d51,
          0x600dbb,
          0x600e35,
          0x5fcbf0,
          0x5fcbf2,
          0x5fcbf4,
          0x5fcbf6,
          0x5fcbf8,
          0x5fcbf8,
          0x5fcc01,
          0x5fcbaf,
          0x5fd0aa,
          0x5fd0ac,
          0x5fd0ae,
          0x5fd0b0,
          0x5fd0b2,
          0x5fd0b2,
          0x5fd0fc,
          0x5fd0bb,
          0x5fd2cf,
          0x5fd2d1,
          0x5fd2d3,
          0x5fd2d5,
          0x5fd2d7,
          0x5fd2d7,
          0x5fd26e,
          0x5fd28e,
          0x5fd3a9,
          0x5fd3ab,
          0x5fd3ad,
          0x5fd3af,
          0x5fd3b1,
          0x5fd3b1,
          0x5fd348,
          0x5fd368,
          0x5fd48d,
          0x5fd48f,
          0x5fd491,
          0x5fd493,
          0x5fd495,
          0x5fd495,
          0x5fd42c,
          0x5fd44c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x5fe50e,
          0x5fe608,
          0x5fe66b,
          0x5fe6ce,
          0x5fe735,
          0x5fcf09,
          0x5fcf86,
          0x5fe7ae,
          0x5fce5c,
          0x5fcffc,
          0x5fe815,
          0x5fe88b,
          0x5fe8de,
          0x5fe954,
          0x5fe9b1,
          0x5feaa8,
          0x5feafb,
          0x5feb71,
          0x5fec07,
          0x5fec5a,
          0x5fecad,
          0x5fed23,
          0x5fed99,
          0x5fee0f,
          0x5feea5,
          0x5fef02,
          0x5fef5f,
          0x5ff056,
          0x5ff0f2,
          0x5ff18e,
          0x5ff3df,
          0x5ff455,
          0x5ff4cb,
          0x5ff541,
          0x5ff5b7,
          0x5ff614,
          0x5ff6b4,
          0x5ff711,
          0x5ff76e,
          0x5ff7cb,
          0x5ff8fb,
          0x5fe18c,
          0x5ff968,
          0x5ff9bb,
          0x5ffaaa,
          0x5ffb17,
          0x5ffb84,
          0x5ffbd7,
          0x5ffc33,
          0x5ffc8f,
          0x5ffcf3,
          0x600d3c,
          0x5ffd50,
          0x5ffd9e,
          0x5ffdec,
          0x5ffe3a,
          0x5ffe88,
          0x5ffed6,
          0x5fe18c,
          0x600d3c,
          0x5fff29,
          0x5fff84,
          0x5fffd7,
          0x60002a,
          0x6000a0,
          0x600116,
          0x600169,
          0x600269,
          0x6002df,
          0x600355,
          0x6003cb,
          0x600419,
          0x600d3c,
          0x5fe0aa,
          0x5fd546,
          0x5fcd04,
          0x5fd671,
          0x5fd7c9,
          0x5fd918,
          0x5fe028,
          0x5fe06b,
          0x5fd20d,
          0x5fe143,
          0x5fe1c8,
          0x5fe25f,
          0x5fe2a8,
          0x5fe320,
          0x5fe376,
          0x5fe40c,
          0x5fe480,
          0x5fd4f6,
          0x60046c,
          0x600502,
          0x600555,
          0x6005a8,
          0x6005fb,
          0x60064e,
          0x6006c4,
          0x60073a,
          0x6007b0,
          0x600826,
          0x60094d,
          0x6009bd,
          0x600a2d,
          0x600a80,
          0x600af0,
          0x600b60,
          0x600bbb,
          0x600c16,
          0x5ff828,
          0x5ff885,
          0x600c73,
          0x600cda,
          0x600d3c,
          0x5fda67,
          0x5fdb5c,
          0x5fdc90,
          0x5fddc4,
          0x5fdef6,
          0x5fea0e,
          0x5fefbc,
          0x5ffa10,
          0x600ed9,
          0x600f53,
          0x600d3c,
          0x600d3c,
          0x600ff7,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x60109a <repeats 64 times>}
        count = 22
        op = 1
        vectorp = 0xa5b6c0
        stack = {
          pc = 0xaf1911 "\031Æ\tÇ\"\032Æ\tÃ\"\033\n\205(", 
          byte_string = 10860185, 
          byte_string_start = 0xaf190e "Å\b!\031Æ\tÇ\"\032Æ\tÃ\"\033\n\205(", 
          next = 0x7fffffff2690
        }
        top = 0x7fffffff2168
        result = 4
#12 0x00000000005bd63c in funcall_lambda (fun=10860125, nargs=1, arg_vector=
    0xa5b6bd) at eval.c:3089
        val = 4
        syms_left = 12706370
        next = 12972210
        lexenv = 12706370
        count = 21
        i = 1
        optional = false
        rest = false
#13 0x00000000005bce46 in Ffuncall (nargs=2, args=0x7fffffff2608)
    at eval.c:2904
        fun = 10860125
        original_fun = 21664130
        funcar = 6019347
        numargs = 1
        lisp_numargs = 12901522
        val = 12901520
        internal_args = 0xa5be05
        i = 1
#14 0x00000000005fd3eb in exec_byte_code (bytestr=10862049, vector=10862085, 
    maxdepth=36, args_template=12706370, nargs=0, args=0x0) at bytecode.c:905
        targets =           {0x600d3c,
          0x600d4b,
          0x600d4d,
          0x600d4f,
          0x600d51,
          0x600d51,
          0x600dbb,
          0x600e35,
          0x5fcbf0,
          0x5fcbf2,
          0x5fcbf4,
          0x5fcbf6,
          0x5fcbf8,
          0x5fcbf8,
          0x5fcc01,
          0x5fcbaf,
          0x5fd0aa,
          0x5fd0ac,
          0x5fd0ae,
          0x5fd0b0,
          0x5fd0b2,
          0x5fd0b2,
          0x5fd0fc,
          0x5fd0bb,
          0x5fd2cf,
          0x5fd2d1,
          0x5fd2d3,
          0x5fd2d5,
          0x5fd2d7,
          0x5fd2d7,
          0x5fd26e,
          0x5fd28e,
          0x5fd3a9,
          0x5fd3ab,
          0x5fd3ad,
          0x5fd3af,
          0x5fd3b1,
          0x5fd3b1,
          0x5fd348,
          0x5fd368,
          0x5fd48d,
          0x5fd48f,
          0x5fd491,
          0x5fd493,
          0x5fd495,
          0x5fd495,
          0x5fd42c,
          0x5fd44c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x5fe50e,
          0x5fe608,
          0x5fe66b,
          0x5fe6ce,
          0x5fe735,
          0x5fcf09,
          0x5fcf86,
          0x5fe7ae,
          0x5fce5c,
          0x5fcffc,
          0x5fe815,
          0x5fe88b,
          0x5fe8de,
          0x5fe954,
          0x5fe9b1,
          0x5feaa8,
          0x5feafb,
          0x5feb71,
          0x5fec07,
          0x5fec5a,
          0x5fecad,
          0x5fed23,
          0x5fed99,
          0x5fee0f,
          0x5feea5,
          0x5fef02,
          0x5fef5f,
          0x5ff056,
          0x5ff0f2,
          0x5ff18e,
          0x5ff3df,
          0x5ff455,
          0x5ff4cb,
          0x5ff541,
          0x5ff5b7,
          0x5ff614,
          0x5ff6b4,
          0x5ff711,
          0x5ff76e,
          0x5ff7cb,
          0x5ff8fb,
          0x5fe18c,
          0x5ff968,
          0x5ff9bb,
          0x5ffaaa,
          0x5ffb17,
          0x5ffb84,
          0x5ffbd7,
          0x5ffc33,
          0x5ffc8f,
          0x5ffcf3,
          0x600d3c,
          0x5ffd50,
          0x5ffd9e,
          0x5ffdec,
          0x5ffe3a,
          0x5ffe88,
          0x5ffed6,
          0x5fe18c,
          0x600d3c,
          0x5fff29,
          0x5fff84,
          0x5fffd7,
          0x60002a,
          0x6000a0,
          0x600116,
          0x600169,
          0x600269,
          0x6002df,
          0x600355,
          0x6003cb,
          0x600419,
          0x600d3c,
          0x5fe0aa,
          0x5fd546,
          0x5fcd04,
          0x5fd671,
          0x5fd7c9,
          0x5fd918,
          0x5fe028,
          0x5fe06b,
          0x5fd20d,
          0x5fe143,
          0x5fe1c8,
          0x5fe25f,
          0x5fe2a8,
          0x5fe320,
          0x5fe376,
          0x5fe40c,
          0x5fe480,
          0x5fd4f6,
          0x60046c,
          0x600502,
          0x600555,
          0x6005a8,
          0x6005fb,
          0x60064e,
          0x6006c4,
          0x60073a,
          0x6007b0,
          0x600826,
          0x60094d,
          0x6009bd,
          0x600a2d,
          0x600a80,
          0x600af0,
          0x600b60,
          0x600bbb,
          0x600c16,
          0x5ff828,
          0x5ff885,
          0x600c73,
          0x600cda,
          0x600d3c,
          0x5fda67,
          0x5fdb5c,
          0x5fdc90,
          0x5fddc4,
          0x5fdef6,
          0x5fea0e,
          0x5fefbc,
          0x5ffa10,
          0x600ed9,
          0x600f53,
          0x600d3c,
          0x600d3c,
          0x600ff7,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x60109a <repeats 64 times>}
        count = 18
        op = 1
        vectorp = 0xa5be08
        stack = {
          pc = 0xaf170f "\034Ë\fA\206\030", 
          byte_string = 10862049, 
          byte_string_start = 
    0xaf16ff "Æ\b\tÇ#\210È\b!\032É \033Ê\b!\034Ë\fA\206\030", 
          next = 0x7fffffff2c90
        }
        top = 0x7fffffff2608
        result = 19223749
#15 0x00000000005bd63c in funcall_lambda (fun=10861941, nargs=5, arg_vector=
    0xa5be05) at eval.c:3089
        val = 19223749
        syms_left = 12706370
        next = 17367330
        lexenv = 12706370
        count = 13
        i = 5
        optional = false
        rest = false
#16 0x00000000005bce46 in Ffuncall (nargs=6, args=0x7fffffff2ad0)
    at eval.c:2904
        fun = 10861941
        original_fun = 21664482
        funcar = 12706370
        numargs = 5
        lisp_numargs = 51539607557
        val = 26318486
        internal_args = 0x7fffffff2ad0
        i = 42949673200
#17 0x00000000005bc04a in Fapply (nargs=2, args=0x7fffffff2c30) at eval.c:2394
        i = 6
        numargs = 5
        spread_arg = 12706370
        funcall_args = 0x7fffffff2ad0
        fun = 10861941
        retval = 42960264909
        gcpro1 = {
          next = 0x5, 
          var = 0xc00fd6986, 
          nvars = 6
        }
        sa_count = 12
        sa_must_free = false
#18 0x00000000005bcb16 in Ffuncall (nargs=3, args=0x7fffffff2c28)
    at eval.c:2836
        fun = 12126653
        original_fun = 12841426
        funcar = 24
        numargs = 2
        lisp_numargs = 6019789
        val = 25918949
        internal_args = 0xa19ecd
        i = 9
#19 0x00000000005fd3eb in exec_byte_code (bytestr=10591897, vector=10591949, 
    maxdepth=16, args_template=12706370, nargs=0, args=0x0) at bytecode.c:905
        targets =           {0x600d3c,
          0x600d4b,
          0x600d4d,
          0x600d4f,
          0x600d51,
          0x600d51,
          0x600dbb,
          0x600e35,
          0x5fcbf0,
          0x5fcbf2,
          0x5fcbf4,
          0x5fcbf6,
          0x5fcbf8,
          0x5fcbf8,
          0x5fcc01,
          0x5fcbaf,
          0x5fd0aa,
          0x5fd0ac,
          0x5fd0ae,
          0x5fd0b0,
          0x5fd0b2,
          0x5fd0b2,
          0x5fd0fc,
          0x5fd0bb,
          0x5fd2cf,
          0x5fd2d1,
          0x5fd2d3,
          0x5fd2d5,
          0x5fd2d7,
          0x5fd2d7,
          0x5fd26e,
          0x5fd28e,
          0x5fd3a9,
          0x5fd3ab,
          0x5fd3ad,
          0x5fd3af,
          0x5fd3b1,
          0x5fd3b1,
          0x5fd348,
          0x5fd368,
          0x5fd48d,
          0x5fd48f,
          0x5fd491,
          0x5fd493,
          0x5fd495,
          0x5fd495,
          0x5fd42c,
          0x5fd44c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x5fe50e,
          0x5fe608,
          0x5fe66b,
          0x5fe6ce,
          0x5fe735,
          0x5fcf09,
          0x5fcf86,
          0x5fe7ae,
          0x5fce5c,
          0x5fcffc,
          0x5fe815,
          0x5fe88b,
          0x5fe8de,
          0x5fe954,
          0x5fe9b1,
          0x5feaa8,
          0x5feafb,
          0x5feb71,
          0x5fec07,
          0x5fec5a,
          0x5fecad,
          0x5fed23,
          0x5fed99,
          0x5fee0f,
          0x5feea5,
          0x5fef02,
          0x5fef5f,
          0x5ff056,
          0x5ff0f2,
          0x5ff18e,
          0x5ff3df,
          0x5ff455,
          0x5ff4cb,
          0x5ff541,
          0x5ff5b7,
          0x5ff614,
          0x5ff6b4,
          0x5ff711,
          0x5ff76e,
          0x5ff7cb,
          0x5ff8fb,
          0x5fe18c,
          0x5ff968,
          0x5ff9bb,
          0x5ffaaa,
          0x5ffb17,
          0x5ffb84,
          0x5ffbd7,
          0x5ffc33,
          0x5ffc8f,
          0x5ffcf3,
          0x600d3c,
          0x5ffd50,
          0x5ffd9e,
          0x5ffdec,
          0x5ffe3a,
          0x5ffe88,
          0x5ffed6,
          0x5fe18c,
          0x600d3c,
          0x5fff29,
          0x5fff84,
          0x5fffd7,
          0x60002a,
          0x6000a0,
          0x600116,
          0x600169,
          0x600269,
          0x6002df,
          0x600355,
          0x6003cb,
          0x600419,
          0x600d3c,
          0x5fe0aa,
          0x5fd546,
          0x5fcd04,
          0x5fd671,
          0x5fd7c9,
          0x5fd918,
          0x5fe028,
          0x5fe06b,
          0x5fd20d,
          0x5fe143,
          0x5fe1c8,
          0x5fe25f,
          0x5fe2a8,
          0x5fe320,
          0x5fe376,
          0x5fe40c,
          0x5fe480,
          0x5fd4f6,
          0x60046c,
          0x600502,
          0x600555,
          0x6005a8,
          0x6005fb,
          0x60064e,
          0x6006c4,
          0x60073a,
          0x6007b0,
          0x600826,
          0x60094d,
          0x6009bd,
          0x600a2d,
          0x600a80,
          0x600af0,
          0x600b60,
          0x600bbb,
          0x600c16,
          0x5ff828,
          0x5ff885,
          0x600c73,
          0x600cda,
          0x600d3c,
          0x5fda67,
          0x5fdb5c,
          0x5fdc90,
          0x5fddc4,
          0x5fdef6,
          0x5fea0e,
          0x5fefbc,
          0x5ffa10,
          0x600ed9,
          0x600f53,
          0x600d3c,
          0x600d3c,
          0x600ff7,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x60109a <repeats 64 times>}
        count = 10
        op = 2
        vectorp = 0xa19ed0
        stack = {
          pc = 0xb0dc80 "\210)Á\207", 
          byte_string = 10591897, 
          byte_string_start = 0xb0dc77 "rÁ\bÂH\bÃH\"\210)Á\207", 
          next = 0x7fffffff3360
        }
        top = 0x7fffffff2c28
        result = 12841426
#20 0x00000000005fc781 in Fbyte_code (bytestr=10591897, vector=10591949, 
    maxdepth=16) at bytecode.c:478
No locals.
#21 0x00000000005bb809 in eval_sub (form=10591870) at eval.c:2231
        numargs = 12
        args_left = 12706370
        i = 6276930
        maxargs = 3
        argvals =           {10591897,
          10591949,
          16,
          10591949,
          140737488302224,
          6276993,
          140737488302224,
          16}
        fun = 12135541
        val = 12545056
        original_fun = 12852706
        original_args = 10591886
        funcar = 5903644
        gcpro1 = {
          next = 0x7fffffff30c0, 
          var = 0xa19e7e, 
          nvars = 10591897
        }
        gcpro2 = {
          next = 0x7fffffff31f0, 
          var = 0x5bbbce, 
          nvars = 140737488302368
        }
        gcpro3 = {
          next = 0xa19ecd, 
          var = 0x7fffffff3030, 
          nvars = 3
        }
#22 0x00000000005b98b1 in internal_lisp_condition_case (var=16353138, bodyform=
    10591870, handlers=10591990) at eval.c:1294
        val = 12706370
        c = {
          tag = 12706370, 
          val = 12706370, 
          next = 0x7fffffff4770, 
          gcpro = 0x0, 
          jmp =             {{
              __jmpbuf =                 {12706370,
                -8424046718660888977,
                20,
                12706370,
                0,
                0,
                -8424046718612654481,
                8424046243721786991}, 
              __mask_was_saved = 0, 
              __saved_mask = {
                __val =                   {1,
                  10590821,
                  55849484645,
                  14909792,
                  140737488302712,
                  5860572,
                  14909797,
                  140737488302712,
                  14909797,
                  140737488302736,
                  5858009,
                  4,
                  14909797,
                  140737488302816,
                  5912646,
                  140737488302816}
              }
            }}, 
          handlerlist = 0x7fffffff4740, 
          lisp_eval_depth = 1, 
          pdlcount = 9, 
          poll_suppress_count = 1, 
          interrupt_input_blocked = 0, 
          byte_stack = 0x7fffffff3360
        }
        h = {
          handler = 10591990, 
          var = 16353138, 
          chosen_clause = 140737488302560, 
          tag = 0x7fffffff31c0, 
          next = 0x7fffffff4740
        }
#23 0x00000000005fe3cb in exec_byte_code (bytestr=10591601, vector=10591637, 
    maxdepth=20, args_template=12706370, nargs=0, args=0x0) at bytecode.c:1101
        handlers = 10591990
        body = 10591870
        targets =           {0x600d3c,
          0x600d4b,
          0x600d4d,
          0x600d4f,
          0x600d51,
          0x600d51,
          0x600dbb,
          0x600e35,
          0x5fcbf0,
          0x5fcbf2,
          0x5fcbf4,
          0x5fcbf6,
          0x5fcbf8,
          0x5fcbf8,
          0x5fcc01,
          0x5fcbaf,
          0x5fd0aa,
          0x5fd0ac,
          0x5fd0ae,
          0x5fd0b0,
          0x5fd0b2,
          0x5fd0b2,
          0x5fd0fc,
          0x5fd0bb,
          0x5fd2cf,
          0x5fd2d1,
          0x5fd2d3,
          0x5fd2d5,
          0x5fd2d7,
          0x5fd2d7,
          0x5fd26e,
          0x5fd28e,
          0x5fd3a9,
          0x5fd3ab,
          0x5fd3ad,
          0x5fd3af,
          0x5fd3b1,
          0x5fd3b1,
          0x5fd348,
          0x5fd368,
          0x5fd48d,
          0x5fd48f,
          0x5fd491,
          0x5fd493,
          0x5fd495,
          0x5fd495,
          0x5fd42c,
          0x5fd44c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x5fe50e,
          0x5fe608,
          0x5fe66b,
          0x5fe6ce,
          0x5fe735,
          0x5fcf09,
          0x5fcf86,
          0x5fe7ae,
          0x5fce5c,
          0x5fcffc,
          0x5fe815,
          0x5fe88b,
          0x5fe8de,
          0x5fe954,
          0x5fe9b1,
          0x5feaa8,
          0x5feafb,
          0x5feb71,
          0x5fec07,
          0x5fec5a,
          0x5fecad,
          0x5fed23,
          0x5fed99,
          0x5fee0f,
          0x5feea5,
          0x5fef02,
          0x5fef5f,
          0x5ff056,
          0x5ff0f2,
          0x5ff18e,
          0x5ff3df,
          0x5ff455,
          0x5ff4cb,
          0x5ff541,
          0x5ff5b7,
          0x5ff614,
          0x5ff6b4,
          0x5ff711,
          0x5ff76e,
          0x5ff7cb,
          0x5ff8fb,
          0x5fe18c,
          0x5ff968,
          0x5ff9bb,
          0x5ffaaa,
          0x5ffb17,
          0x5ffb84,
          0x5ffbd7,
          0x5ffc33,
          0x5ffc8f,
          0x5ffcf3,
          0x600d3c,
          0x5ffd50,
          0x5ffd9e,
          0x5ffdec,
          0x5ffe3a,
          0x5ffe88,
          0x5ffed6,
          0x5fe18c,
          0x600d3c,
          0x5fff29,
          0x5fff84,
          0x5fffd7,
          0x60002a,
          0x6000a0,
          0x600116,
          0x600169,
          0x600269,
          0x6002df,
          0x600355,
          0x6003cb,
          0x600419,
          0x600d3c,
          0x5fe0aa,
          0x5fd546,
          0x5fcd04,
          0x5fd671,
          0x5fd7c9,
          0x5fd918,
          0x5fe028,
          0x5fe06b,
          0x5fd20d,
          0x5fe143,
          0x5fe1c8,
          0x5fe25f,
          0x5fe2a8,
          0x5fe320,
          0x5fe376,
          0x5fe40c,
          0x5fe480,
          0x5fd4f6,
          0x60046c,
          0x600502,
          0x600555,
          0x6005a8,
          0x6005fb,
          0x60064e,
          0x6006c4,
          0x60073a,
          0x6007b0,
          0x600826,
          0x60094d,
          0x6009bd,
          0x600a2d,
          0x600a80,
          0x600af0,
          0x600b60,
          0x600bbb,
          0x600c16,
          0x5ff828,
          0x5ff885,
          0x600c73,
          0x600cda,
          0x600d3c,
          0x5fda67,
          0x5fdb5c,
          0x5fdc90,
          0x5fddc4,
          0x5fdef6,
          0x5fea0e,
          0x5fefbc,
          0x5ffa10,
          0x600ed9,
          0x600f53,
          0x600d3c,
          0x600d3c,
          0x600ff7,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x600d3c,
          0x60109a <repeats 64 times>}
        count = 6
        op = 143
        vectorp = 0xa19d98
        stack = {
          pc = 0xb0dcfb "\210\016\027\205\213", 
          byte_string = 10591601, 
          byte_string_start = 
    0xb0dc85 "\b\021\n\020\v\022Æ\034\v\033Ç\v!\206\026", 
          next = 0x0
        }
        top = 0x7fffffff32f8
        result = 12706370
#24 0x00000000005bd63c in funcall_lambda (fun=10591557, nargs=1, arg_vector=
    0xa19d95) at eval.c:3089
        val = 140737488303904
        syms_left = 12706370
        next = 21511906
        lexenv = 12706370
        count = 5
        i = 1
        optional = false
        rest = false
#25 0x00000000005bce46 in Ffuncall (nargs=2, args=0x7fffffff37b0)
    at eval.c:2904
        fun = 10591557
        original_fun = 12754306
        funcar = 25918944
        numargs = 1
        lisp_numargs = 5
        val = 5
        internal_args = 0x521ea246
        i = 25918944
#26 0x00000000005bc5ff in call1 (fn=12754306, arg1=14909797) at eval.c:2654
        ret_ungc_val = 1377739334
        gcpro1 = {
          next = 0xc3e860, 
          var = 0xc1e242, 
          nvars = 2
        }
        args =           {12754306,
          14909797}
#27 0x000000000052d574 in timer_check_2 (timers=26686630, idle_timers=12706370)
    at keyboard.c:4483
        count = 3
        old_deactivate_mark = 12706370
        idle_timer_ripe = false
        timer = 14909797
        timer_time = {
          tv_sec = 1377739334, 
          tv_nsec = 124080520
        }
        timer_difference = {
          tv_sec = 0, 
          tv_nsec = 67270
        }
        idle_timer_difference = {
          tv_sec = 0, 
          tv_nsec = -1
        }
        ripe = true
        idle_timer = 12706370
        idle_timer_time = {
          tv_sec = 140737488304352, 
          tv_nsec = 2
        }
        difference = {
          tv_sec = 0, 
          tv_nsec = 67270
        }
        timer_ripe = true
        nexttime = {
          tv_sec = 0, 
          tv_nsec = -1
        }
        now = {
          tv_sec = 1377739334, 
          tv_nsec = 124147790
        }
        idleness_now = {
          tv_sec = 0, 
          tv_nsec = 867274467
        }
        chosen_timer = 14909797
        gcpro1 = {
          next = 0x0, 
          var = 0xffffffffffffffff, 
          nvars = 140737488304544
        }
#28 0x000000000052d6d2 in timer_check () at keyboard.c:4550
        nexttime = {
          tv_sec = 0, 
          tv_nsec = 0
        }
        timers = 26686614
        idle_timers = 26686582
        gcpro1 = {
          next = 0x0, 
          var = 0x0, 
          nvars = 0
        }
        gcpro2 = {
          next = 0x0, 
          var = 0x0, 
          nvars = 0
        }
        tem = 12706370
#29 0x000000000052b671 in readable_events (flags=1) at keyboard.c:3426
No locals.
#30 0x0000000000531180 in get_input_pending (flags=1) at keyboard.c:6743
No locals.
#31 0x0000000000536f17 in detect_input_pending_run_timers (do_display=true)
    at keyboard.c:9894
        old_timers_run = 18
#32 0x0000000000609b99 in wait_reading_process_output (time_limit=30, nsecs=0, 
    read_kbd=-1, do_display=true, wait_for_cell=12706370, wait_proc=0x0, 
    just_wait_proc=0) at process.c:4645
        old_timers_run = 18
        old_buffer = 0x18b7de0
        old_window = 18772917
        leave = false
        timeout_reduced_for_timers = true
        channel = 1024
        nfds = 0
        Available = {
          fds_bits =             {896,
            0 <repeats 15 times>}
        }
        Writeok = {
          fds_bits =             {0 <repeats 16 times>}
        }
        check_write = true
        check_delay = 0
        no_avail = false
        xerrno = 11
        proc = 18768800
        timeout = {
          tv_sec = 0, 
          tv_nsec = 8799363
        }
        end_time = {
          tv_sec = 1377739364, 
          tv_nsec = 43608590
        }
        wait_channel = -1
        got_some_input = false
        count = 2
#33 0x000000000041eae2 in sit_for (timeout=120, reading=true, display_option=1)
    at dispnew.c:5775
        sec = 30
        nsec = 0
        do_display = true
#34 0x0000000000529f00 in read_char (commandflag=1, map=26641974, prev_event=
    12706370, used_mouse_menu=0x7fffffff43cf, end_time=0x0) at keyboard.c:2792
        tem0 = 12706418
        timeout = 30
        delay_level = 4
        buffer_size = 27
        c = 12706370
        jmpcount = 2
        local_getcjmp =           {{
            __jmpbuf =               {26641974,
              -8424046717018818961,
              4269648,
              140737488309360,
              0,
              0,
              -8424046718780426641,
              8424046320753718895}, 
            __mask_was_saved = 0, 
            __saved_mask = {
              __val =                 {12706370,
                25918944,
                16858560,
                140737488306320,
                5904990,
                21474836480,
                17559122,
                17559120,
                16858560,
                140737488306464,
                5495936,
                12706370,
                2,
                12706370,
                17085670,
                0}
            }
          }}
        save_jump =           {{
            __jmpbuf =               {0,
              0,
              0,
              0,
              0,
              0,
              0,
              0}, 
            __mask_was_saved = 0, 
            __saved_mask = {
              __val =                 {0 <repeats 16 times>}
            }
          }}
        tem = 12706370
        save = 13540630
        previous_echo_area_message = 12706370
        also_record = 12706370
        reread = false
        gcpro1 = {
          next = 0x0, 
          var = 0x0, 
          nvars = 0
        }
        gcpro2 = {
          next = 0x0, 
          var = 0x0, 
          nvars = 0
        }
        polling_stopped_here = false
        orig_kboard = 0x1513fd0
#35 0x000000000053546c in read_key_sequence (keybuf=0x7fffffff45b0, bufsize=
    30, prompt=12706370, dont_downcase_last=false, can_return_switch_frame=
    true, fix_current_buffer=true) at keyboard.c:9057
        interrupted_kboard = 0x1513fd0
        interrupted_frame = 0x11e63a0
        key = 12745749
        used_mouse_menu = false
        echo_local_start = 0
        last_real_key_start = 0
        keys_local_start = 0
        new_binding = 192
        count = 2
        t = 0
        echo_start = 0
        keys_start = 0
        current_binding = 26641974
        first_event = 12706370
        first_unbound = 31
        mock_input = 0
        fkey = {
          parent = 20681526, 
          map = 20681526, 
          start = 0, 
          end = 0
        }
        keytran = {
          parent = 12685894, 
          map = 12685894, 
          start = 0, 
          end = 0
        }
        indec = {
          parent = 20681510, 
          map = 20681510, 
          start = 0, 
          end = 0
        }
        shift_translated = false
        delayed_switch_frame = 12706370
        original_uppercase = 33
        original_uppercase_position = -1
        dummyflag = false
        starting_buffer = 0x18b7de0
        fake_prefixed_keys = 12706370
        gcpro1 = {
          next = 0x7fffffff4400, 
          var = 0x5963dd, 
          nvars = 39
        }
#36 0x0000000000526fcb in command_loop_1 () at keyboard.c:1434
        cmd = 13044450
        keybuf =           {536871392,
          5903644,
          12745744,
          12706370,
          140737488307712,
          5905133,
          12545216,
          12706370,
          5860437,
          12706370,
          140737488307792,
          5907319,
          12706370,
          12840050,
          140737488307872,
          12840048,
          4354551813,
          12545216,
          12706370,
          21961616,
          140737488307936,
          6020493,
          16093782,
          2,
          5,
          12745744,
          12545216,
          140737488307872,
          5860437,
          12706370}
        i = 1
        prev_modiff = 10
        prev_buffer = 0xc27c10
        already_adjusted = false
#37 0x00000000005b99f7 in internal_condition_case (bfun=
    0x526c14 <command_loop_1>, handlers=12765986, hfun=0x52657a <cmd_error>)
    at eval.c:1339
        val = 0
        c = {
          tag = 12706370, 
          val = 12706370, 
          next = 0x7fffffff48f0, 
          gcpro = 0x0, 
          jmp =             {{
              __jmpbuf =                 {2,
                -8424046717266282897,
                4269648,
                140737488309360,
                0,
                0,
                -8424046716941224337,
                8424046243408000623}, 
              __mask_was_saved = 0, 
              __saved_mask = {
                __val =                   {8424046243408000623,
                  0,
                  4294967295,
                  393473,
                  1,
                  9230488,
                  0,
                  0,
                  0,
                  0,
                  249772957664,
                  249108103169,
                  0,
                  82000,
                  249781327360,
                  249785020032}
              }
            }}, 
          handlerlist = 0x0, 
          lisp_eval_depth = 0, 
          pdlcount = 2, 
          poll_suppress_count = 1, 
          interrupt_input_blocked = 0, 
          byte_stack = 0x0
        }
        h = {
          handler = 12765986, 
          var = 12706370, 
          chosen_clause = 12765986, 
          tag = 0x7fffffff4770, 
          next = 0x0
        }
#38 0x0000000000526971 in command_loop_2 (ignore=12706370) at keyboard.c:1161
        val = 2
#39 0x00000000005b9441 in internal_catch (tag=12761874, func=
    0x52694b <command_loop_2>, arg=12706370) at eval.c:1113
        c = {
          tag = 12761874, 
          val = 12706370, 
          next = 0x0, 
          gcpro = 0x0, 
          jmp =             {{
              __jmpbuf =                 {2,
                -8424046717314517393,
                4269648,
                140737488309360,
                0,
                0,
                -8424046717257894289,
                8424046243838703215}, 
              __mask_was_saved = 0, 
              __saved_mask = {
                __val =                   {12706370,
                  140737488308704,
                  5906251,
                  139646566615600,
                  12706370,
                  12706370,
                  12970498,
                  25769757104,
                  12745744,
                  12970496,
                  5,
                  5,
                  12745744,
                  12162944,
                  140737488308704,
                  5860437}
              }
            }}, 
          handlerlist = 0x0, 
          lisp_eval_depth = 0, 
          pdlcount = 2, 
          poll_suppress_count = 1, 
          interrupt_input_blocked = 0, 
          byte_stack = 0x0
        }
#40 0x0000000000526923 in command_loop () at keyboard.c:1140
No locals.
#41 0x0000000000526175 in recursive_edit_1 () at keyboard.c:779
        count = 1
        val = 5399290
#42 0x00000000005262e2 in Frecursive_edit () at keyboard.c:843
        count = 0
        buffer = 12706370
#43 0x000000000052437c in main (argc=2, argv=0x7fffffff4c78) at emacs.c:1570
        dummy = 27
        stack_bottom_variable = 0 '\000'
        do_initial_setlocale = true
        dumping = false
        skip_args = 0
        rlim = {
          rlim_cur = 33554432, 
          rlim_max = 18446744073709551615
        }
        no_loadup = false
        junk = 0x0
        dname_arg = 0x0
        ch_to_dir = 0x3a27c214e0 "@\024Â':"

Lisp Backtrace:
  "image-metadata" (0xffff2170)
  "image-multi-frame-p" (0xffff2610)
  "image-animate-timeout" (0xffff2ad8)
  "apply" (0xffff2c30)
  "byte-code" (0xffff3030)
  "timer-event-handler" (0xffff37b8)