Package: emacs;
Reported by: Evan Buswell <ebuswell <at> gmail.com>
Date: Sat, 28 Sep 2013 18:24:06 UTC
Severity: important
Found in version 24.3
Fixed in version 24.4
Done: Glenn Morris <rgm <at> gnu.org>
Bug is archived. No further changes may be made.
To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 15480 in the body.
You can then email your comments to 15480 AT debbugs.gnu.org in the normal way.
Toggle the display of automated, internal messages from the tracker.
View this report as an mbox folder, status mbox, maintainer mbox
bug-gnu-emacs <at> gnu.org:bug#15480; Package emacs.
(Sat, 28 Sep 2013 18:24:06 GMT) Full text and rfc822 format available.Evan Buswell <ebuswell <at> gmail.com>:bug-gnu-emacs <at> gnu.org.
(Sat, 28 Sep 2013 18:24:06 GMT) Full text and rfc822 format available.Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):
From: Evan Buswell <ebuswell <at> gmail.com> To: bug-gnu-emacs <at> gnu.org Subject: 24.3; reproducible segfault Date: Sat, 28 Sep 2013 00:15:40 -0700
[Message part 1 (text/plain, inline)]
With the attached file, ctl-space and down arrow twice and alt-w to copy
the last two lines, ctl-y on the last empty line and boom!
After I added a "})" on the end and properly indented it I could cut and
paste again as normal.
I ran a gdb bt and such but stabs were stripped, so...
Not a lot of time, but if you need more, I'll do my best.
Some stuff from emacs right before the crash:
In GNU Emacs 24.3.1 (x86_64-unknown-linux-gnu)
of 2013-04-20 on jara
Configured using:
`configure '--prefix=/usr' '--sysconfdir=/etc' '--libexecdir=/usr/lib'
'--localstatedir=/var' '--without-x' '--without-sound'
'CFLAGS=-march=x86-64 -mtune=generic -O2 -pipe -fstack-protector
--param=ssp-buffer-size=4'
'LDFLAGS=-Wl,-O1,--sort-common,--as-needed,-z,relro'
'CPPFLAGS=-D_FORTIFY_SOURCE=2''
Important settings:In GNU Emacs 24.3.1 (x86_64-unknown-linux-gnu)
of 2013-04-20 on jara
Configured using:
`configure '--prefix=/usr' '--sysconfdir=/etc' '--libexecdir=/usr/lib'
'--localstatedir=/var' '--without-x' '--without-sound'
'CFLAGS=-march=x86-64 -mtune=generic -O2 -pipe -fstack-protector
--param=ssp-buffer-size=4'
'LDFLAGS=-Wl,-O1,--sort-common,--as-needed,-z,relro'
'CPPFLAGS=-D_FORTIFY_SOURCE=2''
Important settings:
value of $LANG: en_US.utf8
locale-coding-system: utf-8-unix
default enable-multibyte-characters: t
Major mode: C/l
Minor modes in effect:
menu-bar-mode: t
file-name-shadow-mode: t
global-font-lock-mode: t
font-lock-mode: t
auto-composition-mode: t
auto-encryption-mode: t
auto-compression-mode: t
line-number-mode: t
transient-mark-mode: t
abbrev-mode: t
Recent messages:
("emacs" "compat-gcc.h")
For information about GNU Emacs and the GNU system, type C-h C-a.
compat-gcc.h has auto save data; consider M-x recover-this-file
Loading cc-langs...done
Loading vc-git...done
scroll-up-command: End of buffer [6 times]
byte-code: End of buffer [3 times]
Mark set
Making completion list...
Load-path shadows:
None found.
Features:
(shadow sort ispell gnus-util mail-extr emacsbug message idna cl-macs gv
format-spec rfc822 mml mml-sec mm-decode mm-bodies mm-encode mail-parse
rfc2231 mailabbrev gmm-utils mailheader sendmail rfc2047 rfc2045
ietf-drums mm-util mail-prsvr mail-utils help-mode vc-git cc-langs cl
cl-lib cc-mode cc-fonts easymenu cc-guess cc-menus cc-cmds cc-styles
cc-align cc-engine cc-vars cc-defs time-date derived regexp-opt
ediff-hook vc-hooks lisp-float-type tabulated-list newcomment lisp-mode
register page menu-bar rfn-eshadow timer jit-lock font-lock syntax
facemenu font-core frame cham georgian utf-8-lang misc-lang vietnamese
tibetan thai tai-viet lao korean japanese hebrew greek romanian slovak
czech european ethiopic indian cyrillic chinese case-table epa-hook
jka-cmpr-hook help simple abbrev minibuffer loaddefs button faces
cus-face macroexp files text-properties overlay sha1 md5 base64 format
env code-pages mule custom widget hashtable-print-readable backquote
make-network-process dbusbind multi-tty emacs)
[Message part 2 (text/html, inline)]
[compat-gcc.h (text/x-chdr, attachment)]
bug-gnu-emacs <at> gnu.org:bug#15480; Package emacs.
(Thu, 10 Oct 2013 21:08:02 GMT) Full text and rfc822 format available.Message #8 received at 15480 <at> debbugs.gnu.org (full text, mbox):
From: Glenn Morris <rgm <at> gnu.org> To: Evan Buswell <ebuswell <at> gmail.com> Cc: 15480 <at> debbugs.gnu.org Subject: Re: bug#15480: 24.3; reproducible segfault Date: Thu, 10 Oct 2013 17:07:41 -0400
Evan Buswell wrote:
> With the attached file, ctl-space and down arrow twice and alt-w to copy
> the last two lines, ctl-y on the last empty line and boom!
Thanks, I can reproduce this in 24.3 (although I have to add an "undo"
as a last step to get it to crash). I cannot reproduce it in the current
trunk, though, so I guess it is already fixed.
24.3 backtrace follows for reference.
Resembles http://debbugs.gnu.org/13743 ?
Program received signal SIGSEGV, Segmentation fault.
0x0000000000647ea8 in add_properties (plist=22334278, i=0x0, object=14246965)
at textprop.c:378
378 for (tail2 = i->plist; CONSP (tail2); tail2 = Fcdr (XCDR (tail2)))
(gdb) bt full
#0 0x0000000000647ea8 in add_properties (plist=22334278, i=0x0, object=
14246965) at textprop.c:378
tail1 = 22334278
tail2 = 22572470
sym1 = 13149282
val1 = 12927554
changed = 0
found = 0
gcpro1 = {
next = 0x100000001,
var = 0x7fffffff3510,
nvars = 12927554
}
gcpro2 = {
next = 0xd96430,
var = 0xcdc290,
nvars = 14246960
}
gcpro3 = {
next = 0x1011,
var = 0x1006,
nvars = 140737488303264
}
#1 0x000000000064a3e3 in Fadd_text_properties (start=16408, end=16452,
properties=22334278, object=14246965) at textprop.c:1212
i = 0x0
unchanged = 0x7fffffff4c70
s = 4102
len = 1
modified = 0
gcpro1 = {
next = 0xc54272,
var = 0xc81362,
nvars = 140737488303568
}
#2 0x000000000064a464 in Fput_text_property (start=16408, end=16452, property=
13149282, value=12927554, object=12927554) at textprop.c:1229
No locals.
#3 0x00000000005b668a in Fprimitive_undo (n=4, list=22376678) at undo.c:560
beg = 16408
end = 16452
prop = 13149282
val = 12927554
car = 12927554
cdr = 22376694
gcpro1 = {
next = 0x0,
var = 0x11d7141,
nvars = 0
}
gcpro2 = {
next = 0x52571540,
var = 0x2b9ad898,
nvars = 1381438784
}
next = 22376742
count = 12
arg = 1
oldlist = 19870182
did_apply = 0
#4 0x00000000005dd4b9 in Ffuncall (nargs=3, args=0x7fffffff37b8)
at eval.c:2781
fun = 9421869
original_fun = 13111410
funcar = 16591730
numargs = 2
lisp_numargs = 12927554
val = 22499174
backtrace = {
next = 0x7fffffff3c00,
function = 13111410,
args = 0x7fffffff37c0,
nargs = 2,
debug_on_exit = 0
}
internal_args = 0x7fffffff37c0
i = 13059394
#5 0x0000000000624bac in exec_byte_code (bytestr=10342889, vector=10342925,
maxdepth=16, args_template=12927554, nargs=0, args=0x0) at bytecode.c:900
targets = {0x628783,
0x628792,
0x628794,
0x628796,
0x628798,
0x628798,
0x628802,
0x62887c,
0x6243b1,
0x6243b3,
0x6243b5,
0x6243b7,
0x6243b9,
0x6243b9,
0x6243c2,
0x624370,
0x62486b,
0x62486d,
0x62486f,
0x624871,
0x624873,
0x624873,
0x6248bd,
0x62487c,
0x624a90,
0x624a92,
0x624a94,
0x624a96,
0x624a98,
0x624a98,
0x624a2f,
0x624a4f,
0x624b6a,
0x624b6c,
0x624b6e,
0x624b70,
0x624b72,
0x624b72,
0x624b09,
0x624b29,
0x624c4e,
0x624c50,
0x624c52,
0x624c54,
0x624c56,
0x624c56,
0x624bed,
0x624c0d,
0x628783,
0x628783,
0x628783,
0x628783,
0x628783,
0x628783,
0x628783,
0x628783,
0x625d4d,
0x625e87,
0x625eea,
0x625f4d,
0x625fb0,
0x6246ca,
0x624747,
0x626029,
0x62461d,
0x6247bd,
0x626090,
0x626106,
0x626163,
0x6261ee,
0x62624b,
0x626342,
0x626395,
0x62640b,
0x6264a1,
0x6264f4,
0x626547,
0x6265bd,
0x626633,
0x6266a9,
0x62673f,
0x62679c,
0x6267f9,
0x6268f0,
0x62698c,
0x626a28,
0x626c6d,
0x626ce3,
0x626d59,
0x626dcf,
0x626e45,
0x626ea2,
0x626f42,
0x626f9f,
0x626ffc,
0x627059,
0x627189,
0x625988,
0x6271f2,
0x627245,
0x627334,
0x62739d,
0x627406,
0x627459,
0x6274b5,
0x627511,
0x627571,
0x628783,
0x6275ce,
0x62761c,
0x62766a,
0x6276b8,
0x627706,
0x627754,
0x625988,
0x628783,
0x6277a7,
0x6277f5,
0x627848,
0x62789b,
0x627911,
0x627987,
0x6279da,
0x627c43,
0x627cb9,
0x627d2f,
0x627da5,
0x627df3,
0x628783,
0x6258a6,
0x624d29,
0x6244c5,
0x624e54,
0x624fac,
0x6250fb,
0x62580b,
0x625867,
0x6249ce,
0x62593f,
0x6259c4,
0x625a69,
0x625ab2,
0x625b2a,
0x625b80,
0x625c16,
0x625ca6,
0x624cd9,
0x627e46,
0x627edc,
0x627f2f,
0x627f82,
0x627fd5,
0x628028,
0x62809e,
0x628114,
0x62818a,
0x628200,
0x62835e,
0x6283ce,
0x62843e,
0x628491,
0x628501,
0x628571,
0x6285e0,
0x628650,
0x6270b6,
0x627113,
0x6286ad,
0x628721,
0x628783,
0x62524a,
0x62533f,
0x625473,
0x6255a7,
0x6256d9,
0x6262a8,
0x626856,
0x62729a,
0x628920,
0x62899a,
0x628783,
0x628783,
0x628a3e,
0x628783,
0x628783,
0x628783,
0x628783,
0x628783,
0x628783,
0x628783,
0x628783,
0x628783,
0x628ae1 <repeats 64 times>}
count = 11
op = 2
vectorp = 0x9dd218
stack = {
pc = 0xb65076 "\211\020?\205\036",
byte_string = 10342889,
byte_string_start = 0xb65061 "\b<\204\017",
constants = 10342925,
next = 0x7fffffff3cf0
}
top = 0x7fffffff37b8
result = 12927554
#6 0x00000000005ddea4 in funcall_lambda (fun=10342837, nargs=1, arg_vector=
0x9dd20d) at eval.c:3010
val = 16491717
syms_left = 12927554
next = 16217122
lexenv = 12927554
count = 10
i = 1
optional = false
rest = false
#7 0x00000000005dd6a1 in Ffuncall (nargs=2, args=0x7fffffff3c88)
at eval.c:2827
fun = 10342837
original_fun = 16457490
funcar = 17233442
numargs = 1
lisp_numargs = 12927554
val = 15123185
backtrace = {
next = 0x7fffffff40d0,
function = 16457490,
args = 0x7fffffff3c90,
nargs = 1,
debug_on_exit = 0
}
internal_args = 0xa
i = 1
#8 0x0000000000624bac in exec_byte_code (bytestr=10342025, vector=10342061,
maxdepth=20, args_template=12927554, nargs=0, args=0x0) at bytecode.c:900
targets = {0x628783,
0x628792,
0x628794,
0x628796,
0x628798,
0x628798,
0x628802,
0x62887c,
0x6243b1,
0x6243b3,
0x6243b5,
0x6243b7,
0x6243b9,
0x6243b9,
0x6243c2,
0x624370,
0x62486b,
0x62486d,
0x62486f,
0x624871,
0x624873,
0x624873,
0x6248bd,
0x62487c,
0x624a90,
0x624a92,
0x624a94,
0x624a96,
0x624a98,
0x624a98,
0x624a2f,
0x624a4f,
0x624b6a,
0x624b6c,
0x624b6e,
0x624b70,
0x624b72,
0x624b72,
0x624b09,
0x624b29,
0x624c4e,
0x624c50,
0x624c52,
0x624c54,
0x624c56,
0x624c56,
0x624bed,
0x624c0d,
0x628783,
0x628783,
0x628783,
0x628783,
0x628783,
0x628783,
0x628783,
0x628783,
0x625d4d,
0x625e87,
0x625eea,
0x625f4d,
0x625fb0,
0x6246ca,
0x624747,
0x626029,
0x62461d,
0x6247bd,
0x626090,
0x626106,
0x626163,
0x6261ee,
0x62624b,
0x626342,
0x626395,
0x62640b,
0x6264a1,
0x6264f4,
0x626547,
0x6265bd,
0x626633,
0x6266a9,
0x62673f,
0x62679c,
0x6267f9,
0x6268f0,
0x62698c,
0x626a28,
0x626c6d,
0x626ce3,
0x626d59,
0x626dcf,
0x626e45,
0x626ea2,
0x626f42,
0x626f9f,
0x626ffc,
0x627059,
0x627189,
0x625988,
0x6271f2,
0x627245,
0x627334,
0x62739d,
0x627406,
0x627459,
0x6274b5,
0x627511,
0x627571,
0x628783,
0x6275ce,
0x62761c,
0x62766a,
0x6276b8,
0x627706,
0x627754,
0x625988,
0x628783,
0x6277a7,
0x6277f5,
0x627848,
0x62789b,
0x627911,
0x627987,
0x6279da,
0x627c43,
0x627cb9,
0x627d2f,
0x627da5,
0x627df3,
0x628783,
0x6258a6,
0x624d29,
0x6244c5,
0x624e54,
0x624fac,
0x6250fb,
0x62580b,
0x625867,
0x6249ce,
0x62593f,
0x6259c4,
0x625a69,
0x625ab2,
0x625b2a,
0x625b80,
0x625c16,
0x625ca6,
0x624cd9,
0x627e46,
0x627edc,
0x627f2f,
0x627f82,
0x627fd5,
0x628028,
0x62809e,
0x628114,
0x62818a,
0x628200,
0x62835e,
0x6283ce,
0x62843e,
0x628491,
0x628501,
0x628571,
0x6285e0,
0x628650,
0x6270b6,
0x627113,
0x6286ad,
0x628721,
0x628783,
0x62524a,
0x62533f,
0x625473,
0x6255a7,
0x6256d9,
0x6262a8,
0x626856,
0x62729a,
0x628920,
0x62899a,
0x628783,
0x628783,
0x628a3e,
0x628783,
0x628783,
0x628783,
0x628783,
0x628783,
0x628783,
0x628783,
0x628783,
0x628783,
0x628ae1 <repeats 64 times>}
count = 6
op = 1
vectorp = 0x9dceb8
stack = {
pc = 0xb65185 "\210\016 \211\036!@É=\203ß",
byte_string = 10342025,
byte_string_start = 0xb650bb "Æ \030Ç \206\t",
constants = 10342061,
next = 0x0
}
top = 0x7fffffff3c88
result = 18051525
#9 0x00000000005ddea4 in funcall_lambda (fun=10341965, nargs=1, arg_vector=
0x9dcead) at eval.c:3010
val = 139646566613152
syms_left = 12927554
next = 16246338
lexenv = 12927554
count = 5
i = 1
optional = true
rest = false
#10 0x00000000005dd6a1 in Ffuncall (nargs=2, args=0x7fffffff41a0)
at eval.c:2827
fun = 10341965
original_fun = 16457394
funcar = 5497860
numargs = 1
lisp_numargs = 5497858
val = 0
backtrace = {
next = 0x7fffffff4420,
function = 16457394,
args = 0x7fffffff41a8,
nargs = 1,
debug_on_exit = 0
}
internal_args = 0xb66d50
i = 0
#11 0x00000000005d7efa in Fcall_interactively (function=16457394, record_flag=
12927554, keys=12962773) at callint.c:852
val = 12927554
args = 0x7fffffff41a0
visargs = 0x7fffffff4180
specs = 10321865
filter_specs = 10321865
teml = 6147579
up_event = 12927554
enable = 12927554
speccount = 3
next_event = 1
prefix_arg = 12927554
string = 0x7fffffff41c1 "P"
tem = 0x6b7e94 ""
varies = 0x7fffffff4160 ""
i = 2
nargs = 2
mark = 12927554
arg_from_tty = false
gcpro1 = {
next = 0x0,
var = 0x15626d6,
nvars = 12927554
}
gcpro2 = {
next = 0x7fffffff42a0,
var = 0xaa9725,
nvars = 20856114
}
gcpro3 = {
next = 0x0,
var = 0x13e3d32,
nvars = 2
}
gcpro4 = {
next = 0x0,
var = 0x0,
nvars = 2
}
gcpro5 = {
next = 0x0,
var = 0xc54242,
nvars = 140737488306864
}
key_count = 1
record_then_fail = false
save_this_command = 16457394
save_last_command = 16350274
save_this_original_command = 16457394
save_real_this_command = 16457394
#12 0x00000000005dd4e8 in Ffuncall (nargs=4, args=0x7fffffff44c0)
at eval.c:2785
fun = 12280717
original_fun = 13063970
funcar = 0
numargs = 3
lisp_numargs = 731653853
val = 0
backtrace = {
next = 0x0,
function = 13063970,
args = 0x7fffffff44c8,
nargs = 3,
debug_on_exit = 0
}
internal_args = 0x7fffffff44c8
i = 0
#13 0x00000000005dcee8 in call3 (fn=13063970, arg1=16457394, arg2=12927554,
arg3=12927554) at eval.c:2603
ret_ungc_val = 12927554
gcpro1 = {
next = 0x7fffffff4500,
var = 0x9dce4d,
nvars = 4
}
args = {13063970,
16457394,
12927554,
12927554}
#14 0x0000000000550b3b in Fcommand_execute (cmd=16457394, record_flag=
12927554, keys=12927554, special=12927554) at keyboard.c:10241
final = 16457394
tem = 12927554
prefixarg = 12927554
#15 0x000000000053f3ba in command_loop_1 () at keyboard.c:1587
scount = 2
cmd = 16457394
keybuf = {124,
24,
12954352,
12927554,
140737488307696,
6035305,
2822930839,
12927554,
3488983867,
2,
140737488307776,
6037691,
12927554,
13045314,
140737488307856,
13045312,
0,
12765264,
140737488307344,
0,
140737488307936,
6153666,
16329398,
2,
13045314,
12927554,
0,
0,
13045312,
12927554}
i = 1
prev_modiff = 1181
prev_buffer = 0xd96430
already_adjusted = false
#16 0x00000000005da1a3 in internal_condition_case (bfun=
0x53eb5b <command_loop_1>, handlers=12979234, hfun=0x53e463 <cmd_error>)
at eval.c:1289
val = 1
c = {
tag = 12927554,
val = 12927554,
next = 0x7fffffff48f0,
gcpro = 0x0,
jmp = {{
__jmpbuf = {2,
3941429987225596883,
4264864,
140737488309360,
0,
0,
3941429986976035795,
-3941429274858261549},
__mask_was_saved = 0,
__saved_mask = {
__val = {14505314798851290067,
253403070464,
4294967295,
0,
1,
9386280,
0,
0,
0,
0,
254401372128,
1,
0,
139637976727553,
254405547520,
26}
}
}},
backlist = 0x0,
handlerlist = 0x0,
lisp_eval_depth = 0,
pdlcount = 2,
poll_suppress_count = 1,
interrupt_input_blocked = 0,
byte_stack = 0x0
}
h = {
handler = 12979234,
var = 12927554,
chosen_clause = 12979234,
tag = 0x7fffffff4770,
next = 0x0
}
#17 0x000000000053e874 in command_loop_2 (ignore=12927554) at keyboard.c:1168
val = 2
#18 0x00000000005d9b77 in internal_catch (tag=12975074, func=
0x53e84e <command_loop_2>, arg=12927554) at eval.c:1060
c = {
tag = 12975074,
val = 12927554,
next = 0x0,
gcpro = 0x0,
jmp = {{
__jmpbuf = {2,
3941429987141710803,
4264864,
140737488309360,
0,
0,
3941429987217208275,
-3941429273054186541},
__mask_was_saved = 0,
__saved_mask = {
__val = {12927554,
140737488308704,
6036668,
4294967296,
12927554,
12927554,
13147906,
140737488308800,
140737488308808,
13147904,
2,
140737488308704,
12954352,
12317728,
13147906,
13147904}
}
}},
backlist = 0x0,
handlerlist = 0x0,
lisp_eval_depth = 0,
pdlcount = 2,
poll_suppress_count = 1,
interrupt_input_blocked = 0,
byte_stack = 0x0
}
#19 0x000000000053e826 in command_loop () at keyboard.c:1147
No locals.
#20 0x000000000053dfb0 in recursive_edit_1 () at keyboard.c:779
count = 1
val = 5497198
#21 0x000000000053e156 in Frecursive_edit () at keyboard.c:843
count = 0
buffer = 12927554
#22 0x000000000053c13d in main (argc=2, argv=0x7fffffff4c78) at emacs.c:1528
dummy = 254648793885
stack_bottom_variable = 0 '\000'
do_initial_setlocale = true
dumping = false
skip_args = 0
rlim = {
rlim_cur = 33554432,
rlim_max = 18446744073709551615
}
no_loadup = false
junk = 0x0
dname_arg = 0x0
ch_to_dir = 0x3b4a40a6ee "GOMP_STACKSIZE"
Lisp Backtrace:
"primitive-undo" (0xffff37c0)
"undo-more" (0xffff3c90)
"undo" (0xffff41a8)
"call-interactively" (0xffff44c8)
Glenn Morris <rgm <at> gnu.org>
to control <at> debbugs.gnu.org.
(Thu, 10 Oct 2013 21:09:02 GMT) Full text and rfc822 format available.Debbugs Internal Request <help-debbugs <at> gnu.org>
to internal_control <at> debbugs.gnu.org.
(Fri, 08 Nov 2013 12:24:04 GMT) Full text and rfc822 format available.
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson.