GNU bug report logs - #15688
24.3.50; clear-temporary-overlay-map

Previous Next

Package: emacs;

Reported by: rms <at> gnu.org

Date: Wed, 23 Oct 2013 00:10:03 UTC

Severity: important

Tags: moreinfo

Merged with 15583, 15719, 15972, 16278, 16521, 17167, 17168, 17184

Found in version 24.3.50

Done: Stefan Monnier <monnier <at> IRO.UMontreal.CA>

Bug is archived. No further changes may be made.

Full log


Message #104 received at 15688 <at> debbugs.gnu.org (full text, mbox):

From: Richard Stallman <rms <at> gnu.org>
To: monnier <at> IRO.UMontreal.CA
Cc: 15688 <at> debbugs.gnu.org
Subject: Re: bug#15688: 24.3.50; clear-temporary-overlay-map
Date: Fri, 07 Mar 2014 13:39:21 -0500
[[[ To any NSA and FBI agents reading my email: please consider    ]]]
[[[ whether defending the US Constitution against all enemies,     ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]

It crashed again.  This time the slot pointed to was again in
Fgarbage_collect, but it was 80(sp).  That's where the variable
message_p (char) is stored.  The value of message_p is 0,
but it happens that the low 8 bits of the address of clear-temporary-map
are zero, so storing the value of message_p into that byte didn't
alter the pointer in the word.

What seems fishy here is that clear-temporary-map still points to
that vectorlike even though the vectorlike has been freed.
Maybe that's where the real bug is.  Why didn't this code

#if GC_MARK_STACK
		symbol_free_list->function = Vdead;
#endif

prevent the problem?

-- 
Dr Richard Stallman
President, Free Software Foundation
51 Franklin St
Boston MA 02110
USA
www.fsf.org  www.gnu.org
Skype: No way! That's nonfree (freedom-denying) software.
  Use Ekiga or an ordinary phone call.





This bug report was last modified 11 years and 47 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.