From unknown Tue Jun 24 17:22:39 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#16165 <16165@debbugs.gnu.org> To: bug#16165 <16165@debbugs.gnu.org> Subject: Status: 24.3.50: writing beyond window matrices, heap corruption, crash Reply-To: bug#16165 <16165@debbugs.gnu.org> Date: Wed, 25 Jun 2025 00:22:39 +0000 retitle 16165 24.3.50: writing beyond window matrices, heap corruption, cra= sh reassign 16165 emacs submitter 16165 Dmitry Antipov severity 16165 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Mon Dec 16 10:16:13 2013 Received: (at submit) by debbugs.gnu.org; 16 Dec 2013 15:16:13 +0000 Received: from localhost ([127.0.0.1]:53996 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1VsZu0-0000lU-3F for submit@debbugs.gnu.org; Mon, 16 Dec 2013 10:16:12 -0500 Received: from eggs.gnu.org ([208.118.235.92]:54718) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1VsZtw-0000lH-Rx for submit@debbugs.gnu.org; Mon, 16 Dec 2013 10:16:11 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1VsZto-00059V-Lw for submit@debbugs.gnu.org; Mon, 16 Dec 2013 10:16:08 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,FREEMAIL_FROM, T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:55750) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VsZto-00059R-Iv for submit@debbugs.gnu.org; Mon, 16 Dec 2013 10:16:00 -0500 Received: from eggs.gnu.org ([2001:4830:134:3::10]:56410) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VsZth-00048q-J8 for bug-gnu-emacs@gnu.org; Mon, 16 Dec 2013 10:16:00 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1VsZta-00058U-JB for bug-gnu-emacs@gnu.org; Mon, 16 Dec 2013 10:15:53 -0500 Received: from forward5l.mail.yandex.net ([84.201.143.138]:59890) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VsZta-00058Q-17 for bug-gnu-emacs@gnu.org; Mon, 16 Dec 2013 10:15:46 -0500 Received: from smtp18.mail.yandex.net (smtp18.mail.yandex.net [95.108.252.18]) by forward5l.mail.yandex.net (Yandex) with ESMTP id 6BDB4C4118F; Mon, 16 Dec 2013 19:15:42 +0400 (MSK) Received: from smtp18.mail.yandex.net (localhost [127.0.0.1]) by smtp18.mail.yandex.net (Yandex) with ESMTP id 1AF8818A00F1; Mon, 16 Dec 2013 19:15:42 +0400 (MSK) Received: from unknown (unknown [37.139.80.10]) by smtp18.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id jiRpBZRayd-FfVOOKAh; Mon, 16 Dec 2013 19:15:41 +0400 (using TLSv1 with cipher CAMELLIA256-SHA (256/256 bits)) (Client certificate not present) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1387206941; bh=o4Sqqpha/vmLoE3ISbVYlSoZOZBuXSbWlbGdVFab/44=; h=Message-ID:Date:From:User-Agent:MIME-Version:To:CC:Subject: Content-Type; b=UXA7trdS3taXYcL9mzMv23Tkw8eol4s2vwH/H+x/RgJre4IGcHP3H7FHjez2/T87m ReRWc+RL4s4elYbeOKtDhb7ChhbnHhq0AYtwryQ+NYSMIby1NNs5EHtHLVD3/8GJtd 85zD1Y9V3eeDNkKmRzSKP0ffmVDpDQcZf23+1nBc= Authentication-Results: smtp18.mail.yandex.net; dkim=pass header.i=@yandex.ru Message-ID: <52AF191D.9000409@yandex.ru> Date: Mon, 16 Dec 2013 19:15:41 +0400 From: Dmitry Antipov User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: bug-gnu-emacs@gnu.org Subject: 24.3.50: writing beyond window matrices, heap corruption, crash Content-Type: multipart/mixed; boundary="------------040800060109000005090809" X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x [generic] [fuzzy] X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.0 (----) X-Debbugs-Envelope-To: submit Cc: martin rudalics X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.0 (----) This is a multi-part message in MIME format. --------------040800060109000005090809 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit How to reproduce: 0) Compile with the default configuration ('./configure --prefix=/your/choice'). 1) Change 'emacs-source-dir' in window-test.el to match your setup. 2) Run 'emacs -Q -l window-test.el -f window-test'. 3) Wait for crash. Some backtraces: (gdb) bt #0 0x0000003869a7cde8 in _int_free (av=0x3869dba780 , p=0xf00950, have_lock=1) at malloc.c:3945 #1 0x0000003869a7efb7 in _int_realloc (av=av@entry=0x3869dba780 , oldp=oldp@entry=0xf000a0, oldsize=oldsize@entry=4240, nb=nb@entry=2224) at malloc.c:4304 #2 0x0000003869a805a2 in __GI___libc_realloc (oldmem=0xf000b0, bytes=2208) at malloc.c:2988 #3 0x00000000005e0481 in xrealloc (block=0xf000b0, size=2208) at ../../trunk/src/alloc.c:697 #4 0x00000000005e05ed in xnrealloc (pa=0xf000b0, nitems=46, item_size=48) at ../../trunk/src/alloc.c:750 #5 0x000000000041809c in adjust_glyph_matrix (w=0x12dfe98, matrix=0x1625700, x=0, y=0, dim=...) at ../../trunk/src/dispnew.c:492 #6 0x000000000041b47a in allocate_matrices_for_window_redisplay (w=0x12dfe98) at ../../trunk/src/dispnew.c:1729 #7 0x000000000041b3f5 in allocate_matrices_for_window_redisplay (w=0x19667f0) at ../../trunk/src/dispnew.c:1714 #8 0x000000000041b3f5 in allocate_matrices_for_window_redisplay (w=0x14442b8) at ../../trunk/src/dispnew.c:1714 #9 0x000000000041c00c in adjust_frame_glyphs_for_window_redisplay (f=0x12e1cd8) at ../../trunk/src/dispnew.c:2032 #10 0x000000000041b50a in adjust_frame_glyphs (f=0x12e1cd8) at ../../trunk/src/dispnew.c:1749 #11 0x00000000004b879e in apply_window_adjustment (w=0x12dfe98) at ../../trunk/src/window.c:6600 #12 0x00000000004b889f in Fset_window_margins (window=..., left_width=..., right_width=...) at ../../trunk/src/window.c:6644 (gdb) bt #0 0x0000003869a7ef2b in _int_realloc (av=av@entry=0x3869dba780 , oldp=oldp@entry=0x17e1650, oldsize=oldsize@entry=2224, nb=nb@entry=4240) at malloc.c:4227 #1 0x0000003869a805a2 in __GI___libc_realloc (oldmem=0x17e1660, bytes=4224) at malloc.c:2988 #2 0x0000000000536b92 in xrealloc (block=, size=size@entry=4224) at ../../trunk/src/alloc.c:697 #3 0x0000000000536c30 in xnrealloc (pa=, nitems=nitems@entry=88, item_size=item_size@entry=48) at ../../trunk/src/alloc.c:750 #4 0x00000000004197a9 in adjust_glyph_matrix (w=w@entry=0x11671a8, matrix=0x1676480, x=x@entry=0, y=y@entry=0, dim=..., dim@entry=...) at ../../trunk/src/dispnew.c:492 #5 0x0000000000419cd0 in allocate_matrices_for_window_redisplay (w=0x11671a8) at ../../trunk/src/dispnew.c:1729 #6 0x0000000000419d29 in allocate_matrices_for_window_redisplay (w=0x1164178) at ../../trunk/src/dispnew.c:1714 #7 0x000000000041fa65 in adjust_frame_glyphs_for_window_redisplay (f=0x1128be8) at ../../trunk/src/dispnew.c:2032 #8 adjust_frame_glyphs (f=f@entry=0x1128be8) at ../../trunk/src/dispnew.c:1749 #9 0x000000000044c748 in redisplay_internal () at ../../trunk/src/xdisp.c:13622 #10 0x000000000044e580 in redisplay_preserve_echo_area (from_where=from_where@entry=2) at ../../trunk/src/xdisp.c:13856 #11 0x000000000041ac1a in Fredisplay (force=12083378) at ../../trunk/src/dispnew.c:5829 (gdb) bt #0 0x0000003869a359e9 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 #1 0x0000003869a370f8 in __GI_abort () at abort.c:90 #2 0x0000003869a75d17 in __libc_message (do_abort=do_abort@entry=2, fmt=fmt@entry=0x3869b7e568 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:196 #3 0x0000003869a7bbe7 in malloc_printerr (action=, str=0x3869b7bcdb "realloc(): invalid next size", ptr=) at malloc.c:4937 #4 0x0000003869a7f177 in _int_realloc (av=av@entry=0x3869dba780 , oldp=oldp@entry=0xe447e0, oldsize=oldsize@entry=4240, nb=nb@entry=4240) at malloc.c:4184 #5 0x0000003869a805a2 in __GI___libc_realloc (oldmem=0xe447f0, bytes=4224) at malloc.c:2988 #6 0x0000000000536b92 in xrealloc (block=, size=size@entry=4224) at ../../trunk/src/alloc.c:697 #7 0x0000000000536c30 in xnrealloc (pa=, nitems=nitems@entry=88, item_size=item_size@entry=48) at ../../trunk/src/alloc.c:750 #8 0x00000000004197a9 in adjust_glyph_matrix (w=w@entry=0x1129bf8, matrix=0xcfda00, x=x@entry=0, y=y@entry=0, dim=..., dim@entry=...) at ../../trunk/src/dispnew.c:492 #9 0x0000000000419ce6 in allocate_matrices_for_window_redisplay (w=0x1129bf8) at ../../trunk/src/dispnew.c:1730 #10 0x0000000000419d29 in allocate_matrices_for_window_redisplay (w=0x17fde48) at ../../trunk/src/dispnew.c:1714 #11 0x000000000041fa65 in adjust_frame_glyphs_for_window_redisplay (f=0x1128be8) at ../../trunk/src/dispnew.c:2032 #12 adjust_frame_glyphs (f=0x1128be8) at ../../trunk/src/dispnew.c:1749 #13 0x0000000000468369 in apply_window_adjustment (w=w@entry=0x1129bf8) at ../../trunk/src/window.c:6600 #14 0x000000000046d8c1 in set_window_buffer (window=window@entry=17996797, buffer=buffer@entry=15071845, run_hooks_p=run_hooks_p@entry=true, keep_margins_p=) at ../../trunk/src/window.c:3391 #15 0x000000000046e1de in Fset_window_buffer (window=, buffer_or_name=, keep_margins=12083378) at ../../trunk/src/window.c:3455 Running: valgrind --tool=memcheck --leak-check=full ./temacs -Q -l window-test.el -f window-test ==> ... ==8691== Invalid write of size 8 ==8691== at 0x47419C: extend_face_to_end_of_line (xdisp.c:18876) ==8691== by 0x47D216: display_mode_line (xdisp.c:21165) ==8691== by 0x47CC5E: display_mode_lines (xdisp.c:21092) ==8691== by 0x4695AA: redisplay_window (xdisp.c:16337) ==8691== by 0x45FAC1: redisplay_window_0 (xdisp.c:14023) ==8691== by 0x607C95: internal_condition_case_1 (eval.c:1368) ==8691== by 0x45FA2C: redisplay_windows (xdisp.c:14003) ==8691== by 0x45F9E2: redisplay_windows (xdisp.c:13997) ==8691== by 0x45E894: redisplay_internal (xdisp.c:13602) ==8691== by 0x45F39A: redisplay_preserve_echo_area (xdisp.c:13860) ==8691== by 0x425E46: Fredisplay (dispnew.c:5829) ==8691== by 0x609E5E: eval_sub (eval.c:2175) ==8691== Address 0xf3fc0f0 is 0 bytes after a block of size 4,224 alloc'd ==8691== at 0x4A082F7: realloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so) ==8691== by 0x5E0480: xrealloc (alloc.c:697) ==8691== by 0x5E05EC: xnrealloc (alloc.c:750) ==8691== by 0x41809B: adjust_glyph_matrix (dispnew.c:492) ==8691== by 0x41B479: allocate_matrices_for_window_redisplay (dispnew.c:1729) ==8691== by 0x41C00B: adjust_frame_glyphs_for_window_redisplay (dispnew.c:2032) ==8691== by 0x41B509: adjust_frame_glyphs (dispnew.c:1749) ==8691== by 0x4B879D: apply_window_adjustment (window.c:6600) ==8691== by 0x4B889E: Fset_window_margins (window.c:6644) ==8691== by 0x609EC0: eval_sub (eval.c:2181) ==8691== by 0x605126: Fprogn (eval.c:458) ==8691== by 0x605072: Fcond (eval.c:436) ... valgrind: m_mallocfree.c:268 (mk_plain_bszB): Assertion 'bszB != 0' failed. valgrind: This is probably caused by your program erroneously writing past the end of a heap block and corrupting heap metadata. If you fix any invalid writes reported by Memcheck, this assertion failure will probably go away. Please try that before reporting this as a bug. I didn't bisect, but the first suspect is pixelwise-resize change (r115301). Dmitry --------------040800060109000005090809 Content-Type: text/x-emacs-lisp; name="window-test.el" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="window-test.el" ;; Window random action test. (defconst emacs-source-dir "/home/dima/work/stuff/emacs/trunk/src") (defun random-entry (entries) (let ((size (length entries))) (if (= 1 size) (car entries) (nth (abs (% (random) (length entries))) entries)))) (defun window-test () (interactive) (let ((conf (current-window-configuration)) (file-list (directory-files emacs-source-dir t "\\.[chm]"))) (while t (let ((action (abs (% (random) 16)))) (cond ((zerop action) (and (< 16 (window-height)) (split-window-vertically))) ((= 1 action) (and (< 16 (window-width)) (split-window-horizontally))) ((= 2 action) (and (< 1 (count-windows)) (delete-window))) ((= 3 action) (balance-windows)) ((= 4 action) (delete-other-windows)) ((= 5 action) (select-window (random-entry (window-list)))) ((= 6 action) (find-file (random-entry file-list))) ((= 7 action) (kill-buffer)) ((= 8 action) (setq conf (current-window-configuration))) ((= 9 action) (set-window-configuration conf)) ((= 10 action) (mapcar 'kill-buffer (buffer-list))) ((= 11 action) (goto-char (point-max))) ((= 12 action) (and (not (eq (selected-window) (frame-root-window))) (not (eq (selected-window) (minibuffer-window))) (shrink-window (% (random) 3)))) ((= 13 action) (and (not (eq (selected-window) (frame-root-window))) (not (eq (selected-window) (minibuffer-window))) (shrink-window (% (random) 3) t))) ((= 14 action) (set-window-fringes nil (+ 10 (random 10)) (+ 10 (random 10)))) ((= 15 action) (set-window-margins nil (+ 2 (random 4)) (+ 2 (random 4))))) (redisplay) (sleep-for 0.1))))) --------------040800060109000005090809-- From debbugs-submit-bounces@debbugs.gnu.org Mon Dec 16 12:05:12 2013 Received: (at 16165) by debbugs.gnu.org; 16 Dec 2013 17:05:12 +0000 Received: from localhost ([127.0.0.1]:54200 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1VsbbT-00056r-FN for submit@debbugs.gnu.org; Mon, 16 Dec 2013 12:05:11 -0500 Received: from mtaout22.012.net.il ([80.179.55.172]:49307) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1VsbbQ-00056c-Pv for 16165@debbugs.gnu.org; Mon, 16 Dec 2013 12:05:09 -0500 Received: from conversion-daemon.a-mtaout22.012.net.il by a-mtaout22.012.net.il (HyperSendmail v2007.08) id <0MXW00600SQ8U500@a-mtaout22.012.net.il> for 16165@debbugs.gnu.org; Mon, 16 Dec 2013 19:05:07 +0200 (IST) Received: from HOME-C4E4A596F7 ([87.69.4.28]) by a-mtaout22.012.net.il (HyperSendmail v2007.08) with ESMTPA id <0MXW006QXSSJEUB0@a-mtaout22.012.net.il>; Mon, 16 Dec 2013 19:05:07 +0200 (IST) Date: Mon, 16 Dec 2013 19:05:17 +0200 From: Eli Zaretskii Subject: Re: bug#16165: 24.3.50: writing beyond window matrices, heap corruption, crash In-reply-to: <52AF191D.9000409@yandex.ru> X-012-Sender: halo1@inter.net.il To: Dmitry Antipov Message-id: <834n68eng2.fsf@gnu.org> References: <52AF191D.9000409@yandex.ru> X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: 16165 Cc: 16165@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Eli Zaretskii List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 1.0 (+) > Date: Mon, 16 Dec 2013 19:15:41 +0400 > From: Dmitry Antipov > > I didn't bisect, but the first suspect is pixelwise-resize change (r115301). No, it's probably 115535. I will take a look. From debbugs-submit-bounces@debbugs.gnu.org Mon Dec 16 13:00:58 2013 Received: (at 16165) by debbugs.gnu.org; 16 Dec 2013 18:00:58 +0000 Received: from localhost ([127.0.0.1]:54301 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1VscTS-0006rP-05 for submit@debbugs.gnu.org; Mon, 16 Dec 2013 13:00:58 -0500 Received: from mtaout22.012.net.il ([80.179.55.172]:62759) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1VscTO-0006r7-7y for 16165@debbugs.gnu.org; Mon, 16 Dec 2013 13:00:55 -0500 Received: from conversion-daemon.a-mtaout22.012.net.il by a-mtaout22.012.net.il (HyperSendmail v2007.08) id <0MXW00700UZG5Y00@a-mtaout22.012.net.il> for 16165@debbugs.gnu.org; Mon, 16 Dec 2013 20:00:52 +0200 (IST) Received: from HOME-C4E4A596F7 ([87.69.4.28]) by a-mtaout22.012.net.il (HyperSendmail v2007.08) with ESMTPA id <0MXW007F1VDD1B70@a-mtaout22.012.net.il>; Mon, 16 Dec 2013 20:00:50 +0200 (IST) Date: Mon, 16 Dec 2013 20:01:00 +0200 From: Eli Zaretskii Subject: Re: bug#16165: 24.3.50: writing beyond window matrices, heap corruption, crash In-reply-to: <834n68eng2.fsf@gnu.org> X-012-Sender: halo1@inter.net.il To: dmantipov@yandex.ru Message-id: <8338lsekv7.fsf@gnu.org> References: <52AF191D.9000409@yandex.ru> <834n68eng2.fsf@gnu.org> X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: 16165 Cc: 16165@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Eli Zaretskii List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 1.0 (+) > Date: Mon, 16 Dec 2013 19:05:17 +0200 > From: Eli Zaretskii > Cc: 16165@debbugs.gnu.org > > > Date: Mon, 16 Dec 2013 19:15:41 +0400 > > From: Dmitry Antipov > > > > I didn't bisect, but the first suspect is pixelwise-resize change (r115301). > > No, it's probably 115535. I will take a look. Please try again, I think I fixed this. From debbugs-submit-bounces@debbugs.gnu.org Mon Dec 16 13:24:57 2013 Received: (at 16165) by debbugs.gnu.org; 16 Dec 2013 18:24:57 +0000 Received: from localhost ([127.0.0.1]:54333 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Vscqe-0007Wc-V9 for submit@debbugs.gnu.org; Mon, 16 Dec 2013 13:24:57 -0500 Received: from mout.gmx.net ([212.227.15.15]:57775) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Vscqc-0007WP-42 for 16165@debbugs.gnu.org; Mon, 16 Dec 2013 13:24:55 -0500 Received: from [62.47.34.76] ([62.47.34.76]) by mail.gmx.com (mrgmx101) with ESMTPSA (Nemesis) id 0Man6U-1W7PsU2fmM-00KSl0 for <16165@debbugs.gnu.org>; Mon, 16 Dec 2013 19:24:52 +0100 Message-ID: <52AF456D.9020502@gmx.at> Date: Mon, 16 Dec 2013 19:24:45 +0100 From: martin rudalics MIME-Version: 1.0 To: Eli Zaretskii Subject: Re: bug#16165: 24.3.50: writing beyond window matrices, heap corruption, crash References: <52AF191D.9000409@yandex.ru> <834n68eng2.fsf@gnu.org> <8338lsekv7.fsf@gnu.org> In-Reply-To: <8338lsekv7.fsf@gnu.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: quoted-printable X-Provags-ID: V03:K0:WR/TC/BzG3SDQAiY1oPxNQ30PE2oNjaxbQK1DujKNtlrOXU9+8a /32m0A3XiuptCIfuJNV8jyVoJriaPJAXrafwPdOmxUk4/dwazD7y5WKL2dne1oiQwBatNT1 kiOgxYNwqlWxMcf7DVUgZ7ln0Yf5JPaP70VeUIBy8jSZEweoj7MXykA0z4kZRVJX8krgavI 98QDmINmK+xtTiyXLeA8w== X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 16165 Cc: dmantipov@yandex.ru, 16165@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) > Please try again, I think I fixed this. Was that your latest change or am I confused again? =2E./../src/xdisp.c: In function =E2=80=98extend_face_to_end_of_line=E2=80= =99: =2E./../src/xdisp.c:18869:20: error: =E2=80=98struct frame=E2=80=99 has n= o member named =E2=80=98tool_bar_window=E2=80=99 =2E./../src/xdisp.c:18870:25: error: =E2=80=98struct frame=E2=80=99 has n= o member named =E2=80=98tool_bar_window=E2=80=99 make[1]: *** [xdisp.o] Fehler 1 make[1]: Leaving directory `/home/martin/emacs/quickfixes/obj-gtk/src' make: *** [src] Fehler 2 martin From debbugs-submit-bounces@debbugs.gnu.org Mon Dec 16 14:32:52 2013 Received: (at 16165) by debbugs.gnu.org; 16 Dec 2013 19:32:52 +0000 Received: from localhost ([127.0.0.1]:54386 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1VsduO-0000ti-Eu for submit@debbugs.gnu.org; Mon, 16 Dec 2013 14:32:52 -0500 Received: from mtaout20.012.net.il ([80.179.55.166]:59148) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1VsduL-0000tV-4X for 16165@debbugs.gnu.org; Mon, 16 Dec 2013 14:32:50 -0500 Received: from conversion-daemon.a-mtaout20.012.net.il by a-mtaout20.012.net.il (HyperSendmail v2007.08) id <0MXW00M00ZJ9AZ00@a-mtaout20.012.net.il> for 16165@debbugs.gnu.org; Mon, 16 Dec 2013 21:32:25 +0200 (IST) Received: from HOME-C4E4A596F7 ([87.69.4.28]) by a-mtaout20.012.net.il (HyperSendmail v2007.08) with ESMTPA id <0MXW00LQVZM1VJC0@a-mtaout20.012.net.il>; Mon, 16 Dec 2013 21:32:25 +0200 (IST) Date: Mon, 16 Dec 2013 21:32:35 +0200 From: Eli Zaretskii Subject: Re: bug#16165: 24.3.50: writing beyond window matrices, heap corruption, crash In-reply-to: <52AF456D.9020502@gmx.at> X-012-Sender: halo1@inter.net.il To: martin rudalics Message-id: <83txe8d224.fsf@gnu.org> MIME-version: 1.0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: 8BIT References: <52AF191D.9000409@yandex.ru> <834n68eng2.fsf@gnu.org> <8338lsekv7.fsf@gnu.org> <52AF456D.9020502@gmx.at> X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: 16165 Cc: dmantipov@yandex.ru, 16165@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Eli Zaretskii List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 1.0 (+) > Date: Mon, 16 Dec 2013 19:24:45 +0100 > From: martin rudalics > CC: dmantipov@yandex.ru, 16165@debbugs.gnu.org > > > Please try again, I think I fixed this. > > Was that your latest change or am I confused again? > > ../../src/xdisp.c: In function ‘extend_face_to_end_of_line’: > ../../src/xdisp.c:18869:20: error: ‘struct frame’ has no member named ‘tool_bar_window’ > ../../src/xdisp.c:18870:25: error: ‘struct frame’ has no member named ‘tool_bar_window’ > make[1]: *** [xdisp.o] Fehler 1 > make[1]: Leaving directory `/home/martin/emacs/quickfixes/obj-gtk/src' > make: *** [src] Fehler 2 Yes, my bad, now fixed (I think). (I wish that those toolkit dependencies on the struct member level would never have seen the light of day!) From debbugs-submit-bounces@debbugs.gnu.org Mon Dec 16 14:49:16 2013 Received: (at 16165) by debbugs.gnu.org; 16 Dec 2013 19:49:16 +0000 Received: from localhost ([127.0.0.1]:54412 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1VseAG-0001Mj-6w for submit@debbugs.gnu.org; Mon, 16 Dec 2013 14:49:16 -0500 Received: from mout.gmx.net ([212.227.17.20]:59088) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1VseAE-0001Mb-6j for 16165@debbugs.gnu.org; Mon, 16 Dec 2013 14:49:15 -0500 Received: from [62.47.34.76] ([62.47.34.76]) by mail.gmx.com (mrgmx002) with ESMTPSA (Nemesis) id 0MaqeA-1W7Q9q3GLC-00KQz7 for <16165@debbugs.gnu.org>; Mon, 16 Dec 2013 20:49:12 +0100 Message-ID: <52AF5931.3010500@gmx.at> Date: Mon, 16 Dec 2013 20:49:05 +0100 From: martin rudalics MIME-Version: 1.0 To: Eli Zaretskii Subject: Re: bug#16165: 24.3.50: writing beyond window matrices, heap corruption, crash References: <52AF191D.9000409@yandex.ru> <834n68eng2.fsf@gnu.org> <8338lsekv7.fsf@gnu.org> <52AF456D.9020502@gmx.at> <83txe8d224.fsf@gnu.org> In-Reply-To: <83txe8d224.fsf@gnu.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K0:S534LVvQBd7Xv9eyRy2OsYzH+OxywXfOcgTRsCpLnjugIEBjqxT E+srnC3rbRr21cvacCrkzI+J6carHtpmdRWuPmm3fiGUCyX936WOaosh0iGjz/f6kCfjK0P lkQgM1G0eqXZiPklfYT3HZVNkmfsSjNpZ7qCO7ViB5/I8EuPHiaw8MsZGb4xkfjuREAtT5D uN9EGVMsfrYJ+xNqz5r3Q== X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 16165 Cc: dmantipov@yandex.ru, 16165@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) > Yes, my bad, now fixed (I think). Seems to work and pass Mitya's window-test (for a couple of minutes, at least). > (I wish that those toolkit dependencies on the struct member level > would never have seen the light of day!) ;-) Thanks, martin From debbugs-submit-bounces@debbugs.gnu.org Wed Dec 31 13:38:23 2014 Received: (at 16165-done) by debbugs.gnu.org; 31 Dec 2014 18:38:24 +0000 Received: from localhost ([127.0.0.1]:33969 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Y6OA3-00033j-M0 for submit@debbugs.gnu.org; Wed, 31 Dec 2014 13:38:23 -0500 Received: from mout.gmx.net ([212.227.17.21]:52566) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Y6OA1-00033b-LL for 16165-done@debbugs.gnu.org; Wed, 31 Dec 2014 13:38:22 -0500 Received: from [62.47.141.15] ([62.47.141.15]) by mail.gmx.com (mrgmx101) with ESMTPSA (Nemesis) id 0LwW8p-1XmRlc187r-018LxY; Wed, 31 Dec 2014 19:38:19 +0100 Message-ID: <54A44295.8060605@gmx.at> Date: Wed, 31 Dec 2014 19:38:13 +0100 From: martin rudalics MIME-Version: 1.0 To: eliz@gnu.org, 16165-done@debbugs.gnu.org Subject: Re: bug#16165: 24.3.50: writing beyond window matrices, heap corruption, crash References: 83txe8d224.fsf@gnu.org Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K0:qlvtqVNKOiGYZgkmPTW/+krGOzycq+dYioYw4olQEyOhekp/flG LrHu4CWIFAoErkaZTjOYZ1QFoKBiQZsx8mi1or/Dmnk1D4dQVi835214XuhME1VwypLofNl C0NQGzd/n9CsVdSNUyzpK6QtGDjB/J2vHi4O8odOIo8u5J65EGO4/DtsOapF2yH7j6TCZID Q3PGOYEGHMViJKqFXy+FA== X-UI-Out-Filterresults: notjunk:1; X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 16165-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) > Yes, my bad, now fixed (I think). Bug closed. martin From unknown Tue Jun 24 17:22:39 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Thu, 29 Jan 2015 12:24:04 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator From debbugs-submit-bounces@debbugs.gnu.org Fri Jun 15 07:51:21 2018 Received: (at control) by debbugs.gnu.org; 15 Jun 2018 11:51:22 +0000 Received: from localhost ([127.0.0.1]:49042 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fTnGD-0002nh-Lq for submit@debbugs.gnu.org; Fri, 15 Jun 2018 07:51:21 -0400 Received: from mail-it0-f46.google.com ([209.85.214.46]:54935) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fTnGB-0002nQ-FH; Fri, 15 Jun 2018 07:51:19 -0400 Received: by mail-it0-f46.google.com with SMTP id 76-v6so2267218itx.4; Fri, 15 Jun 2018 04:51:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=M7is3l8PHAr79XYIQd1L0xuXDqj0AwjE/fqEoir1g4Y=; b=DR3kIkTFwk9232yCMEGWhrRXayD7qJKR3z97H23tBcwg7PrqUznQtjHJJhLlOurmvX dFb13pO3dzUWUVzNxwgN9QrXboIwpoO99TGVl1WZx6sZWWvey9a8DZ5yyfiGClaF32dV 3wPlrL126WOYCUz79/dIGnKW0ZsqRMvWPf/8zighgZ9kaZQoOiFtd39f9C1iMey4HXyO vyHGCIXxYT508mcKmyJDtxPvVBKi5EEoSWl/zEijpUyBOpx+ypOYa9g6Ol6pcamS9Nmu zo/xWiKCBHAJRUhh1ehTllFnXPICzF94MDdEXQZEjO1ildjdWUUZaOCXsk+LZyFO2RAo OIOg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=M7is3l8PHAr79XYIQd1L0xuXDqj0AwjE/fqEoir1g4Y=; b=C+7cx017pIHJsPiOO5brp8lsB2IMJXU0/iEH+fRTb8vzJ83EmKHblABc0nCw+JP6rk sEiav0uWXCjyCFwBwaEJHXsVJIZyqVKBozUZPoDf08PAZRPj48sWVVw3Of8d0Kw5kDZV u8jGgNW550Ty6JC7vnuA70BF2r3Ql8BXzI4NYUHfE82zHp4wp85DvPqSc0F0SUUqZXG6 o/3bhVKFrTDbdPnoXniiaa5EBd6uddHTzZUuw6lj1jtQCnPZa1J/j8nQ/Flb6CfhMkK3 L7gFtqw7eXFudpuhyAMWSjXARLCwMgv5gV4xOTLEfJz/wBdJL/ENWOf1NjNqVKnNwBoI 7yag== X-Gm-Message-State: APt69E1QTdhCUncjwHkGJuSyf3N7CHjT1Il7m/tooZB30x8pbUQzfrfw /N7IdPZM1O2woeZrDSzxopyKjw== X-Google-Smtp-Source: ADUXVKIzfoiDbnyhWtckBQSzLGv9uz2rkeKcalgUzEyHa3Xopp5lOUmvmw5ibvV/IMxz8ZY0lc/EEQ== X-Received: by 2002:a02:8623:: with SMTP id e32-v6mr484181jai.53.1529063473015; Fri, 15 Jun 2018 04:51:13 -0700 (PDT) Received: from zebian (cbl-45-2-119-34.yyz.frontiernetworks.ca. [45.2.119.34]) by smtp.googlemail.com with ESMTPSA id 82-v6sm763424ita.19.2018.06.15.04.51.12 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Fri, 15 Jun 2018 04:51:12 -0700 (PDT) From: Noam Postavsky To: Nicolas Richard Subject: Re: bug#16710: 24.3.50; emacs crash. References: <87iosnawu0.fsf@yahoo.fr> Date: Fri, 15 Jun 2018 07:51:11 -0400 In-Reply-To: <87iosnawu0.fsf@yahoo.fr> (Nicolas Richard's message of "Mon, 10 Feb 2014 15:03:51 +0100") Message-ID: <87po0suv2o.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: control Cc: 16710@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) tags 16710 + unreproducible tags 16223 + unreproducible unarchive 16165 forcemerge 16165 16164 tags 19952 + unreproducible quit Nicolas Richard writes: > I was experimenting --with edebug-- a lisp infinite loop of recursive > calls, all wrapped in an ignore-errors, and got this crash. I could not > reproduce unfortunately, and in fact it doesn't seem to be related to > the lisp code I was looking at. So I see you reported several hard crashes with Emacs 24.3.50 (and one with 25.0.50), which also lack an easily reproducible recipe. Are you still hitting these with more recent Emacs (25.3 or 26.1)? I doubt there is much hope of tracking any of these down by now otherwise. From unknown Tue Jun 24 17:22:39 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Sat, 14 Jul 2018 11:24:05 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator