From unknown Tue Jun 17 01:48:57 2025 X-Loop: help-debbugs@gnu.org Subject: bug#16502: segmentation fault with org-capture Resent-From: Nathan Froyd Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 20 Jan 2014 00:09:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 16502 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: 16502@debbugs.gnu.org X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.139017652115185 (code B ref -1); Mon, 20 Jan 2014 00:09:03 +0000 Received: (at submit) by debbugs.gnu.org; 20 Jan 2014 00:08:41 +0000 Received: from localhost ([127.0.0.1]:57404 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1W52Pv-0003wi-Hw for submit@debbugs.gnu.org; Sun, 19 Jan 2014 19:08:41 -0500 Received: from eggs.gnu.org ([208.118.235.92]:55351) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1W4zid-0007ca-Vh for submit@debbugs.gnu.org; Sun, 19 Jan 2014 16:15:50 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1W4zib-0004qy-5O for submit@debbugs.gnu.org; Sun, 19 Jan 2014 16:15:47 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,FREEMAIL_FROM, T_DKIM_INVALID autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:44252) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1W4zib-0004qu-1O for submit@debbugs.gnu.org; Sun, 19 Jan 2014 16:15:45 -0500 Received: from eggs.gnu.org ([2001:4830:134:3::10]:57073) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1W4ziY-0006no-K5 for bug-gnu-emacs@gnu.org; Sun, 19 Jan 2014 16:15:44 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1W4ziV-0004qc-Nb for bug-gnu-emacs@gnu.org; Sun, 19 Jan 2014 16:15:42 -0500 Received: from mail-ob0-x22c.google.com ([2607:f8b0:4003:c01::22c]:58220) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1W4ziV-0004qR-BR for bug-gnu-emacs@gnu.org; Sun, 19 Jan 2014 16:15:39 -0500 Received: by mail-ob0-f172.google.com with SMTP id vb8so6459758obc.17 for ; Sun, 19 Jan 2014 13:15:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=kI4qT62iGC/20m/ihztbH2wWsWWVIwbj9LvsPyy5qxs=; b=MH+x3rbxzcWS3JWpR3Xs07VDR4UwL8Lf2QBtG1GIuyt8jIyRK/4z0uGNy51dUUYZmz qbZ0BQG0FvzyyunQTJlHe9/8Jf4XC3MAsqcuAeWNUsMfPLACtQ+6uwiQfKYA3uQU3dUC 559T4ekaKE4fix820tjB8F8JXRImXyInhd5W0DZLTR/1mbBShTMjCixeinTubLWY+xgz W4KtPSHhXbkUf0XKnyH9qZCHVo9Ma1urAcMXy0RqvuyZ0jCF10ORQtjif6+GzLB3NtIK tK3412RMw9d3WgGeb8AMDnsYCIA1oinkGTnrqMqyzWeUeDq6Ue2UKsJ3dspRQMWKhGL3 yBkQ== MIME-Version: 1.0 X-Received: by 10.60.123.10 with SMTP id lw10mr12709822oeb.24.1390166138072; Sun, 19 Jan 2014 13:15:38 -0800 (PST) Received: by 10.182.229.38 with HTTP; Sun, 19 Jan 2014 13:15:38 -0800 (PST) Date: Sun, 19 Jan 2014 16:15:38 -0500 Message-ID: From: Nathan Froyd Content-Type: text/plain; charset=ISO-8859-1 X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.0 (----) X-Mailman-Approved-At: Sun, 19 Jan 2014 19:08:31 -0500 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.0 (----) Given this initialization file, bug-init: (require 'org) (require 'org-capture) (setq org-capture-templates '(("m" "memories" plain (file "~/memories") "%t %?"))) (global-set-key [f2] 'org-capture) and starting emacs (24.x or emacs from git) with: emacs -Q -l bug-init and then repeatedly pressing the key sequence: m C-c C-k will eventually cause emacs to crash with a segmentation fault, or consume vast amounts of memory, and then crash. It typically takes 5-6 repetitions of that key sequence. Consuming vast amounts of memory seems slightly more common with emacs from git than, say, 24.3. I have seen segmentation faults happen with a couple of different stacks: Program received signal SIGSEGV, Segmentation fault. 0x000000000059f29d in copy_properties (source=0x1fba2d8, target=0x0) at /home/froydnj/src/emacs-24.3/src/intervals.c:138 138 COPY_INTERVAL_CACHE (source, target); (gdb) where #0 0x000000000059f29d in copy_properties (source=0x1fba2d8, target=0x0) at /home/froydnj/src/emacs-24.3/src/intervals.c:138 #1 0x000000000059ff39 in graft_intervals_into_buffer (source=, position=, length=, buffer=0x2b9dc50, inherit=false) at /home/froydnj/src/emacs-24.3/src/intervals.c:1721 #2 0x00000000005072c3 in insert_from_string_1 (string=38589297, pos=0, pos_byte=0, nchars=20, nbytes=20, inherit=false, before_markers=false) at /home/froydnj/src/emacs-24.3/src/insdel.c:979 #3 0x0000000000508820 in insert_from_string (string=, pos=, pos_byte=, length=, length_byte=, inherit=) at /home/froydnj/src/emacs-24.3/src/insdel.c:871 #4 0x0000000000549672 in general_insert_function (insert_func=0x508a70 , insert_from_string_func=0x5087f0 , inherit=false, nargs=1, args=0x7fffffffcff8) at /home/froydnj/src/emacs-24.3/src/editfns.c:2258 #5 0x000000000054982b in Finsert (nargs=, args=) at /home/froydnj/src/emacs-24.3/src/editfns.c:2299 #6 0x000000000058a5b7 in exec_byte_code (bytestr=33128262, vector=140737488343032, maxdepth=0, args_template=4611686018695757824, nargs=4611686018430533632, args=0x1) at /home/froydnj/src/emacs-24.3/src/bytecode.c:1486 #7 0x0000000000552b1f in funcall_lambda (fun=33553573, nargs=, arg_vector=0x7fffffffd1e0) at /home/froydnj/src/emacs-24.3/src/eval.c:3010 #8 0x0000000000552e7d in Ffuncall (nargs=, args=0x7fffffffd1d8) at /home/froydnj/src/emacs-24.3/src/eval.c:2839 #9 0x0000000000588f43 in exec_byte_code (bytestr=33128262, vector=140737488343512, maxdepth=0, args_template=4611686018695757824, nargs=4611686018430533632, args=0x1) at /home/froydnj/src/emacs-24.3/src/bytecode.c:900 #10 0x0000000000552b1f in funcall_lambda (fun=33551981, nargs=, arg_vector=0x7fffffffd3c0) at /home/froydnj/src/emacs-24.3/src/eval.c:3010 #11 0x0000000000552e7d in Ffuncall (nargs=, args=0x7fffffffd3b8) at /home/froydnj/src/emacs-24.3/src/eval.c:2839 #12 0x0000000000588f43 in exec_byte_code (bytestr=33128262, vector=140737488343992, maxdepth=0, args_template=4611686018695757824, nargs=4611686018430533632, args=0x1) at /home/froydnj/src/emacs-24.3/src/bytecode.c:900 #13 0x0000000000552517 in eval_sub (form=) at /home/froydnj/src/emacs-24.3/src/eval.c:2149 #14 0x000000000055529a in internal_lisp_condition_case (var=12103250, bodyform=33186342, handlers=33185926) at /home/froydnj/src/emacs-24.3/src/eval.c:1243 #15 0x0000000000589afe in exec_byte_code (bytestr=33128262, vector=140737488344824, maxdepth=0, args_template=4611686018695757824, nargs=4611686018430533632, args=0x1) at /home/froydnj/src/emacs-24.3/src/bytecode.c:1096 #16 0x0000000000552b1f in funcall_lambda (fun=33476477, nargs=, arg_vector=0x7fffffffd978) at /home/froydnj/src/emacs-24.3/src/eval.c:3010 #17 0x0000000000552e7d in Ffuncall (nargs=, args=0x7fffffffd970) at /home/froydnj/src/emacs-24.3/src/eval.c:2839 #18 0x000000000054f448 in Fcall_interactively (function=16202834, record_flag=12051570, keys=12086789) at /home/froydnj/src/emacs-24.3/src/callint.c:852 #19 0x0000000000553035 in Ffuncall (nargs=, args=0x7fffffffdb40) at /home/froydnj/src/emacs-24.3/src/eval.c:2785 #20 0x0000000000553294 in call3 (fn=, arg1=, arg2=, arg3=) at /home/froydnj/src/emacs-24.3/src/eval.c:2603 #21 0x00000000004ec7d3 in command_loop_1 () at /home/froydnj/src/emacs-24.3/src/keyboard.c:1587 #22 0x00000000005513d8 in internal_condition_case (bfun=0x4ec450 , handlers=12103250, hfun=0x4e1d40 ) at /home/froydnj/src/emacs-24.3/src/eval.c:1289 #23 0x00000000004dfede in command_loop_2 (ignore=) at /home/froydnj/src/emacs-24.3/src/keyboard.c:1168 #24 0x000000000055129d in internal_catch (tag=2171090632704, func=0x4dfec0 , arg=12051570) at /home/froydnj/src/emacs-24.3/src/eval.c:1060 #25 0x00000000004e1827 in command_loop () at /home/froydnj/src/emacs-24.3/src/keyboard.c:1147 #26 recursive_edit_1 () at /home/froydnj/src/emacs-24.3/src/keyboard.c:779 #27 0x00000000004e1b54 in Frecursive_edit () at /home/froydnj/src/emacs-24.3/src/keyboard.c:843 #28 0x00000000004145bf in main (argc=1, argv=) at /home/froydnj/src/emacs-24.3/src/emacs.c:1528 The line information on this next stack does not appear to be accurate, as the variable i is usually a null interval, and the crash happens referencing the interval's plist: Program received signal SIGSEGV, Segmentation fault. 0x00000000005a280c in interval_has_some_properties_list (list=40898438, i=) at /home/froydnj/src/emacs-24.3/src/textprop.c:273 273 for (tail1 = list; CONSP (tail1); tail1 = XCDR (tail1)) (gdb) where #0 0x00000000005a280c in interval_has_some_properties_list (list=40898438, i=) at /home/froydnj/src/emacs-24.3/src/textprop.c:273 #1 0x00000000005a313d in Fremove_list_of_text_properties (start=13108, end=13188, list_of_properties=40898438, object=44530229) at /home/froydnj/src/emacs-24.3/src/textprop.c:1590 #2 0x00000000005a9684 in update_compositions (from=3277, to=3297, check_mask=) at /home/froydnj/src/emacs-24.3/src/composite.c:596 #3 0x0000000000549672 in general_insert_function (insert_func=0x508a70 , insert_from_string_func=0x5087f0 , inherit=false, nargs=1, args=0x7fffffffcff8) at /home/froydnj/src/emacs-24.3/src/editfns.c:2258 #4 0x000000000054982b in Finsert (nargs=, args=) at /home/froydnj/src/emacs-24.3/src/editfns.c:2299 #5 0x000000000058a5b7 in exec_byte_code (bytestr=40898438, vector=140737488343032, maxdepth=6, args_template=4611686018695757824, nargs=4611686018430533632, args=0x2700f80) at /home/froydnj/src/emacs-24.3/src/bytecode.c:1486 #6 0x0000000000552b1f in funcall_lambda (fun=33570629, nargs=, arg_vector=0x7fffffffd1e0) at /home/froydnj/src/emacs-24.3/src/eval.c:3010 #7 0x0000000000552e7d in Ffuncall (nargs=, args=0x7fffffffd1d8) at /home/froydnj/src/emacs-24.3/src/eval.c:2839 #8 0x0000000000588f43 in exec_byte_code (bytestr=40898438, vector=140737488343512, maxdepth=6, args_template=4611686018695757824, nargs=4611686018430533632, args=0x2700f80) at /home/froydnj/src/emacs-24.3/src/bytecode.c:900 #9 0x0000000000552b1f in funcall_lambda (fun=33569037, nargs=, arg_vector=0x7fffffffd3c0) at /home/froydnj/src/emacs-24.3/src/eval.c:3010 #10 0x0000000000552e7d in Ffuncall (nargs=, args=0x7fffffffd3b8) at /home/froydnj/src/emacs-24.3/src/eval.c:2839 #11 0x0000000000588f43 in exec_byte_code (bytestr=40898438, vector=140737488343992, maxdepth=6, args_template=4611686018695757824, nargs=4611686018430533632, args=0x2700f80) at /home/froydnj/src/emacs-24.3/src/bytecode.c:900 #12 0x0000000000552517 in eval_sub (form=) at /home/froydnj/src/emacs-24.3/src/eval.c:2149 #13 0x000000000055529a in internal_lisp_condition_case (var=12103250, bodyform=33181206, handlers=33180742) at /home/froydnj/src/emacs-24.3/src/eval.c:1243 #14 0x0000000000589afe in exec_byte_code (bytestr=40898438, vector=140737488344824, maxdepth=6, args_template=4611686018695757824, nargs=4611686018430533632, args=0x2700f80) at /home/froydnj/src/emacs-24.3/src/bytecode.c:1096 #15 0x0000000000552b1f in funcall_lambda (fun=33493533, nargs=, arg_vector=0x7fffffffd978) at /home/froydnj/src/emacs-24.3/src/eval.c:3010 #16 0x0000000000552e7d in Ffuncall (nargs=, args=0x7fffffffd970) at /home/froydnj/src/emacs-24.3/src/eval.c:2839 #17 0x000000000054f448 in Fcall_interactively (function=16202834, record_flag=12051570, keys=12086789) at /home/froydnj/src/emacs-24.3/src/callint.c:852 #18 0x0000000000553035 in Ffuncall (nargs=, args=0x7fffffffdb40) at /home/froydnj/src/emacs-24.3/src/eval.c:2785 #19 0x0000000000553294 in call3 (fn=, arg1=, arg2=, arg3=) at /home/froydnj/src/emacs-24.3/src/eval.c:2603 #20 0x00000000004ec7d3 in command_loop_1 () at /home/froydnj/src/emacs-24.3/src/keyboard.c:1587 #21 0x00000000005513d8 in internal_condition_case (bfun=0x4ec450 , handlers=12103250, hfun=0x4e1d40 ) at /home/froydnj/src/emacs-24.3/src/eval.c:1289 #22 0x00000000004dfede in command_loop_2 (ignore=) at /home/froydnj/src/emacs-24.3/src/keyboard.c:1168 #23 0x000000000055129d in internal_catch (tag=2918333087744, func=0x4dfec0 , arg=12051570) at /home/froydnj/src/emacs-24.3/src/eval.c:1060 #24 0x00000000004e1827 in command_loop () at /home/froydnj/src/emacs-24.3/src/keyboard.c:1147 #25 recursive_edit_1 () at /home/froydnj/src/emacs-24.3/src/keyboard.c:779 #26 0x00000000004e1b54 in Frecursive_edit () at /home/froydnj/src/emacs-24.3/src/keyboard.c:843 #27 0x00000000004145bf in main (argc=1, argv=) at /home/froydnj/src/emacs-24.3/src/emacs.c:1528 Program received signal SIGSEGV, Segmentation fault. 0x0000000000581b93 in balance_an_interval (i=0xc18620) at /opt/src/repos/emacs.git/src/intervals.c:442 442 new_diff = i->total_length - i->left->total_length (gdb) where #0 0x0000000000581b93 in balance_an_interval (i=0xc18620) at /opt/src/repos/emacs.git/src/intervals.c:442 #1 0x0000000000581d95 in balance_possible_root_interval (interval=) at /opt/src/repos/emacs.git/src/intervals.c:482 #2 0x00000000005829a0 in split_interval_left (interval=0x1b9a428, offset=) at /opt/src/repos/emacs.git/src/intervals.c:615 #3 0x0000000000582f49 in graft_intervals_into_buffer (source=0x1ba62c0, position=2, length=, buffer=0x1b91c30, inherit=false) at /opt/src/repos/emacs.git/src/intervals.c:1669 #4 0x00000000004fa349 in insert_from_string_1 (string=26897025, pos=0, pos_byte=0, nchars=20, nbytes=20, inherit=false, before_markers=false) at /opt/src/repos/emacs.git/src/insdel.c:976 #5 0x00000000004fb815 in insert_from_string (string=, pos=, pos_byte=, length=, length_byte=, inherit=) at /opt/src/repos/emacs.git/src/insdel.c:868 #6 0x00000000005354d3 in general_insert_function (insert_func=0x4fba10 , insert_from_string_func=0x4fb7eb , inherit=false, nargs=1, args=0x7fffffffd188) at /opt/src/repos/emacs.git/src/editfns.c:2248 #7 0x00000000005355b1 in Finsert (nargs=, args=) at /opt/src/repos/emacs.git/src/editfns.c:2289 #8 0x000000000056fa17 in exec_byte_code (bytestr=, vector=25746413, maxdepth=, args_template=, nargs=, args=) at /opt/src/repos/emacs.git/src/bytecode.c:1559 #9 0x000000000053da0a in funcall_lambda (fun=25746629, nargs=0, arg_vector=0x7fffffffd370) at /opt/src/repos/emacs.git/src/eval.c:3040 #10 0x000000000053dde4 in Ffuncall (nargs=1, args=0x7fffffffd368) at /opt/src/repos/emacs.git/src/eval.c:2855 #11 0x000000000056dc35 in exec_byte_code (bytestr=, vector=25475869, maxdepth=, args_template=, nargs=, args=) at /opt/src/repos/emacs.git/src/bytecode.c:919 #12 0x000000000053da0a in funcall_lambda (fun=25476181, nargs=1, arg_vector=0x7fffffffd550) at /opt/src/repos/emacs.git/src/eval.c:3040 #13 0x000000000053dde4 in Ffuncall (nargs=2, args=0x7fffffffd548) at /opt/src/repos/emacs.git/src/eval.c:2855 #14 0x000000000056dc35 in exec_byte_code (bytestr=, vector=25915261, maxdepth=, args_template=, nargs=, args=) at /opt/src/repos/emacs.git/src/bytecode.c:919 #15 0x0000000000570c7b in Fbyte_code (bytestr=, vector=, maxdepth=) at /opt/src/repos/emacs.git/src/bytecode.c:482 #16 0x000000000053d323 in eval_sub (form=) at /opt/src/repos/emacs.git/src/eval.c:2182 #17 0x000000000053ff74 in internal_lisp_condition_case (var=11926946, bodyform=26157926, handlers=) at /opt/src/repos/emacs.git/src/eval.c:1314 #18 0x000000000056ea5b in exec_byte_code (bytestr=, vector=25472645, maxdepth=, args_template=, nargs=, args=) at /opt/src/repos/emacs.git/src/bytecode.c:1169 #19 0x000000000053da0a in funcall_lambda (fun=25915301, nargs=1, arg_vector=0x7fffffffda28) at /opt/src/repos/emacs.git/src/eval.c:3040 #20 0x000000000053dde4 in Ffuncall (nargs=2, args=0x7fffffffda20) at /opt/src/repos/emacs.git/src/eval.c:2855 #21 0x000000000053b345 in Fcall_interactively (function=16111442, record_flag=11875442, keys=11910461) at /opt/src/repos/emacs.git/src/callint.c:836 #22 0x000000000053dcd0 in Ffuncall (nargs=4, args=0x7fffffffdbe8) at /opt/src/repos/emacs.git/src/eval.c:2813 #23 0x000000000056dc35 in exec_byte_code (bytestr=, vector=9353333, maxdepth=, args_template=, nargs=, args=) at /opt/src/repos/emacs.git/src/bytecode.c:919 #24 0x000000000053d810 in funcall_lambda (fun=9353253, nargs=1, arg_vector=0x7fffffffddd8) at /opt/src/repos/emacs.git/src/eval.c:2974 #25 0x000000000053dde4 in Ffuncall (nargs=2, args=0x7fffffffddd0) at /opt/src/repos/emacs.git/src/eval.c:2855 #26 0x000000000053e031 in call1 (fn=, arg1=) at /opt/src/repos/emacs.git/src/eval.c:2605 #27 0x00000000004e2c17 in command_loop_1 () at /opt/src/repos/emacs.git/src/keyboard.c:1552 #28 0x000000000053c4a6 in internal_condition_case (bfun=0x4e26ee , handlers=11926946, hfun=0x4d9ac9 ) at /opt/src/repos/emacs.git/src/eval.c:1345 #29 0x00000000004d91a1 in command_loop_2 (ignore=) at /opt/src/repos/emacs.git/src/keyboard.c:1170 #30 0x000000000053c38d in internal_catch (tag=11922882, func=0x4d9187 , arg=11875442) at /opt/src/repos/emacs.git/src/eval.c:1109 #31 0x00000000004d96f2 in command_loop () at /opt/src/repos/emacs.git/src/keyboard.c:1149 #32 recursive_edit_1 () at /opt/src/repos/emacs.git/src/keyboard.c:777 #33 0x00000000004d99f7 in Frecursive_edit () at /opt/src/repos/emacs.git/src/keyboard.c:841 #34 0x00000000004d5b4f in main (argc=, argv=0x7fffffffe178) at /opt/src/repos/emacs.git/src/emacs.c:1643 (gdb) p i $4 = (INTERVAL) 0xc18620 (gdb) p i->left $5 = (struct interval *) 0x0 This stack is the result of interrupting emacs while it was allocating gobs of memory: #0 0x00007ffff398c2dd in _int_malloc (av=0x7ffff3cc4720, bytes=1016) at malloc.c:3464 #1 0x00007ffff398efc5 in __GI___libc_malloc (bytes=1016) at malloc.c:2924 #2 0x0000000000524fc0 in lisp_malloc (nbytes=1016, type=MEM_TYPE_NON_LISP) at /opt/src/repos/emacs.git/src/alloc.c:893 #3 0x0000000000525cec in make_interval () at /opt/src/repos/emacs.git/src/alloc.c:1245 #4 0x000000000058285b in split_interval_right (interval=0xa2ae13c8, offset=0) at /opt/src/repos/emacs.git/src/intervals.c:546 #5 0x0000000000584db0 in copy_intervals (tree=, start=, length=2) at /opt/src/repos/emacs.git/src/intervals.c:2285 #6 0x0000000000584e5f in copy_intervals_to_string (string=27583649, buffer=, position=, length=) at /opt/src/repos/emacs.git/src/intervals.c:2300 #7 0x00000000005394d6 in make_buffer_string_both (start=2, start_byte=, end=4, end_byte=, props=true) at /opt/src/repos/emacs.git/src/editfns.c:2511 #8 0x00000000004f98e8 in del_range_2 (from=2, from_byte=2, to=4, to_byte=4, ret_string=114) at /opt/src/repos/emacs.git/src/insdel.c:1715 #9 0x00000000004fae92 in del_range_1 (from=2, to=4, prepare=, ret_string=false) at /opt/src/repos/emacs.git/src/insdel.c:1591 #10 0x00000000004faee6 in del_range (from=, to=) at /opt/src/repos/emacs.git/src/insdel.c:1559 #11 0x0000000000533618 in Fdelete_region (start=8, end=16) at /opt/src/repos/emacs.git/src/editfns.c:3232 #12 0x0000000000570189 in exec_byte_code (bytestr=, vector=25496157, maxdepth=, args_template=, nargs=, args=) at /opt/src/repos/emacs.git/src/bytecode.c:1728 #13 0x000000000053da0a in funcall_lambda (fun=25496229, nargs=0, arg_vector=0x7fffffffd170) at /opt/src/repos/emacs.git/src/eval.c:3040 #14 0x000000000053dde4 in Ffuncall (nargs=1, args=0x7fffffffd168) at /opt/src/repos/emacs.git/src/eval.c:2855 #15 0x000000000056dc35 in exec_byte_code (bytestr=, vector=25495325, maxdepth=, args_template=, nargs=, args=) at /opt/src/repos/emacs.git/src/bytecode.c:919 #16 0x000000000053da0a in funcall_lambda (fun=25495541, nargs=0, arg_vector=0x7fffffffd350) at /opt/src/repos/emacs.git/src/eval.c:3040 #17 0x000000000053dde4 in Ffuncall (nargs=1, args=0x7fffffffd348) at /opt/src/repos/emacs.git/src/eval.c:2855 #18 0x000000000056dc35 in exec_byte_code (bytestr=, vector=25493701, maxdepth=, args_template=, nargs=, args=) at /opt/src/repos/emacs.git/src/bytecode.c:919 #19 0x000000000053da0a in funcall_lambda (fun=25494013, nargs=1, arg_vector=0x7fffffffd530) at /opt/src/repos/emacs.git/src/eval.c:3040 #20 0x000000000053dde4 in Ffuncall (nargs=2, args=0x7fffffffd528) at /opt/src/repos/emacs.git/src/eval.c:2855 #21 0x000000000056dc35 in exec_byte_code (bytestr=, vector=25473717, maxdepth=, args_template=, nargs=, args=) at /opt/src/repos/emacs.git/src/bytecode.c:919 #22 0x0000000000570c7b in Fbyte_code (bytestr=, vector=, maxdepth=) at /opt/src/repos/emacs.git/src/bytecode.c:482 #23 0x000000000053d323 in eval_sub (form=) at /opt/src/repos/emacs.git/src/eval.c:2182 #24 0x000000000053ff74 in internal_lisp_condition_case (var=11926946, bodyform=25460086, handlers=) at /opt/src/repos/emacs.git/src/eval.c:1314 #25 0x000000000056ea5b in exec_byte_code (bytestr=, vector=25473949, maxdepth=, args_template=, nargs=, args=) at /opt/src/repos/emacs.git/src/bytecode.c:1169 #26 0x000000000053da0a in funcall_lambda (fun=25474533, nargs=1, arg_vector=0x7fffffffda08) at /opt/src/repos/emacs.git/src/eval.c:3040 #27 0x000000000053dde4 in Ffuncall (nargs=2, args=0x7fffffffda00) at /opt/src/repos/emacs.git/src/eval.c:2855 #28 0x000000000053b345 in Fcall_interactively (function=16111442, record_flag=11875442, keys=11910461) at /opt/src/repos/emacs.git/src/callint.c:836 #29 0x000000000053dcd0 in Ffuncall (nargs=4, args=0x7fffffffdbc8) at /opt/src/repos/emacs.git/src/eval.c:2813 #30 0x000000000056dc35 in exec_byte_code (bytestr=, vector=9353333, maxdepth=, args_template=, nargs=, args=) at /opt/src/repos/emacs.git/src/bytecode.c:919 #31 0x000000000053d810 in funcall_lambda (fun=9353253, nargs=1, arg_vector=0x7fffffffddb8) at /opt/src/repos/emacs.git/src/eval.c:2974 #32 0x000000000053dde4 in Ffuncall (nargs=2, args=0x7fffffffddb0) at /opt/src/repos/emacs.git/src/eval.c:2855 #33 0x000000000053e031 in call1 (fn=, arg1=) at /opt/src/repos/emacs.git/src/eval.c:2605 #34 0x00000000004e2c17 in command_loop_1 () at /opt/src/repos/emacs.git/src/keyboard.c:1552 #35 0x000000000053c4a6 in internal_condition_case (bfun=0x4e26ee , handlers=11926946, hfun=0x4d9ac9 ) at /opt/src/repos/emacs.git/src/eval.c:1345 #36 0x00000000004d91a1 in command_loop_2 (ignore=) at /opt/src/repos/emacs.git/src/keyboard.c:1170 #37 0x000000000053c38d in internal_catch (tag=11922882, func=0x4d9187 , arg=11875442) at /opt/src/repos/emacs.git/src/eval.c:1109 #38 0x00000000004d96f2 in command_loop () at /opt/src/repos/emacs.git/src/keyboard.c:1149 #39 recursive_edit_1 () at /opt/src/repos/emacs.git/src/keyboard.c:777 #40 0x00000000004d99f7 in Frecursive_edit () at /opt/src/repos/emacs.git/src/keyboard.c:841 #41 0x00000000004d5b4f in main (argc=, argv=0x7fffffffe158) at /opt/src/repos/emacs.git/src/emacs.c:1643 (gdb) -Nathan From unknown Tue Jun 17 01:48:57 2025 X-Loop: help-debbugs@gnu.org Subject: bug#16502: segmentation fault with org-capture Resent-From: Dmitry Antipov Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 20 Jan 2014 08:22:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 16502 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Nathan Froyd Cc: 16502@debbugs.gnu.org Received: via spool by 16502-submit@debbugs.gnu.org id=B16502.1390206068667 (code B ref 16502); Mon, 20 Jan 2014 08:22:02 +0000 Received: (at 16502) by debbugs.gnu.org; 20 Jan 2014 08:21:08 +0000 Received: from localhost ([127.0.0.1]:57519 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1W5A6V-0000Af-0S for submit@debbugs.gnu.org; Mon, 20 Jan 2014 03:21:07 -0500 Received: from forward2l.mail.yandex.net ([84.201.143.145]:55607) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1W5A6Q-0000A8-7G for 16502@debbugs.gnu.org; Mon, 20 Jan 2014 03:21:03 -0500 Received: from smtp3h.mail.yandex.net (smtp3h.mail.yandex.net [84.201.186.20]) by forward2l.mail.yandex.net (Yandex) with ESMTP id AD4A81AC07C3; Mon, 20 Jan 2014 12:21:00 +0400 (MSK) Received: from smtp3h.mail.yandex.net (localhost [127.0.0.1]) by smtp3h.mail.yandex.net (Yandex) with ESMTP id 52B611B409F4; Mon, 20 Jan 2014 12:21:00 +0400 (MSK) Received: from unknown (unknown [37.139.80.10]) by smtp3h.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id vY0OlrZSxg-L0lausLJ; Mon, 20 Jan 2014 12:21:00 +0400 (using TLSv1 with cipher CAMELLIA256-SHA (256/256 bits)) (Client certificate not present) X-Yandex-Uniq: 57f150b5-2250-4eb1-8bc2-3b0887061207 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1390206060; bh=yPPz8x8QEbLnnEak+khBuzysnnIKZrYV/pv9U6oscZM=; h=Message-ID:Date:From:User-Agent:MIME-Version:To:CC:Subject: References:In-Reply-To:Content-Type:Content-Transfer-Encoding; b=bAfBuvH6n5dY7pswSM3SpI9WyYYNxv7Bj4AF2nmzvYSsjHorqHEWyTBMBM/l4PdCA tKudr9jfx4LcqQUhVhvvK8jmAzlnJ8GsBh2bVfVhWp7b+Z2fqqEf+zdRVLi9usYo32 uJH56tifCXta8R5spA5AoxKr21ijxqUiJNPwCgkY= Authentication-Results: smtp3h.mail.yandex.net; dkim=pass header.i=@yandex.ru Message-ID: <52DCDC6B.9090209@yandex.ru> Date: Mon, 20 Jan 2014 12:20:59 +0400 From: Dmitry Antipov User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) On 01/20/2014 01:15 AM, Nathan Froyd wrote: > Given this initialization file, bug-init: [...skip...] Reproduced in trunk (as of r116077). Could you please run undumped (temacs) under valgrind? With your recipe, I'm seeing nasty memory management error: valgrind --tool=memcheck ./src/temacs -Q -l /tmp/bug16502.el ==> ==10951== Invalid read of size 8 ==10951== at 0x56142D: PSEUDOVECTOR_TYPEP (lisp.h:2377) ==10951== by 0x56149C: PSEUDOVECTORP (lisp.h:2391) ==10951== by 0x561575: BUFFERP (lisp.h:2437) ==10951== by 0x673C47: find_interval (intervals.c:669) ==10951== by 0x6796F7: validate_interval_range (textprop.c:212) ==10951== by 0x67B190: Ftext_properties_at (textprop.c:601) ==10951== by 0x67B245: Fget_text_property (textprop.c:621) ==10951== by 0x51FAD4: face_at_buffer_position (xfaces.c:5987) ==10951== by 0x4439FD: handle_face_prop (xdisp.c:3815) ==10951== by 0x4427D0: handle_stop (xdisp.c:3319) ==10951== by 0x44C416: reseat (xdisp.c:6359) ==10951== by 0x441789: init_iterator (xdisp.c:2975) ==10951== Address 0x763cb10 is 0 bytes inside a block of size 960 free'd ==10951== at 0x4A07577: free (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so) ==10951== by 0x5E1470: lisp_free (alloc.c:931) ==10951== by 0x5EA618: gc_sweep (alloc.c:6637) ==10951== by 0x5E8181: Fgarbage_collect (alloc.c:5572) ==10951== by 0x562277: maybe_gc (lisp.h:4518) ==10951== by 0x60A36B: eval_sub (eval.c:2075) ==10951== by 0x6084A3: internal_lisp_condition_case (eval.c:1314) ==10951== by 0x656A46: exec_byte_code (bytecode.c:1169) ==10951== by 0x60C8DD: funcall_lambda (eval.c:2974) ==10951== by 0x60C275: Ffuncall (eval.c:2855) ==10951== by 0x60AE7C: Fapply (eval.c:2292) ==10951== by 0x60BF66: Ffuncall (eval.c:2787) I.e. the buffer is swept by GC and then (de)referenced in find_interval. Dmitry From unknown Tue Jun 17 01:48:57 2025 X-Loop: help-debbugs@gnu.org Subject: bug#16502: segmentation fault with org-capture Resent-From: Dmitry Antipov Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 20 Jan 2014 09:31:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 16502 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Nathan Froyd Cc: 16502@debbugs.gnu.org Received: via spool by 16502-submit@debbugs.gnu.org id=B16502.13902102548017 (code B ref 16502); Mon, 20 Jan 2014 09:31:01 +0000 Received: (at 16502) by debbugs.gnu.org; 20 Jan 2014 09:30:54 +0000 Received: from localhost ([127.0.0.1]:57581 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1W5BC1-00025E-EZ for submit@debbugs.gnu.org; Mon, 20 Jan 2014 04:30:53 -0500 Received: from forward7l.mail.yandex.net ([84.201.143.140]:53569) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1W5BBx-000250-LD for 16502@debbugs.gnu.org; Mon, 20 Jan 2014 04:30:51 -0500 Received: from smtp2h.mail.yandex.net (smtp2h.mail.yandex.net [84.201.187.145]) by forward7l.mail.yandex.net (Yandex) with ESMTP id 1A1B8BC0C97; Mon, 20 Jan 2014 13:30:48 +0400 (MSK) Received: from smtp2h.mail.yandex.net (localhost [127.0.0.1]) by smtp2h.mail.yandex.net (Yandex) with ESMTP id B01221701D97; Mon, 20 Jan 2014 13:30:47 +0400 (MSK) Received: from unknown (unknown [37.139.80.10]) by smtp2h.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id YpL8oqjZFO-Ulq4QoCt; Mon, 20 Jan 2014 13:30:47 +0400 (using TLSv1 with cipher CAMELLIA256-SHA (256/256 bits)) (Client certificate not present) X-Yandex-Uniq: 6c62a37c-0c18-4d96-92a2-24bacec5e9c6 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1390210247; bh=0d5ggoVbrb9bdTbpJJoZ0O0gZJkmV5jy5XLuxtIYooM=; h=Message-ID:Date:From:User-Agent:MIME-Version:To:CC:Subject: References:In-Reply-To:Content-Type; b=L93cc4ZOWHkBS3pWd2eTOj+HCIbzYAjC++eBrjqInnDn1gaHTR9Y7xse6NqVoA6I1 jIFUbamnm0W6/ILKnB0R4uC/kAEnPAzOB1gFbM9zBc7izpMAx2dCPjl0Wz1ZlJuROa lbE+AltfsB9DyV/0BELhX059CtEZQ/Mq34J/PXDs= Authentication-Results: smtp2h.mail.yandex.net; dkim=pass header.i=@yandex.ru Message-ID: <52DCECC7.9080705@yandex.ru> Date: Mon, 20 Jan 2014 13:30:47 +0400 From: Dmitry Antipov User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 References: <52DCDC6B.9090209@yandex.ru> In-Reply-To: <52DCDC6B.9090209@yandex.ru> Content-Type: multipart/mixed; boundary="------------000706000709090708020707" X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) This is a multi-part message in MIME format. --------------000706000709090708020707 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit On 01/20/2014 12:20 PM, Dmitry Antipov wrote: > Could you please run undumped (temacs) under valgrind? ...and please try this patch (for trunk), if possible. Dmitry --------------000706000709090708020707 Content-Type: text/x-patch; name="bug16502.patch" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="bug16502.patch" =3D=3D=3D modified file 'src/buffer.c' --- src/buffer.c 2014-01-01 07:43:34 +0000 +++ src/buffer.c 2014-01-20 09:22:59 +0000 @@ -1867,6 +1867,7 @@ =20 if (b->base_buffer) { + INTERVAL i; /* Unchain all markers that belong to this indirect buffer. Don't unchain the markers that belong to the base buffer or its other indirect buffers. */ @@ -1881,6 +1882,14 @@ else mp =3D &m->next; } + /* Intervals should be owned by the base buffer (Bug#16502). */ + i =3D buffer_intervals (b); + if (i) + { + Lisp_Object owner; + XSETBUFFER (owner, b->base_buffer); + set_interval_object (i, owner); + } } else { =3D=3D=3D modified file 'src/intervals.c' --- src/intervals.c 2014-01-01 07:43:34 +0000 +++ src/intervals.c 2014-01-20 09:21:55 +0000 @@ -60,16 +60,7 @@ =0C /* Utility functions for intervals. */ =20 -/* Use these functions to set Lisp_Object - or pointer slots of struct interval. */ - -static void -set_interval_object (INTERVAL i, Lisp_Object obj) -{ - eassert (BUFFERP (obj) || STRINGP (obj)); - i->up_obj =3D 1; - i->up.obj =3D obj; -} +/* Use these functions to set pointer slots of struct interval. */ =20 static void set_interval_left (INTERVAL i, INTERVAL left) =3D=3D=3D modified file 'src/intervals.h' --- src/intervals.h 2014-01-01 07:43:34 +0000 +++ src/intervals.h 2014-01-20 09:22:10 +0000 @@ -134,6 +134,14 @@ or pointer slots of struct interval. */ =20 INLINE void +set_interval_object (INTERVAL i, Lisp_Object obj) +{ + eassert (BUFFERP (obj) || STRINGP (obj)); + i->up_obj =3D 1; + i->up.obj =3D obj; +} + +INLINE void set_interval_parent (INTERVAL i, INTERVAL parent) { i->up_obj =3D false; --------------000706000709090708020707-- From unknown Tue Jun 17 01:48:57 2025 X-Loop: help-debbugs@gnu.org Subject: bug#16502: segmentation fault with org-capture Resent-From: Nathan Froyd Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 20 Jan 2014 15:30:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 16502 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Dmitry Antipov Cc: 16502@debbugs.gnu.org Received: via spool by 16502-submit@debbugs.gnu.org id=B16502.139023178618031 (code B ref 16502); Mon, 20 Jan 2014 15:30:03 +0000 Received: (at 16502) by debbugs.gnu.org; 20 Jan 2014 15:29:46 +0000 Received: from localhost ([127.0.0.1]:58458 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1W5GnH-0004gg-Ll for submit@debbugs.gnu.org; Mon, 20 Jan 2014 10:29:46 -0500 Received: from mail-ob0-f173.google.com ([209.85.214.173]:48900) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1W5GnC-0004gS-3J for 16502@debbugs.gnu.org; Mon, 20 Jan 2014 10:29:41 -0500 Received: by mail-ob0-f173.google.com with SMTP id vb8so7365130obc.4 for <16502@debbugs.gnu.org>; Mon, 20 Jan 2014 07:29:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=PzU1GX5rxUqFtzImopQ2UWQN68wzVRrdNIcv7Dn44TM=; b=Y7xf0OZdumwgpMjbeJOp3JPfUStenhk7Qd7NsezwixKd+9zHymRWXbSrcjfbc5BmM7 iG29UnZU1t5QXo3mvE9bP2stPvmdV8Eeb/3EN7FnMitX5nbXmjPsFHZAmdLaKEErpmcd VJ9kZYHy11d6lA1/dumrOXzxWvMOaC08XnTMTZOtrlXKzB/nVIqz7nM+7OrTISRNpD6m KlrxQxVX20rNjVVAxKHxsJfkh5K5Y+yT/ccL2nafcBu+eaVU/uZc0ZgvXXEB3JeKm+aM e0H3VrSH+uRjF8Dd1xHwdIv3wIbAMgmrEF0yZWVvl6XNSlTO/iZIgGyiF8gmkS3bfsy4 M33w== MIME-Version: 1.0 X-Received: by 10.60.56.200 with SMTP id c8mr798616oeq.80.1390231772496; Mon, 20 Jan 2014 07:29:32 -0800 (PST) Received: by 10.182.229.38 with HTTP; Mon, 20 Jan 2014 07:29:32 -0800 (PST) In-Reply-To: <52DCECC7.9080705@yandex.ru> References: <52DCDC6B.9090209@yandex.ru> <52DCECC7.9080705@yandex.ru> Date: Mon, 20 Jan 2014 10:29:32 -0500 Message-ID: From: Nathan Froyd Content-Type: text/plain; charset=ISO-8859-1 X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) On Mon, Jan 20, 2014 at 4:30 AM, Dmitry Antipov wrote: > On 01/20/2014 12:20 PM, Dmitry Antipov wrote: > >> Could you please run undumped (temacs) under valgrind? > > > ...and please try this patch (for trunk), if possible. The patch does not seem to make it much better; I can now do a couple more cycles of m C-c C-k, but I can still segfault: Program received signal SIGSEGV, Segmentation fault. interval_has_some_properties_list (list=, i=0x0) at /opt/src/repos/emacs.git/src/textprop.c:313 313 for (tail2 = i->plist; CONSP (tail2); tail2 = XCDR (XCDR (tail2))) (gdb) where #0 interval_has_some_properties_list (list=, i=0x0) at /opt/src/repos/emacs.git/src/textprop.c:313 #1 0x00000000005860c6 in Fremove_list_of_text_properties (start=8, end=88, list_of_properties=35158966, object=35587205) at /opt/src/repos/emacs.git/src/textprop.c:1675 #2 0x000000000058c332 in update_compositions (from=2, to=, check_mask=) at /opt/src/repos/emacs.git/src/composite.c:590 #3 0x00000000004fb84e in insert_from_string (string=, pos=, pos_byte=, length=, length_byte=, inherit=) at /opt/src/repos/emacs.git/src/insdel.c:871 #4 0x00000000005354d3 in general_insert_function (insert_func=0x4fba10 , insert_from_string_func=0x4fb7eb , inherit=false, nargs=1, args=0x7fffffffd168) at /opt/src/repos/emacs.git/src/editfns.c:2248 #5 0x00000000005355b1 in Finsert (nargs=, args=) at /opt/src/repos/emacs.git/src/editfns.c:2289 #6 0x000000000056fa17 in exec_byte_code (bytestr=, vector=20010141, maxdepth=, args_template=, nargs=, args=) at /opt/src/repos/emacs.git/src/bytecode.c:1559 #7 0x000000000053da0a in funcall_lambda (fun=20014517, nargs=0, arg_vector=0x7fffffffd350) at /opt/src/repos/emacs.git/src/eval.c:3040 #8 0x000000000053dde4 in Ffuncall (nargs=1, args=0x7fffffffd348) at /opt/src/repos/emacs.git/src/eval.c:2855 #9 0x000000000056dc35 in exec_byte_code (bytestr=, vector=20009533, maxdepth=, args_template=, nargs=, args=) at /opt/src/repos/emacs.git/src/bytecode.c:919 #10 0x000000000053da0a in funcall_lambda (fun=20001933, nargs=1, arg_vector=0x7fffffffd530) at /opt/src/repos/emacs.git/src/eval.c:3040 #11 0x000000000053dde4 in Ffuncall (nargs=2, args=0x7fffffffd528) at /opt/src/repos/emacs.git/src/eval.c:2855 #12 0x000000000056dc35 in exec_byte_code (bytestr=, vector=19985765, maxdepth=, args_template=, nargs=, args=) at /opt/src/repos/emacs.git/src/bytecode.c:919 #13 0x0000000000570c7b in Fbyte_code (bytestr=, vector=, maxdepth=) at /opt/src/repos/emacs.git/src/bytecode.c:482 #14 0x000000000053d323 in eval_sub (form=) at /opt/src/repos/emacs.git/src/eval.c:2182 #15 0x000000000053ff74 in internal_lisp_condition_case (var=11931170, bodyform=33506902, handlers=) at /opt/src/repos/emacs.git/src/eval.c:1314 #16 0x000000000056ea5b in exec_byte_code (bytestr=, vector=19993277, maxdepth=, args_template=, nargs=, args=) at /opt/src/repos/emacs.git/src/bytecode.c:1169 #17 0x000000000053da0a in funcall_lambda (fun=19993861, nargs=1, arg_vector=0x7fffffffda08) at /opt/src/repos/emacs.git/src/eval.c:3040 #18 0x000000000053dde4 in Ffuncall (nargs=2, args=0x7fffffffda00) at /opt/src/repos/emacs.git/src/eval.c:2855 #19 0x000000000053b345 in Fcall_interactively (function=16681218, record_flag=11879666, keys=11914685) at /opt/src/repos/emacs.git/src/callint.c:836 #20 0x000000000053dcd0 in Ffuncall (nargs=4, args=0x7fffffffdbc8) at /opt/src/repos/emacs.git/src/eval.c:2813 #21 0x000000000056dc35 in exec_byte_code (bytestr=, vector=9353333, maxdepth=, args_template=, nargs=, args=) at /opt/src/repos/emacs.git/src/bytecode.c:919 #22 0x000000000053d810 in funcall_lambda (fun=9353253, nargs=1, arg_vector=0x7fffffffddb8) at /opt/src/repos/emacs.git/src/eval.c:2974 #23 0x000000000053dde4 in Ffuncall (nargs=2, args=0x7fffffffddb0) at /opt/src/repos/emacs.git/src/eval.c:2855 #24 0x000000000053e031 in call1 (fn=, arg1=) at /opt/src/repos/emacs.git/src/eval.c:2605 #25 0x00000000004e2c17 in command_loop_1 () at /opt/src/repos/emacs.git/src/keyboard.c:1552 #26 0x000000000053c4a6 in internal_condition_case (bfun=0x4e26ee , handlers=11931170, hfun=0x4d9ac9 ) at /opt/src/repos/emacs.git/src/eval.c:1345 #27 0x00000000004d91a1 in command_loop_2 (ignore=) at /opt/src/repos/emacs.git/src/keyboard.c:1170 #28 0x000000000053c38d in internal_catch (tag=11927106, func=0x4d9187 , arg=11879666) at /opt/src/repos/emacs.git/src/eval.c:1109 #29 0x00000000004d96f2 in command_loop () at /opt/src/repos/emacs.git/src/keyboard.c:1149 #30 recursive_edit_1 () at /opt/src/repos/emacs.git/src/keyboard.c:777 #31 0x00000000004d99f7 in Frecursive_edit () at /opt/src/repos/emacs.git/src/keyboard.c:841 #32 0x00000000004d5b4f in main (argc=, argv=0x7fffffffe158) at /opt/src/repos/emacs.git/src/emacs.c:1643 (gdb) Still can run away allocating memory too. What I see in valgrind during a runaway alloc is this: ==17543== Invalid read of size 8 ==17543== at 0x5829EC: find_interval (lisp.h:2377) ==17543== by 0x5840EE: set_point_both (intervals.c:1921) ==17543== by 0x58469F: set_point (intervals.c:1816) ==17543== by 0x5363D9: Fgoto_char (editfns.c:239) ==17543== by 0x56F9D6: exec_byte_code (bytecode.c:1553) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x570C7A: Fbyte_code (bytecode.c:482) ==17543== Address 0xff04f90 is 0 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x581DA1: balance_possible_root_interval (lisp.h:2377) ==17543== by 0x582A0F: find_interval (intervals.c:675) ==17543== by 0x5840EE: set_point_both (intervals.c:1921) ==17543== by 0x58469F: set_point (intervals.c:1816) ==17543== by 0x5363D9: Fgoto_char (editfns.c:239) ==17543== by 0x56F9D6: exec_byte_code (bytecode.c:1553) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== Address 0xff04f90 is 0 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x581DB4: balance_possible_root_interval (buffer.h:1160) ==17543== by 0x582A0F: find_interval (intervals.c:675) ==17543== by 0x5840EE: set_point_both (intervals.c:1921) ==17543== by 0x58469F: set_point (intervals.c:1816) ==17543== by 0x5363D9: Fgoto_char (editfns.c:239) ==17543== by 0x56F9D6: exec_byte_code (bytecode.c:1553) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== Address 0xff05250 is 704 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x5829EC: find_interval (lisp.h:2377) ==17543== by 0x584151: set_point_both (intervals.c:1935) ==17543== by 0x58469F: set_point (intervals.c:1816) ==17543== by 0x5363D9: Fgoto_char (editfns.c:239) ==17543== by 0x56F9D6: exec_byte_code (bytecode.c:1553) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x570C7A: Fbyte_code (bytecode.c:482) ==17543== Address 0xff04f90 is 0 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x5829EC: find_interval (lisp.h:2377) ==17543== by 0x585DA7: validate_interval_range (textprop.c:212) ==17543== by 0x587705: Ftext_properties_at (textprop.c:601) ==17543== by 0x587771: Fget_text_property (textprop.c:621) ==17543== by 0x587B90: get_char_property_and_overlay (textprop.c:688) ==17543== by 0x587C02: Fget_char_property (textprop.c:702) ==17543== by 0x535FF3: Fconstrain_to_field (editfns.c:682) ==17543== by 0x536369: Fline_beginning_position (editfns.c:780) ==17543== by 0x50B4E7: Fbeginning_of_line (cmds.c:172) ==17543== by 0x53DC9B: Ffuncall (eval.c:2806) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== Address 0xff04f90 is 0 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x5829EC: find_interval (lisp.h:2377) ==17543== by 0x58908E: verify_interval_modification (textprop.c:2280) ==17543== by 0x4F9AEB: prepare_to_modify_buffer_1 (insdel.c:1817) ==17543== by 0x4F9FFB: prepare_to_modify_buffer (insdel.c:1872) ==17543== by 0x4FAE3A: del_range_1 (insdel.c:1584) ==17543== by 0x4FAEE5: del_range (insdel.c:1559) ==17543== by 0x533617: Fdelete_region (editfns.c:3232) ==17543== by 0x570188: exec_byte_code (bytecode.c:1728) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== Address 0xff04f90 is 0 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x5829EC: find_interval (lisp.h:2377) ==17543== by 0x584CC6: copy_intervals (intervals.c:2265) ==17543== by 0x584E5E: copy_intervals_to_string (intervals.c:2300) ==17543== by 0x5394D5: make_buffer_string_both (editfns.c:2511) ==17543== by 0x4F98E7: del_range_2 (insdel.c:1715) ==17543== by 0x4FAE91: del_range_1 (insdel.c:1591) ==17543== by 0x4FAEE5: del_range (insdel.c:1559) ==17543== by 0x533617: Fdelete_region (editfns.c:3232) ==17543== by 0x570188: exec_byte_code (bytecode.c:1728) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== Address 0xff04f90 is 0 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x583F27: offset_intervals (lisp.h:2377) ==17543== by 0x4F9973: del_range_2 (insdel.c:1734) ==17543== by 0x4FAE91: del_range_1 (insdel.c:1591) ==17543== by 0x4FAEE5: del_range (insdel.c:1559) ==17543== by 0x533617: Fdelete_region (editfns.c:3232) ==17543== by 0x570188: exec_byte_code (bytecode.c:1728) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== Address 0xff04f90 is 0 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x581ECE: delete_interval (lisp.h:2377) ==17543== by 0x582226: interval_deletion_adjustment (intervals.c:1334) ==17543== by 0x583F99: offset_intervals (intervals.c:1382) ==17543== by 0x4F9973: del_range_2 (insdel.c:1734) ==17543== by 0x4FAE91: del_range_1 (insdel.c:1591) ==17543== by 0x4FAEE5: del_range (insdel.c:1559) ==17543== by 0x533617: Fdelete_region (editfns.c:3232) ==17543== by 0x570188: exec_byte_code (bytecode.c:1728) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== Address 0xff04f90 is 0 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x581EE1: delete_interval (buffer.h:1160) ==17543== by 0x582226: interval_deletion_adjustment (intervals.c:1334) ==17543== by 0x583F99: offset_intervals (intervals.c:1382) ==17543== by 0x4F9973: del_range_2 (insdel.c:1734) ==17543== by 0x4FAE91: del_range_1 (insdel.c:1591) ==17543== by 0x4FAEE5: del_range (insdel.c:1559) ==17543== by 0x533617: Fdelete_region (editfns.c:3232) ==17543== by 0x570188: exec_byte_code (bytecode.c:1728) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== Address 0xff05250 is 704 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x5829EC: find_interval (lisp.h:2377) ==17543== by 0x5848A1: get_property_and_range (intervals.c:2174) ==17543== by 0x58B462: find_composition (composite.c:431) ==17543== by 0x58BD5E: update_compositions (composite.c:520) ==17543== by 0x4FAEBB: del_range_1 (insdel.c:1594) ==17543== by 0x4FAEE5: del_range (insdel.c:1559) ==17543== by 0x533617: Fdelete_region (editfns.c:3232) ==17543== by 0x570188: exec_byte_code (bytecode.c:1728) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== Address 0xff04f90 is 0 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x5829EC: find_interval (lisp.h:2377) ==17543== by 0x588C74: verify_interval_modification (textprop.c:2179) ==17543== by 0x4F9B0C: prepare_to_modify_buffer_1 (insdel.c:1823) ==17543== by 0x4F9FFB: prepare_to_modify_buffer (insdel.c:1872) ==17543== by 0x4FA168: insert_from_string_1 (insdel.c:919) ==17543== by 0x4FB814: insert_from_string (insdel.c:868) ==17543== by 0x5354D2: general_insert_function (editfns.c:2248) ==17543== by 0x5355B0: Finsert (editfns.c:2289) ==17543== by 0x56FA16: exec_byte_code (bytecode.c:1559) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== Address 0xff04f90 is 0 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x583414: offset_intervals (lisp.h:2377) ==17543== by 0x4FA304: insert_from_string_1 (insdel.c:968) ==17543== by 0x4FB814: insert_from_string (insdel.c:868) ==17543== by 0x5354D2: general_insert_function (editfns.c:2248) ==17543== by 0x5355B0: Finsert (editfns.c:2289) ==17543== by 0x56FA16: exec_byte_code (bytecode.c:1559) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== Address 0xff04f90 is 0 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x5829EC: find_interval (lisp.h:2377) ==17543== by 0x58344D: offset_intervals (intervals.c:864) ==17543== by 0x4FA304: insert_from_string_1 (insdel.c:968) ==17543== by 0x4FB814: insert_from_string (insdel.c:868) ==17543== by 0x5354D2: general_insert_function (editfns.c:2248) ==17543== by 0x5355B0: Finsert (editfns.c:2289) ==17543== by 0x56FA16: exec_byte_code (bytecode.c:1559) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== Address 0xff04f90 is 0 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== Invalid read of size 8 ==17543== at 0x581DA1: balance_possible_root_interval (lisp.h:2377) ==17543== by 0x58362C: offset_intervals (intervals.c:963) ==17543== by 0x4FA304: insert_from_string_1 (insdel.c:968) ==17543== by 0x4FB814: insert_from_string (insdel.c:868) ==17543== by 0x5354D2: general_insert_function (editfns.c:2248) ==17543== by 0x5355B0: Finsert (editfns.c:2289) ==17543== by 0x56FA16: exec_byte_code (bytecode.c:1559) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== Address 0xff04f90 is 0 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x581DB4: balance_possible_root_interval (buffer.h:1160) ==17543== by 0x58362C: offset_intervals (intervals.c:963) ==17543== by 0x4FA304: insert_from_string_1 (insdel.c:968) ==17543== by 0x4FB814: insert_from_string (insdel.c:868) ==17543== by 0x5354D2: general_insert_function (editfns.c:2248) ==17543== by 0x5355B0: Finsert (editfns.c:2289) ==17543== by 0x56FA16: exec_byte_code (bytecode.c:1559) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== Address 0xff05250 is 704 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x5829EC: find_interval (lisp.h:2377) ==17543== by 0x582EE0: graft_intervals_into_buffer (intervals.c:1659) ==17543== by 0x4FA348: insert_from_string_1 (insdel.c:976) ==17543== by 0x4FB814: insert_from_string (insdel.c:868) ==17543== by 0x5354D2: general_insert_function (editfns.c:2248) ==17543== by 0x5355B0: Finsert (editfns.c:2289) ==17543== by 0x56FA16: exec_byte_code (bytecode.c:1559) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== Address 0xff04f90 is 0 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x581DA1: balance_possible_root_interval (lisp.h:2377) ==17543== by 0x58299F: split_interval_left (intervals.c:615) ==17543== by 0x582F48: graft_intervals_into_buffer (intervals.c:1669) ==17543== by 0x4FA348: insert_from_string_1 (insdel.c:976) ==17543== by 0x4FB814: insert_from_string (insdel.c:868) ==17543== by 0x5354D2: general_insert_function (editfns.c:2248) ==17543== by 0x5355B0: Finsert (editfns.c:2289) ==17543== by 0x56FA16: exec_byte_code (bytecode.c:1559) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== Address 0xff04f90 is 0 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x581DB4: balance_possible_root_interval (buffer.h:1160) ==17543== by 0x58299F: split_interval_left (intervals.c:615) ==17543== by 0x582F48: graft_intervals_into_buffer (intervals.c:1669) ==17543== by 0x4FA348: insert_from_string_1 (insdel.c:976) ==17543== by 0x4FB814: insert_from_string (insdel.c:868) ==17543== by 0x5354D2: general_insert_function (editfns.c:2248) ==17543== by 0x5355B0: Finsert (editfns.c:2289) ==17543== by 0x56FA16: exec_byte_code (bytecode.c:1559) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== Address 0xff05250 is 704 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x583414: offset_intervals (lisp.h:2377) ==17543== by 0x4FA538: insert_1_both (insdel.c:839) ==17543== by 0x4FB9C0: insert_and_inherit (insdel.c:593) ==17543== by 0x50B1E9: internal_self_insert (cmds.c:489) ==17543== by 0x50B490: Fself_insert_command (cmds.c:310) ==17543== by 0x53DC9B: Ffuncall (eval.c:2806) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53D80F: funcall_lambda (eval.c:2974) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== Address 0xff04f90 is 0 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x583F27: offset_intervals (lisp.h:2377) ==17543== by 0x4FB260: replace_range (insdel.c:1411) ==17543== by 0x5131C2: Freplace_match (search.c:2622) ==17543== by 0x53DD19: Ffuncall (eval.c:2822) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x53DA09: funcall_lambda (eval.c:3040) ==17543== by 0x53DDE3: Ffuncall (eval.c:2855) ==17543== by 0x56DC34: exec_byte_code (bytecode.c:919) ==17543== by 0x570C7A: Fbyte_code (bytecode.c:482) ==17543== Address 0xff04f90 is 0 bytes inside a block of size 960 free'd ==17543== at 0x4C2A82E: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x52417C: lisp_free (alloc.c:931) ==17543== by 0x528990: Fgarbage_collect (alloc.c:6637) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) ==17543== by 0x43A3E4: display_mode_element (xdisp.c:21636) ==17543== by 0x43A592: display_mode_element (xdisp.c:21717) ==17543== by 0x43EB91: display_mode_line (xdisp.c:21234) ==17543== by 0x43EDFD: display_mode_lines (xdisp.c:21177) ==17543== ==17543== Invalid read of size 8 ==17543== at 0x8FD6CA0: memrchr (memrchr.S:349) ==17543== by 0x516C1C: find_newline (search.c:838) ==17543== by 0x516E06: find_newline_no_quit (search.c:918) ==17543== by 0x4407BE: back_to_previous_visible_line_start (xdisp.c:6008) ==17543== by 0x441023: move_it_vertically_backward (xdisp.c:9174) ==17543== by 0x45577E: redisplay_window (xdisp.c:16224) ==17543== by 0x45683E: redisplay_window_0 (xdisp.c:14054) ==17543== by 0x53C5B2: internal_condition_case_1 (eval.c:1369) ==17543== by 0x42B95E: redisplay_windows (xdisp.c:14034) ==17543== by 0x42B92F: redisplay_windows (xdisp.c:14028) ==17543== by 0x4430C9: redisplay_internal (xdisp.c:13633) ==17543== by 0x444201: redisplay (xdisp.c:12919) ==17543== Address 0x1094bcc8 is 0 bytes after a block of size 24 alloc'd ==17543== at 0x4C2B7B2: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==17543== by 0x524506: xrealloc (alloc.c:717) ==17543== by 0x4F5FE4: enlarge_buffer_text (buffer.c:5068) ==17543== by 0x4F905A: make_gap (insdel.c:465) ==17543== by 0x4F9103: make_gap_1 (insdel.c:503) ==17543== by 0x4F2894: compact_buffer (buffer.c:1677) ==17543== by 0x5279AD: Fgarbage_collect (alloc.c:5461) ==17543== by 0x53DB1E: Ffuncall (lisp.h:4518) ==17543== by 0x53C7E5: internal_condition_case_n (eval.c:1427) ==17543== by 0x42FA86: safe_call (xdisp.c:2563) ==17543== by 0x42FAC9: safe_call1 (xdisp.c:2579) ==17543== by 0x42FD41: safe_eval (xdisp.c:2587) From unknown Tue Jun 17 01:48:57 2025 X-Loop: help-debbugs@gnu.org Subject: bug#16502: segmentation fault with org-capture Resent-From: Dmitry Antipov Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 20 Jan 2014 17:14:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 16502 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Nathan Froyd Cc: 16502@debbugs.gnu.org Received: via spool by 16502-submit@debbugs.gnu.org id=B16502.139023802032504 (code B ref 16502); Mon, 20 Jan 2014 17:14:01 +0000 Received: (at 16502) by debbugs.gnu.org; 20 Jan 2014 17:13:40 +0000 Received: from localhost ([127.0.0.1]:58583 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1W5IPr-0008S9-W0 for submit@debbugs.gnu.org; Mon, 20 Jan 2014 12:13:40 -0500 Received: from forward5l.mail.yandex.net ([84.201.143.138]:42731) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1W5IPp-0008Ry-OZ for 16502@debbugs.gnu.org; Mon, 20 Jan 2014 12:13:38 -0500 Received: from smtp12.mail.yandex.net (smtp12.mail.yandex.net [95.108.131.191]) by forward5l.mail.yandex.net (Yandex) with ESMTP id 7BA8FC410D9; Mon, 20 Jan 2014 21:13:36 +0400 (MSK) Received: from smtp12.mail.yandex.net (localhost [127.0.0.1]) by smtp12.mail.yandex.net (Yandex) with ESMTP id 265D216A008E; Mon, 20 Jan 2014 21:13:36 +0400 (MSK) Received: from unknown (unknown [37.139.80.10]) by smtp12.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id 0LaOwxpIjR-DZaGVcWx; Mon, 20 Jan 2014 21:13:35 +0400 (using TLSv1 with cipher CAMELLIA256-SHA (256/256 bits)) (Client certificate not present) X-Yandex-Uniq: 7c7bb7e8-49c4-48d7-82da-673fbb55c96e DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1390238015; bh=dCYxHsI8eIE9/jUbFSd2dWmZC+5VXqt2cT87HZy/rEA=; h=Message-ID:Date:From:User-Agent:MIME-Version:To:CC:Subject: References:In-Reply-To:Content-Type:Content-Transfer-Encoding; b=hfgkMdn0RfzzaT1B8rxxUExkG4U/Ns1JIqkuwZzur8rg0oNXGc2v4MUq4fKIR7nal OXkAABInysiED4DKrlVRh38xGZ/AXD44ei9rL/rPZucKzaE5RG8C/uoOmZn3bc0sCM UPn3Otq4TlS/u9y5wXJ3LnWK8C6ZI8UTPFk6HP9M= Authentication-Results: smtp12.mail.yandex.net; dkim=pass header.i=@yandex.ru Message-ID: <52DD593F.3000806@yandex.ru> Date: Mon, 20 Jan 2014 21:13:35 +0400 From: Dmitry Antipov User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 References: <52DCDC6B.9090209@yandex.ru> <52DCECC7.9080705@yandex.ru> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) On 01/20/2014 07:29 PM, Nathan Froyd wrote: > The patch does not seem to make it much better; I can now do a couple > more cycles of m C-c C-k, but I can still segfault: Hm...I tried a lot with this patch, and was unable to reproduce again. IIUC you're running without ENABLE_CHECKING; could you please try to run debugging version configured with: CFLAGS='-O0 -g3' ./configure --enable-check-lisp-object-type --enable-checking Hopefully eassert will be raised somewhere before SIGSEGV; and all debugging tools works much better with these CFLAGS. If debugging version doesn't work too, try to obtain core dump and put your '-O0 -g3' emacs _and_ temacs binaries plus core dump somewhere on the net - I'll try to look into them. Dmitry From unknown Tue Jun 17 01:48:57 2025 X-Loop: help-debbugs@gnu.org Subject: bug#16502: segmentation fault with org-capture Resent-From: Nathan Froyd Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 20 Jan 2014 17:24:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 16502 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Dmitry Antipov Cc: 16502@debbugs.gnu.org Received: via spool by 16502-submit@debbugs.gnu.org id=B16502.13902386381785 (code B ref 16502); Mon, 20 Jan 2014 17:24:02 +0000 Received: (at 16502) by debbugs.gnu.org; 20 Jan 2014 17:23:58 +0000 Received: from localhost ([127.0.0.1]:58587 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1W5IZp-0000Sf-6P for submit@debbugs.gnu.org; Mon, 20 Jan 2014 12:23:57 -0500 Received: from mail-oa0-f41.google.com ([209.85.219.41]:35325) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1W5IZm-0000SS-DR for 16502@debbugs.gnu.org; Mon, 20 Jan 2014 12:23:55 -0500 Received: by mail-oa0-f41.google.com with SMTP id j17so1987781oag.0 for <16502@debbugs.gnu.org>; Mon, 20 Jan 2014 09:23:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=tt7cj4229/yxOLHuwIRA9hzhJmEp0yQU5uhSUJKzKiE=; b=HxDXRRFbcTmujZggLi4EMuwxH77XQIqCeYQ8/xVqurACxvLfX3UrRD/E5gB+imd4r3 UOE20DznB/raCdcwPpQsJgiDfv1nrkfy+6M03DSCjT8gwnvkD46FkwBGdE7SZq6jmF0I n8/ck8N+whALYQ0yMPRurSWyzfCffFjD9PARw+GK5ryYea0Xx1s1Ad5e+EytIKLOR9z2 ABXYRjgOdApxAMwvMtZ59LEuG2BCy1VM3cTrRvwxVQkYrjaAemVxe5ykVTK2cauv0UvD 8cXb4wWX9ZvSu5gd6r4LeAuQHHwxnUou8en+3qnD6R7UWvJX0JD2R8C7N3BBW0Z+lmAV s5AA== MIME-Version: 1.0 X-Received: by 10.60.98.101 with SMTP id eh5mr2593911oeb.53.1390238633463; Mon, 20 Jan 2014 09:23:53 -0800 (PST) Received: by 10.182.229.38 with HTTP; Mon, 20 Jan 2014 09:23:53 -0800 (PST) In-Reply-To: <52DD593F.3000806@yandex.ru> References: <52DCDC6B.9090209@yandex.ru> <52DCECC7.9080705@yandex.ru> <52DD593F.3000806@yandex.ru> Date: Mon, 20 Jan 2014 12:23:53 -0500 Message-ID: From: Nathan Froyd Content-Type: text/plain; charset=ISO-8859-1 X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) On Mon, Jan 20, 2014 at 12:13 PM, Dmitry Antipov wrote: > On 01/20/2014 07:29 PM, Nathan Froyd wrote: > Hm...I tried a lot with this patch, and was unable to reproduce again. > IIUC you're running without ENABLE_CHECKING; could you please try to run > debugging version configured with: > > CFLAGS='-O0 -g3' ./configure --enable-check-lisp-object-type > --enable-checking > > Hopefully eassert will be raised somewhere before SIGSEGV; and all debugging > tools works much better with these CFLAGS. I apologize, but previously I only patch --dry-run'd the patch and didn't actually apply it. With the patch properly applied, I cannot reproduce the crashes or the runaway memory allocation. Thank you for looking into this. From unknown Tue Jun 17 01:48:57 2025 X-Loop: help-debbugs@gnu.org Subject: bug#16502: segmentation fault with org-capture Resent-From: Dmitry Antipov Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 21 Jan 2014 02:33:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 16502 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Nathan Froyd Cc: 16502@debbugs.gnu.org Received: via spool by 16502-submit@debbugs.gnu.org id=B16502.13902715541212 (code B ref 16502); Tue, 21 Jan 2014 02:33:01 +0000 Received: (at 16502) by debbugs.gnu.org; 21 Jan 2014 02:32:34 +0000 Received: from localhost ([127.0.0.1]:58831 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1W5R8k-0000JT-Ag for submit@debbugs.gnu.org; Mon, 20 Jan 2014 21:32:34 -0500 Received: from forward3l.mail.yandex.net ([84.201.143.136]:58483) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1W5R8i-0000JJ-7b for 16502@debbugs.gnu.org; Mon, 20 Jan 2014 21:32:33 -0500 Received: from smtp8.mail.yandex.net (smtp8.mail.yandex.net [77.88.61.54]) by forward3l.mail.yandex.net (Yandex) with ESMTP id 9218E1500F60; Tue, 21 Jan 2014 06:32:30 +0400 (MSK) Received: from smtp8.mail.yandex.net (localhost [127.0.0.1]) by smtp8.mail.yandex.net (Yandex) with ESMTP id 442CA1B613F5; Tue, 21 Jan 2014 06:32:30 +0400 (MSK) Received: from unknown (unknown [37.139.80.10]) by smtp8.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id WhF2TU5cdh-WUA8oEDb; Tue, 21 Jan 2014 06:32:30 +0400 (using TLSv1 with cipher CAMELLIA256-SHA (256/256 bits)) (Client certificate not present) X-Yandex-Uniq: a117ac27-d36d-4e45-bc7e-011b1ee2f0fb DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1390271550; bh=tZJxx8lCg1N4YfhQNJfeslLy9LUO5zc3reVCZY6EE90=; h=Message-ID:Date:From:User-Agent:MIME-Version:To:CC:Subject: References:In-Reply-To:Content-Type:Content-Transfer-Encoding; b=tushy17d3uP3zkadmpHrRZ9VOCa2KCOeWXPFnB1OQsdAJfVIuJrqtu3dqK/9uWXGh G+eD/xyMTJlNvZAL46O10wlYQJ0FTJYdUSB4zeMzuKz37H/VB5+xbODZA/w6ZT/c11 iqFFog5sQaO7u814hhDl5/ycQ69IkhG4fc78DOz0= Authentication-Results: smtp8.mail.yandex.net; dkim=pass header.i=@yandex.ru Message-ID: <52DDDC3D.7020202@yandex.ru> Date: Tue, 21 Jan 2014 06:32:29 +0400 From: Dmitry Antipov User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 References: <52DCDC6B.9090209@yandex.ru> <52DCECC7.9080705@yandex.ru> <52DD593F.3000806@yandex.ru> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) On 01/20/2014 09:23 PM, Nathan Froyd wrote: > I apologize, but previously I only patch --dry-run'd the patch and > didn't actually apply it. With the patch properly applied, I cannot > reproduce the crashes or the runaway memory allocation. Thank you for > looking into this. OK, hopefully this should be fixed in r116090. Dmitry From debbugs-submit-bounces@debbugs.gnu.org Mon Jan 27 15:20:41 2014 Received: (at control) by debbugs.gnu.org; 27 Jan 2014 20:20:41 +0000 Received: from localhost ([127.0.0.1]:38434 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1W7sff-0003Be-Hn for submit@debbugs.gnu.org; Mon, 27 Jan 2014 15:20:40 -0500 Received: from fencepost.gnu.org ([208.118.235.10]:57829) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1W7sfc-0003BR-SJ for control@debbugs.gnu.org; Mon, 27 Jan 2014 15:20:37 -0500 Received: from rgm by fencepost.gnu.org with local (Exim 4.71) (envelope-from ) id 1W7sfc-0000X1-Ff for control@debbugs.gnu.org; Mon, 27 Jan 2014 15:20:36 -0500 Date: Mon, 27 Jan 2014 15:20:36 -0500 Message-Id: Subject: control message for bug 16502 To: X-Mailer: mail (GNU Mailutils 2.1) From: Glenn Morris X-Spam-Score: -5.5 (-----) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.5 (-----) close 16502 24.4