From unknown Mon Jun 23 04:10:30 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#19379 <19379@debbugs.gnu.org> To: bug#19379 <19379@debbugs.gnu.org> Subject: Status: 25.0.50; segfault in backward-prefix-chars Reply-To: bug#19379 <19379@debbugs.gnu.org> Date: Mon, 23 Jun 2025 11:10:30 +0000 retitle 19379 25.0.50; segfault in backward-prefix-chars reassign 19379 emacs submitter 19379 martin rudalics severity 19379 important tag 19379 confirmed patch thanks From debbugs-submit-bounces@debbugs.gnu.org Sun Dec 14 04:18:11 2014 Received: (at submit) by debbugs.gnu.org; 14 Dec 2014 09:18:11 +0000 Received: from localhost ([127.0.0.1]:45216 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Y05Ja-0005qx-UM for submit@debbugs.gnu.org; Sun, 14 Dec 2014 04:18:11 -0500 Received: from eggs.gnu.org ([208.118.235.92]:59427) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Y05JY-0005qk-FG for submit@debbugs.gnu.org; Sun, 14 Dec 2014 04:18:09 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Y05JI-0002m0-Sq for submit@debbugs.gnu.org; Sun, 14 Dec 2014 04:18:03 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,FREEMAIL_FROM autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:49575) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Y05JI-0002lw-Q7 for submit@debbugs.gnu.org; Sun, 14 Dec 2014 04:17:52 -0500 Received: from eggs.gnu.org ([2001:4830:134:3::10]:32891) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Y05JB-0005dQ-98 for bug-gnu-emacs@gnu.org; Sun, 14 Dec 2014 04:17:52 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Y05J3-0002ad-J7 for bug-gnu-emacs@gnu.org; Sun, 14 Dec 2014 04:17:45 -0500 Received: from mout.gmx.net ([212.227.15.18]:63146) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Y05J3-0002Zj-98 for bug-gnu-emacs@gnu.org; Sun, 14 Dec 2014 04:17:37 -0500 Received: from [88.117.61.91] ([88.117.61.91]) by mail.gmx.com (mrgmx003) with ESMTPSA (Nemesis) id 0M7pku-1Xmw8t0pX6-00vPch for ; Sun, 14 Dec 2014 10:17:35 +0100 Message-ID: <548D55A4.5040307@gmx.at> Date: Sun, 14 Dec 2014 10:17:24 +0100 From: martin rudalics MIME-Version: 1.0 To: Bug-Gnu-Emacs Subject: 25.0.50; segfault in backward-prefix-chars Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K0:bHgiDViaFcTYqeN51fXqRCA3ccYnUSga028sa4R8qlMuiRsz78C Q6gaiYg0OGStF8IHtQh2Q8QxtJQ7tHr01Zp0dkcmuigeDy7mJe5QPQAWrXwo0KxPzle3dU1 cYwzwQzJpfAYjSzpc/OvoCbrwUUerGO6RpQitNkjtFG8UXKWpuJWBLSBfLwYhocvOtkhZQd FsjBUJhCjv2tto246ZEOA== X-UI-Out-Filterresults: notjunk:1; X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x [generic] X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.1 (----) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.1 (----) With emacs -Q inserting at the beginning of *scratch* the text `((1 2 3) then trying to insert a final closing ")" gets me Program received signal SIGSEGV, Segmentation fault. 0x011d30f8 in Fbackward_prefix_chars () at syntax.c:3049 3049 DEC_BOTH (pos, pos_byte); (gdb) bt #0 0x011d30f8 in Fbackward_prefix_chars () at syntax.c:3049 #1 0x01195753 in Ffuncall (nargs=1, args=0x82e5a8) at eval.c:2720 #2 0x011d822a in exec_byte_code (bytestr=..., vector=..., maxdepth=..., args_template=..., nargs=1, args=0x82e900) at bytecode.c:920 #3 0x01195f62 in funcall_lambda (fun=..., nargs=1, arg_vector=0x82e8fc) at eval.c:2890 #4 0x0119598e in Ffuncall (nargs=2, args=0x82e8f8) at eval.c:2772 #5 0x011d822a in exec_byte_code (bytestr=..., vector=..., maxdepth=..., args_template=..., nargs=0, args=0x82ec58) at bytecode.c:920 #6 0x01195f62 in funcall_lambda (fun=..., nargs=0, arg_vector=0x82ec58) at eval.c:2890 #7 0x0119598e in Ffuncall (nargs=1, args=0x82ec54) at eval.c:2772 #8 0x011d822a in exec_byte_code (bytestr=..., vector=..., maxdepth=..., args_template=..., nargs=0, args=0x82f02c) at bytecode.c:920 #9 0x01195f62 in funcall_lambda (fun=..., nargs=0, arg_vector=0x82f02c) at eval.c:2890 #10 0x0119598e in Ffuncall (nargs=1, args=0x82f028) at eval.c:2772 #11 0x01194d75 in funcall_nil (nargs=1, args=0x82f028) at eval.c:2354 #12 0x01195186 in run_hook_with_args (nargs=1, args=0x82f028, funcall=0x1194d5d ) at eval.c:2539 #13 0x01194db5 in Frun_hooks (nargs=1, args=0x15501c0) at eval.c:2381 #14 0x0114f64b in internal_self_insert (c=41, n=1) at cmds.c:510 #15 0x0114ebd9 in Fself_insert_command (n=...) at cmds.c:310 #16 0x01195770 in Ffuncall (nargs=2, args=0x82f2d4) at eval.c:2723 #17 0x0118d170 in Ffuncall_interactively (nargs=2, args=0x82f2d4) at callint.c:270 #18 0x01195664 in Ffuncall (nargs=3, args=0x82f2d0) at eval.c:2703 #19 0x0118eed3 in Fcall_interactively (function=..., record_flag=..., keys=...) at callint.c:876 #20 0x011957c5 in Ffuncall (nargs=4, args=0x82f53c) at eval.c:2730 #21 0x011d822a in exec_byte_code (bytestr=..., vector=..., maxdepth=..., args_template=..., nargs=1, args=0x82f8a0) at bytecode.c:920 #22 0x01195f62 in funcall_lambda (fun=..., nargs=1, arg_vector=0x82f89c) at eval.c:2890 #23 0x0119598e in Ffuncall (nargs=2, args=0x82f898) at eval.c:2772 #24 0x011952a4 in call1 (fn=..., arg1=...) at eval.c:2576 #25 0x01103e95 in command_loop_1 () at keyboard.c:1576 #26 0x011926bb in internal_condition_case (bfun=0x11037b5 , handlers=..., hfun=0x1103017 ) at eval.c:1344 #27 0x0110346b in command_loop_2 (ignore=...) at keyboard.c:1197 #28 0x01191c5a in internal_catch (tag=..., func=0x1103447 , arg=...) at eval.c:1105 #29 0x01103425 in command_loop () at keyboard.c:1176 #30 0x01102bb3 in recursive_edit_1 () at keyboard.c:786 #31 0x01102d70 in Frecursive_edit () at keyboard.c:857 #32 0x01100d82 in main (argc=2, argv=0xa32880) at emacs.c:1623 Lisp Backtrace: "backward-prefix-chars" (0x82e5ac) "forward-sexp" (0x82e8fc) "blink-matching-open" (0x82ec58) "blink-paren-post-self-insert-function" (0x82f02c) "self-insert-command" (0x82f2d8) "funcall-interactively" (0x82f2d4) "call-interactively" (0x82f540) "command-execute" (0x82f89c) (gdb) I have no idea what happened because of (gdb) p pos $1 = 0 (gdb) p beg $2 = 1 (gdb) p pos_byte $3 = 0 so if (pos + 1 > beg) DEC_BOTH (pos, pos_byte); should not have been taken, in principle at least ... This is with a not entirely up-to-date build of my GNU Emacs 25.0.50.1 (i686-pc-mingw32). martin From debbugs-submit-bounces@debbugs.gnu.org Sun Jun 05 09:36:03 2016 Received: (at control) by debbugs.gnu.org; 5 Jun 2016 13:36:03 +0000 Received: from localhost ([127.0.0.1]:54984 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b9YDj-000372-KA for submit@debbugs.gnu.org; Sun, 05 Jun 2016 09:36:03 -0400 Received: from mail-oi0-f46.google.com ([209.85.218.46]:36138) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b9YDh-000360-Tb for control@debbugs.gnu.org; Sun, 05 Jun 2016 09:36:02 -0400 Received: by mail-oi0-f46.google.com with SMTP id j1so190850140oih.3 for ; Sun, 05 Jun 2016 06:36:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=PAqK74MSA407m2TPZBmRJ7NI9Z6HRbhV1z5N7PBBW3U=; b=Twtub86OWVlWWJfZL26/XYrHEtQOlz7+FG/93X1uU//BEWYpH9DLwT1hiHyArEyTbh uoENxCuxocgGU9JAT6A0mZaeXDjDboPrCkRVnwBzmE39NVmfRIxl0DSIwuk4jZR3HJ1x raqmEk1pJpezwYRNZ4NZUWbwk4HkxgsdPx65/5jMavaUq78UU81LQHpeqKYT1udNOnEp XbMlw5Z9weOpmJX8uakFA/WDvZr1szra98a5Uer2gNt8PwP/3ueeAaer1fu7LWeHakjU UyOTX9xFN5v0/BYacPIkLCDeiG4nhaEk5SuT+85pYjiPmrf+hd8+xMqdWYkCp647xjFs GSWw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=PAqK74MSA407m2TPZBmRJ7NI9Z6HRbhV1z5N7PBBW3U=; b=VtFMTTjFs24xkl356/IHBbp5fKjPdR27YXEQhIAASVr8bG0BPUG3y8tZkQKvc8P6zR 0nAWR1A0CLPVolcFbE1xE9GpFGikivFi4AMQeOkyIJCVozbMXaUWiNk8+e6YFV84VRTV 4ttU0cLdhCMb0FZHMKKveGNelSg3AQPUHpZbnKGQTJAM7WIM4CJeK4Fei74zqDAGdamY iepZArbAkLVuLKDGVtJ8iNMGQojyvsK+ILeJaCJQLUWAhzoWLr9mgtveoLzi2Um1GbEu LGBFCGz9Mc4hQiSVgkOmRkH3iz9kyqpEVYSXYMtf1YbRl85WEkUVFDhEyqKrUE7a+4WX 9qXg== X-Gm-Message-State: ALyK8tJLMEqPLigergjrR2R5n+aCoR5+zkqDci4g7yja7Oq3eJkVG/Nzkkp9tOgccsxOxmjGXm74NbScY7bXPQ== X-Received: by 10.157.23.195 with SMTP id j61mr7029598otj.92.1465133751429; Sun, 05 Jun 2016 06:35:51 -0700 (PDT) MIME-Version: 1.0 Received: by 10.157.5.168 with HTTP; Sun, 5 Jun 2016 06:35:50 -0700 (PDT) In-Reply-To: <5753D686.1020204@gmx.at> References: <837fe4vnxp.fsf@gnu.org> <5753D686.1020204@gmx.at> From: Noam Postavsky Date: Sun, 5 Jun 2016 09:35:50 -0400 X-Google-Sender-Auth: 6HlYt-iuXUYdIGPESh_uP9hKN90 Message-ID: Subject: Re: bug#3552: 23.0.94; backward-prefix-chars: Point before start of properties To: martin rudalics Content-Type: multipart/mixed; boundary=94eb2c094b18cd816a0534880804 Bcc: control@debbugs.gnu.org X-Spam-Score: -0.5 (/) X-Debbugs-Envelope-To: control Cc: Eli Zaretskii , 3552@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.5 (/) --94eb2c094b18cd816a0534880804 Content-Type: text/plain; charset=UTF-8 forcemerge 3552 17132 19379 quit On Sun, Jun 5, 2016 at 3:36 AM, martin rudalics wrote: > Make it > > * src/syntax.c (Fbackward_prefix_chars): Stop the loop when beginning of > buffer is reached (Bug#3552, Bug#19379). Heh, seeing that I decided to search the bug database for backwards-prefix-chars and found also Bug #17132. Updated patch attached. --94eb2c094b18cd816a0534880804 Content-Type: text/x-diff; charset=US-ASCII; name="0001-Fbackward_prefix_chars-stay-within-buffer-bounds.patch" Content-Disposition: attachment; filename="0001-Fbackward_prefix_chars-stay-within-buffer-bounds.patch" Content-Transfer-Encoding: base64 X-Attachment-Id: f_ip2mj8j90 RnJvbSA5ODU4NzRlYmNmYWU5Njk4Mzg1N2U4MTlmNTcwY2FjMzU1MTA1MmM3IE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBOb2FtIFBvc3RhdnNreSA8bnBvc3RhdnNAZ21haWwuY29tPgpE YXRlOiBTYXQsIDQgSnVuIDIwMTYgMDk6MDI6MjAgLTA0MDAKU3ViamVjdDogW1BBVENIXSBGYmFj a3dhcmRfcHJlZml4X2NoYXJzOiBzdGF5IHdpdGhpbiBidWZmZXIgYm91bmRzCgpUaGUgY29tbWl0 IDFmZDMxNzJkICIoRmJhY2t3YXJkX3ByZWZpeF9jaGFycyk6IFNldCBwb2ludCBwcm9wZXJseSB3 aGlsZQpzY2FubmluZyIgKDE5OTgtMDMtMTgpLCBtb3ZlZCB0aGUgY2hlY2sgYWdhaW5zdCBvZiB0 aGUgcG9zaXRpb24gYWdhaW5zdCB0aGUKYnVmZmVyIGJlZ2lubmluZyBvdXQgdGhlIGxvb3AgY29u ZGl0aW9uIHNvIHRoYXQgd2UgbWlnaHQgZW5kIHVwIGNoZWNraW5nCnRoZSBzeW50YXggb2YgY2hh cmFjdGVycyBiZWZvcmUgdGhlIGJlZ2lubmluZyBvZiB0aGUgYnVmZmVyLiAgVGhpcyBjYW4KY2F1 c2Ugc2VnZmF1bHRzIG9yIHRyaWdnZXIgYSAiUG9pbnQgYmVmb3JlIHN0YXJ0IG9mIHByb3BlcnRp ZXMiIGVycm9yIGluCmB1cGRhdGVfaW50ZXJ2YWwnIChjYWxsZWQgaW5kaXJlY3RseSBmcm9tIGBj aGFyX3F1b3RlZCcpLgoKKiBzcmMvc3ludGF4LmMgKEZiYWNrd2FyZF9wcmVmaXhfY2hhcnMpOiBT dG9wIHRoZSBsb29wIHdoZW4gYmVnaW5uaW5nIG9mCmJ1ZmZlciBpcyByZWFjaGVkIChCdWcgIzM1 NTIsIEJ1ZyAjMTcxMzIsIEJ1ZyAjMTkzNzkpLgotLS0KIHNyYy9zeW50YXguYyB8IDUgKysrLS0K IDEgZmlsZSBjaGFuZ2VkLCAzIGluc2VydGlvbnMoKyksIDIgZGVsZXRpb25zKC0pCgpkaWZmIC0t Z2l0IGEvc3JjL3N5bnRheC5jIGIvc3JjL3N5bnRheC5jCmluZGV4IDhlMTRiZjMuLmIxYmE1YzYg MTAwNjQ0Ci0tLSBhL3NyYy9zeW50YXguYworKysgYi9zcmMvc3ludGF4LmMKQEAgLTMxMDksOCAr MzEwOSw5IEBAIERFRlVOICgiYmFja3dhcmQtcHJlZml4LWNoYXJzIiwgRmJhY2t3YXJkX3ByZWZp eF9jaGFycywgU2JhY2t3YXJkX3ByZWZpeF9jaGFycywKICAgICAgIG9wb2ludCA9IHBvczsKICAg ICAgIG9wb2ludF9ieXRlID0gcG9zX2J5dGU7CiAKLSAgICAgIGlmIChwb3MgKyAxID4gYmVnKQot CURFQ19CT1RIIChwb3MsIHBvc19ieXRlKTsKKyAgICAgIGlmIChwb3MgPD0gYmVnKQorICAgICAg ICBicmVhazsKKyAgICAgIERFQ19CT1RIIChwb3MsIHBvc19ieXRlKTsKICAgICB9CiAKICAgU0VU X1BUX0JPVEggKG9wb2ludCwgb3BvaW50X2J5dGUpOwotLSAKMi44LjAKCg== --94eb2c094b18cd816a0534880804-- From unknown Mon Jun 23 04:10:30 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Fri, 15 Jul 2016 11:24:03 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator