GNU bug report logs - #3605
Crash in ns_index_color (nsterm.m:1305)

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 3605 in the body.
You can then email your comments to 3605 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> emacsbugs.donarmstrong.com (full text, mbox):

From: David Reitter <david.reitter <at> gmail.com>
To: emacs-pretest-bug <at> gnu.org
Cc: Adrian Robert <adrian.b.robert <at> gmail.com>, Ben Lowery <blowery <at> gmail.com>,
        Aquamacs Bugs <aquamacs-bugs <at> aquamacs.org>
Subject: Crash in ns_index_color (nsterm.m:1305)
Date: Thu, 18 Jun 2009 10:58:41 -0400

[Message part 1 (text/plain, inline)]

Forwarding a crash report.
nsterm.m:1305, in the given revision, is the line marked:

  {
    int i;
    for (i = 1; i < color_table->avail; i++)
      {
*****        if (color_table->colors[i] && [color_table->colors[i]  
isEqual: color])
          {
            [color_table->colors[i] retain];
            return i;
          }
      }
  }

Btw, why are we managing this table ourselves rather than using an  
appropriate NS class?  It seems like we're defining our own  
ns_color_table structure anyways...

Ben, I wonder if you're using color themes or something else that  
defines a lot of different colors.

- D


Begin forwarded message:

> From: Ben Lowery <blowery <at> gmail.com>
> Date: June 18, 2009 10:43:00 AM EDT
> To: Development of Aquamacs Emacs <aquamacs-devel <at> aquamacs.org>
> Subject: [Aquamacs-devel] Crasher in ns_index_color (nsterm.m:1305)
>
> Attached is a crash log for Aquamacs, on
> 3fa42d1a06357f8f65dff161524374f3feaaa3ac
>
> Happened as I was C-x C-f ing to open a file. Happens sporadically,
> and I don't have a good repro case.
>
> -b

[aquamacs-crash.txt (text/plain, attachment)]

[Message part 3 (text/plain, inline)]

> _______________________

[smime.p7s (application/pkcs7-signature, attachment)]

Message #8 received at 3605 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: Glenn Morris <rgm+emacsbugs <at> gnu.org>
To: David Reitter <david.reitter <at> gmail.com>
Cc: 3605 <at> debbugs.gnu.org
Subject: Re: bug#3605: Crash in ns_index_color (nsterm.m:1305)
Date: Thu, 18 Jun 2009 14:08:44 -0400

David Reitter wrote:

> Forwarding a crash report.

Please use X-Debbugs-Cc, rather than Cc, when you want to send people
CC copies of a new bug report. Otherwise every reply ends up creating
a new bug.

Also, if you know the problem is NS-specific, it's helpful to put

Package: emacs,ns

as the first line of the body in the initial report.

See admin/notes/bugtracker for more details.


Thanks.

Message #17 received at 3605 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: Adrian Robert <adrian.b.robert <at> gmail.com>
To: 3605 <at> debbugs.gnu.org
Cc: David Reitter <david.reitter <at> gmail.com>, Ben Lowery <blowery <at> gmail.com>
Subject: Re: Crash in ns_index_color (nsterm.m:1305)
Date: Thu, 23 Jul 2009 10:46:45 -0400

http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3605

Hi,

If you could please retest this against the latest branch or trunk,  
I've checked in some robustness improvement to the indexed color stuff  
that may clear this up.

thanks.

Message #22 received at 3605 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: David Reitter <david.reitter <at> gmail.com>
To: Adrian Robert <adrian.b.robert <at> gmail.com>
Cc: 3605 <at> debbugs.gnu.org, Ben Lowery <blowery <at> gmail.com>
Subject: Re: Crash in ns_index_color (nsterm.m:1305)
Date: Thu, 23 Jul 2009 15:59:08 +0100

[Message part 1 (text/plain, inline)]

On Jul 23, 2009, at 3:46 PM, Adrian Robert wrote:

> http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3605
>
> Hi,
>
> If you could please retest this against the latest branch or trunk,  
> I've checked in some robustness improvement to the indexed color  
> stuff that may clear this up.


Ben, perhaps you can do that.

I currently don't reproduce the error even with yesterday's build, but  
that's probably due to changes in the Aquamacs master branch that  
prevent this.

I'm currently traveling and can't really do much; I can't build Emacs  
locally anyways... Sorry!

[smime.p7s (application/pkcs7-signature, attachment)]

Message #27 received at 3605 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: David Reitter <david.reitter <at> gmail.com>
To: Adrian Robert <adrian.b.robert <at> gmail.com>
Cc: 3605 <at> debbugs.gnu.org, Ben Lowery <blowery <at> gmail.com>
Subject: Re: Crash in ns_index_color (nsterm.m:1305)
Date: Thu, 23 Jul 2009 16:16:26 +0100

[Message part 1 (text/plain, inline)]

On Jul 23, 2009, at 3:46 PM, Adrian Robert wrote:
>
> If you could please retest this against the latest branch or trunk,  
> I've checked in some robustness improvement to the indexed color  
> stuff that may clear this up.

Further to that, I don't think your change is as safe as it could be.
Below is what I did in Aquamacs:master:  I'm returning an actual color  
in case the index is invalid, rather than nil.
Is ns_lookup_indexed_color() generally expected to return nil if  
something goes wrong?  It's cleaner than returning something random,  
but it'll still lead to an error if unchecked.

- D

<<<<<<< HEAD:src/nsterm.m

  /* for some reason, idx is 0 for undefined colors.
     Also, this function is called with very high indices at times
     (XXX: debug this.) */
  if (idx > 0 && idx < color_table->size
      && ![color_table->empty_indices containsObject: [NSNumber  
numberWithUnsignedInt: idx]])
    {
      /* fprintf(stderr, "lookup color %d\n", idx); */
      return color_table->colors[idx];
    }
  /* fprintf(stderr, "DISCARDING lookup color %d\n", idx); */
  return [NSColor orangeColor];  // mark undefined color
=======
  if (idx < 1 || idx >= color_table->avail)
    return nil;
  return color_table->colors[idx];
>>>>>>> emacs23.1:src/nsterm.m

[smime.p7s (application/pkcs7-signature, attachment)]

Message #32 received at 3605 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: Adrian Robert <adrian.b.robert <at> gmail.com>
To: David Reitter <david.reitter <at> gmail.com>
Cc: 3605 <at> debbugs.gnu.org, Ben Lowery <blowery <at> gmail.com>
Subject: Re: Crash in ns_index_color (nsterm.m:1305)
Date: Thu, 23 Jul 2009 11:36:10 -0400

On Jul 23, 2009, at 11:16 AM, David Reitter wrote:

> On Jul 23, 2009, at 3:46 PM, Adrian Robert wrote:
>>
>> If you could please retest this against the latest branch or trunk,  
>> I've checked in some robustness improvement to the indexed color  
>> stuff that may clear this up.
>
> Further to that, I don't think your change is as safe as it could be.
> Below is what I did in Aquamacs:master:  I'm returning an actual  
> color in case the index is invalid, rather than nil.
> Is ns_lookup_indexed_color() generally expected to return nil if  
> something goes wrong?  It's cleaner than returning something random,  
> but it'll still lead to an error if unchecked.

nil should not cause a problem because sending a message to nil is a  
no-op in Objective-C.

The problem with returning orange as you do is that the semantics of  
the table are such that all colors are retained, whereas the  
orangeColor is autoreleased.  Better would be to put an actual color  
entry into slot 0, and retain it, then return this as the default.

Have you found any pattern to the 0's when using the orange?

We should develop a means of periodically moving tested improvements  
from Aquamacs development into the mainline.

Message #37 received at 3605 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: Ben Lowery <blowery <at> gmail.com>
To: David Reitter <david.reitter <at> gmail.com>
Cc: Adrian Robert <adrian.b.robert <at> gmail.com>, 3605 <at> debbugs.gnu.org
Subject: Re: Crash in ns_index_color (nsterm.m:1305)
Date: Wed, 29 Jul 2009 10:39:27 -0400

I just got this crash on current Emacs head.

Process:         Emacs [27424]
Path:
/Users/blowery/src/emacs.git/nextstep/Emacs.app/Contents/MacOS/Emacs
Identifier:      org.gnu.Emacs
Version:         Version 23.1.50 (9.0)
Code Type:       X86 (Native)
Parent Process:  launchd [239]

Interval Since Last Report:          108778 sec
Crashes Since Last Report:           1
Per-App Interval Since Last Report:  88473 sec
Per-App Crashes Since Last Report:   1

Date/Time:       2009-07-29 10:25:05.504 -0400
OS Version:      Mac OS X 10.5.7 (9J61)
Report Version:  6
Anonymous UUID:  B390CC9E-43EB-401F-8BC5-53FEF67D8BA6

Exception Type:  EXC_BAD_ACCESS (SIGABRT)
Exception Codes: KERN_INVALID_ADDRESS at 0x00000000c5e4ff8b
Crashed Thread:  0

Thread 0 Crashed:
0   libSystem.B.dylib             	0x9538de42 __kill + 10
1   org.gnu.Emacs                 	0x0009157a fatal_error_signal + 314
(emacs.c:405)
2   libSystem.B.dylib             	0x9538c2bb _sigtramp + 43
3   ???                           	0xffffffff 0 + 4294967295
4   libSystem.B.dylib             	0x9540023a raise + 26
5   libSystem.B.dylib             	0x9540c679 abort + 73
6   org.gnu.Emacs                 	0x0016c2f5 ns_term_shutdown + 117
(nsterm.m:4015)
7   org.gnu.Emacs                 	0x000915cf fatal_error_signal + 399
(emacs.c:390)
8   libSystem.B.dylib             	0x9538c2bb _sigtramp + 43
9   ???                           	0xffffffff 0 + 4294967295
10  org.gnu.Emacs                 	0x0016800c ns_index_color + 108
(nsterm.m:1280)
11  org.gnu.Emacs                 	0x001691c2 ns_defined_color + 114
(nsterm.m:1635)
12  org.gnu.Emacs                 	0x00086fec defined_color + 76 (xfaces.c:1270)
13  org.gnu.Emacs                 	0x0008730e load_color + 62 (xfaces.c:1439)
14  org.gnu.Emacs                 	0x0008d27a realize_face + 1034
(xfaces.c:1528)
15  org.gnu.Emacs                 	0x0008e03d lookup_face + 93 (xfaces.c:4722)
16  org.gnu.Emacs                 	0x0008f6b2 face_at_buffer_position
+ 578 (xfaces.c:6360)
17  org.gnu.Emacs                 	0x0001a357 handle_face_prop + 103
(xdisp.c:3456)
18  org.gnu.Emacs                 	0x0001cec8 handle_stop + 136 (xdisp.c:3129)
19  org.gnu.Emacs                 	0x00020177 next_element_from_buffer
+ 599 (xdisp.c:6486)
20  org.gnu.Emacs                 	0x0001e27c get_next_display_element
+ 44 (xdisp.c:5661)
21  org.gnu.Emacs                 	0x00028b5c display_line + 396 (xdisp.c:16542)
22  org.gnu.Emacs                 	0x0002a86e try_window_id + 1230
(xdisp.c:15169)
23  org.gnu.Emacs                 	0x00031d2e redisplay_window + 5678
(xdisp.c:13558)
24  org.gnu.Emacs                 	0x00033ca0 redisplay_window_1 + 48
(xdisp.c:12272)
25  org.gnu.Emacs                 	0x001074f3
internal_condition_case_1 + 259 (eval.c:1560)
26  org.gnu.Emacs                 	0x00035b31 redisplay_internal +
3121 (xdisp.c:11898)
27  org.gnu.Emacs                 	0x0009ed75 read_char + 1813 (keyboard.c:2709)
28  org.gnu.Emacs                 	0x0012af5a read_filtered_event +
138 (lread.c:714)
29  org.gnu.Emacs                 	0x0012b287 Fread_event + 103 (lread.c:827)
30  org.gnu.Emacs                 	0x00109941 Ffuncall + 977 (eval.c:3051)
31  org.gnu.Emacs                 	0x00144efb Fbyte_code + 3835 (bytecode.c:678)
32  org.gnu.Emacs                 	0x00108d56 Feval + 1062 (eval.c:2386)
33  org.gnu.Emacs                 	0x001090ef Fprogn + 63 (eval.c:451)
34  org.gnu.Emacs                 	0x00093a67 Ftrack_mouse + 87
(keyboard.c:1468)
35  org.gnu.Emacs                 	0x00108db8 Feval + 1160 (eval.c:2323)
36  org.gnu.Emacs                 	0x001090ef Fprogn + 63 (eval.c:451)
37  org.gnu.Emacs                 	0x001093df funcall_lambda + 703 (eval.c:3225)
38  org.gnu.Emacs                 	0x0010973b Ffuncall + 459 (eval.c:3102)
39  org.gnu.Emacs                 	0x00144efb Fbyte_code + 3835 (bytecode.c:678)
40  org.gnu.Emacs                 	0x001091f1 funcall_lambda + 209 (eval.c:3237)
41  org.gnu.Emacs                 	0x0010973b Ffuncall + 459 (eval.c:3102)
42  org.gnu.Emacs                 	0x00144efb Fbyte_code + 3835 (bytecode.c:678)
43  org.gnu.Emacs                 	0x001091f1 funcall_lambda + 209 (eval.c:3237)
44  org.gnu.Emacs                 	0x0010973b Ffuncall + 459 (eval.c:3102)
45  org.gnu.Emacs                 	0x00105b22 Fcall_interactively +
3250 (callint.c:870)
46  org.gnu.Emacs                 	0x00109941 Ffuncall + 977 (eval.c:3051)
47  org.gnu.Emacs                 	0x00109af9 call3 + 25 (eval.c:2877)
48  org.gnu.Emacs                 	0x000a3fa1 command_loop_1 + 1153
(keyboard.c:1911)
49  org.gnu.Emacs                 	0x0010788d internal_condition_case
+ 253 (eval.c:1512)
50  org.gnu.Emacs                 	0x00093878 command_loop_2 + 72
(keyboard.c:1360)
51  org.gnu.Emacs                 	0x0010776c internal_catch + 172 (eval.c:1248)
52  org.gnu.Emacs                 	0x000935ce command_loop + 174
(keyboard.c:1339)
53  org.gnu.Emacs                 	0x00093692 recursive_edit_1 + 146
(keyboard.c:953)
54  org.gnu.Emacs                 	0x00093811 Frecursive_edit + 257
(keyboard.c:1016)
55  org.gnu.Emacs                 	0x0009215a main + 2890 (emacs.c:1857)
56  org.gnu.Emacs                 	0x00002546 start + 54

Thread 0 crashed with X86 Thread State (32-bit):
  eax: 0x00000000  ebx: 0x0009144e  ecx: 0xbfffbd7c  edx: 0x9538de42
  edi: 0x00000006  esi: 0x00000006  ebp: 0xbfffbd98  esp: 0xbfffbd7c
   ss: 0x0000001f  efl: 0x00000282  eip: 0x9538de42   cs: 0x00000007
   ds: 0x0000001f   es: 0x0000001f   fs: 0x00000000   gs: 0x00000037
  cr2: 0x0a0a1f48

Binary Images:
    0x1000 -   0x1abffb +org.gnu.Emacs Version 23.1.50 (9.0)
<92d89a5b49bb7f6d030d641329aff545>
/Users/blowery/src/emacs.git/nextstep/Emacs.app/Contents/MacOS/Emacs
  0x406000 -   0x406ff0 +com.google.GearsEnabler ??? (1.0)
<7587e6d5a9e3404a3e0e1d8d45a8d8e7>
/Library/InputManagers/GearsEnabler/GearsEnabler.bundle/Contents/MacOS/GearsEnabler
  0x40b000 -   0x40bffd +com.plaxo.ABPlugin ??? (1.0)
<9c6e13cfe880758890968cf29a515465>
/Library/InputManagers/PlaxoABAddIn/PlaxoABAddIn.bundle/Contents/MacOS/PlaxoABAddIn
  0x410000 -   0x411ffd +com.1passwd.InputManager 2.9.21 (7517)
<0ee4d84785f51c14ce388bf6b0553055>
/Library/InputManagers/1PasswdIM/1PasswdIM.bundle/Contents/MacOS/1PasswdIM
  0x76a000 -   0x76cffe  com.apple.AutomatorCMM 1.1 (161)
<dd4f219df5f726e3fea63790235f92dc> /System/Library/Contextual Menu
Items/AutomatorCMM.plugin/Contents/MacOS/AutomatorCMM
  0x783000 -   0x784ffd  com.apple.BluetoothMenu 2.1.6 (2.1.6f8)
/System/Library/Contextual Menu
Items/BluetoothContextualMenu.plugin/Contents/MacOS/BluetoothContextualMenu
0x13d29000 - 0x13d9dff7  com.apple.Bluetooth 2.1.6 (2.1.6f8)
<2efdc5543023a1c9b534269d1153d8d8>
/System/Library/Frameworks/IOBluetooth.framework/Versions/A/IOBluetooth
0x13deb000 - 0x13dedfff  com.apple.BezelServicesFW 1.4.929 (1.4.929)
/System/Library/PrivateFrameworks/BezelServices.framework/Versions/A/BezelServices
0x13df4000 - 0x13df9fff  com.apple.FolderActionsMenu 1.3.2 (1.3.2)
<d7aa79798607f865bd48718e2acd6e2b> /System/Library/Contextual Menu
Items/FolderActionsMenu.plugin/Contents/MacOS/FolderActionsMenu
0x13e00000 - 0x13e01fff +com.vmware.FusionVMDKPlugIn ??? (0.0.1d2)
/Library/Contextual Menu
Items/FusionVMDKPlugIn.plugin/Contents/MacOS/FusionVMDKPlugIn
0x16ac1000 - 0x16cc8fef  com.apple.RawCamera.bundle 2.0.15 (471)
<557c94fbd7c15219746393464a79cf87>
/System/Library/CoreServices/RawCamera.bundle/Contents/MacOS/RawCamera
0x8fe00000 - 0x8fe2db43  dyld 97.1 (???)
<100d362e03410f181a34e04e94189ae5> /usr/lib/dyld
0x90003000 - 0x90413fef  libBLAS.dylib ??? (???)
/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x90414000 - 0x90416ff5  libRadiance.dylib ??? (???)
<8a844202fcd65662bb9ab25f08c45a62>
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x90417000 - 0x90444feb  libvDSP.dylib ??? (???)
<b232c018ddd040ec4e2c2af632dd497f>
/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x90445000 - 0x904a2ffb  libstdc++.6.dylib ??? (???)
<6106b1f2b0b303b06ae476253dbb5f3f> /usr/lib/libstdc++.6.dylib
0x904a3000 - 0x90597ff4  libiconv.2.dylib ??? (???)
<3f183527811098bb7332f67a1f902bfd> /usr/lib/libiconv.2.dylib
0x90598000 - 0x905aefff  com.apple.DictionaryServices 1.0.0 (1.0.0)
<7e9ff586b5c9d02b09e2a5527d98524f>
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices
0x90623000 - 0x9065dfe7  com.apple.coreui 1.2 (62)
/System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI
0x9065e000 - 0x90662fff  libGIF.dylib ??? (???)
<572a32e46e33be1ec041c5ef5b0341ae>
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x907c0000 - 0x907d5ffb  com.apple.ImageCapture 5.0.2 (5.0.2)
/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x90a98000 - 0x90ac1fff  libcups.2.dylib ??? (???)
<1b0435164b9dc6c773d0b1f24701e554> /usr/lib/libcups.2.dylib
0x90ac2000 - 0x90bf5fef  com.apple.CoreFoundation 6.5.6 (476.18)
<2d52bab73660117571bd6486dc318f8e>
/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x90bf6000 - 0x90bf6ffa  com.apple.CoreServices 32 (32)
<2760719f7a81e8c2bdfd15b0939abc29>
/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x90bf7000 - 0x90bfbfff  libmathCommon.A.dylib ??? (???)
/usr/lib/system/libmathCommon.A.dylib
0x90bfc000 - 0x90c24ff7  com.apple.shortcut 1.0.1 (1.0)
<131202e7766e327d02d55c0f5fc44ad7>
/System/Library/PrivateFrameworks/Shortcut.framework/Versions/A/Shortcut
0x90c98000 - 0x90cb7ffa  libJPEG.dylib ??? (???)
<e7eb56555109e23144924cd64aa8daec>
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x90cb8000 - 0x90dfeff7  com.apple.ImageIO.framework 2.0.4 (2.0.4)
<6a6623d3d1a7292b5c3763dcd108b55f>
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x90e4e000 - 0x90e55ff7  libCGATS.A.dylib ??? (???)
<211348279493364e9920adc86484cedd>
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib
0x90e56000 - 0x90e56ffd  com.apple.Accelerate 1.4.2 (Accelerate 1.4.2)
/System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x90e57000 - 0x90e5effe  libbsm.dylib ??? (???)
<5582985a86ea36504cca31788bccf963> /usr/lib/libbsm.dylib
0x90e68000 - 0x91226fea  libLAPACK.dylib ??? (???)
/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x91227000 - 0x91237ffc  com.apple.LangAnalysis 1.6.4 (1.6.4)
<8b7831b5f74a950a56cf2d22a2d436f6>
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x91238000 - 0x91238ffc  com.apple.audio.units.AudioUnit 1.5 (1.5)
/System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x912a0000 - 0x912f9ff7  libGLU.dylib ??? (???)
<a3b9be30100a25a6cd3ad109892f52b7>
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x92401000 - 0x92709fff  com.apple.HIToolbox 1.5.5 (???)
<b17766e3d8800a73f534c41f624f5ac4>
/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x9270a000 - 0x9274bfe7  libRIP.A.dylib ??? (???)
<69bd09fcd8d8b235cee7a405290d6818>
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
0x9274c000 - 0x92770fff  libxslt.1.dylib ??? (???)
<0a9778d6368ae668826f446878deb99b> /usr/lib/libxslt.1.dylib
0x92771000 - 0x9277efe7  com.apple.opengl 1.5.10 (1.5.10)
<5a2813f80c9441170cc1ab8a3dac5038>
/System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x92849000 - 0x928c6fef  libvMisc.dylib ??? (???)
/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x928c7000 - 0x9298eff2  com.apple.vImage 3.0 (3.0)
/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x92b25000 - 0x92b67fef  com.apple.NavigationServices 3.5.2 (163)
<91844980804067b07a0b6124310d3f31>
/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices
0x92d35000 - 0x92d60fe7  libauto.dylib ??? (???)
<42d8422dc23a18071869fdf7b5d8fab5> /usr/lib/libauto.dylib
0x92d61000 - 0x93401fe3  com.apple.CoreGraphics 1.409.3 (???)
<25dceb14af3455b768f56e8765ecf3ca>
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x9342c000 - 0x934bffff  com.apple.ink.framework 101.3 (86)
<dfa9debcd7537849d228021d1d9c0f63>
/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x934c0000 - 0x934ccffe  libGL.dylib ??? (???)
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x934cd000 - 0x9361fff3  com.apple.audio.toolbox.AudioToolbox 1.5.2
(1.5.2) /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x937f0000 - 0x938aafe3  com.apple.CoreServices.OSServices 227 (227)
<30cebcb68b1b571df7d77474e0c31556>
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x938ab000 - 0x938abfff  com.apple.Carbon 136 (136)
<ec1d4184925e652dbe1b9200a5a552ec>
/System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x938b4000 - 0x938ebfff  com.apple.SystemConfiguration 1.9.2 (1.9.2)
<8b26ebf26a009a098484f1ed01ec499c>
/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x93b2b000 - 0x93bb2ff7  libsqlite3.0.dylib ??? (???)
<3334ea5af7a911637413334154bb4100> /usr/lib/libsqlite3.0.dylib
0x94445000 - 0x9444bfff  com.apple.print.framework.Print 218.0.3
(220.2) <5b7f4ef7c2df36aff9605377775781e4>
/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x9444c000 - 0x944d6fe3  com.apple.DesktopServices 1.4.8 (1.4.8)
<3065de6531ce839c7cb5b6dd70e03f4f>
/System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x944d7000 - 0x947b1ff3  com.apple.CoreServices.CarbonCore 786.11
(786.13) <9e2d85d52e5e2951aa4dd53c48ccc52f>
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x947b2000 - 0x947c2fff  com.apple.speech.synthesis.framework 3.7.1
(3.7.1) <06d8fc0307314f8ffc16f206ad3dbf44>
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x947c3000 - 0x94814ff7  com.apple.HIServices 1.7.0 (???)
<01b690d1f376e400ac873105533e39eb>
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x94ac3000 - 0x94b1fff7  com.apple.htmlrendering 68 (1.1.3)
<a9f65fa1c4668dc7c49af5bf7d5287ad>
/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x94b7b000 - 0x94b7bff8  com.apple.Cocoa 6.5 (???)
<e9318c93615b27231498bbe585b8da98>
/System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x94b7c000 - 0x94d4dffb  com.apple.security 5.0.5 (36371)
<c13e0bb1acfdcf94be4d3ee118ef190e>
/System/Library/Frameworks/Security.framework/Versions/A/Security
0x94d4e000 - 0x94e2efff  libobjc.A.dylib ??? (???)
<7b92613fdf804fd9a0a3733a0674c30b> /usr/lib/libobjc.A.dylib
0x94e2f000 - 0x94ed6feb  com.apple.QD 3.11.56 (???)
<a94d0f5438b730e88e5efdb233295c52>
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x94ed7000 - 0x94eeffff  com.apple.openscripting 1.2.8 (???)
<572c7452d7e740e8948a5ad07a99602b>
/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x94ef0000 - 0x94ef5fff  com.apple.CommonPanels 1.2.4 (85)
<3b64ef0de184d09c6f99a1a7e77e42be>
/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
0x94ef6000 - 0x94f00feb  com.apple.audio.SoundManager 3.9.2 (3.9.2)
<caa41909dcb5a18a94bc68cd13999bd5>
/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x94f01000 - 0x9529efef  com.apple.QuartzCore 1.5.8 (1.5.8)
<a28fa54346a9f9d5b3bef076a1ee0fcf>
/System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x9529f000 - 0x9531eff5  com.apple.SearchKit 1.2.1 (1.2.1)
<3140a605db2abf56b237fa156a08b28b>
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x9531f000 - 0x95486ff3  libSystem.B.dylib ??? (???)
<b47c8e6e45aef620730710a732bf1930> /usr/lib/libSystem.B.dylib
0x95487000 - 0x955c0ff7  libicucore.A.dylib ??? (???)
<cac059ebdac7d9a63ee0f7a648c9f6cf> /usr/lib/libicucore.A.dylib
0x955c1000 - 0x955dffff  libresolv.9.dylib ??? (???)
<a8018c42930596593ddf27f7c20fe7af> /usr/lib/libresolv.9.dylib
0x955e0000 - 0x95673ff3  com.apple.ApplicationServices.ATS 3.7 (???)
<a535fc4982d3acff6530ec25c402e679>
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x95674000 - 0x956ceff7  com.apple.CoreText 2.0.4 (???)
<f0b6c1d4f40bd21505097f0255abfead>
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x956cf000 - 0x956ddffd  libz.1.dylib ??? (???)
<545ca09467025f77131cfac09d8b9375> /usr/lib/libz.1.dylib
0x956de000 - 0x95790ffb  libcrypto.0.9.7.dylib ??? (???)
<9d714c92872a93dd127ea8556b2c8945> /usr/lib/libcrypto.0.9.7.dylib
0x9579b000 - 0x957cafe3  com.apple.AE 402.3 (402.3)
<b13bfda0ad9314922ee37c0d018d7de9>
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x957cb000 - 0x957cbff8  com.apple.ApplicationServices 34 (34)
<e9cd7c823062c4382d89e3c9997f4739>
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x957cc000 - 0x95870fec  com.apple.CFNetwork 438.10 (438.12)
<fde64bbb20532794396fb21911ccaa98>
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x95876000 - 0x95881fe7  libCSync.A.dylib ??? (???)
<9e3544fe087bb4dc760b7afe0850dd6c>
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
0x95882000 - 0x95885fff  com.apple.help 1.1 (36)
<175489f8adf287b3ebd259362b0292c0>
/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
0x95886000 - 0x95892ff9  com.apple.helpdata 1.0.1 (14.2)
/System/Library/PrivateFrameworks/HelpData.framework/Versions/A/HelpData
0x95893000 - 0x95910feb  com.apple.audio.CoreAudio 3.1.2 (3.1.2)
<5a4e6329f8dbca5dcd70924525afd24a>
/System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x9591e000 - 0x9591fffc  libffi.dylib ??? (???)
<596e0dbf626b211741cecaa9698f271b> /usr/lib/libffi.dylib
0x95923000 - 0x959eefff  com.apple.ColorSync 4.5.1 (4.5.1)
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x95a19000 - 0x95a58fef  libTIFF.dylib ??? (???)
<3589442575ac77746ae99ecf724f5f87>
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x95af0000 - 0x95bd1ff7  libxml2.2.dylib ??? (???)
<2f6b294896866822330a8888b7f53b75> /usr/lib/libxml2.2.dylib
0x95bd2000 - 0x95beaff7  com.apple.CoreVideo 1.6.0 (20.0)
<dd60118bac9aefaf88d9ab44558f05c4>
/System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo
0x95beb000 - 0x95c29fff  libGLImage.dylib ??? (???)
<a6425aeb77f4da13212ac75df57b056d>
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x95c2a000 - 0x95c2affd  com.apple.vecLib 3.4.2 (vecLib 3.4.2)
/System/Library/Frameworks/vecLib.framework/Versions/A/vecLib
0x95c5e000 - 0x95d46ff3  com.apple.CoreData 100.2 (186.1)
<8fb61e1714a4b8d587ce97605ad32547>
/System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x95d47000 - 0x95d62ffb  libPng.dylib ??? (???)
<4780e979d35aa5ec2cea22678836cea5>
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x95d68000 - 0x95d97ff7  libncurses.5.4.dylib ??? (???)
<00632d5180ac31e2cd437a1ce9d08562> /usr/lib/libncurses.5.4.dylib
0x95eb4000 - 0x95eb4ffd  com.apple.Accelerate.vecLib 3.4.2 (vecLib
3.4.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x95eb5000 - 0x96386fbe  libGLProgrammability.dylib ??? (???)
<7f18294a7bd0b6afe4319f29187fc70d>
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLProgrammability.dylib
0x96387000 - 0x963d0fef  com.apple.Metadata 10.5.2 (398.25)
<e0572f20350523116f23000676122a8d>
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x963d1000 - 0x963d9fff  com.apple.DiskArbitration 2.2.1 (2.2.1)
<75b0c8d8940a8a27816961dddcac8e0f>
/System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x96701000 - 0x96708fe9  libgcc_s.1.dylib ??? (???)
<28a7cbc3a5ca2982d124668306f422d9> /usr/lib/libgcc_s.1.dylib
0x96709000 - 0x96985fe7  com.apple.Foundation 6.5.8 (677.24)
<aa84b0383891378c348ffa4a94853082>
/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x96986000 - 0x96a36fff  edu.mit.Kerberos 6.0.13 (6.0.13)
<804bd1b3f08fb57396781f012006367c>
/System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
0x96a54000 - 0x96aceff8  com.apple.print.framework.PrintCore 5.5.4
(245.6) <03d0585059c20cb0bde5e000438c49e1>
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x96acf000 - 0x96b5bff7  com.apple.LaunchServices 290.3 (290.6)
<bdba267184df88bd5b8e2116ea903872>
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x96c25000 - 0x96c25ffb  com.apple.installserver.framework 1.0 (8)
/System/Library/PrivateFrameworks/InstallServer.framework/Versions/A/InstallServer
0x96c26000 - 0x96c28fff  com.apple.securityhi 3.0 (30817)
<020419ad33b8638b174e1a472728a894>
/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x96c29000 - 0x96c32fff  com.apple.speech.recognition.framework 3.7.24
(3.7.24) <6a6518b392d3d41ace3dcea69d6809d9>
/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x96c45000 - 0x96cd1ff7  com.apple.framework.IOKit 1.5.2 (???)
<97b9f9d584f48891377f0481b9104434>
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x96cd2000 - 0x974d0fef  com.apple.AppKit 6.5.7 (949.46)
<a80f8cb62f6bdcb3bed3c8675d55881d>
/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0xfffe8000 - 0xfffebfff  libobjc.A.dylib ??? (???) /usr/lib/libobjc.A.dylib
0xffff0000 - 0xffff1780  libSystem.B.dylib ??? (???) /usr/lib/libSystem.B.dylib



On Thu, Jul 23, 2009 at 10:59 AM, David Reitter<david.reitter <at> gmail.com> wrote:
> On Jul 23, 2009, at 3:46 PM, Adrian Robert wrote:
>
>> http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3605
>>
>> Hi,
>>
>> If you could please retest this against the latest branch or trunk, I've
>> checked in some robustness improvement to the indexed color stuff that may
>> clear this up.
>
>
> Ben, perhaps you can do that.
>
> I currently don't reproduce the error even with yesterday's build, but
> that's probably due to changes in the Aquamacs master branch that prevent
> this.
>
> I'm currently traveling and can't really do much; I can't build Emacs
> locally anyways... Sorry!

Message #46 received at 3605 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: Mike <deactivated <at> gmail.com>
To: 3605 <at> debbugs.gnu.org
Subject: Re: Crash in ns_index_color (nsterm.m:1305)
Date: Mon, 19 Oct 2009 23:27:34 -0700

I'm seeing this crash somewhat frequently in recent builds (GNU Emacs
23.1.50.6 (i386-apple-darwin9.8.0, NS apple-appkit-949.54)
 of 2009-10-19 on Macintosh-8.local)

I poked around a bit and didn't have much luck finding a root cause.

Here's a typical stack trace:

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_INVALID_ADDRESS at address: 0xc0000023
0x942eb688 in objc_msgSend ()
(gdb)
(gdb)
(gdb) bt
#0  0x942eb688 in objc_msgSend ()
#1  0x900b6e1f in -[NSCalibratedRGBColor isEqual:] ()
#2  0x0016c09c in ns_index_color (color=0x175d8830, f=0x175d8830) at
nsterm.m:1249
#3  0x0016cc82 in ns_defined_color (f=0x8e7060, name=0x175d8830
"\003", color_def=0xbfffc4e4, alloc=1, makeIndex=1 '\001') at
nsterm.m:1529
#4  0x000881bc in defined_color (f=0x8e7060, color_name=0x17a16114
"#9b9b9b", color_def=0xbfffc4e4, alloc=1) at xfaces.c:1266
#5  0x000884de in load_color (f=0x8e7060, face=0x175b0bf0,
name=396153139, target_index=LFACE_FOREGROUND_INDEX) at xfaces.c:1439
#6  0x0008e45a in load_face_colors [inlined] () at xfaces.c:1528
#7  0x0008e45a in realize_face (cache=0x16a3310, attrs=0xbfffc69c,
former_face_id=<value temporarily unavailable, due to optimizations>)
at xfaces.c:5913
#8  0x0008f21d in lookup_face (f=0x175d8830, attr=0xbfffc69c) at xfaces.c:4722
#9  0x00090892 in face_at_buffer_position (w=0x8e7200, pos=898,
region_beg=-1, region_end=-1, endptr=0xbfffc76c, limit=998, mouse=0,
base_face_id=0) at xfaces.c:6359
#10 0x0001ad97 in handle_face_prop (it=0xbfffd338) at xdisp.c:3440
#11 0x0001d908 in handle_stop (it=0xbfffd338) at xdisp.c:3127
#12 0x00020d07 in next_element_from_buffer (it=0xbfffd338) at xdisp.c:6511
#13 0x0001ecbf in get_next_display_element (it=0xbfffd338) at xdisp.c:5670
#14 0x000296ac in display_line (it=0xbfffd338) at xdisp.c:16565
#15 0x0002ac76 in try_window (window=9335300, pos={charpos = 331,
bytepos = 331}, check_margins=1) at xdisp.c:14023
#16 0x00032bec in redisplay_window (window=9335300, just_this_one_p=0)
at xdisp.c:13646
#17 0x000347cd in redisplay_window_0 (window=9335300) at xdisp.c:12278
#18 0x001092a3 in internal_condition_case_1 (bfun=0x347a0
<redisplay_window_0>, arg=9335300, handlers=5297461, hfun=0x25570
<redisplay_window_error>) at eval.c:1573
#19 0x00025291 in redisplay_windows (window=<value temporarily
unavailable, due to optimizations>) at xdisp.c:12257
#20 0x00025235 in redisplay_windows (window=<value temporarily
unavailable, due to optimizations>) at xdisp.c:12251
#21 0x00025235 in redisplay_windows (window=<value temporarily
unavailable, due to optimizations>) at xdisp.c:12251
#22 0x00036bcc in redisplay_internal (preserve_echo_area=<value
temporarily unavailable, due to optimizations>) at xdisp.c:11829
#23 0x0009fbf5 in read_char (commandflag=1, nmaps=4, maps=0xbfffeb80,
prev_event=25165833, used_mouse_menu=0xbfffec88, end_time=0x0) at
keyboard.c:2707
#24 0x000a26c4 in read_key_sequence (keybuf=0xbfffed48, bufsize=30,
prompt=25165833, dont_downcase_last=0, can_return_switch_frame=1,
fix_current_buffer=1) at keyboard.c:9461
#25 0x000a4cea in command_loop_1 () at keyboard.c:1640
#26 0x0010963d in internal_condition_case (bfun=0xa4ac0
<command_loop_1>, handlers=25205425, hfun=0x9ad40 <cmd_error>) at
eval.c:1525
#27 0x000948a8 in command_loop_2 () at keyboard.c:1357
#28 0x0010951c in internal_catch (tag=392005680, func=0x94860
<command_loop_2>, arg=25165833) at eval.c:1261
#29 0x000945fe in command_loop () at keyboard.c:1336
#30 0x000946c2 in recursive_edit_1 () at keyboard.c:951
#31 0x00094841 in Frecursive_edit () at keyboard.c:1013
#32 0x0009337a in main (argc=1, argv=0xbffff1ec) at emacs.c:1827

(gdb) bt full
#0  0x942eb688 in objc_msgSend ()
No symbol table info available.
#1  0x900b6e1f in -[NSCalibratedRGBColor isEqual:] ()
No symbol table info available.
#2  0x0016c09c in ns_index_color (color=0x175d8830, f=0x175d8830) at
nsterm.m:1249
    i = 392005680
    color_table = (struct ns_color_table *) 0x838b80
    idx = <value temporarily unavailable, due to optimizations>
#3  0x0016cc82 in ns_defined_color (f=0x8e7060, name=0x175d8830
"\003", color_def=0xbfffc4e4, alloc=1, makeIndex=1 '\001') at
nsterm.m:1529
    temp = (NSColor *) 0x175d8830
    notFound = <value temporarily unavailable, due to optimizations>
#4  0x000881bc in defined_color (f=0x8e7060, color_name=0x17a16114
"#9b9b9b", color_def=0xbfffc4e4, alloc=1) at xfaces.c:1266
No locals.
#5  0x000884de in load_color (f=0x8e7060, face=0x175b0bf0,
name=396153139, target_index=LFACE_FOREGROUND_INDEX) at xfaces.c:1439
    color = {
  pixel = 1,
  red = 65535,
  green = 65535,
  blue = 65535,
  flags = -114 '?',
  pad = 0 '\0'
}
#6  0x0008e45a in load_face_colors [inlined] () at xfaces.c:1528
    attrs = (Lisp_Object *) Cannot access memory at address 0x0
(gdb)

Message #51 received at 3605 <at> emacsbugs.donarmstrong.com (full text, mbox):

From: Mike <deactivated <at> gmail.com>
To: 3605 <at> debbugs.gnu.org
Subject: Crash in ns_index_color (nsterm.m:1305)
Date: Wed, 21 Oct 2009 17:05:20 -0700

I spent some more time looking at this, and I think I've found the problem:

ns_defined_color needs to block input around its calls to ns_get_color
and (at least) ns_index_color.  ns_get_color calls UNBLOCK_INPUT after
allocating an autorelease NSColor.  Because the outer autorelease pool
is flushed every time through the event loop, sometimes the color gets
freed before ns_index_color has a chance to retain it.

As a reliable test case, try loading the color palette from
http://www.emacswiki.org/cgi-bin/wiki/palette.el

Message #54 received at 3605 <at> debbugs.gnu.org (full text, mbox):

From: Chong Yidong <cyd <at> stupidchicken.com>
To: Mike <deactivated <at> gmail.com>
Cc: 3605 <at> debbugs.gnu.org
Subject: Re: Crash in ns_index_color (nsterm.m:1305)
Date: Sun, 31 Jan 2010 00:24:41 -0500

> I spent some more time looking at this, and I think I've found the problem:
>
> ns_defined_color needs to block input around its calls to ns_get_color
> and (at least) ns_index_color.  ns_get_color calls UNBLOCK_INPUT after
> allocating an autorelease NSColor.  Because the outer autorelease pool
> is flushed every time through the event loop, sometimes the color gets
> freed before ns_index_color has a chance to retain it.
>
> As a reliable test case, try loading the color palette from
> http://www.emacswiki.org/cgi-bin/wiki/palette.el

Thanks.  As you suggested, I have checked in a change to nsterm.m to
block input during ns_defined_color.  Could you test if the crash is
gone?

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.