From unknown Fri Jun 20 19:47:14 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#44084 <44084@debbugs.gnu.org> To: bug#44084 <44084@debbugs.gnu.org> Subject: Status: 28.0.50; Crash on incomplete Unicode escape sequences Reply-To: bug#44084 <44084@debbugs.gnu.org> Date: Sat, 21 Jun 2025 02:47:14 +0000 retitle 44084 28.0.50; Crash on incomplete Unicode escape sequences reassign 44084 emacs submitter 44084 Juri Linkov severity 44084 normal tag 44084 fixed thanks From debbugs-submit-bounces@debbugs.gnu.org Mon Oct 19 16:52:11 2020 Received: (at submit) by debbugs.gnu.org; 19 Oct 2020 20:52:11 +0000 Received: from localhost ([127.0.0.1]:42611 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kUc8W-0002Sd-2O for submit@debbugs.gnu.org; Mon, 19 Oct 2020 16:52:11 -0400 Received: from lists.gnu.org ([209.51.188.17]:46572) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kUc8R-0002SM-W9 for submit@debbugs.gnu.org; Mon, 19 Oct 2020 16:52:04 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:36816) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kUc8Q-0003Di-4D for bug-gnu-emacs@gnu.org; Mon, 19 Oct 2020 16:52:03 -0400 Received: from relay11.mail.gandi.net ([217.70.178.231]:56787) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kUc8M-0006Zt-9A for bug-gnu-emacs@gnu.org; Mon, 19 Oct 2020 16:52:01 -0400 Received: from mail.gandi.net (m91-129-102-160.cust.tele2.ee [91.129.102.160]) (Authenticated sender: juri@linkov.net) by relay11.mail.gandi.net (Postfix) with ESMTPSA id CFA5E10000C for ; Mon, 19 Oct 2020 20:51:52 +0000 (UTC) From: Juri Linkov To: bug-gnu-emacs@gnu.org Subject: 28.0.50; Crash on incomplete Unicode escape sequences Organization: LINKOV.NET Date: Mon, 19 Oct 2020 23:38:38 +0300 Message-ID: <87wnzmhrxt.fsf@mail.linkov.net> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.0.50 (x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=217.70.178.231; envelope-from=juri@linkov.net; helo=relay11.mail.gandi.net X-detected-operating-system: by eggs.gnu.org: First seen = 2020/10/19 16:51:53 X-ACL-Warn: Detected OS = Linux 3.11 and newer [fuzzy] X-Spam_score_int: -25 X-Spam_score: -2.6 X-Spam_bar: -- X-Spam_report: (-2.6 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.6 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.6 (--) While developing a new input method for bug#43866 I accidentally evaluated ?\u39 and Emacs crashed. Here is a reproducible test case: emacs -Q type in the *scratch* buffer: ?\u39 and eval it with 'C-x C-e'. Emacs crashes, maybe because it's configured with --enable-checking=yes,glyphs character.h:228: Emacs fatal error: assertion failed: 0 <= c Thread 1 "emacs" hit Breakpoint 1, terminate_due_to_signal (sig=32767, backtrace_limit=-22624) at emacs.c:377 377 { (gdb) bt #0 terminate_due_to_signal (sig=32767, backtrace_limit=-22624) at emacs.c:377 #1 0x00005555557dc50d in die (msg=0x555555996c0e "0 <= c", file=0x555555996c02 "character.h", line=228) at alloc.c:7341 #2 0x00005555558a678f in CHAR_STRING (c=-1, p=0x7fffffffa65a "") at character.h:228 #3 0x00005555558a79a6 in doprnt (buffer=0x7fffffffa8e0 "Non-hex character used for Unicode escape: UUU", bufsize=3999, format=0x55555598f288 "Non-hex character used for Unicode escape: %c (%d)", format_end=0x55555598f2ba "", ap=0x7fffffffa870) at doprnt.c:431 #4 0x00005555558a7d64 in evxprintf (buf=0x7fffffffa8c0, bufsize=0x7fffffffa8b8, nonheapbuf=0x7fffffffa8e0 "Non-hex character used for Unicode escape: UUU", bufsize_max=2305843009213693952, format=0x55555598f288 "Non-hex character used for Unicode escape: %c (%d)", ap=0x7fffffffb8e0) at doprnt.c:540 #5 0x00005555558159dd in vformat_string (m=0x55555598f288 "Non-hex character used for Unicode escape: %c (%d)", ap=0x7fffffffb8e0) at eval.c:1876 #6 0x0000555555815a6b in verror (m=0x55555598f288 "Non-hex character used for Unicode escape: %c (%d)", ap=0x7fffffffb8e0) at eval.c:1888 #7 0x0000555555815b38 in error (m=0x55555598f288 "Non-hex character used for Unicode escape: %c (%d)") at eval.c:1899 #8 0x000055555585bcfe in read_escape (readcharfun=XIL(0x7ffff25566fd), stringp=false) at lread.c:2580 #9 0x000055555585e52e in read1 (readcharfun=XIL(0x7ffff25566fd), pch=0x7fffffffbe24, first_in_list=false) at lread.c:3333 #10 0x000055555585b30b in read0 (readcharfun=XIL(0x7ffff25566fd)) at lread.c:2331 #11 0x000055555585b1c2 in read_internal_start (stream=XIL(0x7ffff25566fd), start=XIL(0), end=XIL(0)) at lread.c:2297 #12 0x000055555585ae48 in Fread (stream=XIL(0x7ffff25566fd)) at lread.c:2234 #13 0x00005555558190d7 in funcall_subr (subr=0x555555dfcd20 , numargs=1, args=0x7fffffffc038) at eval.c:2879 #14 0x0000555555818b46 in Ffuncall (nargs=2, args=0x7fffffffc030) at eval.c:2806 #15 0x0000555555876632 in exec_byte_code (bytestr=XIL(0x7ffff25ef54c), vector=XIL(0x7ffff25edc55), maxdepth=make_fixnum(12), args_template=make_fixnum(0), nargs=0, args=0x7fffffffc648) at bytecode.c:632 #16 0x0000555555819386 in fetch_and_exec_byte_code (fun=XIL(0x7ffff25edc25), syms_left=make_fixnum(0), nargs=0, args=0x7fffffffc648) at eval.c:2928 #17 0x0000555555819889 in funcall_lambda (fun=XIL(0x7ffff25edc25), nargs=0, arg_vector=0x7fffffffc648) at eval.c:3009 #18 0x0000555555818b8a in Ffuncall (nargs=1, args=0x7fffffffc640) at eval.c:2808 #19 0x0000555555876632 in exec_byte_code (bytestr=XIL(0x7ffff27478f4), vector=XIL(0x7ffff27473a5), maxdepth=make_fixnum(18), args_template=make_fixnum(257), nargs=1, args=0x7fffffffcb00) at bytecode.c:632 #20 0x0000555555819386 in fetch_and_exec_byte_code (fun=XIL(0x7ffff2747375), syms_left=make_fixnum(257), nargs=1, args=0x7fffffffcaf8) at eval.c:2928 #21 0x0000555555819889 in funcall_lambda (fun=XIL(0x7ffff2747375), nargs=1, arg_vector=0x7fffffffcaf8) at eval.c:3009 #22 0x0000555555818b8a in Ffuncall (nargs=2, args=0x7fffffffcaf0) at eval.c:2808 #23 0x0000555555876632 in exec_byte_code (bytestr=XIL(0x7ffff2747a44), vector=XIL(0x7ffff274731d), maxdepth=make_fixnum(4), args_template=make_fixnum(257), nargs=1, args=0x7fffffffd0e8) at bytecode.c:632 #24 0x0000555555819386 in fetch_and_exec_byte_code (fun=XIL(0x7ffff27472e5), syms_left=make_fixnum(257), nargs=1, args=0x7fffffffd0e0) at eval.c:2928 #25 0x0000555555819889 in funcall_lambda (fun=XIL(0x7ffff27472e5), nargs=1, arg_vector=0x7fffffffd0e0) at eval.c:3009 #26 0x0000555555818b8a in Ffuncall (nargs=2, args=0x7fffffffd0d8) at eval.c:2808 #27 0x000055555580c79d in Ffuncall_interactively (nargs=2, args=0x7fffffffd0d8) at callint.c:253 #28 0x0000555555818fac in funcall_subr (subr=0x555555df98a0 , numargs=2, args=0x7fffffffd0d8) at eval.c:2859 #29 0x0000555555818b46 in Ffuncall (nargs=3, args=0x7fffffffd0d0) at eval.c:2806 #30 0x000055555580effe in Fcall_interactively (function=XIL(0x2aaa9c8d4170), record_flag=XIL(0), keys=XIL(0x7ffff2befead)) at callint.c:779 #31 0x000055555581912a in funcall_subr (subr=0x555555df98e0 , numargs=3, args=0x7fffffffd470) at eval.c:2884 #32 0x0000555555818b46 in Ffuncall (nargs=4, args=0x7fffffffd468) at eval.c:2806 #33 0x0000555555876632 in exec_byte_code (bytestr=XIL(0x7ffff26ad2a4), vector=XIL(0x7ffff26acfad), maxdepth=make_fixnum(13), args_template=make_fixnum(1025), nargs=1, args=0x7fffffffd9c0) at bytecode.c:632 #34 0x0000555555819386 in fetch_and_exec_byte_code (fun=XIL(0x7ffff26acf7d), syms_left=make_fixnum(1025), nargs=1, args=0x7fffffffd9b8) at eval.c:2928 #35 0x0000555555819889 in funcall_lambda (fun=XIL(0x7ffff26acf7d), nargs=1, arg_vector=0x7fffffffd9b8) at eval.c:3009 #36 0x0000555555818b8a in Ffuncall (nargs=2, args=0x7fffffffd9b0) at eval.c:2808 #37 0x0000555555818346 in call1 (fn=XIL(0x43b0), arg1=XIL(0x2aaa9c8d4170)) at eval.c:2666 #38 0x000055555573182a in command_loop_1 () at keyboard.c:1467 #39 0x00005555558145ff in internal_condition_case (bfun=0x555555730f69 , handlers=XIL(0x90), hfun=0x555555730521 ) at eval.c:1356 #40 0x0000555555730b2e in command_loop_2 (ignore=XIL(0)) at keyboard.c:1095 #41 0x00005555558139e5 in internal_catch (tag=XIL(0xd6b0), func=0x555555730afd , arg=XIL(0)) at eval.c:1117 #42 0x0000555555730ac9 in command_loop () at keyboard.c:1074 #43 0x000055555572ffea in recursive_edit_1 () at keyboard.c:718 #44 0x00005555557301e9 in Frecursive_edit () at keyboard.c:790 #45 0x000055555572be7c in main (argc=3, argv=0x7fffffffdea8) at emacs.c:2047 Lisp Backtrace: "read" (0xffffc038) "elisp--preceding-sexp" (0xffffc648) "elisp--eval-last-sexp" (0xffffcaf8) "eval-last-sexp" (0xffffd0e0) "funcall-interactively" (0xffffd0d8) "call-interactively" (0xffffd470) "command-execute" (0xffffd9b8) In GNU Emacs 28.0.50 (build 1, x86_64-pc-linux-gnu, cairo version 1.16.0) of 2020-10-19 Windowing system distributor 'The X.Org Foundation', version 11.0.12008000 System Description: Linux Mint 20 Configured using: 'configure --with-x-toolkit=no --enable-checking=yes,glyphs --enable-check-lisp-object-type 'CFLAGS=-O0 -g3'' From debbugs-submit-bounces@debbugs.gnu.org Tue Oct 20 11:29:10 2020 Received: (at 44084) by debbugs.gnu.org; 20 Oct 2020 15:29:10 +0000 Received: from localhost ([127.0.0.1]:46402 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kUtZV-0002gs-SI for submit@debbugs.gnu.org; Tue, 20 Oct 2020 11:29:10 -0400 Received: from eggs.gnu.org ([209.51.188.92]:51694) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kUtZU-0002gd-2Z for 44084@debbugs.gnu.org; Tue, 20 Oct 2020 11:29:08 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:57553) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kUtZO-0008PZ-BS; Tue, 20 Oct 2020 11:29:02 -0400 Received: from [176.228.60.248] (port=4605 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1kUtZN-0008EP-AI; Tue, 20 Oct 2020 11:29:01 -0400 Date: Tue, 20 Oct 2020 18:29:09 +0300 Message-Id: <83blgwor0a.fsf@gnu.org> From: Eli Zaretskii To: Juri Linkov In-Reply-To: <87wnzmhrxt.fsf@mail.linkov.net> (message from Juri Linkov on Mon, 19 Oct 2020 23:38:38 +0300) Subject: Re: bug#44084: 28.0.50; Crash on incomplete Unicode escape sequences References: <87wnzmhrxt.fsf@mail.linkov.net> X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 44084 Cc: 44084@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) > From: Juri Linkov > Date: Mon, 19 Oct 2020 23:38:38 +0300 > > While developing a new input method for bug#43866 > I accidentally evaluated ?\u39 and Emacs crashed. > Here is a reproducible test case: > > emacs -Q > type in the *scratch* buffer: > > ?\u39 > > and eval it with 'C-x C-e'. > > Emacs crashes, maybe because it's configured with --enable-checking=yes,glyphs > > character.h:228: Emacs fatal error: assertion failed: 0 <= c Thanks, should be fixed now. From debbugs-submit-bounces@debbugs.gnu.org Thu Oct 22 16:15:23 2020 Received: (at 44084) by debbugs.gnu.org; 22 Oct 2020 20:15:23 +0000 Received: from localhost ([127.0.0.1]:54007 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kVgza-0000BU-OH for submit@debbugs.gnu.org; Thu, 22 Oct 2020 16:15:22 -0400 Received: from relay8-d.mail.gandi.net ([217.70.183.201]:46493) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kVgzZ-0000B9-9w; Thu, 22 Oct 2020 16:15:21 -0400 X-Originating-IP: 91.129.102.160 Received: from mail.gandi.net (m91-129-102-160.cust.tele2.ee [91.129.102.160]) (Authenticated sender: juri@linkov.net) by relay8-d.mail.gandi.net (Postfix) with ESMTPSA id A7B681BF20A; Thu, 22 Oct 2020 20:15:13 +0000 (UTC) From: Juri Linkov To: Eli Zaretskii Subject: Re: bug#44084: 28.0.50; Crash on incomplete Unicode escape sequences Organization: LINKOV.NET References: <87wnzmhrxt.fsf@mail.linkov.net> <83blgwor0a.fsf@gnu.org> Date: Thu, 22 Oct 2020 23:14:40 +0300 In-Reply-To: <83blgwor0a.fsf@gnu.org> (Eli Zaretskii's message of "Tue, 20 Oct 2020 18:29:09 +0300") Message-ID: <87lffy2f2n.fsf@mail.linkov.net> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.0.50 (x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 44084 Cc: 44084@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) tags 44084 fixed close 44084 28.0.50 thanks >> Emacs crashes, maybe because it's configured with --enable-checking=yes,glyphs >> >> character.h:228: Emacs fatal error: assertion failed: 0 <= c > > Thanks, should be fixed now. I confirm that it's fixed, so closing this now. From unknown Fri Jun 20 19:47:14 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Fri, 20 Nov 2020 12:24:10 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator