Subject: 23.1; Crash in FcStrListCreate

From: Markus Triska <[email-masked]>
Date: Tue, 29 Sep 2009 20:40:25 +0200

In a longer-running Emacs session, I shift-(left-)clicked in a buffer,
and Emacs crashed with the following backtrace (it normally doesn't):

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_PROTECTION_FAILURE at address: 0x0a310000
0x0126fbf7 in FcStrListCreate ()
(gdb) bt
#0  0x0126fbf7 in FcStrListCreate ()
#1  0x012673f3 in FcLangSetHasLang ()
#2  0x012690f9 in FcCompareLang ()
#3  0x01269492 in FcCompareValueList ()
#4  0x012697b4 in FcCompare ()
#5  0x01269fb4 in FcFontSetSort ()
#6  0x0126a4e6 in FcFontSort ()
#7  0x0099ff1c in pango_fc_font_map_load_fontset ()
#8  0x00b4dde6 in itemize_state_process_run ()
#9  0x00b4e3f7 in pango_itemize_with_base_dir ()
#10 0x00b572b4 in pango_layout_check_lines ()
#11 0x00b5867c in pango_layout_get_extents_internal ()
#12 0x004a145d in gtk_label_size_request ()
#13 0x003e568b in gtk_accel_label_size_request ()
#14 0x00c663a6 in g_closure_invoke ()
#15 0x00c78697 in signal_emit_unlocked_R ()
#16 0x00c7a16b in g_signal_emit_valist ()
#17 0x00c7eaa3 in g_signal_emit_by_name ()
#18 0x0051b661 in do_size_request ()
#19 0x0051ba97 in _gtk_size_group_compute_requisition ()
#20 0x004be54f in gtk_menu_item_size_request ()
#21 0x00c663a6 in g_closure_invoke ()
#22 0x00c78697 in signal_emit_unlocked_R ()
#23 0x00c7a16b in g_signal_emit_valist ()
#24 0x00c7eaa3 in g_signal_emit_by_name ()
#25 0x0051b661 in do_size_request ()
#26 0x0051ba97 in _gtk_size_group_compute_requisition ()
#27 0x004b611b in gtk_menu_size_request ()
#28 0x00c663a6 in g_closure_invoke ()
#29 0x00c78697 in signal_emit_unlocked_R ()
#30 0x00c7a16b in g_signal_emit_valist ()
#31 0x00c7eaa3 in g_signal_emit_by_name ()
#32 0x0051b661 in do_size_request ()
#33 0x0051ba97 in _gtk_size_group_compute_requisition ()
#34 0x004b7252 in gtk_menu_position ()
#35 0x004baa76 in gtk_menu_popup ()
#36 0x000479cf in xmenu_show (f=0x1831380, x=490, y=559, for_click=1, keymaps=1, title=2478163, error=0xbffff06c) at xmenu.c:1801
#37 0x000482d6 in Fx_popup_menu (position=31858637, menu=32036469) at xmenu.c:505
#38 0x00150378 in Ffuncall (nargs=3, args=0xbffff110) at eval.c:3055
#39 0x0018b83b in Fbyte_code (bytestr=2477755, vector=2477772, maxdepth=9) at bytecode.c:678
#40 0x0014fc01 in funcall_lambda (fun=2477716, nargs=1, arg_vector=0xbffff304) at eval.c:3232
#41 0x0015014b in Ffuncall (nargs=2, args=0xbffff300) at eval.c:3102
#42 0x0014c4f2 in Fcall_interactively (function=44590489, record_flag=41943049, keys=71795364) at callint.c:868
#43 0x00150351 in Ffuncall (nargs=4, args=0xbffff4f0) at eval.c:3051
#44 0x00150509 in call3 (fn=42057369, arg1=44590489, arg2=41943049, arg3=41943049) at eval.c:2875
#45 0x000eb2a1 in command_loop_1 () at keyboard.c:1901
#46 0x0014e28d in internal_condition_case (bfun=0xeae20 <command_loop_1>, handlers=41982641, hfun=0xe16a0 <cmd_error>) at eval.c:1512
#47 0x000da348 in command_loop_2 () at keyboard.c:1359
#48 0x0014de6c in internal_catch (tag=19397984, func=0xda300 <command_loop_2>, arg=41943049) at eval.c:1248
#49 0x000da09e in command_loop () at keyboard.c:1338
#50 0x000da162 in recursive_edit_1 () at keyboard.c:953
#51 0x000da2e1 in Frecursive_edit () at keyboard.c:1015
#52 0x000d904b in main (argc=1, argv=0xbffff93c) at emacs.c:1852
(gdb) bt full
#0  0x0126fbf7 in FcStrListCreate ()
No symbol table info available.
#1  0x012673f3 in FcLangSetHasLang ()
No symbol table info available.
#2  0x012690f9 in FcCompareLang ()
No symbol table info available.
#3  0x01269492 in FcCompareValueList ()
No symbol table info available.
#4  0x012697b4 in FcCompare ()
No symbol table info available.
#5  0x01269fb4 in FcFontSetSort ()
No symbol table info available.
#6  0x0126a4e6 in FcFontSort ()
No symbol table info available.
#7  0x0099ff1c in pango_fc_font_map_load_fontset ()
No symbol table info available.
#8  0x00b4dde6 in itemize_state_process_run ()
No symbol table info available.
#9  0x00b4e3f7 in pango_itemize_with_base_dir ()
No symbol table info available.
#10 0x00b572b4 in pango_layout_check_lines ()
No symbol table info available.
#11 0x00b5867c in pango_layout_get_extents_internal ()
No symbol table info available.
#12 0x004a145d in gtk_label_size_request ()
No symbol table info available.
#13 0x003e568b in gtk_accel_label_size_request ()
No symbol table info available.
#14 0x00c663a6 in g_closure_invoke ()
No symbol table info available.
#15 0x00c78697 in signal_emit_unlocked_R ()
No symbol table info available.
#16 0x00c7a16b in g_signal_emit_valist ()
No symbol table info available.
#17 0x00c7eaa3 in g_signal_emit_by_name ()
No symbol table info available.
#18 0x0051b661 in do_size_request ()
No symbol table info available.
#19 0x0051ba97 in _gtk_size_group_compute_requisition ()
No symbol table info available.
#20 0x004be54f in gtk_menu_item_size_request ()
No symbol table info available.
#21 0x00c663a6 in g_closure_invoke ()
No symbol table info available.
#22 0x00c78697 in signal_emit_unlocked_R ()
No symbol table info available.
#23 0x00c7a16b in g_signal_emit_valist ()
No symbol table info available.
#24 0x00c7eaa3 in g_signal_emit_by_name ()
No symbol table info available.
#25 0x0051b661 in do_size_request ()
No symbol table info available.
#26 0x0051ba97 in _gtk_size_group_compute_requisition ()
No symbol table info available.
#27 0x004b611b in gtk_menu_size_request ()
No symbol table info available.
#28 0x00c663a6 in g_closure_invoke ()
No symbol table info available.
#29 0x00c78697 in signal_emit_unlocked_R ()
No symbol table info available.
#30 0x00c7a16b in g_signal_emit_valist ()
No symbol table info available.
#31 0x00c7eaa3 in g_signal_emit_by_name ()
No symbol table info available.
#32 0x0051b661 in do_size_request ()
No symbol table info available.
#33 0x0051ba97 in _gtk_size_group_compute_requisition ()
No symbol table info available.
#34 0x004b7252 in gtk_menu_position ()
No symbol table info available.
#35 0x004baa76 in gtk_menu_popup ()
No symbol table info available.
#36 0x000479cf in xmenu_show (f=0x1831380, x=490, y=559, for_click=1, keymaps=1, title=2478163, error=0xbffff06c) at xmenu.c:1801
	i = <value temporarily unavailable, due to optimizations>
	popup_x_y = {
  f = 0x34716c, 
  x = 41943049, 
  y = 41943049
}
	menu = (GtkWidget *) 0x1abb028
	pos_func = (GtkMenuPositionFunc) 0
	first_wv = (widget_value *) Cannot access memory at address 0x0

In GNU Emacs 23.1.1 (i386-apple-darwin9.8.0, GTK+ Version 2.14.7)
 of 2009-09-05 on mt-imac.local
Windowing system distributor `The X.Org Foundation', version 11.0.10503000
Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: nil
  value of $LC_CTYPE: nil
  value of $LC_MESSAGES: nil
  value of $LC_MONETARY: nil
  value of $LC_NUMERIC: nil
  value of $LC_TIME: nil
  value of $LANG: en_US.UTF-8
  value of $XMODIFIERS: nil
  locale-coding-system: utf-8-unix
  default-enable-multibyte-characters: t