From unknown Wed Sep 10 04:07:43 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#5609 <5609@debbugs.gnu.org> To: bug#5609 <5609@debbugs.gnu.org> Subject: Status: 23.1.92; segfault in composition_compute_stop_pos Reply-To: bug#5609 <5609@debbugs.gnu.org> Date: Wed, 10 Sep 2025 11:07:43 +0000 retitle 5609 23.1.92; segfault in composition_compute_stop_pos reassign 5609 emacs submitter 5609 Sven Joachim severity 5609 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Sat Feb 20 12:09:02 2010 Received: (at submit) by debbugs.gnu.org; 20 Feb 2010 17:09:02 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1NispA-0006vq-6L for submit@debbugs.gnu.org; Sat, 20 Feb 2010 12:09:02 -0500 Received: from fencepost.gnu.org ([140.186.70.10]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1Nisov-0006vd-Co for submit@debbugs.gnu.org; Sat, 20 Feb 2010 12:08:58 -0500 Received: from mx10.gnu.org ([199.232.76.166]:44473) by fencepost.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1Nisoq-0001Qv-Fs for submit@debbugs.gnu.org; Sat, 20 Feb 2010 12:08:40 -0500 Received: from Debian-exim by monty-python.gnu.org with spam-scanned (Exim 4.60) (envelope-from ) id 1Nisoi-0001Wt-TE for submit@debbugs.gnu.org; Sat, 20 Feb 2010 12:08:39 -0500 X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on monty-python X-Spam-Level: X-Spam-Status: No, score=-2.6 required=5.0 tests=AWL,BAYES_00, UNPARSEABLE_RELAY autolearn=ham version=3.1.0 Received: from lists.gnu.org ([199.232.76.165]:56211) by monty-python.gnu.org with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.60) (envelope-from ) id 1Nisoi-0001WN-N1 for submit@debbugs.gnu.org; Sat, 20 Feb 2010 12:08:32 -0500 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1Nisoh-0000SC-RO for bug-gnu-emacs@gnu.org; Sat, 20 Feb 2010 12:08:32 -0500 Received: from [140.186.70.92] (port=48417 helo=eggs.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1Nisof-0000NV-2z for bug-gnu-emacs@gnu.org; Sat, 20 Feb 2010 12:08:31 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.69) (envelope-from ) id 1Nisob-0002Sb-3p for bug-gnu-emacs@gnu.org; Sat, 20 Feb 2010 12:08:28 -0500 Received: from mail.gmx.net ([213.165.64.20]:49134) by eggs.gnu.org with smtp (Exim 4.69) (envelope-from ) id 1Nisoa-0002S5-5a for bug-gnu-emacs@gnu.org; Sat, 20 Feb 2010 12:08:25 -0500 Received: (qmail invoked by alias); 20 Feb 2010 17:08:21 -0000 Received: from p54864C67.dip.t-dialin.net (EHLO turtle.gmx.de) [84.134.76.103] by mail.gmx.net (mp057) with SMTP; 20 Feb 2010 18:08:21 +0100 X-Authenticated: #28250155 X-Provags-ID: V01U2FsdGVkX1/torF2aBrt1sERERdzu460XcdwmX1CgkFTpAEHBL oZjDadg5BrHzJp Received: by turtle.gmx.de (Postfix, from userid 1000) id D04A33F58E; Sat, 20 Feb 2010 18:08:21 +0100 (CET) From: Sven Joachim To: bug-gnu-emacs@gnu.org Subject: 23.1.92; segfault in composition_compute_stop_pos X-Debbugs-Cc: Sven Joachim Date: Sat, 20 Feb 2010 18:08:21 +0100 Message-ID: <871vgfomwq.fsf@turtle.gmx.de> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.1.92 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Y-GMX-Trusted: 0 X-FuHaFi: 0.51000000000000001 X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-detected-operating-system: by monty-python.gnu.org: GNU/Linux 2.6, seldom 2.4 (older, 4) X-Spam-Score: -4.4 (----) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -4.5 (----) During the last weeks I experienced several segfaults, mostly in Dired, but unfortunately I did not run Emacs under GDB. This time I did. I visited a file named "Makefile" and started an I-search for "distcheck" when Emacs segfaulted. This is not reproducible. (gdb) xbacktrace (gdb) bt full #0 0x081e30b4 in composition_compute_stop_pos (cmp_it=0xffffb040, charpos=16, bytepos=26, endpos=17, string=) at composite.c:1072 elt = start = 0 end = -22168 c = 14719988 prop = 0 val = #1 0x08079548 in reseat_to_string (it=, s=0x0, string=, charpos=0, precision=-8, field_width=17, multibyte=1) at xdisp.c:5613 No locals. #2 0x08080031 in display_string (string=0x83ec9f2 "", lisp_string=154714081, face_string=, face_string_pos=1, start=0, it=0xffffac88, field_width=17, precision=-8, max_x=0, multibyte=1) at xdisp.c:18866 hpos_at_start = 8 saved_face_id = 1 row = 0x8f77368 #3 0x08086434 in display_mode_element (it=, depth=, field_width=, precision=-8, elt=156429401, props=138332658, risky=0) at xdisp.c:17614 nwritten = multibyte = 1 charpos = spec = 0x6
string = 138332658 c = offset = 4 n = 0 field = 17 prec = literal = #4 0x08087271 in display_mode_element (it=, depth=, field_width=, precision=-8, elt=, props=138332658, risky=0) at xdisp.c:17786 halftail = 154085734 len = 1 car = tem = n = 0 field = prec = literal = #5 0x08087271 in display_mode_element (it=, depth=, field_width=, precision=0, elt=, props=138332658, risky=0) at xdisp.c:17786 halftail = 138568870 len = 8 car = tem = n = 8 field = prec = literal = #6 0x080878ad in display_mode_line (w=, face_id=MODE_LINE_FACE_ID, format=) at xdisp.c:17297 it = { window = 155275757, w = 0x94151e8, f = 0x8743160, method = GET_FROM_STRING, stop_charpos = 0, end_charpos = 17, s = 0x0, string_nchars = 4, region_beg_charpos = -1, region_end_charpos = -1, redisplay_end_trigger_charpos = 0, multibyte_p = 1, header_line_p = 0, string_from_display_prop_p = 0, ellipsis_p = 0, avoid_cursor_p = 0, dp = 0x8eb1488, dpvec = 0x0, dpend = 0x0, dpvec_char_len = 0, dpvec_face_id = 0, saved_face_id = 1, ctl_chars = {0 }, start = { pos = { charpos = 0, bytepos = 0 }, overlay_string_index = 0, string_pos = { charpos = 0, bytepos = 0 }, dpvec_index = 0 }, current = { pos = { charpos = 0, bytepos = 0 }, overlay_string_index = -1, string_pos = { charpos = 0, bytepos = 0 }, dpvec_index = -1 }, n_overlay_strings = 0, overlay_strings = {0 }, string_overlays = {0 }, string = 154714081, from_overlay = 0, stack = {{ string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0, cmp_it = { stop_pos = 0, id = 0, ch = 0, lookback = 0, nglyphs = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0 }, face_id = 0, u = { image = { object = 0, slice = { x = 0, y = 0, width = 0, height = 0 }, image_id = 0 }, comp = { object = 0 }, stretch = { object = 0 } }, position = { charpos = 0, bytepos = 0 }, current = { pos = { charpos = 0, bytepos = 0 }, overlay_string_index = 0, string_pos = { charpos = 0, bytepos = 0 }, dpvec_index = 0 }, from_overlay = 0, area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, multibyte_p = 0, string_from_display_prop_p = 0, display_ellipsis_p = 0, avoid_cursor_p = 0, line_wrap = TRUNCATE, voffset = 0, space_width = 0, font_height = 0 }, { string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0, cmp_it = { stop_pos = 0, id = 0, ch = 0, lookback = 0, nglyphs = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0 }, face_id = 0, u = { image = { object = 0, slice = { x = 0, y = 0, width = 0, height = 0 }, image_id = 0 }, comp = { object = 0 }, stretch = { object = 0 } }, position = { charpos = 0, bytepos = 0 }, current = { pos = { charpos = 0, bytepos = 0 }, overlay_string_index = 0, string_pos = { charpos = 0, bytepos = 0 }, dpvec_index = 0 }, from_overlay = 0, area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, multibyte_p = 0, string_from_display_prop_p = 0, display_ellipsis_p = 0, avoid_cursor_p = 0, line_wrap = TRUNCATE, voffset = 0, space_width = 0, font_height = 0 }, { string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0, cmp_it = { stop_pos = 0, id = 0, ch = 0, lookback = 0, nglyphs = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0 }, face_id = 0, u = { image = { object = 0, slice = { x = 0, y = 0, width = 0, height = 0 }, image_id = 0 }, comp = { object = 0 }, stretch = { object = 0 } }, position = { charpos = 0, bytepos = 0 }, current = { pos = { charpos = 0, bytepos = 0 }, overlay_string_index = 0, string_pos = { charpos = 0, bytepos = 0 }, dpvec_index = 0 }, from_overlay = 0, area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, multibyte_p = 0, string_from_display_prop_p = 0, display_ellipsis_p = 0, avoid_cursor_p = 0, line_wrap = TRUNCATE, voffset = 0, space_width = 0, font_height = 0 }, { string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0, cmp_it = { stop_pos = 0, id = 0, ch = 0, lookback = 0, nglyphs = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0 }, face_id = 0, u = { image = { object = 0, slice = { x = 0, y = 0, width = 0, height = 0 }, image_id = 0 }, comp = { object = 0 }, stretch = { object = 0 } }, position = { charpos = 0, bytepos = 0 }, current = { pos = { charpos = 0, bytepos = 0 }, overlay_string_index = 0, string_pos = { charpos = 0, bytepos = 0 }, dpvec_index = 0 }, from_overlay = 0, area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, multibyte_p = 0, string_from_display_prop_p = 0, display_ellipsis_p = 0, avoid_cursor_p = 0, line_wrap = TRUNCATE, voffset = 0, space_width = 0, font_height = 0 }}, sp = 0, selective = -1, what = IT_EOB, face_id = 1, selective_display_ellipsis_p = 1, ctl_arrow_p = 1, face_box_p = 1, start_of_box_run_p = 0, end_of_box_run_p = 0, overlay_strings_at_end_processed_p = 0, ignore_overlay_strings_at_pos_p = 0, glyph_not_available_p = 0, starts_in_middle_of_char_p = 0, face_before_selective_p = 0, constrain_row_ascent_descent_p = 0, line_wrap = TRUNCATE, base_face_id = 1, c = 32, len = 1, cmp_it = { stop_pos = 17, id = -1, ch = -2, lookback = 0, nglyphs = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0 }, char_to_display = 32, image_id = 0, slice = { x = 138332658, y = 138332658, width = 138332658, height = 138332658 }, space_width = 138332658, voffset = 0, tab_width = 8, font_height = 138332658, object = 136532569, position = { charpos = 1, bytepos = 1 }, truncation_pixel_width = 0, continuation_pixel_width = 0, first_visible_x = 0, last_visible_x = 1280, last_visible_y = 945, extra_line_spacing = 0, max_extra_line_spacing = 0, override_ascent = -1, override_descent = 0, override_boff = 0, glyph_row = 0x8f77368, area = TEXT_AREA, nglyphs = 1, pixel_width = 10, ascent = 12, descent = 3, max_ascent = 12, max_descent = 3, phys_ascent = 1, phys_descent = 0, max_phys_ascent = 11, max_phys_descent = 0, current_x = 81, continuation_lines_width = 0, current_y = 0, first_vpos = 0, vpos = 0, hpos = 8, left_user_fringe_bitmap = 0, right_user_fringe_bitmap = 0, left_user_fringe_face_id = 0, right_user_fringe_face_id = 0 } face = 0x0 #7 0x08087b32 in display_mode_lines (w=0x94151e8) at xdisp.c:17241 sel_w = 0x94151e8 old_selected_window = 155275757 old_selected_frame = 141832549 n = #8 0x0808e110 in redisplay_window (window=, just_this_one_p=) at xdisp.c:13868 w = 0x94151e8 f = 0x8743160 buffer = old = 0x86f5ba0 startp = update_mode_line = 1 tem = it = { window = 0, w = 0x0, f = 0x8743160, method = GET_FROM_BUFFER, stop_charpos = -16312, end_charpos = 141833240, s = 0xffffbba8 "\035\064t\b\030\064t\b`1t\b", string_nchars = 0, region_beg_charpos = -16312, region_end_charpos = 134783922, redisplay_end_trigger_charpos = -17496, multibyte_p = 0, header_line_p = 0, string_from_display_prop_p = 0, ellipsis_p = 1, avoid_cursor_p = 1, dp = 0x1, dpvec = 0x1, dpend = 0x87c8e48, dpvec_char_len = 140138472, dpvec_face_id = 1, saved_face_id = 14, ctl_chars = {15, 0, 141832549, 141716496, 142380616, 140138472, 141833245, 141833240, 141832544, 0, 1, 1, 0, 0, -1, -1}, start = { pos = { charpos = 0, bytepos = 0 }, overlay_string_index = 149623944, string_pos = { charpos = 0, bytepos = 0 }, dpvec_index = 0 }, current = { pos = { charpos = 0, bytepos = -1 }, overlay_string_index = 0, string_pos = { charpos = 0, bytepos = 0 }, dpvec_index = 0 }, n_overlay_strings = 0, overlay_strings = {0 , 1, 1, -1, -1, -1}, string_overlays = {-1, 1, 1, -1, -1, -1, -1, 0, 0, 0, 0, 0, 0, 0, 0, 0}, string = 0, from_overlay = 0, stack = {{ string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0, cmp_it = { stop_pos = 0, id = 0, ch = 0, lookback = 0, nglyphs = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0 }, face_id = 0, u = { image = { object = 0, slice = { x = 0, y = 0, width = 0, height = 0 }, image_id = 0 }, comp = { object = 0 }, stretch = { object = 0 } }, position = { charpos = 0, bytepos = 138332658 }, current = { pos = { charpos = 0, bytepos = 0 }, overlay_string_index = 0, string_pos = { charpos = 0, bytepos = 0 }, dpvec_index = 0 }, from_overlay = 0, area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, multibyte_p = 0, string_from_display_prop_p = 0, display_ellipsis_p = 0, avoid_cursor_p = 0, line_wrap = TRUNCATE, voffset = 0, space_width = 0, font_height = 0 }, { string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0, cmp_it = { stop_pos = 0, id = 0, ch = 0, lookback = 0, nglyphs = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0 }, face_id = 0, u = { image = { object = 0, slice = { x = 0, y = 0, width = 0, height = 0 }, image_id = 0 }, comp = { object = 0 }, stretch = { object = 0 } }, position = { charpos = 0, bytepos = 0 }, current = { pos = { charpos = 0, bytepos = 0 }, overlay_string_index = 0, string_pos = { charpos = 0, bytepos = 0 }, dpvec_index = 0 }, from_overlay = 0, area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, multibyte_p = 0, string_from_display_prop_p = 0, display_ellipsis_p = 0, avoid_cursor_p = 0, line_wrap = TRUNCATE, voffset = 0, space_width = 0, font_height = 0 }, { string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0, cmp_it = { stop_pos = 0, id = 0, ch = 0, lookback = 0, nglyphs = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0 }, face_id = 0, u = { image = { object = 0, slice = { x = 0, y = 0, width = 0, height = 0 }, image_id = 0 }, comp = { object = 0 }, stretch = { object = 0 } }, position = { charpos = 0, bytepos = 0 }, current = { pos = { charpos = 0, bytepos = 0 }, overlay_string_index = 0, string_pos = { charpos = 0, bytepos = 0 }, dpvec_index = 0 }, from_overlay = 0, area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, multibyte_p = 0, string_from_display_prop_p = 0, display_ellipsis_p = 0, avoid_cursor_p = 0, line_wrap = TRUNCATE, voffset = 0, space_width = 0, font_height = 0 }, { string = 0, string_nchars = 0, end_charpos = 0, stop_charpos = 0, cmp_it = { stop_pos = 0, id = 0, ch = 0, lookback = 0, nglyphs = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0 }, face_id = 0, u = { image = { object = 0, slice = { x = 0, y = 0, width = 0, height = 0 }, image_id = 0 }, comp = { object = 0 }, stretch = { object = 0 } }, position = { charpos = 0, bytepos = 0 }, current = { pos = { charpos = 0, bytepos = 0 }, overlay_string_index = 0, string_pos = { charpos = 0, bytepos = 0 }, dpvec_index = 0 }, from_overlay = 0, area = LEFT_MARGIN_AREA, method = GET_FROM_BUFFER, multibyte_p = 0, string_from_display_prop_p = 0, display_ellipsis_p = 0, avoid_cursor_p = 0, line_wrap = TRUNCATE, voffset = 0, space_width = 0, font_height = 0 }}, sp = 0, selective = 0, what = IT_CHARACTER, face_id = 0, selective_display_ellipsis_p = 0, ctl_arrow_p = 0, face_box_p = 0, start_of_box_run_p = 0, end_of_box_run_p = 0, overlay_strings_at_end_processed_p = 0, ignore_overlay_strings_at_pos_p = 0, glyph_not_available_p = 0, starts_in_middle_of_char_p = 0, face_before_selective_p = 0, constrain_row_ascent_descent_p = 0, line_wrap = TRUNCATE, base_face_id = 0, c = 0, len = 0, cmp_it = { stop_pos = 0, id = 0, ch = 0, lookback = 0, nglyphs = 0, nchars = 0, nbytes = 0, from = 0, to = 0, width = 0 }, char_to_display = 0, image_id = 0, slice = { x = 0, y = 0, width = 0, height = 0 }, space_width = 0, voffset = 4, tab_width = 0, font_height = 0, object = 35, position = { charpos = 2, bytepos = 0 }, truncation_pixel_width = 0, continuation_pixel_width = 0, first_visible_x = 0, last_visible_x = 1, last_visible_y = -1, extra_line_spacing = -2, max_extra_line_spacing = 0, override_ascent = 0, override_descent = 0, override_boff = 0, glyph_row = 0x8410c7a, area = 141931472, nglyphs = 143393862, pixel_width = -16456, ascent = 135781496, descent = 138480762, max_ascent = 138477947, max_descent = 154085310, phys_ascent = 0, phys_descent = 138332658, max_phys_ascent = 524288, max_phys_descent = 138332658, current_x = 138480762, continuation_lines_width = 141716496, current_y = 80, first_vpos = -16424, vpos = 135781869, hpos = 1240, left_user_fringe_bitmap = 15, right_user_fringe_bitmap = 0, left_user_fringe_face_id = 0, right_user_fringe_face_id = 185024 } current_matrix_up_to_date_p = 0 used_current_matrix_p = 0 buffer_unchanged_p = 0 temp_scroll_step = centering_position = last_line_misfit = 141238272 beg_unchanged = 0 end_unchanged = 2568 #9 0x08090483 in redisplay_window_0 (window=155275757) at xdisp.c:12278 No locals. #10 0x0818c487 in internal_condition_case_1 (bfun=0x8090460 , arg=155275757, handlers=138320542, hfun=0x806ac70 ) at eval.c:1538 val = 6 c = { tag = 138332658, val = 138332658, next = 0xffffcf44, gcpro = 0x0, jmp = {{ __jmpbuf = {155275752, 141832544, 138938688, -16136, -287380560, 550922335}, __mask_was_saved = 0, __saved_mask = { __val = {138377114, 138371811, 1600000, 141515680, 141213181, 138332658, 0, 1, 1073741820, 154085328, 138332658, 138332682, 138480762, 1073741820, 0, 1600000, 138377114, 64, 4294951112, 135838356, 138377114, 1600000, 0, 1, 141833240, 134784400, 143408256, 138332658, 138377114, 1073741820, 138332658, 141832544} } }}, backlist = 0x0, handlerlist = 0xffffd00c, lisp_eval_depth = 0, pdlcount = 4, poll_suppress_count = 1, interrupt_input_blocked = 0, byte_stack = 0x0 } h = { handler = 138320542, var = 138332658, chosen_clause = 138320552, tag = 0xffffc014, next = 0xffffd00c } #11 0x0807ba3f in redisplay_windows (window=0) at xdisp.c:12257 w = 0x94151e8 #12 0x08092280 in redisplay_internal (preserve_echo_area=) at xdisp.c:11829 f = 0x8743160 tail = frame = w = 0x94151e8 pause = 0 must_finish = 1 ---Type to continue, or q to quit--- number_of_visible_frames = polling_stopped_here = 0 old_frame = 141832549 consider_all_windows_p = #13 0x0812aa30 in read_char (commandflag=1, nmaps=2, maps=0xffffcd30, prev_event=138332658, used_mouse_menu=0xffffcde8, end_time=0x0) at keyboard.c:2727 c = local_getcjmp = {{ __jmpbuf = {-1, -13300, 141515680, -13320, 136158720, 154649174}, __mask_was_saved = 138360818, __saved_mask = { __val = {1, 4294967295, 4294953996, 4294967295, 4294954216, 135818359, 154649174, 138360818, 141515685, 143544384, 4294953764, 2, 144514080, 135781869, 1, 0, 4294953784, 4294954060, 4294953760, 4294953764, 2, 135725056, 139178826, 4294953736, 0, 4294953760, 141515685, 2812, 4294954184, 136181870, 141515680, 0} } }} save_jump = {{ __jmpbuf = {2812, 1773, 0, 970, 2812, 4114930}, __mask_was_saved = -13432, __saved_mask = { __val = {141515685, 4294953996, 141515680, 4294953832, 136155080, 138481026, 701, 4294953896, 136156349, 160257596, 703, 1, 101, 2808, 0, 4294953896, 5, 154649168, 138332658, 4294953944, 136158539, 138360818, 154085310, 4294953944, 136181141, 160257596, 702, 1, 154649174, 154649158, 138481026, 141515685} } }} key_already_recorded = 0 tem = save = previous_echo_area_message = 138332658 also_record = 138332658 reread = 0 polling_stopped_here = orig_kboard = 0x852b728 #14 0x0812cd0e in read_key_sequence (keybuf=, bufsize=, prompt=, dont_downcase_last=0, can_return_switch_frame=1, fix_current_buffer=1) at keyboard.c:9512 interrupted_kboard = 0x852b728 key = used_mouse_menu = 0 echo_local_start = 0 last_real_key_start = 0 keys_local_start = 0 local_first_binding = 0 from_string = 138332658 count = 2 t = 0 echo_start = 0 keys_start = 0 nmaps = 2 nmaps_allocated = 2 defs = 0xffffcd10 submaps = 0xffffcd30 orig_local_map = 138321278 orig_keymap = 138332658 localized_local_map = 0 first_binding = 0 first_unbound = 31 mock_input = 0 fkey = { parent = 139906014, map = 139906014, start = 0, end = 0 } keytran = { parent = 138325734, map = 138325734, start = 0, end = 0 } indec = { parent = 139906870, map = 139906870, start = 0, end = 0 } shift_translated = 0 delayed_switch_frame = 138332658 original_uppercase = -12776 original_uppercase_position = -1 starting_buffer = fake_prefixed_keys = 138332658 #15 0x0812f05b in command_loop_1 () at keyboard.c:1643 cmd = lose = keybuf = {452, 400, 392, -134245944, -12592, -12578, 138332658, 138332658, -12504, 135434301, 153440622, -12578, 0, 0, 0, 0, -12564, -16724416, 0, -144834560, 138332658, 139239074, 134524336, 1, -134230028, 139103760, 139103760, 139103776, -12504, 135414371} i = prev_modiff = 322 prev_buffer = 0x91f11c8 already_adjusted = 0 #16 0x0818c581 in internal_condition_case (bfun=0x812ee80 , handlers=138370474, hfun=0x8128f70 ) at eval.c:1490 val = 6 c = { tag = 138332658, val = 138332658, next = 0xffffd068, gcpro = 0x0, jmp = {{ __jmpbuf = {139103760, 139103760, 139103776, -12248, -289371216, 550791263}, __mask_was_saved = 0, __saved_mask = { __val = {0, 18, 0, 0, 0, 4160679520, 134546603, 4150183196, 4160737268, 4143076812, 28, 4294954692, 4160655461, 4294954680, 4149112913, 4149029509, 140498800, 4140892148, 4160721352, 4294954640, 4150183280, 0, 276967387, 8655230, 68, 4148686304, 4150183280, 4294955312, 4294967295, 4160737268, 134524336, 4160738928} } }}, backlist = 0x0, handlerlist = 0x0, lisp_eval_depth = 0, pdlcount = 2, poll_suppress_count = 1, interrupt_input_blocked = 0, byte_stack = 0x0 } h = { handler = 138370474, var = 138332658, chosen_clause = 138332706, tag = 0xffffcf44, next = 0x0 } #17 0x08128445 in command_loop_2 () at keyboard.c:1360 val = 6 #18 0x0818c661 in internal_catch (tag=138367546, func=0x8128420 , arg=138332658) at eval.c:1226 c = { tag = 138367546, val = 138332658, next = 0x0, gcpro = 0x0, jmp = {{ __jmpbuf = {139103760, 139103760, 139103776, -11976, -285324368, 550670431}, __mask_was_saved = 0, __saved_mask = { __val = {4294955300, 4294955448, 135430290, 4149103649, 0, 0, 0, 0, 0, 0, 138358368, 138332658, 138499904, 4294955288, 135783316, 138499906, 138497787, 138332658, 138358368, 22, 140457504, 4, 0, 2144828478, 138802912, 1, 138332682, 0, 14, 4294955404, 138499906, 138332658} } }}, backlist = 0x0, handlerlist = 0x0, lisp_eval_depth = 0, pdlcount = 2, poll_suppress_count = 1, interrupt_input_blocked = 0, byte_stack = 0x0 } #19 0x08128dbf in command_loop () at keyboard.c:1339 No locals. #20 0x0812915a in recursive_edit_1 () at keyboard.c:954 val = #21 0x08129282 in Frecursive_edit () at keyboard.c:1016 buffer = 138332658 #22 0x0811d8d8 in main (argc=, argv=) at emacs.c:1833 dummy = -11092 stack_bottom_variable = 8 '\b' do_initial_setlocale = 139103760 skip_args = 0 rlim = { rlim_cur = 8388608, rlim_max = 18446744073709551615 } no_loadup = 0 junk = 0x0 dname_arg = 0x0 In GNU Emacs 23.1.92.1 (i486-pc-linux-gnu, GTK+ Version 2.18.7) of 2010-02-20 on turtle, modified by Debian (emacs-snapshot package, version 1:20100220-1) Windowing system distributor `The X.Org Foundation', version 11.0.10705000 configured using `configure '--build' 'i486-linux-gnu' '--host' 'i486-linux-gnu' '--prefix=/usr' '--sharedstatedir=/var/lib' '--libexecdir=/usr/lib' '--localstatedir=/var' '--infodir=/usr/share/info' '--mandir=/usr/share/man' '--with-pop=yes' '--enable-locallisppath=/etc/emacs-snapshot:/etc/emacs:/usr/local/share/emacs/23.1.92/site-lisp:/usr/local/share/emacs/site-lisp:/usr/share/emacs/23.1.92/site-lisp:/usr/share/emacs/site-lisp' '--with-x=yes' '--with-x-toolkit=gtk' 'build_alias=i486-linux-gnu' 'host_alias=i486-linux-gnu' 'CFLAGS=-DDEBIAN -DSITELOAD_PURESIZE_EXTRA=5000 -g -O2' 'LDFLAGS=-g -Wl,--as-needed' 'CPPFLAGS='' Important settings: value of $LC_ALL: nil value of $LC_COLLATE: C value of $LC_CTYPE: nil value of $LC_MESSAGES: nil value of $LC_MONETARY: nil value of $LC_NUMERIC: nil value of $LC_TIME: nil value of $LANG: de_DE.UTF-8 value of $XMODIFIERS: nil locale-coding-system: utf-8-unix default enable-multibyte-characters: t Major mode: Group Minor modes in effect: gnus-undo-mode: t display-time-mode: t auto-image-file-mode: t show-paren-mode: t tooltip-mode: t mouse-wheel-mode: t menu-bar-mode: t file-name-shadow-mode: t global-font-lock-mode: t font-lock-mode: t auto-encryption-mode: t auto-compression-mode: t temp-buffer-resize-mode: t column-number-mode: t line-number-mode: t transient-mark-mode: t Recent input: C-x d / t m v C-s d i s t c h e c k C-s C-s C-s M-x g n u s y SPC q SPC q M-x r e p o r t - e m Recent messages: Opening nnfolder server...done No new newsgroups Opening nnfolder server on archive...done Opening nntp server on news.gnus.org...done Opening nntp server on news.eternal-september.org...done Retrieving newsgroup: nntp+news.eternal-september.org:de.comp.os.unix.apps.kde... Fetching headers for nntp+news.eternal-september.org:de.comp.os.unix.apps.kde...done Retrieving newsgroup: nntp+news.eternal-september.org:de.sci.mathematik... Fetching headers for nntp+news.eternal-september.org:de.sci.mathematik...done Quit [2 times] Load-path shadows: ~/elisp/po-mode hides /usr/share/emacs-snapshot/site-lisp/gettext/po-mode ~/elisp/debian-bts-control hides /usr/share/emacs-snapshot/site-lisp/dpkg-dev-el/debian-bts-control /usr/share/emacs/23.1.92/site-lisp/auctex/tex-fptex hides /usr/share/emacs/site-lisp/auctex/tex-fptex /usr/share/emacs/23.1.92/site-lisp/auctex/tex hides /usr/share/emacs/site-lisp/auctex/tex /usr/share/emacs/23.1.92/site-lisp/auctex/latex hides /usr/share/emacs/site-lisp/auctex/latex /usr/share/emacs/23.1.92/site-lisp/auctex/tex-fold hides /usr/share/emacs/site-lisp/auctex/tex-fold /usr/share/emacs/23.1.92/site-lisp/auctex/texmathp hides /usr/share/emacs/site-lisp/auctex/texmathp /usr/share/emacs/23.1.92/site-lisp/auctex/tex-bar hides /usr/share/emacs/site-lisp/auctex/tex-bar /usr/share/emacs/23.1.92/site-lisp/auctex/tex-mik hides /usr/share/emacs/site-lisp/auctex/tex-mik /usr/share/emacs/23.1.92/site-lisp/auctex/context hides /usr/share/emacs/site-lisp/auctex/context /usr/share/emacs/23.1.92/site-lisp/auctex/context-nl hides /usr/share/emacs/site-lisp/auctex/context-nl /usr/share/emacs/23.1.92/site-lisp/auctex/bib-cite hides /usr/share/emacs/site-lisp/auctex/bib-cite /usr/share/emacs/23.1.92/site-lisp/auctex/multi-prompt hides /usr/share/emacs/site-lisp/auctex/multi-prompt /usr/share/emacs/23.1.92/site-lisp/auctex/tex-buf hides /usr/share/emacs/site-lisp/auctex/tex-buf /usr/share/emacs/23.1.92/site-lisp/auctex/tex-jp hides /usr/share/emacs/site-lisp/auctex/tex-jp /usr/share/emacs/23.1.92/site-lisp/auctex/context-en hides /usr/share/emacs/site-lisp/auctex/context-en /usr/share/emacs/23.1.92/site-lisp/auctex/tex-font hides /usr/share/emacs/site-lisp/auctex/tex-font /usr/share/emacs/23.1.92/site-lisp/auctex/toolbar-x hides /usr/share/emacs/site-lisp/auctex/toolbar-x /usr/share/emacs/23.1.92/site-lisp/auctex/tex-style hides /usr/share/emacs/site-lisp/auctex/tex-style /usr/share/emacs/23.1.92/site-lisp/auctex/font-latex hides /usr/share/emacs/site-lisp/auctex/font-latex /usr/share/emacs/23.1.92/site-lisp/auctex/tex-info hides /usr/share/emacs/site-lisp/auctex/tex-info /usr/share/emacs-snapshot/site-lisp/bbdb/bbdb-pilot-jwz hides /usr/share/emacs/site-lisp/bbdb/bbdb-pilot-jwz ~/elisp/po-mode hides /usr/share/emacs/site-lisp/gettext/po-mode /usr/share/emacs-snapshot/site-lisp/gettext/po-compat hides /usr/share/emacs/site-lisp/gettext/po-compat /usr/share/emacs-snapshot/site-lisp/gnuplot-mode/gnuplot hides /usr/share/emacs/site-lisp/gnuplot-mode/gnuplot /usr/share/emacs-snapshot/site-lisp/gnuplot-mode/info-look.20.3 hides /usr/share/emacs/site-lisp/gnuplot-mode/info-look.20.3 /usr/share/emacs-snapshot/site-lisp/gnuplot-mode/gnuplot-gui hides /usr/share/emacs/site-lisp/gnuplot-mode/gnuplot-gui /usr/share/emacs/23.1.92/site-lisp/cmake/cmake-mode hides /usr/share/emacs/23.1.92/site-lisp/cmake-data/cmake-mode /usr/share/emacs/23.1.92/site-lisp/cmake/cmake-mode hides /usr/share/emacs/site-lisp/cmake-mode /usr/share/emacs/23.1.92/site-lisp/debian-startup hides /usr/share/emacs/site-lisp/debian-startup /usr/share/emacs/23.1.92/site-lisp/magit hides /usr/share/emacs/site-lisp/magit /usr/share/emacs-snapshot/site-lisp/w3m/w3m-util hides /usr/share/emacs/site-lisp/w3m/w3m-util /usr/share/emacs-snapshot/site-lisp/w3m/w3m-dtree hides /usr/share/emacs/site-lisp/w3m/w3m-dtree /usr/share/emacs-snapshot/site-lisp/w3m/w3m-hist hides /usr/share/emacs/site-lisp/w3m/w3m-hist /usr/share/emacs-snapshot/site-lisp/w3m/w3m-weather hides /usr/share/emacs/site-lisp/w3m/w3m-weather /usr/share/emacs-snapshot/site-lisp/w3m/w3m-rss hides /usr/share/emacs/site-lisp/w3m/w3m-rss /usr/share/emacs-snapshot/site-lisp/w3m/mew-w3m hides /usr/share/emacs/site-lisp/w3m/mew-w3m /usr/share/emacs-snapshot/site-lisp/w3m/w3m-filter hides /usr/share/emacs/site-lisp/w3m/w3m-filter /usr/share/emacs-snapshot/site-lisp/w3m/w3m-session hides /usr/share/emacs/site-lisp/w3m/w3m-session /usr/share/emacs-snapshot/site-lisp/w3m/w3mhack hides /usr/share/emacs/site-lisp/w3m/w3mhack /usr/share/emacs-snapshot/site-lisp/w3m/w3m-search hides /usr/share/emacs/site-lisp/w3m/w3m-search /usr/share/emacs-snapshot/site-lisp/w3m/w3m-lnum hides /usr/share/emacs/site-lisp/w3m/w3m-lnum /usr/share/emacs-snapshot/site-lisp/w3m/w3m-proc hides /usr/share/emacs/site-lisp/w3m/w3m-proc /usr/share/emacs-snapshot/site-lisp/w3m/w3m-fb hides /usr/share/emacs/site-lisp/w3m/w3m-fb /usr/share/emacs-snapshot/site-lisp/w3m/w3m-favicon hides /usr/share/emacs/site-lisp/w3m/w3m-favicon /usr/share/emacs-snapshot/site-lisp/w3m/w3m-bug hides /usr/share/emacs/site-lisp/w3m/w3m-bug /usr/share/emacs-snapshot/site-lisp/w3m/w3m-perldoc hides /usr/share/emacs/site-lisp/w3m/w3m-perldoc /usr/share/emacs-snapshot/site-lisp/w3m/mime-w3m hides /usr/share/emacs/site-lisp/w3m/mime-w3m /usr/share/emacs-snapshot/site-lisp/w3m/w3m-bookmark hides /usr/share/emacs/site-lisp/w3m/w3m-bookmark /usr/share/emacs-snapshot/site-lisp/w3m/octet hides /usr/share/emacs/site-lisp/w3m/octet /usr/share/emacs-snapshot/site-lisp/w3m/w3m-ems hides /usr/share/emacs/site-lisp/w3m/w3m-ems /usr/share/emacs-snapshot/site-lisp/w3m/w3m hides /usr/share/emacs/site-lisp/w3m/w3m /usr/share/emacs-snapshot/site-lisp/w3m/w3m-ccl hides /usr/share/emacs/site-lisp/w3m/w3m-ccl /usr/share/emacs-snapshot/site-lisp/w3m/w3m-mail hides /usr/share/emacs/site-lisp/w3m/w3m-mail /usr/share/emacs-snapshot/site-lisp/w3m/w3m-cookie hides /usr/share/emacs/site-lisp/w3m/w3m-cookie /usr/share/emacs-snapshot/site-lisp/w3m/w3m-image hides /usr/share/emacs/site-lisp/w3m/w3m-image /usr/share/emacs-snapshot/site-lisp/w3m/w3m-form hides /usr/share/emacs/site-lisp/w3m/w3m-form /usr/share/emacs-snapshot/site-lisp/w3m/w3m-antenna hides /usr/share/emacs/site-lisp/w3m/w3m-antenna /usr/share/emacs-snapshot/site-lisp/w3m/w3m-symbol hides /usr/share/emacs/site-lisp/w3m/w3m-symbol /usr/share/emacs-snapshot/site-lisp/w3m/w3m-tabmenu hides /usr/share/emacs/site-lisp/w3m/w3m-tabmenu /usr/share/emacs-snapshot/site-lisp/w3m/w3m-namazu hides /usr/share/emacs/site-lisp/w3m/w3m-namazu Features: (shadow ispell emacsbug sort gnus-cite smiley ansi-color mail-extr gnus-async gnus-bcklg parse-time timezone gnus-ml disp-table auth-source byte-opt bytecomp byte-compile nnfolder nndraft nnmh nnagent nnml gnus-agent gnus-srvr gnus-score score-mode nnvirtual gnus-msg gnus-art mm-uu mml2015 epg-config mm-view smime dig nntp gnus-cache gnus-sum nnoo gnus-group gnus-undo nnmail mail-source format-spec gnus-start gnus-spec gnus-int gnus-range message idna sendmail ecomplete rfc822 mml easymenu mml-sec password-cache mm-decode mm-bodies mm-encode mailcap mail-parse rfc2231 rfc2047 rfc2045 qp ietf-drums mailabbrev gmm-utils mailheader canlock sha1 hex-util hashcash gnus-win gnus gnus-ems nnheader gnus-util netrc time-date mail-utils mm-util mail-prsvr wid-edit multi-isearch vc-git make-mode view dired-x dired-aux dired time server uniquify advice help-fns advice-preload po generic-x regexp-opt image-file paren add-ons bitmap bitmap-ci poem poem-e20 poem-e20_3 pces pces-e20 pces-20 broken pcustom poe pym static apel-ver product debian-el debian-el-loaddefs w3m-load vm-autoload vm-autoloads vm-init emacs-goodies-el emacs-goodies-custom emacs-goodies-loaddefs dpkg-dev-el dpkg-dev-el-loaddefs bbdb-autoloads preview-latex tex-site auto-loads tooltip ediff-hook vc-hooks lisp-float-type mwheel x-win x-dnd font-setting tool-bar dnd fontset image fringe lisp-mode register page menu-bar rfn-eshadow timer select scroll-bar mldrag mouse jit-lock font-lock syntax facemenu font-core frame cham georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korean japanese hebrew greek romanian slovak czech european ethiopic indian cyrillic chinese case-table epa-hook jka-cmpr-hook help simple abbrev loaddefs button minibuffer faces cus-face files text-properties overlay md5 base64 format env code-pages mule custom widget hashtable-print-readable backquote make-network-process dbusbind font-render-setting gtk x-toolkit x multi-tty emacs) From debbugs-submit-bounces@debbugs.gnu.org Sun Feb 21 08:16:47 2010 Received: (at 5609) by debbugs.gnu.org; 21 Feb 2010 13:16:47 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1NjBfy-0004Yp-Je for submit@debbugs.gnu.org; Sun, 21 Feb 2010 08:16:46 -0500 Received: from pantheon-po34.its.yale.edu ([130.132.50.80]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1NjBfx-0004Yg-3a for 5609@debbugs.gnu.org; Sun, 21 Feb 2010 08:16:45 -0500 Received: from furry (adsl-99-96-75-7.dsl.wlfrct.sbcglobal.net [99.96.75.7]) (authenticated bits=0) by pantheon-po34.its.yale.edu (8.12.11.20060308/8.12.11) with ESMTP id o1LDGQYa019371 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Sun, 21 Feb 2010 08:16:37 -0500 Received: by furry (Postfix, from userid 1000) id 9356AC05D; Sun, 21 Feb 2010 08:16:26 -0500 (EST) From: Chong Yidong To: Kenichi Handa Subject: Re: 23.1.92; segfault in composition_compute_stop_pos Date: Sun, 21 Feb 2010 08:16:26 -0500 Message-ID: <87r5oed905.fsf@stupidchicken.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: -2.5 (--) X-Debbugs-Envelope-To: 5609 Cc: Sven Joachim , 5609@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -2.5 (--) Hi Handa-san, It looks like your changes to composite.c last month may have led to a bug. Could you take a look? Thanks! Sven Joachim wrote: > During the last weeks I experienced several segfaults, mostly in Dired, > but unfortunately I did not run Emacs under GDB. This time I did. > I visited a file named "Makefile" and started an I-search for > "distcheck" when Emacs segfaulted. This is not reproducible. > (gdb) xbacktrace > (gdb) bt full > #0 0x081e30b4 in composition_compute_stop_pos (cmp_it=0xffffb040, > charpos=16, bytepos=26, > endpos=17, string=) at composite.c:1072 > elt = > start = 0 > end = -22168 > c = 14719988 > prop = 0 > val = > #1 0x08079548 in reseat_to_string (it=, s=0x0, > string=, > charpos=0, precision=-8, field_width=17, multibyte=1) at xdisp.c:5613 > No locals. > > #2 0x08080031 in display_string (string=0x83ec9f2 "", > lisp_string=154714081, face_string=, > face_string_pos=1, start=0, it=0xffffac88, field_width=17, > precision=-8, max_x=0, multibyte=1) at xdisp.c:18866 > hpos_at_start = 8 > saved_face_id = 1 > row = 0x8f77368 From debbugs-submit-bounces@debbugs.gnu.org Mon Feb 22 02:54:36 2010 Received: (at 5609) by debbugs.gnu.org; 22 Feb 2010 07:54:36 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1NjT7k-0003vX-9L for submit@debbugs.gnu.org; Mon, 22 Feb 2010 02:54:36 -0500 Received: from mx1.aist.go.jp ([150.29.246.133]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1NjT7V-0003vG-Bq for 5609@debbugs.gnu.org; Mon, 22 Feb 2010 02:54:34 -0500 Received: from rqsmtp1.aist.go.jp (rqsmtp1.aist.go.jp [150.29.254.115]) by mx1.aist.go.jp with ESMTP id o1M7sGnu008434; Mon, 22 Feb 2010 16:54:16 +0900 (JST) env-from (handa@m17n.org) Received: from smtp3.aist.go.jp by rqsmtp1.aist.go.jp with ESMTP id o1M7sGiU025537; Mon, 22 Feb 2010 16:54:16 +0900 (JST) env-from (handa@m17n.org) Received: by smtp3.aist.go.jp with ESMTP id o1M7sFRF026567; Mon, 22 Feb 2010 16:54:15 +0900 (JST) env-from (handa@m17n.org) Received: from handa by etlken with local (Exim 4.69) (envelope-from ) id 1NjT7O-0008HY-RZ; Mon, 22 Feb 2010 16:54:14 +0900 From: Kenichi Handa To: Chong Yidong Subject: Re: 23.1.92; segfault in composition_compute_stop_pos In-Reply-To: <87r5oed905.fsf@stupidchicken.com> (message from Chong Yidong on Sun, 21 Feb 2010 08:16:26 -0500) References: <87r5oed905.fsf@stupidchicken.com> Date: Mon, 22 Feb 2010 16:54:14 +0900 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: -2.7 (--) X-Debbugs-Envelope-To: 5609 Cc: svenjoac@gmx.de, 5609@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -2.7 (--) In article <87r5oed905.fsf@stupidchicken.com>, Chong Yidong writes: > Hi Handa-san, > It looks like your changes to composite.c last month may have led to a > bug. Could you take a look? Thanks! Ok, I'll work on it. --- Kenichi Handa handa@m17n.org > Sven Joachim wrote: > > During the last weeks I experienced several segfaults, mostly in Dired, > > but unfortunately I did not run Emacs under GDB. This time I did. > > I visited a file named "Makefile" and started an I-search for > > "distcheck" when Emacs segfaulted. This is not reproducible. > > (gdb) xbacktrace > > (gdb) bt full > > #0 0x081e30b4 in composition_compute_stop_pos (cmp_it=0xffffb040, > > charpos=16, bytepos=26, > > endpos=17, string=) at composite.c:1072 > > elt = > > start = 0 > > end = -22168 > > c = 14719988 > > prop = 0 > > val = > > #1 0x08079548 in reseat_to_string (it=, s=0x0, > > string=, > > charpos=0, precision=-8, field_width=17, multibyte=1) at xdisp.c:5613 > > No locals. > > > > #2 0x08080031 in display_string (string=0x83ec9f2 "", > > lisp_string=154714081, face_string=, > > face_string_pos=1, start=0, it=0xffffac88, field_width=17, > > precision=-8, max_x=0, multibyte=1) at xdisp.c:18866 > > hpos_at_start = 8 > > saved_face_id = 1 > > row = 0x8f77368 From debbugs-submit-bounces@debbugs.gnu.org Wed Feb 24 21:33:32 2010 Received: (at 5609) by debbugs.gnu.org; 25 Feb 2010 02:33:32 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1NkTXg-00086T-0N for submit@debbugs.gnu.org; Wed, 24 Feb 2010 21:33:32 -0500 Received: from mx1.aist.go.jp ([150.29.246.133]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1NkTXd-00086M-49 for 5609@debbugs.gnu.org; Wed, 24 Feb 2010 21:33:30 -0500 Received: from rqsmtp2.aist.go.jp (rqsmtp2.aist.go.jp [150.29.254.123]) by mx1.aist.go.jp with ESMTP id o1P2XN3a022629; Thu, 25 Feb 2010 11:33:23 +0900 (JST) env-from (handa@m17n.org) Received: from smtp2.aist.go.jp by rqsmtp2.aist.go.jp with ESMTP id o1P2XMum003570; Thu, 25 Feb 2010 11:33:22 +0900 (JST) env-from (handa@m17n.org) Received: by smtp2.aist.go.jp with ESMTP id o1P2XM6X028447; Thu, 25 Feb 2010 11:33:22 +0900 (JST) env-from (handa@m17n.org) Received: from handa by etlken with local (Exim 4.69) (envelope-from ) id 1NkTXW-0002pE-Ct; Thu, 25 Feb 2010 11:33:22 +0900 From: Kenichi Handa To: Sven Joachim Subject: Re: bug#5609: 23.1.92; segfault in composition_compute_stop_pos In-Reply-To: <871vgfomwq.fsf@turtle.gmx.de> (message from Sven Joachim on Sat, 20 Feb 2010 18:08:21 +0100) References: <871vgfomwq.fsf@turtle.gmx.de> Date: Thu, 25 Feb 2010 11:33:22 +0900 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: -2.7 (--) X-Debbugs-Envelope-To: 5609 Cc: svenjoac@gmx.de, 5609@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -2.7 (--) In article <871vgfomwq.fsf@turtle.gmx.de>, Sven Joachim writes: > During the last weeks I experienced several segfaults, mostly in Dired, > but unfortunately I did not run Emacs under GDB. This time I did. > I visited a file named "Makefile" and started an I-search for > "distcheck" when Emacs segfaulted. This is not reproducible. Although I can't reproduce that bug, I found a suspicious code and just fixed it. Please try the latest version. --- Kenichi Handa handa@m17n.org From debbugs-submit-bounces@debbugs.gnu.org Thu Feb 25 18:30:17 2010 Received: (at 5609) by debbugs.gnu.org; 25 Feb 2010 23:30:18 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1Nkn9s-0002O9-IM for submit@debbugs.gnu.org; Thu, 25 Feb 2010 18:30:16 -0500 Received: from ntp.math.s.chiba-u.ac.jp ([133.82.132.2] helo=mathmail.math.s.chiba-u.ac.jp) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1Nkn9q-0002O2-8Z for 5609@debbugs.gnu.org; Thu, 25 Feb 2010 18:30:15 -0500 Received: from church.math.s.chiba-u.ac.jp (church [133.82.132.36]) by mathmail.math.s.chiba-u.ac.jp (Postfix) with ESMTP id 069E8C0561; Fri, 26 Feb 2010 08:30:07 +0900 (JST) Date: Fri, 26 Feb 2010 08:30:07 +0900 Message-ID: From: YAMAMOTO Mitsuharu To: Kenichi Handa Subject: Re: bug#5609: 23.1.92; segfault in composition_compute_stop_pos In-Reply-To: References: <871vgfomwq.fsf@turtle.gmx.de> User-Agent: Wanderlust/2.14.0 (Africa) SEMI/1.14.6 (Maruoka) FLIM/1.14.8 (=?ISO-8859-4?Q?Shij=F2?=) APEL/10.6 Emacs/22.3 (sparc-sun-solaris2.8) MULE/5.0 (SAKAKI) Organization: Faculty of Science, Chiba University MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: text/plain; charset=US-ASCII X-Spam-Score: -3.0 (---) X-Debbugs-Envelope-To: 5609 Cc: Sven Joachim , 5609@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -3.0 (---) >>>>> On Thu, 25 Feb 2010 11:33:22 +0900, Kenichi Handa said: > In article <871vgfomwq.fsf@turtle.gmx.de>, Sven Joachim > writes: >> During the last weeks I experienced several segfaults, mostly in >> Dired, but unfortunately I did not run Emacs under GDB. This time >> I did. I visited a file named "Makefile" and started an I-search >> for "distcheck" when Emacs segfaulted. This is not reproducible. > Although I can't reproduce that bug, I found a suspicious code and > just fixed it. Please try the latest version. Actually I suspected this out-of-boundary `endpos' value in http://lists.gnu.org/archive/html/bug-gnu-emacs/2010-01/msg00522.html I suspect the problematic case is that `charpos + field_width' in reseat_to_string exceeds the length of the given string. The value of `field_width' is 12 by default when displaying buffer names. Also, I guess the upper limit of `endpos' is `SCHARS (it->string)' instead of `charpos + SCHARS (it->string)' at line 5614 below. Could you confirm if it is correct? 5611 it->stop_charpos = charpos; 5612 if (s == NULL && it->multibyte_p) 5613 { 5614 EMACS_INT endpos = charpos + SCHARS (it->string); 5615 if (endpos > it->end_charpos) 5616 endpos = it->end_charpos; 5617 composition_compute_stop_pos (&it->cmp_it, charpos, -1, endpos, 5618 it->string); 5619 } YAMAMOTO Mitsuharu mituharu@math.s.chiba-u.ac.jp From debbugs-submit-bounces@debbugs.gnu.org Thu Feb 25 20:23:15 2010 Received: (at 5609) by debbugs.gnu.org; 26 Feb 2010 01:23:15 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1NkovC-0004HB-Sq for submit@debbugs.gnu.org; Thu, 25 Feb 2010 20:23:15 -0500 Received: from mx1.aist.go.jp ([150.29.246.133]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1Nkov9-0004H2-H3 for 5609@debbugs.gnu.org; Thu, 25 Feb 2010 20:23:13 -0500 Received: from rqsmtp1.aist.go.jp (rqsmtp1.aist.go.jp [150.29.254.115]) by mx1.aist.go.jp with ESMTP id o1Q1N5Vb025382; Fri, 26 Feb 2010 10:23:05 +0900 (JST) env-from (handa@m17n.org) Received: from smtp3.aist.go.jp by rqsmtp1.aist.go.jp with ESMTP id o1Q1N5bL023829; Fri, 26 Feb 2010 10:23:05 +0900 (JST) env-from (handa@m17n.org) Received: by smtp3.aist.go.jp with ESMTP id o1Q1N4Pt001737; Fri, 26 Feb 2010 10:23:05 +0900 (JST) env-from (handa@m17n.org) Received: from handa by etlken with local (Exim 4.69) (envelope-from ) id 1Nkov2-0005Nr-PR; Fri, 26 Feb 2010 10:23:04 +0900 From: Kenichi Handa To: YAMAMOTO Mitsuharu Subject: Re: bug#5609: 23.1.92; segfault in composition_compute_stop_pos In-Reply-To: (message from YAMAMOTO Mitsuharu on Fri, 26 Feb 2010 08:30:07 +0900) References: <871vgfomwq.fsf@turtle.gmx.de> Date: Fri, 26 Feb 2010 10:23:04 +0900 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: -2.7 (--) X-Debbugs-Envelope-To: 5609 Cc: svenjoac@gmx.de, 5609@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -2.7 (--) In article , YAMAMOTO Mitsuharu writes: > Actually I suspected this out-of-boundary `endpos' value in > http://lists.gnu.org/archive/html/bug-gnu-emacs/2010-01/msg00522.html > I suspect the problematic case is that `charpos + field_width' in > reseat_to_string exceeds the length of the given string. The value of > `field_width' is 12 by default when displaying buffer names. Ya, at that time, I fixed only some other part related the same problem. > Also, I guess the upper limit of `endpos' is `SCHARS (it->string)' > instead of `charpos + SCHARS (it->string)' at line 5614 below. Could > you confirm if it is correct? Of course, you are right! I've just installed a fix. --- Kenichi Handa handa@m17n.org From debbugs-submit-bounces@debbugs.gnu.org Sat Mar 06 13:09:14 2010 Received: (at control) by debbugs.gnu.org; 6 Mar 2010 18:09:15 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1NnyR8-0007ew-OQ for submit@debbugs.gnu.org; Sat, 06 Mar 2010 13:09:14 -0500 Received: from pantheon-po33.its.yale.edu ([130.132.50.94]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1NnyR7-0007er-1T for control@debbugs.gnu.org; Sat, 06 Mar 2010 13:09:13 -0500 Received: from furry (173-14-147-246-NewEngland.hfc.comcastbusiness.net [173.14.147.246]) (authenticated bits=0) by pantheon-po33.its.yale.edu (8.12.11.20060308/8.12.11) with ESMTP id o26I98ed013804 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Sat, 6 Mar 2010 13:09:08 -0500 Received: by furry (Postfix, from userid 1000) id 35F5156CC01; Sat, 6 Mar 2010 13:09:08 -0500 (EST) From: Chong Yidong To: control@debbugs.gnu.org Subject: close 5609 Date: Sat, 06 Mar 2010 13:09:08 -0500 Message-ID: <874okt8gqj.fsf@stupidchicken.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-YaleITSMailFilter: Version 1.2c (attachment(s) not renamed) X-Spam-Score: -3.2 (---) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -3.2 (---) close 5609 thanks From unknown Wed Sep 10 04:07:43 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Sun, 04 Apr 2010 11:24:03 +0000 User-Agent: Fakemail v42.6.9 # A New Hope # A long time ago, in a galaxy far, far away # something happened. # # Magically this resulted in the following # action being taken, but this fake control # message doesn't tell you why it happened # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator