From unknown Tue Jun 17 01:49:26 2025 X-Loop: help-debbugs@gnu.org Subject: bug#6988: 23.2; crash using compose-region under X Resent-From: Tor Kinlok Original-Sender: debbugs-submit-bounces@debbugs.gnu.org Resent-To: owner@debbugs.gnu.org Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sun, 05 Sep 2010 20:05:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 6988 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: 6988@debbugs.gnu.org X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.128371710124018 (code B ref -1); Sun, 05 Sep 2010 20:05:02 +0000 Received: (at submit) by debbugs.gnu.org; 5 Sep 2010 20:05:01 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1OsLSW-0006FL-6m for submit@debbugs.gnu.org; Sun, 05 Sep 2010 16:05:01 -0400 Received: from eggs.gnu.org ([140.186.70.92]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1OsLIW-0005x0-3i for submit@debbugs.gnu.org; Sun, 05 Sep 2010 15:54:41 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.69) (envelope-from ) id 1OsLKI-0003kw-BM for submit@debbugs.gnu.org; Sun, 05 Sep 2010 15:56:31 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=unavailable version=3.3.1 Received: from lists.gnu.org ([199.232.76.165]:42194) by eggs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1OsLKG-0003kL-PS for submit@debbugs.gnu.org; Sun, 05 Sep 2010 15:56:30 -0400 Received: from [140.186.70.92] (port=34449 helo=eggs.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1OsLKD-0007Kh-U8 for bug-gnu-emacs@gnu.org; Sun, 05 Sep 2010 15:56:28 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.69) (envelope-from ) id 1OsLKB-0003jg-Jf for bug-gnu-emacs@gnu.org; Sun, 05 Sep 2010 15:56:25 -0400 Received: from mx.nic.nu ([69.25.75.69]:60388) by eggs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1OsLKB-0003jZ-Gv for bug-gnu-emacs@gnu.org; Sun, 05 Sep 2010 15:56:23 -0400 Received: from 7-Zark-7 (96-39-2-186.static.oxfr.ma.charter.com [96.39.2.186]) by mx.nic.nu (8.14.3/8.13.8) with ESMTP id o85JuL7e012136 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Sun, 5 Sep 2010 19:56:22 GMT From: Tor Kinlok User-Agent: GNU Emacs 23.2.1 (gnu os/linux) X-No-Archive: Yes Date: Sun, 05 Sep 2010 15:56:22 -0400 Message-ID: <87zkvwynfd.fsf@member.fsf.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: Solaris 9 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6, seldom 2.4 (older, 4) X-Spam-Score: -4.0 (----) X-Mailman-Approved-At: Sun, 05 Sep 2010 16:04:58 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -5.3 (-----) Starting a no-toolkit (ie ./configure --with-x-toolkit=3Dno) emacs 23.2.1 under X windows and then doing a compose-region on a null string results in a crash. Something similar was reported by Johan Bockg=C3=A5rd in 2006 and a fix applied at that time: http://www.mail-archive.com/emacs-pretest-bug@gnu.org/msg05765.html Following the same procedure from the old report causes the same results: >$ emacs -Q > Insert > (compose-region 1 2 "") > in the *scratch* buffer and evaluate it. > Emacs crashes during redisplay: The emacs in question: In GNU Emacs 23.2.1 (i686-pc-linux-gnu) of 2010-09-05 Windowing system distributor `The X.Org Foundation', version 11.0.10706000 configured using `configure '--with-x-toolkit=3Dno'' As requested, here is the gdb output: GNU gdb (GDB) 7.1-ubuntu Copyright (C) 2010 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu". For bug reporting instructions, please see: ... Reading symbols from /emacs-23.2/src/emacs...done. SIGINT is used by the debugger. Are you sure you want to change it? (y or n) [answered Y; input not from te= rminal] DISPLAY =3D :0.0 TERM =3D xterm Breakpoint 1 at 0x8103a66: file emacs.c, line 431. Temporary breakpoint 2 at 0x81217d9: file sysdep.c, line 1134. (gdb) run -Q Starting program: /emacs-23.2/src/emacs -Q Program received signal SIGSEGV, Segmentation fault. set_glyph_string_background_width (s=3D0x838aca0, start=3D1, last_x=3D665) at xdisp.c:19970 19970 if (start =3D=3D s->row->used[s->area] (gdb) bt full #0 set_glyph_string_background_width (s=3D0x838aca0, start=3D1, last_x=3D6= 65) at xdisp.c:19970 No locals. #1 0x08069412 in draw_glyphs (w=3D, x=3D,=20 row=3D, area=3DTEXT_AREA, start=3D,=20 end=3D1, hl=3DDRAW_NORMAL_TEXT, overlaps=3D0) at xdisp.c:20297 first_glyph =3D head =3D 0x0 tail =3D 0x0 s =3D 0x838aca0 clip_head =3D 0x878b6c0 clip_tail =3D i =3D j =3D x_reached =3D last_x =3D 665 area_left =3D 25 #2 0x0806c3d1 in x_write_glyphs (start=3D0x870e960, len=3D1) at xdisp.c:21= 866 x =3D #3 0x08056f3c in update_text_area (w=3D,=20 vpos=3D, mouse_face_overwritten_p=3D) at dispnew.c:4595 can_skip_p =3D 1 stop =3D 77 i =3D 1 desired_glyph =3D 0x870e980 desired_stop_pos =3D abort_skipping =3D 0 x =3D current_glyph =3D 0x8697288 changed_p =3D 0 #4 update_window_line (w=3D, vpos=3D,=20 mouse_face_overwritten_p=3D) at dispnew.c:4696 current_row =3D 0x870d360 desired_row =3D rif =3D 0x81f7320 changed_p =3D 0 #5 0x0805893c in update_window (w=3D, force_p=3D0) at dispnew.c:4311 i =3D end =3D header_line_row =3D 0x0 changed_p =3D 0 mouse_face_overwritten_p =3D 0 row =3D 0x86d3648 yb =3D 527 desired_matrix =3D 0x86df2b0 paused_p =3D 141380216 rif =3D 0x81f7320 #6 0x08059a7a in update_window_tree (w=3D0x86a8c00, force_p=3D0) at dispne= w.c:4004 paused_p =3D #7 0x0805a15d in update_frame (f=3D0x86a8a80, force_p=3D0, inhibit_hairy_i= d_p=3D0) at dispnew.c:3931 paused_p =3D root_window =3D 0x86a8c00 #8 0x0808d0f1 in redisplay_internal (preserve_echo_area=3D) at xdisp.c:11826 f =3D 0x86a8a80 tail =3D frame =3D w =3D 0x86a8c00 pause =3D 0 must_finish =3D 1 number_of_visible_frames =3D polling_stopped_here =3D 0 old_frame =3D 141200005 consider_all_windows_p =3D #9 0x081117d0 in read_char (commandflag=3D1, nmaps=3D2, maps=3D0xbfffecf0,= =20 prev_event=3D138238154, used_mouse_menu=3D0xbfffeda4, end_time=3D0x0) at keyboard.c:2727 c =3D local_getcjmp =3D {{ __jmpbuf =3D {856, 8192, 0, 138238154, -1, -1073747012},=20 __mask_was_saved =3D 138264008,=20 __saved_mask =3D { __val =3D {3221220520, 135717833, 138266458, 860, 138264013,= =20 3221220032, 3221220036, 3, 3221159936, 1329340160, 13833837= 0,=20 138238154, 138238154, 138238154, 138338370, 141311961,=20 3221220024, 135744233, 4, 3221220032, 138238154, 138238154,= =20 138338370, 141311961, 3221220168, 135326670, 138264013, 860= ,=20 3221220488, 136083518, 138264008, 0} } }} save_jump =3D {{ __jmpbuf =3D {860, 0, 0, 5, 138264013, 138238154},=20 __mask_was_saved =3D -1073747128,=20 __saved_mask =3D { __val =3D {136060187, 138386618, 140795966, 3221220168, 13608= 2773,=20 138448456, 215, 1, 138238154, 3221220080, 3221220240, 0,=20 138264013, 215, 860, 3221220200, 136060368, 138238154,=20 138386618, 1, 138264013, 138264013, 138264013, 3221220264,= =20 136083085, 138238154, 138386618, 138264013, 3221220452,=20 3221220288, 138264008, 0} } }} key_already_recorded =3D 0 tem =3D save =3D previous_echo_area_message =3D 138238154 also_record =3D 138238154 reread =3D 0 polling_stopped_here =3D orig_kboard =3D 0x85049c8 #10 0x08113a95 in read_key_sequence (keybuf=3D,=20 bufsize=3D, prompt=3D,=20 dont_downcase_last=3D0, can_return_switch_frame=3D1, fix_current_buffer= =3D1) at keyboard.c:9512 interrupted_kboard =3D 0x85049c8 key =3D used_mouse_menu =3D 0 echo_local_start =3D 0 last_real_key_start =3D 0 keys_local_start =3D 0 local_first_binding =3D 0 from_string =3D 138238154 count =3D 2 t =3D 0 echo_start =3D 0 keys_start =3D 0 nmaps =3D 2 nmaps_allocated =3D 2 defs =3D 0xbfffecd0 submaps =3D 0xbfffecf0 orig_local_map =3D 140732902 orig_keymap =3D 138238154 localized_local_map =3D 0 first_binding =3D 0 first_unbound =3D 31 mock_input =3D 0 fkey =3D { parent =3D 140744710,=20 map =3D 140744710,=20 start =3D 0,=20 end =3D 0 } keytran =3D { parent =3D 138231526,=20 map =3D 138231526,=20 start =3D 0,=20 end =3D 0 } indec =3D { parent =3D 140748774,=20 map =3D 140748774,=20 start =3D 0,=20 end =3D 0 } shift_translated =3D 0 delayed_switch_frame =3D 138238154 original_uppercase =3D 3 original_uppercase_position =3D -1 starting_buffer =3D fake_prefixed_keys =3D 138238154 #11 0x08115deb in command_loop_1 () at keyboard.c:1643 cmd =3D lose =3D keybuf =3D {108, 480, 140419466, -1207963660, -1212016252, 13,=20 -1073746180, -1208041370, -1073746248, -1212798922, 140889116,=20 -1210620984, -1212735500, 8, 0, -1073746264, -1073746448, 0,=20 -1208025088, 138238154, 139140290, 1329340160, -1211994624,=20 -1213016484, -1472036457, 139008584, 139008584, 139008600,=20 -1073746200, 135310243} i =3D prev_modiff =3D 18 prev_buffer =3D 0x83dbdc8 already_adjusted =3D 0 #12 0x08173c61 in internal_condition_case (bfun=3D0x8115c10 ,=20 handlers=3D138276114, hfun=3D0x810e0a0 ) at eval.c:1490 val =3D 137931936 c =3D { tag =3D 138238154,=20 val =3D 138238154,=20 next =3D 0xbffff028,=20 gcpro =3D 0x0,=20 jmp =3D {{ __jmpbuf =3D {139008584, 139008584, 139008600, -1073745944,=20 -1168840485, 1810975668},=20 __mask_was_saved =3D 0,=20 __saved_mask =3D { __val =3D {176, 880, 20, 152, 3084196595, 3084346360, 0,=20 3221221344, 3221221272, 3221221284, 3, 3087005944, 0,=20 3083389358, 3084346352, 134531515, 3084346304, 0, 3221221= 272,=20 3083399068, 3084347120, 138341448, 0, 191, 1544, 0,=20 3082972672, 3085720248, 3084196595, 4294967295, 308700363= 6,=20 134531515} } }},=20 backlist =3D 0x0,=20 handlerlist =3D 0x0,=20 lisp_eval_depth =3D 0,=20 pdlcount =3D 2,=20 poll_suppress_count =3D 1,=20 interrupt_input_blocked =3D 0,=20 byte_stack =3D 0x0 } h =3D { handler =3D 138276114,=20 var =3D 138238154,=20 chosen_clause =3D 134526120,=20 tag =3D 0xbfffef04,=20 next =3D 0x0 } #13 0x0810d585 in command_loop_2 () at keyboard.c:1360 val =3D 137931936 #14 0x08173d41 in internal_catch (tag=3D138273186,=20 func=3D0x810d560 , arg=3D138238154) at eval.c:1226 c =3D { tag =3D 138273186,=20 val =3D 138238154,=20 next =3D 0x0,=20 gcpro =3D 0x0,=20 jmp =3D {{ __jmpbuf =3D {139008584, 139008584, 139008600, -1073745672,=20 -1167513381, 1811100596},=20 __mask_was_saved =3D 0,=20 __saved_mask =3D { __val =3D {48, 2, 0, 3084346304, 96, 3084346352, 3084341236= ,=20 3084346304, 10, 3221221528, 138264008, 138238154, 1384054= 96,=20 3221221592, 135682500, 138405498, 138403451, 138238154,=20 138264008, 41, 3083389358, 3084346304, 138340688, 0,=20 138340688, 3221221672, 138238178, 3084346424, 14, 3221221= 708,=20 138405498, 138238154} } }},=20 backlist =3D 0x0,=20 handlerlist =3D 0x0,=20 lisp_eval_depth =3D 0,=20 pdlcount =3D 2,=20 poll_suppress_count =3D 1,=20 interrupt_input_blocked =3D 0,=20 byte_stack =3D 0x0 } #15 0x0810deef in command_loop () at keyboard.c:1339 No locals. #16 0x0810e29a in recursive_edit_1 () at keyboard.c:954 val =3D #17 0x0810e3c2 in Frecursive_edit () at keyboard.c:1016 buffer =3D 138238154 #18 0x081048ad in main (argc=3D, argv=3D) at emacs.c:1833 dummy =3D -1073744760 stack_bottom_variable =3D 8 '\b' do_initial_setlocale =3D 139008584 skip_args =3D 0 rlim =3D { rlim_cur =3D 8388608,=20 rlim_max =3D 18446744073709551615 } no_loadup =3D 0 junk =3D 0x0 dname_arg =3D 0x0 (gdb) xbacktrace (gdb) cont Continuing. Fatal error (11) Program received signal SIGSEGV, Segmentation fault. 0xb7fe2430 in __kernel_vsyscall () (gdb) cont Continuing. Program terminated with signal SIGSEGV, Segmentation fault. The program no longer exists. (gdb) quit --=20 Sent using GNU Emacs From unknown Tue Jun 17 01:49:26 2025 X-Loop: help-debbugs@gnu.org Subject: bug#6988: 23.2; crash using compose-region under X Resent-From: Chong Yidong Original-Sender: debbugs-submit-bounces@debbugs.gnu.org Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sat, 28 Jan 2012 17:49:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 6988 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Kenichi Handa Cc: Tor Kinlok , 6988@debbugs.gnu.org Received: via spool by 6988-submit@debbugs.gnu.org id=B6988.132777289531380 (code B ref 6988); Sat, 28 Jan 2012 17:49:01 +0000 Received: (at 6988) by debbugs.gnu.org; 28 Jan 2012 17:48:15 +0000 Received: from localhost ([127.0.0.1]:48462 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1RrCNq-0008A5-WD for submit@debbugs.gnu.org; Sat, 28 Jan 2012 12:48:15 -0500 Received: from fencepost.gnu.org ([140.186.70.10]:48109 ident=Debian-exim) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1RrCNn-00089w-Kf for 6988@debbugs.gnu.org; Sat, 28 Jan 2012 12:48:12 -0500 Received: from bb121-7-229-69.singnet.com.sg ([121.7.229.69]:45662 helo=furball) by fencepost.gnu.org with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1RrCN2-0005LJ-P8; Sat, 28 Jan 2012 12:47:25 -0500 From: Chong Yidong References: <87zkvwynfd.fsf@member.fsf.org> Date: Sun, 29 Jan 2012 01:47:06 +0800 In-Reply-To: <87zkvwynfd.fsf@member.fsf.org> (Tor Kinlok's message of "Sun, 05 Sep 2010 15:56:22 -0400") Message-ID: <87ipjvpvmt.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.0.92 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -4.2 (----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -4.2 (----) I can still observe this crash on latest trunk. Handa-san, could you take a look? Thanks. Tor Kinlok writes: > Starting a no-toolkit (ie ./configure --with-x-toolkit=3Dno) emacs 23.2.1 > under X windows and then doing a compose-region on a null string results > in a crash. Something similar was reported by Johan Bockg=C3=A5rd in 2006 > and a fix applied at that time: > > http://www.mail-archive.com/emacs-pretest-bug@gnu.org/msg05765.html > > Following the same procedure from the old report causes the same results: > >>$ emacs -Q >> Insert >> (compose-region 1 2 "") >> in the *scratch* buffer and evaluate it. >> Emacs crashes during redisplay: From unknown Tue Jun 17 01:49:26 2025 X-Loop: help-debbugs@gnu.org Subject: bug#6988: 23.2; crash using compose-region under X References: <87zkvwynfd.fsf@member.fsf.org> Resent-From: Kenichi Handa Original-Sender: debbugs-submit-bounces@debbugs.gnu.org Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 02 Feb 2012 09:21:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 6988 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Chong Yidong Cc: macduff@member.fsf.org, 6988@debbugs.gnu.org Received: via spool by 6988-submit@debbugs.gnu.org id=B6988.132817441221873 (code B ref 6988); Thu, 02 Feb 2012 09:21:01 +0000 Received: (at 6988) by debbugs.gnu.org; 2 Feb 2012 09:20:12 +0000 Received: from localhost ([127.0.0.1]:49949 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1Rsspv-0005gj-Nf for submit@debbugs.gnu.org; Thu, 02 Feb 2012 04:20:12 -0500 Received: from mx1.aist.go.jp ([150.29.246.133]:57430) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1Rssps-0005gZ-Hm for 6988@debbugs.gnu.org; Thu, 02 Feb 2012 04:20:10 -0500 Received: from rqsmtp1.aist.go.jp (rqsmtp1.aist.go.jp [150.29.254.115]) by mx1.aist.go.jp with ESMTP id q129Jd3F007068; Thu, 2 Feb 2012 18:19:39 +0900 (JST) env-from (handa@m17n.org) Received: from smtp1.aist.go.jp by rqsmtp1.aist.go.jp with ESMTP id q129Jd1h029001; Thu, 2 Feb 2012 18:19:39 +0900 (JST) env-from (handa@m17n.org) Received: by smtp1.aist.go.jp with ESMTP id q129Jbti004721; Thu, 2 Feb 2012 18:19:37 +0900 (JST) env-from (handa@m17n.org) From: Kenichi Handa In-Reply-To: <87ipjvpvmt.fsf@gnu.org> (message from Chong Yidong on Sun, 29 Jan 2012 01:47:06 +0800) Date: Thu, 02 Feb 2012 18:19:27 +0900 Message-ID: <87zkd1h9sw.fsf@m17n.org> MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -1.9 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -1.9 (-) In article <87ipjvpvmt.fsf@gnu.org>, Chong Yidong writes: > I can still observe this crash on latest trunk. Handa-san, could you > take a look? Thanks. I've just installed a fix (after some try and error). Now (compose-region 1 2 "") has the same UI effect as (put-text-property 1 2 'display "") --- Kenichi Handa handa@m17n.org From unknown Tue Jun 17 01:49:26 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.428 (Entity 5.428) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Tor Kinlok Subject: bug#6988: closed (Re: bug#6988: 23.2; crash using compose-region under X) Message-ID: References: <87zkd1tv00.fsf@gnu.org> <87zkvwynfd.fsf@member.fsf.org> X-Gnu-PR-Message: they-closed 6988 X-Gnu-PR-Package: emacs Reply-To: 6988@debbugs.gnu.org Date: Thu, 02 Feb 2012 10:02:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1328176922-25537-1" This is a multi-part message in MIME format... ------------=_1328176922-25537-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #6988: 23.2; crash using compose-region under X which was filed against the emacs package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 6988@debbugs.gnu.org. --=20 6988: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D6988 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1328176922-25537-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 6988-done) by debbugs.gnu.org; 2 Feb 2012 10:01:29 +0000 Received: from localhost ([127.0.0.1]:49955 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1RstTs-0006dD-QW for submit@debbugs.gnu.org; Thu, 02 Feb 2012 05:01:29 -0500 Received: from fencepost.gnu.org ([140.186.70.10]:45836 ident=Debian-exim) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1RstTn-0006d3-TW for 6988-done@debbugs.gnu.org; Thu, 02 Feb 2012 05:01:25 -0500 Received: from [155.69.18.172] (port=44642 helo=furball) by fencepost.gnu.org with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1RstTL-0006zb-Dt; Thu, 02 Feb 2012 05:00:56 -0500 From: Chong Yidong To: Kenichi Handa Subject: Re: bug#6988: 23.2; crash using compose-region under X References: <87zkd1h9sw.fsf@m17n.org> Date: Thu, 02 Feb 2012 18:00:47 +0800 In-Reply-To: <87zkd1h9sw.fsf@m17n.org> (Kenichi Handa's message of "Thu, 02 Feb 2012 18:19:27 +0900") Message-ID: <87zkd1tv00.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.0.93 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -4.2 (----) X-Debbugs-Envelope-To: 6988-done Cc: macduff@member.fsf.org, 6988-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -4.2 (----) Kenichi Handa writes: > In article <87ipjvpvmt.fsf@gnu.org>, Chong Yidong writes: > >> I can still observe this crash on latest trunk. Handa-san, could you >> take a look? Thanks. > > I've just installed a fix (after some try and error). Now > (compose-region 1 2 "") > has the same UI effect as > (put-text-property 1 2 'display "") Thank you. Closing the bug. ------------=_1328176922-25537-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 5 Sep 2010 20:05:01 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1OsLSW-0006FL-6m for submit@debbugs.gnu.org; Sun, 05 Sep 2010 16:05:01 -0400 Received: from eggs.gnu.org ([140.186.70.92]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1OsLIW-0005x0-3i for submit@debbugs.gnu.org; Sun, 05 Sep 2010 15:54:41 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.69) (envelope-from ) id 1OsLKI-0003kw-BM for submit@debbugs.gnu.org; Sun, 05 Sep 2010 15:56:31 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=unavailable version=3.3.1 Received: from lists.gnu.org ([199.232.76.165]:42194) by eggs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1OsLKG-0003kL-PS for submit@debbugs.gnu.org; Sun, 05 Sep 2010 15:56:30 -0400 Received: from [140.186.70.92] (port=34449 helo=eggs.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1OsLKD-0007Kh-U8 for bug-gnu-emacs@gnu.org; Sun, 05 Sep 2010 15:56:28 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.69) (envelope-from ) id 1OsLKB-0003jg-Jf for bug-gnu-emacs@gnu.org; Sun, 05 Sep 2010 15:56:25 -0400 Received: from mx.nic.nu ([69.25.75.69]:60388) by eggs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1OsLKB-0003jZ-Gv for bug-gnu-emacs@gnu.org; Sun, 05 Sep 2010 15:56:23 -0400 Received: from 7-Zark-7 (96-39-2-186.static.oxfr.ma.charter.com [96.39.2.186]) by mx.nic.nu (8.14.3/8.13.8) with ESMTP id o85JuL7e012136 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Sun, 5 Sep 2010 19:56:22 GMT From: Tor Kinlok To: bug-gnu-emacs@gnu.org Subject: 23.2; crash using compose-region under X User-Agent: GNU Emacs 23.2.1 (gnu os/linux) X-No-Archive: Yes Date: Sun, 05 Sep 2010 15:56:22 -0400 Message-ID: <87zkvwynfd.fsf@member.fsf.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: Solaris 9 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6, seldom 2.4 (older, 4) X-Spam-Score: -4.0 (----) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Sun, 05 Sep 2010 16:04:58 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -5.3 (-----) Starting a no-toolkit (ie ./configure --with-x-toolkit=3Dno) emacs 23.2.1 under X windows and then doing a compose-region on a null string results in a crash. Something similar was reported by Johan Bockg=C3=A5rd in 2006 and a fix applied at that time: http://www.mail-archive.com/emacs-pretest-bug@gnu.org/msg05765.html Following the same procedure from the old report causes the same results: >$ emacs -Q > Insert > (compose-region 1 2 "") > in the *scratch* buffer and evaluate it. > Emacs crashes during redisplay: The emacs in question: In GNU Emacs 23.2.1 (i686-pc-linux-gnu) of 2010-09-05 Windowing system distributor `The X.Org Foundation', version 11.0.10706000 configured using `configure '--with-x-toolkit=3Dno'' As requested, here is the gdb output: GNU gdb (GDB) 7.1-ubuntu Copyright (C) 2010 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu". For bug reporting instructions, please see: ... Reading symbols from /emacs-23.2/src/emacs...done. SIGINT is used by the debugger. Are you sure you want to change it? (y or n) [answered Y; input not from te= rminal] DISPLAY =3D :0.0 TERM =3D xterm Breakpoint 1 at 0x8103a66: file emacs.c, line 431. Temporary breakpoint 2 at 0x81217d9: file sysdep.c, line 1134. (gdb) run -Q Starting program: /emacs-23.2/src/emacs -Q Program received signal SIGSEGV, Segmentation fault. set_glyph_string_background_width (s=3D0x838aca0, start=3D1, last_x=3D665) at xdisp.c:19970 19970 if (start =3D=3D s->row->used[s->area] (gdb) bt full #0 set_glyph_string_background_width (s=3D0x838aca0, start=3D1, last_x=3D6= 65) at xdisp.c:19970 No locals. #1 0x08069412 in draw_glyphs (w=3D, x=3D,=20 row=3D, area=3DTEXT_AREA, start=3D,=20 end=3D1, hl=3DDRAW_NORMAL_TEXT, overlaps=3D0) at xdisp.c:20297 first_glyph =3D head =3D 0x0 tail =3D 0x0 s =3D 0x838aca0 clip_head =3D 0x878b6c0 clip_tail =3D i =3D j =3D x_reached =3D last_x =3D 665 area_left =3D 25 #2 0x0806c3d1 in x_write_glyphs (start=3D0x870e960, len=3D1) at xdisp.c:21= 866 x =3D #3 0x08056f3c in update_text_area (w=3D,=20 vpos=3D, mouse_face_overwritten_p=3D) at dispnew.c:4595 can_skip_p =3D 1 stop =3D 77 i =3D 1 desired_glyph =3D 0x870e980 desired_stop_pos =3D abort_skipping =3D 0 x =3D current_glyph =3D 0x8697288 changed_p =3D 0 #4 update_window_line (w=3D, vpos=3D,=20 mouse_face_overwritten_p=3D) at dispnew.c:4696 current_row =3D 0x870d360 desired_row =3D rif =3D 0x81f7320 changed_p =3D 0 #5 0x0805893c in update_window (w=3D, force_p=3D0) at dispnew.c:4311 i =3D end =3D header_line_row =3D 0x0 changed_p =3D 0 mouse_face_overwritten_p =3D 0 row =3D 0x86d3648 yb =3D 527 desired_matrix =3D 0x86df2b0 paused_p =3D 141380216 rif =3D 0x81f7320 #6 0x08059a7a in update_window_tree (w=3D0x86a8c00, force_p=3D0) at dispne= w.c:4004 paused_p =3D #7 0x0805a15d in update_frame (f=3D0x86a8a80, force_p=3D0, inhibit_hairy_i= d_p=3D0) at dispnew.c:3931 paused_p =3D root_window =3D 0x86a8c00 #8 0x0808d0f1 in redisplay_internal (preserve_echo_area=3D) at xdisp.c:11826 f =3D 0x86a8a80 tail =3D frame =3D w =3D 0x86a8c00 pause =3D 0 must_finish =3D 1 number_of_visible_frames =3D polling_stopped_here =3D 0 old_frame =3D 141200005 consider_all_windows_p =3D #9 0x081117d0 in read_char (commandflag=3D1, nmaps=3D2, maps=3D0xbfffecf0,= =20 prev_event=3D138238154, used_mouse_menu=3D0xbfffeda4, end_time=3D0x0) at keyboard.c:2727 c =3D local_getcjmp =3D {{ __jmpbuf =3D {856, 8192, 0, 138238154, -1, -1073747012},=20 __mask_was_saved =3D 138264008,=20 __saved_mask =3D { __val =3D {3221220520, 135717833, 138266458, 860, 138264013,= =20 3221220032, 3221220036, 3, 3221159936, 1329340160, 13833837= 0,=20 138238154, 138238154, 138238154, 138338370, 141311961,=20 3221220024, 135744233, 4, 3221220032, 138238154, 138238154,= =20 138338370, 141311961, 3221220168, 135326670, 138264013, 860= ,=20 3221220488, 136083518, 138264008, 0} } }} save_jump =3D {{ __jmpbuf =3D {860, 0, 0, 5, 138264013, 138238154},=20 __mask_was_saved =3D -1073747128,=20 __saved_mask =3D { __val =3D {136060187, 138386618, 140795966, 3221220168, 13608= 2773,=20 138448456, 215, 1, 138238154, 3221220080, 3221220240, 0,=20 138264013, 215, 860, 3221220200, 136060368, 138238154,=20 138386618, 1, 138264013, 138264013, 138264013, 3221220264,= =20 136083085, 138238154, 138386618, 138264013, 3221220452,=20 3221220288, 138264008, 0} } }} key_already_recorded =3D 0 tem =3D save =3D previous_echo_area_message =3D 138238154 also_record =3D 138238154 reread =3D 0 polling_stopped_here =3D orig_kboard =3D 0x85049c8 #10 0x08113a95 in read_key_sequence (keybuf=3D,=20 bufsize=3D, prompt=3D,=20 dont_downcase_last=3D0, can_return_switch_frame=3D1, fix_current_buffer= =3D1) at keyboard.c:9512 interrupted_kboard =3D 0x85049c8 key =3D used_mouse_menu =3D 0 echo_local_start =3D 0 last_real_key_start =3D 0 keys_local_start =3D 0 local_first_binding =3D 0 from_string =3D 138238154 count =3D 2 t =3D 0 echo_start =3D 0 keys_start =3D 0 nmaps =3D 2 nmaps_allocated =3D 2 defs =3D 0xbfffecd0 submaps =3D 0xbfffecf0 orig_local_map =3D 140732902 orig_keymap =3D 138238154 localized_local_map =3D 0 first_binding =3D 0 first_unbound =3D 31 mock_input =3D 0 fkey =3D { parent =3D 140744710,=20 map =3D 140744710,=20 start =3D 0,=20 end =3D 0 } keytran =3D { parent =3D 138231526,=20 map =3D 138231526,=20 start =3D 0,=20 end =3D 0 } indec =3D { parent =3D 140748774,=20 map =3D 140748774,=20 start =3D 0,=20 end =3D 0 } shift_translated =3D 0 delayed_switch_frame =3D 138238154 original_uppercase =3D 3 original_uppercase_position =3D -1 starting_buffer =3D fake_prefixed_keys =3D 138238154 #11 0x08115deb in command_loop_1 () at keyboard.c:1643 cmd =3D lose =3D keybuf =3D {108, 480, 140419466, -1207963660, -1212016252, 13,=20 -1073746180, -1208041370, -1073746248, -1212798922, 140889116,=20 -1210620984, -1212735500, 8, 0, -1073746264, -1073746448, 0,=20 -1208025088, 138238154, 139140290, 1329340160, -1211994624,=20 -1213016484, -1472036457, 139008584, 139008584, 139008600,=20 -1073746200, 135310243} i =3D prev_modiff =3D 18 prev_buffer =3D 0x83dbdc8 already_adjusted =3D 0 #12 0x08173c61 in internal_condition_case (bfun=3D0x8115c10 ,=20 handlers=3D138276114, hfun=3D0x810e0a0 ) at eval.c:1490 val =3D 137931936 c =3D { tag =3D 138238154,=20 val =3D 138238154,=20 next =3D 0xbffff028,=20 gcpro =3D 0x0,=20 jmp =3D {{ __jmpbuf =3D {139008584, 139008584, 139008600, -1073745944,=20 -1168840485, 1810975668},=20 __mask_was_saved =3D 0,=20 __saved_mask =3D { __val =3D {176, 880, 20, 152, 3084196595, 3084346360, 0,=20 3221221344, 3221221272, 3221221284, 3, 3087005944, 0,=20 3083389358, 3084346352, 134531515, 3084346304, 0, 3221221= 272,=20 3083399068, 3084347120, 138341448, 0, 191, 1544, 0,=20 3082972672, 3085720248, 3084196595, 4294967295, 308700363= 6,=20 134531515} } }},=20 backlist =3D 0x0,=20 handlerlist =3D 0x0,=20 lisp_eval_depth =3D 0,=20 pdlcount =3D 2,=20 poll_suppress_count =3D 1,=20 interrupt_input_blocked =3D 0,=20 byte_stack =3D 0x0 } h =3D { handler =3D 138276114,=20 var =3D 138238154,=20 chosen_clause =3D 134526120,=20 tag =3D 0xbfffef04,=20 next =3D 0x0 } #13 0x0810d585 in command_loop_2 () at keyboard.c:1360 val =3D 137931936 #14 0x08173d41 in internal_catch (tag=3D138273186,=20 func=3D0x810d560 , arg=3D138238154) at eval.c:1226 c =3D { tag =3D 138273186,=20 val =3D 138238154,=20 next =3D 0x0,=20 gcpro =3D 0x0,=20 jmp =3D {{ __jmpbuf =3D {139008584, 139008584, 139008600, -1073745672,=20 -1167513381, 1811100596},=20 __mask_was_saved =3D 0,=20 __saved_mask =3D { __val =3D {48, 2, 0, 3084346304, 96, 3084346352, 3084341236= ,=20 3084346304, 10, 3221221528, 138264008, 138238154, 1384054= 96,=20 3221221592, 135682500, 138405498, 138403451, 138238154,=20 138264008, 41, 3083389358, 3084346304, 138340688, 0,=20 138340688, 3221221672, 138238178, 3084346424, 14, 3221221= 708,=20 138405498, 138238154} } }},=20 backlist =3D 0x0,=20 handlerlist =3D 0x0,=20 lisp_eval_depth =3D 0,=20 pdlcount =3D 2,=20 poll_suppress_count =3D 1,=20 interrupt_input_blocked =3D 0,=20 byte_stack =3D 0x0 } #15 0x0810deef in command_loop () at keyboard.c:1339 No locals. #16 0x0810e29a in recursive_edit_1 () at keyboard.c:954 val =3D #17 0x0810e3c2 in Frecursive_edit () at keyboard.c:1016 buffer =3D 138238154 #18 0x081048ad in main (argc=3D, argv=3D) at emacs.c:1833 dummy =3D -1073744760 stack_bottom_variable =3D 8 '\b' do_initial_setlocale =3D 139008584 skip_args =3D 0 rlim =3D { rlim_cur =3D 8388608,=20 rlim_max =3D 18446744073709551615 } no_loadup =3D 0 junk =3D 0x0 dname_arg =3D 0x0 (gdb) xbacktrace (gdb) cont Continuing. Fatal error (11) Program received signal SIGSEGV, Segmentation fault. 0xb7fe2430 in __kernel_vsyscall () (gdb) cont Continuing. Program terminated with signal SIGSEGV, Segmentation fault. The program no longer exists. (gdb) quit --=20 Sent using GNU Emacs ------------=_1328176922-25537-1--