GNU bug report logs - #70385
Crash in note_fringe_highlight

Previous Next

Package: emacs;

Reported by: Juri Linkov <juri <at> linkov.net>

Date: Sun, 14 Apr 2024 16:18:05 UTC

Severity: normal

Merged with 70419, 70420, 70427

Found in version 30.0.50

Full log


View this message in rfc822 format

From: Eli Zaretskii <eliz <at> gnu.org>
To: Björn Bidar <bjorn.bidar <at> thaodan.de>
Cc: luangruo <at> yahoo.com, vekazanov <at> gmail.com, 70385 <at> debbugs.gnu.org, juri <at> linkov.net
Subject: bug#70385: Crash in note_fringe_highlight
Date: Mon, 15 Apr 2024 21:23:51 +0300
> From: Björn Bidar <bjorn.bidar <at> thaodan.de>
> Cc: Eli Zaretskii <eliz <at> gnu.org>,  Po Lu <luangruo <at> yahoo.com>,
>   juri <at> linkov.net,  70385 <at> debbugs.gnu.org,  vekazanov <at> gmail.com
> Date: Mon, 15 Apr 2024 20:04:02 +0300
> 
> Po Lu via "Bug reports for GNU Emacs, the Swiss army knife of text
> editors" <bug-gnu-emacs <at> gnu.org> writes:
> 
> > Eli Zaretskii <eliz <at> gnu.org> writes:
> >
> >> I think this should be
> >>
> >>   if ((window_outdated (w)
> >>        || !w->window_end_valid
> >>        || !MATRIX_ROW_DISPLAYS_TEXT_P (MATRIX_ROW (w->current_matrix,
> >> 						   vpos)))
> >
> > Yes, sorry.
> >
> >> I'm not sure it will help, because it seems the segfault happens in
> >> the MATRIX_ROW_DISPLAYS_TEXT_P macro.  So I think we are somehow
> >> dealing with w->current_matrix whose 'nrows' is too small.  The
> >> mouse-highlight code detects that case in x_y_to_hpos_vpos.
> >
> > Right.  What about this?
> >
> > diff --git a/src/xdisp.c b/src/xdisp.c
> > index d984c12d1aa..dcecc2b09d4 100644
> > --- a/src/xdisp.c
> > +++ b/src/xdisp.c
> > @@ -35772,6 +35772,7 @@ note_fringe_highlight (struct frame *f, Lisp_Object window, int x, int y,
> >    /* Don't access the TEXT_AREA of a row that does not display text, or
> >       when the window is outdated.  (bug#70385) */
> >    if (window_outdated (w)
> > +      || (vpos >= w->current_matrix->nrows)
> >        || !MATRIX_ROW_DISPLAYS_TEXT_P (MATRIX_ROW (w->current_matrix,
> >  						  vpos)))
> >      return;
> >
> > It's the same test x_y_to_hpos_vpos applies to decide whether to punt
> > and return NULL.
> 
> Tried the change but it wasn't enough:

OK, but can you please collect the data I asked for?  It's important
for figuring out the solution.

Thanks.




This bug report was last modified 1 year and 62 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.