Subject: Re: 24.0.50; Segfault when deleting a frame

From: Julien Danjou <[email-masked]>
Date: Wed, 10 Nov 2010 11:41:24 +0100

On Fri, Nov 05 2010, Julien Danjou wrote:

> Here's the backtrace.

Here's another one, fresh from this morning:

(gdb) bt full
#0  0x00007f1eea463447 in kill () at ../sysdeps/unix/syscall-template.S:82
No locals.
#1  0x00000000004f0772 in fatal_error_signal (sig=<value optimized out>) at emacs.c:401
No locals.
#2  <signal handler called>
No symbol table info available.
#3  0x00007f1eee246030 in IA__g_type_check_instance_cast (type_instance=0x3e1cf60, iface_type=80) at /scratch/build-area/glib2.0-2.24.2/gobject/gtype.c:3971
        node = 0x1800000000
        iface = <value optimized out>
        is_instantiatable = <value optimized out>
#4  0x00007f1ee428ebf5 in ca_gtk_context_get_for_screen (screen=0x3e1cf60) at canberra-gtk.c:120
        c = 0x0
        p = 0x0
        name = <value optimized out>
        s = <value optimized out>
#5  0x00007f1ee428f19d in ca_gtk_play_for_widget (w=0x21b33d0, id=0) at canberra-gtk.c:456
        ap = {{
            gp_offset = 48, 
            fp_offset = 48, 
            overflow_arg_area = 0x7fff768c15b8, 
            reg_save_area = 0x7fff768c14d0
          }}
        ret = <value optimized out>
        p = 0x4a26aa0
        s = 0x1800000000
        __PRETTY_FUNCTION__ = "ca_gtk_play_for_widget"
#6  0x00007f1ee44b520a in ?? () from /usr/lib/gtk-2.0/modules/libcanberra-gtk-module.so
No symbol table info available.
#7  0x00007f1ee44b63b3 in ?? () from /usr/lib/gtk-2.0/modules/libcanberra-gtk-module.so
No symbol table info available.
#8  0x00007f1eeeddad26 in gdk_threads_dispatch (data=0x392ec40) at /scratch/build-area/gtk+2.0-2.20.1/gdk/gdk.c:512
        ret = 0
#9  0x00007f1eedf7c6f2 in g_main_dispatch (context=0x1150940) at /scratch/build-area/glib2.0-2.24.2/glib/gmain.c:1960
        dispatch = 0x7f1eedf7a780 <g_idle_dispatch>
        user_data = 0x392ec40
        callback = 0x7f1eeeddacd0 <gdk_threads_dispatch>
        cb_funcs = 0x7f1eee219170
        cb_data = 0x3cb49c0
        current_source_link = {
          data = 0x48dec90, 
          next = 0x0
        }
        source = 0x48dec90
        current = 0xd51dc0
        i = 0
#10 IA__g_main_context_dispatch (context=0x1150940) at /scratch/build-area/glib2.0-2.24.2/glib/gmain.c:2513
No locals.
#11 0x00007f1eedf80568 in g_main_context_iterate (context=0x1150940, block=<value optimized out>, dispatch=<value optimized out>, self=<value optimized out>)
    at /scratch/build-area/glib2.0-2.24.2/glib/gmain.c:2591
        max_priority = 119
        timeout = 0
        some_ready = 1
        nfds = 2
        allocated_nfds = -302460112
        fds = <value optimized out>
        __PRETTY_FUNCTION__ = "g_main_context_iterate"
#12 0x00007f1eedf8071c in IA__g_main_context_iteration (context=0x1150940, may_block=1) at /scratch/build-area/glib2.0-2.24.2/glib/gmain.c:2654
        retval = <value optimized out>
#13 0x00007f1eef1a4561 in IA__gtk_main_iteration () at /scratch/build-area/gtk+2.0-2.20.1/gtk/gtkmain.c:1307
No locals.
#14 0x00000000004b51ac in XTread_socket (terminal=0xf29450, expected=<value optimized out>, hold_quit=0x7fff768c1b30) at xterm.c:7014
        count = 0
#15 0x00000000004f8903 in read_avail_input (expected=1) at keyboard.c:6969
        nr = 0
        hold_quit = {
          kind = NO_EVENT, 
          code = 0, 
          part = scroll_bar_above_handle, 
          modifiers = 0, 
          x = 0, 
          y = 0, 
          timestamp = 0, 
          padding = {0x0, 0x0}, 
          frame_or_window = 0, 
          arg = 0
        }
        next = 0x0
        nread = 0
        err = 0
        t = 0xf29450
#16 0x00000000004f8a2a in handle_async_input () at keyboard.c:7292
        nread = 0
#17 0x00000000004aa405 in x_delete_terminal (terminal=<value optimized out>) at xterm.c:10520
        dpyinfo = 0x49f0aa0
#18 0x00000000004a02d2 in Fdelete_terminal (terminal=77532645, force=11798962) at terminal.c:331
        t = <value optimized out>
#19 0x000000000042480e in delete_frame (frame=76188245, force=<value optimized out>) at frame.c:1491
        f = 0x48a8a50
        sf = <value optimized out>
        kb = 0x0
        tooltip_frame = 0
#20 0x00000000005672b7 in Ffuncall (nargs=<value optimized out>, args=<value optimized out>) at eval.c:2993
        fun = <value optimized out>
        original_fun = <value optimized out>
        funcar = <value optimized out>
        numargs = 2
        val = <value optimized out>
        backtrace = {
          next = 0x7fff768c1e50, 
          function = 0x7fff768c1cf0, 
          args = 0x7fff768c1cf8, 
          nargs = 1, 
          evalargs = 0 '\000', 
          debug_on_exit = 0 '\000'
        }
        internal_args = 0x7fff768c1c60
        i = 2
#21 0x00000000005a0052 in Fbyte_code (bytestr=<value optimized out>, vector=<value optimized out>, maxdepth=<value optimized out>) at bytecode.c:679
        count = 15
        op = <value optimized out>
        stack = {
          pc = 0x29fb7d0 "\210\016$A\211\026$\204o", 
          top = 0x7fff768c1cf8, 
          bottom = 0x7fff768c1cf0, 
          byte_string = 35365057, 
          byte_string_start = 0x29fb740 "\306\307\b\205\a", 
          constants = 35403077, 
          next = 0x7fff768c1f00
        }
        top = 0x7fff768c1cf0
        result = <value optimized out>
#22 0x0000000000566e4f in funcall_lambda (fun=35403589, nargs=<value optimized out>, arg_vector=<value optimized out>) at eval.c:3174
        val = <value optimized out>
        syms_left = 11798914
        next = 34830178
        i = 1
        optional = 1
        rest = 0
#23 0x00000000005670fb in Ffuncall (nargs=<value optimized out>, args=0x21c3740) at eval.c:3047
        fun = 65130336
        original_fun = 34830130
        funcar = 103079215104
        numargs = 1
        val = <value optimized out>
        backtrace = {
          next = 0x7fff768c2010, 
          function = 0x7fff768c1eb0, 
          args = 0x7fff768c1eb8, 
          nargs = 1, 
          evalargs = 0 '\000', 
          debug_on_exit = 0 '\000'
        }
        internal_args = 0x7fff768c1eb8
        i = <value optimized out>
#24 0x00000000005a0052 in Fbyte_code (bytestr=<value optimized out>, vector=<value optimized out>, maxdepth=<value optimized out>) at bytecode.c:679
        count = 8
        op = <value optimized out>
        stack = {
          pc = 0x2a2342e "\210)\fA\211\024\204\f", 
          top = 0x7fff768c1eb8, 
          bottom = 0x7fff768c1eb0, 
          byte_string = 35392385, 
          byte_string_start = 0x2a233b8 "?\030\031\n\306\033\211\034\203\177", 
          constants = 35607605, 
          next = 0x7fff768c20b0
        }
        top = 0x7fff768c1eb0
        result = <value optimized out>
#25 0x0000000000566e4f in funcall_lambda (fun=35350069, nargs=<value optimized out>, arg_vector=<value optimized out>) at eval.c:3174
        val = <value optimized out>
        syms_left = 11798914
        next = 35060386
        i = 1
        optional = 1
        rest = 0
#26 0x00000000005670fb in Ffuncall (nargs=<value optimized out>, args=0x21b6630) at eval.c:3047
        fun = 65130336
        original_fun = 35060338
        funcar = 103079215104
        numargs = 1
        val = <value optimized out>
        backtrace = {
          next = 0x7fff768c21c0, 
          function = 0x7fff768c2070, 
          args = 0x7fff768c2078, 
          nargs = 1, 
          evalargs = 0 '\000', 
          debug_on_exit = 0 '\000'
        }
        internal_args = 0x7fff768c2078
        i = <value optimized out>
#27 0x00000000005a0052 in Fbyte_code (bytestr=<value optimized out>, vector=<value optimized out>, maxdepth=<value optimized out>) at bytecode.c:679
        count = 6
        op = <value optimized out>
        stack = {
          pc = 0x2a235a4 "\207", 
          top = 0x7fff768c2078, 
          bottom = 0x7fff768c2070, 
          byte_string = 34816513, 
          byte_string_start = 0x2a23578 "\b\205,", 
          constants = 34817589, 
          next = 0x7fff768c2260
        }
        top = 0x7fff768c2070
        result = <value optimized out>
#28 0x0000000000566e4f in funcall_lambda (fun=34817909, nargs=<value optimized out>, arg_vector=<value optimized out>) at eval.c:3174
        val = <value optimized out>
        syms_left = 11798914
        next = 35060578
        i = 0
        optional = 0
        rest = 2
#29 0x00000000005670fb in Ffuncall (nargs=<value optimized out>, args=0x2134770) at eval.c:3047
        fun = 65130336
        original_fun = 35060578
        funcar = 103079215104
        numargs = 0
        val = <value optimized out>
        backtrace = {
          next = 0x7fff768c2370, 
          function = 0x7fff768c2230, 
          args = 0x7fff768c2238, 
          nargs = 0, 
          evalargs = 0 '\000', 
          debug_on_exit = 0 '\000'
        }
        internal_args = 0x7fff768c2238
        i = <value optimized out>
#30 0x00000000005a0052 in Fbyte_code (bytestr=<value optimized out>, vector=<value optimized out>, maxdepth=<value optimized out>) at bytecode.c:679
        count = 6
        op = <value optimized out>
        stack = {
          pc = 0x2a2377c "\"\207\312\313!\207", 
          top = 0x7fff768c2230, 
          bottom = 0x7fff768c2220, 
          byte_string = 34282001, 
          byte_string_start = 0x2a23760 "\b\204\020", 
          constants = 34956165, 
          next = 0x0
        }
        top = 0x7fff768c2230
        result = <value optimized out>
#31 0x0000000000566e4f in funcall_lambda (fun=34283285, nargs=<value optimized out>, arg_vector=<value optimized out>) at eval.c:3174
        val = <value optimized out>
        syms_left = 11798914
        next = 12201218
        i = 1
        optional = 1
        rest = 0
#32 0x00000000005670fb in Ffuncall (nargs=<value optimized out>, args=0x20b1f10) at eval.c:3047
        fun = 65130336
        original_fun = 34954738
        funcar = 103079215104
        numargs = 1
        val = <value optimized out>
        backtrace = {
          next = 0x7fff768c25e0, 
          function = 0x7fff768c2420, 
          args = 0x7fff768c2428, 
          nargs = 1, 
          evalargs = 0 '\000', 
          debug_on_exit = 0 '\000'
        }
        internal_args = 0x7fff768c2428
        i = <value optimized out>
#33 0x0000000000563bc8 in Fcall_interactively (function=<value optimized out>, record_flag=<value optimized out>, keys=<value optimized out>) at callint.c:849
        val = <value optimized out>
        specs = <value optimized out>
        filter_specs = <value optimized out>
        teml = <value optimized out>
        up_event = 11798914
        enable = 0
        speccount = 3
        next_event = 1988895712
        prefix_arg = <value optimized out>
        string = 0x4 <Address 0x4 out of bounds>
        tem = 0x4 <Address 0x4 out of bounds>
        i = 2
        j = 1
        prompt1 = '\000' <repeats 99 times>
        arg_from_tty = 0
        key_count = <value optimized out>
        record_then_fail = 1988895776
        save_this_command = 34954738
        save_last_command = 12215378
        save_this_original_command = 34954738
        save_real_this_command = 34954738
#34 0x00000000005672a6 in Ffuncall (nargs=<value optimized out>, args=<value optimized out>) at eval.c:2996
        fun = <value optimized out>
        original_fun = <value optimized out>
        funcar = <value optimized out>
        numargs = 3
        val = <value optimized out>
        backtrace = {
          next = 0x0, 
          function = 0x7fff768c2640, 
          args = 0x7fff768c2648, 
          nargs = 3, 
          evalargs = 0 '\000', 
          debug_on_exit = 0 '\000'
        }
        internal_args = 0x7fff768c2648
        i = 3
#35 0x0000000000567504 in call3 (fn=<value optimized out>, arg1=<value optimized out>, arg2=17977536, arg3=3) at eval.c:2820
        ret_ungc_val = 103079215104
        args = {11985986, 34954738, 11798914, 11798914}
#36 0x0000000000502c05 in command_loop_1 () at keyboard.c:1726
        cmd = <value optimized out>
        keybuf = {96, 140, 460, -1, 11798962, -1, 11852018, 11798962, 11798914, 11798914, 11851058, 2, 140735182284608, 5789171, 1289384572, 8527025, 139770844318664, 63301238, 11798914, 11798914, 400, 
          4294967295, 140735182284656, 5225973, 13483536, 63301238, 11798914, 5226325, 0, 140735182284696}
        i = <value optimized out>
        prev_modiff = 1693
        prev_buffer = 0x3e5bb40
#37 0x000000000056581e in internal_condition_case (bfun=<value optimized out>, handlers=<value optimized out>, hfun=<value optimized out>) at eval.c:1460
        val = 103079215104
        c = {
          tag = 11798914, 
          val = 11798914, 
          next = 0x7fff768c2970, 
          gcpro = 0x0, 
          jmp = {{
              __jmpbuf = {13483536, 3379929735386823765, 13483568, 140735182286296, 400, 4294967295, -3379669302463234987, 3379930733116324949}, 
              __mask_was_saved = 0, 
              __saved_mask = {
                __val = {139770844387752, 0, 4294967295, 140735182284944, 1, 8472792, 0, 400, 4294967295, 0, 139770842411858, 1, 0, 1, 139770756048304, 1024}
              }
            }}, 
          backlist = 0x0, 
          handlerlist = 0x0, 
          lisp_eval_depth = 0, 
          pdlcount = 2, 
          poll_suppress_count = 1, 
          interrupt_input_blocked = 0, 
          byte_stack = 0x0
        }
        h = {
          handler = 11851010, 
          var = 11798914, 
          chosen_clause = 11798962, 
          tag = 0x7fff768c2800, 
          next = 0x0
        }
#38 0x00000000004fbace in command_loop_2 (ignore=<value optimized out>) at keyboard.c:1327
        val = 103079215104
#39 0x0000000000565948 in internal_catch (tag=<value optimized out>, func=<value optimized out>, arg=<value optimized out>) at eval.c:1204
        c = {
          tag = 11847074, 
          val = 11798914, 
          next = 0x0, 
          gcpro = 0x0, 
          jmp = {{
              __jmpbuf = {13483536, 3379929735386823765, 13483568, 140735182286296, 400, 4294967295, -3379669302782002091, 3379930732793887829}, 
              __mask_was_saved = 0, 
              __saved_mask = {
                __val = {0, 0, 0, 0, 112, 139770759536280, 352, 139770759536280, 139770759536296, 30064771072, 344, 94489280656, 30064771072, 384, 94489280612, 12071170}
              }
            }}, 
          backlist = 0x0, 
          handlerlist = 0x0, 
          lisp_eval_depth = 0, 
          pdlcount = 2, 
          poll_suppress_count = 1, 
          interrupt_input_blocked = 0, 
          byte_stack = 0x0
        }
#40 0x00000000004fbc93 in command_loop () at keyboard.c:1306
No locals.
#41 0x00000000004fc078 in recursive_edit_1 () at keyboard.c:929
        val = <value optimized out>
#42 0x00000000004fc1b7 in Frecursive_edit () at keyboard.c:991
        buffer = 11798914
#43 0x00000000004ef8a5 in main (argc=0, argv=0x7fff768c2ef8) at emacs.c:1720
        dummy = 139770686834336
        stack_bottom_variable = 0 '\000'
        do_initial_setlocale = <value optimized out>
        skip_args = 0
        rlim = {
          rlim_cur = 8720000, 
          rlim_max = 18446744073709551615
        }
        no_loadup = 0
        junk = 0x0
        dname_arg = 0x0
        ch_to_dir = 0x7f1ee623488b "\204\300t7H\213t$(H\215=\205\203 "

Lisp Backtrace:
"delete-frame" (0x768c1cf8)
"server-delete-client" (0x768c1eb8)
"server-buffer-done" (0x768c2078)
"server-done" (0x768c2238)
"server-edit" (0x768c2428)
"call-interactively" (0x768c2648)

-- 
Julien Danjou
// ᐰ <[email-masked]>   http://julien.danjou.info