From unknown Sat Aug 16 16:02:31 2025 X-Loop: help-debbugs@gnu.org Subject: bug#73933: 30.0.91; Crash on scrolling in buffer with image at the end Resent-From: AKIYAMA Kouhei Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 21 Oct 2024 16:07:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 73933 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: 73933@debbugs.gnu.org X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.17295267943206 (code B ref -1); Mon, 21 Oct 2024 16:07:01 +0000 Received: (at submit) by debbugs.gnu.org; 21 Oct 2024 16:06:34 +0000 Received: from localhost ([127.0.0.1]:53037 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t2uvR-0000pd-43 for submit@debbugs.gnu.org; Mon, 21 Oct 2024 12:06:34 -0400 Received: from lists.gnu.org ([209.51.188.17]:49794) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t2u83-0006jN-2Q for submit@debbugs.gnu.org; Mon, 21 Oct 2024 11:15:31 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t2u7c-0000xw-4c for bug-gnu-emacs@gnu.org; Mon, 21 Oct 2024 11:15:04 -0400 Received: from mail-pl1-x632.google.com ([2607:f8b0:4864:20::632]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t2u7W-0004MY-B0 for bug-gnu-emacs@gnu.org; Mon, 21 Oct 2024 11:15:03 -0400 Received: by mail-pl1-x632.google.com with SMTP id d9443c01a7336-20cdda5cfb6so48262045ad.3 for ; Mon, 21 Oct 2024 08:14:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1729523695; x=1730128495; darn=gnu.org; h=mime-version:message-id:date:subject:to:from:from:to:cc:subject :date:message-id:reply-to; bh=d0BqEtWV32BqdhvgT5EQsi/g6yz6H2mvTjwZX9m7/jQ=; b=i+qsIVFtLfXBwqzfCT3QbKEZcIFx9IiBFMLjW9z6jlsrC0DF4Pp8IQrPN5Nr+IbLKl +PmFTY9onzM4z5+R0O4/+94G7553u/dVIjOd+tskgDUwpERhVU2yrNJ+HnzyCNmzcS6/ A9BWCkbqnOvVA/YkdXnDJ0ZfoWSFMqiUgSD9/6WAmO2q2G1R4HUwVeJFOJVQDhKWlvX4 2Y+1yneKktArNMQ4HWETnSlbkleWdyL/fcVXiCFZhI2Buydb9ZN+d4xJR3Z9bcgmuuEm jhfDW4rNSF2qIDeCAtGLggBsdG/hZODN1yWZa2Wmx/ZamJ7J8JvrJQuUMSZ5iuyaGP8G 5NIQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1729523695; x=1730128495; h=mime-version:message-id:date:subject:to:from:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=d0BqEtWV32BqdhvgT5EQsi/g6yz6H2mvTjwZX9m7/jQ=; b=YnA+dpB3jQWX65i5+97gtjW8PHmgHrBKQMCQ86o6iqz5B5MfpfEYp75ThP6OCWPOjJ dcwiyzttgjOX8LvmoVkickGaaorj0zSVfdYxjHbXRVA3bEQzXk4xnQmkM+0+1ZCpNg9K eUYVf5ZH8pzQE59VDdzNvxuox1EyRbe3rV1gCLhX/pIj/KUMexXCZwTW8hveCQW/DxqI Tg1BUr8eBhr7wQm1jMLveH2nRXGI7sDsR6GXirVD4DUulqE6l59D6o0Y7su1ghKcoOeb SEV8bw7uggGLXG4gg+npZECiOH9GKjFIeqnCnQHTrdAZGcowyYiKuuykyOAeznwpRyop M1aQ== X-Gm-Message-State: AOJu0Yz6T/SWKI1cBmNhlb5654NtsH0nfJF/G2FJUUOAy+0525Vr1I8w mk2ihxdPtGLU5YaAgOeoN70jC+SWWxt0YrjuBGToZLzHfSAT9IjI1VOZPA== X-Google-Smtp-Source: AGHT+IE2mgjGf2fsGYRLtBiSlD6op/lEuJDvMBGFoW6Xg7Q8dl9FtUOlaLj6rGmbQ5DUxDSehcst+g== X-Received: by 2002:a17:902:f681:b0:20c:ef90:e4b5 with SMTP id d9443c01a7336-20e5a9a2829mr149343935ad.52.1729523695382; Mon, 21 Oct 2024 08:14:55 -0700 (PDT) Received: from YAMABUKI (pl934.ag1212.nttpc.ne.jp. [61.197.25.166]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-20e7f0f65a3sm26977015ad.290.2024.10.21.08.14.53 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 21 Oct 2024 08:14:54 -0700 (PDT) From: AKIYAMA Kouhei Date: Tue, 22 Oct 2024 00:14:38 +0900 Message-ID: <86ldyh4hep.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=2607:f8b0:4864:20::632; envelope-from=misohena@gmail.com; helo=mail-pl1-x632.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Mailman-Approved-At: Mon, 21 Oct 2024 12:06:32 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) If there is an image at the end of the buffer and only part of it is visible at the bottom of the window, scrolling with C-v can cause a crash. I noticed this when using image-dired or org-mode (when displaying inline images). After investigating the minimum configuration for the problem to occur, I found that it occurs when the scroll-preserve-screen-position variable is set to t and winner-mode is used. In my environment (Windows 10), the problem can be reproduced 100% with the following steps. 1. Download https://alpha.gnu.org/gnu/emacs/pretest/windows/emacs-30/emacs-30.0.91.zip and unzip it. 2. Open the bin directory and type emacs -Q from the command prompt to start Emacs. 3. Paste the following code into the scratch buffer and evaluate it. (progn ;; Minimal configuration (setq scroll-preserve-screen-position t) (winner-mode) ;; Reproduce the situation where the problem occurs ;; (There is an image at the end of the buffer, and only half of it ;; is visible.) (switch-to-buffer (generate-new-buffer "*TEST*")) ;;(setq line-spacing 0) (dotimes (_ (- (window-body-height) 4)) (insert "\n")) (require 'svg) (let ((svg (svg-create 300 200))) (svg-rectangle svg 0 0 300 200 :fill "red") (svg-insert-image svg)) (goto-char (point-min)) ;; Crash (scroll-up-command)) When evaluated, the "Emacs Abort Dialog" will be displayed. The following message will be displayed in the command prompt: ------ C:\...\emacs-30.0.91\bin>emacs -Q lisp.h:1339: Emacs fatal error: assertion failed: 0 <= n && n <= MOST_POSITIVE_FIXNUM Backtrace: 0000000400335f48 0000000400335ff1 000000040014e5ba 0000000400200f46 00000004000bbe9a 00000004000d7be5 00000004000d859d 000000040023e4d0 000000040029ec0f 000000040023eb6e 000000040023deb7 000000040023e195 0000000400159659 000000040023a52b 0000000400159c2a 000000040023dab9 0000000400159ecb 0000000400157c17 000000040023a224 0000000400156d03 0000000400239638 0000000400156c47 0000000400155ecf 000000040015611c 0000000400151460 00000004000012e1 00000004000013ee 000000040037ebe6 000000083974736c 000000083aa7cc89 C:\...\emacs-30.0.91\bin> ------ Since I hardly used winner-mode, I was able to avoid the problem by turning it off for the time being, but I wanted to report it anyway. In addition, it was not reproduced in Emacs 29.4. ----------------- In GNU Emacs 30.0.91 (build 2, x86_64-w64-mingw32) of 2024-09-12 built on AVALON Windowing system distributor 'Microsoft Corp.', version 10.0.19045 System Description: Microsoft Windows 10 Enterprise (v10.0.2009.19045.5011) Configured using: 'configure --with-modules --without-dbus --with-native-compilation=aot --without-compress-install --with-tree-sitter --enable-checking=yes,glyphs 'CFLAGS=-O0 -g3'' Configured features: ACL GIF GMP GNUTLS HARFBUZZ JPEG LCMS2 LIBXML2 MODULES NATIVE_COMP NOTIFY W32NOTIFY PDUMPER PNG RSVG SOUND SQLITE3 THREADS TIFF TOOLKIT_SCROLL_BARS TREE_SITTER WEBP XPM ZLIB Important settings: value of $LANG: ja_JP.CP932 locale-coding-system: cp932 Major mode: Lisp Interaction Minor modes in effect: tooltip-mode: t global-eldoc-mode: t eldoc-mode: t show-paren-mode: t electric-indent-mode: t mouse-wheel-mode: t tool-bar-mode: t menu-bar-mode: t file-name-shadow-mode: t global-font-lock-mode: t font-lock-mode: t blink-cursor-mode: t minibuffer-regexp-mode: t line-number-mode: t indent-tabs-mode: t transient-mark-mode: t auto-composition-mode: t auto-encryption-mode: t auto-compression-mode: t Load-path shadows: None found. Features: (shadow sort mail-extr warnings icons compile comint ansi-osc ansi-color ring comp-run bytecomp byte-compile comp-common rx emacsbug message mailcap yank-media puny dired dired-loaddefs rfc822 mml mml-sec password-cache epa derived epg rfc6068 epg-config gnus-util text-property-search time-date subr-x mm-decode mm-bodies mm-encode mail-parse rfc2231 mailabbrev gmm-utils mailheader cl-loaddefs cl-lib sendmail rfc2047 rfc2045 ietf-drums mm-util mail-prsvr mail-utils japan-util rmc iso-transl tooltip cconv eldoc paren electric uniquify ediff-hook vc-hooks lisp-float-type elisp-mode mwheel touch-screen dos-w32 ls-lisp disp-table term/w32-win w32-win w32-vars term/common-win tool-bar dnd fontset image regexp-opt fringe tabulated-list replace newcomment text-mode lisp-mode prog-mode register page tab-bar menu-bar rfn-eshadow isearch easymenu timer select scroll-bar mouse jit-lock font-lock syntax font-core term/tty-colors frame minibuffer nadvice seq simple cl-generic indonesian philippine cham georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korean japanese eucjp-ms cp51932 hebrew greek romanian slovak czech european ethiopic indian cyrillic chinese composite emoji-zwj charscript charprop case-table epa-hook jka-cmpr-hook help abbrev obarray oclosure cl-preloaded button loaddefs theme-loaddefs faces cus-face macroexp files window text-properties overlay sha1 md5 base64 format env code-pages mule custom widget keymap hashtable-print-readable backquote threads w32notify w32 lcms2 multi-tty move-toolbar make-network-process native-compile emacs) Memory information: ((conses 16 68590 23722) (symbols 48 7693 0) (strings 32 19029 5244) (string-bytes 1 497076) (vectors 16 12560) (vector-slots 8 247648 13410) (floats 8 24 89) (intervals 56 1569 646) (buffers 992 13)) -- (gdb) bt full #0 0x00007ffbd6fb1723 in KERNELBASE!DebugBreak () from C:\WINDOWS\System32\KernelBase.dll No symbol table info available. #1 0x00007ff79eff5fde in emacs_abort () at w32fns.c:11361 button = 6 #2 0x00007ff79ee0e5c2 in terminate_due_to_signal (sig=22, backtrace_limit=2147483647) at emacs.c:480 No locals. #3 0x00007ff79eec0f4e in die ( msg=0x7ff79f693440 "0 <= n && n <= MOST_POSITIVE_FIXNUM", file=0x7ff79f693400 "lisp.h", line=1339) at alloc.c:8083 No locals. #4 0x00007ff79ed7bea2 in make_fixed_natnum (n=-264) at G:/rel/emacs-30.0.91/src/lisp.h:1339 int0 = 2 #5 0x00007ff79ed97bed in save_window_save (window=0x5118cf5, vector=0x66c4e70, i=1) at window.c:7694 p = 0x6713990 w = 0x5118cf0 tem = 0x5 pers = 0x70 par = 0x7ff79eeb8b01 #6 0x00007ff79ed985a5 in Fcurrent_window_configuration (frame=0x0) at window.c:7837 f = 0x5117cc0 n_windows = 2 data = 0x6713920 tem = 0x66c4e75 #7 0x00007ff79eefe4d8 in funcall_subr (subr=0x7ff79f66ce00 , numargs=0, args=0x55250b8) at eval.c:3161 argbuf = {0x0, 0x7ff79ef5d89f , 0xbfeb70, 0x7ff79ef5d3b9 , 0x7ff79f66ce05 , 0x12, 0xbfeb90, --Type for more, q to quit, c to continue without paging-- 0x7ff79ef5daf2 } a = 0xbfeb30 maxargs = 1 fun = 0x7ff79ef5d3e5 #8 0x00007ff79ef5ec17 in exec_byte_code (fun=0x64953f5, args_template=0, nargs=0, args=0x5525068) at bytecode.c:812 call_nargs = 0 call_fun = 0x7ff79f66ce05 count1 = {bytes = 192} val = 0x5117cc5 call_args = 0x55250b8 original_fun = 0xffff8008649f71d8 op = 0 type = 2666485150 targets = {0x7ff79ef6286b , 0x7ff79ef62891 , 0x7ff79ef62893 , 0x7ff79ef62895 , 0x7ff79ef62897 , 0x7ff79ef62897 , 0x7ff79ef628fc , 0x7ff79ef62970 , 0x7ff79ef5e39d , 0x7ff79ef5e39f , 0x7ff79ef5e3a1 , 0x7ff79ef5e3a3 , 0x7ff79ef5e3a5 , 0x7ff79ef5e3a5 , 0x7ff79ef5e3ab , 0x7ff79ef5e36c , 0x7ff79ef5e754 , 0x7ff79ef5e756 , 0x7ff79ef5e758 , 0x7ff79ef5e75a , 0x7ff79ef5e75c , 0x7ff79ef5e75c , 0x7ff79ef5e791 , 0x7ff79ef5e762 , 0x7ff79ef5e93f , 0x7ff79ef5e941 , 0x7ff79ef5e943 , 0x7ff79ef5e945 , 0x7ff79ef5e947 , 0x7ff79ef5e947 , --Type for more, q to quit, c to continue without paging--q -- [This document was generated by machine translation from Japanese.] AKIYAMA Kouhei misohena@gmail.com From unknown Sat Aug 16 16:02:31 2025 X-Loop: help-debbugs@gnu.org Subject: bug#73933: 30.0.91; Crash on scrolling in buffer with image at the end Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 21 Oct 2024 17:46:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 73933 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: AKIYAMA Kouhei Cc: 73933@debbugs.gnu.org Received: via spool by 73933-submit@debbugs.gnu.org id=B73933.172953271820441 (code B ref 73933); Mon, 21 Oct 2024 17:46:02 +0000 Received: (at 73933) by debbugs.gnu.org; 21 Oct 2024 17:45:18 +0000 Received: from localhost ([127.0.0.1]:53238 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t2wT0-0005Jd-0R for submit@debbugs.gnu.org; Mon, 21 Oct 2024 13:45:18 -0400 Received: from eggs.gnu.org ([209.51.188.92]:56862) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t2wSy-0005JO-3w for 73933@debbugs.gnu.org; Mon, 21 Oct 2024 13:45:16 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t2wSR-0005mW-A6; Mon, 21 Oct 2024 13:44:43 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=References:Subject:In-Reply-To:To:From:Date: mime-version; bh=jgIVAUw1XUGLto+ah+ffU4R0z9mcsFImKATiDjahwFw=; b=V6DqOrdKOPRJ 1RyUtrZKzxw1omn+IeUsaxZ07J8X8j2HQ+PrugBBKJPOCcGUv03BDbdqaTyEfi94nknHZjZvuldH9 Mh72l5aJbSd332Jdp0xqLmLzneP4pln3S70eoprIvZ6HZg+6kexXmpzzFVlz2QPo/AQLOUai78jPM bqJJ0GZ3K9Dgoi0C1SUxiH9qaIZfAo21YFDUB1dgZY/J02fDj8pLZhhV7z1iaNbPuqukv+W1ApUv9 TS5YuezEYQFncxz79wweWt8QvykYjEz8UhN/j2pRJ0ptsitpFDb4DrRGn6oW6fyYuEURjECJI7QA1 6LJtiF6AkMJQw0y4CoRWJQ==; Date: Mon, 21 Oct 2024 20:44:39 +0300 Message-Id: <8634kpgxko.fsf@gnu.org> From: Eli Zaretskii In-Reply-To: <86ldyh4hep.fsf@gmail.com> (message from AKIYAMA Kouhei on Tue, 22 Oct 2024 00:14:38 +0900) References: <86ldyh4hep.fsf@gmail.com> X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) > From: AKIYAMA Kouhei > Date: Tue, 22 Oct 2024 00:14:38 +0900 > > > If there is an image at the end of the buffer and only part of it is > visible at the bottom of the window, scrolling with C-v can cause a > crash. I noticed this when using image-dired or org-mode (when > displaying inline images). > > After investigating the minimum configuration for the problem to > occur, I found that it occurs when the scroll-preserve-screen-position > variable is set to t and winner-mode is used. > > In my environment (Windows 10), the problem can be reproduced 100% > with the following steps. > > 1. Download > https://alpha.gnu.org/gnu/emacs/pretest/windows/emacs-30/emacs-30.0.91.zip > and unzip it. > > 2. Open the bin directory and type emacs -Q from the command prompt to > start Emacs. > > 3. Paste the following code into the scratch buffer and evaluate it. > > (progn > ;; Minimal configuration > (setq scroll-preserve-screen-position t) > (winner-mode) > > ;; Reproduce the situation where the problem occurs > ;; (There is an image at the end of the buffer, and only half of it > ;; is visible.) > (switch-to-buffer (generate-new-buffer "*TEST*")) > ;;(setq line-spacing 0) > (dotimes (_ (- (window-body-height) 4)) > (insert "\n")) > (require 'svg) > (let ((svg (svg-create 300 200))) > (svg-rectangle svg 0 0 300 200 :fill "red") > (svg-insert-image svg)) > (goto-char (point-min)) > > ;; Crash > (scroll-up-command)) > > When evaluated, the "Emacs Abort Dialog" will be displayed. The > following message will be displayed in the command prompt: Thanks. This 24-year old thinko should now be fixed on the emacs-30 branch. From unknown Sat Aug 16 16:02:31 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: AKIYAMA Kouhei Subject: bug#73933: closed (Re: bug#73933: 30.0.91; Crash on scrolling in buffer with image at the end) Message-ID: References: <86y12993a6.fsf@gnu.org> <86ldyh4hep.fsf@gmail.com> X-Gnu-PR-Message: they-closed 73933 X-Gnu-PR-Package: emacs Reply-To: 73933@debbugs.gnu.org Date: Sun, 27 Oct 2024 11:48:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1730029682-6261-1" This is a multi-part message in MIME format... ------------=_1730029682-6261-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #73933: 30.0.91; Crash on scrolling in buffer with image at the end which was filed against the emacs package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 73933@debbugs.gnu.org. --=20 73933: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D73933 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1730029682-6261-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 73933-done) by debbugs.gnu.org; 27 Oct 2024 11:47:25 +0000 Received: from localhost ([127.0.0.1]:44127 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t51jx-0001bt-6Q for submit@debbugs.gnu.org; Sun, 27 Oct 2024 07:47:25 -0400 Received: from eggs.gnu.org ([209.51.188.92]:43462) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t51jv-0001bf-8V for 73933-done@debbugs.gnu.org; Sun, 27 Oct 2024 07:47:23 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t51jH-0005T2-14; Sun, 27 Oct 2024 07:46:43 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=References:Subject:In-Reply-To:To:From:Date: mime-version; bh=zKSPFe6wob0btGYCQpSyNptgaRjxE3asYs3MTl+PWAk=; b=QpTr9P8M1DlU uDyTn2LRrgc488net13qSC/xtVm0mJwE/U95nszIog5jJ00YZWqrDZyNMMJMmq6N1cUC+F/FznZ3j ONTUTu+HHOhFX3awfbgHzLRHVaJpu0Q+a+h3ul7pNLruD8XU7XHLIYt/9bWMsZLZy6W8BIqkc96mb oi62ahbmvtLnuqmblnojO5tJBWs9sFmnb9ybZ/sgjPFpgRslLI72zC7Igav+fMS7hjeMwZjOGw6bs HXRYsV+z4yMT9seLrt1TbYgX8LHC6d6K81IGZGQfzwI2DeAqfiNhNBkfgBGKdu5k/xoxv8fvnUdML czLFcPgWtTeGS3kqwT+eig==; Date: Sun, 27 Oct 2024 13:46:41 +0200 Message-Id: <86y12993a6.fsf@gnu.org> From: Eli Zaretskii To: misohena@gmail.com In-Reply-To: <8634kpgxko.fsf@gnu.org> (message from Eli Zaretskii on Mon, 21 Oct 2024 20:44:39 +0300) Subject: Re: bug#73933: 30.0.91; Crash on scrolling in buffer with image at the end References: <86ldyh4hep.fsf@gmail.com> <8634kpgxko.fsf@gnu.org> X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 73933-done Cc: 73933-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) > Cc: 73933@debbugs.gnu.org > Date: Mon, 21 Oct 2024 20:44:39 +0300 > From: Eli Zaretskii > > > From: AKIYAMA Kouhei > > Date: Tue, 22 Oct 2024 00:14:38 +0900 > > > > > > If there is an image at the end of the buffer and only part of it is > > visible at the bottom of the window, scrolling with C-v can cause a > > crash. I noticed this when using image-dired or org-mode (when > > displaying inline images). > > > > After investigating the minimum configuration for the problem to > > occur, I found that it occurs when the scroll-preserve-screen-position > > variable is set to t and winner-mode is used. > > > > In my environment (Windows 10), the problem can be reproduced 100% > > with the following steps. > > > > 1. Download > > https://alpha.gnu.org/gnu/emacs/pretest/windows/emacs-30/emacs-30.0.91.zip > > and unzip it. > > > > 2. Open the bin directory and type emacs -Q from the command prompt to > > start Emacs. > > > > 3. Paste the following code into the scratch buffer and evaluate it. > > > > (progn > > ;; Minimal configuration > > (setq scroll-preserve-screen-position t) > > (winner-mode) > > > > ;; Reproduce the situation where the problem occurs > > ;; (There is an image at the end of the buffer, and only half of it > > ;; is visible.) > > (switch-to-buffer (generate-new-buffer "*TEST*")) > > ;;(setq line-spacing 0) > > (dotimes (_ (- (window-body-height) 4)) > > (insert "\n")) > > (require 'svg) > > (let ((svg (svg-create 300 200))) > > (svg-rectangle svg 0 0 300 200 :fill "red") > > (svg-insert-image svg)) > > (goto-char (point-min)) > > > > ;; Crash > > (scroll-up-command)) > > > > When evaluated, the "Emacs Abort Dialog" will be displayed. The > > following message will be displayed in the command prompt: > > Thanks. This 24-year old thinko should now be fixed on the emacs-30 > branch. No further comments, so I'm now closing this bug. ------------=_1730029682-6261-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 21 Oct 2024 16:06:34 +0000 Received: from localhost ([127.0.0.1]:53037 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t2uvR-0000pd-43 for submit@debbugs.gnu.org; Mon, 21 Oct 2024 12:06:34 -0400 Received: from lists.gnu.org ([209.51.188.17]:49794) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1t2u83-0006jN-2Q for submit@debbugs.gnu.org; Mon, 21 Oct 2024 11:15:31 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1t2u7c-0000xw-4c for bug-gnu-emacs@gnu.org; Mon, 21 Oct 2024 11:15:04 -0400 Received: from mail-pl1-x632.google.com ([2607:f8b0:4864:20::632]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1t2u7W-0004MY-B0 for bug-gnu-emacs@gnu.org; Mon, 21 Oct 2024 11:15:03 -0400 Received: by mail-pl1-x632.google.com with SMTP id d9443c01a7336-20cdda5cfb6so48262045ad.3 for ; Mon, 21 Oct 2024 08:14:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1729523695; x=1730128495; darn=gnu.org; h=mime-version:message-id:date:subject:to:from:from:to:cc:subject :date:message-id:reply-to; bh=d0BqEtWV32BqdhvgT5EQsi/g6yz6H2mvTjwZX9m7/jQ=; b=i+qsIVFtLfXBwqzfCT3QbKEZcIFx9IiBFMLjW9z6jlsrC0DF4Pp8IQrPN5Nr+IbLKl +PmFTY9onzM4z5+R0O4/+94G7553u/dVIjOd+tskgDUwpERhVU2yrNJ+HnzyCNmzcS6/ A9BWCkbqnOvVA/YkdXnDJ0ZfoWSFMqiUgSD9/6WAmO2q2G1R4HUwVeJFOJVQDhKWlvX4 2Y+1yneKktArNMQ4HWETnSlbkleWdyL/fcVXiCFZhI2Buydb9ZN+d4xJR3Z9bcgmuuEm jhfDW4rNSF2qIDeCAtGLggBsdG/hZODN1yWZa2Wmx/ZamJ7J8JvrJQuUMSZ5iuyaGP8G 5NIQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1729523695; x=1730128495; h=mime-version:message-id:date:subject:to:from:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=d0BqEtWV32BqdhvgT5EQsi/g6yz6H2mvTjwZX9m7/jQ=; b=YnA+dpB3jQWX65i5+97gtjW8PHmgHrBKQMCQ86o6iqz5B5MfpfEYp75ThP6OCWPOjJ dcwiyzttgjOX8LvmoVkickGaaorj0zSVfdYxjHbXRVA3bEQzXk4xnQmkM+0+1ZCpNg9K eUYVf5ZH8pzQE59VDdzNvxuox1EyRbe3rV1gCLhX/pIj/KUMexXCZwTW8hveCQW/DxqI Tg1BUr8eBhr7wQm1jMLveH2nRXGI7sDsR6GXirVD4DUulqE6l59D6o0Y7su1ghKcoOeb SEV8bw7uggGLXG4gg+npZECiOH9GKjFIeqnCnQHTrdAZGcowyYiKuuykyOAeznwpRyop M1aQ== X-Gm-Message-State: AOJu0Yz6T/SWKI1cBmNhlb5654NtsH0nfJF/G2FJUUOAy+0525Vr1I8w mk2ihxdPtGLU5YaAgOeoN70jC+SWWxt0YrjuBGToZLzHfSAT9IjI1VOZPA== X-Google-Smtp-Source: AGHT+IE2mgjGf2fsGYRLtBiSlD6op/lEuJDvMBGFoW6Xg7Q8dl9FtUOlaLj6rGmbQ5DUxDSehcst+g== X-Received: by 2002:a17:902:f681:b0:20c:ef90:e4b5 with SMTP id d9443c01a7336-20e5a9a2829mr149343935ad.52.1729523695382; Mon, 21 Oct 2024 08:14:55 -0700 (PDT) Received: from YAMABUKI (pl934.ag1212.nttpc.ne.jp. [61.197.25.166]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-20e7f0f65a3sm26977015ad.290.2024.10.21.08.14.53 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 21 Oct 2024 08:14:54 -0700 (PDT) From: AKIYAMA Kouhei To: bug-gnu-emacs@gnu.org Subject: 30.0.91; Crash on scrolling in buffer with image at the end X-Debbugs-Cc: Date: Tue, 22 Oct 2024 00:14:38 +0900 Message-ID: <86ldyh4hep.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=2607:f8b0:4864:20::632; envelope-from=misohena@gmail.com; helo=mail-pl1-x632.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Mon, 21 Oct 2024 12:06:32 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) If there is an image at the end of the buffer and only part of it is visible at the bottom of the window, scrolling with C-v can cause a crash. I noticed this when using image-dired or org-mode (when displaying inline images). After investigating the minimum configuration for the problem to occur, I found that it occurs when the scroll-preserve-screen-position variable is set to t and winner-mode is used. In my environment (Windows 10), the problem can be reproduced 100% with the following steps. 1. Download https://alpha.gnu.org/gnu/emacs/pretest/windows/emacs-30/emacs-30.0.91.zip and unzip it. 2. Open the bin directory and type emacs -Q from the command prompt to start Emacs. 3. Paste the following code into the scratch buffer and evaluate it. (progn ;; Minimal configuration (setq scroll-preserve-screen-position t) (winner-mode) ;; Reproduce the situation where the problem occurs ;; (There is an image at the end of the buffer, and only half of it ;; is visible.) (switch-to-buffer (generate-new-buffer "*TEST*")) ;;(setq line-spacing 0) (dotimes (_ (- (window-body-height) 4)) (insert "\n")) (require 'svg) (let ((svg (svg-create 300 200))) (svg-rectangle svg 0 0 300 200 :fill "red") (svg-insert-image svg)) (goto-char (point-min)) ;; Crash (scroll-up-command)) When evaluated, the "Emacs Abort Dialog" will be displayed. The following message will be displayed in the command prompt: ------ C:\...\emacs-30.0.91\bin>emacs -Q lisp.h:1339: Emacs fatal error: assertion failed: 0 <= n && n <= MOST_POSITIVE_FIXNUM Backtrace: 0000000400335f48 0000000400335ff1 000000040014e5ba 0000000400200f46 00000004000bbe9a 00000004000d7be5 00000004000d859d 000000040023e4d0 000000040029ec0f 000000040023eb6e 000000040023deb7 000000040023e195 0000000400159659 000000040023a52b 0000000400159c2a 000000040023dab9 0000000400159ecb 0000000400157c17 000000040023a224 0000000400156d03 0000000400239638 0000000400156c47 0000000400155ecf 000000040015611c 0000000400151460 00000004000012e1 00000004000013ee 000000040037ebe6 000000083974736c 000000083aa7cc89 C:\...\emacs-30.0.91\bin> ------ Since I hardly used winner-mode, I was able to avoid the problem by turning it off for the time being, but I wanted to report it anyway. In addition, it was not reproduced in Emacs 29.4. ----------------- In GNU Emacs 30.0.91 (build 2, x86_64-w64-mingw32) of 2024-09-12 built on AVALON Windowing system distributor 'Microsoft Corp.', version 10.0.19045 System Description: Microsoft Windows 10 Enterprise (v10.0.2009.19045.5011) Configured using: 'configure --with-modules --without-dbus --with-native-compilation=aot --without-compress-install --with-tree-sitter --enable-checking=yes,glyphs 'CFLAGS=-O0 -g3'' Configured features: ACL GIF GMP GNUTLS HARFBUZZ JPEG LCMS2 LIBXML2 MODULES NATIVE_COMP NOTIFY W32NOTIFY PDUMPER PNG RSVG SOUND SQLITE3 THREADS TIFF TOOLKIT_SCROLL_BARS TREE_SITTER WEBP XPM ZLIB Important settings: value of $LANG: ja_JP.CP932 locale-coding-system: cp932 Major mode: Lisp Interaction Minor modes in effect: tooltip-mode: t global-eldoc-mode: t eldoc-mode: t show-paren-mode: t electric-indent-mode: t mouse-wheel-mode: t tool-bar-mode: t menu-bar-mode: t file-name-shadow-mode: t global-font-lock-mode: t font-lock-mode: t blink-cursor-mode: t minibuffer-regexp-mode: t line-number-mode: t indent-tabs-mode: t transient-mark-mode: t auto-composition-mode: t auto-encryption-mode: t auto-compression-mode: t Load-path shadows: None found. Features: (shadow sort mail-extr warnings icons compile comint ansi-osc ansi-color ring comp-run bytecomp byte-compile comp-common rx emacsbug message mailcap yank-media puny dired dired-loaddefs rfc822 mml mml-sec password-cache epa derived epg rfc6068 epg-config gnus-util text-property-search time-date subr-x mm-decode mm-bodies mm-encode mail-parse rfc2231 mailabbrev gmm-utils mailheader cl-loaddefs cl-lib sendmail rfc2047 rfc2045 ietf-drums mm-util mail-prsvr mail-utils japan-util rmc iso-transl tooltip cconv eldoc paren electric uniquify ediff-hook vc-hooks lisp-float-type elisp-mode mwheel touch-screen dos-w32 ls-lisp disp-table term/w32-win w32-win w32-vars term/common-win tool-bar dnd fontset image regexp-opt fringe tabulated-list replace newcomment text-mode lisp-mode prog-mode register page tab-bar menu-bar rfn-eshadow isearch easymenu timer select scroll-bar mouse jit-lock font-lock syntax font-core term/tty-colors frame minibuffer nadvice seq simple cl-generic indonesian philippine cham georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korean japanese eucjp-ms cp51932 hebrew greek romanian slovak czech european ethiopic indian cyrillic chinese composite emoji-zwj charscript charprop case-table epa-hook jka-cmpr-hook help abbrev obarray oclosure cl-preloaded button loaddefs theme-loaddefs faces cus-face macroexp files window text-properties overlay sha1 md5 base64 format env code-pages mule custom widget keymap hashtable-print-readable backquote threads w32notify w32 lcms2 multi-tty move-toolbar make-network-process native-compile emacs) Memory information: ((conses 16 68590 23722) (symbols 48 7693 0) (strings 32 19029 5244) (string-bytes 1 497076) (vectors 16 12560) (vector-slots 8 247648 13410) (floats 8 24 89) (intervals 56 1569 646) (buffers 992 13)) -- (gdb) bt full #0 0x00007ffbd6fb1723 in KERNELBASE!DebugBreak () from C:\WINDOWS\System32\KernelBase.dll No symbol table info available. #1 0x00007ff79eff5fde in emacs_abort () at w32fns.c:11361 button = 6 #2 0x00007ff79ee0e5c2 in terminate_due_to_signal (sig=22, backtrace_limit=2147483647) at emacs.c:480 No locals. #3 0x00007ff79eec0f4e in die ( msg=0x7ff79f693440 "0 <= n && n <= MOST_POSITIVE_FIXNUM", file=0x7ff79f693400 "lisp.h", line=1339) at alloc.c:8083 No locals. #4 0x00007ff79ed7bea2 in make_fixed_natnum (n=-264) at G:/rel/emacs-30.0.91/src/lisp.h:1339 int0 = 2 #5 0x00007ff79ed97bed in save_window_save (window=0x5118cf5, vector=0x66c4e70, i=1) at window.c:7694 p = 0x6713990 w = 0x5118cf0 tem = 0x5 pers = 0x70 par = 0x7ff79eeb8b01 #6 0x00007ff79ed985a5 in Fcurrent_window_configuration (frame=0x0) at window.c:7837 f = 0x5117cc0 n_windows = 2 data = 0x6713920 tem = 0x66c4e75 #7 0x00007ff79eefe4d8 in funcall_subr (subr=0x7ff79f66ce00 , numargs=0, args=0x55250b8) at eval.c:3161 argbuf = {0x0, 0x7ff79ef5d89f , 0xbfeb70, 0x7ff79ef5d3b9 , 0x7ff79f66ce05 , 0x12, 0xbfeb90, --Type for more, q to quit, c to continue without paging-- 0x7ff79ef5daf2 } a = 0xbfeb30 maxargs = 1 fun = 0x7ff79ef5d3e5 #8 0x00007ff79ef5ec17 in exec_byte_code (fun=0x64953f5, args_template=0, nargs=0, args=0x5525068) at bytecode.c:812 call_nargs = 0 call_fun = 0x7ff79f66ce05 count1 = {bytes = 192} val = 0x5117cc5 call_args = 0x55250b8 original_fun = 0xffff8008649f71d8 op = 0 type = 2666485150 targets = {0x7ff79ef6286b , 0x7ff79ef62891 , 0x7ff79ef62893 , 0x7ff79ef62895 , 0x7ff79ef62897 , 0x7ff79ef62897 , 0x7ff79ef628fc , 0x7ff79ef62970 , 0x7ff79ef5e39d , 0x7ff79ef5e39f , 0x7ff79ef5e3a1 , 0x7ff79ef5e3a3 , 0x7ff79ef5e3a5 , 0x7ff79ef5e3a5 , 0x7ff79ef5e3ab , 0x7ff79ef5e36c , 0x7ff79ef5e754 , 0x7ff79ef5e756 , 0x7ff79ef5e758 , 0x7ff79ef5e75a , 0x7ff79ef5e75c , 0x7ff79ef5e75c , 0x7ff79ef5e791 , 0x7ff79ef5e762 , 0x7ff79ef5e93f , 0x7ff79ef5e941 , 0x7ff79ef5e943 , 0x7ff79ef5e945 , 0x7ff79ef5e947 , 0x7ff79ef5e947 , --Type for more, q to quit, c to continue without paging--q -- [This document was generated by machine translation from Japanese.] AKIYAMA Kouhei misohena@gmail.com ------------=_1730029682-6261-1--