Subject: bug#9413: 24.0.50; crash in x-show-tip

From: "Jan D." <[email-masked]>
Date: Thu, 01 Sep 2011 08:27:50 +0200

Hello.

Did you do any XML parsing in Emacs before this crash?
There is a well known bug in xmlCleanupParser that destroys thread 
specific storage, see: 
http://lists.fedoraproject.org/pipermail/devel/2010-January/129117.html.

	Jan D.

Sam Steingold skrev 2011-08-31 21:37:
> In GNU Emacs 24.0.50.1 (x86_64-unknown-linux-gnu, GTK+ Version 2.24.4)
>   of 2011-06-14 on sysu76
> Windowing system distributor `The X.Org Foundation', version 11.0.11001000
> Important settings:
>    value of $LC_ALL: nil
>    value of $LC_COLLATE: nil
>    value of $LC_CTYPE: nil
>    value of $LC_MESSAGES: nil
>    value of $LC_MONETARY: nil
>    value of $LC_NUMERIC: nil
>    value of $LC_TIME: nil
>    value of $LANG: C
>    value of $XMODIFIERS: nil
>    locale-coding-system: nil
>    default enable-multibyte-characters: t
>
> Fatal error (6)
> Program received signal SIGABRT, Aborted.
> 0x00007ffff26fbfe7 in kill () from /lib/x86_64-linux-gnu/libc.so.6
> (gdb) where
> #0  0x00007ffff26fbfe7 in kill () from /lib/x86_64-linux-gnu/libc.so.6
> #1  0x00000000004fcc1a in fatal_error_signal (sig=<value optimized out>)
>      at /home/sds/src/emacs/trunk/src/emacs.c:346
> #2<signal handler called>
> #3  0x00007ffff26fbfe7 in kill () from /lib/x86_64-linux-gnu/libc.so.6
> #4  0x00000000004fc285 in abort () at /home/sds/src/emacs/trunk/src/emacs.c:375
> #5  0x00007fffe69139a2 in pa_tls_set () from /usr/lib/libpulsecommon-0.9.22.so
> #6  0x00007fffe6913a25 in pa_thread_self ()
>     from /usr/lib/libpulsecommon-0.9.22.so
> #7  0x00007fffe768477c in pa_threaded_mainloop_lock ()
>     from /usr/lib/libpulse.so.0
> #8  0x00007fffe789e60b in pulse_driver_play ()
>     from /usr/lib/libcanberra-0.28/libcanberra-pulse.so
> #9  0x00007fffee13d7eb in ca_context_play_full ()
>     from /usr/lib/libcanberra.so.0
> #10 0x00007fffee34cb5f in ca_gtk_play_for_widget ()
>     from /usr/lib/libcanberra-gtk.so.0
> #11 0x00007fffee552a8f in ?? ()
>     from /usr/lib/gtk-2.0/modules/libcanberra-gtk-module.so
> #12 0x00007fffee552b93 in ?? ()
>     from /usr/lib/gtk-2.0/modules/libcanberra-gtk-module.so
> #13 0x00007ffff7503c46 in ?? () from /usr/lib/libgdk-x11-2.0.so.0
> #14 0x00007ffff51d3bcd in g_main_context_dispatch ()
>     from /lib/x86_64-linux-gnu/libglib-2.0.so.0
> #15 0x00007ffff51d43a8 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
> #16 0x00007ffff51d4639 in g_main_context_iteration ()
>     from /lib/x86_64-linux-gnu/libglib-2.0.so.0
> #17 0x00007ffff78ced01 in gtk_main_iteration ()
>     from /usr/lib/libgtk-x11-2.0.so.0
> #18 0x00000000004b9633 in XTread_socket (terminal=<value optimized out>,
>      expected=<value optimized out>, hold_quit=0x7fffffffbcd0)
>      at /home/sds/src/emacs/trunk/src/xterm.c:7112
> #19 0x0000000000506227 in read_avail_input (expected=1)
>      at /home/sds/src/emacs/trunk/src/keyboard.c:6807
> #20 0x000000000050634a in handle_async_input ()
>      at /home/sds/src/emacs/trunk/src/keyboard.c:7135
> #21 0x00000000004cc124 in Fx_show_tip (string=184298737, frame=148993157,
>      parms=87365206, timeout=40, dx=20, dy=80)
>      at /home/sds/src/emacs/trunk/src/xfns.c:4987
> #22 0x0000000000576250 in Ffuncall (nargs=<value optimized out>,
>      args=<value optimized out>) at /home/sds/src/emacs/trunk/src/eval.c:3060
> #23 0x00000000005af1d6 in exec_byte_code (bytestr=<value optimized out>,
>      vector=<value optimized out>, maxdepth=<value optimized out>,
>      args_template=<value optimized out>, nargs=<value optimized out>,
>      args=<value optimized out>) at /home/sds/src/emacs/trunk/src/bytecode.c:783
> #24 0x00000000005756a5 in eval_sub (form=<value optimized out>)
>      at /home/sds/src/emacs/trunk/src/eval.c:2392
> #25 0x00000000005789ac in internal_lisp_condition_case (var=11945506,
>      bodyform=10316518, handlers=10316782)
>      at /home/sds/src/emacs/trunk/src/eval.c:1454
> #26 0x00000000005af60a in exec_byte_code (bytestr=<value optimized out>,
>      vector=<value optimized out>, maxdepth=<value optimized out>,
>      args_template=<value optimized out>, nargs=<value optimized out>,
>      args=<value optimized out>) at /home/sds/src/emacs/trunk/src/bytecode.c:979
> #27 0x0000000000575c9a in funcall_lambda (fun=10316317, nargs=2,
> ---Type<return>  to continue, or q<return>  to quit---
>      arg_vector=0x7fffffffc478) at /home/sds/src/emacs/trunk/src/eval.c:3272
> #28 0x00000000005760eb in Ffuncall (nargs=3, args=0x7fffffffc470)
>      at /home/sds/src/emacs/trunk/src/eval.c:3100
> #29 0x00000000005af1d6 in exec_byte_code (bytestr=<value optimized out>,
>      vector=<value optimized out>, maxdepth=<value optimized out>,
>      args_template=<value optimized out>, nargs=<value optimized out>,
>      args=<value optimized out>) at /home/sds/src/emacs/trunk/src/bytecode.c:783
> #30 0x0000000000575c9a in funcall_lambda (fun=10318829, nargs=1,
>      arg_vector=0x7fffffffc720) at /home/sds/src/emacs/trunk/src/eval.c:3272
> #31 0x00000000005760eb in Ffuncall (nargs=2, args=0x7fffffffc718)
>      at /home/sds/src/emacs/trunk/src/eval.c:3100
> #32 0x00000000005749fc in run_hook_with_args (nargs=2, args=0x7fffffffc718,
>      funcall=0x575ea0<Ffuncall>) at /home/sds/src/emacs/trunk/src/eval.c:2744
> #33 0x000000000057632a in Ffuncall (nargs=3, args=0x7fffffffc710)
>      at /home/sds/src/emacs/trunk/src/eval.c:3021
> #34 0x00000000005af1d6 in exec_byte_code (bytestr=<value optimized out>,
>      vector=<value optimized out>, maxdepth=<value optimized out>,
>      args_template=<value optimized out>, nargs=<value optimized out>,
>      args=<value optimized out>) at /home/sds/src/emacs/trunk/src/bytecode.c:783
> #35 0x0000000000575c9a in funcall_lambda (fun=10315957, nargs=1,
>      arg_vector=0x7fffffffc9f0) at /home/sds/src/emacs/trunk/src/eval.c:3272
> #36 0x00000000005760eb in Ffuncall (nargs=2, args=0x7fffffffc9e8)
>      at /home/sds/src/emacs/trunk/src/eval.c:3100
> #37 0x00000000005772a0 in Fapply (nargs=2, args=0x7fffffffc9e8)
>      at /home/sds/src/emacs/trunk/src/eval.c:2490
> #38 0x000000000057632a in Ffuncall (nargs=3, args=0x7fffffffc9e0)
>      at /home/sds/src/emacs/trunk/src/eval.c:3021
> #39 0x00000000005af1d6 in exec_byte_code (bytestr=<value optimized out>,
>      vector=<value optimized out>, maxdepth=<value optimized out>,
>      args_template=<value optimized out>, nargs=<value optimized out>,
>      args=<value optimized out>) at /home/sds/src/emacs/trunk/src/bytecode.c:783
> #40 0x00000000005756a5 in eval_sub (form=<value optimized out>)
>      at /home/sds/src/emacs/trunk/src/eval.c:2392
> #41 0x00000000005789ac in internal_lisp_condition_case (var=11893122,
>      bodyform=9987678, handlers=8743878)
>      at /home/sds/src/emacs/trunk/src/eval.c:1454
> #42 0x00000000005af60a in exec_byte_code (bytestr=<value optimized out>,
>      vector=<value optimized out>, maxdepth=<value optimized out>,
>      args_template=<value optimized out>, nargs=<value optimized out>,
>      args=<value optimized out>) at /home/sds/src/emacs/trunk/src/bytecode.c:979
> #43 0x0000000000575c9a in funcall_lambda (fun=9987373, nargs=1,
>      arg_vector=0x7fffffffced8) at /home/sds/src/emacs/trunk/src/eval.c:3272
> #44 0x00000000005760eb in Ffuncall (nargs=2, args=0x7fffffffced0)
>      at /home/sds/src/emacs/trunk/src/eval.c:3100
> #45 0x000000000057655a in call1 (fn=<value optimized out>,
>      arg1=<value optimized out>) at /home/sds/src/emacs/trunk/src/eval.c:2807
> #46 0x00000000005049de in timer_check_2 ()
>      at /home/sds/src/emacs/trunk/src/keyboard.c:4417
> #47 timer_check () at /home/sds/src/emacs/trunk/src/keyboard.c:4463
> #48 0x0000000000504d09 in readable_events (flags=<value optimized out>)
>      at /home/sds/src/emacs/trunk/src/keyboard.c:3377
> #49 0x0000000000507295 in get_input_pending (flags=1, addr=0xb47510)
>      at /home/sds/src/emacs/trunk/src/keyboard.c:6689
> #50 0x0000000000509a8a in detect_input_pending_run_timers (do_display=1)
>      at /home/sds/src/emacs/trunk/src/keyboard.c:10438
> ---Type<return>  to continue, or q<return>  to quit---
> #51 0x00000000005b58fe in wait_reading_process_output (time_limit=30,
>      microsecs=0, read_kbd=-1, do_display=1, wait_for_cell=11893122,
>      wait_proc=0x0, just_wait_proc=0)
>      at /home/sds/src/emacs/trunk/src/process.c:4618
> #52 0x000000000041c774 in sit_for (timeout=120, reading=1, do_display=1)
>      at /home/sds/src/emacs/trunk/src/dispnew.c:5988
> #53 0x000000000050ba7d in read_char (commandflag=1, nmaps=2,
>      maps=0x7fffffffd7b0, prev_event=11893122, used_mouse_menu=0x7fffffffd944,
>      end_time=0x0) at /home/sds/src/emacs/trunk/src/keyboard.c:2677
> #54 0x000000000050c9aa in read_key_sequence (keybuf=0x7fffffffd9a0,
>      prompt=11893122, dont_downcase_last=0, can_return_switch_frame=1,
>      fix_current_buffer=1, bufsize=30)
>      at /home/sds/src/emacs/trunk/src/keyboard.c:9272
> #55 0x000000000050e57b in command_loop_1 ()
>      at /home/sds/src/emacs/trunk/src/keyboard.c:1445
> #56 0x0000000000574343 in internal_condition_case (
>      bfun=0x50e3b0<command_loop_1>, handlers=11945506,
>      hfun=0x5031d0<cmd_error>) at /home/sds/src/emacs/trunk/src/eval.c:1507
> #57 0x0000000000501bfe in command_loop_2 (ignore=<value optimized out>)
>      at /home/sds/src/emacs/trunk/src/keyboard.c:1156
> #58 0x0000000000574218 in internal_catch (tag=Cannot access memory at address 0x1028
> )
>      at /home/sds/src/emacs/trunk/src/eval.c:1261
> #59 0x0000000000502c8c in command_loop ()
>      at /home/sds/src/emacs/trunk/src/keyboard.c:1135
> #60 recursive_edit_1 () at /home/sds/src/emacs/trunk/src/keyboard.c:756
> #61 0x0000000000502fd7 in Frecursive_edit ()
>      at /home/sds/src/emacs/trunk/src/keyboard.c:820
> #62 0x00000000004fd74b in main (argc=<value optimized out>,
>      argv=<value optimized out>) at /home/sds/src/emacs/trunk/src/emacs.c:1698
>
> Lisp Backtrace:
>
> "x-show-tip" (0xffffbf78)
> "byte-code" (0xffffc080)
> "tooltip-show" (0xffffc478)
> "tooltip-help-tips" (0xffffc720)
> "run-hook-with-args-until-success" (0xffffc718)
> "tooltip-timeout" (0xffffc9f0)
> "apply" (0xffffc9e8)
> "byte-code" (0xffffcad0)
> "timer-event-handler" (0xffffced8)
> (gdb)
>
>