From debbugs-submit-bounces@debbugs.gnu.org Tue Sep 13 15:33:01 2011 Received: (at submit) by debbugs.gnu.org; 13 Sep 2011 19:33:01 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1R3Yj5-0000Yu-LS for submit@debbugs.gnu.org; Tue, 13 Sep 2011 15:33:00 -0400 Received: from eggs.gnu.org ([140.186.70.92]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1R3Yj3-0000Yn-6a for submit@debbugs.gnu.org; Tue, 13 Sep 2011 15:32:58 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1R3Yee-0005lg-Ks for submit@debbugs.gnu.org; Tue, 13 Sep 2011 15:28:28 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_NONE autolearn=unavailable version=3.3.1 Received: from lists.gnu.org ([140.186.70.17]:48753) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1R3Yee-0005l4-B8 for submit@debbugs.gnu.org; Tue, 13 Sep 2011 15:28:24 -0400 Received: from eggs.gnu.org ([140.186.70.92]:38953) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1R3Yeb-00026f-Mf for bug-gnu-emacs@gnu.org; Tue, 13 Sep 2011 15:28:24 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1R3Yea-0005iv-CD for bug-gnu-emacs@gnu.org; Tue, 13 Sep 2011 15:28:21 -0400 Received: from smtprelay-b11.telenor.se ([62.127.194.20]:33412) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1R3YeZ-0005ih-V5 for bug-gnu-emacs@gnu.org; Tue, 13 Sep 2011 15:28:20 -0400 Received: from ipb2.telenor.se (ipb2.telenor.se [195.54.127.165]) by smtprelay-b11.telenor.se (Postfix) with ESMTP id BA09CC03A for ; Tue, 13 Sep 2011 21:28:18 +0200 (CEST) X-SMTPAUTH-B2: [bocjoh] X-SENDER-IP: [85.228.206.69] X-LISTENER: [smtp.bredband.net] X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AmRvACmub05V5M5FPGdsb2JhbABChFWERpAKjkoLAQEBATczgXgFBC9YAgUhAhEBBBgBDAoth3mXc41gkXeBLIQxgREEnAiIWQ X-IronPort-AV: E=Sophos;i="4.68,375,1312149600"; d="scan'208";a="217468351" Received: from c-45cee455.04-211-6c6b701.cust.bredbandsbolaget.se (HELO muon.localdomain) ([85.228.206.69]) by ipb2.telenor.se with ESMTP; 13 Sep 2011 21:28:18 +0200 Received: by muon.localdomain (Postfix, from userid 1000) id 9152048458B; Tue, 13 Sep 2011 21:28:17 +0200 (CEST) From: =?utf-8?Q?Johan_Bockg=C3=A5rd?= To: bug-gnu-emacs@gnu.org Subject: 24.0.50; Segfault in try_cursor_movement Date: Tue, 13 Sep 2011 21:28:17 +0200 Message-ID: <877h5ctf72.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 3) X-Received-From: 140.186.70.17 X-Spam-Score: -4.6 (----) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -4.6 (----) Program terminated with signal 11, Segmentation fault. #0 0x00007f5bccbe6fe7 in kill () at ../sysdeps/unix/syscall-template.S:82 82 ../sysdeps/unix/syscall-template.S: No such file or directory. in ../sysdeps/unix/syscall-template.S (gdb) bt #0 0x00007f5bccbe6fe7 in kill () at ../sysdeps/unix/syscall-template.S:82 #1 0x000000000056e889 in fatal_error_signal (sig=3D11) at emacs.c:358 #2 #3 0x0000000000465f3f in try_cursor_movement (window=3D20987605, startp=3D= ..., scroll_step=3D0x7fff5e400758) at xdisp.c:14639 xdisp.c:14639: (BUFFERP (g->object) && g->charpos =3D=3D PT) g is not a valid glyph here. (gdb) p MATRIX_ROW (w->current_matrix, w->cursor.vpos).used[TEXT_AREA] $3 =3D 80 (gdb) p w->cursor.hpos $4 =3D 80 2011-09-13 Johan Bockg=C3=A5rd * xdisp.c (try_cursor_movement): Check bounds of hpos. =3D=3D=3D modified file 'src/xdisp.c' --- src/xdisp.c 2011-09-09 01:06:52 +0000 +++ src/xdisp.c 2011-09-11 15:03:56 +0000 @@ -14627,7 +14627,11 @@ try_cursor_movement (Lisp_Object window, is set, we are done. */ at_zv_p =3D MATRIX_ROW (w->current_matrix, w->cursor.vpos)->ends_at_zv_p; - if (!at_zv_p) + if (!at_zv_p + && w->cursor.hpos >=3D 0 + && (w->cursor.hpos + < MATRIX_ROW_USED (w->current_matrix, + w->cursor.vpos))) { struct glyph_row *candidate =3D MATRIX_ROW (w->current_matrix, w->cursor.vpos); BTW, is this code in try_window_reusing_current_matrix correct? struct glyph *glyph =3D row->glyphs[TEXT_AREA] + w->cursor.hpos; struct glyph *end =3D glyph + row->used[TEXT_AREA]; It doesn't seem right for end to depend on hpos. From debbugs-submit-bounces@debbugs.gnu.org Wed Sep 14 01:26:56 2011 Received: (at 9495) by debbugs.gnu.org; 14 Sep 2011 05:26:56 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1R3hzs-0002T5-Ai for submit@debbugs.gnu.org; Wed, 14 Sep 2011 01:26:56 -0400 Received: from fencepost.gnu.org ([140.186.70.10]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1R3hzo-0002Sx-Vz for 9495@debbugs.gnu.org; Wed, 14 Sep 2011 01:26:54 -0400 Received: from eliz by fencepost.gnu.org with local (Exim 4.71) (envelope-from ) id 1R3hvR-0006AI-IC; Wed, 14 Sep 2011 01:22:21 -0400 Date: Wed, 14 Sep 2011 01:22:21 -0400 Message-Id: From: Eli Zaretskii To: Johan =?utf-8?Q?Bockg=C3=A5rd?= In-reply-to: <877h5ctf72.fsf@gnu.org> (message from Johan =?utf-8?Q?Bockg?= =?utf-8?Q?=C3=A5rd?= on Tue, 13 Sep 2011 21:28:17 +0200) Subject: Re: bug#9495: 24.0.50; Segfault in try_cursor_movement References: <877h5ctf72.fsf@gnu.org> MIME-version: 1.0 Content-type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Spam-Score: -6.6 (------) X-Debbugs-Envelope-To: 9495 Cc: 9495@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list Reply-To: Eli Zaretskii List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -6.6 (------) > From: Johan BockgÃ¥rd > Date: Tue, 13 Sep 2011 21:28:17 +0200 > > > Program terminated with signal 11, Segmentation fault. > #0 0x00007f5bccbe6fe7 in kill () at ../sysdeps/unix/syscall-template.S:82 > 82 ../sysdeps/unix/syscall-template.S: No such file or directory. > in ../sysdeps/unix/syscall-template.S > (gdb) bt > #0 0x00007f5bccbe6fe7 in kill () at ../sysdeps/unix/syscall-template.S:82 > #1 0x000000000056e889 in fatal_error_signal (sig=11) at emacs.c:358 > #2 > #3 0x0000000000465f3f in try_cursor_movement (window=20987605, startp=..., > scroll_step=0x7fff5e400758) at xdisp.c:14639 > > xdisp.c:14639: (BUFFERP (g->object) && g->charpos == PT) > > g is not a valid glyph here. > > (gdb) p MATRIX_ROW (w->current_matrix, w->cursor.vpos).used[TEXT_AREA] > $3 = 80 > (gdb) p w->cursor.hpos > $4 = 80 Thanks. But what is the value of `rv' at that point? > 2011-09-13 Johan BockgÃ¥rd > > * xdisp.c (try_cursor_movement): Check bounds of hpos. That will prevent your particular crash, but I'm not sure it's correct in all cases (like R2L lines and other atrocities). Can you give a recipe for reproducing this crash from "emacs -Q"? I'd like to investigate a bit more. TIA. > BTW, is this code in try_window_reusing_current_matrix correct? > > struct glyph *glyph = row->glyphs[TEXT_AREA] + w->cursor.hpos; > struct glyph *end = glyph + row->used[TEXT_AREA]; No, it's a bug. I fixed it. Thanks for spotting it. From debbugs-submit-bounces@debbugs.gnu.org Wed Sep 14 15:55:12 2011 Received: (at 9495) by debbugs.gnu.org; 14 Sep 2011 19:55:13 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1R3vY8-0001F4-LQ for submit@debbugs.gnu.org; Wed, 14 Sep 2011 15:55:12 -0400 Received: from smtprelay-b12.telenor.se ([62.127.194.21]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1R3vY5-0001Ew-Vd for 9495@debbugs.gnu.org; Wed, 14 Sep 2011 15:55:11 -0400 Received: from ipb1.telenor.se (ipb1.telenor.se [195.54.127.164]) by smtprelay-b12.telenor.se (Postfix) with ESMTP id 9A404E9B90 for <9495@debbugs.gnu.org>; Wed, 14 Sep 2011 21:50:34 +0200 (CEST) X-SMTPAUTH-B2: [bocjoh] X-SENDER-IP: [85.228.198.117] X-LISTENER: [smtp.bredband.net] X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApplABMFcU5V5MZ1PGdsb2JhbABBhFWERp4sCwEBAQE3M4FTAQEEAR4FBC8jEAsUAQUCBSECAg8BBBgBDAoaE4d3AqNbkheBLIQxgREEnAyIWg X-IronPort-AV: E=Sophos;i="4.68,382,1312149600"; d="scan'208";a="219255369" Received: from c-75c6e455.04-211-6c6b701.cust.bredbandsbolaget.se (HELO muon.localdomain) ([85.228.198.117]) by ipb1.telenor.se with ESMTP; 14 Sep 2011 21:50:32 +0200 Received: by muon.localdomain (Postfix, from userid 1000) id B566B484478; Wed, 14 Sep 2011 21:50:30 +0200 (CEST) From: =?utf-8?Q?Johan_Bockg=C3=A5rd?= To: Eli Zaretskii Subject: Re: bug#9495: 24.0.50; Segfault in try_cursor_movement References: <877h5ctf72.fsf@gnu.org> Date: Wed, 14 Sep 2011 21:50:29 +0200 In-Reply-To: (Eli Zaretskii's message of "Wed, 14 Sep 2011 01:22:21 -0400") Message-ID: <87zki6sy2i.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.4 (--) X-Debbugs-Envelope-To: 9495 Cc: 9495@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -2.4 (--) Eli Zaretskii writes: >> From: Johan Bockg=C3=A5rd >> Date: Tue, 13 Sep 2011 21:28:17 +0200 >>=20 >>=20 >> Program terminated with signal 11, Segmentation fault. >> #0 0x00007f5bccbe6fe7 in kill () at ../sysdeps/unix/syscall-template.S:= 82 >> 82 ../sysdeps/unix/syscall-template.S: No such file or directory. >> in ../sysdeps/unix/syscall-template.S >> (gdb) bt >> #0 0x00007f5bccbe6fe7 in kill () at ../sysdeps/unix/syscall-template.S:= 82 >> #1 0x000000000056e889 in fatal_error_signal (sig=3D11) at emacs.c:358 >> #2 >> #3 0x0000000000465f3f in try_cursor_movement (window=3D20987605, startp= =3D..., >> scroll_step=3D0x7fff5e400758) at xdisp.c:14639 >>=20 >> xdisp.c:14639: (BUFFERP (g->object) && g->charpos =3D=3D PT) >>=20 >> g is not a valid glyph here. >>=20 >> (gdb) p MATRIX_ROW (w->current_matrix, w->cursor.vpos).used[TEXT_AREA] >> $3 =3D 80 >> (gdb) p w->cursor.hpos >> $4 =3D 80 > > Thanks. But what is the value of `rv' at that point? 1 >> 2011-09-13 Johan Bockg=C3=A5rd >>=20 >> * xdisp.c (try_cursor_movement): Check bounds of hpos. > > That will prevent your particular crash, but I'm not sure it's correct > in all cases (like R2L lines and other atrocities). Can you give a > recipe for reproducing this crash from "emacs -Q"? I'd like to > investigate a bit more. TIA. emacs -Q -eval '(setq line-move-visual nil truncate-lines t track-eol t)' C-u 100 x RET y At this point, in try_cursor_movement, point is in the "x" line, the window has not yet hscrolled, and the value of hpos is just after the last valid element in glyphs[TEXT_AREA]. (It only actually crashes some of the time, of course.) From debbugs-submit-bounces@debbugs.gnu.org Wed Sep 14 23:17:52 2011 Received: (at 9495) by debbugs.gnu.org; 15 Sep 2011 03:17:53 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1R42SW-0001B4-DR for submit@debbugs.gnu.org; Wed, 14 Sep 2011 23:17:52 -0400 Received: from mail-yx0-f172.google.com ([209.85.213.172]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1R42SU-0001Ax-Lt for 9495@debbugs.gnu.org; Wed, 14 Sep 2011 23:17:51 -0400 Received: by yxt33 with SMTP id 33so1834946yxt.3 for <9495@debbugs.gnu.org>; Wed, 14 Sep 2011 20:13:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version:content-type:content-transfer-encoding; bh=D3rNWzFy2zS0eTxjR1axlRBS8wPB9dUfiViMBpgy86s=; b=Esm+rrNFLt3+awQwe58njzQ+wzaVY4Bs/HdShivNrSKdeCMm18Zr8ZiNrCIWP4Ey16 PNgBSWl9spp4OIPe8ntlFJSuwc1bhkPs2SxuI2YRz3K5YQpkf0ULEfoeIFOIoBDaVXce PNUtr1yHaA//W3yVDcNZsqZs1rcXHwqgwmYck= Received: by 10.68.66.197 with SMTP id h5mr1014066pbt.355.1316056393781; Wed, 14 Sep 2011 20:13:13 -0700 (PDT) Received: from Victoria.local ([58.22.113.115]) by mx.google.com with ESMTPS id e8sm18806150pbc.8.2011.09.14.20.13.09 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 14 Sep 2011 20:13:12 -0700 (PDT) From: Leo To: Johan =?iso-8859-1?Q?Bockg=E5rd?= Subject: Re: bug#9495: 24.0.50; Segfault in try_cursor_movement References: <877h5ctf72.fsf@gnu.org> <87zki6sy2i.fsf@gnu.org> Date: Thu, 15 Sep 2011 11:12:32 +0800 In-Reply-To: <87zki6sy2i.fsf@gnu.org> ("Johan \=\?iso-8859-1\?Q\?Bockg\=E5rd\=22\?\= \=\?iso-8859-1\?Q\?'s\?\= message of "Wed, 14 Sep 2011 21:50:29 +0200") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.3.50 (Mac OS X 10.6.8) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -4.3 (----) X-Debbugs-Envelope-To: 9495 Cc: Eli Zaretskii , 9495@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -4.2 (----) On 2011-09-15 03:50 +0800, Johan Bockg=E5rd wrote: > emacs -Q -eval '(setq line-move-visual nil truncate-lines t track-eol t)' > > C-u 100 x RET > y > > At this point, in try_cursor_movement, point is in the "x" line, the > window has not yet hscrolled, and the value of hpos is just after the > last valid element in glyphs[TEXT_AREA]. > > (It only actually crashes some of the time, of course.) Does this happen with emacs-23? FWIW, I cannot get emacs-23 to crash. Leo From debbugs-submit-bounces@debbugs.gnu.org Thu Sep 15 00:46:17 2011 Received: (at 9495) by debbugs.gnu.org; 15 Sep 2011 04:46:18 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1R43q5-0007du-3y for submit@debbugs.gnu.org; Thu, 15 Sep 2011 00:46:17 -0400 Received: from fencepost.gnu.org ([140.186.70.10]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1R43px-0007bj-Kp for 9495@debbugs.gnu.org; Thu, 15 Sep 2011 00:46:11 -0400 Received: from eliz by fencepost.gnu.org with local (Exim 4.71) (envelope-from ) id 1R43lU-0007MA-4i; Thu, 15 Sep 2011 00:41:32 -0400 Date: Thu, 15 Sep 2011 00:41:32 -0400 Message-Id: From: Eli Zaretskii To: Leo In-reply-to: (message from Leo on Thu, 15 Sep 2011 11:12:32 +0800) Subject: Re: bug#9495: 24.0.50; Segfault in try_cursor_movement References: <877h5ctf72.fsf@gnu.org> <87zki6sy2i.fsf@gnu.org> MIME-version: 1.0 Content-type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Spam-Score: -6.6 (------) X-Debbugs-Envelope-To: 9495 Cc: bojohan@gnu.org, 9495@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list Reply-To: Eli Zaretskii List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -6.6 (------) > From: Leo > Cc: Eli Zaretskii , 9495@debbugs.gnu.org > Date: Thu, 15 Sep 2011 11:12:32 +0800 > > On 2011-09-15 03:50 +0800, Johan Bockgård wrote: > > emacs -Q -eval '(setq line-move-visual nil truncate-lines t track-eol t)' > > > > C-u 100 x RET > > y > > > > At this point, in try_cursor_movement, point is in the "x" line, the > > window has not yet hscrolled, and the value of hpos is just after the > > last valid element in glyphs[TEXT_AREA]. > > > > (It only actually crashes some of the time, of course.) > > Does this happen with emacs-23? FWIW, I cannot get emacs-23 to crash. It cannot possibly happen with Emacs 23, because this code is part of the changes introduced in Emacs 24 for supporting display of bidirectional text. IOW, it's my fault ;-) From debbugs-submit-bounces@debbugs.gnu.org Thu Sep 15 12:11:36 2011 Received: (at 9495-done) by debbugs.gnu.org; 15 Sep 2011 16:11:36 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1R4EXI-0008SY-Jx for submit@debbugs.gnu.org; Thu, 15 Sep 2011 12:11:36 -0400 Received: from mtaout22.012.net.il ([80.179.55.172]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1R4EXG-0008SQ-8u for 9495-done@debbugs.gnu.org; Thu, 15 Sep 2011 12:11:35 -0400 Received: from conversion-daemon.a-mtaout22.012.net.il by a-mtaout22.012.net.il (HyperSendmail v2007.08) id <0LRK00D00NB26I00@a-mtaout22.012.net.il> for 9495-done@debbugs.gnu.org; Thu, 15 Sep 2011 19:05:22 +0300 (IDT) Received: from HOME-C4E4A596F7 ([77.126.9.62]) by a-mtaout22.012.net.il (HyperSendmail v2007.08) with ESMTPA id <0LRK00CZRNCUEE80@a-mtaout22.012.net.il>; Thu, 15 Sep 2011 19:05:22 +0300 (IDT) Date: Thu, 15 Sep 2011 19:05:20 +0300 From: Eli Zaretskii Subject: Re: bug#9495: 24.0.50; Segfault in try_cursor_movement In-reply-to: <87zki6sy2i.fsf@gnu.org> To: Johan =?utf-8?Q?Bockg=C3=A5rd?= Message-id: <8339fxx03j.fsf@gnu.org> MIME-version: 1.0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: QUOTED-PRINTABLE X-012-Sender: halo1@inter.net.il References: <877h5ctf72.fsf@gnu.org> <87zki6sy2i.fsf@gnu.org> X-Spam-Score: -2.1 (--) X-Debbugs-Envelope-To: 9495-done Cc: 9495-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list Reply-To: Eli Zaretskii List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -2.1 (--) > From: Johan Bockg=C3=A5rd > Cc: 9495@debbugs.gnu.org > Date: Wed, 14 Sep 2011 21:50:29 +0200 >=20 > emacs -Q -eval '(setq line-move-visual nil truncate-lines t track-e= ol t)' >=20 > C-u 100 x RET > y >=20 > At this point, in try_cursor_movement, point is in the "x" line, th= e > window has not yet hscrolled, and the value of hpos is just after t= he > last valid element in glyphs[TEXT_AREA]. >=20 > (It only actually crashes some of the time, of course.) Thanks, I committed your patch with a minor variation. From unknown Tue Aug 19 07:26:20 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Fri, 14 Oct 2011 11:24:03 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator