bug#8145: Crash in multibyte_chars_in_text

[Michel de Ruiter <michel@sentient.nl>]

Hi all,

I just experienced an Emacs crash, and I can reproduce it consistently with the latest pretest.
Steps:
- make sure the directory "U:\Privé\ab" exists (mind the accent!)
- set find-file-existing-other-name to t
- set w32-downcase-file-names to t as well
- have "U:\Privé\ab" as the current working directory
- press Ctrl-x Ctrl-f c d

On typing the 'd' (or whatever key you type there) Emacs crashes.

I have tested the unpatched version 24.0.50 of Emacs+EmacsW32, and it has the same bug.

I tried (Cygwin) gdb (on a previous, patched, version) as suggested by the Emacs crash handler and created the stack trace below.

For completeness, for the first two steps you can eval this:
(setq
 find-file-existing-other-name  t
 w32-downcase-file-names        t
 )

Hope this helps.

Groente, Michel.

(gdb) bt
#0  0x77980005 in ntdll!RtlDosPathNameToRelativeNtPathName_U_WithStatus ()
   from /cygdrive/c/Windows/SysWOW64/ntdll.dll
#1  0x0115cabe in w32_abort ()
#2  0x0111380a in multibyte_chars_in_text ()
#3  0x010647c3 in make_specified_string ()
#4  0x0104b6ac in Fsubstitute_in_file_name ()
#5  0x0100c686 in Ffuncall ()
#6  0x0111c227 in Fbyte_code ()
#7  0x0100bc50 in Feval ()
#8  0x0100d69e in internal_lisp_condition_case ()
#9  0x0111ca3c in Fbyte_code ()
#10 0x0100bc50 in Feval ()
#11 0x0100d69e in internal_lisp_condition_case ()
#12 0x0111ca3c in Fbyte_code ()
#13 0x0100c081 in funcall_lambda ()
#14 0x0100c465 in Ffuncall ()
#15 0x0100cc01 in run_hook_with_args ()
#16 0x0100cd53 in Frun_hooks ()
#17 0x0100c723 in Ffuncall ()
#18 0x0100ca88 in call1 ()
#19 0x0105365b in safe_run_hooks_1 ()
#20 0x0100a1b0 in internal_condition_case ()
#21 0x01052eee in safe_run_hooks ()
#22 0x0105f7ae in command_loop_1 ()
#23 0x0100a1b0 in internal_condition_case ()
#24 0x01052c9a in command_loop_2 ()
#25 0x0100a0e5 in internal_catch ()
#26 0x01052a53 in command_loop ()
#27 0x01052b40 in recursive_edit_1 ()
#28 0x01104146 in read_minibuf ()
#29 0x01104dd6 in Fcompleting_read ()
#30 0x0100c583 in Ffuncall ()
#31 0x0111c227 in Fbyte_code ()
#32 0x0100c081 in funcall_lambda ()
#33 0x0100c465 in Ffuncall ()
#34 0x0111c227 in Fbyte_code ()
#35 0x0100c081 in funcall_lambda ()
#36 0x0100c465 in Ffuncall ()
#37 0x0111c227 in Fbyte_code ()
#38 0x0100bc50 in Feval ()
#39 0x0111a024 in Fcall_interactively ()
#40 0x0100c65f in Ffuncall ()
#41 0x0100c837 in call3 ()
#42 0x01057b90 in Fcommand_execute ()
#43 0x0105f76c in command_loop_1 ()
#44 0x0100a1b0 in internal_condition_case ()
#45 0x01052c9a in command_loop_2 ()
#46 0x0100a0e5 in internal_catch ()
#47 0x01052aa7 in command_loop ()
#48 0x01052b40 in recursive_edit_1 ()
#49 0x01052c61 in Frecursive_edit ()
#50 0x01002e70 in main ()