bug#11475: 24.0.96; Crash in compact_small_strings

bug#11475: 24.0.96; Crash in compact_small_strings

[Lars Ljung]

[-- Attachment #1: Type: text/plain, Size: 4989 bytes --]

This bug report will be sent to the Bug-GNU-Emacs mailing list
and the GNU bug tracker at debbugs.gnu.org.  Please check that
the From: line contains a valid email address.  After a delay of up
to one day, you should receive an acknowledgement at that address.

Please write in English if possible, as the Emacs maintainers
usually do not have translators for other languages.

Please describe exactly what actions triggered the bug, and
the precise symptoms of the bug.  If you can, give a recipe
starting from `emacs -Q':

I don't have much to add. It just crashed while I was doing
other things.

If Emacs crashed, and you have the Emacs process in the gdb debugger,
please include the output from the following gdb commands:
    `bt full' and `xbacktrace'.
For information about debugging Emacs, please read the file
c:/Program Files/GNU Emacs 24/etc/DEBUG.


In GNU Emacs 24.0.96.1 (i386-mingw-nt5.1.2600)
 of 2012-04-29 on MARVIN
Windowing system distributor `Microsoft Corp.', version 5.1.2600
Configured using:
 `configure --with-gcc (4.6) --no-opt --enable-checking --cflags
 -ID:/devel/emacs/libs/libXpm-3.5.8/include
 -ID:/devel/emacs/libs/libXpm-3.5.8/src
 -ID:/devel/emacs/libs/libpng-dev_1.4.3-1/include
 -ID:/devel/emacs/libs/zlib-dev_1.2.5-2/include
 -ID:/devel/emacs/libs/giflib-4.1.4-1/include
 -ID:/devel/emacs/libs/jpeg-6b-4/include
 -ID:/devel/emacs/libs/tiff-3.8.2-1/include
 -ID:/devel/emacs/libs/gnutls-3.0.9/include'

Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: nil
  value of $LC_CTYPE: nil
  value of $LC_MESSAGES: nil
  value of $LC_MONETARY: nil
  value of $LC_NUMERIC: nil
  value of $LC_TIME: nil
  value of $LANG: SVE
  value of $XMODIFIERS: nil
  locale-coding-system: cp1252
  default enable-multibyte-characters: t

Major mode: Lisp Interaction

Minor modes in effect:
  global-ede-mode: t
  electric-indent-mode: t
  global-semantic-mru-bookmark-mode: t
  global-semantic-decoration-mode: t
  global-semanticdb-minor-mode: t
  global-semantic-idle-completions-mode: t
  global-semantic-idle-scheduler-mode: t
  global-semantic-highlight-func-mode: t
  global-semantic-highlight-edits-mode: t
  semantic-mode: t
  diff-auto-refine-mode: t
  show-paren-mode: t
  tooltip-mode: t
  mouse-wheel-mode: t
  tool-bar-mode: t
  menu-bar-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  blink-cursor-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t
  line-number-mode: t
  transient-mark-mode: t

Recent input:
<help-echo> <down-mouse-1> <mouse-1> q M-x r e p o
<tab> r <tab> <return>

Recent messages:
For information about GNU Emacs and the GNU system, type C-h C-a.
Making completion list...

Load-path shadows:
c:/Documents and Settings/LALJ/Application
Data/.emacs.d/elpa/zenburn-theme-1.4/zenburn-theme hides c:/Documents and
Settings/LALJ/Application Data/.emacs.d/zenburn-theme

Features:
(shadow sort gnus-util mail-extr emacsbug message rfc822 mml mml-sec
mm-decode mm-bodies mm-encode mail-parse rfc2231 mailabbrev gmm-utils
mailheader sendmail rfc2047 rfc2045 ietf-drums mm-util mail-prsvr
mail-utils help-mode view svg-clock-autoloads zenburn-theme-autoloads
zenburn-theme cc-styles cc-align cc-engine cc-vars cc-defs ede/linux
ede/emacs ede/cpp-root ede/speedbar ede/files ede ede/base ede/auto
ede/source eieio-speedbar speedbar sb-image dframe assoc eieio-custom
package tabulated-list electric semantic/mru-bookmark
semantic/decorate/mode semantic/decorate pulse semantic/db-mode
semantic/db eieio-base semantic/idle semantic/format ezimage
semantic/tag-ls semantic/ctxt semantic/util-modes semantic/util semantic
semantic/tag semantic/lex semantic/fw eieio mode-local cedet dos-indent
dos psvn wid-edit cl log-edit pcvs-util add-log diff-mode vc-svn org
byte-opt warnings bytecomp byte-compile cconv macroexp advice help-fns
advice-preload ob-emacs-lisp ob-tangle ob-ref ob-lob ob-table
org-footnote org-src ob-comint ob-keys ob ob-eval org-pcomplete
pcomplete comint ansi-color ring org-list org-faces org-compat
org-entities org-macs noutline outline easy-mmode format-spec regexp-opt
cal-menu easymenu calendar cal-loaddefs paren server time-date tooltip
ediff-hook vc-hooks lisp-float-type mwheel dos-w32 disp-table ls-lisp
w32-win w32-vars tool-bar dnd fontset image fringe lisp-mode register
page menu-bar rfn-eshadow timer select scroll-bar mouse jit-lock
font-lock syntax facemenu font-core frame cham georgian utf-8-lang
misc-lang vietnamese tibetan thai tai-viet lao korean japanese hebrew
greek romanian slovak czech european ethiopic indian cyrillic chinese
case-table epa-hook jka-cmpr-hook help simple abbrev minibuffer loaddefs
button faces cus-face files text-properties overlay sha1 md5 base64
format env code-pages mule custom widget hashtable-print-readable
backquote make-network-process multi-tty emacs)

[-- Attachment #2: backtrace.txt --]
[-- Type: text/plain, Size: 9307 bytes --]


Thread 5 (Thread 3272.0xc54):
#0  0x7c90e514 in ntdll!LdrAccessResource () from C:\WINDOWS\system32\ntdll.dll
No symbol table info available.
#1  0x7c90da4a in ntdll!ZwRemoveIoCompletion () from C:\WINDOWS\system32\ntdll.dll
No symbol table info available.
#2  0x7c80a7e6 in KERNEL32!GetQueuedCompletionStatus () from C:\WINDOWS\system32\kernel32.dll
No symbol table info available.
#3  0x77e7715c in RPCRT4!I_RpcBindingCopy () from C:\WINDOWS\system32\rpcrt4.dll
No symbol table info available.
#4  0x77e772a0 in RPCRT4!I_RpcBindingCopy () from C:\WINDOWS\system32\rpcrt4.dll
No symbol table info available.
#5  0x77e77328 in RPCRT4!I_RpcBindingCopy () from C:\WINDOWS\system32\rpcrt4.dll
No symbol table info available.
#6  0x77e76ad1 in RPCRT4!I_RpcBindingCopy () from C:\WINDOWS\system32\rpcrt4.dll
No symbol table info available.
#7  0x77e76c97 in RPCRT4!I_RpcBindingCopy () from C:\WINDOWS\system32\rpcrt4.dll
No symbol table info available.
#8  0x7c80b729 in KERNEL32!GetModuleFileNameA () from C:\WINDOWS\system32\kernel32.dll
No symbol table info available.
#9  0x00000000 in ?? ()
No symbol table info available.

Thread 4 (Thread 3272.0x928):
#0  0x7c90e514 in ntdll!LdrAccessResource () from C:\WINDOWS\system32\ntdll.dll
No symbol table info available.
#1  0x7c90d21a in ntdll!ZwDelayExecution () from C:\WINDOWS\system32\ntdll.dll
No symbol table info available.
#2  0x77e76b99 in RPCRT4!I_RpcBindingCopy () from C:\WINDOWS\system32\rpcrt4.dll
No symbol table info available.
#3  0x77e76b1c in RPCRT4!I_RpcBindingCopy () from C:\WINDOWS\system32\rpcrt4.dll
No symbol table info available.
#4  0x77e76c97 in RPCRT4!I_RpcBindingCopy () from C:\WINDOWS\system32\rpcrt4.dll
No symbol table info available.
#5  0x7c80b729 in KERNEL32!GetModuleFileNameA () from C:\WINDOWS\system32\kernel32.dll
No symbol table info available.
#6  0x00000000 in ?? ()
No symbol table info available.

Thread 3 (Thread 3272.0x444):
#0  0x7c90e514 in ntdll!LdrAccessResource () from C:\WINDOWS\system32\ntdll.dll
No symbol table info available.
#1  0x7c90df5a in ntdll!ZwWaitForSingleObject () from C:\WINDOWS\system32\ntdll.dll
No symbol table info available.
#2  0x7c8025db in WaitForSingleObjectEx () from C:\WINDOWS\system32\kernel32.dll
No symbol table info available.
#3  0x000004cc in ?? ()
No symbol table info available.
#4  0x00000000 in ?? ()
No symbol table info available.

Thread 2 (Thread 3272.0xdec):
#0  0x7c90e514 in ntdll!LdrAccessResource () from C:\WINDOWS\system32\ntdll.dll
No symbol table info available.
#1  0x7e4191be in USER32!GetProcessWindowStation () from C:\WINDOWS\system32\user32.dll
No symbol table info available.
#2  0x7e42776b in USER32!GetMessageA () from C:\WINDOWS\system32\user32.dll
No symbol table info available.
#3  0x01143db4 in w32_msg_pump (msg_buf=0x7240ff54) at w32fns.c:2251
        msg = {hwnd = 0x40470, message = 512, wParam = 0, lParam = 19202107, time = 441740281, pt = {x = 935, y = 679}}
        result = 0
        focus_window = 0x403
#4  0x01143fe8 in w32_msg_worker (arg=0x0) at w32fns.c:2470
        msg = {hwnd = 0x884a33c0, message = 2152738660, wParam = 0, lParam = 0, time = 0, pt = {x = -2142228620, y = -1557365600}}
        dummy_buf = {next = 0x0, w32msg = {msg = {hwnd = 0x0, message = 0, wParam = 0, lParam = 0, time = 0, pt = {x = 0, y = 0}}, dwModifiers = 0, rect = {left = 0, top = 0, right = 0, bottom = 0}}, result = 0, completed = 0}
#5  0x7c80b729 in KERNEL32!GetModuleFileNameA () from C:\WINDOWS\system32\kernel32.dll
No symbol table info available.
#6  0x00000000 in ?? ()
No symbol table info available.

Thread 1 (Thread 3272.0x604):
#0  0x7c90120f in ntdll!DbgUiConnectToDbg () from C:\WINDOWS\system32\ntdll.dll
No symbol table info available.
#1  0x0114f346 in w32_abort () at w32fns.c:7210
        button = 6
#2  0x0103ac41 in compact_small_strings () at alloc.c:2272
        nbytes = 1702196083
        b = 0x6f80000
        tb = 0x6f23000
        next = 0x83f5f8
        from = 0x6f81e08
        to = 0x6f23ae0
        end = 0x6f81ffc
        tb_end = 0x6f24ffc
        to_end = 0x6f23ae0
        from_end = 0x6f81e08
#3  0x0103ab4b in sweep_strings () at alloc.c:2197
        b = 0x0
        next = 0x0
        live_blocks = 0x563c400
#4  0x01041541 in gc_sweep () at alloc.c:5880
No locals.
#5  0x0103f9cf in Fgarbage_collect () at alloc.c:5231
        bind = 0x0
        stack_top_variable = 0 '\000'
        i = 1596
        message_p = 0
        total = {8648536, 16826298, 0, 0, 0, 102653278, 57132580, 8649140}
        count = 2
        t1 = {tv_sec = 1337078269, tv_usec = 140000}
        t2 = {tv_sec = 0, tv_usec = 236000}
        t3 = {tv_sec = 0, tv_usec = 0}
#6  0x010092ba in read_char (commandflag=1, nmaps=11, maps=0x83f990, prev_event=54741018, used_mouse_menu=0x83fa88, end_time=0x0) at keyboard.c:2705
        tem0 = 54741042
        timeout = 60
        delay_level = 8
        buffer_size = 63
        c = 54741018
        jmpcount = 2
        local_getcjmp = {8649000, 102653278, 8649140, 57132580, 8648620, 16812933, 8650720, 0, 23306384, 54741018, 23306384, 0, 0, 54861234, 54741018, 0}
        save_jump = {8649000, 57132544, 8649144, 57132580, 8648620, 16812933, 8650720, 0, 23306384, 54847282, 3, 0, 68265393, 21958829, 54741018, 0}
        key_already_recorded = 0
        tem = 54741018
        save = 54741018
        previous_echo_area_message = 54741018
        also_record = 54741018
        reread = 0
        gcpro1 = {next = 0x995b, var = 0x626f9b6, nvars = 54887170}
        gcpro2 = {next = 0x343f362, var = 0x343481a, nvars = 8648728}
        polling_stopped_here = 0
        orig_kboard = 0x38ead80
#7  0x0101c26d in read_key_sequence (keybuf=0x83fc04, bufsize=30, prompt=54741018, dont_downcase_last=0, can_return_switch_frame=1, fix_current_buffer=1) at keyboard.c:9328
        interrupted_kboard = 0x38ead80
        interrupted_frame = 0x3906c00
        key = 2356608
        used_mouse_menu = 0
        echo_local_start = 0
        last_real_key_start = 0
        keys_local_start = 0
        local_first_binding = 0
        from_string = 54741018
        count = 2
        t = 0
        echo_start = 0
        keys_start = 0
        nmaps = 11
        nmaps_allocated = 11
        defs = 0x83f950
        submaps = 0x83f990
        orig_local_map = 102849382
        orig_keymap = 54741018
        localized_local_map = 0
        first_binding = 0
        first_unbound = 31
        mock_input = 0
        fkey = {parent = 59304366, map = 59304366, start = 0, end = 0}
        keytran = {parent = 54730438, map = 54730438, start = 0, end = 0}
        indec = {parent = 59304374, map = 59304374, start = 0, end = 0}
        shift_translated = 0
        delayed_switch_frame = 54741018
        original_uppercase = 54845826
        original_uppercase_position = -1
        dummyflag = 0
        starting_buffer = 0x6d5bc00
        fake_prefixed_keys = 54741018
        gcpro1 = {next = 0x162f5e4, var = 0x343481a, nvars = 114670592}
#8  0x01005c93 in command_loop_1 () at keyboard.c:1449
        cmd = 59716234
        keybuf = {102519054, 76, 0, 2356608, 2097152, 8649800, 16798235, 105208574, 54741042, 8649839, 54741018, 2356608, 2097152, 8649832, 59796480, 54846330, 0, 8649912, 16797604, 105208574, 8649839, 2, 2147315712, 2356608, 2097152, 8649880, 214401, 2, 54719302, 0}
        i = 1
        prev_modiff = 4297
        prev_buffer = 0x6d5bc00
        already_adjusted = 0
#9  0x01032c4f in internal_condition_case (bfun=0x100569b <command_loop_1>, handlers=54798794, hfun=0x1004eba <cmd_error>) at eval.c:1515
        val = 54719302
        c = {tag = 54741018, val = 54741018, next = 0x83fda4, gcpro = 0x0, jmp = {8650088, 0, 2097152, 2356608, 8649916, 16985084, 8650720, 0, 2, 0, 8650192, 2, 2, 0, 1, 1}, backlist = 0x0, handlerlist = 0x0, lisp_eval_depth = 0, pdlcount = 2, poll_suppress_count = 0, interrupt_input_blocked = 0, byte_stack = 0x0}
        h = {handler = 54798794, var = 54741018, chosen_clause = 54741042, tag = 0x83fcf0, next = 0x0}
#10 0x010052f7 in command_loop_2 (ignore=54741018) at keyboard.c:1160
        val = 0
#11 0x01032672 in internal_catch (tag=54796794, func=0x10052d3 <command_loop_2>, arg=54741018) at eval.c:1272
        c = {tag = 54796794, val = 54741018, next = 0x0, gcpro = 0x0, jmp = {8650264, 2147315712, 2097152, 2356608, 8650124, 16983651, 8650720, 0, 54741018, 54779904, 7471221, 7340143, 2147315712, 23403416, 54779904, 23403416}, backlist = 0x0, handlerlist = 0x0, lisp_eval_depth = 0, pdlcount = 2, poll_suppress_count = 0, interrupt_input_blocked = 0, byte_stack = 0x0}
#12 0x010052b3 in command_loop () at keyboard.c:1139
No locals.
#13 0x0100488f in recursive_edit_1 () at keyboard.c:759
        count = 1
        val = 2009375120
#14 0x01004baa in Frecursive_edit () at keyboard.c:823
        count = 0
        buffer = 54741018
#15 0x010028b5 in main (argc=1, argv=0x33fa8) at emacs.c:1715
        dummy = 8650720
        stack_bottom_variable = 0 '\000'
        do_initial_setlocale = 1
        skip_args = 0
        no_loadup = 0
        junk = 0x0
        dname_arg = 0x0
        ch_to_dir = 0x23f580 <Address 0x23f580 out of bounds>

bug#11475: 24.0.96; Crash in compact_small_strings

[Chong Yidong]

> #1  0x0114f346 in w32_abort () at w32fns.c:7210
>         button = 6
> #2  0x0103ac41 in compact_small_strings () at alloc.c:2272
>         nbytes = 1702196083
>         b = 0x6f80000
>         tb = 0x6f23000
>         next = 0x83f5f8
>         from = 0x6f81e08
>         to = 0x6f23ae0
>         end = 0x6f81ffc
>         tb_end = 0x6f24ffc
>         to_end = 0x6f23ae0
>         from_end = 0x6f81e08
> #3  0x0103ab4b in sweep_strings () at alloc.c:2197
>         b = 0x0
>         next = 0x0
>         live_blocks = 0x563c400

Please do

f 2
p *from

bug#11475: 24.0.96; Crash in compact_small_strings

[Lars Ljung]

2012-05-15 17:05, Chong Yidong skrev:
> Please do
> 
> f 2
> p *from

Unfortunately I don't know how to reproduce this. But if it happens
again I will try to get more information.

Regards,
Lars Ljung