bug#22356: 25.0.50; emacs-25 very crashy with ivy-mode

[Dmitry Gutov <dgutov@yandex.ru>]

[-- Attachment #1: Type: text/plain, Size: 2195 bytes --]

On 01/12/2016 07:05 PM, Eli Zaretskii wrote:

> I doubt that.  Maybe that ivy-mode update exposed some old bug?  Did
> you try to go back the old version of ivy-mode?

Alas, no. I went back from the version in MELPA to swiper 0.7.0 (it 
includes ivy-mode) which was published to GNU ELPA a month ago.

Still getting the problem. It seemed gone for the first few minutes, but 
after I restarted Emacs, and repeated the familiar steps (navigate to 
~/vc/emacs, invoke projectile-find-file with ivy used as the 
completing-read function, then type vc-hg, and maybe backspace over that 
g and type it again a few times), the problem is here again.

(Other people should be able to reproduce this by installing swiper, 
enabling ivy-mode, and calling M-x project-find-file).

The error also still happens in different places. Here's the latest one:

Starting program: /home/gutov/vc/emacs/src/emacs
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7fffe6848700 (LWP 9356)]
[New Thread 0x7fffe5a21700 (LWP 9357)]
[New Thread 0x7fffe5220700 (LWP 9358)]
*** Error in `/home/gutov/vc/emacs/src/emacs': free(): invalid pointer: 
0x00000000029d5c40 ***

Program received signal SIGABRT, Aborted.
0x00007ffff14a5267 in __GI_raise (sig=sig@entry=6) at 
../sysdeps/unix/sysv/linux/raise.c:55
55	../sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) xbacktrace
"Automatic GC" (0x0)
"put-text-property" (0xffffbf78)
"ivy--format" (0xffffc128)
"ivy--exhibit" (0xffffc2c0)
"read-from-minibuffer" (0xffffc838)
"ivy-read" (0xffffca80)
"ivy-completing-read" (0xffffcbe0)
"if" (0xffffcd88)
"cond" (0xffffce68)
"let" (0xffffcfb8)
"projectile-completing-read" (0xffffd0c0)
"let" (0xffffd2d8)
"projectile-find-file" (0xffffd550)
"funcall-interactively" (0xffffd548)
0xb33578 PVEC_SUBR
"ad-Advice-call-interactively" (0xffffd988)
"apply" (0xffffdaf8)
"call-interactively" (0xffffdcc0)
"command-execute" (0xffffde68)
(gdb)

Sometimes, I'm also getting a graphical glitch in the minibuffer: one or 
few "character not found" glyphs flickering against the right window 
border right before the crash.

Screenshot attached.

[-- Attachment #2: Screenshot from 2016-01-12 19-42-05.png --]
[-- Type: image/png, Size: 180566 bytes --]