bug#10098: 24.0.91; Resizing emacs crashes in adjust_glyph_matrix

bug#10098: 24.0.91; Resizing emacs crashes in adjust_glyph_matrix

[Jan Djärv]

This bug report will be sent to the Bug-GNU-Emacs mailing list
and the GNU bug tracker at debbugs.gnu.org.  Please check that
the From: line contains a valid email address.  After a delay of up
to one day, you should receive an acknowledgement at that address.

Please write in English if possible, as the Emacs maintainers
usually do not have translators for other languages.

Please describe exactly what actions triggered the bug, and
the precise symptoms of the bug.  If you can, give a recipe
starting from `emacs -Q':

Just start emacs, grab a corner with the mouse and resize emacs by
making circles with the mouse.  After a while it crashes.  I have it gdb
if further info is needed.

#0  abort () at /home/jhd/src/emacs/current/src/emacs.c:386
No locals.
#1  0x00000000004152bf in adjust_glyph_matrix (w=0x1358f80, matrix=0x137e640, x=0, y=0, dim=...) at /home/jhd/src/emacs/current/src/dispnew.c:611
        row = 0x13b17e0
        end = 0x13b1be0
        i = 25
        new_rows = 0
        marginal_areas_changed_p = 0
        header_line_changed_p = 0
        header_line_p = 0
        left = 0
        right = 0
        window_width = 392
        window_height = 314
#2  0x0000000000417d9f in allocate_matrices_for_window_redisplay (w=0x1358f80) at /home/jhd/src/emacs/current/src/dispnew.c:1869
        dim = {
          width = 56, 
          height = 25
        }
#3  0x0000000000418946 in adjust_frame_glyphs_for_window_redisplay (f=0x1358d40) at /home/jhd/src/emacs/current/src/dispnew.c:2197
No locals.
#4  0x0000000000418021 in adjust_frame_glyphs (f=0x1358d40) at /home/jhd/src/emacs/current/src/dispnew.c:1945
No locals.
#5  0x0000000000417e05 in adjust_glyphs (f=0x1358d40) at /home/jhd/src/emacs/current/src/dispnew.c:1890
No locals.
#6  0x0000000000420dfc in change_frame_size_1 (f=0x1358d40, newheight=23, newwidth=47, pretend=0, delay=0, safe=1) at /home/jhd/src/emacs/current/src/dispnew.c:5768
        new_frame_total_cols = 52
        count = 5
#7  0x0000000000420ac1 in change_frame_size (f=0x0, newheight=23, newwidth=47, pretend=0, delay=0, safe=1) at /home/jhd/src/emacs/current/src/dispnew.c:5678
        tail = 20481328
        frame = 140737488335856
#8  0x00000000004209ae in do_pending_window_change (safe=1) at /home/jhd/src/emacs/current/src/dispnew.c:5644
        f = 0x1358d40
        tail = 13004566
        frame = 20286789
#9  0x000000000044f945 in redisplay_internal () at /home/jhd/src/emacs/current/src/xdisp.c:12761
        w = 0x1358f80
        sw = 0x1358f80
        fr = 0x1358d40
        pending = 0
        must_finish = 0
        tlbufpos = {
          charpos = 1, 
          bytepos = 140737488342688
        }
        tlendpos = {
          charpos = 1321898655, 
          bytepos = 831650
        }
        number_of_visible_frames = 1
        count = 3
        count1 = 0
        sf = 0x1358d40
        polling_stopped_here = 0
        old_frame = 20286789
        consider_all_windows_p = 0
#10 0x00000000004510cc in redisplay_preserve_echo_area (from_where=11) at /home/jhd/src/emacs/current/src/xdisp.c:13389
No locals.
#11 0x000000000065cc8c in wait_reading_process_output (time_limit=0, microsecs=0, read_kbd=-1, do_display=1, wait_for_cell=12761602, wait_proc=0x0, just_wait_proc=0) at /home/jhd/src/emacs/current/src/process.c:4553
        timeout_reduced_for_timers = 1
        channel = -100000
        nfds = 1
        Available = {
          fds_bits = {2176, 0 <repeats 15 times>}
        }
        Writeok = {
          fds_bits = {0 <repeats 16 times>}
        }
        check_write = 1
        check_delay = 0
        no_avail = 0
        xerrno = 11
        proc = 0
        timeout = {
          tv_sec = 0, 
          tv_usec = 130402
        }
        end_time = {
          tv_sec = 0, 
          tv_usec = 0
        }
        wait_channel = -1
        got_some_input = 1
        count = 2
#12 0x000000000056b9cc in kbd_buffer_get_event (kbp=0x7fffffffd4a0, used_mouse_menu=0x7fffffffd9d4, end_time=0x0) at /home/jhd/src/emacs/current/src/keyboard.c:3850
        c = 0
        obj = 5686382
#13 0x00000000005693b0 in read_char (commandflag=1, nmaps=2, maps=0x7fffffffd7f0, prev_event=12761602, used_mouse_menu=0x7fffffffd9d4, end_time=0x0) at /home/jhd/src/emacs/current/src/keyboard.c:2796
        kb = 0x7fffffffd4d0
        c = 12761602
        jmpcount = 2
        local_getcjmp = {{
            __jmpbuf = {0, -1056989605032105556, 4278496, 140737488348496, 0, 0, -1056989605059368532, 1056990074327787948}, 
            __mask_was_saved = 0, 
            __saved_mask = {
              __val = {197568495616, 1, 66, 18446744073709551615, 4294967294, 0, 0, 0, 0, 0, 0, 46, 0, 12761602, 12761602, 12761602}
            }
          }}
        save_jump = {{
            __jmpbuf = {0, 0, 0, 0, 0, 0, 0, 0}, 
            __mask_was_saved = 0, 
            __saved_mask = {
              __val = {0 <repeats 16 times>}
            }
          }}
        key_already_recorded = 0
        tem = 0
        save = 140737488344928
        previous_echo_area_message = 12761602
        also_record = 12761602
        reread = 0
        gcpro1 = {
          next = 0x7fffffffd540, 
          var = 0x673ff9, 
          nvars = 4294956288
        }
        gcpro2 = {
          next = 0x1ffffd520, 
          var = 0xc32795, 
          nvars = 12789648
        }
        polling_stopped_here = 1
        orig_kboard = 0x10e92a0
#14 0x0000000000576ccc in read_key_sequence (keybuf=0x7fffffffdc40, bufsize=30, prompt=12761602, dont_downcase_last=0, can_return_switch_frame=1, fix_current_buffer=1) at /home/jhd/src/emacs/current/src/keyboard.c:9290
        interrupted_kboard = 0x10e92a0
        interrupted_frame = 0x1358d40
        key = 4495097
        used_mouse_menu = 0
        echo_local_start = 0
        last_real_key_start = 0
        keys_local_start = 0
        local_first_binding = 0
        from_string = 12761602
        count = 2
        t = 0
        echo_start = 0
        keys_start = 0
        nmaps = 2
        nmaps_allocated = 2
        defs = 0x7fffffffd7d0
        submaps = 0x7fffffffd7f0
        orig_local_map = 18912550
        orig_keymap = 12761602
        localized_local_map = 0
        first_binding = 0
        first_unbound = 31
        mock_input = 0
        fkey = {
          parent = 19514806, 
          map = 19514806, 
          start = 0, 
          end = 0
        }
        keytran = {
          parent = 12741030, 
          map = 12741030, 
          start = 0, 
          end = 0
        }
        indec = {
          parent = 19514790, 
          map = 19514790, 
          start = 0, 
          end = 0
        }
        shift_translated = 0
        delayed_switch_frame = 12761602
        original_uppercase = 20287936
        original_uppercase_position = -1
        dummyflag = 0
        starting_buffer = 0xc32790
        fake_prefixed_keys = 12761602
        outer_gcpro1 = {
          next = 0x178cce0, 
          var = 0xc58900, 
          nvars = 0
        }
#15 0x0000000000566798 in command_loop_1 () at /home/jhd/src/emacs/current/src/keyboard.c:1447
        cmd = 11825984136
        keybuf = {0, 0, 4278496, 140737488348496, 140737488346240, 6196393, 73, 12761602, 140737488346320, 6198716, 12761602, 12882994, 140737488346720, 4339075590, 12604576, 140737488346344, 140737488345888, 12882992, 140737488346464, 6317719, 12996278, 8603802674, 12882994, 12761602, 0, 0, 140737488346464, 6317153, 12761602, 12882994}
        i = 0
        prev_modiff = 0
        prev_buffer = 0x0
        already_adjusted = 0
#16 0x000000000060210b in internal_condition_case (bfun=0x5663b3 <command_loop_1>, handlers=12813794, hfun=0x565c9b <cmd_error>) at /home/jhd/src/emacs/current/src/eval.c:1499
        val = 0
        c = {
          tag = 12761602, 
          val = 12761602, 
          next = 0x7fffffffdf70, 
          gcpro = 0x0, 
          jmp = {{
              __jmpbuf = {0, -1056989604751087188, 4278496, 140737488348496, 0, 0, -1056989604828681812, 1056989879632652716}, 
              __mask_was_saved = 0, 
              __saved_mask = {
                __val = {1056989879632652716, 0, 230869317088, 13236582, 0, 9374232, 0, 0, 0, 0, 230867133956, 227633266689, 0, 0, 230871308160, 140737318460368}
              }
            }}, 
          backlist = 0x0, 
          handlerlist = 0x0, 
          lisp_eval_depth = 0, 
          pdlcount = 2, 
          poll_suppress_count = 1, 
          interrupt_input_blocked = 0, 
          byte_stack = 0x0
        }
        h = {
          handler = 12813794, 
          var = 12761602, 
          chosen_clause = 12813794, 
          tag = 0x7fffffffddf0, 
          next = 0x0
        }
#17 0x00000000005660a2 in command_loop_2 (ignore=12761602) at /home/jhd/src/emacs/current/src/keyboard.c:1158
        val = 0
#18 0x0000000000601a95 in internal_catch (tag=12809586, func=0x56607c <command_loop_2>, arg=12761602) at /home/jhd/src/emacs/current/src/eval.c:1256
        c = {
          tag = 12809586, 
          val = 12761602, 
          next = 0x0, 
          gcpro = 0x0, 
          jmp = {{
              __jmpbuf = {0, -1056989606812587604, 4278496, 140737488348496, 0, 0, -1056989604759475796, 1056989881590081964}, 
              __mask_was_saved = 0, 
              __saved_mask = {
                __val = {6197688, 0, 4294967303, 0, 0, 12159840, 12789648, 0, 0, 140737488347216, 12987552, 14, 0, 4278496, 140737488348496, 140737488347296}
              }
            }}, 
          backlist = 0x0, 
          handlerlist = 0x0, 
          lisp_eval_depth = 0, 
          pdlcount = 2, 
          poll_suppress_count = 1, 
          interrupt_input_blocked = 0, 
          byte_stack = 0x0
        }
#19 0x0000000000566055 in command_loop () at /home/jhd/src/emacs/current/src/keyboard.c:1137
No locals.
#20 0x00000000005657df in recursive_edit_1 () at /home/jhd/src/emacs/current/src/keyboard.c:757
        count = 1
        val = 12761602
#21 0x0000000000565982 in Frecursive_edit () at /home/jhd/src/emacs/current/src/keyboard.c:821
        count = 0
        buffer = 12761602
#22 0x0000000000563a40 in main (argc=2, argv=0x7fffffffe558) at /home/jhd/src/emacs/current/src/emacs.c:1707
        dummy = 4237001
        stack_bottom_variable = 0 '\000'
        do_initial_setlocale = 1
        skip_args = 0
        rlim = {
          rlim_cur = 8720000, 
          rlim_max = 18446744073709551615
        }
        no_loadup = 0
        junk = 0x0
        dname_arg = 0x0
        ch_to_dir = 0x35c100fe40 "\205'"


I'm compiling Lucid right now to see if this is Gtk+ 3 specific.

        Jan D.

If Emacs crashed, and you have the Emacs process in the gdb debugger,
please include the output from the following gdb commands:
    `bt full' and `xbacktrace'.
For information about debugging Emacs, please read the file
/opt/emacs-cvs/share/emacs/24.0.91/etc/DEBUG.


In GNU Emacs 24.0.91.5 (x86_64-unknown-linux-gnu, GTK+ Version 3.2.1)
 of 2011-11-21 on f16.localdomain
Windowing system distributor `Fedora Project', version 11.0.11102000
configured using `configure  '--verbose' '--enable-asserts' '--with-x-toolkit=gtk3' '--prefix=/opt/emacs-cvs' 'CFLAGS=-g''

Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: C
  value of $LC_CTYPE: nil
  value of $LC_MESSAGES: nil
  value of $LC_MONETARY: sv_SE.utf8
  value of $LC_NUMERIC: sv_SE.utf8
  value of $LC_TIME: sv_SE.utf8
  value of $LANG: sv_SE.utf8
  value of $XMODIFIERS: @im=none
  locale-coding-system: utf-8-unix
  default enable-multibyte-characters: t

Major mode: Lisp Interaction

Minor modes in effect:
  tooltip-mode: t
  mouse-wheel-mode: t
  tool-bar-mode: t
  menu-bar-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  blink-cursor-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t
  line-number-mode: t
  transient-mark-mode: t

Recent input:
<escape> x r e p o r t - e m <tab> <return>

Recent messages:
For information about GNU Emacs and the GNU system, type C-h C-a.

Load-path shadows:
None found.

Features:
(shadow sort gnus-util mail-extr message format-spec rfc822 mml easymenu
mml-sec mm-decode mm-bodies mm-encode mail-parse rfc2231 rfc2047 rfc2045
ietf-drums mm-util mail-prsvr mailabbrev mail-utils gmm-utils mailheader
emacsbug time-date tooltip ediff-hook vc-hooks lisp-float-type mwheel
x-win x-dnd tool-bar dnd fontset image fringe lisp-mode register page
menu-bar rfn-eshadow timer select scroll-bar mouse jit-lock font-lock
syntax facemenu font-core frame cham georgian utf-8-lang misc-lang
vietnamese tibetan thai tai-viet lao korean japanese hebrew greek
romanian slovak czech european ethiopic indian cyrillic chinese
case-table epa-hook jka-cmpr-hook help simple abbrev minibuffer loaddefs
button faces cus-face files text-properties overlay sha1 md5 base64
format env code-pages mule custom widget hashtable-print-readable
backquote make-network-process dbusbind dynamic-setting
system-font-setting font-render-setting move-toolbar gtk x-toolkit x
multi-tty emacs)

bug#10098: 24.0.91; Resizing emacs crashes in adjust_glyph_matrix

[Jan Djärv]

Hello.

The same crash happens with lucid:

 xassert (!row->enabled_p || verify_row_hash (row));

FWIW, row->enabled_p is 1.

	Jan D.

bug#10098: 24.0.91; Resizing emacs crashes in adjust_glyph_matrix

[Eli Zaretskii]

> From: Jan Djärv <jan.h.d@swipnet.se>
> Date: Mon, 21 Nov 2011 19:10:41 +0100
> 
> Just start emacs, grab a corner with the mouse and resize emacs by
> making circles with the mouse.  After a while it crashes.  I have it gdb
> if further info is needed.

Thanks, there's no need to preserve that session, I can easily
reproduce the crash here.

bug#10098: 24.0.91; Resizing emacs crashes in adjust_glyph_matrix

[Eli Zaretskii]

> From: Jan Djärv <jan.h.d@swipnet.se>
> Date: Mon, 21 Nov 2011 19:31:27 +0100
> 
> Hello.
> 
> The same crash happens with lucid:
> 
>  xassert (!row->enabled_p || verify_row_hash (row));
> 
> FWIW, row->enabled_p is 1.

Should be fixed now (revision 106478 on the trunk).