From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: andrei.elkin@pp.inet.fi Newsgroups: gmane.emacs.bugs Subject: bug#48252: 28.0.50; Emacs crashes while printing an error message Date: Thu, 06 May 2021 18:01:43 +0300 Organization: Home sweet home Message-ID: <874kffewiw.fsf@quad> References: <87pmyeekkq.fsf@quad> <837dkmhavj.fsf@gnu.org> <87wnsma5aw.fsf@quad> <83im46fq68.fsf@gnu.org> <87y2cupcb6.fsf@quad> <837dke49jq.fsf@gnu.org> <87wnsdob3m.fsf@quad> <83o8dp2wba.fsf@gnu.org> <871ralmhw2.fsf@quad> <83r1ikdxly.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="24895"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (gnu/linux) To: 48252@debbugs.gnu.org Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Thu May 06 17:05:17 2021 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lefYy-0006JL-Q3 for geb-bug-gnu-emacs@m.gmane-mx.org; Thu, 06 May 2021 17:05:16 +0200 Original-Received: from localhost ([::1]:42558 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lefYx-0005Ar-Qr for geb-bug-gnu-emacs@m.gmane-mx.org; Thu, 06 May 2021 11:05:15 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:33792) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lefYk-00057Y-6L for bug-gnu-emacs@gnu.org; Thu, 06 May 2021 11:05:02 -0400 Original-Received: from debbugs.gnu.org ([209.51.188.43]:54648) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lefYj-0000ns-QV for bug-gnu-emacs@gnu.org; Thu, 06 May 2021 11:05:01 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1lefYj-0001dF-KM for bug-gnu-emacs@gnu.org; Thu, 06 May 2021 11:05:01 -0400 X-Loop: help-debbugs@gnu.org Resent-From: andrei.elkin@pp.inet.fi Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 06 May 2021 15:05:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 48252 X-GNU-PR-Package: emacs X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Original-Received: via spool by submit@debbugs.gnu.org id=B.16203134466250 (code B ref -1); Thu, 06 May 2021 15:05:01 +0000 Original-Received: (at submit) by debbugs.gnu.org; 6 May 2021 15:04:06 +0000 Original-Received: from localhost ([127.0.0.1]:37957 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lefXp-0001cj-4r for submit@debbugs.gnu.org; Thu, 06 May 2021 11:04:06 -0400 Original-Received: from lists.gnu.org ([209.51.188.17]:41708) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lefXS-0001c6-KD for submit@debbugs.gnu.org; Thu, 06 May 2021 11:03:44 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:33420) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lefXQ-0003ze-PS for bug-gnu-emacs@gnu.org; Thu, 06 May 2021 11:03:42 -0400 Original-Received: from mta-out1.inet.fi ([62.71.2.194]:33812 helo=johanna4.inet.fi) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lefXE-0008Gw-2T; Thu, 06 May 2021 11:03:40 -0400 X-RazorGate-Vade-Verdict: clean 0 X-RazorGate-Vade-Classification: clean X-RazorGate-Vade: gggruggvucftvghtrhhoucdtuddrgeduledrtddtgddutdcutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfupfevtfenuceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmnecujfgurhephffvufhofhffjgfkfgggtgfgsehtqhertddtreejnecuhfhrohhmpegrnhgurhgvihdrvghlkhhinhesphhprdhinhgvthdrfhhinecuggftrfgrthhtvghrnhepveevgfekkeejvdehjeffhfekudeffeffjedtleekudefiefgvdffteefkeefheetnecukfhppeelfedruddtiedrjeekrddvfeeknecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehhvghlohepqhhurggupdhinhgvthepleefrddutdeirdejkedrvdefkedpmhgrihhlfhhrohhmpeeovghlkhhirghnqdefsehmsghogidrihhnvghtrdhfiheqpdhrtghpthhtohepoegsuhhgqdhgnhhuqdgvmhgrtghssehgnhhurdhorhhgqedprhgtphhtthhopeeovghlihiisehgnhhurdhorhhgqe Original-Received: from quad (93.106.78.238) by johanna4.inet.fi (9.0.019.26-1) id 600033A033E8EFCA; Thu, 6 May 2021 18:03:24 +0300 In-Reply-To: <83r1ikdxly.fsf@gnu.org> (Eli Zaretskii's message of "Thu, 06 May 2021 12:23:37 +0300") Received-SPF: pass client-ip=62.71.2.194; envelope-from=andrei.elkin@pp.inet.fi; helo=johanna4.inet.fi X-Spam_score_int: -25 X-Spam_score: -2.6 X-Spam_bar: -- X-Spam_report: (-2.6 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Mailman-Approved-At: Thu, 06 May 2021 11:04:03 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.io gmane.emacs.bugs:205842 Archived-At: Hello. I got a stack similar to one of bug48766 and started discussing it with Eli. Now I am reporting my case and presenting data I collected by Eli's request. I run emacs in gdb and it is used crash clearly when I have lsp-mode on. The last crash with the stack >> Thread 1 "emacs" received signal SIGSEGV, Segmentation fault. >> 0x00005555557e252c in SYMBOL_NAME (sym=3DXIL(0x555576f260a0)) at lisp.= h:2208 >> 2208 return XSYMBOL (sym)->u.s.name; >> (gdb) bt >> #0 0x00005555557e252c in SYMBOL_NAME (sym=3DXIL(0x555576f260a0)) at l= isp.h:2208 >> #1 0x00005555557eafd0 in print_object (obj=3DXIL(0x555576f260a0), >> printcharfun=3DXIL(0x30), escapeflag=3Dtrue) at print.c:2072 >> #2 0x00005555557e81c5 in print (obj=3DXIL(0x555576f260a0), >> printcharfun=3DXIL(0x30), escapeflag=3Dtrue) at print.c:1145 >> #3 0x00005555557e59ed in Fprin1 (object=3DXIL(0x555576f260a0), >> printcharfun=3DXIL(0x30)) at print.c:651 >> #4 0x00005555557e7c45 in print_error_message >> (data=3DXIL(0x5555707ca923), stream=3DXIL(0x30), context=3D0x7fffea402= 143 >> "", caller=3DXIL(0x74d0)) at print.c:977 >> #5 0x00005555556f9ba9 in Fcommand_error_default_function >> (data=3DXIL(0x5555707ca923), context=3DXIL(0x7fffe9d11524), >> signal=3DXIL(0x74d0)) at keyboard.c:1032 >> #6 0x00005555557bb5a4 in funcall_subr (subr=3D0x555555e6c5a0 >> , numargs=3D3, args=3D0x7fffffffb5d8) >> at eval.c:3116 >> #7 0x00005555557bb0f6 in Ffuncall (nargs=3D4, args=3D0x7fffffffb5d0) = at eval.c:3036 >> #8 0x00005555557ba356 in Fapply (nargs=3D2, args=3D0x7fffffffb7a8) at= eval.c:2666 >> #9 0x00005555557bb452 in funcall_subr (subr=3D0x555555e74420 , >> numargs=3D2, args=3D0x7fffffffb7a8) at eval.c:3091 >> #10 0x00005555557bb0f6 in Ffuncall (nargs=3D3, args=3D0x7fffffffb7a0) = at eval.c:3036 >> #11 0x000055555580ac6d in exec_byte_code >> (bytestr=3DXIL(0x7fffe9d2d374), vector=3DXIL(0x7fffea3bf50d), >> maxdepth=3Dmake_fixnum(5), args_template=3Dmake_fixnum(128), nargs=3D3, >> args=3D0x7fffffffbc78) at bytecode.c:632 >> #12 0x00005555557bb80b in fetch_and_exec_byte_code >> (fun=3DXIL(0x7fffea3bf4dd), syms_left=3Dmake_fixnum(128), nargs=3D3, >> args=3D0x7fffffffbc78) at eval.c:3160 >> #13 0x00005555557bbbbb in funcall_lambda (fun=3DXIL(0x7fffea3bf4dd), >> nargs=3D3, arg_vector=3D0x7fffffffbc78) at eval.c:3241 >> #14 0x00005555557bb14a in Ffuncall (nargs=3D4, args=3D0x7fffffffbc70) = at eval.c:3040 >> #15 0x00005555557baa4e in call3 (fn=3DXIL(0x7fffea3bf4dd), >> arg1=3DXIL(0x5555707ca923), arg2=3DXIL(0x7fffe9d11524), >> arg3=3DXIL(0x74d0)) at eval.c:2910 >> #16 0x00005555556f9a33 in cmd_error_internal >> (data=3DXIL(0x5555707ca923), context=3D0x7fffffffbd10 "") at >> keyboard.c:987 >> #17 0x00005555556f991e in cmd_error (data=3DXIL(0x5555707ca923)) at ke= yboard.c:956 >> #18 0x00005555557b73c0 in internal_condition_case >> (bfun=3D0x5555556fa049 , handlers=3DXIL(0x90), >> hfun=3D0x5555556f979a ) at eval.c:1471 >> #19 0x00005555556f9d0e in command_loop_2 (ignore=3DXIL(0)) at keyboard= .c:1094 >> #20 0x00005555557b6a22 in internal_catch (tag=3DXIL(0x61e0), >> func=3D0x5555556f9ce1 , arg=3DXIL(0)) at eval.c:1198 >> #21 0x00005555556f9c3c in command_loop () at keyboard.c:1065 >> #22 0x00005555556f9369 in recursive_edit_1 () at keyboard.c:720 >> #23 0x000055555574234d in read_minibuf (map=3DXIL(0x7fffe9d1620b), >> initial=3DXIL(0), prompt=3DXIL(0x55557cb10434), expflag=3Dfalse, >> histvar=3DXIL(0x2aaa93f69bb8), histpos=3Dmake_fixnum(0), >> defalt=3DXIL(0x55558dcc1244), allow_props=3Dfalse, >> inherit_input_method=3Dtrue) at minibuf.c:870 >> #24 0x000055555574354f in Fread_from_minibuffer >> (prompt=3DXIL(0x55557cb10434), initial_contents=3DXIL(0), >> keymap=3DXIL(0x7fffe9d1620b), read=3DXIL(0), hist=3DXIL(0x2aaa93f69bb8= ), >> default_value=3DXIL(0x55558dcc1244), inherit_input_method=3DXIL(0x30)) >> at minibuf.c:1318 >> #25 0x00005555557bb6d7 in funcall_subr (subr=3D0x555555e6e7a0 >> , numargs=3D7, args=3D0x7fffffffc1e0) at >> eval.c:3131 >> #26 0x00005555557bb0f6 in Ffuncall (nargs=3D8, args=3D0x7fffffffc1d8) = at eval.c:3036 >> #27 0x000055555580ac6d in exec_byte_code >> (bytestr=3DXIL(0x7fffe9e9b0a4), vector=3DXIL(0x7fffe9e98505), >> maxdepth=3Dmake_fixnum(12), args_template=3Dmake_fixnum(771), nargs=3D= 3, >> args=3D0x7fffffffc720) at bytecode.c:632 >> #28 0x00005555557bb80b in fetch_and_exec_byte_code >> (fun=3DXIL(0x7fffe9e984d5), syms_left=3Dmake_fixnum(771), nargs=3D3, >> args=3D0x7fffffffc708) at eval.c:3160 >> #29 0x00005555557bbbbb in funcall_lambda (fun=3DXIL(0x7fffe9e984d5), >> nargs=3D3, arg_vector=3D0x7fffffffc708) at eval.c:3241 >> #30 0x00005555557bb14a in Ffuncall (nargs=3D4, args=3D0x7fffffffc700) = at eval.c:3040 >> #31 0x000055555580ac6d in exec_byte_code >> (bytestr=3DXIL(0x7fffe9ea198c), vector=3DXIL(0x7fffe9e9f9ed), >> maxdepth=3Dmake_fixnum(12), args_template=3Dmake_fixnum(770), nargs=3D= 2, >> args=3D0x7fffffffcc30) at bytecode.c:632 >> #32 0x00005555557bb80b in fetch_and_exec_byte_code >> (fun=3DXIL(0x7fffe9e9f9bd), syms_left=3Dmake_fixnum(770), nargs=3D2, >> args=3D0x7fffffffcc20) at eval.c:3160 >> #33 0x00005555557bbbbb in funcall_lambda (fun=3DXIL(0x7fffe9e9f9bd), >> nargs=3D2, arg_vector=3D0x7fffffffcc20) at eval.c:3241 >> #34 0x00005555557bb14a in Ffuncall (nargs=3D3, args=3D0x7fffffffcc18) = at eval.c:3040 >> #35 0x000055555580ac6d in exec_byte_code >> (bytestr=3DXIL(0x7fffe9ea19cc), vector=3DXIL(0x7fffe9e9f8ed), >> maxdepth=3Dmake_fixnum(8), args_template=3DXIL(0), nargs=3D0, args=3D0= x0) at >> bytecode.c:632 >> #36 0x0000555555809fbc in Fbyte_code (bytestr=3DXIL(0x7fffe9ea19cc), >> vector=3DXIL(0x7fffe9e9f8ed), maxdepth=3Dmake_fixnum(8)) at >> bytecode.c:334 >> #37 0x00005555557b9ab5 in eval_sub (form=3DXIL(0x7fffe9e9f8bb)) at eva= l.c:2517 >> #38 0x00005555557b9062 in Feval (form=3DXIL(0x7fffe9e9f8bb), lexical= =3DXIL(0)) at eval.c:2340 >> #39 0x00005555557b19c3 in Fcall_interactively >> (function=3DXIL(0x2aaa93fb8c70), record_flag=3DXIL(0), >> keys=3DXIL(0x55557d470145)) at callint.c:334 >> #40 0x00005555557bb5a4 in funcall_subr (subr=3D0x555555e73c60 >> , numargs=3D3, args=3D0x7fffffffd500) at >> eval.c:3116 >> #41 0x00005555557bb0f6 in Ffuncall (nargs=3D4, args=3D0x7fffffffd4f8) = at eval.c:3036 >> #42 0x000055555580ac6d in exec_byte_code >> (bytestr=3DXIL(0x7fffe9de36a4), vector=3DXIL(0x7fffe9de330d), >> maxdepth=3Dmake_fixnum(13), args_template=3Dmake_fixnum(1025), nargs= =3D1, >> args=3D0x7fffffffda60) at bytecode.c:632 >> #43 0x00005555557bb80b in fetch_and_exec_byte_code >> (fun=3DXIL(0x7fffe9de32dd), syms_left=3Dmake_fixnum(1025), nargs=3D1, >> args=3D0x7fffffffda58) at eval.c:3160 >> #44 0x00005555557bbbbb in funcall_lambda (fun=3DXIL(0x7fffe9de32dd), >> nargs=3D1, arg_vector=3D0x7fffffffda58) at eval.c:3241 >> #45 0x00005555557bb14a in Ffuncall (nargs=3D2, args=3D0x7fffffffda50) = at eval.c:3040 >> #46 0x00005555557ba97e in call1 (fn=3DXIL(0x4560), arg1=3DXIL(0x2aaa93= fb8c70)) at eval.c:2896 >> #47 0x00005555556fa897 in command_loop_1 () at keyboard.c:1466 >> #48 0x00005555557b73c8 in internal_condition_case >> (bfun=3D0x5555556fa049 , handlers=3DXIL(0x90), >> hfun=3D0x5555556f979a ) at eval.c:1475 >> #49 0x00005555556f9d0e in command_loop_2 (ignore=3DXIL(0)) at keyboard= .c:1094 >> #50 0x00005555557b6a22 in internal_catch (tag=3DXIL(0xe4c0), >> func=3D0x5555556f9ce1 , arg=3DXIL(0)) at eval.c:1198 >> #51 0x00005555556f9cac in command_loop () at keyboard.c:1073 >> #52 0x00005555556f9369 in recursive_edit_1 () at keyboard.c:720 >> #53 0x00005555556f94ed in Frecursive_edit () at keyboard.c:789 >> #54 0x00005555556f5ce2 in main (argc=3D2, argv=3D0x7fffffffdf48) at em= acs.c:2297 I received at time I commanded query-replace in the command line. Then I run few gdb commands by Eli's request to collect the following: Eli Zaretskii writes: >> From: andrei.elkin@pp.inet.fi >> Date: Wed, 05 May 2021 16:26:05 +0300 >>=20 >> If I grasped the idea right (I had to `p "$xcdr-result"` at two point be= low) >> `data` looks to be a list of three: >>=20 >>=20 >> (gdb) p data >> $46 =3D XIL(0x5555707ca923) >> (gdb) xcar >> $47 =3D 0xfd50 >> (gdb) xtype >> Lisp_Symbol >> (gdb) xsymbol >> $48 =3D (struct Lisp_Symbol *) 0x555555ef6810 >> "wrong-type-argument" >>=20 >> (gdb) p data >> $50 =3D XIL(0x5555707ca923) >> (gdb) xcdr >> $51 =3D 0x5555707ca953 >> (gdb) xtype >> Lisp_Cons >>=20 >>=20 >> (gdb) xcar >> $52 =3D 0x9990 >> (gdb) xtype >> Lisp_Symbol >> (gdb) xsymbol >> $53 =3D (struct Lisp_Symbol *) 0x555555ef0450 >> "listp" >> (gdb) p $51 >> $54 =3D XIL(0x5555707ca953) >> (gdb) xcdr >> $55 =3D 0x5555707ca983 >> (gdb) xtype >> Lisp_Cons >>=20 >>=20 >> (gdb) xcar >> $56 =3D 0x555576f260a0 >> (gdb) xtype >> Lisp_Symbol >> (gdb) xsymbol >> $57 =3D (struct Lisp_Symbol *) 0xaaaacce0cb60 >> Cannot access memory at address 0xaaaacce0cb68 >> (gdb) p $55 >> $58 =3D XIL(0x5555707ca983) >> (gdb) xcdr >> $59 =3D 0x0 At this point Eli came up with next set of instructions: > > Thanks. Unfortunately, this is not helpful enough. All it says is > that Emacs tried to display an error message about some object not > being a list, where the offending object is actually an invalid Lisp > object. And the Lisp backtrace strangely omits several call frames > that I'd expect to see, based on the C backtrace, which also doesn't > help. > > Can you please go to the C call-stack frames displayed by GDB, and > manually show the Lisp functions called there? Given the backtrace I > reproduce below, I'd be interested in frames 15, 10, and 7, with the > following commands: > > (gdb) fr 15 #15 0x00005555557baa4e in call3 (fn=3DXIL(0x7fffea3bf4dd), arg1=3DXIL(0x555= 5707ca923), arg2=3DXIL(0x7fffe9d11524), arg3=3DXIL(0x74d0)) at eval.c:2910 2910 return CALLN (Ffuncall, fn, arg1, arg2, arg3); > (gdb) pp fn #[128 "=EF=BF=BD=EF=BF=BD\"=EF=BF=BD=EF=BF=BD\"=EF=BF=BD=EF=BF=BD" [apply h= elp-command-error-confusable-suggestions command-error-default-function nil= ] 5 nil] > (gdb) pp arg2 "" > (gdb) pp arg3 funcall-interactively > (gdb) fr 10 > (gdb) p nargs > (gdb) p args[0] > (gdb) xtype > (gdb) xSOMETHING > (gdb) p args[1] > (gdb) xtype > (gdb) xSOMETHING > (gdb) p args[2] > (gdb) xtype > (gdb) xSOMETHING For the frame 10 this produced for me a list form of (;; $65 (;; $66 (;; $70 "$72" (;; $74 "Cannot access memory at address 0xaaaacce0cb68" . nil) (;; $80 "$82" . nil)) (;; $87 "$89" (;; $91 "$93" . nil))) (;; $97 "$99" ($101 "$103" . nil))) where `;; $nn` identifies conses, and "$93" - atoms, the log is below: (gdb) fr 10 #10 0x00005555557bb0f6 in Ffuncall (nargs=3D3, args=3D0x7fffffffb7a0) at ev= al.c:3036 3036 val =3D funcall_subr (XSUBR (fun), numargs, args + 1); (gdb) p nargs=20 $60 =3D 3 (gdb) p args[0] $61 =3D XIL(0x2d60) (gdb) xtype=20 Lisp_Symbol (gdb) xsymbol $62 =3D (struct Lisp_Symbol *) 0x555555ee9820 "apply" (gdb) p args[1] $63 =3D XIL(0x2aaa943e6968) (gdb) xtype Lisp_Symbol (gdb) xsymbol $64 =3D (struct Lisp_Symbol *) 0x7fffea2cd428 "command-error-default-function" (gdb) p args[2] $65 =3D XIL(0x5555707ca8f3) (gdb) xtype=20 Lisp_Cons (gdb) xcar=20 $66 =3D 0x5555707ca923 (gdb) xtyp Lisp_Cons (gdb) xcar=20 $67 =3D 0xfd50 (gdb) xtyp Lisp_Symbol (gdb) xsymbol=20 $68 =3D (struct Lisp_Symbol *) 0x555555ef6810 "wrong-type-argument" (gdb) p $66 $69 =3D XIL(0x5555707ca923) (gdb) xcdr=20 $70 =3D 0x5555707ca953 (gdb) xtype=20 Lisp_Cons (gdb) xcar=20 $71 =3D 0x9990 (gdb) xtype=20 Lisp_Symbol (gdb) xsymbol=20 $72 =3D (struct Lisp_Symbol *) 0x555555ef0450 "listp" (gdb) p $70 $73 =3D XIL(0x5555707ca953) (gdb) xcdr=20 $74 =3D 0x5555707ca983 (gdb) xtype=20 Lisp_Cons (gdb) xcar=20 $75 =3D 0x555576f260a0 (gdb) xtype=20 Lisp_Symbol (gdb) xsymbol=20 $76 =3D (struct Lisp_Symbol *) 0xaaaacce0cb60 Cannot access memory at address 0xaaaacce0cb68 (gdb) p $74 $77 =3D XIL(0x5555707ca983) (gdb) xcdr=20 $78 =3D 0x0 (gdb) p $70 $79 =3D XIL(0x5555707ca953) (gdb) xcdr=20 $80 =3D 0x5555707ca983 (gdb) xtype=20 Lisp_Cons (gdb) xcar=20 $81 =3D 0x555576f260a0 (gdb) xtype=20 Lisp_Symbol (gdb) xsymbol=20 $82 =3D (struct Lisp_Symbol *) 0xaaaacce0cb60 Cannot access memory at address 0xaaaacce0cb68 (gdb) p $79 $83 =3D XIL(0x5555707ca953) (gdb) p $80 $84 =3D XIL(0x5555707ca983) (gdb) xcdr=20 $85 =3D 0x0 (gdb) p $66 $86 =3D XIL(0x5555707ca923) (gdb) xtype=20 Lisp_Cons (gdb) xcdr=20 $87 =3D 0x5555707ca953 (gdb) xtype=20 Lisp_Cons (gdb) xcar=20 $88 =3D 0x9990 (gdb) xtype=20 Lisp_Symbol (gdb) xsymbol=20 $89 =3D (struct Lisp_Symbol *) 0x555555ef0450 "listp" (gdb) p $87 $90 =3D XIL(0x5555707ca953) (gdb) xcdr=20 $91 =3D 0x5555707ca983 (gdb) xtype=20 Lisp_Cons (gdb) xcar=20 $92 =3D 0x555576f260a0 (gdb) xtype=20 Lisp_Symbol (gdb) xsymbol=20 $93 =3D (struct Lisp_Symbol *) 0xaaaacce0cb60 Cannot access memory at address 0xaaaacce0cb68 (gdb) p $91 $94 =3D XIL(0x5555707ca983) (gdb) xcdr=20 $95 =3D 0x0 (gdb) p $65 $96 =3D XIL(0x5555707ca8f3) (gdb) xcdr=20 $97 =3D 0x5555707ca903 (gdb) xtype=20 Lisp_Cons (gdb) xcar=20 $98 =3D 0x7fffe9d11524 (gdb) xtype=20 Lisp_String (gdb) xstring $99 =3D (struct Lisp_String *) 0x7fffe9d11520 "" (gdb) p $97 $100 =3D XIL(0x5555707ca903) (gdb) xcdr=20 $101 =3D 0x5555707ca913 (gdb) xtype Lisp_Cons (gdb) xcar=20 $102 =3D 0x74d0 (gdb) xtype=20 Lisp_Symbol (gdb) xsymbol=20 $103 =3D (struct Lisp_Symbol *) 0x555555eedf90 "funcall-interactively" (gdb) p $101 $104 =3D XIL(0x5555707ca913) (gdb) xcdr=20 $105 =3D 0x0 > (gdb) fr 7 > (gdb) p args[0] > (gdb) xtype > (gdb) xSOMETHING > (gdb) p args[1] > (gdb) xtype > (gdb) xSOMETHING > (gdb) p args[2] > (gdb) xtype > (gdb) xSOMETHING > (gdb) p args[3] > (gdb) xtype > (gdb) xSOMETHING (gdb) fr 7 #7 0x00005555557bb0f6 in Ffuncall (nargs=3D4, args=3D0x7fffffffb5d0) at ev= al.c:3036 3036 val =3D funcall_subr (XSUBR (fun), numargs, args + 1); (gdb) p args[0] $106 =3D XIL(0x2aaa943e6968) (gdb) xtype=20 Lisp_Symbol (gdb) xsymbol=20 $107 =3D (struct Lisp_Symbol *) 0x7fffea2cd428 "command-error-default-function" And for the frame 7'th arg[1] (;; $108 "$110" (;; $112 "$114" (;; $116 "$118" . nil))) here is the rest of the log: (gdb) p args[1] $108 =3D XIL(0x5555707ca923) (gdb) xtype=20 Lisp_Cons (gdb) xcar=20 $109 =3D 0xfd50 (gdb) xtype=20 Lisp_Symbol (gdb) xsymbol=20 $110 =3D (struct Lisp_Symbol *) 0x555555ef6810 "wrong-type-argument" (gdb) p $108 $111 =3D XIL(0x5555707ca923) (gdb) xcdr=20 $112 =3D 0x5555707ca953 (gdb) xtype=20 Lisp_Cons (gdb) xcar=20 $113 =3D 0x9990 (gdb) xtype=20 Lisp_Symbol (gdb) xsymbol=20 $114 =3D (struct Lisp_Symbol *) 0x555555ef0450 "listp" (gdb) p $112 $115 =3D XIL(0x5555707ca953) (gdb) xcdr=20 $116 =3D 0x5555707ca983 (gdb) xtype=20 Lisp_Cons (gdb) xcar=20 $117 =3D 0x555576f260a0 (gdb) xtype=20 Lisp_Symbol (gdb) xsymbol=20 $118 =3D (struct Lisp_Symbol *) 0xaaaacce0cb60 Cannot access memory at address 0xaaaacce0cb68 (gdb) p $116 $119 =3D XIL(0x5555707ca983) (gdb) xcdr=20 $120 =3D 0x0 (gdb) p args[2] $121 =3D XIL(0x7fffe9d11524) (gdb) xtype=20 Lisp_String (gdb) xstring=20 $122 =3D (struct Lisp_String *) 0x7fffe9d11520 "" (gdb) p args[3] $123 =3D XIL(0x74d0) (gdb) xtype=20 Lisp_Symbol (gdb) xsymbol=20 $124 =3D (struct Lisp_Symbol *) 0x555555eedf90 "funcall-interactively" (gdb) fr 15 #15 0x00005555557baa4e in call3 (fn=3DXIL(0x7fffea3bf4dd), arg1=3DXIL(0x555= 5707ca923), arg2=3DXIL(0x7fffe9d11524), arg3=3DXIL(0x74d0)) at eval.c:2910 2910 return CALLN (Ffuncall, fn, arg1, arg2, arg3); (gdb) pp fn #[128 "=EF=BF=BD=EF=BF=BD\"=EF=BF=BD=EF=BF=BD\"=EF=BF=BD=EF=BF=BD" [apply h= elp-command-error-confusable-suggestions command-error-default-function nil= ] 5 nil] (gdb) pp arg2 "" (gdb) pp arg3 funcall-interactively > > where xSOMETHING means some "x" command according to what "xtype" > says. As a final remark in the report, I somewhat suspect the whole thing relates to lsp-completion-enable-additional-text-edit and I've turned it to nil in the currently running emacs session. If I won't see crashes within few days, that would put a heavy blame onto it :-). The crashed emacs gdb session is around as well as myself all time if any i= nterests from the maintainers arise. Thank you, dear colleagues! /ndrei > >> >> Lisp Backtrace: >> >> "command-error-default-function" (0xffffb5d8) >> >> "apply" (0xffffb7a8) >> >> 0xea3bf4d8 PVEC_COMPILED >> >> "read-from-minibuffer" (0xffffc1e0) >> >> "query-replace-read-to" (0xffffc708) >> >> "query-replace-read-args" (0xffffcc20) >> >> "byte-code" (0xffffd0d0) >> >> "call-interactively" (0xffffd500) >> >> "command-execute" (0xffffda58) >> > >> > According to this, the command which triggered the problem was >> > something about query-replace, not related to subprocesses. So this >> > is a different bug, like I assumed. >>=20 >> It was query-replace, I also remember that. There might be two >> background activities at that moment: autosaving and lsp's >>=20 >> lsp-completion-enable-additional-text-edit related >>=20 >> work (to fix my buffer's white spaces that I found out after restart [in >> another gdb session]). > > Maybe the information I requested above will provide some hints. > > If even that doesn't help, I'm afraid the only way forward would be to > provide a recipe for reproducing the problem, or maybe you could > pinpoint the top-level function call that injects an invalid Lisp > object. > > And it's no longer a good idea for us to continue discussing this in > private, so I'm redirecting this to the bug tracker, and appending > below the last backtrace you sent. > >> Thread 1 "emacs" received signal SIGSEGV, Segmentation fault. >> 0x00005555557e252c in SYMBOL_NAME (sym=3DXIL(0x555576f260a0)) at lisp.h:= 2208 >> 2208 return XSYMBOL (sym)->u.s.name; >> (gdb) bt >> #0 0x00005555557e252c in SYMBOL_NAME (sym=3DXIL(0x555576f260a0)) at lis= p.h:2208 >> #1 0x00005555557eafd0 in print_object (obj=3DXIL(0x555576f260a0), >> printcharfun=3DXIL(0x30), escapeflag=3Dtrue) at print.c:2072 >> #2 0x00005555557e81c5 in print (obj=3DXIL(0x555576f260a0), >> printcharfun=3DXIL(0x30), escapeflag=3Dtrue) at print.c:1145 >> #3 0x00005555557e59ed in Fprin1 (object=3DXIL(0x555576f260a0), >> printcharfun=3DXIL(0x30)) at print.c:651 >> #4 0x00005555557e7c45 in print_error_message >> (data=3DXIL(0x5555707ca923), stream=3DXIL(0x30), context=3D0x7fffea402143 >> "", caller=3DXIL(0x74d0)) at print.c:977 >> #5 0x00005555556f9ba9 in Fcommand_error_default_function >> (data=3DXIL(0x5555707ca923), context=3DXIL(0x7fffe9d11524), >> signal=3DXIL(0x74d0)) at keyboard.c:1032 >> #6 0x00005555557bb5a4 in funcall_subr (subr=3D0x555555e6c5a0 >> , numargs=3D3, args=3D0x7fffffffb5d8) >> at eval.c:3116 >> #7 0x00005555557bb0f6 in Ffuncall (nargs=3D4, args=3D0x7fffffffb5d0) at= eval.c:3036 >> #8 0x00005555557ba356 in Fapply (nargs=3D2, args=3D0x7fffffffb7a8) at e= val.c:2666 >> #9 0x00005555557bb452 in funcall_subr (subr=3D0x555555e74420 , >> numargs=3D2, args=3D0x7fffffffb7a8) at eval.c:3091 >> #10 0x00005555557bb0f6 in Ffuncall (nargs=3D3, args=3D0x7fffffffb7a0) at= eval.c:3036 >> #11 0x000055555580ac6d in exec_byte_code >> (bytestr=3DXIL(0x7fffe9d2d374), vector=3DXIL(0x7fffea3bf50d), >> maxdepth=3Dmake_fixnum(5), args_template=3Dmake_fixnum(128), nargs=3D3, >> args=3D0x7fffffffbc78) at bytecode.c:632 >> #12 0x00005555557bb80b in fetch_and_exec_byte_code >> (fun=3DXIL(0x7fffea3bf4dd), syms_left=3Dmake_fixnum(128), nargs=3D3, >> args=3D0x7fffffffbc78) at eval.c:3160 >> #13 0x00005555557bbbbb in funcall_lambda (fun=3DXIL(0x7fffea3bf4dd), >> nargs=3D3, arg_vector=3D0x7fffffffbc78) at eval.c:3241 >> #14 0x00005555557bb14a in Ffuncall (nargs=3D4, args=3D0x7fffffffbc70) at= eval.c:3040 >> #15 0x00005555557baa4e in call3 (fn=3DXIL(0x7fffea3bf4dd), >> arg1=3DXIL(0x5555707ca923), arg2=3DXIL(0x7fffe9d11524), >> arg3=3DXIL(0x74d0)) at eval.c:2910 >> #16 0x00005555556f9a33 in cmd_error_internal >> (data=3DXIL(0x5555707ca923), context=3D0x7fffffffbd10 "") at >> keyboard.c:987 >> #17 0x00005555556f991e in cmd_error (data=3DXIL(0x5555707ca923)) at keyb= oard.c:956 >> #18 0x00005555557b73c0 in internal_condition_case >> (bfun=3D0x5555556fa049 , handlers=3DXIL(0x90), >> hfun=3D0x5555556f979a ) at eval.c:1471 >> #19 0x00005555556f9d0e in command_loop_2 (ignore=3DXIL(0)) at keyboard.c= :1094 >> #20 0x00005555557b6a22 in internal_catch (tag=3DXIL(0x61e0), >> func=3D0x5555556f9ce1 , arg=3DXIL(0)) at eval.c:1198 >> #21 0x00005555556f9c3c in command_loop () at keyboard.c:1065 >> #22 0x00005555556f9369 in recursive_edit_1 () at keyboard.c:720 >> #23 0x000055555574234d in read_minibuf (map=3DXIL(0x7fffe9d1620b), >> initial=3DXIL(0), prompt=3DXIL(0x55557cb10434), expflag=3Dfalse, >> histvar=3DXIL(0x2aaa93f69bb8), histpos=3Dmake_fixnum(0), >> defalt=3DXIL(0x55558dcc1244), allow_props=3Dfalse, >> inherit_input_method=3Dtrue) at minibuf.c:870 >> #24 0x000055555574354f in Fread_from_minibuffer >> (prompt=3DXIL(0x55557cb10434), initial_contents=3DXIL(0), >> keymap=3DXIL(0x7fffe9d1620b), read=3DXIL(0), hist=3DXIL(0x2aaa93f69bb8), >> default_value=3DXIL(0x55558dcc1244), inherit_input_method=3DXIL(0x30)) >> at minibuf.c:1318 >> #25 0x00005555557bb6d7 in funcall_subr (subr=3D0x555555e6e7a0 >> , numargs=3D7, args=3D0x7fffffffc1e0) at >> eval.c:3131 >> #26 0x00005555557bb0f6 in Ffuncall (nargs=3D8, args=3D0x7fffffffc1d8) at= eval.c:3036 >> #27 0x000055555580ac6d in exec_byte_code >> (bytestr=3DXIL(0x7fffe9e9b0a4), vector=3DXIL(0x7fffe9e98505), >> maxdepth=3Dmake_fixnum(12), args_template=3Dmake_fixnum(771), nargs=3D3, >> args=3D0x7fffffffc720) at bytecode.c:632 >> #28 0x00005555557bb80b in fetch_and_exec_byte_code >> (fun=3DXIL(0x7fffe9e984d5), syms_left=3Dmake_fixnum(771), nargs=3D3, >> args=3D0x7fffffffc708) at eval.c:3160 >> #29 0x00005555557bbbbb in funcall_lambda (fun=3DXIL(0x7fffe9e984d5), >> nargs=3D3, arg_vector=3D0x7fffffffc708) at eval.c:3241 >> #30 0x00005555557bb14a in Ffuncall (nargs=3D4, args=3D0x7fffffffc700) at= eval.c:3040 >> #31 0x000055555580ac6d in exec_byte_code >> (bytestr=3DXIL(0x7fffe9ea198c), vector=3DXIL(0x7fffe9e9f9ed), >> maxdepth=3Dmake_fixnum(12), args_template=3Dmake_fixnum(770), nargs=3D2, >> args=3D0x7fffffffcc30) at bytecode.c:632 >> #32 0x00005555557bb80b in fetch_and_exec_byte_code >> (fun=3DXIL(0x7fffe9e9f9bd), syms_left=3Dmake_fixnum(770), nargs=3D2, >> args=3D0x7fffffffcc20) at eval.c:3160 >> #33 0x00005555557bbbbb in funcall_lambda (fun=3DXIL(0x7fffe9e9f9bd), >> nargs=3D2, arg_vector=3D0x7fffffffcc20) at eval.c:3241 >> #34 0x00005555557bb14a in Ffuncall (nargs=3D3, args=3D0x7fffffffcc18) at= eval.c:3040 >> #35 0x000055555580ac6d in exec_byte_code >> (bytestr=3DXIL(0x7fffe9ea19cc), vector=3DXIL(0x7fffe9e9f8ed), >> maxdepth=3Dmake_fixnum(8), args_template=3DXIL(0), nargs=3D0, args=3D0x0= ) at >> bytecode.c:632 >> #36 0x0000555555809fbc in Fbyte_code (bytestr=3DXIL(0x7fffe9ea19cc), >> vector=3DXIL(0x7fffe9e9f8ed), maxdepth=3Dmake_fixnum(8)) at >> bytecode.c:334 >> #37 0x00005555557b9ab5 in eval_sub (form=3DXIL(0x7fffe9e9f8bb)) at eval.= c:2517 >> #38 0x00005555557b9062 in Feval (form=3DXIL(0x7fffe9e9f8bb), lexical=3DX= IL(0)) at eval.c:2340 >> #39 0x00005555557b19c3 in Fcall_interactively >> (function=3DXIL(0x2aaa93fb8c70), record_flag=3DXIL(0), >> keys=3DXIL(0x55557d470145)) at callint.c:334 >> #40 0x00005555557bb5a4 in funcall_subr (subr=3D0x555555e73c60 >> , numargs=3D3, args=3D0x7fffffffd500) at >> eval.c:3116 >> #41 0x00005555557bb0f6 in Ffuncall (nargs=3D4, args=3D0x7fffffffd4f8) at= eval.c:3036 >> #42 0x000055555580ac6d in exec_byte_code >> (bytestr=3DXIL(0x7fffe9de36a4), vector=3DXIL(0x7fffe9de330d), >> maxdepth=3Dmake_fixnum(13), args_template=3Dmake_fixnum(1025), nargs=3D1, >> args=3D0x7fffffffda60) at bytecode.c:632 >> #43 0x00005555557bb80b in fetch_and_exec_byte_code >> (fun=3DXIL(0x7fffe9de32dd), syms_left=3Dmake_fixnum(1025), nargs=3D1, >> args=3D0x7fffffffda58) at eval.c:3160 >> #44 0x00005555557bbbbb in funcall_lambda (fun=3DXIL(0x7fffe9de32dd), >> nargs=3D1, arg_vector=3D0x7fffffffda58) at eval.c:3241 >> #45 0x00005555557bb14a in Ffuncall (nargs=3D2, args=3D0x7fffffffda50) at= eval.c:3040 >> #46 0x00005555557ba97e in call1 (fn=3DXIL(0x4560), arg1=3DXIL(0x2aaa93fb= 8c70)) at eval.c:2896 >> #47 0x00005555556fa897 in command_loop_1 () at keyboard.c:1466 >> #48 0x00005555557b73c8 in internal_condition_case >> (bfun=3D0x5555556fa049 , handlers=3DXIL(0x90), >> hfun=3D0x5555556f979a ) at eval.c:1475 >> #49 0x00005555556f9d0e in command_loop_2 (ignore=3DXIL(0)) at keyboard.c= :1094 >> #50 0x00005555557b6a22 in internal_catch (tag=3DXIL(0xe4c0), >> func=3D0x5555556f9ce1 , arg=3DXIL(0)) at eval.c:1198 >> #51 0x00005555556f9cac in command_loop () at keyboard.c:1073 >> #52 0x00005555556f9369 in recursive_edit_1 () at keyboard.c:720 >> #53 0x00005555556f94ed in Frecursive_edit () at keyboard.c:789 >> #54 0x00005555556f5ce2 in main (argc=3D2, argv=3D0x7fffffffdf48) at emac= s.c:2297 >>=20 >> Lisp Backtrace: >> "command-error-default-function" (0xffffb5d8) >> "apply" (0xffffb7a8) >> 0xea3bf4d8 PVEC_COMPILED >> "read-from-minibuffer" (0xffffc1e0) >> "query-replace-read-to" (0xffffc708) >> "query-replace-read-args" (0xffffcc20) >> "byte-code" (0xffffd0d0) >> "call-interactively" (0xffffd500) >> "command-execute" (0xffffda58) > > Thanks.