bug#44506: 28.0.50; Segfault on opening a particular message in Gnus in terminal/tty

[Amin Bandali <bandali@gnu.org>]

[-- Attachment #1.1: Type: text/plain, Size: 332 bytes --]

Eli Zaretskii writes:

[...]
>
> So I still think a backtrace from an unoptimized build, where I can
> see the exact locus of the crash and ask for values of some variables,
> would be the fastest path to finding the culprit.
>

Please find attached the result of `bt full' from an unoptimized build.

>
> Thanks.
>

Thanks again.


[-- Attachment #1.2: bt-full-debug.txt --]
[-- Type: text/plain, Size: 8107 bytes --]

#0  0x00005555556be41e in encode_terminal_code (src=0x7ffff7f59400, src_len=1, coding=0x55555615e330) at term.c:564
        cmp = 0x0
        gstring = XIL(0)
        i = 0
        src_end = 0x7ffff7f59430
        buf = 0x555556241720 ' ' <repeats 78 times>, "John ،متسود یسر", '-' <repeats 55 times>, "\377\377\377"
        nchars = 0
        nbytes = 0
        required = 5
        tlen = 0
        tbase = 0x0
        charset_list = XIL(0x7fffea1f684b)
#1  0x00005555556beef1 in tty_write_glyphs (f=0x555556113798, string=0x7ffff7f59400, len=94) at term.c:773
        face_id = 11
        conversion_buffer = 0x555556241b10 ' ' <repeats 78 times>, "John ،متسود یسر", '-' <repeats 55 times>
        coding = 0x55555615e330
        n = 1
        stringlen = 1
        tty = 0x55555615e5a0
#2  0x00005555556c8ca3 in write_glyphs (f=0x555556113798, string=0x7ffff7f58290, len=94) at terminal.c:163
#3  0x00005555555a000c in update_frame_line (f=0x555556113798, vpos=24, updating_menu_p=false) at dispnew.c:5089
        obody = 0x0
        nbody = 0x7ffff7f58290
        op1 = 0x7ffff174d858 <_IO_new_file_sync+184>
        op2 = 0x55555611bd50
        np1 = 0x3d60
        nend = 0x7ffff7f5a000
        tem = 0
        osp = 2
        nsp = 1444253696
        begmatch = 21845
        endmatch = -17056
        olen = 0
        nlen = 94
        current_matrix = 0x55555611bfc0
        desired_matrix = 0x55555611bd50
        current_row = 0x555556125e20
        desired_row = 0x555556123410
        must_write_whole_line_p = true
        write_spaces_p = false
        colored_spaces_p = false
#4  0x000055555559f1fc in update_frame_1 (f=0x555556113798, force_p=true, inhibit_id_p=false, set_cursor_p=true, updating_menu_p=false) at dispnew.c:4787
        current_matrix = 0x55555611bfc0
        desired_matrix = 0x55555611bd50
        i = 24
        pause_p = 85
        preempt_count = 17
#5  0x000055555559b03c in update_frame (f=0x555556113798, force_p=true, inhibit_hairy_id_p=false) at dispnew.c:3246
        paused_p = false
        root_window = 0x555556590430
#6  0x00005555555f72d6 in redisplay_internal () at xdisp.c:16023
        gcscrollbars = true
        f_redisplay_flag = true
        f = 0x555556113798
        w = 0x555556113a00
        sw = 0x555556113a00
        fr = 0x555556113798
        pending = false
        must_finish = true
        match_p = true
        tlbufpos = {
          charpos = 18373,
          bytepos = 18400
        }
        tlendpos = {
          charpos = 850,
          bytepos = 850
        }
        number_of_visible_frames = 1
        count = 3
        sf = 0x555556113798
        polling_stopped_here = true
        tail = XIL(0x555556118ce3)
        frame = XIL(0x55555611379d)
        hscroll_retries = 0
        garbaged_frame_retries = 0
        consider_all_windows_p = true
        update_miniwindow_p = true
#7  0x00005555555f4a20 in redisplay () at xdisp.c:15159
#8  0x0000555555738185 in read_char (commandflag=1, map=XIL(0x555556db2b63), prev_event=XIL(0), used_mouse_menu=0x7fffffffd56d, end_time=0x0) at keyboard.c:2497
        echo_current = false
        c = XIL(0)
        jmpcount = 140737488343824
        local_getcjmp = {{
            __jmpbuf = {0, 0, 0, 93825003909856, 140737488344000, 93824995092361, 140737488344144, 93825003909856},
            __mask_was_saved = 0,
            __saved_mask = {
              __val = {0, 140737488344032, 93824995092445, 140737121655267, 2478421848, 140737488344144, 93824995140529, 93825017785299, 3, 140737488344112, 0, 140737488344144, 938
25003909856, 0, 0, 140737488344144}
            }
          }}
        save_jump = {{
            __jmpbuf = {140737488344176, 0, 140737488344304, 93824994352582, 0, 48, 140737488344656, 35328},
            __mask_was_saved = 35328,
            __saved_mask = {
              __val = {93825003945184, 140737488344256, 93824994326029, 93825017785299, 93825003945184, 35328, 35328, 140737488344288, 0, 0, 93825003909856, 140737488344336, 938249
94182452, 93825004550040, 93825003909856, 0}
            }
          }}
        tem = XIL(0x555556744190)
        save = make_fixnum(23456248737754)
        previous_echo_area_message = XIL(0)
        also_record = XIL(0)
        reread = false
        recorded = false
        polling_stopped_here = false
        orig_kboard = 0x555556160fc0
#9  0x000055555574b8e8 in read_key_sequence (keybuf=0x7fffffffd750, prompt=XIL(0), dont_downcase_last=false, can_return_switch_frame=true, fix_current_buffer=true, prevent_redisplay=false) at keyboard.c:9546
        interrupted_kboard = 0x555556160fc0
        interrupted_frame = 0x555556113798
        key = XIL(0x47c5)
        used_mouse_menu = false
        echo_local_start = 0
        last_real_key_start = 0
        keys_local_start = 0
        new_binding = XIL(0x7fffffffd698)
        count = 3
        t = 0
        echo_start = 0
        keys_start = 0
        current_binding = XIL(0x555556db2b63)
        first_unbound = 31
        mock_input = 0
        used_mouse_menu_history = {false <repeats 30 times>}
        fkey = {
          parent = XIL(0x5555561178a3),
          map = XIL(0x5555561178a3),
          start = 0,
          end = 0
        }
        keytran = {
          parent = XIL(0x7fffea245b23),
          map = XIL(0x7fffea245b23),
          start = 0,
          end = 0
        }
        indec = {
          parent = XIL(0x555556117893),
          map = XIL(0x555556117893),
          start = 0,
          end = 0
        }
        shift_translated = false
        delayed_switch_frame = XIL(0)
        original_uppercase = XIL(0)
        original_uppercase_position = -1
        dummyflag = false
        starting_buffer = 0x555556744190
        fake_prefixed_keys = XIL(0)
        first_event = XIL(0)
        second_event = XIL(0)
#10 0x000055555573447d in command_loop_1 () at keyboard.c:1354
        cmd = XIL(0x92bca0)
        keybuf =
          {make_fixnum(13), make_fixnum(84), XIL(0x55555633fa53), XIL(0), XIL(0), XIL(0x5555560772e0), XIL(0x7fffffffd7b0), XIL(0), XIL(0), XIL(0x5555560772e0), XIL(0x7fffffffd7d0)
, XIL(0x55555580e789), XIL(0x7fffffffd7d0), XIL(0x5555560772e0), XIL(0), XIL(0), XIL(0x7fffffffd7f0), XIL(0x55555580e7dd), XIL(0), XIL(0x5633fa53), XIL(0x7fffffffd830), XIL(0x55555
5813d08), XIL(0x100000000), XIL(0x90), XIL(0), XIL(0x55555615c000), XIL(0x7fffffffd850), make_fixnum(0), XIL(0x7fffffffd860), XIL(0x555555813c11)}
        i = 1
        prev_modiff = 8325
        prev_buffer = 0x555556744190
        already_adjusted = false
#11 0x00005555558137cc in internal_condition_case (bfun=0x555555733fe3 <command_loop_1>, handlers=XIL(0x90), hfun=0x5555557335af <cmd_error>) at eval.c:1359
        val = XIL(0x555556118043)
        c = 0x55555615c000
#12 0x0000555555733bca in command_loop_2 (ignore=XIL(0)) at keyboard.c:1095
        val = make_fixnum(0)
#13 0x0000555555812c26 in internal_catch (tag=XIL(0xd740), func=0x555555733b9d <command_loop_2>, arg=XIL(0)) at eval.c:1120
        val = XIL(0x555555730588)
        c = 0x55555615ced0
#14 0x0000555555733b68 in command_loop () at keyboard.c:1074
#15 0x0000555555733096 in recursive_edit_1 () at keyboard.c:718
        count = 1
        val = XIL(0x7fffffffd990)
#16 0x000055555573328e in Frecursive_edit () at keyboard.c:790
        count = 0
        buffer = XIL(0)
#17 0x000055555572f02b in main (argc=3, argv=0x7fffffffdbb8) at emacs.c:2047
        stack_bottom_variable = 0x20
        no_loadup = false
        junk = 0x0
        dname_arg = 0x0
        ch_to_dir = 0x0
        original_pwd = 0x0
        dump_mode = 0x0
        skip_args = 1
        temacs = 0x0
        attempt_load_pdump = true
        rlim = {
          rlim_cur = 10022912,
          rlim_max = 18446744073709551615
        }
        lc_all = 0x0
        sockfd = -1
        module_assertions = false

Lisp Backtrace:
"redisplay_internal (C function)" (0x0)


[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 857 bytes --]