bug#16685: Emacs crash when interacting with newsticker

bug#16685: Emacs crash when interacting with newsticker

[E Sabof]

I get this each time I interact with newsticker long enough. Given the amount of customzations I've put on this mode, I don't guarantee that it's easily reproducible. Find the gdb backtrace below.

Evgeni

Program received signal SIGSEGV, Segmentation fault.
0x000000000053ceba in cleanup_vector (vector=0x52cf498) at alloc.c:2909
2909	      ((struct font *) vector)->driver->close ((struct font *) vector);
(gdb) backtrace
#0  0x000000000053ceba in cleanup_vector (vector=0x52cf498) at alloc.c:2909
#1  cleanup_vector (vector=0x52cf498) at alloc.c:2901
#2  0x0000000000541e5d in sweep_vectors () at alloc.c:2947
#3  gc_sweep () at alloc.c:6649
#4  Fgarbage_collect () at alloc.c:5572
#5  0x000000000058e02b in maybe_gc () at lisp.h:4518
#6  exec_byte_code (bytestr=0, vector=477, maxdepth=4611686018679046144,
    args_template=4611686018679046144, nargs=131, args=0x82) at bytecode.c:954
#7  0x0000000000559011 in funcall_lambda (fun=54085877, nargs=nargs@entry=3,
    arg_vector=arg_vector@entry=0x7fffdbe827d0) at eval.c:3047
#8  0x000000000055938b in Ffuncall (nargs=<optimized out>,
    args=0x7fffdbe827c8) at eval.c:2874
#9  0x000000000058dee3 in exec_byte_code (bytestr=0, vector=477,
    maxdepth=4611686018679046144, args_template=4611686018679046144, nargs=0,
    args=0x4) at bytecode.c:919
#10 0x0000000000559011 in funcall_lambda (fun=54085837, nargs=nargs@entry=1,
    arg_vector=arg_vector@entry=0x7fffdbe82998) at eval.c:3047
#11 0x000000000055938b in Ffuncall (nargs=nargs@entry=2,
    args=args@entry=0x7fffdbe82990) at eval.c:2874
#12 0x000000000055978a in call1 (fn=fn@entry=54085837, arg1=<optimized out>)
    at eval.c:2612
#13 0x000000000055f953 in mapcar1 (leni=leni@entry=1,
    vals=vals@entry=0x7fffdbe82a00, fn=fn@entry=54085837,
    seq=seq@entry=119453910) at fns.c:2320
#14 0x0000000000561691 in Fmapconcat (function=54085837, sequence=119453910,
    separator=8627809) at fns.c:2356
#15 0x0000000000559568 in Ffuncall (nargs=<optimized out>,
    args=<optimized out>) at eval.c:2820
#16 0x000000000058dee3 in exec_byte_code (bytestr=0, vector=477,
    maxdepth=4611686018679046144, args_template=4611686018679046144,
    nargs=131, args=0x4) at bytecode.c:919
#17 0x0000000000559011 in funcall_lambda (fun=54085877, nargs=nargs@entry=3,
    arg_vector=arg_vector@entry=0x7fffdbe82d10) at eval.c:3047
#18 0x000000000055938b in Ffuncall (nargs=<optimized out>,
    args=0x7fffdbe82d08) at eval.c:2874
#19 0x000000000058dee3 in exec_byte_code (bytestr=0, vector=477,
    maxdepth=4611686018679046144, args_template=4611686018679046144, nargs=0,
    args=0x4) at bytecode.c:919
#20 0x0000000000559011 in funcall_lambda (fun=54085837, nargs=nargs@entry=1,
    arg_vector=arg_vector@entry=0x7fffdbe82ed8) at eval.c:3047
#21 0x000000000055938b in Ffuncall (nargs=nargs@entry=2,
    args=args@entry=0x7fffdbe82ed0) at eval.c:2874
#22 0x000000000055978a in call1 (fn=fn@entry=54085837, arg1=<optimized out>)
    at eval.c:2612
#23 0x000000000055f953 in mapcar1 (leni=leni@entry=7,
    vals=vals@entry=0x7fffdbe82f40, fn=fn@entry=54085837,
    seq=seq@entry=119420310) at fns.c:2320
#24 0x0000000000561691 in Fmapconcat (function=54085837, sequence=119420310,
    separator=8627809) at fns.c:2356
#25 0x0000000000559568 in Ffuncall (nargs=<optimized out>,
    args=<optimized out>) at eval.c:2820
#26 0x000000000058dee3 in exec_byte_code (bytestr=0, vector=477,
    maxdepth=4611686018679046144, args_template=4611686018679046144,
    nargs=131, args=0x4) at bytecode.c:919
#27 0x0000000000559011 in funcall_lambda (fun=fun@entry=54085877,
    nargs=nargs@entry=1, arg_vector=arg_vector@entry=0x7fffdbe83230)
    at eval.c:3047
#28 0x0000000000558430 in apply_lambda (fun=54085877, args=<optimized out>)
    at eval.c:2922
#29 0x00000000005587be in eval_sub (form=<optimized out>) at eval.c:2258
#30 0x0000000000558d85 in Fprogn (body=86832280) at eval.c:466
#31 0x000000000055bf4e in FletX (args=64541782) at eval.c:904
#32 0x0000000000558ab7 in eval_sub (form=<optimized out>) at eval.c:2131
#33 0x0000000000558d85 in Fprogn (body=86832280) at eval.c:466
#34 0x00000000005590d1 in funcall_lambda (fun=fun@entry=64541814,
    nargs=nargs@entry=1, arg_vector=arg_vector@entry=0x7fffdbe83540)
    at eval.c:3040
#35 0x0000000000558430 in apply_lambda (fun=64541814, args=<optimized out>)
    at eval.c:2922
#36 0x00000000005587be in eval_sub (form=<optimized out>) at eval.c:2258
#37 0x000000000055beb2 in FletX (args=64578214) at eval.c:879
#38 0x0000000000558ab7 in eval_sub (form=<optimized out>) at eval.c:2131
#39 0x0000000000558d85 in Fprogn (body=86832280) at eval.c:466
#40 0x00000000005590d1 in funcall_lambda (fun=64575142, nargs=nargs@entry=1,
    arg_vector=arg_vector@entry=0x7fffdbe83948) at eval.c:3040
#41 0x000000000055938b in Ffuncall (nargs=nargs@entry=2,
    args=args@entry=0x7fffdbe83940) at eval.c:2874
#42 0x000000000055a622 in Fapply (nargs=2, args=0x7fffdbe83940) at eval.c:2299
#43 0x0000000000558ba2 in eval_sub (form=<optimized out>) at eval.c:2155
#44 0x0000000000558ab7 in eval_sub (form=<optimized out>) at eval.c:2131
#45 0x0000000000558d85 in Fprogn (body=86832280) at eval.c:466
#46 0x00000000005590d1 in funcall_lambda (fun=fun@entry=64456998,
    nargs=nargs@entry=2, arg_vector=arg_vector@entry=0x7fffdbe83b70)
    at eval.c:3040
#47 0x0000000000558430 in apply_lambda (fun=64456998, args=<optimized out>)
    at eval.c:2922
#48 0x00000000005587be in eval_sub (form=<optimized out>) at eval.c:2258
#49 0x0000000000558d85 in Fprogn (body=86832280) at eval.c:466
#50 0x00000000005590d1 in funcall_lambda (fun=fun@entry=64481302,
    nargs=nargs@entry=1, arg_vector=arg_vector@entry=0x7fffdbe83d50)
    at eval.c:3040
#51 0x0000000000558430 in apply_lambda (fun=64481302, args=<optimized out>)
    at eval.c:2922
#52 0x00000000005587be in eval_sub (form=<optimized out>) at eval.c:2258
#53 0x0000000000558d85 in Fprogn (body=86832280) at eval.c:466
#54 0x0000000000558ab7 in eval_sub (form=<optimized out>) at eval.c:2131
#55 0x0000000000558d85 in Fprogn (body=86832280) at eval.c:466
#56 0x000000000055bd25 in Flet (args=64649446) at eval.c:974
#57 0x0000000000558ab7 in eval_sub (form=<optimized out>) at eval.c:2131
#58 0x0000000000558d85 in Fprogn (body=86832280) at eval.c:466
#59 0x00000000005590d1 in funcall_lambda (fun=fun@entry=64650134,
    nargs=nargs@entry=0, arg_vector=arg_vector@entry=0x7fffdbe84180)
    at eval.c:3040
#60 0x0000000000558430 in apply_lambda (fun=64650134, args=<optimized out>)
    at eval.c:2922
#61 0x00000000005587be in eval_sub (form=form@entry=65852774) at eval.c:2258
#62 0x000000000055ac92 in Feval (form=65852774, lexical=<optimized out>)
    at eval.c:2001
#63 0x0000000000559578 in Ffuncall (nargs=nargs@entry=2,
    args=args@entry=0x7fffdbe843c0) at eval.c:2816
#64 0x0000000000557c89 in internal_condition_case_n (
    bfun=0x559160 <Ffuncall>, nargs=nargs@entry=2,
    args=args@entry=0x7fffdbe843c0, handlers=<optimized out>,
    hfun=hfun@entry=0x439320 <safe_eval_handler>) at eval.c:1434
#65 0x00000000004364a3 in safe_call (nargs=nargs@entry=2,
    func=<optimized out>) at xdisp.c:2568
#66 0x00000000004364d2 in safe_call1 (fn=<optimized out>, arg=<optimized out>)
    at xdisp.c:2584
#67 0x000000000043675f in safe_eval (sexpr=<optimized out>) at xdisp.c:2592
#68 0x0000000000441d8c in display_mode_element (it=it@entry=0x7fffdbe84570,
    depth=1, depth@entry=0, field_width=field_width@entry=0,
    precision=precision@entry=0, elt=elt@entry=65852758, props=12103986,
    risky=risky@entry=0) at xdisp.c:21634
#69 0x00000000004468f1 in display_mode_line (w=w@entry=0x52cfa40,
    face_id=face_id@entry=HEADER_LINE_FACE_ID, format=65852758)
    at xdisp.c:21232
#70 0x0000000000446b57 in display_mode_lines (w=w@entry=0x52cfa40)
    at xdisp.c:21182
#71 0x000000000045d4d9 in redisplay_window (window=86833733,
    just_this_one_p=just_this_one_p@entry=false) at xdisp.c:16370
#72 0x0000000000460703 in redisplay_window_0 (window=window@entry=86833733)
    at xdisp.c:14051
#73 0x00000000005579ff in internal_condition_case_1 (
    bfun=bfun@entry=0x4606d0 <redisplay_window_0>, arg=86833733,
    handlers=<optimized out>,
    hfun=hfun@entry=0x42af80 <redisplay_window_error>) at eval.c:1376
#74 0x000000000042ffef in redisplay_windows (window=86833733) at xdisp.c:14031
#75 0x000000000042ffb5 in redisplay_windows (window=86552621) at xdisp.c:14025
#76 0x000000000044a981 in redisplay_internal () at xdisp.c:13630
#77 0x000000000044c7a5 in redisplay () at xdisp.c:12916
#78 0x00000000004f1171 in read_char (commandflag=1, map=map@entry=121877686,
    prev_event=12103986,
    used_mouse_menu=used_mouse_menu@entry=0x7fffdbe8c15b,
    end_time=end_time@entry=0x0) at keyboard.c:2563
#79 0x00000000004f3097 in read_key_sequence (
    keybuf=keybuf@entry=0x7fffdbe8c230, prompt=<optimized out>,
    dont_downcase_last=dont_downcase_last@entry=false,
    can_return_switch_frame=can_return_switch_frame@entry=true,
    fix_current_buffer=fix_current_buffer@entry=true,
    prevent_redisplay=prevent_redisplay@entry=false, bufsize=30)
    at keyboard.c:9071
#80 0x00000000004f4411 in command_loop_1 () at keyboard.c:1445
#81 0x00000000005578c5 in internal_condition_case (
    bfun=bfun@entry=0x4f4220 <command_loop_1>, handlers=<optimized out>,
    hfun=hfun@entry=0x4eb1e0 <cmd_error>) at eval.c:1352
#82 0x00000000004e8c1e in command_loop_2 (ignore=ignore@entry=12103986)
    at keyboard.c:1170
#83 0x00000000005577cb in internal_catch (tag=12151490,
    func=func@entry=0x4e8c00 <command_loop_2>, arg=12103986) at eval.c:1116
#84 0x00000000004eadc7 in command_loop () at keyboard.c:1149
#85 recursive_edit_1 () at keyboard.c:777
#86 0x00000000004eb0c2 in Frecursive_edit () at keyboard.c:841
#87 0x00000000004175d5 in main (argc=2, argv=<optimized out>) at emacs.c:1643

Lisp Backtrace:
"Automatic GC" (0xb71428)

"xmlgen" (0xdbe827d0)
0x33948c8 PVEC_COMPILED
"mapconcat" (0xdbe82b30)
"xmlgen" (0xdbe82d10)
0x33948c8 PVEC_COMPILED
"mapconcat" (0xdbe830d0)
"xmlgen" (0xdbe83230)
"let*" (0xdbe83428)
"smt/t-export-default-xml" (0xdbe83540)
"let*" (0xdbe83728)
"smt/t-export-default" (0xdbe83948)
"apply" (0xdbe83940)
"if" (0xdbe83a58)
"smt/maybe-funcall" (0xdbe83b70)
"smt/t-export" (0xdbe83d50)
"cond" (0xdbe83ef8)
"let" (0xdbe84068)
"smt/modeline-format" (0xdbe84180)

bug#16685: Emacs crash when interacting with newsticker

[Dmitry Antipov]

On 02/07/2014 11:40 PM, E Sabof wrote:

> I get this each time I interact with newsticker long enough. Given the
> amount of customzations I've put on this mode, I don't guarantee that
> it's easily reproducible. Find the gdb backtrace below.

Just a hint about your basic customizations (in particular, size
of your URL list, and retrieval method) would be highly desirable.

Dmitry

bug#16685: Emacs crash when interacting with newsticker

[E Sabof]

Dmitry Antipov <dmantipov@yandex.ru> writes:

> Just a hint about your basic customizations (in particular, size
> of your URL list, and retrieval method) would be highly desirable.

Too many. Including, defadvicing it to use the nxml parser, and numerous other defadvices and re-definitions to make the UI usable. I should probably convert some of them to patches, once I clean it up.

I'll see if I can somewhat narrow down the circumstances.

Evgeni

bug#16685: Emacs crash when interacting with newsticker

[E Sabof]

Dmitry Antipov <dmantipov@yandex.ru> writes:

> Just a hint about your basic customizations (in particular, size
> of your URL list, and retrieval method) would be highly desirable.

Oh, yes

newsticker-retrieval-method -> extern
(length newsticker-url-list) -> 68

Evgeni

bug#16685: Emacs crash when interacting with newsticker

[E Sabof]

One of my customizations caused newsticker to try and call set-window-point with a marker from another buffer. Once I've change it the crashes seem to have stopped.

I also had to change feeds (which caused the above error), while news where retrieved.

Hopefully, a better example of this bug will get reported.

Evgeni

bug#16685: Emacs crash when interacting with newsticker

[martin rudalics]

 > One of my customizations caused newsticker to try and call
 > set-window-point with a marker from another buffer. Once I've change
 > it the crashes seem to have stopped.

`set-window-point' has this comment:

   /* Type of POS is checked by Fgoto_char or set_marker_restricted ...  */

martin

bug#16685: Emacs crash when interacting with newsticker

[Lars Ingebrigtsen]

E Sabof <esabof@gmail.com> writes:

> I get this each time I interact with newsticker long enough. Given the
> amount of customzations I've put on this mode, I don't guarantee that
> it's easily reproducible. Find the gdb backtrace below.
>
> Evgeni
>
> Program received signal SIGSEGV, Segmentation fault.
> 0x000000000053ceba in cleanup_vector (vector=0x52cf498) at alloc.c:2909
> 2909	      ((struct font *) vector)->driver->close ((struct font *) vector);
> (gdb) backtrace
> #0  0x000000000053ceba in cleanup_vector (vector=0x52cf498) at alloc.c:2909
> #1  cleanup_vector (vector=0x52cf498) at alloc.c:2901
> #2  0x0000000000541e5d in sweep_vectors () at alloc.c:2947
> #3  gc_sweep () at alloc.c:6649
> #4  Fgarbage_collect () at alloc.c:5572

This was five years ago, and unfortunately this wasn't handled at the
time.  But it's unlikely that we'll be making more progress here at this
point, so I'm closing this bug report.  Please reopen if you're still
seeing these crashes in modern versions of Emacs.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no