bug#8145: Crash in multibyte_chars_in_text

[Lennart Borgman <lennart.borgman@gmail.com>]

On Tue, Mar 1, 2011 at 10:35 PM, Michel de Ruiter <michel@sentient.nl> wrote:
>> > FWIW, I cannot reproduce this.  I don't have a U: drive, and couldn't
>> > make a directory with a Latin character (my locale is different), but
>> > I did create a directory on D: with a non-ASCII character it its name,
>> > and in that directory put an empty file "ab".  "C-x C-f cd" didn't
>> > crash.
>> I can reproduce it using C: instead of U: with an unpatched build:
>> GNU Emacs 24.0.50.1 (i386-mingw-nt5.1.2600) of 2011-02-15
>
> I just tested C:\aAaaé\aa and it also crashes.
> The capital letter and the latin character are both necessary.
> In C:\aAé\aa, Ctrl-x Ctrl-f crashes immediately, before I can type any extra characters.
>
> This seems to be the shortest way to the crash:
> - set both settings to t as described
> - Ctrl-x Ctrl-f A Ctrl-q 1 3 0 RET
> Works everywhere, and you don't need any special directory on disk.

With your original reciepe (but using C:) I get this backtrace:

Breakpoint 1, w32_abort () at w32fns.c:7175
warning: Source file is more recent than executable.
7175      button = MessageBox (NULL,
(gdb) bt
#0  w32_abort () at w32fns.c:7175
#1  0x011a5bb8 in multibyte_chars_in_text (ptr=0x82e0d0
"\343\251/ab/cd", nbytes=8) at character.c:546
#2  0x01024bda in make_specified_string (contents=0x82e0d0
"\343\251/ab/cd", nchars=-1, nbytes=8, multibyte=1)
    at alloc.c:2353
#3  0x0106b3e3 in Fsubstitute_in_file_name (filename=51940081) at fileio.c:1708
#4  0x01021d14 in Ffuncall (nargs=2, args=0x82e220) at eval.c:2842
#5  0x010c80ad in Fbyte_code (bytestr=19539033, vector=19539061,
maxdepth=16) at bytecode.c:676
#6  0x01020db8 in Feval (form=19539022) at eval.c:2257
#7  0x0101f5f3 in internal_lisp_condition_case (var=49215514,
bodyform=19539022, handlers=18905790) at eval.c:1355
#8  0x010c8a45 in Fbyte_code (bytestr=19539153, vector=19539181,
maxdepth=20) at bytecode.c:866
#9  0x01020db8 in Feval (form=19539142) at eval.c:2257
#10 0x0101f5f3 in internal_lisp_condition_case (var=49215514,
bodyform=19539142, handlers=18905790) at eval.c:1355
#11 0x010c8a45 in Fbyte_code (bytestr=18920449, vector=19539117,
maxdepth=12) at bytecode.c:866
#12 0x010224e9 in funcall_lambda (fun=19539085, nargs=0,
arg_vector=0x82eb58) at eval.c:3028
#13 0x01021f31 in Ffuncall (nargs=1, args=0x82eb54) at eval.c:2891
#14 0x0102172c in run_hook_with_args (nargs=1, args=0x82eb54,
cond=to_completion) at eval.c:2580
#15 0x010214bf in Frun_hooks (nargs=1, args=0x82ec0c) at eval.c:2443
#16 0x01021c26 in Ffuncall (nargs=2, args=0x82ec08) at eval.c:2824
#17 0x0102182e in call1 (fn=49371762, arg1=49261098) at eval.c:2643
#18 0x01005c3a in safe_run_hooks_1 () at keyboard.c:1822
#19 0x0101f6fd in internal_condition_case (bfun=0x1005c07
<safe_run_hooks_1>, handlers=49215538,
    hfun=0x1005c42 <safe_run_hooks_error>) at eval.c:1408
#20 0x01005cda in safe_run_hooks (hook=49261098) at keyboard.c:1848
#21 0x01004fb6 in command_loop_1 () at keyboard.c:1545
#22 0x0101f6fd in internal_condition_case (bfun=0x100489d
<command_loop_1>, handlers=49269146,
    hfun=0x1004292 <cmd_error>) at eval.c:1408
#23 0x01004602 in command_loop_2 (ignore=49215514) at keyboard.c:1129
#24 0x0101f1ee in internal_catch (tag=49371402, func=0x10045df
<command_loop_2>, arg=49215514) at eval.c:1152
#25 0x01004569 in command_loop () at keyboard.c:1094
#26 0x01003eae in recursive_edit_1 () at keyboard.c:731
#27 0x010b20be in read_minibuf (map=49204638, initial=51937841,
prompt=18990361, backup_n=0, expflag=0,
    histvar=49277626, histpos=0, defalt=271132113, allow_props=0,
inherit_input_method=0) at minibuf.c:652
#28 0x010b3e54 in Fcompleting_read (prompt=18990361,
collection=49400906, predicate=49277146, require_match=49638242,
    initial_input=51937841, hist=49277626, def=271132113,
inherit_input_method=49215514) at minibuf.c:1719
#29 0x01021ee9 in Ffuncall (nargs=8, args=0x82f220) at eval.c:2875
#30 0x010c80ad in Fbyte_code (bytestr=19100337, vector=19100357,
maxdepth=36) at bytecode.c:676
#31 0x010224e9 in funcall_lambda (fun=19100261, nargs=4,
arg_vector=0x82f474) at eval.c:3028
#32 0x01021f31 in Ffuncall (nargs=5, args=0x82f470) at eval.c:2891
#33 0x010c80ad in Fbyte_code (bytestr=19015201, vector=19015221,
maxdepth=20) at bytecode.c:676
#34 0x010224e9 in funcall_lambda (fun=19015173, nargs=2,
arg_vector=0x82f6b4) at eval.c:3028
#35 0x01021f31 in Ffuncall (nargs=3, args=0x82f6b0) at eval.c:2891
#36 0x010c80ad in Fbyte_code (bytestr=19015409, vector=19015437,
maxdepth=12) at bytecode.c:676
#37 0x01020db8 in Feval (form=19015398) at eval.c:2257
#38 0x010c5be9 in Fcall_interactively (function=50251186,
record_flag=49215514, keys=49236741) at callint.c:338
#39 0x01021d68 in Ffuncall (nargs=4, args=0x82fb70) at eval.c:2849
#40 0x010218a8 in call3 (fn=49384338, arg1=50251186, arg2=49215514,
arg3=49215514) at eval.c:2674
#41 0x0101333b in Fcommand_execute (cmd=50251186,
record_flag=49215514, keys=49215514, special=49215514)
    at keyboard.c:10180
#42 0x01004f5d in command_loop_1 () at keyboard.c:1528
#43 0x0101f6fd in internal_condition_case (bfun=0x100489d
<command_loop_1>, handlers=49269146,
    hfun=0x1004292 <cmd_error>) at eval.c:1408
#44 0x01004602 in command_loop_2 (ignore=49215514) at keyboard.c:1129
#45 0x0101f1ee in internal_catch (tag=49267242, func=0x10045df
<command_loop_2>, arg=49215514) at eval.c:1152
#46 0x010045ba in command_loop () at keyboard.c:1108
#47 0x01003eae in recursive_edit_1 () at keyboard.c:731
#48 0x01004012 in Frecursive_edit () at keyboard.c:793
#49 0x01002767 in main (argc=2, argv=0xb23d70) at emacs.c:1684

Lisp Backtrace:
"substitute-in-file-name" (0x82e224)
"byte-code" (0x82e3d0)
"byte-code" (0x82e720)
"rfn-eshadow-update-overlay" (0x82eb58)
"run-hooks" (0x82ec0c)
"completing-read" (0x82f224)
"read-file-name" (0x82f474)
"find-file-read-args" (0x82f6b4)
"byte-code" (0x82f860)
"call-interactively" (0x82fb74)
(gdb)