From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Pip Cet Newsgroups: gmane.emacs.bugs Subject: bug#21380: 25.0.50; GTK-induced segfault when scheduling timer from window-configuration-change-hook Date: Sun, 30 Aug 2015 12:51:26 +0000 Message-ID: NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: multipart/alternative; boundary=001a1144ac34689f02051e86c67d X-Trace: ger.gmane.org 1440939147 3204 80.91.229.3 (30 Aug 2015 12:52:27 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sun, 30 Aug 2015 12:52:27 +0000 (UTC) To: 21380@debbugs.gnu.org Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Sun Aug 30 14:52:12 2015 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1ZW25j-0005N6-13 for geb-bug-gnu-emacs@m.gmane.org; Sun, 30 Aug 2015 14:52:11 +0200 Original-Received: from localhost ([::1]:58557 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZW25j-0001ZK-7E for geb-bug-gnu-emacs@m.gmane.org; Sun, 30 Aug 2015 08:52:11 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:53627) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZW25d-0001ZE-F9 for bug-gnu-emacs@gnu.org; Sun, 30 Aug 2015 08:52:07 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ZW25a-0003qY-U6 for bug-gnu-emacs@gnu.org; Sun, 30 Aug 2015 08:52:05 -0400 Original-Received: from debbugs.gnu.org ([208.118.235.43]:50323) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZW25a-0003qU-Pk for bug-gnu-emacs@gnu.org; Sun, 30 Aug 2015 08:52:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.80) (envelope-from ) id 1ZW25a-0001qD-Iz for bug-gnu-emacs@gnu.org; Sun, 30 Aug 2015 08:52:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Pip Cet Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sun, 30 Aug 2015 12:52:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 21380 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Original-Received: via spool by submit@debbugs.gnu.org id=B.14409391017041 (code B ref -1); Sun, 30 Aug 2015 12:52:02 +0000 Original-Received: (at submit) by debbugs.gnu.org; 30 Aug 2015 12:51:41 +0000 Original-Received: from localhost ([127.0.0.1]:42533 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZW25D-0001pR-WF for submit@debbugs.gnu.org; Sun, 30 Aug 2015 08:51:41 -0400 Original-Received: from eggs.gnu.org ([208.118.235.92]:43544) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZW25A-0001pG-Bu for submit@debbugs.gnu.org; Sun, 30 Aug 2015 08:51:38 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ZW257-0003dv-A6 for submit@debbugs.gnu.org; Sun, 30 Aug 2015 08:51:35 -0400 Original-Received: from lists.gnu.org ([2001:4830:134:3::11]:48838) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZW257-0003dr-6h for submit@debbugs.gnu.org; Sun, 30 Aug 2015 08:51:33 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:53518) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZW254-0001Yn-QA for bug-gnu-emacs@gnu.org; Sun, 30 Aug 2015 08:51:33 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ZW251-0003dA-UF for bug-gnu-emacs@gnu.org; Sun, 30 Aug 2015 08:51:30 -0400 Original-Received: from mail-io0-x22d.google.com ([2607:f8b0:4001:c06::22d]:34416) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZW251-0003cy-Mg for bug-gnu-emacs@gnu.org; Sun, 30 Aug 2015 08:51:27 -0400 Original-Received: by iofe124 with SMTP id e124so68364776iof.1 for ; Sun, 30 Aug 2015 05:51:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=gv2S2cRDhZOePH4g5XFP4KbY6WPQWL/Oa/Ot3oMsvX4=; b=vYb++J3ux+gSq4me9zO/ReNn62k/f3BTp3f90i5svKf7eXDYlzyAVWM/X0+ZrrJSqF QKRa+CHX2u0J6PtJeYXub0dInkGc48a7nnXrWC7/P6OVmCS0VlAOOb+8HKyx3Qq+yqsL 1USv0vW370wUrd5LBm+vIT6nSYbongdTFvjbnQNuOhtG9Pfr0nWqOpVLfhH2Xeg8mJ/v 0doybC/nn+qe5kIqimn/0tjdAz+ZlRcVPuTCiTEHRmV8hBnAFk4GamdldTy8fPOXnL1g U3RUeroa0dCZxslYcTQ08/Go/3nzQ7TmjC+TagRImXKhATQ1ibqjT17FDbYCsEj9bDuW IRyQ== X-Received: by 10.107.47.97 with SMTP id j94mr20915836ioo.136.1440939086746; Sun, 30 Aug 2015 05:51:26 -0700 (PDT) Original-Received: by 10.79.78.66 with HTTP; Sun, 30 Aug 2015 05:51:26 -0700 (PDT) X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:105975 Archived-At: --001a1144ac34689f02051e86c67d Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable It appears it's unsafe to schedule an immediate timer in window-configuration-change-hook: (add-hook 'window-configuration-change-hook (lambda () (run-with-timer 0 nil 'exwm-layout--refresh))) I saw the following segfault: #0 0x0000000000547ec0 in XSETCAR (c=3D0, n=3D51872517) at lisp.h:1188 #1 0x00000000005efdb3 in concat (nargs=3D1, args=3D0x7fffffffd868, target_type=3DLisp_Cons, last_special=3Dfalse) at fns.c:747 #2 0x00000000005ef0f3 in Fcopy_sequence (arg=3D53371635) at fns.c:510 #3 0x0000000000557252 in timer_check () at keyboard.c:4569 #4 0x0000000000639f1b in wait_reading_process_output (time_limit=3D30, nsecs=3D0, read_kbd=3D-1, do_display=3Dtrue, wait_for_cell=3D0, wait_proc= =3D0x0, just_wait_proc=3D0) at process.c:4611 #5 0x00000000004233b2 in sit_for (timeout=3D122, reading=3Dtrue, display_option=3D1) at dispnew.c:5756 #6 0x0000000000553942 in read_char (commandflag=3D1, map=3D53372867, prev_event=3D0, used_mouse_menu=3D0x7fffffffe06f, end_time=3D0x0) at keyboard.c:2775 #7 0x00000000005602ef in read_key_sequence (keybuf=3D0x7fffffffe220, bufsize=3D30, prompt=3D0, dont_downcase_last=3Dfalse, can_return_switch_frame=3Dtrue, fix_current_buffer=3Dtrue, prevent_redisplay=3Dfalse) at keyboard.c:9139 #8 0x00000000005507b1 in command_loop_1 () at keyboard.c:1406 #9 0x00000000005e77e4 in internal_condition_case (bfun=3D0x550386 , handlers=3D18912, hfun=3D0x54fb70 ) at eval.c:= 1293 #10 0x000000000055008d in command_loop_2 (ignore=3D0) at keyboard.c:1138 #11 0x00000000005e6fa6 in internal_catch (tag=3D45264, func=3D0x550064 , arg=3D0) at eval.c:1057 #12 0x000000000055002f in command_loop () at keyboard.c:1117 #13 0x000000000054f738 in recursive_edit_1 () at keyboard.c:723 #14 0x000000000054f8cc in Frecursive_edit () at keyboard.c:794 #15 0x000000000054d706 in main (argc=3D5, argv=3D0x7fffffffe6a8) at emacs.c= :1643 Somehow, the argument to Fcopy_sequence was changed while concat was underway. Further investigation indicates that window-configuration-change-hook was called in the middle of concat: Breakpoint 8, run_window_configuration_change_hook (f=3D0x1718660) at window.c:3141 3141 ptrdiff_t count =3D SPECPDL_INDEX (); #0 run_window_configuration_change_hook (f=3D0x1718660) at window.c:3141 #1 0x0000000000425882 in adjust_frame_size (f=3D0x1718660, new_width=3D824= , new_height=3D516, inhibit=3D5, pretend=3Dfalse, parameter=3D13152) at frame= .c:599 #2 0x0000000000422c01 in change_frame_size_1 (f=3D0x1718660, new_width=3D8= 24, new_height=3D516, pretend=3Dfalse, delay=3Dfalse, safe=3Dfalse, pixelwise= =3Dtrue) at dispnew.c:5507 #3 0x0000000000422c57 in change_frame_size (f=3D0x1718660, new_width=3D824= , new_height=3D516, pretend=3Dfalse, delay=3Dfalse, safe=3Dfalse, pixelwise= =3Dtrue) at dispnew.c:5539 #4 0x0000000000422a2f in do_pending_window_change (safe=3Dfalse) at dispnew.c:5465 #5 0x0000000000536c22 in xg_frame_resized (f=3D0x1718660, pixelwidth=3D842= , pixelheight=3D518) at gtkutil.c:924 #6 0x0000000000518a9f in handle_one_xevent (dpyinfo=3D0x15b07d0, event=3D0x7fffffff7210, finish=3D0xbfaacc, hold_quit=3D0x7fffffff74a0) at xterm.c:8294 #7 0x0000000000516a69 in event_handler_gdk (gxev=3D0x7fffffff7210, ev=3D0x568b410, data=3D0x0) at xterm.c:7294 #8 0x00007ffff6769661 in gdk_event_apply_filters (xevent=3Dxevent@entry=3D0x7fffffff7210, event=3Devent@entry=3D0x568b410, window=3Dwindow@entry=3D0x0) at /tmp/buildd/gtk+3.0-3.16.6/./gdk/x11/gdkeventsource.c:81 #9 0x00007ffff6769929 in gdk_event_source_translate_event (xevent=3D0x7fffffff7210, event_source=3D0x14e4090) at /tmp/buildd/gtk+3.0-3.16.6/./gdk/x11/gdkeventsource.c:195 #10 _gdk_x11_display_queue_events (display=3D0x1506050) at /tmp/buildd/gtk+3.0-3.16.6/./gdk/x11/gdkeventsource.c:338 #11 0x00007ffff673cae9 in gdk_display_get_event (display=3Ddisplay@entry=3D0x1506050) at /tmp/buildd/gtk+3.0-3.16.6/./gdk/gdkdisplay.c:340 #12 0x00007ffff67696e2 in gdk_event_source_dispatch (source=3D, callback=3D, user_data=3D) at /tmp/buildd/gtk+3.0-3.16.6/./gdk/x11/gdkeventsource.c:360 #13 0x00007ffff50bac3d in g_main_dispatch (context=3D0x14f1f80) at /tmp/buildd/glib2.0-2.44.1/./glib/gmain.c:3122 #14 g_main_context_dispatch (context=3Dcontext@entry=3D0x14f1f80) at /tmp/buildd/glib2.0-2.44.1/./glib/gmain.c:3737 #15 0x00007ffff50baf20 in g_main_context_iterate (context=3Dcontext@entry=3D0x14f1f80, block=3Dblock@entry=3D1, dispatch=3Ddispatch@entry=3D1, self=3D) at /tmp/buildd/glib2.0-2.44.1/./glib/gmain.c:3808 #16 0x00007ffff50bafcc in g_main_context_iteration (context=3D0x14f1f80, context@entry=3D0x0, may_block=3Dmay_block@entry=3D1) at /tmp/buildd/glib2.0-2.44.1/./glib/gmain.c:3869 #17 0x00007ffff6be1ff5 in gtk_main_iteration () at /tmp/buildd/gtk+3.0-3.16.6/./gtk/gtkmain.c:1320 #18 0x0000000000519220 in XTread_socket (terminal=3D0x11ecdd0, hold_quit=3D0x7fffffff74a0) at xterm.c:8644 #19 0x000000000055bbe2 in gobble_input () at keyboard.c:6893 #20 0x000000000055bfcc in handle_async_input () at keyboard.c:7145 #21 0x000000000055bfeb in process_pending_signals () at keyboard.c:7159 #22 0x00000000005c3d3a in Fmake_list (length=3D0, init=3D0) at alloc.c:2676 #23 0x00000000005ef6f8 in concat (nargs=3D1, args=3D0x7fffffff76e8, target_type=3DLisp_Cons, last_special=3Dfalse) at fns.c:642 #24 0x00000000005ef0f3 in Fcopy_sequence (arg=3D49369891) at fns.c:510 #25 0x0000000000557252 in timer_check () at keyboard.c:4569 #26 0x0000000000555106 in readable_events (flags=3D1) at keyboard.c:3422 #27 0x000000000055ba2b in get_input_pending (flags=3D1) at keyboard.c:6808 #28 0x0000000000556a49 in swallow_events (do_display=3Dfalse) at keyboard.c:4320 #29 0x000000000063af9c in wait_reading_process_output (time_limit=3D1, nsecs=3D0, read_kbd=3D0, do_display=3Dfalse, wait_for_cell=3D0, wait_proc=3D0x2fd6078, just_wait_proc=3D0) at process.c:4992 #30 0x0000000000638f6c in Faccept_process_output (process=3D50159736, seconds=3D6, millisec=3D0, just_this_one=3D0) at process.c:4241 I'm not sure whether the bug is in my code (and, if so, how to fix it=E2=80=94if scheduling an immediate timer isn't safe, what could possibly be?), in Fmake_list, in QUIT, or in the X or GTK code, but at least one of them is buggy. M-x report-emacs-bug information: I have been unable, so far, to reproduce this bug reliably from `emacs -Q'. In GNU Emacs 25.0.50.52 (x86_64-unknown-linux-gnu, GTK+ Version 3.16.6) of 2015-08-30 Repository revision: c6af816affb36d512f806725518e6e5f2353b197 Windowing system distributor `The X.Org Foundation', version 11.0.11702000 System Description: Debian GNU/Linux unstable (sid) Configured using: `configure 'CFLAGS=3D-O0 -g3'' Configured features: XPM JPEG TIFF GIF PNG RSVG SOUND DBUS GCONF GSETTINGS NOTIFY LIBSELINUX GNUTLS LIBXML2 FREETYPE XFT ZLIB TOOLKIT_SCROLL_BARS GTK3 X11 Important settings: value of $LANG: en_US.UTF-8 locale-coding-system: utf-8-unix Major mode: Text Minor modes in effect: diff-auto-refine-mode: t tooltip-mode: t global-eldoc-mode: t electric-indent-mode: t mouse-wheel-mode: t tool-bar-mode: t menu-bar-mode: t file-name-shadow-mode: t global-font-lock-mode: t font-lock-mode: t blink-cursor-mode: t auto-composition-mode: t auto-encryption-mode: t auto-compression-mode: t line-number-mode: t transient-mark-mode: t Load-path shadows: None found. Features: (shadow sort gnus-util mail-extr emacsbug message dired format-spec rfc822 mml mml-sec mm-decode mm-bodies mm-encode mail-parse rfc2231 mailabbrev gmm-utils mailheader sendmail rfc2047 rfc2045 ietf-drums mm-util help-fns help-mode cl-loaddefs pcase cl-lib mail-prsvr mail-utils vc-git diff-mode easymenu easy-mmode time-date mule-util tooltip eldoc electric uniquify ediff-hook vc-hooks lisp-float-type mwheel x-win term/common-win x-dnd tool-bar dnd fontset image regexp-opt fringe tabulated-list newcomment elisp-mode lisp-mode prog-mode register page menu-bar rfn-eshadow timer select scroll-bar mouse jit-lock font-lock syntax facemenu font-core frame cl-generic cham georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korean japanese eucjp-ms cp51932 hebrew greek romanian slovak czech european ethiopic indian cyrillic chinese charscript case-table epa-hook jka-cmpr-hook help simple abbrev minibuffer cl-preloaded nadvice loaddefs button faces cus-face macroexp files text-properties overlay sha1 md5 base64 format env code-pages mule custom widget hashtable-print-readable backquote dbusbind inotify dynamic-setting system-font-setting font-render-setting move-toolbar gtk x-toolkit x multi-tty make-network-process emacs) Memory information: ((conses 16 84908 4447) (symbols 48 19432 0) (miscs 40 43 147) (strings 32 14795 4332) (string-bytes 1 417071) (vectors 16 11731) (vector-slots 8 419664 4375) (floats 8 138 302) (intervals 56 225 13) (buffers 976 12) (heap 1024 19426 1811)) --001a1144ac34689f02051e86c67d Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
It appears it's unsafe to schedule an immediate timer = in
window-configuration-change-hook:

=C2=A0 (add-hook 'window= -configuration-change-hook (lambda () (run-with-timer
=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 0 nil 'exwm-layout--refresh)))

I saw th= e following segfault:
#0=C2=A0 0x0000000000547ec0 in XSETCAR (c=3D0, n= =3D51872517) at lisp.h:1188
#1=C2=A0 0x00000000005efdb3 in concat (nargs= =3D1, args=3D0x7fffffffd868, target_type=3DLisp_Cons, last_special=3Dfalse)= at fns.c:747
#2=C2=A0 0x00000000005ef0f3 in Fcopy_sequence (arg=3D53371= 635) at fns.c:510
#3=C2=A0 0x0000000000557252 in timer_check () at keybo= ard.c:4569
#4=C2=A0 0x0000000000639f1b in wait_reading_process_output (t= ime_limit=3D30, nsecs=3D0, read_kbd=3D-1, do_display=3Dtrue, wait_for_cell= =3D0, wait_proc=3D0x0, just_wait_proc=3D0) at process.c:4611
#5=C2=A0 0x= 00000000004233b2 in sit_for (timeout=3D122, reading=3Dtrue, display_option= =3D1) at dispnew.c:5756
#6=C2=A0 0x0000000000553942 in read_char (comman= dflag=3D1, map=3D53372867, prev_event=3D0, used_mouse_menu=3D0x7fffffffe06f= , end_time=3D0x0) at keyboard.c:2775
#7=C2=A0 0x00000000005602ef in read= _key_sequence (keybuf=3D0x7fffffffe220, bufsize=3D30, prompt=3D0, dont_down= case_last=3Dfalse, can_return_switch_frame=3Dtrue, fix_current_buffer=3Dtru= e, prevent_redisplay=3Dfalse) at keyboard.c:9139
#8=C2=A0 0x000000000055= 07b1 in command_loop_1 () at keyboard.c:1406
#9=C2=A0 0x00000000005e77e4= in internal_condition_case (bfun=3D0x550386 <command_loop_1>, handle= rs=3D18912, hfun=3D0x54fb70 <cmd_error>) at eval.c:1293
#10 0x0000= 00000055008d in command_loop_2 (ignore=3D0) at keyboard.c:1138
#11 0x000= 00000005e6fa6 in internal_catch (tag=3D45264, func=3D0x550064 <command_l= oop_2>, arg=3D0) at eval.c:1057
#12 0x000000000055002f in command_loo= p () at keyboard.c:1117
#13 0x000000000054f738 in recursive_edit_1 () at= keyboard.c:723
#14 0x000000000054f8cc in Frecursive_edit () at keyboard= .c:794
#15 0x000000000054d706 in main (argc=3D5, argv=3D0x7fffffffe6a8) = at emacs.c:1643

Somehow, the argument to Fcopy_sequence was changed = while concat was
underway. Further investigation indicates that
windo= w-configuration-change-hook was called in the middle of concat:

Brea= kpoint 8, run_window_configuration_change_hook (f=3D0x1718660) at window.c:= 3141
3141=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 ptrdiff_t count =3D SPECPDL_INDE= X ();
#0=C2=A0 run_window_configuration_change_hook (f=3D0x1718660) at w= indow.c:3141
#1=C2=A0 0x0000000000425882 in adjust_frame_size (f=3D0x171= 8660, new_width=3D824, new_height=3D516, inhibit=3D5, pretend=3Dfalse, para= meter=3D13152) at frame.c:599
#2=C2=A0 0x0000000000422c01 in change_fram= e_size_1 (f=3D0x1718660, new_width=3D824, new_height=3D516, pretend=3Dfalse= , delay=3Dfalse, safe=3Dfalse, pixelwise=3Dtrue) at dispnew.c:5507
#3=C2= =A0 0x0000000000422c57 in change_frame_size (f=3D0x1718660, new_width=3D824= , new_height=3D516, pretend=3Dfalse, delay=3Dfalse, safe=3Dfalse, pixelwise= =3Dtrue) at dispnew.c:5539
#4=C2=A0 0x0000000000422a2f in do_pending_win= dow_change (safe=3Dfalse) at dispnew.c:5465
#5=C2=A0 0x0000000000536c22 = in xg_frame_resized (f=3D0x1718660, pixelwidth=3D842, pixelheight=3D518) at= gtkutil.c:924
#6=C2=A0 0x0000000000518a9f in handle_one_xevent (dpyinfo= =3D0x15b07d0, event=3D0x7fffffff7210, finish=3D0xbfaacc, hold_quit=3D0x7fff= ffff74a0) at xterm.c:8294
#7=C2=A0 0x0000000000516a69 in event_handler_g= dk (gxev=3D0x7fffffff7210, ev=3D0x568b410, data=3D0x0) at xterm.c:7294
#= 8=C2=A0 0x00007ffff6769661 in gdk_event_apply_filters (xevent=3Dxevent@entr= y=3D0x7fffffff7210, event=3Devent@entry=3D0x568b410, window=3Dwindow@entry= =3D0x0) at /tmp/buildd/gtk+3.0-3.16.6/./gdk/x11/gdkeventsource.c:81
#9= =C2=A0 0x00007ffff6769929 in gdk_event_source_translate_event (xevent=3D0x7= fffffff7210, event_source=3D0x14e4090) at /tmp/buildd/gtk+3.0-3.16.6/./gdk/= x11/gdkeventsource.c:195
#10 _gdk_x11_display_queue_events (display=3D0x= 1506050) at /tmp/buildd/gtk+3.0-3.16.6/./gdk/x11/gdkeventsource.c:338
#1= 1 0x00007ffff673cae9 in gdk_display_get_event (display=3Ddisplay@entry=3D0x= 1506050) at /tmp/buildd/gtk+3.0-3.16.6/./gdk/gdkdisplay.c:340
#12 0x0000= 7ffff67696e2 in gdk_event_source_dispatch (source=3D<optimized out>, = callback=3D<optimized out>, user_data=3D<optimized out>) at /tm= p/buildd/gtk+3.0-3.16.6/./gdk/x11/gdkeventsource.c:360
#13 0x00007ffff50= bac3d in g_main_dispatch (context=3D0x14f1f80) at /tmp/buildd/glib2.0-2.44.= 1/./glib/gmain.c:3122
#14 g_main_context_dispatch (context=3Dcontext@ent= ry=3D0x14f1f80) at /tmp/buildd/glib2.0-2.44.1/./glib/gmain.c:3737
#15 0x= 00007ffff50baf20 in g_main_context_iterate (context=3Dcontext@entry=3D0x14f= 1f80, block=3Dblock@entry=3D1, dispatch=3Ddispatch@entry=3D1, self=3D<op= timized out>) at /tmp/buildd/glib2.0-2.44.1/./glib/gmain.c:3808
#16 0= x00007ffff50bafcc in g_main_context_iteration (context=3D0x14f1f80, context= @entry=3D0x0, may_block=3Dmay_block@entry=3D1) at /tmp/buildd/glib2.0-2.44.= 1/./glib/gmain.c:3869
#17 0x00007ffff6be1ff5 in gtk_main_iteration () at= /tmp/buildd/gtk+3.0-3.16.6/./gtk/gtkmain.c:1320
#18 0x0000000000519220 = in XTread_socket (terminal=3D0x11ecdd0, hold_quit=3D0x7fffffff74a0) at xter= m.c:8644
#19 0x000000000055bbe2 in gobble_input () at keyboard.c:6893#20 0x000000000055bfcc in handle_async_input () at keyboard.c:7145
#21 = 0x000000000055bfeb in process_pending_signals () at keyboard.c:7159
#22 = 0x00000000005c3d3a in Fmake_list (length=3D0, init=3D0) at alloc.c:2676
= #23 0x00000000005ef6f8 in concat (nargs=3D1, args=3D0x7fffffff76e8, target_= type=3DLisp_Cons, last_special=3Dfalse) at fns.c:642
#24 0x00000000005ef= 0f3 in Fcopy_sequence (arg=3D49369891) at fns.c:510
#25 0x00000000005572= 52 in timer_check () at keyboard.c:4569
#26 0x0000000000555106 in readab= le_events (flags=3D1) at keyboard.c:3422
#27 0x000000000055ba2b in get_i= nput_pending (flags=3D1) at keyboard.c:6808
#28 0x0000000000556a49 in sw= allow_events (do_display=3Dfalse) at keyboard.c:4320
#29 0x000000000063a= f9c in wait_reading_process_output (time_limit=3D1, nsecs=3D0, read_kbd=3D0= , do_display=3Dfalse, wait_for_cell=3D0, wait_proc=3D0x2fd6078, just_wait_p= roc=3D0) at process.c:4992
#30 0x0000000000638f6c in Faccept_process_out= put (process=3D50159736, seconds=3D6, millisec=3D0, just_this_one=3D0) at p= rocess.c:4241

I'm not sure whether the bug is in my code (and, i= f so, how to fix
it=E2=80=94if scheduling an immediate timer isn't s= afe, what could possibly
be?), in Fmake_list, in QUIT, or in the X or GT= K code, but at least
one of them is buggy.

M-x report-emacs-bug i= nformation:

I have been unable, so far, to reproduce this bug reliab= ly from `emacs
-Q'.

In GNU Emacs 25.0.50.52 (x86_64-unknown-l= inux-gnu, GTK+ Version 3.16.6)
=C2=A0of 2015-08-30
Repository revisio= n: c6af816affb36d512f806725518e6e5f2353b197
Windowing system distributor= `The X.Org Foundation', version 11.0.11702000
System Description:= =C2=A0=C2=A0=C2=A0 Debian GNU/Linux unstable (sid)

Configured using:=
=C2=A0`configure 'CFLAGS=3D-O0 -g3''

Configured feat= ures:
XPM JPEG TIFF GIF PNG RSVG SOUND DBUS GCONF GSETTINGS NOTIFY LIBSE= LINUX
GNUTLS LIBXML2 FREETYPE XFT ZLIB TOOLKIT_SCROLL_BARS GTK3 X11
<= br>Important settings:
=C2=A0 value of $LANG: en_US.UTF-8
=C2=A0 loca= le-coding-system: utf-8-unix

Major mode: Text

Minor modes in = effect:
=C2=A0 diff-auto-refine-mode: t
=C2=A0 tooltip-mode: t
=C2= =A0 global-eldoc-mode: t
=C2=A0 electric-indent-mode: t
=C2=A0 mouse-= wheel-mode: t
=C2=A0 tool-bar-mode: t
=C2=A0 menu-bar-mode: t
=C2= =A0 file-name-shadow-mode: t
=C2=A0 global-font-lock-mode: t
=C2=A0 f= ont-lock-mode: t
=C2=A0 blink-cursor-mode: t
=C2=A0 auto-composition-= mode: t
=C2=A0 auto-encryption-mode: t
=C2=A0 auto-compression-mode: = t
=C2=A0 line-number-mode: t
=C2=A0 transient-mark-mode: t

Loa= d-path shadows:
None found.

Features:
(shadow sort gnus-util m= ail-extr emacsbug message dired format-spec
rfc822 mml mml-sec mm-decode= mm-bodies mm-encode mail-parse rfc2231
mailabbrev gmm-utils mailheader = sendmail rfc2047 rfc2045 ietf-drums
mm-util help-fns help-mode cl-loadde= fs pcase cl-lib mail-prsvr
mail-utils vc-git diff-mode easymenu easy-mmo= de time-date mule-util
tooltip eldoc electric uniquify ediff-hook vc-hoo= ks lisp-float-type
mwheel x-win term/common-win x-dnd tool-bar dnd fonts= et image regexp-opt
fringe tabulated-list newcomment elisp-mode lisp-mod= e prog-mode register
page menu-bar rfn-eshadow timer select scroll-bar m= ouse jit-lock
font-lock syntax facemenu font-core frame cl-generic cham = georgian
utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korea= n
japanese eucjp-ms cp51932 hebrew greek romanian slovak czech european<= br>ethiopic indian cyrillic chinese charscript case-table epa-hook
jka-c= mpr-hook help simple abbrev minibuffer cl-preloaded nadvice
loaddefs but= ton faces cus-face macroexp files text-properties overlay
sha1 md5 base6= 4 format env code-pages mule custom widget
hashtable-print-readable back= quote dbusbind inotify dynamic-setting
system-font-setting font-render-s= etting move-toolbar gtk x-toolkit x
multi-tty make-network-process emacs= )

Memory information:
((conses 16 84908 4447)
=C2=A0(symbols 4= 8 19432 0)
=C2=A0(miscs 40 43 147)
=C2=A0(strings 32 14795 4332)
= =C2=A0(string-bytes 1 417071)
=C2=A0(vectors 16 11731)
=C2=A0(vector-= slots 8 419664 4375)
=C2=A0(floats 8 138 302)
=C2=A0(intervals 56 225= 13)
=C2=A0(buffers 976 12)
=C2=A0(heap 1024 19426 1811))

--001a1144ac34689f02051e86c67d--