From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED.blaine.gmane.org!not-for-mail From: Robert Pluim Newsgroups: gmane.emacs.bugs Subject: bug#38748: 28.0.50; crash on MacOS 10.15.2 Date: Fri, 10 Jan 2020 09:58:52 +0100 Message-ID: References: <20191226130420.GB71460@breton.holly.idiocy.org> <83fth7qa3a.fsf@gnu.org> <83blrtq2j0.fsf@gnu.org> <83sgl3lyii.fsf@gnu.org> <834kxej6lc.fsf@gnu.org> <8336cpbtzh.fsf@gnu.org> <83sgkp9uh9.fsf@gnu.org> <834kx3af7i.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" Injection-Info: blaine.gmane.org; posting-host="blaine.gmane.org:195.159.176.226"; logging-data="172010"; mail-complaints-to="usenet@blaine.gmane.org" Cc: Pip Cet , alan@idiocy.org, jguenther@gmail.com, andreyk.mad@gmail.com, 38748@debbugs.gnu.org To: Eli Zaretskii Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Fri Jan 10 10:00:39 2020 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by blaine.gmane.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1ipq9R-000bci-F7 for geb-bug-gnu-emacs@m.gmane-mx.org; Fri, 10 Jan 2020 10:00:17 +0100 Original-Received: from localhost ([::1]:42710 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1ipq9P-0003Tz-Kr for geb-bug-gnu-emacs@m.gmane-mx.org; Fri, 10 Jan 2020 04:00:15 -0500 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:33373) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1ipq9F-0003Tb-FV for bug-gnu-emacs@gnu.org; Fri, 10 Jan 2020 04:00:08 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ipq9C-0006bz-Oa for bug-gnu-emacs@gnu.org; Fri, 10 Jan 2020 04:00:05 -0500 Original-Received: from debbugs.gnu.org ([209.51.188.43]:47672) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1ipq9C-0006au-J5 for bug-gnu-emacs@gnu.org; Fri, 10 Jan 2020 04:00:02 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1ipq9C-0006CX-Ef for bug-gnu-emacs@gnu.org; Fri, 10 Jan 2020 04:00:02 -0500 X-Loop: help-debbugs@gnu.org Resent-From: Robert Pluim Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 10 Jan 2020 09:00:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 38748 X-GNU-PR-Package: emacs Original-Received: via spool by 38748-submit@debbugs.gnu.org id=B38748.157864674523720 (code B ref 38748); Fri, 10 Jan 2020 09:00:02 +0000 Original-Received: (at 38748) by debbugs.gnu.org; 10 Jan 2020 08:59:05 +0000 Original-Received: from localhost ([127.0.0.1]:53645 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ipq8G-0006AV-Cp for submit@debbugs.gnu.org; Fri, 10 Jan 2020 03:59:05 -0500 Original-Received: from mail-wm1-f41.google.com ([209.85.128.41]:35045) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ipq8D-00069t-MH for 38748@debbugs.gnu.org; Fri, 10 Jan 2020 03:59:03 -0500 Original-Received: by mail-wm1-f41.google.com with SMTP id p17so1100382wmb.0 for <38748@debbugs.gnu.org>; Fri, 10 Jan 2020 00:59:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:date:in-reply-to:message-id :mime-version; bh=cNThl9bd4IzE+wLSaHRRUcLonDlBSraRKQDswmnb01I=; b=uR1hb1V9SW7UEaGxEtUfRN5mXBcdeMCk8oknojimUDLapu+MjP4cZKt+WS1jyASIUT fKQqV+unHUtVOJxCGKrpTjfdd2gT75aAgUg3C5Lp/lnR2MwtZ1d9pdM9IVYFhFAZYUCa +eEHlC5WuzgMjvuavWzga2rXoZc3B0PVP58snHGEC/c6uUUMkuBluy/WjswmRDFX41JP 8F9GAcqRW8t8etCc2z0vNPoSd3tsN0QKcp97gYD2QhEs3Js17SAJXlSrjq09jkM5Hxw6 HkoKjfL2PAcdz8dLmFjxTMmTWwMXtfXWieMC4lRGYPdByakzto6YmUIyrFVy4S52bUd+ yrQQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:mime-version; bh=cNThl9bd4IzE+wLSaHRRUcLonDlBSraRKQDswmnb01I=; b=D6sOMwRds7avIZ/rrq/+Y1gVxOseLc9HtYdK4nHnEyUedfRRla3uz9954AJYzzvNiF XX5rnqD20gi3nBkPjenl0CM1mYUdbifvJTJsFbvHbgFnejbmvWh4Z33PVWGv01RIQBLf UvMJ7zl8Xb43NozjEM+zCB3bsyFAtUd2zeEDsV+/qChhwj6yPw51lrY5qXuyekKoueKX KXH5m95qXrlXSZDavfV9HYQaanDz8mtw5e/A+pns8IX55cnn3cs9NBa9nAjrdly17FtA 1xSxN1VlTbxc7qk4VETHc8Lhz61RZqvP2uwDSKCzSQ68bZyaX4i1EeWvhk/CfD2QJN8l G6KQ== X-Gm-Message-State: APjAAAXO+YLKbd0if6/Zm7ct5hWw6pzcmR/6fIVaB+vR3LPbOLtC0NUJ 7LvvRMq5F9o3L91aWJMLq9o= X-Google-Smtp-Source: APXvYqygk0EKmDUH4u//5JpxwLMFl2BKegQu9bGWTqkrHpeiCe4APsk8eEGCNpfsLTGA2n/uUSqKWQ== X-Received: by 2002:a1c:9c4c:: with SMTP id f73mr2980056wme.125.1578646735632; Fri, 10 Jan 2020 00:58:55 -0800 (PST) Original-Received: from rpluim-mac ([149.5.228.1]) by smtp.gmail.com with ESMTPSA id c15sm1447823wrt.1.2020.01.10.00.58.53 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 10 Jan 2020 00:58:54 -0800 (PST) In-Reply-To: <834kx3af7i.fsf@gnu.org> (Eli Zaretskii's message of "Fri, 10 Jan 2020 10:27:45 +0200") X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 209.51.188.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.org gmane.emacs.bugs:174427 Archived-At: --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable >>>>> On Fri, 10 Jan 2020 10:27:45 +0200, Eli Zaretskii said: >> From: Pip Cet >> Date: Fri, 10 Jan 2020 07:32:07 +0000 >> Cc: rpluim@gmail.com, alan@idiocy.org, jguenther@gmail.com,=20 >> andreyk.mad@gmail.com, 38748@debbugs.gnu.org >>=20 >> > The backtrace shows a very recursive GC, it doesn't show any other >> > function being deeply recursive. So I'm not sure I understand what >> > tail-recursive function did you have in mind. Can you elaborate? >>=20 >> I can. I think we're looking at two bugs: the first is the simple >> use-after-free of XFRAME (frame)->output_data.ns where `frame' is a >> dead frame. I've confirmed on GNU/Linux that mark_frame is called for >> a frame for which x_free_frame_resources has already been called, if >> there's a global variable still referencing the frame. I think the >> same thing happens on macOS. Eli> This one doesn't depend on the 'ok's initialization in Eli> face_inherited_attr in any way, does it? No, it doesn=CA=BCt. >> 1. I think face_inherited_attr is being optimized to tail-call itself >> rather than calling itself in a new stack frame; thus, it loops >> indefinitely for a faulty face setup which would otherwise lead to an >> immediate crash. >> 1b. that optimization only works without the harmless initialization= of "ok". >>=20 >> 2. Our initial face setup is faulty in the sense above. >>=20 >> 3. Something happens on a secondary thread which causes our face set= up >> to become non-faulty, possibly during GC. Eli> What do you mean by "secondary thread"? And how can GC modify Lisp Eli> data structures? that'd be a terrible bug. Eli> In any case, the full backtrace shows no trace of face_inherited_a= ttr Eli> call anywhere in the callstack, so if there is indeed infinite Eli> recursion in that function, it was somehow exited long ago by the = time Eli> GC runs. Eli> As for the tail-recursion part: do you see any sign of that in the Eli> disassembly posted by Robert? I didn't, but maybe I missed Eli> something. And such subtleties should only rear their ugly heads = in Eli> optimized code, whereas we already know that an unoptimized build Eli> crashes in the same way. I=CA=BCm attaching the disassembly of face_inherited_attr with -O2, with and without the change to 'ok'. I can=CA=BCt see any tail recursion, and modulo the use of r14 rather than r13, the only change I can see is right at the end, where the return value is set up (disclaimer: I=CA=BCm not fluent in x86 assembler). Eli> I still think the shortest way to finding the culprit here is to Eli> patiently and painfully go over the last_marked array, deciphering Eli> the Lisp object we marked, until we succeed in identifying the Lisp Eli> data structure which got corrupted. Once we succeed in identifying Eli> that data structure, it should be relatively easy to find who and Eli> where corrupts it. This may mean a lot of inconvenient drudgery, Eli> exacerbated by the fact that having a functional GDB on macOS is n= ot Eli> easy, but I don't think we have a better way at this point. It=CA=BCs possible that there is only one bug. The emacs I=CA=BCve been usi= ng with the change in nsterm.m suggested by Pip has been completely stable. If it does crash again I can trawl through last_marked. Robert --=-=-= Content-Type: text/plain Content-Disposition: attachment; filename=unmodified-optimized.txt (gdb) disass /s face_inherited_attr Dump of assembler code for function face_inherited_attr: xfaces.c: 2156 { 0x00000001001579b0 <+0>: push %rbp 0x00000001001579b1 <+1>: mov %rsp,%rbp 0x00000001001579b4 <+4>: push %r15 0x00000001001579b6 <+6>: push %r14 0x00000001001579b8 <+8>: push %r13 0x00000001001579ba <+10>: push %r12 0x00000001001579bc <+12>: push %rbx 0x00000001001579bd <+13>: sub $0xc8,%rsp 0x00000001001579c4 <+20>: mov %r8,-0xd8(%rbp) 0x00000001001579cb <+27>: mov %rdx,%rax 0x00000001001579ce <+30>: mov %rsi,%r12 0x00000001001579d1 <+33>: mov %rdi,%r15 0x00000001001579d4 <+36>: mov 0x2a57b5(%rip),%rdx # 0x1003fd190 0x00000001001579db <+43>: mov (%rdx),%rdx 0x00000001001579de <+46>: mov %rdx,-0x30(%rbp) 0x00000001001579e2 <+50>: mov %ecx,-0xdc(%rbp) 2157 Lisp_Object inherited_attrs[LFACE_VECTOR_SIZE]; 2158 Lisp_Object attr_val = attrs[attr_idx]; 0x00000001001579e8 <+56>: mov %ecx,%ecx 0x00000001001579ea <+58>: mov %rcx,-0xe8(%rbp) 0x00000001001579f1 <+65>: mov (%rax,%rcx,8),%r13 0x00000001001579f5 <+69>: lea -0xd0(%rbp),%rdi 2159 2160 memcpy (inherited_attrs, attrs, LFACE_VECTOR_SIZE * sizeof (attrs[0])); 0x00000001001579fc <+76>: mov $0xa0,%edx 0x0000000100157a01 <+81>: mov %rax,%rsi 0x0000000100157a04 <+84>: callq 0x1003c7938 ./lisp.h: 1270 return lisp_h_EQ (x, y); 0x0000000100157a09 <+89>: cmp $0xd140,%r13 xfaces.c: 2162 && !NILP (inherited_attrs[LFACE_INHERIT_INDEX]) 0x0000000100157a10 <+96>: je 0x100157a3c 0x0000000100157a12 <+98>: jmpq 0x100157b2f 0x0000000100157a17 <+103>: nopw 0x0(%rax,%rax,1) 2191 break; 2192 attr_val = inherited_attrs[attr_idx]; 0x0000000100157a20 <+112>: mov -0xe8(%rbp),%rax 0x0000000100157a27 <+119>: mov -0xd0(%rbp,%rax,8),%r13 ./lisp.h: 1270 return lisp_h_EQ (x, y); 0x0000000100157a2f <+127>: cmp $0xd140,%r13 xfaces.c: 2162 && !NILP (inherited_attrs[LFACE_INHERIT_INDEX]) 0x0000000100157a36 <+134>: jne 0x100157b2f 0x0000000100157a3c <+140>: mov -0x50(%rbp),%r14 0x0000000100157a40 <+144>: mov $0xd140,%r13d 2163 && !UNSPECIFIEDP (inherited_attrs[LFACE_INHERIT_INDEX])) 0x0000000100157a46 <+150>: test %r14,%r14 0x0000000100157a49 <+153>: je 0x100157b2f 0x0000000100157a4f <+159>: cmp $0xd140,%r14 0x0000000100157a56 <+166>: je 0x100157b2f ./lisp.h: 758 return lisp_h_TAGGEDP (a, tag); 0x0000000100157a5c <+172>: lea 0x5(%r14),%eax 0x0000000100157a60 <+176>: test $0x7,%al xfaces.c: 2168 if (CONSP (parent_face)) 0x0000000100157a62 <+178>: je 0x100157a90 2181 break; 2182 } 2183 if (!ok) /* bad face? */ 2184 break; 2185 } 2186 else 2187 { 2188 ok = get_lface_attributes (w, f, parent_face, inherited_attrs, 0x0000000100157a64 <+180>: xor %r8d,%r8d 0x0000000100157a67 <+183>: mov %r15,%rdi 0x0000000100157a6a <+186>: mov %r12,%rsi 0x0000000100157a6d <+189>: mov %r14,%rdx 0x0000000100157a70 <+192>: lea -0xd0(%rbp),%rcx 0x0000000100157a77 <+199>: mov -0xd8(%rbp),%r9 0x0000000100157a7e <+206>: callq 0x100152c30 2189 false, named_merge_points); 2190 if (!ok) 0x0000000100157a83 <+211>: test %al,%al 0x0000000100157a85 <+213>: jne 0x100157a20 0x0000000100157a87 <+215>: jmpq 0x100157b29 0x0000000100157a8c <+220>: nopl 0x0(%rax) ./lisp.h: 1270 return lisp_h_EQ (x, y); 0x0000000100157a90 <+224>: test %r14,%r14 0x0000000100157a93 <+227>: lea -0xd0(%rbp),%rbx 0x0000000100157a9a <+234>: mov -0xd8(%rbp),%r13 xfaces.c: 2172 for (tail = parent_face; !NILP (tail); tail = XCDR (tail)) 0x0000000100157aa1 <+241>: je 0x100157b29 0x0000000100157aa7 <+247>: nopw 0x0(%rax,%rax,1) ./lisp.h: 1443 return lisp_h_XCAR (c); 0x0000000100157ab0 <+256>: mov -0x3(%r14),%rdx xfaces.c: 2174 ok = get_lface_attributes (w, f, XCAR (tail), inherited_attrs, 0x0000000100157ab4 <+260>: xor %r8d,%r8d 0x0000000100157ab7 <+263>: mov %r15,%rdi 0x0000000100157aba <+266>: mov %r12,%rsi 0x0000000100157abd <+269>: mov %rbx,%rcx 0x0000000100157ac0 <+272>: mov %r13,%r9 0x0000000100157ac3 <+275>: callq 0x100152c30 2175 false, named_merge_points); 2176 if (!ok) 0x0000000100157ac8 <+280>: test %al,%al 0x0000000100157aca <+282>: je 0x100157b29 2177 break; 2178 attr_val = face_inherited_attr (w, f, inherited_attrs, attr_idx, 0x0000000100157acc <+284>: mov %r15,%rdi 0x0000000100157acf <+287>: mov %r12,%rsi 0x0000000100157ad2 <+290>: mov %rbx,%rdx 0x0000000100157ad5 <+293>: mov -0xdc(%rbp),%ecx 0x0000000100157adb <+299>: mov %r13,%r8 0x0000000100157ade <+302>: callq 0x1001579b0 ./lisp.h: 1270 return lisp_h_EQ (x, y); 0x0000000100157ae3 <+307>: cmp $0xd140,%rax xfaces.c: 2180 if (!UNSPECIFIEDP (attr_val)) 0x0000000100157ae9 <+313>: jne 0x100157b17 ./lisp.h: 1449 return lisp_h_XCDR (c); 0x0000000100157aeb <+315>: mov 0x5(%r14),%r14 1270 return lisp_h_EQ (x, y); 0x0000000100157aef <+319>: test %r14,%r14 0x0000000100157af2 <+322>: lea -0xd0(%rbp),%rbx 0x0000000100157af9 <+329>: mov -0xd8(%rbp),%r13 xfaces.c: 2172 for (tail = parent_face; !NILP (tail); tail = XCDR (tail)) 0x0000000100157b00 <+336>: jne 0x100157ab0 0x0000000100157b02 <+338>: mov $0xd140,%r13d ./lisp.h: 1270 return lisp_h_EQ (x, y); 0x0000000100157b08 <+344>: cmp $0xd140,%r13 0x0000000100157b0f <+351>: je 0x100157a3c 0x0000000100157b15 <+357>: jmp 0x100157b2f 0x0000000100157b17 <+359>: mov %rax,%r13 0x0000000100157b1a <+362>: cmp $0xd140,%r13 0x0000000100157b21 <+369>: je 0x100157a3c 0x0000000100157b27 <+375>: jmp 0x100157b2f 0x0000000100157b29 <+377>: mov $0xd140,%r13d 0x0000000100157b2f <+383>: mov 0x2a565a(%rip),%rax # 0x1003fd190 0x0000000100157b36 <+390>: mov (%rax),%rax 0x0000000100157b39 <+393>: cmp -0x30(%rbp),%rax 0x0000000100157b3d <+397>: jne 0x100157b54 xfaces.c: 2195 return attr_val; 0x0000000100157b3f <+399>: mov %r13,%rax 0x0000000100157b42 <+402>: add $0xc8,%rsp 0x0000000100157b49 <+409>: pop %rbx 0x0000000100157b4a <+410>: pop %r12 0x0000000100157b4c <+412>: pop %r13 0x0000000100157b4e <+414>: pop %r14 0x0000000100157b50 <+416>: pop %r15 0x0000000100157b52 <+418>: pop %rbp 0x0000000100157b53 <+419>: retq 0x0000000100157b54 <+420>: callq 0x1003c72cc End of assembler dump. (gdb) --=-=-= Content-Type: text/plain Content-Disposition: attachment; filename=modified-optimized.txt (gdb) disass /s face_inherited_attr Dump of assembler code for function face_inherited_attr: xfaces.c: 2156 { 0x00000001001579a0 <+0>: push %rbp 0x00000001001579a1 <+1>: mov %rsp,%rbp 0x00000001001579a4 <+4>: push %r15 0x00000001001579a6 <+6>: push %r14 0x00000001001579a8 <+8>: push %r13 0x00000001001579aa <+10>: push %r12 0x00000001001579ac <+12>: push %rbx 0x00000001001579ad <+13>: sub $0xc8,%rsp 0x00000001001579b4 <+20>: mov %r8,-0xd8(%rbp) 0x00000001001579bb <+27>: mov %rdx,%rax 0x00000001001579be <+30>: mov %rsi,%r12 0x00000001001579c1 <+33>: mov %rdi,%r15 0x00000001001579c4 <+36>: mov 0x2a57c5(%rip),%rdx # 0x1003fd190 0x00000001001579cb <+43>: mov (%rdx),%rdx 0x00000001001579ce <+46>: mov %rdx,-0x30(%rbp) 0x00000001001579d2 <+50>: mov %ecx,-0xdc(%rbp) 2157 Lisp_Object inherited_attrs[LFACE_VECTOR_SIZE]; 2158 Lisp_Object attr_val = attrs[attr_idx]; 0x00000001001579d8 <+56>: mov %ecx,%ecx 0x00000001001579da <+58>: mov %rcx,-0xe8(%rbp) 0x00000001001579e1 <+65>: mov (%rax,%rcx,8),%r14 0x00000001001579e5 <+69>: lea -0xd0(%rbp),%rdi 2159 2160 memcpy (inherited_attrs, attrs, LFACE_VECTOR_SIZE * sizeof (attrs[0])); 0x00000001001579ec <+76>: mov $0xa0,%edx 0x00000001001579f1 <+81>: mov %rax,%rsi 0x00000001001579f4 <+84>: callq 0x1003c7938 ./lisp.h: 1270 return lisp_h_EQ (x, y); 0x00000001001579f9 <+89>: cmp $0xd140,%r14 xfaces.c: 2162 && !NILP (inherited_attrs[LFACE_INHERIT_INDEX]) 0x0000000100157a00 <+96>: je 0x100157a2c 0x0000000100157a02 <+98>: jmpq 0x100157b27 0x0000000100157a07 <+103>: nopw 0x0(%rax,%rax,1) 2191 break; 2192 attr_val = inherited_attrs[attr_idx]; 0x0000000100157a10 <+112>: mov -0xe8(%rbp),%rax 0x0000000100157a17 <+119>: mov -0xd0(%rbp,%rax,8),%r14 ./lisp.h: 1270 return lisp_h_EQ (x, y); 0x0000000100157a1f <+127>: cmp $0xd140,%r14 xfaces.c: 2162 && !NILP (inherited_attrs[LFACE_INHERIT_INDEX]) 0x0000000100157a26 <+134>: jne 0x100157b27 0x0000000100157a2c <+140>: mov -0x50(%rbp),%r13 0x0000000100157a30 <+144>: mov $0xd140,%r14d 2163 && !UNSPECIFIEDP (inherited_attrs[LFACE_INHERIT_INDEX])) 0x0000000100157a36 <+150>: test %r13,%r13 0x0000000100157a39 <+153>: je 0x100157b27 0x0000000100157a3f <+159>: cmp $0xd140,%r13 0x0000000100157a46 <+166>: je 0x100157b27 ./lisp.h: 758 return lisp_h_TAGGEDP (a, tag); 0x0000000100157a4c <+172>: lea 0x5(%r13),%eax 0x0000000100157a50 <+176>: test $0x7,%al xfaces.c: 2168 if (CONSP (parent_face)) 0x0000000100157a52 <+178>: je 0x100157a80 2181 break; 2182 } 2183 if (!ok) /* bad face? */ 2184 break; 2185 } 2186 else 2187 { 2188 ok = get_lface_attributes (w, f, parent_face, inherited_attrs, 0x0000000100157a54 <+180>: xor %r8d,%r8d 0x0000000100157a57 <+183>: mov %r15,%rdi 0x0000000100157a5a <+186>: mov %r12,%rsi 0x0000000100157a5d <+189>: mov %r13,%rdx 0x0000000100157a60 <+192>: lea -0xd0(%rbp),%rcx 0x0000000100157a67 <+199>: mov -0xd8(%rbp),%r9 0x0000000100157a6e <+206>: callq 0x100152c20 2189 false, named_merge_points); 2190 if (!ok) 0x0000000100157a73 <+211>: test %al,%al 0x0000000100157a75 <+213>: jne 0x100157a10 0x0000000100157a77 <+215>: jmpq 0x100157b1c 0x0000000100157a7c <+220>: nopl 0x0(%rax) ./lisp.h: 1270 return lisp_h_EQ (x, y); 0x0000000100157a80 <+224>: test %r13,%r13 0x0000000100157a83 <+227>: lea -0xd0(%rbp),%rbx 0x0000000100157a8a <+234>: mov -0xd8(%rbp),%r14 xfaces.c: 2172 for (tail = parent_face; !NILP (tail); tail = XCDR (tail)) 0x0000000100157a91 <+241>: je 0x100157b07 0x0000000100157a93 <+243>: nopw %cs:0x0(%rax,%rax,1) 0x0000000100157a9d <+253>: nopl (%rax) ./lisp.h: 1443 return lisp_h_XCAR (c); 0x0000000100157aa0 <+256>: mov -0x3(%r13),%rdx xfaces.c: 2174 ok = get_lface_attributes (w, f, XCAR (tail), inherited_attrs, 0x0000000100157aa4 <+260>: xor %r8d,%r8d 0x0000000100157aa7 <+263>: mov %r15,%rdi 0x0000000100157aaa <+266>: mov %r12,%rsi 0x0000000100157aad <+269>: mov %rbx,%rcx 0x0000000100157ab0 <+272>: mov %r14,%r9 0x0000000100157ab3 <+275>: callq 0x100152c20 2175 false, named_merge_points); 2176 if (!ok) 0x0000000100157ab8 <+280>: test %al,%al 0x0000000100157aba <+282>: je 0x100157b1c 2177 break; 2178 attr_val = face_inherited_attr (w, f, inherited_attrs, attr_idx, 0x0000000100157abc <+284>: mov %r15,%rdi 0x0000000100157abf <+287>: mov %r12,%rsi 0x0000000100157ac2 <+290>: mov %rbx,%rdx 0x0000000100157ac5 <+293>: mov -0xdc(%rbp),%ecx 0x0000000100157acb <+299>: mov %r14,%r8 0x0000000100157ace <+302>: callq 0x1001579a0 ./lisp.h: 1270 return lisp_h_EQ (x, y); 0x0000000100157ad3 <+307>: cmp $0xd140,%rax xfaces.c: 2180 if (!UNSPECIFIEDP (attr_val)) 0x0000000100157ad9 <+313>: jne 0x100157b24 ./lisp.h: 1449 return lisp_h_XCDR (c); 0x0000000100157adb <+315>: mov 0x5(%r13),%r13 1270 return lisp_h_EQ (x, y); 0x0000000100157adf <+319>: test %r13,%r13 0x0000000100157ae2 <+322>: lea -0xd0(%rbp),%rbx 0x0000000100157ae9 <+329>: mov -0xd8(%rbp),%r14 xfaces.c: 2172 for (tail = parent_face; !NILP (tail); tail = XCDR (tail)) 0x0000000100157af0 <+336>: jne 0x100157aa0 0x0000000100157af2 <+338>: mov $0xd140,%r14d ./lisp.h: 1270 return lisp_h_EQ (x, y); 0x0000000100157af8 <+344>: cmp $0xd140,%r14 0x0000000100157aff <+351>: je 0x100157a2c 0x0000000100157b05 <+357>: jmp 0x100157b27 0x0000000100157b07 <+359>: mov $0xd140,%r14d 0x0000000100157b0d <+365>: cmp $0xd140,%r14 0x0000000100157b14 <+372>: je 0x100157a2c 0x0000000100157b1a <+378>: jmp 0x100157b27 0x0000000100157b1c <+380>: mov $0xd140,%r14d 0x0000000100157b22 <+386>: jmp 0x100157b27 0x0000000100157b24 <+388>: mov %rax,%r14 0x0000000100157b27 <+391>: mov 0x2a5662(%rip),%rax # 0x1003fd190 0x0000000100157b2e <+398>: mov (%rax),%rax 0x0000000100157b31 <+401>: cmp -0x30(%rbp),%rax 0x0000000100157b35 <+405>: jne 0x100157b4c xfaces.c: 2195 return attr_val; 0x0000000100157b37 <+407>: mov %r14,%rax 0x0000000100157b3a <+410>: add $0xc8,%rsp 0x0000000100157b41 <+417>: pop %rbx 0x0000000100157b42 <+418>: pop %r12 0x0000000100157b44 <+420>: pop %r13 0x0000000100157b46 <+422>: pop %r14 0x0000000100157b48 <+424>: pop %r15 0x0000000100157b4a <+426>: pop %rbp 0x0000000100157b4b <+427>: retq 0x0000000100157b4c <+428>: callq 0x1003c72cc End of assembler dump. (gdb) --=-=-=--