From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: bojohan+mail@dd.chalmers.se.?= (Johan =?UTF-8?Q?Bockg=C3=A5rd) Newsgroups: gmane.emacs.bugs,gmane.emacs.pretest.bugs Subject: bug#1650: 23.0.60; raw-text-dos memory corruption Date: Sat, 20 Dec 2008 16:55:54 +0100 Message-ID: Reply-To: Johan =?UTF-8?Q?Bockg=C3=A5rd , ?=.1650@emacsbugs.donarmstrong.com NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: ger.gmane.org 1229790222 9719 80.91.229.12 (20 Dec 2008 16:23:42 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sat, 20 Dec 2008 16:23:42 +0000 (UTC) To: emacs-pretest-bug@gnu.org Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Sat Dec 20 17:24:47 2008 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1LE4dB-0001OJ-Dp for geb-bug-gnu-emacs@m.gmane.org; Sat, 20 Dec 2008 17:24:47 +0100 Original-Received: from localhost ([127.0.0.1]:45996 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1LE4bw-0002xG-La for geb-bug-gnu-emacs@m.gmane.org; Sat, 20 Dec 2008 11:23:28 -0500 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1LE4bs-0002wR-SX for bug-gnu-emacs@gnu.org; Sat, 20 Dec 2008 11:23:24 -0500 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1LE4bq-0002sw-K3 for bug-gnu-emacs@gnu.org; Sat, 20 Dec 2008 11:23:23 -0500 Original-Received: from [199.232.76.173] (port=56118 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1LE4bq-0002sk-FS for bug-gnu-emacs@gnu.org; Sat, 20 Dec 2008 11:23:22 -0500 Original-Received: from rzlab.ucr.edu ([138.23.92.77]:33911) by monty-python.gnu.org with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.60) (envelope-from ) id 1LE4bp-0001Q4-TM for bug-gnu-emacs@gnu.org; Sat, 20 Dec 2008 11:23:22 -0500 Original-Received: from rzlab.ucr.edu (rzlab.ucr.edu [127.0.0.1]) by rzlab.ucr.edu (8.13.8/8.13.8/Debian-3) with ESMTP id mBKGNJi6032139; Sat, 20 Dec 2008 08:23:19 -0800 Original-Received: (from debbugs@localhost) by rzlab.ucr.edu (8.13.8/8.13.8/Submit) id mBKG576V027484; Sat, 20 Dec 2008 08:05:07 -0800 X-Loop: owner@emacsbugs.donarmstrong.com Resent-From: bojohan+mail@dd.chalmers.se.?= (Johan =?UTF-8?Q?Bockg=C3=A5rd) Resent-To: bug-submit-list@donarmstrong.com Resent-CC: Emacs Bugs Resent-Date: Sat, 20 Dec 2008 16:05:07 +0000 Resent-Message-ID: Resent-Sender: owner@emacsbugs.donarmstrong.com X-Emacs-PR-Message: report 1650 X-Emacs-PR-Package: emacs X-Emacs-PR-Keywords: Original-Received: via spool by submit@emacsbugs.donarmstrong.com id=B.122978856625326 (code B ref -1); Sat, 20 Dec 2008 16:05:07 +0000 Original-Received: (at submit) by emacsbugs.donarmstrong.com; 20 Dec 2008 15:56:06 +0000 X-Spam-Bayes: score:0.5 Bayes not run. spammytokens:Tokens not available. hammytokens:Tokens not available. Original-Received: from fencepost.gnu.org (fencepost.gnu.org [140.186.70.10]) by rzlab.ucr.edu (8.13.8/8.13.8/Debian-3) with ESMTP id mBKFu2o1025320 for ; Sat, 20 Dec 2008 07:56:04 -0800 Original-Received: from mx10.gnu.org ([199.232.76.166]:50625) by fencepost.gnu.org with esmtp (Exim 4.67) (envelope-from ) id 1LE4Aa-0001YL-0g for emacs-pretest-bug@gnu.org; Sat, 20 Dec 2008 10:55:12 -0500 Original-Received: from Debian-exim by monty-python.gnu.org with spam-scanned (Exim 4.60) (envelope-from ) id 1LE4BK-0007Vn-Is for emacs-pretest-bug@gnu.org; Sat, 20 Dec 2008 10:56:00 -0500 Original-Received: from atum.ita.chalmers.se ([129.16.4.148]:40553) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1LE4BK-0007VZ-4g for emacs-pretest-bug@gnu.org; Sat, 20 Dec 2008 10:55:58 -0500 Original-Received: from remote1.student.chalmers.se (remote1.student.chalmers.se [129.16.29.79]) by atum.ita.chalmers.se (Postfix) with ESMTP id 99B2187D8 for ; Sat, 20 Dec 2008 16:55:55 +0100 (CET) Original-Received: by remote1.student.chalmers.se (Postfix, from userid 61540) id 5FB1E9C060; Sat, 20 Dec 2008 16:55:55 +0100 (CET) User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/23.0.60 (gnu/linux) X-detected-operating-system: by monty-python.gnu.org: Solaris 10 (beta) X-detected-operating-system: by monty-python.gnu.org: GNU/Linux 2.6 (newer, 3) Resent-Date: Sat, 20 Dec 2008 11:23:23 -0500 X-BeenThere: bug-gnu-emacs@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:23395 gmane.emacs.pretest.bugs:23527 Archived-At: GNU Emacs 23.0.60.12 (x86_64-unknown-linux-gnu, GTK+ Version 2.14.4) of 2008-12-20 emacs -Q ;; dictd is running on port 2628 (let* ((coding-system-for-read 'raw-text-dos) (coding-system-for-write 'raw-text-dos) (proc (open-network-stream "foo" "foo" "localhost" 2628))) ;; The crash goes away if the next line is uncommented ;; (sit-for .1) (process-send-string proc "define * \"vice\"\r\n")) => Crash (backtrace below) I can reproduce the crash on Emacs versions after 2008-03-25, whereas I don't see the problem on versions before 2008-03-02. Intermediate versions don't crash, but instead hang and consume all memory. 2008-03-25 Stefan Monnier [...] * process.h (struct Lisp_Process): Remove filter_multibyte. * process.c (QCfilter_multibyte): Remove. (setup_process_coding_systems): Don't use filter_multibyte. (Fstart_process, Fmake_network_process): Don't set filter_multibyte. (read_process_output): Don't adjust multibyteness to filter_multibyte. (Fset_process_filter_multibyte): Change the coding-system to approximate the previous behavior. (Fprocess_filter_multibyte_p): Get the multibyteness straight from the coding-system. * coding.c (decode_coding_object): When not decoding into a buffer, obey the coding system's preference of (uni|multi)byte. 2008-03-02 Kenichi Handa * coding.c (decode_coding_utf_8): When eol-type of CODING is `dos', don't decode '\r' if that is the last in the source. (decode_coding_utf_16, decode_coding_emacs_mule) (decode_coding_iso_2022, decode_coding_sjis, decode_coding_big5) (decode_coding_raw_text, decode_coding_charset): Likewise. (produce_chars): Don't decode EOL here. Use EMACS_INT. *** glibc detected *** /home/bojohan/vc/emacs/src/emacs: malloc(): memory corruption: 0x00000000022f83e0 *** ======= Backtrace: ========= /lib/libc.so.6[0x7f4f73ed2cff] /lib/libc.so.6(__libc_malloc+0x98)[0x7f4f73ed4538] /home/bojohan/vc/emacs/src/emacs[0x5497ce] [...] Program received signal SIGABRT, Aborted. [Switching to Thread 0x7f4f78df7770 (LWP 7357)] 0x00007f4f73e88fd5 in raise () from /lib/libc.so.6 (gdb) bt #0 0x00007f4f73e88fd5 in raise () from /lib/libc.so.6 #1 0x00007f4f73e8ab43 in abort () from /lib/libc.so.6 #2 0x00007f4f73ec9fa8 in ?? () from /lib/libc.so.6 #3 0x00007f4f73ed2cff in ?? () from /lib/libc.so.6 #4 0x00007f4f73ed4538 in malloc () from /lib/libc.so.6 #5 0x00000000005497ce in lisp_malloc (nbytes=7357, type=7357) at alloc.c:861 #6 0x000000000054a09a in allocate_string_data (s=0xdc7510, nchars=8136, nbytes=8136) at alloc.c:1991 #7 0x000000000054ab90 in make_uninit_multibyte_string (nchars=8136, nbytes=8136) at alloc.c:2508 #8 0x000000000054ac87 in make_uninit_string (length=7357) at alloc.c:2486 #9 0x00000000005587fd in make_buffer_string_both (start=1, start_byte=1, end=8137, end_byte=, props=1) at editfns.c:2420 #10 0x0000000000481c35 in decode_coding_object (coding=0xab4800, src_object=11030241, from=0, from_byte=0, to=, to_byte=, dst_object=11030337) at coding.c:7307 #11 0x000000000059bc8e in read_process_output (proc=16927316, channel=153) at process.c:5409 #12 0x000000000059f4f1 in wait_reading_process_output (time_limit=30, microsecs=0, read_kbd=-1, do_display=1, wait_for_cell=11030241, wait_proc=0x0, just_wait_proc=0) at process.c:4987 #13 0x0000000000415645 in sit_for (timeout=240, reading=1, do_display=1) at dispnew.c:6637 #14 0x00000000004f9f75 in read_char (commandflag=1, nmaps=2, maps=0x7fff80e2ecc0, prev_event=11030241, used_mouse_menu=0x7fff80e2edd4, end_time=0x0) at keyboard.c:2892 #15 0x00000000004fb8dd in read_key_sequence (keybuf=0x7fff80e2ee60, bufsize=30, prompt=11030241, dont_downcase_last=0, can_return_switch_frame=1, fix_current_buffer=1) at keyboard.c:9343 #16 0x00000000004fd73a in command_loop_1 () at keyboard.c:1621 #17 0x00000000005608cf in internal_condition_case ( bfun=0x4fd520 , handlers=11117457, hfun=0x4f5dd0 ) at eval.c:1511 #18 0x00000000004f524e in command_loop_2 () at keyboard.c:1338 #19 0x00000000005609e7 in internal_catch (tag=, func=0x4f5230 , arg=11030241) at eval.c:1247 #20 0x00000000004f5c10 in command_loop () at keyboard.c:1317 #21 0x00000000004f601c in recursive_edit_1 () at keyboard.c:942 #22 0x00000000004f6194 in Frecursive_edit () at keyboard.c:1004 #23 0x00000000004eb057 in main (argc=2, argv=0x7fff80e2f678) at emacs.c:1786