Re: Emacs 22.1 reproducible crash

[Giorgos Keramidas <keramida@freebsd.org>]

On 2007-07-30 15:43, Gardner Bell <gbell72@rogers.com> wrote:
> Hello,
>
> When building emacs 22.1 with GTK+ enabled I am able to trigger the
> following crash by opening any plain text file.  Operating system info
> and  GCC version listed below.
>
> If any further information is required from my debug build please let
> me know and I will provide it for you.
>
> dan@home$ uname -a
> FreeBSD home.bsdca.com 7.0-CURRENT FreeBSD 7.0-CURRENT #3: Thu Jul 26
> 15:29:51 EDT 2007     root@home.bsdca.com:/usr/obj/usr/src/sys/HOME
> i386
>
> dan@home$ gcc -v
> Using built-in specs.
> Target: i386-undermydesk-freebsd
> Configured with: FreeBSD/i386 system compiler
> Thread model: posix
> gcc version 4.2.0 20070514 [FreeBSD]
>
> http://pastebin.ca/639673

Please do not use pastebin URLs in emacs-devel.  Many of the subscribers
read their email offline, and they will not be able to read your pasted
text.  I apologize for not having told you this already, when we talked
about posting the crash details...

I copied the pasted text below:

------------------------------------------------------------------------
(gdb) run
Starting program: /usr/local/bin/emacs
[New LWP 100126]
[New Thread 0x83a5000 (LWP 100126)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x83a5000 (LWP 100126)]
0x081a6476 in _free_internal (ptr=0x29aa3e00) at gmalloc.c:1245
1245              next->next = prev->next;
(gdb) bt
#0  0x081a6476 in _free_internal (ptr=0x29aa3e00) at gmalloc.c:1245
#1  0x0814bc61 in emacs_blocked_free (ptr=0x29aa3e00, ptr2=0x29aa3f00)
    at alloc.c:1207
#2  0x288d098b in g_slice_get_config () from /usr/local/lib/libglib-2.0.so.0
#3  0x288d0c41 in g_slice_get_config () from /usr/local/lib/libglib-2.0.so.0
#4  0x288d0c95 in g_slice_get_config () from /usr/local/lib/libglib-2.0.so.0
#5  0x288d1689 in g_slice_free1 () from /usr/local/lib/libglib-2.0.so.0
#6  0x288a86dd in g_datalist_clear () from /usr/local/lib/libglib-2.0.so.0
#7  0x288625bf in g_object_type_init () from /usr/local/lib/libgobject-2.0.so.0
#8  0x2832a847 in gtk_object_destroy () from /usr/local/lib/libgtk-x11-2.0.so.0
#9  0x28404ec3 in gtk_widget_get_default_style ()
   from /usr/local/lib/libgtk-x11-2.0.so.0
#10 0x284193db in gtk_window_new () from /usr/local/lib/libgtk-x11-2.0.so.0
#11 0x2886040c in g_object_unref () from /usr/local/lib/libgobject-2.0.so.0
#12 0x288607e1 in g_object_run_dispose ()
   from /usr/local/lib/libgobject-2.0.so.0
#13 0x2832a605 in gtk_object_destroy () from /usr/local/lib/libgtk-x11-2.0.so.0
#14 0x2840c47b in gtk_widget_destroy () from /usr/local/lib/libgtk-x11-2.0.so.0
#15 0x28310986 in gtk_menu_attach_to_widget ()
   from /usr/local/lib/libgtk-x11-2.0.so.0
#16 0x2886ac59 in g_cclosure_marshal_VOID__VOID ()
   from /usr/local/lib/libgobject-2.0.so.0
#17 0x2885c93d in g_value_set_static_boxed ()
   from /usr/local/lib/libgobject-2.0.so.0
#18 0x2885e217 in g_closure_invoke () from /usr/local/lib/libgobject-2.0.so.0
#19 0x288731f2 in g_signal_has_handler_pending ()
   from /usr/local/lib/libgobject-2.0.so.0
#20 0x28873bb8 in g_signal_emit_valist ()
   from /usr/local/lib/libgobject-2.0.so.0
#21 0x28873fab in g_signal_emit () from /usr/local/lib/libgobject-2.0.so.0
#22 0x2832a886 in gtk_object_destroy () from /usr/local/lib/libgtk-x11-2.0.so.0
#23 0x2840c21d in gtk_widget_hide () from /usr/local/lib/libgtk-x11-2.0.so.0
#24 0x288607d9 in g_object_run_dispose ()
   from /usr/local/lib/libgobject-2.0.so.0
#25 0x2832a605 in gtk_object_destroy () from /usr/local/lib/libgtk-x11-2.0.so.0
#26 0x2840c47b in gtk_widget_destroy () from /usr/local/lib/libgtk-x11-2.0.so.0
#27 0x283186fa in gtk_menu_item_new_with_label ()
   from /usr/local/lib/libgtk-x11-2.0.so.0
#28 0x2886ac59 in g_cclosure_marshal_VOID__VOID ()
   from /usr/local/lib/libgobject-2.0.so.0
#29 0x2885c93d in g_value_set_static_boxed ()
   from /usr/local/lib/libgobject-2.0.so.0
#30 0x2885e29a in g_closure_invoke () from /usr/local/lib/libgobject-2.0.so.0
#31 0x288731f2 in g_signal_has_handler_pending ()
   from /usr/local/lib/libgobject-2.0.so.0
#32 0x28873bb8 in g_signal_emit_valist ()
   from /usr/local/lib/libgobject-2.0.so.0
#33 0x28873fab in g_signal_emit () from /usr/local/lib/libgobject-2.0.so.0
#34 0x2832a886 in gtk_object_destroy () from /usr/local/lib/libgtk-x11-2.0.so.0
#35 0x2840c21d in gtk_widget_hide () from /usr/local/lib/libgtk-x11-2.0.so.0
#36 0x288607d9 in g_object_run_dispose ()
   from /usr/local/lib/libgobject-2.0.so.0
#37 0x2832a605 in gtk_object_destroy () from /usr/local/lib/libgtk-x11-2.0.so.0
#38 0x2840c47b in gtk_widget_destroy () from /usr/local/lib/libgtk-x11-2.0.so.0
#39 0x080efb9b in xg_destroy_widgets (list=0x29aa2740) at gtkutil.c:2337
#40 0x080f16f1 in xg_update_submenu (submenu=0x29a70600, f=0x8710200,
    val=0x8879d80, select_cb=0x808bfa0 <menubar_selection_callback>,
    deactivate_cb=0x808b570 <popup_deactivate_callback>,
    highlight_cb=0x808cd50 <menu_highlight_callback>, cl_data=0x87c5ae0)
    at gtkutil.c:2776
#41 0x080f194b in xg_update_submenu (submenu=0x29a3ecb0, f=0x8710200, val=Variable "val" is not available.
)
    at gtkutil.c:2754
#42 0x080f194b in xg_update_submenu (submenu=0x29a27e50, f=0x8710200, val=Variable "val" is not available.
)
    at gtkutil.c:2754
#43 0x080f2040 in xg_modify_menubar_widgets (menubar=0x29a13490, f=0x8710200,
    val=0x870a1c0, deep_p=1, select_cb=0x808bfa0 <menubar_selection_callback>,
    deactivate_cb=0x808b570 <popup_deactivate_callback>,
    highlight_cb=0x808cd50 <menu_highlight_callback>) at gtkutil.c:2861
#44 0x0808ca5b in set_frame_menubar (f=0x8710200, first_time=0, deep_p=1) at xmenu.c:2393
#45 0x0808ce46 in x_activate_menubar (f=0x8710200) at xmenu.c:1472
#46 0x08102fcd in read_char (commandflag=1, nmaps=2, maps=0xbfbfe440,
    prev_event=674383872, used_mouse_menu=0xbfbfe4d8, end_time=0x0)
    at keyboard.c:4137
#47 0x08104488 in read_key_sequence (keybuf=0xbfbfe594, bufsize=30,
    prompt=674383872, dont_downcase_last=0, can_return_switch_frame=1,
    fix_current_buffer=1) at keyboard.c:9135
#48 0x08106025 in command_loop_1 () at keyboard.c:1618
#49 0x0815e73b in internal_condition_case (bfun=0x8105e90 <command_loop_1>,
    handlers=674436720, hfun=0x8100600 <cmd_error>) at eval.c:1481
#50 0x080ffa03 in command_loop_2 () at keyboard.c:1329
#51 0x0815e7f5 in internal_catch (tag=674432984,
    func=0x80ff9e0 <command_loop_2>, arg=674383872) at eval.c:1222
#52 0x0810043c in command_loop () at keyboard.c:1308
#53 0x081007da in recursive_edit_1 () at keyboard.c:1006
#54 0x081008c6 in Frecursive_edit () at keyboard.c:1067
#55 0x080f67e0 in main (argc=1, argv=0xbfbfe8a4) at emacs.c:1762
(gdb) list *0x080f67e0
0x80f67e0 is in main (emacs.c:1765).
1760
1761      /* Enter editor command loop.  This never returns.  */
1762      Frecursive_edit ();
1763      /* NOTREACHED */
1764      return 0;
1765    }
1766    ^L
1767    /* Sort the args so we can find the most important ones
1768       at the beginning of argv.  */
1769
(gdb) return
Make _free_internal return now? (y or n) y
#0  emacs_blocked_free (
    ptr=0x29aa3e00, ptr2=0x29aa3f00) at alloc.c:1212
1212      if (! NILP (Vmemory_full)
(gdb) info frame
Stack level 0, frame at 0xbfbfce20:
 eip = 0x814bc61 in emacs_blocked_free (alloc.c:1212); saved eip 0x288d098b
 called by frame at 0xbfbfce50
 source language c.
 Arglist at 0xbfbfce18, args: ptr=0x29aa3e00, ptr2=0x29aa3f00
 Locals at 0xbfbfce18, Previous frame's sp is 0xbfbfce20
 Saved registers:
  ebx at 0xbfbfce10, ebp at 0xbfbfce18, esi at 0xbfbfce14, eip at 0xbfbfce1c
(gdb)
------------------------------------------------------------------------