From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Jason Rumney Newsgroups: gmane.emacs.devel Subject: Re: Emacs WIN32 crashes on reinitialzing of lisp process using slime Date: Thu, 12 Apr 2007 23:40:15 +0100 Message-ID: <461EB54F.40909@gnu.org> References: <461EAF08.1050202@gnu.org> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Trace: sea.gmane.org 1176417636 2503 80.91.229.12 (12 Apr 2007 22:40:36 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Thu, 12 Apr 2007 22:40:36 +0000 (UTC) Cc: Eli Zaretskii , cb , emacs-devel@gnu.org To: Jason Rumney Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Fri Apr 13 00:40:29 2007 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1Hc7xt-0005d1-5r for ged-emacs-devel@m.gmane.org; Fri, 13 Apr 2007 00:40:29 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1Hc825-0000zj-Lg for ged-emacs-devel@m.gmane.org; Thu, 12 Apr 2007 18:44:49 -0400 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1Hc823-0000yo-2j for emacs-devel@gnu.org; Thu, 12 Apr 2007 18:44:47 -0400 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1Hc820-0000rb-EJ for emacs-devel@gnu.org; Thu, 12 Apr 2007 18:44:45 -0400 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1Hc820-0000rN-AX for emacs-devel@gnu.org; Thu, 12 Apr 2007 18:44:44 -0400 Original-Received: from outmail1.freedom2surf.net ([194.106.33.237]) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1Hc7xl-0002Ny-LB; Thu, 12 Apr 2007 18:40:21 -0400 Original-Received: from [127.0.0.1] (i-83-67-23-108.freedom2surf.net [83.67.23.108]) by outmail1.freedom2surf.net (Postfix) with ESMTP id BEF7A500C0; Thu, 12 Apr 2007 23:40:20 +0100 (BST) User-Agent: Thunderbird 1.5.0.10 (Windows/20070221) In-Reply-To: <461EAF08.1050202@gnu.org> X-detected-kernel: Linux 2.4-2.6 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:69358 Archived-At: Jason Rumney wrote: > I have narrowed down the crash to a call to free_buffer_text(b) on > line 4967 of buffer.c. It seems to be inlined, so in the stack trace > it claims to be in Fkill_buffer, but the line number appears to be > correct, as there is a call to r_alloc_free on that line, which is > where the abort is coming from, apparently because b->text->beg (which > we are freeing) is NULL. > > Changing r_alloc_free to handle freeing NULL silently will get rid of > the crash, but may disguise other bugs. Further investigation shows that the kill-buffer is called recursively on the same buffer in slime-net-close, due to the hooks calling slime-net-sentinel which in turn calls slime-net-close again. So a simple test case can probably be found by trying to reproduce that recursion.