23.0.50; Crash in ediff-regions-linewise

[Toby Allsopp <toby@mi6.gen.nz>]

In short, ediff-regions-linewise causes a segmentation fault after
choosing any two buffers.  This is with the trunk of CVS as at
2007-10-12 18:47 GMT.

A gdb session follows, with the command to emacs in the middle.  For
your convenience, I repeat the command immediately below.

M-x ediff-regions-linewise <RET> <RET> <RET>

toby@candyboy:/usr/local/src/emacs-cvs/build/src$ gdb emacs
GNU gdb 6.6.90.20070912-debian
Copyright (C) 2007 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu"...
Using host libthread_db library "/lib/libthread_db.so.1".
SIGINT is used by the debugger.
Are you sure you want to change it? (y or n) [answered Y; input not from terminal]
DISPLAY = :0.0
TERM = rxvt-unicode
Breakpoint 1 at 0x50ce48: file /usr/local/src/emacs-cvs/emacs/src/emacs.c, line 431.
Breakpoint 2 at 0x532ace: file /usr/local/src/emacs-cvs/emacs/src/sysdep.c, line 1435.
(gdb) r -Q
Starting program: /usr/local/src/emacs-cvs/build/src/emacs -Q
[Thread debugging using libthread_db enabled]
[New Thread 0x2acd6b1ba560 (LWP 28618)]

M-x ediff-regions-linewise <RET> <RET> <RET>

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x2ab920540560 (LWP 29011)]
0x00000000005c8cdd in print_object (obj=-48625613986906302, printcharfun=11233777, 
    escapeflag=1) at /usr/local/src/emacs-cvs/emacs/src/print.c:2072
2072	      switch (XMISCTYPE (obj))
(gdb) bt fill
No symbol "fill" in current context.
(gdb) bt full
#0  0x00000000005c8cdd in print_object (obj=-48625613986906302, printcharfun=11233777, 
    escapeflag=1) at /usr/local/src/emacs-cvs/emacs/src/print.c:2072
	buf = "\321\326\310\217\377\177\000\000\340\204\t\001\000\000\000\000R\240\260\000\000\000\000\000z\240\260\000\000\000\000\000\242\240\260\000\000\000\000"
#1  0x00000000005c8c72 in print_object (obj=20245076, printcharfun=11233777, 
    escapeflag=1) at /usr/local/src/emacs-cvs/emacs/src/print.c:2062
	i = 0
	tem = -48625613986906302
	real_size = 109
	size = 10
	buf = "d\177\312\000\000\000\000\000\221i\253\000\000\000\000\000\362M\257\000\000\000\000\000!K\257\000\000\000\000\000\300\331\310\217\377\177\000"
#2  0x00000000005c627a in print (obj=20245076, printcharfun=11233777, escapeflag=1)
    at /usr/local/src/emacs-cvs/emacs/src/print.c:1337
No locals.
#3  0x00000000005c41ec in Fprin1 (object=20245076, printcharfun=11233777)
    at /usr/local/src/emacs-cvs/emacs/src/print.c:775
	old = (struct buffer *) 0xac35f0
	old_point = -1
	start_point = -1
	old_point_byte = -1
	start_point_byte = -1
	specpdl_count = 2
	free_print_buffer = 0
	multibyte = 1
	original = 11233777
#4  0x00000000005c5d09 in print_error_message (data=12970069, stream=11233777, 
    context=0x7fff8fc8dc70 "", caller=19115729)
    at /usr/local/src/emacs-cvs/emacs/src/print.c:1138
	obj = 20245076
	errname = 11347729
	errmsg = 11351987
	file_error = 11233681
	tail = 12970261
	gcpro1 = {
  next = 0x7fff8fc8dbd0, 
  var = 0x4cf159, 
  nvars = 15933152
}
	i = 1
#5  0x0000000000510b10 in cmd_error_internal (data=12970069, context=0x7fff8fc8dc70 "")
    at /usr/local/src/emacs-cvs/emacs/src/keyboard.c:1348
	sf = (struct frame *) 0xffa370
#6  0x000000000051092c in cmd_error (data=12970069)
    at /usr/local/src/emacs-cvs/emacs/src/keyboard.c:1285
	old_level = 11233681
	old_length = 11233681
	macroerror = "\0005\254\000\000\000\000\000\000\000\000\000\271*\000\000\000\000\000\000\000\000\000\000\310\345S \271*\000\000\221i\253", '\0' <repeats 14 times>, "|"
#7  0x00000000005ac00f in internal_condition_case (bfun=0x510ec4 <command_loop_1>, 
    handlers=11347633, hfun=0x510825 <cmd_error>)
    at /usr/local/src/emacs-cvs/emacs/src/eval.c:1483
	val = 11700725
	c = {
  tag = 11233681, 
  val = 12970069, 
  next = 0x7fff8fc8de80, 
  gcpro = 0x0, 
  jmp = {{
      __jmpbuf = {46974510529536, 7737872928792378900, 0, 140735605695632, 0, 0, 
        7737872928710589972, -7737908418971959788}, 
      __mask_was_saved = 0, 
      __saved_mask = {
        __val = {110932256, 15571651, 8760720, 0, 140735605695632, 0, 0, 0, 
          46974508370020, 60129542145, 0, 140735605693984, 5811033, 46974586933424, 
          46974510529536, 140735605694352}
      }
    }}, 
  backlist = 0x0, 
  handlerlist = 0x0, 
  lisp_eval_depth = 0, 
  pdlcount = 2, 
  poll_suppress_count = 1, 
  interrupt_input_blocked = 0, 
  byte_stack = 0x0
}
	h = {
  handler = 11347633, 
  var = 11233681, 
  chosen_clause = 11233777, 
  tag = 0x7fff8fc8dd20, 
  next = 0x0
}
#8  0x0000000000510be6 in command_loop_2 ()
    at /usr/local/src/emacs-cvs/emacs/src/keyboard.c:1403
	val = 2
#9  0x00000000005aba3d in internal_catch (tag=11321761, func=0x510bcc <command_loop_2>, 
    arg=11233681) at /usr/local/src/emacs-cvs/emacs/src/eval.c:1229
	c = {
  tag = 11321761, 
  val = 11233681, 
  next = 0x0, 
  gcpro = 0x0, 
  jmp = {{
      __jmpbuf = {46974510529536, 7737872928802864660, 0, 140735605695632, 0, 0, 
        7737872928788184596, -7737908418864742892}, 
      __mask_was_saved = 0, 
      __saved_mask = {
        __val = {5847821, 3617004260970070016, 11233681, 11582817, 11233681, 0, 
          11596930, 11596930, 11596930, 9177137152, 11596930, 4306200977, 11286000, 
          11596930, 11582817, 140735605694400}
      }
    }}, 
  backlist = 0x0, 
  handlerlist = 0x0, 
  lisp_eval_depth = 0, 
  pdlcount = 2, 
  poll_suppress_count = 1, 
  interrupt_input_blocked = 0, 
  byte_stack = 0x0
}
#10 0x0000000000510ba0 in command_loop ()
    at /usr/local/src/emacs-cvs/emacs/src/keyboard.c:1382
No locals.
#11 0x000000000051036b in recursive_edit_1 ()
    at /usr/local/src/emacs-cvs/emacs/src/keyboard.c:991
	count = 1
	val = 5309735
#12 0x000000000051050e in Frecursive_edit ()
    at /usr/local/src/emacs-cvs/emacs/src/keyboard.c:1053
	count = 0
	buffer = 11233681
#13 0x000000000050eb0d in main (argc=2, argv=0x7fff8fc8e498)
    at /usr/local/src/emacs-cvs/emacs/src/emacs.c:1778
	dummy = 140735605695376
	stack_bottom_variable = 0 '\0'
	do_initial_setlocale = 1
	skip_args = 0
	rlim = {
  rlim_cur = 8720000, 
  rlim_max = 18446744073709551615
}
	no_loadup = 0
	junk = 0x0
(gdb) xbacktrace
(gdb) 


In GNU Emacs 23.0.50.1 (x86_64-unknown-linux-gnu, GTK+ Version 2.12.0)
 of 2007-10-13 on candyboy
Windowing system distributor `The X.Org Foundation', version 11.0.10300000
configured using `configure  'CFLAGS=-g -O0''

Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: nil
  value of $LC_CTYPE: nil
  value of $LC_MESSAGES: nil
  value of $LC_MONETARY: nil
  value of $LC_NUMERIC: nil
  value of $LC_TIME: nil
  value of $LANG: en_NZ.UTF-8
  locale-coding-system: utf-8
  default-enable-multibyte-characters: t

Major mode: Lisp Interaction

Minor modes in effect:
  tooltip-mode: t
  tool-bar-mode: t
  mouse-wheel-mode: t
  menu-bar-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  blink-cursor-mode: t
  unify-8859-on-encoding-mode: t
  utf-translate-cjk-mode: t
  auto-compression-mode: t
  line-number-mode: t

Recent input:
M-x r e p o <tab> r <tab> <return>

Recent messages:
For information about GNU Emacs and the GNU system, type C-h C-a.
Making completion list...