crash in cvs head

[Sam Steingold <sds@podval.org>]

GNU Emacs 22.0.50.18 (i686-pc-linux-gnu, X toolkit, Xaw3d scroll bars)
 of 2006-10-18 on quant8

I got this crashed session under gdb and I will keep it there till
tomorrow, so if you want me to examine a variable or two - send me an e-mail.
 
Detaching after fork from child process 16616.
Detaching after fork from child process 17936.
Detaching after fork from child process 18085.
Detaching after fork from child process 18086.
Detaching after fork from child process 19178.
Detaching after fork from child process 19179.
Detaching after fork from child process 19180.

Program received signal SIGSEGV, Segmentation fault.
remember_mouse_glyph (f=0xb25e820, gx=281, gy=383, rect=0x82d2174)
    at xdisp.c:2106
2106      r = MATRIX_FIRST_TEXT_ROW (w->current_matrix);
(gdb)
(gdb)
(gdb)
(gdb)
(gdb)
(gdb) where
#0  remember_mouse_glyph (f=0xb25e820, gx=281, gy=383, rect=0x82d2174)
    at xdisp.c:2106
#1  0x080c3240 in note_mouse_movement (frame=0xb25e820, event=0xbf901420)
    at xterm.c:3635
#2  0x080c5c55 in handle_one_xevent (dpyinfo=0x9ea3ef0, eventp=0xbf9014dc,
    finish=0xbf901568, hold_quit=0xbf90259c) at xterm.c:6523
#3  0x080c8879 in XTread_socket (sd=0, expected=1, hold_quit=0xbf90259c)
    at xterm.c:7055
#4  0x080f263d in read_avail_input (expected=Variable "expected" is not available.
) at keyboard.c:6791
#5  0x080f27ea in handle_async_input () at keyboard.c:6937
#6  0x080542d5 in free_glyphs (f=0xb25e820) at dispnew.c:2536
#7  0x0805e652 in Fdelete_frame (frame=187033636, force=137455817)
    at frame.c:1273
#8  0x08151b8a in Ffuncall (nargs=2, args=0xbf9026f0) at eval.c:3000
#9  0x0817c34d in Fbyte_code (bytestr=170628467, vector=172310316, maxdepth=48)
    at bytecode.c:679
#10 0x0815161a in funcall_lambda (fun=170047692, nargs=1,
    arg_vector=0xbf902824) at eval.c:3184
#11 0x08151a21 in Ffuncall (nargs=2, args=0xbf902820) at eval.c:3054
#12 0x08152eb9 in call1 (fn=169961513, arg1=208698244) at eval.c:2782
#13 0x0815a055 in mapcar1 (leni=3, vals=0xbf902870, fn=169961513,
    seq=215497341) at fns.c:3111
#14 0x0815a25c in Fmapcar (function=169961513, sequence=215497341)
    at fns.c:3179
#15 0x08151b8a in Ffuncall (nargs=3, args=0xbf902910) at eval.c:3000
#16 0x0817c34d in Fbyte_code (bytestr=170628707, vector=175613212, maxdepth=24)
    at bytecode.c:679
#17 0x0815161a in funcall_lambda (fun=166881332, nargs=1,
    arg_vector=0xbf902a34) at eval.c:3184
#18 0x08151a21 in Ffuncall (nargs=2, args=0xbf902a30) at eval.c:3054
#19 0x08152eb9 in call1 (fn=166881332, arg1=190430940) at eval.c:2782
#20 0x0815a055 in mapcar1 (leni=3, vals=0xbf902a80, fn=166881332,
    seq=215497037) at fns.c:3111
#21 0x0815a25c in Fmapcar (function=166881332, sequence=215497037)
    at fns.c:3179
#22 0x08151b8a in Ffuncall (nargs=3, args=0xbf902b20) at eval.c:3000
#23 0x0817c34d in Fbyte_code (bytestr=170628739, vector=180866380, maxdepth=32)
    at bytecode.c:679
#24 0x0815161a in funcall_lambda (fun=170047556, nargs=0,
    arg_vector=0xbf902c44) at eval.c:3184
#25 0x08151a21 in Ffuncall (nargs=1, args=0xbf902c40) at eval.c:3054
#26 0x08153409 in apply1 (fn=169760393, arg=137455817) at eval.c:2738
#27 0x0814ec2d in Fcall_interactively (function=169760393,
    record_flag=137455817, keys=178076740) at callint.c:410
#28 0x080efc53 in Fcommand_execute (cmd=169760393, record_flag=137455817,
    keys=137455817, special=137455817) at keyboard.c:9856
#29 0x080fb0cb in command_loop_1 () at keyboard.c:1858
#30 0x08150662 in internal_condition_case (bfun=0x80fad50 <command_loop_1>,
    handlers=137500521, hfun=0x80f5970 <cmd_error>) at eval.c:1481
#31 0x080f4d33 in command_loop_2 () at keyboard.c:1326
#32 0x0815071a in internal_catch (tag=137496729,
---Type <return> to continue, or q <return> to quit---
    func=0x80f4d10 <command_loop_2>, arg=137455817) at eval.c:1222
#33 0x080f57ac in command_loop () at keyboard.c:1305
#34 0x080f5b4a in recursive_edit_1 () at keyboard.c:1003
#35 0x080f5c37 in Frecursive_edit () at keyboard.c:1064
#36 0x080ebdd5 in main (argc=2, argv=0xbf903514) at emacs.c:1794

Lisp Backtrace:
"delete-frame" (0xb25e824)
"calendar-hide-window" (0xc707b84)
"mapcar" (0xa216829)
0x9f26834 PVEC_COMPILED
"mapcar" (0x9f26834)
"exit-calendar" (0x83168c9)
"call-interactively" (0xa1e5689)
(gdb) p *f
$1 = {
  size = 1073742933,
  next = 0xc231778,
  name = 204581747,
  icon_name = 137455817,
  title = 137455817,
  focus_frame = 137455817,
  root_window = 208698244,
  selected_window = 208698244,
  minibuffer_window = 171351556,
  param_alist = 213238093,
  scroll_bars = 202331180,
  condemned_scroll_bars = 137455817,
  menu_bar_items = 137455817,
  face_alist = 214170125,
  menu_bar_vector = 137455817,
  menu_bar_items_used = 0,
  buffer_predicate = 137455817,
  buffer_list = 213242837,
  menu_bar_window = 137455817,
  tool_bar_window = 137455817,
  tool_bar_items = 137455817,
  desired_tool_bar_string = 137455817,
  current_tool_bar_string = 137455817,
  face_cache = 0xc100ee8,
  namebuf = 0xc2fd198 "emacs",
  current_pool = 0x0,
  desired_pool = 0x0,
  desired_matrix = 0x0,
  current_matrix = 0x0,
  glyphs_initialized_p = 0,
  tool_bar_lines = 0,
  n_tool_bar_rows = 0,
  n_tool_bar_items = 0,
  decode_mode_spec_buffer = 0xab03598 "\250\021#",
  insert_line_cost = 0xc22acd0,
  delete_line_cost = 0xb7a3558,
  insert_n_lines_cost = 0xc8a3bb8,
  delete_n_lines_cost = 0xc60d428,
  text_lines = 70,
  text_cols = 80,
  total_lines = 0,
  total_cols = 86,
  new_text_lines = 0,
  new_text_cols = 0,
  left_pos = 0,
  top_pos = 35,
  pixel_height = 702,
  pixel_width = 518,
  x_pixels_diff = 5,
  y_pixels_diff = 24,
---Type <return> to continue, or q <return> to quit---
  win_gravity = 1,
  size_hint_flags = 12,
  border_width = 2,
  internal_border_width = 1,
  column_width = 6,
  space_width = 6,
  line_height = 10,
  output_method = output_x_window,
  output_data = {
    x = 0xa3bb480,
    w32 = 0xa3bb480,
    mac = 0xa3bb480,
    nothing = 171684992
  },
  fringe_cols = 3,
  left_fringe_width = 9,
  right_fringe_width = 9,
  kboard = 0x9ea40a0,
  want_fullscreen = 0,
  menu_bar_lines = 0,
  external_menu_bar = 0,
  display_preempted = 0 '\0',
  visible = 1 '\001',
  iconified = 0 '\0',
  async_visible = 1 '\001',
  async_iconified = 0 '\0',
  garbaged = 0 '\0',
  has_minibuffer = 1 '\001',
  wants_modeline = 1 '\001',
  can_have_scroll_bars = 1 '\001',
  vertical_scroll_bar_type = vertical_scroll_bar_left,
  desired_cursor = BAR_CURSOR,
  cursor_width = 2,
  blink_off_cursor = DEFAULT_CURSOR,
  blink_off_cursor_width = 0,
  auto_raise = 0 '\0',
  auto_lower = 0 '\0',
  no_split = 0 '\0',
  explicit_name = 0 '\0',
  window_sizes_changed = 0 '\0',
  message_buf = 0xa3ea988 "\210\021#",
  scroll_bottom_vpos = -1,
  config_scroll_bar_width = 13,
  config_scroll_bar_cols = 3,
  scroll_bar_actual_width = 18,
  cost_calculation_baud_rate = 19200,
  mouse_moved = 1 '\001',
  gamma = 0,
  extra_line_spacing = 0,
  resized_p = 0,
  force_flush_display_p = 0,
---Type <return> to continue, or q <return> to quit---
  default_face_done_p = 1,
  already_hscrolled_p = 0,
  updated_p = 1
}
(gdb) up
#1  0x080c3240 in note_mouse_movement (frame=0xb25e820, event=0xbf901420)
    at xterm.c:3635
3635          remember_mouse_glyph (frame, event->x, event->y, &last_mouse_glyph);
(gdb) p *event
$2 = {
  type = 7,
  serial = 12459729,
  send_event = 0,
  display = 0x9e99778,
  window = 50926776,
  root = 96,
  subwindow = 0,
  time = 1535017459,
  x = 281,
  y = 383,
  x_root = 286,
  y_root = 442,
  state = 0,
  is_hint = 3 '\003',
  same_screen = 1
}
(gdb) p last_mouse_glyph
$3 = {
  x = 256,
  y = 365,
  width = 6,
  height = 13
}
(gdb) up
#2  0x080c5c55 in handle_one_xevent (dpyinfo=0x9ea3ef0, eventp=0xbf9014dc,
    finish=0xbf901568, hold_quit=0xbf90259c) at xterm.c:6523
6523            note_mouse_movement (f, &event.xmotion);
(gdb) p *dpyinfo
$4 = {
  next = 0x0,
  connection = 7,
  display = 0x9e99778,
  name_list_element = 139431165,
  reference_count = 4,
  screen = 0x9e9df98,
  resx = 90.06094182825484,
  resy = 89.073972602739715,
  visual = 0x9e9e048,
  cmap = 32,
  n_planes = 24,
  height = 1024,
  width = 2560,
  grabbed = 0,
  icon_bitmap_id = 1,
  root_window = 96,
  client_leader_window = 50331659,
  vertical_scroll_bar_cursor = 50331653,
  xrdb = 0x9ea58e8,
  font_table = 0x9eccd00,
  font_table_size = 16,
  smallest_char_width = 2,
  smallest_font_height = 10,
  scratch_cursor_gc = 0xa2c6a38,
  mouse_face_beg_row = -1,
  mouse_face_beg_col = -1,
  mouse_face_beg_x = 55,
  mouse_face_beg_y = 0,
  mouse_face_end_row = -1,
  mouse_face_end_col = -1,
  mouse_face_end_x = 0,
  mouse_face_end_y = 0,
  mouse_face_past_end = 0,
  mouse_face_window = 137455817,
  mouse_face_face_id = 18,
  mouse_face_overlay = 137455817,
  mouse_face_deferred_gc = 0,
  mouse_face_mouse_frame = 0x0,
  mouse_face_mouse_x = 261,
  mouse_face_mouse_y = 372,
  mouse_face_defer = 0,
  mouse_face_hidden = 0,
  mouse_face_image_state = 0,
  x_id_name = 0x9ea40f0 "emacs@quant8.janestcapital.quant",
  n_fonts = 14,
  bitmaps = 0x9eda780,
  bitmaps_size = 10,
  bitmaps_last = 1,
  meta_mod_mask = 8,
  shift_lock_mask = 0,
---Type <return> to continue, or q <return> to quit---
  alt_mod_mask = 0,
  super_mod_mask = 64,
  hyper_mod_mask = 0,
  Xatom_wm_protocols = 240,
  Xatom_wm_take_focus = 238,
  Xatom_wm_save_yourself = 411,
  Xatom_wm_delete_window = 237,
  Xatom_wm_change_state = 290,
  Xatom_wm_configure_denied = 412,
  Xatom_wm_window_moved = 413,
  Xatom_wm_client_leader = 243,
  Xatom_editres = 414,
  Xatom_CLIPBOARD = 272,
  Xatom_TIMESTAMP = 281,
  Xatom_TEXT = 415,
  Xatom_DELETE = 273,
  Xatom_COMPOUND_TEXT = 264,
  Xatom_UTF8_STRING = 234,
  Xatom_MULTIPLE = 277,
  Xatom_INCR = 274,
  Xatom_EMACS_TMP = 416,
  Xatom_TARGETS = 280,
  Xatom_NULL = 278,
  Xatom_ATOM_PAIR = 257,
  Xatom_PIXEL_SIZE = 198,
  Xatom_AVERAGE_WIDTH = 202,
  Xatom_MULE_BASELINE_OFFSET = 417,
  Xatom_MULE_RELATIVE_COMPOSE = 418,
  Xatom_MULE_DEFAULT_ASCENT = 419,
  Xatom_DONE = 421,
  Xatom_PAGE = 420,
  Xatom_Scrollbar = 422,
  kboard = 0x9ea40a0,
  cut_buffers_initialized = 1,
  x_focus_frame = 0xb25e820,
  x_focus_event_frame = 0xb25e820,
  x_highlight_frame = 0xb25e820,
  null_pixel = 50331654,
  gray = 50331656,
  image_cache = 0x9eab1f0,
  xim = 0x9ea94c0,
  xim_styles = 0x9ea9100,
  color_cells = 0x0,
  ncolor_cells = 0,
  red_bits = 8,
  blue_bits = 8,
  green_bits = 8,
  red_offset = 16,
  blue_offset = 0,
  green_offset = 8,
  wm_type = X_WMTYPE_UNKNOWN,
---Type <return> to continue, or q <return> to quit---
  x_dnd_atoms = 0x9ea8cc8,
  x_dnd_atoms_size = 8,
  x_dnd_atoms_length = 6
}
(gdb)


-- 
Sam Steingold (http://www.podval.org/~sds) on Fedora Core release 5 (Bordeaux)
http://jihadwatch.org http://pmw.org.il http://openvotingconsortium.org
http://honestreporting.com http://ffii.org http://iris.org.il http://memri.org
A computer scientist is someone who fixes things that aren't broken.