Crash in CVS head

Crash in CVS head

[Kim F. Storm]

This is todays CVS head running on GNU/Linux (RedHat 6.2) under X.

(gdb) bt
#0  0x402c1d41 in __kill () from /lib/libc.so.6
#1  0x80d1d21 in fatal_error_signal (sig=11) at emacs.c:363
#2  0x402c1c68 in __restore () at ../sysdeps/unix/sysv/linux/i386/sigaction.c:127
#3  0x402fc5ce in __libc_malloc (bytes=4160) at malloc.c:2696
#4  0x8113231 in emacs_blocked_free (ptr=0x1040) at alloc.c:710
#5  0x402fc52a in __libc_malloc (bytes=4160) at malloc.c:2683
#6  0x8112f13 in xmalloc (size=0) at alloc.c:527
#7  0x804fc5e in adjust_glyph_matrix (w=0x89f0b88, matrix=0x8c3f318, x=0, y=0,
    dim={width = 208, height = 46}) at dispnew.c:737
#8  0x805101f in allocate_matrices_for_window_redisplay (w=0x8af5750)
    at dispnew.c:2048
#9  0x8050fd2 in allocate_matrices_for_window_redisplay (w=0x8cf25f8)
    at dispnew.c:2033
#10 0x80515d1 in adjust_frame_glyphs_for_window_redisplay (f=0x84eb3d8)
    at dispnew.c:2370
#11 0x80511c2 in adjust_frame_glyphs (f=0x84eb3d8) at dispnew.c:2127
#12 0x805107b in adjust_glyphs (f=0x84eb3d8) at dispnew.c:2071
#13 0x807b476 in Fsplit_window (window=1219450704, size=11, horflag=405435844)
    at window.c:3358

I had been editing some files and switched to Gnus; I clicked with the
mouse on a message in the summary buffer.  Goodbye emacs.

Anyone seen something similar recently (I haven't)?

-- 
Kim F. Storm <storm@cua.dk> http://www.cua.dk

crash in cvs head

[Sam Steingold]

GNU Emacs 22.0.50.9 (i686-pc-linux-gnu, X toolkit, Xaw3d scroll bars)
 of 2006-03-06 on quant8

cvs head of this morning:
 
Program received signal SIGSEGV, Segmentation fault.
0x080c9508 in x_any_window_to_frame (dpyinfo=0x90cc360, wdesc=50526192)
    at xfns.c:356
356           if (FRAME_X_P (f) && FRAME_X_DISPLAY_INFO (f) == dpyinfo)
(gdb) 
(gdb) 
(gdb) p f
No symbol "f" in current context.
(gdb) up
#1  0x080c6bc0 in XTread_socket (sd=0, expected=1, hold_quit=0xbfcfe7ac)
    at xterm.c:5585
5585                                                event->xclient.window);
(gdb) down
#0  0x080c9508 in x_any_window_to_frame (dpyinfo=0x90cc360, wdesc=50526192)
    at xfns.c:356
356           if (FRAME_X_P (f) && FRAME_X_DISPLAY_INFO (f) == dpyinfo)
(gdb) list
351           frame = XCAR (tail);
352           if (!GC_FRAMEP (frame))
353             continue;
354
355           f = XFRAME (frame);
356           if (FRAME_X_P (f) && FRAME_X_DISPLAY_INFO (f) == dpyinfo)
357             {
358               /* This frame matches if the window is any of its widgets.  */
359               x = f->output_data.x;
360               if (x->hourglass_window == wdesc)
(gdb) p f
No symbol "f" in current context.
(gdb) p dpyinfo 
$1 = (struct x_display_info *) 0x90cc360
(gdb) p *dpyinfo 
$2 = {next = 0x0, connection = 7, display = 0x90bfe98, 
  name_list_element = 139418317, reference_count = 9, screen = 0x90c4690, 
  resx = 90.06094182825484, resy = 89.073972602739715, visual = 0x90c4740, 
  cmap = 32, n_planes = 24, height = 1024, width = 2560, grabbed = 0, 
  icon_bitmap_id = 1, root_window = 88, client_leader_window = 50331659, 
  vertical_scroll_bar_cursor = 50331653, xrdb = 0x90cd048, 
  font_table = 0x917c4a0, font_table_size = 16, smallest_char_width = 6, 
  smallest_font_height = 10, scratch_cursor_gc = 0x92d4828, 
  mouse_face_beg_row = -1, mouse_face_beg_col = -1, mouse_face_beg_x = 325, 
  mouse_face_beg_y = 0, mouse_face_end_row = -1, mouse_face_end_col = -1, 
  mouse_face_end_x = 0, mouse_face_end_y = 0, mouse_face_past_end = 0, 
  mouse_face_window = 137481209, mouse_face_face_id = 21, 
  mouse_face_overlay = 137481209, mouse_face_deferred_gc = 0, 
  mouse_face_mouse_frame = 0x926f518, mouse_face_mouse_x = 354, 
  mouse_face_mouse_y = 565, mouse_face_defer = 0, mouse_face_hidden = 0, 
  mouse_face_image_state = 0, 
  x_id_name = 0x90cc550 "emacs@quant8.janestcapital.quant", n_fonts = 7, 
  bitmaps = 0x918b1e0, bitmaps_size = 10, bitmaps_last = 1, meta_mod_mask = 8, 
  shift_lock_mask = 0, alt_mod_mask = 0, super_mod_mask = 64, 
  hyper_mod_mask = 0, Xatom_wm_protocols = 223, Xatom_wm_take_focus = 221, 
  Xatom_wm_save_yourself = 395, Xatom_wm_delete_window = 220, 
  Xatom_wm_change_state = 285, Xatom_wm_configure_denied = 396, 
  Xatom_wm_window_moved = 397, Xatom_wm_client_leader = 226, 
  Xatom_editres = 398, Xatom_CLIPBOARD = 359, Xatom_TIMESTAMP = 314, 
  Xatom_TEXT = 399, Xatom_DELETE = 400, Xatom_COMPOUND_TEXT = 246, 
  Xatom_UTF8_STRING = 217, Xatom_MULTIPLE = 313, Xatom_INCR = 401, 
  Xatom_EMACS_TMP = 402, Xatom_TARGETS = 312, Xatom_NULL = 403, 
  Xatom_ATOM_PAIR = 240, Xatom_PIXEL_SIZE = 197, Xatom_AVERAGE_WIDTH = 202, 
  Xatom_MULE_BASELINE_OFFSET = 404, Xatom_MULE_RELATIVE_COMPOSE = 405, 
  Xatom_MULE_DEFAULT_ASCENT = 406, Xatom_DONE = 408, Xatom_PAGE = 407, 
  Xatom_Scrollbar = 409, kboard = 0x90cc500, cut_buffers_initialized = 1, 
  x_focus_frame = 0x926f518, x_focus_event_frame = 0x926f518, 
  x_highlight_frame = 0x926f518, null_pixel = 50331654, gray = 50331656, 
  image_cache = 0x90cd208, xim = 0x90cead8, xim_styles = 0x90dfc90, 
  color_cells = 0x0, ncolor_cells = 0, red_bits = 8, blue_bits = 8, 
  green_bits = 8, red_offset = 16, blue_offset = 0, green_offset = 8, 
  wm_type = X_WMTYPE_UNKNOWN}
(gdb) where
#0  0x080c9508 in x_any_window_to_frame (dpyinfo=0x90cc360, wdesc=50526192)
    at xfns.c:356
#1  0x080c6bc0 in XTread_socket (sd=0, expected=1, hold_quit=0xbfcfe7ac)
    at xterm.c:5585
#2  0x080edf14 in read_avail_input (expected=1) at keyboard.c:6717
#3  0x080ee0ae in handle_async_input () at keyboard.c:6863
#4  0x08130bfd in allocate_string_data (s=0xa316c98, nchars=48, nbytes=48)
    at alloc.c:2004
#5  0x08130cd5 in make_uninit_multibyte_string (nchars=48, nbytes=48)
    at alloc.c:2480
#6  0x08130de5 in make_specified_string (
    contents=0x9f633b0 "/usr/local/sds/multi/multi--production/rmonitor/cmp_monitor.ml", nchars=-1, nbytes=48, multibyte=1) at alloc.c:2433
#7  0x0810de78 in Ffile_name_directory (filename=166480403) at fileio.c:482
#8  0x08146450 in Ffuncall (nargs=2, args=0xbfcfe910) at eval.c:2879
#9  0x08170bb1 in Fbyte_code (bytestr=136914595, vector=136914756, maxdepth=7)
    at bytecode.c:694
#10 0x08145e83 in funcall_lambda (fun=Variable "fun" is not available.
) at eval.c:3066
#11 0x08146386 in Ffuncall (nargs=2, args=0xbfcfea20) at eval.c:2934
#12 0x08170bb1 in Fbyte_code (bytestr=136915747, vector=136916084, maxdepth=10)
    at bytecode.c:694
#13 0x08145e83 in funcall_lambda (fun=Variable "fun" is not available.
) at eval.c:3066
#14 0x08146386 in Ffuncall (nargs=1, args=0xbfcfeb88) at eval.c:2934
#15 0x0814748e in run_hook_with_args (nargs=1, args=0xbfcfeb88, 
    cond=to_completion) at eval.c:2542
#16 0x08147603 in Frun_hooks (nargs=1, args=0xbfcfec14) at eval.c:2405
#17 0x081464e6 in Ffuncall (nargs=2, args=0xbfcfec10) at eval.c:2860
#18 0x08147339 in call1 (fn=137547881, arg1=137663761) at eval.c:2668
#19 0x080e67cb in safe_run_hooks_1 (hook=137481209) at keyboard.c:2036
#20 0x081449b3 in internal_condition_case (bfun=0x80e67b4 <safe_run_hooks_1>, 
    handlers=137481257, hfun=0x80e67d0 <safe_run_hooks_error>) at eval.c:1465
#21 0x080e5f4c in safe_run_hooks (hook=137663761) at keyboard.c:2064
#22 0x0806abcb in update_menu_bar (f=0xa8b6cc8, save_match_data=0)
    at xdisp.c:9055
#23 0x08078a21 in prepare_menu_bars () at xdisp.c:8947
#24 0x08079300 in redisplay_internal (preserve_echo_area=Variable "preserve_echo_area" is not available.
) at xdisp.c:10700
#25 0x080eecf9 in read_char (commandflag=1, nmaps=2, maps=0xbfcff570, 
    prev_event=137481209, used_mouse_menu=0xbfcff618) at keyboard.c:2549
#26 0x080f0fa5 in read_key_sequence (keybuf=0xbfcff6b4, bufsize=30, 
    prompt=137481209, dont_downcase_last=0, can_return_switch_frame=1, 
    fix_current_buffer=1) at keyboard.c:8874
#27 0x080f2a77 in command_loop_1 () at keyboard.c:1536
#28 0x081449b3 in internal_condition_case (bfun=0x80f28e8 <command_loop_1>, 
    handlers=137525033, hfun=0x80eb46c <cmd_error>) at eval.c:1465
#29 0x080e5df2 in command_loop_2 () at keyboard.c:1328
#30 0x081448cb in internal_catch (tag=137521265, 
    func=0x80e5dd4 <command_loop_2>, arg=137481209) at eval.c:1211
#31 0x080e5c09 in command_loop () at keyboard.c:1307
#32 0x080e5ca3 in recursive_edit_1 () at keyboard.c:1000
#33 0x080e5d96 in Frecursive_edit () at keyboard.c:1061
#34 0x080e4ea8 in main (argc=1, argv=0xbfcffd24) at emacs.c:1789
(gdb) up
#1  0x080c6bc0 in XTread_socket (sd=0, expected=1, hold_quit=0xbfcfe7ac)
    at xterm.c:5585
5585                                                event->xclient.window);
(gdb) p event
$3 = {type = 17, xany = {type = 17, serial = 3379299, send_event = 0, 
    display = 0x90bfe98, window = 50526192}, xkey = {type = 17, 
    serial = 3379299, send_event = 0, display = 0x90bfe98, window = 50526192, 
    root = 50526192, subwindow = 0, time = 2339890197, x = 354, y = 565, 
    x_root = 1108, y_root = 613, state = 0, keycode = 24, same_screen = 1}, 
  xbutton = {type = 17, serial = 3379299, send_event = 0, display = 0x90bfe98, 
    window = 50526192, root = 50526192, subwindow = 0, time = 2339890197, 
    x = 354, y = 565, x_root = 1108, y_root = 613, state = 0, button = 24, 
    same_screen = 1}, xmotion = {type = 17, serial = 3379299, send_event = 0, 
    display = 0x90bfe98, window = 50526192, root = 50526192, subwindow = 0, 
    time = 2339890197, x = 354, y = 565, x_root = 1108, y_root = 613, 
    state = 0, is_hint = 24 '\030', same_screen = 1}, xcrossing = {type = 17, 
    serial = 3379299, send_event = 0, display = 0x90bfe98, window = 50526192, 
    root = 50526192, subwindow = 0, time = 2339890197, x = 354, y = 565, 
    x_root = 1108, y_root = 613, mode = 0, detail = 24, same_screen = 1, 
    focus = 0, state = 0}, xfocus = {type = 17, serial = 3379299, 
    send_event = 0, display = 0x90bfe98, window = 50526192, mode = 50526192, 
    detail = 0}, xexpose = {type = 17, serial = 3379299, send_event = 0, 
    display = 0x90bfe98, window = 50526192, x = 50526192, y = 0, 
    width = -1955077099, height = 354, count = 565}, xgraphicsexpose = {
    type = 17, serial = 3379299, send_event = 0, display = 0x90bfe98, 
    drawable = 50526192, x = 50526192, y = 0, width = -1955077099, 
    height = 354, count = 565, major_code = 1108, minor_code = 613}, 
  xnoexpose = {type = 17, serial = 3379299, send_event = 0, 
    display = 0x90bfe98, drawable = 50526192, major_code = 50526192, 
    minor_code = 0}, xvisibility = {type = 17, serial = 3379299, 
    send_event = 0, display = 0x90bfe98, window = 50526192, state = 50526192}, 
  xcreatewindow = {type = 17, serial = 3379299, send_event = 0, 
    display = 0x90bfe98, parent = 50526192, window = 50526192, x = 0, 
    y = -1955077099, width = 354, height = 565, border_width = 1108, 
    override_redirect = 613}, xdestroywindow = {type = 17, serial = 3379299, 
    send_event = 0, display = 0x90bfe98, event = 50526192, window = 50526192}, 
  xunmap = {type = 17, serial = 3379299, send_event = 0, display = 0x90bfe98, 
    event = 50526192, window = 50526192, from_configure = 0}, xmap = {
    type = 17, serial = 3379299, send_event = 0, display = 0x90bfe98, 
    event = 50526192, window = 50526192, override_redirect = 0}, 
  xmaprequest = {type = 17, serial = 3379299, send_event = 0, 
    display = 0x90bfe98, parent = 50526192, window = 50526192}, xreparent = {
    type = 17, serial = 3379299, send_event = 0, display = 0x90bfe98, 
    event = 50526192, window = 50526192, parent = 0, x = -1955077099, y = 354, 
    override_redirect = 565}, xconfigure = {type = 17, serial = 3379299, 
    send_event = 0, display = 0x90bfe98, event = 50526192, window = 50526192, 
    x = 0, y = -1955077099, width = 354, height = 565, border_width = 1108, 
    above = 613, override_redirect = 0}, xgravity = {type = 17, 
    serial = 3379299, send_event = 0, display = 0x90bfe98, event = 50526192, 
    window = 50526192, x = 0, y = -1955077099}, xresizerequest = {type = 17, 
    serial = 3379299, send_event = 0, display = 0x90bfe98, window = 50526192, 
    width = 50526192, height = 0}, xconfigurerequest = {type = 17, 
    serial = 3379299, send_event = 0, display = 0x90bfe98, parent = 50526192, 
    window = 50526192, x = 0, y = -1955077099, width = 354, height = 565, 
    border_width = 1108, above = 613, detail = 0, value_mask = 24}, 
  xcirculate = {type = 17, serial = 3379299, send_event = 0, 
    display = 0x90bfe98, event = 50526192, window = 50526192, place = 0}, 
  xcirculaterequest = {type = 17, serial = 3379299, send_event = 0, 
    display = 0x90bfe98, parent = 50526192, window = 50526192, place = 0}, 
  xproperty = {type = 17, serial = 3379299, send_event = 0, 
    display = 0x90bfe98, window = 50526192, atom = 50526192, time = 0, 
    state = -1955077099}, xselectionclear = {type = 17, serial = 3379299, 
    send_event = 0, display = 0x90bfe98, window = 50526192, 
    selection = 50526192, time = 0}, xselectionrequest = {type = 17, 
    serial = 3379299, send_event = 0, display = 0x90bfe98, owner = 50526192, 
    requestor = 50526192, selection = 0, target = 2339890197, property = 354, 
    time = 565}, xselection = {type = 17, serial = 3379299, send_event = 0, 
    display = 0x90bfe98, requestor = 50526192, selection = 50526192, 
    target = 0, property = 2339890197, time = 354}, xcolormap = {type = 17, 
    serial = 3379299, send_event = 0, display = 0x90bfe98, window = 50526192, 
    colormap = 50526192, new = 0, state = -1955077099}, xclient = {type = 17, 
    serial = 3379299, send_event = 0, display = 0x90bfe98, window = 50526192, 
    message_type = 50526192, format = 0, data = {
      b = "\025�\213b\001\000\0005\002\000\000T\004\000\000e\002\000", s = {
        -7147, -29833, 354, 0, 565, 0, 1108, 0, 613, 0}, l = {-1955077099, 
        354, 565, 1108, 613}}}, xmapping = {type = 17, serial = 3379299, 
    send_event = 0, display = 0x90bfe98, window = 50526192, 
    request = 50526192, first_keycode = 0, count = -1955077099}, xerror = {
---Type <return> to continue, or q <return> to quit---
    type = 17, display = 0x339063, resourceid = 0, serial = 151781016, 
    error_code = 240 '�, request_code = 247 '�, minor_code = 2 '\002'}, 
  xkeymap = {type = 17, serial = 3379299, send_event = 0, display = 0x90bfe98, 
    window = 50526192, 
    key_vector = "�\002\003\000\000\000\000\025�\213b\001\000\0005\002\000\000T\004\000\000e\002\000\000\000\000\000"}, pad = {17, 3379299, 0, 151781016, 
    50526192, 50526192, 0, -1955077099, 354, 565, 1108, 613, 0, 24, 1, 0, 0, 
    0, 0, 0, 0, 0, 0, 0}}
(gdb) c
Continuing.

Program received signal SIGSEGV, Segmentation fault.
0x080c9508 in x_any_window_to_frame (dpyinfo=0x90cc360, wdesc=50526192)
    at xfns.c:356
356           if (FRAME_X_P (f) && FRAME_X_DISPLAY_INFO (f) == dpyinfo)


-- 
Sam Steingold (http://www.podval.org/~sds) on Fedora Core release 4 (Stentz)
http://ffii.org http://www.mideasttruth.com http://www.honestreporting.com
http://www.palestinefacts.org http://www.iris.org.il
All extremists should be taken out and shot.

Re: crash in cvs head

[Eli Zaretskii]

> From: Sam Steingold <sds@podval.org>
> Date: Mon, 06 Mar 2006 14:08:51 -0500
> 
> #0  0x080c9508 in x_any_window_to_frame (dpyinfo=0x90cc360, wdesc=50526192)
>     at xfns.c:356
> 356           if (FRAME_X_P (f) && FRAME_X_DISPLAY_INFO (f) == dpyinfo)
> (gdb) list
> 351           frame = XCAR (tail);
> 352           if (!GC_FRAMEP (frame))
> 353             continue;
> 354
> 355           f = XFRAME (frame);
> 356           if (FRAME_X_P (f) && FRAME_X_DISPLAY_INFO (f) == dpyinfo)
> 357             {
> 358               /* This frame matches if the window is any of its widgets.  */
> 359               x = f->output_data.x;
> 360               if (x->hourglass_window == wdesc)
> (gdb) p f
> No symbol "f" in current context.

If GDB is unable to display `f', you can try working around that by
looking at `frame' instead.

I think we _need_ to see what's in `f', since that's what seems to be
causing the crash.

crash in cvs head

[Sam Steingold]

GNU Emacs 22.0.50.9 (i686-pc-linux-gnu, X toolkit, Xaw3d scroll bars)
 of 2006-06-26 on quant8

Program received signal SIGSEGV, Segmentation fault.
x_free_frame_resources (f=0xb8b0588) at xterm.c:9018
9018      if (dpyinfo->display)
(gdb) where
#0  x_free_frame_resources (f=0xb8b0588) at xterm.c:9018
#1  0x080cedf4 in unwind_create_frame (frame=193660300) at xfns.c:2968
#2  0x0814e2ed in unbind_to (count=800, value=137541833) at eval.c:3260
#3  0x0814e909 in unwind_to_catch (catch=0xbf82e2fc, value=Variable "value" is not available.
) at eval.c:1259
#4  0x08150673 in Fsignal (error_symbol=137586497, data=137541833)
    at eval.c:1692
#5  0x081588a7 in Fassq (key=137697129, list=210757485) at fns.c:1536
#6  0x0805bb43 in x_get_arg (dpyinfo=0xa5bca30, alist=210757461,
    param=137697129, attribute=0x81a158b "iconName", class=0x81a2bc6 "Title",
    type=RES_TYPE_STRING) at frame.c:3524
#7  0x080d39da in Fx_create_frame (parms=210757541) at xfns.c:3080
#8  0x08150263 in Ffuncall (nargs=2, args=0xbf82da28) at eval.c:2904
#9  0x0817b08f in Fbyte_code (bytestr=136369563, vector=136369644, maxdepth=40)
    at bytecode.c:694
#10 0x0814fdb8 in funcall_lambda (fun=136369516, nargs=1,
    arg_vector=0xbf82db54) at eval.c:3091
#11 0x081501b7 in Ffuncall (nargs=2, args=0xbf82db50) at eval.c:2959
#12 0x0817b08f in Fbyte_code (bytestr=136807355, vector=136807396, maxdepth=24)
    at bytecode.c:694
#13 0x0814fdb8 in funcall_lambda (fun=136807308, nargs=1,
    arg_vector=0xbf82dc74) at eval.c:3091
#14 0x081501b7 in Ffuncall (nargs=2, args=0xbf82dc70) at eval.c:2959
#15 0x0817b08f in Fbyte_code (bytestr=136802179, vector=136802324, maxdepth=40)
    at bytecode.c:694
#16 0x0814fdb8 in funcall_lambda (fun=136802124, nargs=1,
    arg_vector=0xbf82dda4) at eval.c:3091
#17 0x081501b7 in Ffuncall (nargs=2, args=0xbf82dda0) at eval.c:2959
#18 0x08151539 in call1 (fn=139816017, arg1=214434196) at eval.c:2693
#19 0x0810b255 in Fpop_to_buffer (buffer=205377659, other_window=137541833,
    norecord=137541833) at buffer.c:1726
#20 0x08150296 in Ffuncall (nargs=2, args=0xbf82de50) at eval.c:2910
#21 0x0817b08f in Fbyte_code (bytestr=205377691, vector=179411964, maxdepth=32)
    at bytecode.c:694
#22 0x0814fdb8 in funcall_lambda (fun=199764332, nargs=1,
    arg_vector=0xbf82df74) at eval.c:3091
#23 0x081501b7 in Ffuncall (nargs=2, args=0xbf82df70) at eval.c:2959
#24 0x0817b08f in Fbyte_code (bytestr=136606035, vector=136606060, maxdepth=16)
    at bytecode.c:694
#25 0x0814fdb8 in funcall_lambda (fun=136606004, nargs=0,
    arg_vector=0xbf82e094) at eval.c:3091
#26 0x081501b7 in Ffuncall (nargs=1, args=0xbf82e090) at eval.c:2959
#27 0x08151a49 in apply1 (fn=138552673, arg=137541833) at eval.c:2649
#28 0x0814d375 in Fcall_interactively (function=138552673,
    record_flag=137541833, keys=179186388) at callint.c:412
#29 0x080eefa3 in Fcommand_execute (cmd=138552673, record_flag=137541833,
    keys=137541833, special=137541833) at keyboard.c:9759
#30 0x080fa21b in command_loop_1 () at keyboard.c:1791
#31 0x0814eda2 in internal_condition_case (bfun=0x80f9ea0 <command_loop_1>,
    handlers=137586473, hfun=0x80f4ca0 <cmd_error>) at eval.c:1476
#32 0x080f3f43 in command_loop_2 () at keyboard.c:1328
#33 0x0814ee5a in internal_catch (tag=137610057,
---Type <return> to continue, or q <return> to quit---
    func=0x80f3f20 <command_loop_2>, arg=137541833) at eval.c:1214
#34 0x080f4906 in command_loop () at keyboard.c:1295
#35 0x080f4a0a in recursive_edit_1 () at keyboard.c:1000
#36 0x08114fb6 in read_minibuf (map=137529837, initial=195494923,
    prompt=140206656, backup_n=Variable "backup_n" is not available.
) at minibuf.c:725
#37 0x0811563e in Fcompleting_read (prompt=195495243, table=137661881,
    predicate=195494923, require_match=Variable "require_match" is not available.
) at minibuf.c:1771
#38 0x081186bf in Fread_file_name (prompt=195495243, dir=Variable "dir" is not available.
) at fileio.c:6436
#39 0x08150317 in Ffuncall (nargs=4, args=0xbf82e6f4) at eval.c:2923
#40 0x0817b08f in Fbyte_code (bytestr=181798667, vector=181802060, maxdepth=48)
    at bytecode.c:694
#41 0x0814fdb8 in funcall_lambda (fun=181802332, nargs=6,
    arg_vector=0xbf82e824) at eval.c:3091
#42 0x081501b7 in Ffuncall (nargs=7, args=0xbf82e820) at eval.c:2959
#43 0x0817b08f in Fbyte_code (bytestr=181798971, vector=181803044, maxdepth=56)
    at bytecode.c:694
#44 0x0814fdb8 in funcall_lambda (fun=181803252, nargs=1,
    arg_vector=0xbf82e954) at eval.c:3091
#45 0x081501b7 in Ffuncall (nargs=2, args=0xbf82e950) at eval.c:2959
#46 0x0817b08f in Fbyte_code (bytestr=181798603, vector=181801700, maxdepth=16)
    at bytecode.c:694
#47 0x0814f7e9 in Feval (form=181721525) at eval.c:2250
#48 0x0814fbdf in Fprogn (args=181721885) at eval.c:434
#49 0x0808e88e in Fsave_window_excursion (args=181721885) at window.c:6486
#50 0x0817a316 in Fbyte_code (bytestr=181798571, vector=181801812, maxdepth=24)
    at bytecode.c:855
#51 0x0814fdb8 in funcall_lambda (fun=181801964, nargs=3,
    arg_vector=0xbf82eba4) at eval.c:3091
#52 0x081501b7 in Ffuncall (nargs=4, args=0xbf82eba0) at eval.c:2959
#53 0x0817b08f in Fbyte_code (bytestr=181301787, vector=181311644, maxdepth=48)
    at bytecode.c:694
#54 0x0814fdb8 in funcall_lambda (fun=181311956, nargs=1,
    arg_vector=0xbf82ecd4) at eval.c:3091
#55 0x081501b7 in Ffuncall (nargs=2, args=0xbf82ecd0) at eval.c:2959
#56 0x0817b08f in Fbyte_code (bytestr=181301995, vector=181312284, maxdepth=16)
    at bytecode.c:694
#57 0x0814fdb8 in funcall_lambda (fun=181312428, nargs=1,
    arg_vector=0xbf82ee64) at eval.c:3091
#58 0x081501b7 in Ffuncall (nargs=2, args=0xbf82ee60) at eval.c:2959
#59 0x0814d5d3 in Fcall_interactively (function=180818193,
    record_flag=137541833, keys=179186388) at callint.c:884
#60 0x080eefa3 in Fcommand_execute (cmd=180818193, record_flag=137541833,
    keys=137541833, special=137541833) at keyboard.c:9759
#61 0x080fa21b in command_loop_1 () at keyboard.c:1791
#62 0x0814eda2 in internal_condition_case (bfun=0x80f9ea0 <command_loop_1>,
    handlers=137586473, hfun=0x80f4ca0 <cmd_error>) at eval.c:1476
#63 0x080f3f43 in command_loop_2 () at keyboard.c:1328
#64 0x0814ee5a in internal_catch (tag=137582705,
    func=0x80f3f20 <command_loop_2>, arg=137541833) at eval.c:1214
#65 0x080f495c in command_loop () at keyboard.c:1307
#66 0x080f4a0a in recursive_edit_1 () at keyboard.c:1000
---Type <return> to continue, or q <return> to quit---
#67 0x080f4b07 in Frecursive_edit () at keyboard.c:1061
#68 0x080eb165 in main (argc=2, argv=0xbf82f754) at emacs.c:1794

Lisp Backtrace:
"x-create-frame" (0xc8fe7a5)
"x-create-frame-with-faces" (0xa7f35bd)
"make-frame" (0xa7f35bd)
"special-display-popup-frame" (0xcc80194)
"pop-to-buffer" (0xc3dd07b)
"info" (0x824717b)
"view-emacs-FAQ" (0x832b8c9)
"call-interactively" (0x8422561)
"read-file-name" (0xba7054b)
"gnus-read-save-file-name" (0xad6085b)
"gnus-summary-save-in-mail" (0x832b8c9)
"byte-code" (0xad606cb)
"gnus-article-save" (0xd7c1cd4)
"gnus-summary-save-article" (0x832b8c9)
"gnus-summary-save-article-mail" (0x832b8c9)
"call-interactively" (0xac71111)
(gdb) list
1794      Frecursive_edit ();
1795      /* NOTREACHED */
1796      return 0;
1797    }
1798    ^L
1799    /* Sort the args so we can find the most important ones
1800       at the beginning of argv.  */
1801
1802    /* First, here's a table of all the standard options.  */
1803
(gdb) p dpyinfo
$1 = (struct x_display_info *) 0x0
(gdb) up
#1  0x080cedf4 in unwind_create_frame (frame=193660300) at xfns.c:2968
2968          x_free_frame_resources (f);
(gdb) p f
No symbol "f" in current context.
(gdb) list
2963        {
2964    #if GLYPH_DEBUG
2965          struct x_display_info *dpyinfo = FRAME_X_DISPLAY_INFO (f);
2966    #endif
2967
2968          x_free_frame_resources (f);
2969
2970    #if GLYPH_DEBUG
2971          /* Check that reference counts are indeed correct.  */
2972          xassert (dpyinfo->reference_count == dpyinfo_refcount);
(gdb) c
Continuing.
Fatal error (11)
Program terminated with signal SIGINT, Interrupt.
The program no longer exists.

note that after "c" emacs did not die right away but was left in a
somewhat weird state: echo area contained an error message about trying
to run a nil function from menu-bar-update-hook (which was indeed
reported as nil) and minibuffer was not usable.

-- 
Sam Steingold (http://www.podval.org/~sds) on Fedora Core release 5 (Bordeaux)
http://dhimmi.com http://openvotingconsortium.org http://jihadwatch.org
http://mideasttruth.com http://iris.org.il http://honestreporting.com
I'd give my right arm to be ambidextrous.

Re: crash in cvs head

[Richard Stallman]

    (gdb) p dpyinfo
    $1 = (struct x_display_info *) 0x0
    (gdb) up
    #1  0x080cedf4 in unwind_create_frame (frame=193660300) at xfns.c:2968
    2968          x_free_frame_resources (f);
    (gdb) p f
    No symbol "f" in current context.

The variable f was apparently optimized away.
It was surely created from FRAME.  If you had examined the data inside
FRAME, you could have diagnosed more.

Nonetheless, I think I see the problem.  Does this fix it?


*** xfns.c	25 Jun 2006 12:16:32 -0400	1.668
--- xfns.c	30 Jun 2006 15:46:37 -0400	
***************
*** 3075,3081 ****
    f->output_data.x->scroll_bar_top_shadow_pixel = -1;
    f->output_data.x->scroll_bar_bottom_shadow_pixel = -1;
  #endif /* USE_TOOLKIT_SCROLL_BARS */
-   record_unwind_protect (unwind_create_frame, frame);
  
    f->icon_name
      = x_get_arg (dpyinfo, parms, Qicon_name, "iconName", "Title",
--- 3075,3080 ----
***************
*** 3084,3089 ****
--- 3083,3091 ----
      f->icon_name = Qnil;
  
    FRAME_X_DISPLAY_INFO (f) = dpyinfo;
+ 
+   /* With FRAME_X_DISPLAY_INFO set up, this unwind-protect is safe.  */
+   record_unwind_protect (unwind_create_frame, frame);
  #if GLYPH_DEBUG
    image_cache_refcount = FRAME_X_IMAGE_CACHE (f)->refcount;
    dpyinfo_refcount = dpyinfo->reference_count;

crash in cvs head

[Sam Steingold]

GNU Emacs 22.0.50.18 (i686-pc-linux-gnu, X toolkit, Xaw3d scroll bars)
 of 2006-10-18 on quant8

I got this crashed session under gdb and I will keep it there till
tomorrow, so if you want me to examine a variable or two - send me an e-mail.
 
Detaching after fork from child process 16616.
Detaching after fork from child process 17936.
Detaching after fork from child process 18085.
Detaching after fork from child process 18086.
Detaching after fork from child process 19178.
Detaching after fork from child process 19179.
Detaching after fork from child process 19180.

Program received signal SIGSEGV, Segmentation fault.
remember_mouse_glyph (f=0xb25e820, gx=281, gy=383, rect=0x82d2174)
    at xdisp.c:2106
2106      r = MATRIX_FIRST_TEXT_ROW (w->current_matrix);
(gdb)
(gdb)
(gdb)
(gdb)
(gdb)
(gdb) where
#0  remember_mouse_glyph (f=0xb25e820, gx=281, gy=383, rect=0x82d2174)
    at xdisp.c:2106
#1  0x080c3240 in note_mouse_movement (frame=0xb25e820, event=0xbf901420)
    at xterm.c:3635
#2  0x080c5c55 in handle_one_xevent (dpyinfo=0x9ea3ef0, eventp=0xbf9014dc,
    finish=0xbf901568, hold_quit=0xbf90259c) at xterm.c:6523
#3  0x080c8879 in XTread_socket (sd=0, expected=1, hold_quit=0xbf90259c)
    at xterm.c:7055
#4  0x080f263d in read_avail_input (expected=Variable "expected" is not available.
) at keyboard.c:6791
#5  0x080f27ea in handle_async_input () at keyboard.c:6937
#6  0x080542d5 in free_glyphs (f=0xb25e820) at dispnew.c:2536
#7  0x0805e652 in Fdelete_frame (frame=187033636, force=137455817)
    at frame.c:1273
#8  0x08151b8a in Ffuncall (nargs=2, args=0xbf9026f0) at eval.c:3000
#9  0x0817c34d in Fbyte_code (bytestr=170628467, vector=172310316, maxdepth=48)
    at bytecode.c:679
#10 0x0815161a in funcall_lambda (fun=170047692, nargs=1,
    arg_vector=0xbf902824) at eval.c:3184
#11 0x08151a21 in Ffuncall (nargs=2, args=0xbf902820) at eval.c:3054
#12 0x08152eb9 in call1 (fn=169961513, arg1=208698244) at eval.c:2782
#13 0x0815a055 in mapcar1 (leni=3, vals=0xbf902870, fn=169961513,
    seq=215497341) at fns.c:3111
#14 0x0815a25c in Fmapcar (function=169961513, sequence=215497341)
    at fns.c:3179
#15 0x08151b8a in Ffuncall (nargs=3, args=0xbf902910) at eval.c:3000
#16 0x0817c34d in Fbyte_code (bytestr=170628707, vector=175613212, maxdepth=24)
    at bytecode.c:679
#17 0x0815161a in funcall_lambda (fun=166881332, nargs=1,
    arg_vector=0xbf902a34) at eval.c:3184
#18 0x08151a21 in Ffuncall (nargs=2, args=0xbf902a30) at eval.c:3054
#19 0x08152eb9 in call1 (fn=166881332, arg1=190430940) at eval.c:2782
#20 0x0815a055 in mapcar1 (leni=3, vals=0xbf902a80, fn=166881332,
    seq=215497037) at fns.c:3111
#21 0x0815a25c in Fmapcar (function=166881332, sequence=215497037)
    at fns.c:3179
#22 0x08151b8a in Ffuncall (nargs=3, args=0xbf902b20) at eval.c:3000
#23 0x0817c34d in Fbyte_code (bytestr=170628739, vector=180866380, maxdepth=32)
    at bytecode.c:679
#24 0x0815161a in funcall_lambda (fun=170047556, nargs=0,
    arg_vector=0xbf902c44) at eval.c:3184
#25 0x08151a21 in Ffuncall (nargs=1, args=0xbf902c40) at eval.c:3054
#26 0x08153409 in apply1 (fn=169760393, arg=137455817) at eval.c:2738
#27 0x0814ec2d in Fcall_interactively (function=169760393,
    record_flag=137455817, keys=178076740) at callint.c:410
#28 0x080efc53 in Fcommand_execute (cmd=169760393, record_flag=137455817,
    keys=137455817, special=137455817) at keyboard.c:9856
#29 0x080fb0cb in command_loop_1 () at keyboard.c:1858
#30 0x08150662 in internal_condition_case (bfun=0x80fad50 <command_loop_1>,
    handlers=137500521, hfun=0x80f5970 <cmd_error>) at eval.c:1481
#31 0x080f4d33 in command_loop_2 () at keyboard.c:1326
#32 0x0815071a in internal_catch (tag=137496729,
---Type <return> to continue, or q <return> to quit---
    func=0x80f4d10 <command_loop_2>, arg=137455817) at eval.c:1222
#33 0x080f57ac in command_loop () at keyboard.c:1305
#34 0x080f5b4a in recursive_edit_1 () at keyboard.c:1003
#35 0x080f5c37 in Frecursive_edit () at keyboard.c:1064
#36 0x080ebdd5 in main (argc=2, argv=0xbf903514) at emacs.c:1794

Lisp Backtrace:
"delete-frame" (0xb25e824)
"calendar-hide-window" (0xc707b84)
"mapcar" (0xa216829)
0x9f26834 PVEC_COMPILED
"mapcar" (0x9f26834)
"exit-calendar" (0x83168c9)
"call-interactively" (0xa1e5689)
(gdb) p *f
$1 = {
  size = 1073742933,
  next = 0xc231778,
  name = 204581747,
  icon_name = 137455817,
  title = 137455817,
  focus_frame = 137455817,
  root_window = 208698244,
  selected_window = 208698244,
  minibuffer_window = 171351556,
  param_alist = 213238093,
  scroll_bars = 202331180,
  condemned_scroll_bars = 137455817,
  menu_bar_items = 137455817,
  face_alist = 214170125,
  menu_bar_vector = 137455817,
  menu_bar_items_used = 0,
  buffer_predicate = 137455817,
  buffer_list = 213242837,
  menu_bar_window = 137455817,
  tool_bar_window = 137455817,
  tool_bar_items = 137455817,
  desired_tool_bar_string = 137455817,
  current_tool_bar_string = 137455817,
  face_cache = 0xc100ee8,
  namebuf = 0xc2fd198 "emacs",
  current_pool = 0x0,
  desired_pool = 0x0,
  desired_matrix = 0x0,
  current_matrix = 0x0,
  glyphs_initialized_p = 0,
  tool_bar_lines = 0,
  n_tool_bar_rows = 0,
  n_tool_bar_items = 0,
  decode_mode_spec_buffer = 0xab03598 "\250\021#",
  insert_line_cost = 0xc22acd0,
  delete_line_cost = 0xb7a3558,
  insert_n_lines_cost = 0xc8a3bb8,
  delete_n_lines_cost = 0xc60d428,
  text_lines = 70,
  text_cols = 80,
  total_lines = 0,
  total_cols = 86,
  new_text_lines = 0,
  new_text_cols = 0,
  left_pos = 0,
  top_pos = 35,
  pixel_height = 702,
  pixel_width = 518,
  x_pixels_diff = 5,
  y_pixels_diff = 24,
---Type <return> to continue, or q <return> to quit---
  win_gravity = 1,
  size_hint_flags = 12,
  border_width = 2,
  internal_border_width = 1,
  column_width = 6,
  space_width = 6,
  line_height = 10,
  output_method = output_x_window,
  output_data = {
    x = 0xa3bb480,
    w32 = 0xa3bb480,
    mac = 0xa3bb480,
    nothing = 171684992
  },
  fringe_cols = 3,
  left_fringe_width = 9,
  right_fringe_width = 9,
  kboard = 0x9ea40a0,
  want_fullscreen = 0,
  menu_bar_lines = 0,
  external_menu_bar = 0,
  display_preempted = 0 '\0',
  visible = 1 '\001',
  iconified = 0 '\0',
  async_visible = 1 '\001',
  async_iconified = 0 '\0',
  garbaged = 0 '\0',
  has_minibuffer = 1 '\001',
  wants_modeline = 1 '\001',
  can_have_scroll_bars = 1 '\001',
  vertical_scroll_bar_type = vertical_scroll_bar_left,
  desired_cursor = BAR_CURSOR,
  cursor_width = 2,
  blink_off_cursor = DEFAULT_CURSOR,
  blink_off_cursor_width = 0,
  auto_raise = 0 '\0',
  auto_lower = 0 '\0',
  no_split = 0 '\0',
  explicit_name = 0 '\0',
  window_sizes_changed = 0 '\0',
  message_buf = 0xa3ea988 "\210\021#",
  scroll_bottom_vpos = -1,
  config_scroll_bar_width = 13,
  config_scroll_bar_cols = 3,
  scroll_bar_actual_width = 18,
  cost_calculation_baud_rate = 19200,
  mouse_moved = 1 '\001',
  gamma = 0,
  extra_line_spacing = 0,
  resized_p = 0,
  force_flush_display_p = 0,
---Type <return> to continue, or q <return> to quit---
  default_face_done_p = 1,
  already_hscrolled_p = 0,
  updated_p = 1
}
(gdb) up
#1  0x080c3240 in note_mouse_movement (frame=0xb25e820, event=0xbf901420)
    at xterm.c:3635
3635          remember_mouse_glyph (frame, event->x, event->y, &last_mouse_glyph);
(gdb) p *event
$2 = {
  type = 7,
  serial = 12459729,
  send_event = 0,
  display = 0x9e99778,
  window = 50926776,
  root = 96,
  subwindow = 0,
  time = 1535017459,
  x = 281,
  y = 383,
  x_root = 286,
  y_root = 442,
  state = 0,
  is_hint = 3 '\003',
  same_screen = 1
}
(gdb) p last_mouse_glyph
$3 = {
  x = 256,
  y = 365,
  width = 6,
  height = 13
}
(gdb) up
#2  0x080c5c55 in handle_one_xevent (dpyinfo=0x9ea3ef0, eventp=0xbf9014dc,
    finish=0xbf901568, hold_quit=0xbf90259c) at xterm.c:6523
6523            note_mouse_movement (f, &event.xmotion);
(gdb) p *dpyinfo
$4 = {
  next = 0x0,
  connection = 7,
  display = 0x9e99778,
  name_list_element = 139431165,
  reference_count = 4,
  screen = 0x9e9df98,
  resx = 90.06094182825484,
  resy = 89.073972602739715,
  visual = 0x9e9e048,
  cmap = 32,
  n_planes = 24,
  height = 1024,
  width = 2560,
  grabbed = 0,
  icon_bitmap_id = 1,
  root_window = 96,
  client_leader_window = 50331659,
  vertical_scroll_bar_cursor = 50331653,
  xrdb = 0x9ea58e8,
  font_table = 0x9eccd00,
  font_table_size = 16,
  smallest_char_width = 2,
  smallest_font_height = 10,
  scratch_cursor_gc = 0xa2c6a38,
  mouse_face_beg_row = -1,
  mouse_face_beg_col = -1,
  mouse_face_beg_x = 55,
  mouse_face_beg_y = 0,
  mouse_face_end_row = -1,
  mouse_face_end_col = -1,
  mouse_face_end_x = 0,
  mouse_face_end_y = 0,
  mouse_face_past_end = 0,
  mouse_face_window = 137455817,
  mouse_face_face_id = 18,
  mouse_face_overlay = 137455817,
  mouse_face_deferred_gc = 0,
  mouse_face_mouse_frame = 0x0,
  mouse_face_mouse_x = 261,
  mouse_face_mouse_y = 372,
  mouse_face_defer = 0,
  mouse_face_hidden = 0,
  mouse_face_image_state = 0,
  x_id_name = 0x9ea40f0 "emacs@quant8.janestcapital.quant",
  n_fonts = 14,
  bitmaps = 0x9eda780,
  bitmaps_size = 10,
  bitmaps_last = 1,
  meta_mod_mask = 8,
  shift_lock_mask = 0,
---Type <return> to continue, or q <return> to quit---
  alt_mod_mask = 0,
  super_mod_mask = 64,
  hyper_mod_mask = 0,
  Xatom_wm_protocols = 240,
  Xatom_wm_take_focus = 238,
  Xatom_wm_save_yourself = 411,
  Xatom_wm_delete_window = 237,
  Xatom_wm_change_state = 290,
  Xatom_wm_configure_denied = 412,
  Xatom_wm_window_moved = 413,
  Xatom_wm_client_leader = 243,
  Xatom_editres = 414,
  Xatom_CLIPBOARD = 272,
  Xatom_TIMESTAMP = 281,
  Xatom_TEXT = 415,
  Xatom_DELETE = 273,
  Xatom_COMPOUND_TEXT = 264,
  Xatom_UTF8_STRING = 234,
  Xatom_MULTIPLE = 277,
  Xatom_INCR = 274,
  Xatom_EMACS_TMP = 416,
  Xatom_TARGETS = 280,
  Xatom_NULL = 278,
  Xatom_ATOM_PAIR = 257,
  Xatom_PIXEL_SIZE = 198,
  Xatom_AVERAGE_WIDTH = 202,
  Xatom_MULE_BASELINE_OFFSET = 417,
  Xatom_MULE_RELATIVE_COMPOSE = 418,
  Xatom_MULE_DEFAULT_ASCENT = 419,
  Xatom_DONE = 421,
  Xatom_PAGE = 420,
  Xatom_Scrollbar = 422,
  kboard = 0x9ea40a0,
  cut_buffers_initialized = 1,
  x_focus_frame = 0xb25e820,
  x_focus_event_frame = 0xb25e820,
  x_highlight_frame = 0xb25e820,
  null_pixel = 50331654,
  gray = 50331656,
  image_cache = 0x9eab1f0,
  xim = 0x9ea94c0,
  xim_styles = 0x9ea9100,
  color_cells = 0x0,
  ncolor_cells = 0,
  red_bits = 8,
  blue_bits = 8,
  green_bits = 8,
  red_offset = 16,
  blue_offset = 0,
  green_offset = 8,
  wm_type = X_WMTYPE_UNKNOWN,
---Type <return> to continue, or q <return> to quit---
  x_dnd_atoms = 0x9ea8cc8,
  x_dnd_atoms_size = 8,
  x_dnd_atoms_length = 6
}
(gdb)


-- 
Sam Steingold (http://www.podval.org/~sds) on Fedora Core release 5 (Bordeaux)
http://jihadwatch.org http://pmw.org.il http://openvotingconsortium.org
http://honestreporting.com http://ffii.org http://iris.org.il http://memri.org
A computer scientist is someone who fixes things that aren't broken.

Re: crash in cvs head

[Sam Steingold]

I get this crash very reliably:
in the morning, after typing the password into the screensaver, when I 
hit "q" in the calendar window that poped-up at midnight, Emacs crashes:

Program received signal SIGSEGV, Segmentation fault.
remember_mouse_glyph (f=0xd7cede0, gx=291, gy=636, rect=0x82d2174)
     at xdisp.c:2106
2106      r = MATRIX_FIRST_TEXT_ROW (w->current_matrix);
(gdb)
(gdb)
(gdb) where
#0  remember_mouse_glyph (f=0xd7cede0, gx=291, gy=636, rect=0x82d2174)
     at xdisp.c:2106
#1  0x080c3240 in note_mouse_movement (frame=0xd7cede0, event=0xbfbbd270)
     at xterm.c:3635
#2  0x080c5ac5 in handle_one_xevent (dpyinfo=0x9513f38, eventp=0xbfbbd32c,
     finish=0xbfbbd3b8, hold_quit=0xbfbbe3ec) at xterm.c:6610
#3  0x080c8879 in XTread_socket (sd=0, expected=1, hold_quit=0xbfbbe3ec)
     at xterm.c:7055
#4  0x080f263d in read_avail_input (expected=Variable "expected" is not 
available.
) at keyboard.c:6791
#5  0x080f27ea in handle_async_input () at keyboard.c:6937
#6  0x080542d5 in free_glyphs (f=0xd7cede0) at dispnew.c:2536
#7  0x0805e652 in Fdelete_frame (frame=226291172, force=137455817)
     at frame.c:1273
#8  0x08151b8a in Ffuncall (nargs=2, args=0xbfbbe540) at eval.c:3000
#9  0x0817c34d in Fbyte_code (bytestr=136457123, vector=136457140, 
maxdepth=48)
     at bytecode.c:679
#10 0x0815161a in funcall_lambda (fun=136457068, nargs=1,
     arg_vector=0xbfbbe6e4) at eval.c:3184
#11 0x08151a21 in Ffuncall (nargs=2, args=0xbfbbe6e0) at eval.c:3054
#12 0x0814ee94 in Fcall_interactively (function=138403329,
     record_flag=137455817, keys=220997212) at callint.c:882
#13 0x080efc53 in Fcommand_execute (cmd=138403329, record_flag=137455817,
     keys=137455817, special=137455817) at keyboard.c:9856
#14 0x080fb0cb in command_loop_1 () at keyboard.c:1858
#15 0x08150662 in internal_condition_case (bfun=0x80fad50 <command_loop_1>,
     handlers=137500521, hfun=0x80f5970 <cmd_error>) at eval.c:1481
#16 0x080f4d33 in command_loop_2 () at keyboard.c:1326
#17 0x0815071a in internal_catch (tag=137496729,
     func=0x80f4d10 <command_loop_2>, arg=137455817) at eval.c:1222
#18 0x080f57ac in command_loop () at keyboard.c:1305
#19 0x080f5b4a in recursive_edit_1 () at keyboard.c:1003
#20 0x080f5c37 in Frecursive_edit () at keyboard.c:1064
#21 0x080ebdd5 in main (argc=2, argv=0xbfbbefd4) at emacs.c:1794

Lisp Backtrace:
"delete-frame" (0xd7cede4)
"quit-window" (0x83168c9)
"call-interactively" (0x83fde01)
(gdb) c
Continuing.

Program received signal SIGSEGV, Segmentation fault.
remember_mouse_glyph (f=0xd7cede0, gx=297, gy=648, rect=0x82d2174)
     at xdisp.c:2106
2106      r = MATRIX_FIRST_TEXT_ROW (w->current_matrix);
(gdb) c
Continuing.

Re: crash in cvs head

[Kim F. Storm]

Sam Steingold <sds@gnu.org> writes:

> I get this crash very reliably:
> in the morning, after typing the password into the screensaver, when I
> hit "q" in the calendar window that poped-up at midnight, Emacs
> crashes:

> #0  remember_mouse_glyph (f=0xd7cede0, gx=291, gy=636, rect=0x82d2174)
>     at xdisp.c:2106
..

> #6  0x080542d5 in free_glyphs (f=0xd7cede0) at dispnew.c:2536


I cannot reproduce this, but I have installed a change which I think will
fix this.

-- 
Kim F. Storm <storm@cua.dk> http://www.cua.dk