Re: EXC_BAD_ACCESS on Mac

["Kazu Yamamoto" <kazu@iij.ad.jp>]

>> If you succeed, please post
>> here the backtrace from the crash.
> 
> I will!

Here is another catch today:

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: 13 at address: 0x0000000000000000
0x000000010007dbcc in get_glyph_face_and_encoding (f=0x10ba771f8, glyph=0x107dae690, char2b=0x7fff5fbf0de0, two_byte_p=0x7fff5fbf0d94) at xdisp.c:22544
22544		code = face->font->driver->encode_char (face->font, glyph->u.ch);
(gdb) p glyph->u.ch
$1 = 26228
(gdb) p face->font 
$2 = (struct font *) 0x10ff7ed88
(gdb) p face->font->driver
$3 = (struct font_driver *) 0x10200303a
(gdb) p face->font->driver->encode_char
$4 = (unsigned int (*)(struct font *, int)) 0x6529000000000000
(gdb) 
(gdb) 
(gdb) info stack
#0  0x000000010007dbcc in get_glyph_face_and_encoding (f=0x10ba771f8, glyph=0x107dae690, char2b=0x7fff5fbf0de0, two_byte_p=0x7fff5fbf0d94) at xdisp.c:22544
#1  0x000000010007e72a in fill_glyph_string (s=0x7fff5fbf0e10, face_id=2846, start=3, end=21, overlaps=0) at xdisp.c:22766
#2  0x000000010007f9cb in draw_glyphs (w=0x1179a8ff8, x=58, row=0x117b68800, area=TEXT_AREA, start=0, end=21, hl=DRAW_NORMAL_TEXT, overlaps=0) at xdisp.c:23382
#3  0x0000000100092d94 in expose_area (w=0x1179a8ff8, row=0x117b68800, r=0x7fff5fbf1770, area=TEXT_AREA) at xdisp.c:28164
#4  0x000000010009303c in expose_line (w=0x1179a8ff8, row=0x117b68800, r=0x7fff5fbf1770) at xdisp.c:28222
#5  0x0000000100093b7e in expose_window (w=0x1179a8ff8, fr=0x7fff5fbf1870) at xdisp.c:28452
#6  0x0000000100093eca in expose_window_tree (w=0x1179a8ff8, r=0x7fff5fbf1870) at xdisp.c:28521
#7  0x0000000100093eab in expose_window_tree (w=0x1179a8e48, r=0x7fff5fbf1870) at xdisp.c:28518
#8  0x000000010009403b in expose_frame (f=0x10ba771f8, x=658, y=146, w=15, h=540) at xdisp.c:28576
#9  0x00000001003c29dc in -[EmacsView drawRect:] (self=0x101ceaff0, _cmd=0x7fff89b63078, rect={origin = {x = 658, y = 146}, size = {width = 15, height = 540}}) at nsterm.m:6398
#10 0x00007fff8936b140 in -[NSView _drawRect:clip:] ()
#11 0x00007fff89367fb3 in -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] ()
#12 0x00007fff89368a44 in -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] ()
#13 0x00007fff89368a44 in -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] ()
#14 0x00007fff89367143 in -[NSThemeFrame _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] ()
#15 0x00007fff89362d6d in -[NSView _displayRectIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:] ()
#16 0x00007fff8932cc93 in -[NSView displayIfNeeded] ()
#17 0x00007fff8932c1cc in _handleWindowNeedsDisplayOrLayoutOrUpdateConstraints ()
#18 0x00007fff898f7901 in __83-[NSWindow _postWindowNeedsDisplayOrLayoutOrUpdateConstraintsUnlessPostingDisabled]_block_invoke_01208 ()
#19 0x00007fff88949417 in __CFRUNLOOP_IS_CALLING_OUT_TO_AN_OBSERVER_CALLBACK_FUNCTION__ ()
#20 0x00007fff88949381 in __CFRunLoopDoObservers ()
#21 0x00007fff889247b8 in __CFRunLoopRun ()
#22 0x00007fff889240e2 in CFRunLoopRunSpecific ()
#23 0x00007fff8f68ceb4 in RunCurrentEventLoopInMode ()
#24 0x00007fff8f68cb94 in ReceiveNextEventCommon ()
#25 0x00007fff8f68cae3 in BlockUntilNextEventMatchingListInMode ()
#26 0x00007fff89329533 in _DPSNextEvent ()
#27 0x00007fff89328df2 in -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] ()
#28 0x00007fff893201a3 in -[NSApplication run] ()
#29 0x00000001003b3883 in ns_read_socket (terminal=0x10682c448, hold_quit=0x7fff5fbf4c20) at nsterm.m:3526
#30 0x0000000100179580 in gobble_input () at keyboard.c:6850
#31 0x0000000100179a3d in handle_async_input () at keyboard.c:7090
#32 0x0000000100179a73 in process_pending_signals () at keyboard.c:7104
#33 0x0000000100179ab1 in unblock_input_to (level=0) at keyboard.c:7118
#34 0x0000000100179ae7 in unblock_input () at keyboard.c:7132
#35 0x00000001003b4bc8 in ns_set_vertical_scroll_bar (window=0x10ba77048, portion=1139, whole=18876, position=16722) at nsterm.m:3797
#36 0x0000000100062965 in set_vertical_scroll_bar (w=0x10ba77048) at xdisp.c:15279
#37 0x00000001000664e4 in redisplay_window (window=4490489933, just_this_one_p=0) at xdisp.c:16143
#38 0x000000010005cb14 in redisplay_window_0 (window=4490489933) at xdisp.c:13772
#39 0x00000001002938be in internal_condition_case_1 (bfun=0x10005cad0 <redisplay_window_0>, arg=4490489933, handlers=4328545334, hfun=0x10005ca80 <redisplay_window_error>) at eval.c:1326
#40 0x000000010005ca57 in redisplay_windows (window=4490489933) at xdisp.c:13752
#41 0x000000010005b8fa in redisplay_internal () at xdisp.c:13363
#42 0x000000010005c215 in redisplay_preserve_echo_area (from_where=2) at xdisp.c:13612
#43 0x000000010001603c in Fredisplay (force=4328534074) at dispnew.c:5826
#44 0x0000000100297b75 in Ffuncall (nargs=1, args=0x7fff5fbf8d40) at eval.c:2790
#45 0x00000001003127d6 in exec_byte_code (bytestr=4300614985, vector=4300615021, maxdepth=28, args_template=3076, nargs=1, args=0x7fff5fbf9258) at bytecode.c:903
#46 0x0000000100298616 in funcall_lambda (fun=4300614941, nargs=1, arg_vector=0x7fff5fbf9250) at eval.c:2958
#47 0x000000010029830b in apply_lambda (fun=4300614941, args=4409018486) at eval.c:2899
#48 0x00000001002961b2 in eval_sub (form=4409018422) at eval.c:2205
#49 0x00000001002918ac in Fprogn (args=4409018710) at eval.c:459
#50 0x0000000100298914 in funcall_lambda (fun=4409018774, nargs=0, arg_vector=0x7fff5fbf9640) at eval.c:3017
#51 0x000000010029830b in apply_lambda (fun=4409018774, args=4328534074) at eval.c:2899
#52 0x000000010029638f in eval_sub (form=4410946102) at eval.c:2235
#53 0x00000001002918ac in Fprogn (args=4410942502) at eval.c:459
#54 0x0000000100276278 in Fsave_excursion (args=4410942502) at editfns.c:956
#55 0x0000000100295a7d in eval_sub (form=4410942518) at eval.c:2108
#56 0x00000001002918ac in Fprogn (args=4410942406) at eval.c:459
#57 0x0000000100292b6c in Flet (args=4410941974) at eval.c:918
#58 0x0000000100295a7d in eval_sub (form=4410941958) at eval.c:2108
#59 0x00000001002918ac in Fprogn (args=4410941910) at eval.c:459
#60 0x0000000100298914 in funcall_lambda (fun=4410941942, nargs=0, arg_vector=0x7fff5fbf9ff0) at eval.c:3017
#61 0x000000010029830b in apply_lambda (fun=4410941942, args=4328534074) at eval.c:2899
#62 0x000000010029638f in eval_sub (form=4411004774) at eval.c:2235
#63 0x0000000100291743 in Fif (args=4411004790) at eval.c:409
#64 0x0000000100295a7d in eval_sub (form=4411004806) at eval.c:2108
#65 0x00000001002918ac in Fprogn (args=4411004742) at eval.c:459
#66 0x0000000100299232 in unbind_to (count=61, value=4328534122) at eval.c:3210
#67 0x000000010029327e in Funwind_protect (args=4411005478) at eval.c:1151
#68 0x0000000100295a7d in eval_sub (form=4410981910) at eval.c:2108
#69 0x00000001002918ac in Fprogn (args=4411004550) at eval.c:459
#70 0x00000001002926e0 in FletX (args=4410981926) at eval.c:848
#71 0x0000000100295a7d in eval_sub (form=4410986086) at eval.c:2108
#72 0x00000001002918ac in Fprogn (args=4411002630) at eval.c:459
#73 0x000000010029181b in Fcond (args=4411002598) at eval.c:437
#74 0x0000000100295a7d in eval_sub (form=4411002550) at eval.c:2108
#75 0x00000001002918ac in Fprogn (args=4411037302) at eval.c:459
#76 0x0000000100295a7d in eval_sub (form=4411037318) at eval.c:2108
#77 0x0000000100291743 in Fif (args=4411037238) at eval.c:409
#78 0x0000000100295a7d in eval_sub (form=4411037286) at eval.c:2108
#79 0x00000001002918ac in Fprogn (args=4411037126) at eval.c:459
#80 0x0000000100298914 in funcall_lambda (fun=4411037190, nargs=0, arg_vector=0x7fff5fbfb3d0) at eval.c:3017
#81 0x000000010029830b in apply_lambda (fun=4411037190, args=4328534074) at eval.c:2899
#82 0x000000010029638f in eval_sub (form=4411061670) at eval.c:2235
#83 0x0000000100291743 in Fif (args=4411061654) at eval.c:409
#84 0x0000000100295a7d in eval_sub (form=4411061622) at eval.c:2108
#85 0x00000001002918ac in Fprogn (args=4411061910) at eval.c:459
#86 0x0000000100298914 in funcall_lambda (fun=4411061974, nargs=0, arg_vector=0x7fff5fbfba00) at eval.c:3017
#87 0x000000010029830b in apply_lambda (fun=4411061974, args=4328534074) at eval.c:2899
#88 0x000000010029638f in eval_sub (form=4410933478) at eval.c:2235
#89 0x00000001002918ac in Fprogn (args=4410933462) at eval.c:459
#90 0x000000010029181b in Fcond (args=4410933446) at eval.c:437
#91 0x0000000100295a7d in eval_sub (form=4410933990) at eval.c:2108
#92 0x00000001002918ac in Fprogn (args=4410997638) at eval.c:459
#93 0x0000000100298914 in funcall_lambda (fun=4410997574, nargs=1, arg_vector=0x7fff5fbfc080) at eval.c:3017
#94 0x000000010029830b in apply_lambda (fun=4410997574, args=4411076278) at eval.c:2899
#95 0x000000010029638f in eval_sub (form=4411076294) at eval.c:2235
#96 0x00000001002918ac in Fprogn (args=4411076262) at eval.c:459
#97 0x0000000100292b6c in Flet (args=4411067158) at eval.c:918
#98 0x0000000100295a7d in eval_sub (form=4411067142) at eval.c:2108
#99 0x00000001002918ac in Fprogn (args=4411067110) at eval.c:459
#100 0x0000000100292b6c in Flet (args=4411067078) at eval.c:918
#101 0x0000000100295a7d in eval_sub (form=4411067062) at eval.c:2108
#102 0x00000001002918ac in Fprogn (args=4411067030) at eval.c:459
#103 0x000000010029181b in Fcond (args=4411066982) at eval.c:437
#104 0x0000000100295a7d in eval_sub (form=4411066966) at eval.c:2108
#105 0x00000001002918ac in Fprogn (args=4411066934) at eval.c:459
#106 0x000000010029181b in Fcond (args=4411066582) at eval.c:437
#107 0x0000000100295a7d in eval_sub (form=4411066422) at eval.c:2108
#108 0x00000001002918ac in Fprogn (args=4411066374) at eval.c:459
#109 0x0000000100298914 in funcall_lambda (fun=4411066406, nargs=3, arg_vector=0x7fff5fbfd050) at eval.c:3017
#110 0x000000010029830b in apply_lambda (fun=4411066406, args=4410950326) at eval.c:2899
#111 0x000000010029638f in eval_sub (form=4410950342) at eval.c:2235
#112 0x0000000100291a46 in Fsetq (args=4410950358) at eval.c:528
#113 0x0000000100295a7d in eval_sub (form=4410950438) at eval.c:2108
#114 0x00000001002918ac in Fprogn (args=4411061526) at eval.c:459
#115 0x0000000100295a7d in eval_sub (form=4411061510) at eval.c:2108
#116 0x0000000100291743 in Fif (args=4411061478) at eval.c:409
#117 0x0000000100295a7d in eval_sub (form=4411061462) at eval.c:2108
#118 0x00000001002918ac in Fprogn (args=4411061270) at eval.c:459
#119 0x00000001002926e0 in FletX (args=4411061254) at eval.c:848
#120 0x0000000100295a7d in eval_sub (form=4411061190) at eval.c:2108
#121 0x00000001002918ac in Fprogn (args=4411061062) at eval.c:459
#122 0x000000010029181b in Fcond (args=4411061030) at eval.c:437
#123 0x0000000100295a7d in eval_sub (form=4411061014) at eval.c:2108
#124 0x00000001002918ac in Fprogn (args=4411060934) at eval.c:459
#125 0x0000000100298914 in funcall_lambda (fun=4411060998, nargs=0, arg_vector=0x7fff5fbfe270) at eval.c:3017
#126 0x0000000100297fa7 in Ffuncall (nargs=1, args=0x7fff5fbfe268) at eval.c:2851
#127 0x00000001002971ac in apply1 (fn=4408818322, arg=4328534074) at eval.c:2556
#128 0x000000010028a480 in Fcall_interactively (function=4408818322, record_flag=4328534074, keys=4328584325) at callint.c:381
#129 0x0000000100297be0 in Ffuncall (nargs=4, args=0x7fff5fbfe878) at eval.c:2797
#130 0x00000001003127d6 in exec_byte_code (bytestr=4301385545, vector=4301385581, maxdepth=52, args_template=4100, nargs=1, args=0x7fff5fbfeec8) at bytecode.c:903
#131 0x0000000100298616 in funcall_lambda (fun=4301385501, nargs=1, arg_vector=0x7fff5fbfeec0) at eval.c:2958
#132 0x0000000100297ec3 in Ffuncall (nargs=2, args=0x7fff5fbfeeb8) at eval.c:2839
#133 0x00000001002972a1 in call1 (fn=4328592826, arg1=4408818322) at eval.c:2589
#134 0x000000010016c72b in command_loop_1 () at keyboard.c:1575
#135 0x0000000100293743 in internal_condition_case (bfun=0x10016bc30 <command_loop_1>, handlers=4328600218, hfun=0x10016b190 <cmd_error>) at eval.c:1289
#136 0x000000010016b78f in command_loop_2 (ignore=4328534074) at keyboard.c:1164
#137 0x000000010029302c in internal_catch (tag=4328596362, func=0x10016b760 <command_loop_2>, arg=4328534074) at eval.c:1063
#138 0x000000010016b712 in command_loop () at keyboard.c:1143
#139 0x000000010016ab93 in recursive_edit_1 () at keyboard.c:776
#140 0x000000010016ad98 in Frecursive_edit () at keyboard.c:840
#141 0x0000000100163a6a in main (argc=1, argv=0x7fff5fbff930) at emacs.c:1550

--Kazu