Re: segfault when using XIM with multi-tty on gnu/linux

["Zsitvai János" <zsitvaij@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 738 bytes --]

On Sat, Dec 13, 2008 at 06:55, Chong Yidong <cyd@stupidchicken.com> wrote:
>> Steps to reproduce:
>>  1. start emacs -nw
>>  2. have XIM active for your X session (run scim -d)
>>  3. start X11-capable emacs frame with emacsclient -c
>>  4. close the X11 emacs frame
>>  5. segfault with error
>
> I can't reproduce this bug, even now that Emacs calls XCloseIM.  Do you
> still see the segfault?

Yes, it's happening again. I have attached a backtrace of it. One
workaround is to unset XMODIFIERS before starting emacs.

With XMODIFIERS=@im=SCIM set, for me, the procedure to reproduce
differs a bit from above:
5. start X11-capable emacs frame with emacsclient -c again
6. close the X11 emacs frame
7. segfault

Thank you for your time.

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: backtrace.log --]
[-- Type: text/x-log; name=backtrace.log, Size: 8257 bytes --]

#0  0xffffe424 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb7cbfeb6 in kill () from /lib/libc.so.6
No symbol table info available.
#2  0x080ed4d9 in fatal_error_signal (sig=11) at emacs.c:399
No locals.
#3  <signal handler called>
No symbol table info available.
#4  0xb7e70c64 in _XSend (dpy=0x9c6d978, data=0x0, size=0) at xcb_io.c:224
	c = <value optimized out>
	__PRETTY_FUNCTION__ = "_XSend"
#5  0xb7e70dfd in _XFlush (dpy=0x9c6d978) at xcb_io.c:258
No locals.
#6  0xb7e4bc85 in XFlush (dpy=0x9c6d978) at Flush.c:41
No locals.
#7  0xb7e8fe50 in _XimXFlush (im=0x854e448) at imTrX.c:462
No locals.
#8  0xb7e8957e in _XimFlush (im=0x854e448) at imTransR.c:260
No locals.
#9  0xb7e8ae31 in _XimClose (im=0x854e448) at imDefIm.c:925
	buf32 = {65568, 43, 0 <repeats 17 times>, 524288, 65588, 2097195, 164368328, 0, 0, 8192, 0, 21, 0, 0, 0, 0, 4294967295, 139452236, 21, 
  3213335272, 135678600, 62, 1, 3213335272, 135676557, 3213335255, 164368359, 1, 0, 3213335420, 3084693492, 10, 4, 3213335272, 1053671007, 
  3213335732, 3213335732, 139452236, 4, 3213335784, 135685507, 137619657, 0, 139452232, 3083849381, 0, 137619657, 3213335480, 3213337064, 
  139452236, 3084693492, 0, 135968575, 3213336888, 3083675770, 3213336916, 135968575, 0, 0, 3213335528, 135280500, 4294967232, 816, 139452232, 
  3213335728, 3213336760, 3083682258, 3213335560, 135280500, 1, 3213335572, 3213335420, 4294966994, 674, 132, 3213337064, 4294967288, 0, 1, 
  164337896, 0, 3083859612, 0, 0, 0, 0, 0, 3213335560, 0, 164366824, 3084697920, 0, 135968574, 135968572, 0, 3213336760, 3213337128, 0, 11, 0, 
  0, 0, 10, 3213336752, 3084693492, 33, 164366816, 3213335604, 3083869619, 3084697920, 164366824, 1, 0, 164364800, 0, 2048, 164364768, 32, 2064, 
  3084693492, 4294967295, 39, 164313579, 3213335640, 135863128, 0, 39, 3084697920, 4294967295, 39, 164313579, 3213335688, 135894791, 39, 
  137840017, 3213335764, 3213335704, 1, 3213336092, 3084219970, 1, 3213336092, 6, 164279132, 3083386868, 1, 6, 164279120, 3083324606, 6, 
  3213336092, 1, 0, 0, 3213335740, 3213335868, 64, 0 <repeats 25 times>, 3083520612, 3213335864, 135191678, 0, 0, 164279120, 4294960128, 29, 51, 
  0, 123, 123, 0, 0, 164279120, 3213336608, 7, 3213336668, 3213336796, 1, 0, 0, 4294960164, 115...}
	buf = (CARD8 *) 0xbf879a0c " "
	buf_s = <value optimized out>
	len = <value optimized out>
	reply32 = {163953024, 3086024692, 139781192, 164288416, 3213337192, 3085533124, 163953024, 3213335130, 3213333080, 2048, 3085528853, 
  164288416, 3213335176, 3213335130, 164288416, 3213335132, 2048, 3213335160, 0, 0, 65589, 2097195, 0 <repeats 490 times>}
	reply = 0xbf879208 "\200¹Å\tôÿð·HäT\b ×Ê\th¢\207¿Ä\177é·\200¹Å\tZ\232\207¿X\222\207¿"
	preply = <value optimized out>
	buf_size = <value optimized out>
	ret_code = <value optimized out>
#10 0xb7e8c227 in _XimProtoCloseIM (xim=0x854e448) at imDefIm.c:1107
	im = (Xim) 0x854e448
	ic = (XIC) 0x0
	next = (XIC) 0x85869e4
	status = <value optimized out>
#11 0xb7e7586d in XCloseIM (im=0x854e448) at IMWrap.c:149
	s = <value optimized out>
	ic = <value optimized out>
	lcd = (XLCd) 0x85a4100
#12 0x080c70c2 in x_delete_display (dpyinfo=0x9caa1d0) at xterm.c:8328
	t = (struct terminal *) 0x85869e0
#13 0x080c716b in x_delete_terminal (terminal=0x85869e0) at xterm.c:10656
	dpyinfo = (struct x_display_info *) 0x9caa1d0
#14 0x080beb9a in Fdelete_terminal (terminal=140012004, force=137619705) at terminal.c:334
	t = (struct terminal *) 0x85869e0
#15 0x0805bc8b in Fdelete_frame (frame=139452236, force=137619657) at frame.c:1515
	terminal = (struct terminal *) 0x9c6d978
	f = (struct frame *) 0x84fdf48
	sf = (struct frame *) 0x835e7e8
	kb = <value optimized out>
#16 0x0814f27c in Ffuncall (nargs=1, args=0xbf87a400) at eval.c:3047
	fun = 3
	original_fun = 137654977
	funcar = <value optimized out>
	numargs = 0
	val = <value optimized out>
	backtrace = {next = 0xbf87a568, function = 0xbf87a400, args = 0xbf87a404, nargs = 0, evalargs = 0 '\0', debug_on_exit = 0 '\0'}
	internal_args = (Lisp_Object *) 0xbf87a330
	i = <value optimized out>
#17 0x0814d485 in Fcall_interactively (function=137654977, record_flag=137619657, keys=137658092) at callint.c:857
	val = <value optimized out>
	args = (Lisp_Object *) 0xbf87a400
	visargs = (Lisp_Object *) 0xbf87a3e0
	specs = <value optimized out>
	filter_specs = <value optimized out>
	teml = <value optimized out>
	up_event = 137619657
	enable = 137619657
	speccount = 3
	next_event = 3
	prefix_arg = 137619657
	string = (unsigned char *) 0xbf87a420 ""
	tem = (unsigned char *) 0xbf87a420 ""
	varies = (int *) 0xbf87a3c0
	i = 0
	j = 0
	foo = <value optimized out>
	prompt1 = '\0' <repeats 89 times>, " \000\000\000\000\000\000\000\000\000"
	tem1 = <value optimized out>
	arg_from_tty = 0
	key_count = 3
	record_then_fail = 0
	save_this_command = 137654977
	save_last_command = 137619657
	save_this_original_command = 137654977
	save_real_this_command = 137654977
#18 0x0814f29c in Ffuncall (nargs=4, args=0xbf87a5a0) at eval.c:3050
	fun = 137312284
	original_fun = 137783625
	funcar = <value optimized out>
	numargs = 3
	val = <value optimized out>
	backtrace = {next = 0x0, function = 0xbf87a5a0, args = 0xbf87a5a4, nargs = 3, evalargs = 0 '\0', debug_on_exit = 0 '\0'}
	internal_args = (Lisp_Object *) 0xbf87a5a4
	i = <value optimized out>
#19 0x0814f51c in call3 (fn=137783625, arg1=137654977, arg2=137619657, arg3=137619657) at eval.c:2874
	ret_ungc_val = 1344
#20 0x080f0947 in Fcommand_execute (cmd=137654977, record_flag=137619657, keys=137619657, special=137619657) at keyboard.c:10332
	final = 136022228
	tem = <value optimized out>
	prefixarg = 137619657
#21 0x080fc3f2 in command_loop_1 () at keyboard.c:1880
	cmd = <value optimized out>
	lose = <value optimized out>
	nonundocount = 0
	keybuf = {192, 424, 384, 140394893, 137619705, -1081629094, 137783625, 0, 137619657, -1081629032, 135224996, 140394909, -1081629094, 0, 
  0, 0, 0, 0, 0, 0, -1081629064, -1081629216, 0, 0, 137619657, 138569001, 138143936, 138143936, 138143952, -1081629032}
	i = <value optimized out>
	prev_modiff = 11
	prev_buffer = (struct buffer *) 0x8344dc8
	already_adjusted = 0
#22 0x0814e923 in internal_condition_case (bfun=0x80fb4b9 <command_loop_1>, handlers=137662873, hfun=0x80f5dd9 <cmd_error>) at eval.c:1511
	val = <value optimized out>
	c = {tag = 137619657, val = 137619657, next = 0xbf87a7c0, gcpro = 0x0, jmp = {{__jmpbuf = {138143936, 138143936, 138143952, -1081628792, 
        681140230, 235252585}, __mask_was_saved = 0, __saved_mask = {__val = {140082144, 3083861463, 3083794258, 3086171408, 0, 3086344180, 
          3213338160, 3086455412, 3213338720, 3213338428, 3213338708, 3213338568, 135280431, 2, 3213338580, 3213338428, 0, 1, 0, 3085721784, 
          0 <repeats 12 times>}}}}, backlist = 0x0, handlerlist = 0x0, lisp_eval_depth = 0, pdlcount = 2, poll_suppress_count = 1, 
  interrupt_input_blocked = 0, byte_stack = 0x0}
	h = {handler = 137662873, var = 137619657, chosen_clause = 137619705, tag = 0xbf87a6c0, next = 0x0}
#23 0x080f5452 in command_loop_2 () at keyboard.c:1338
	val = 1344
#24 0x0814e9d9 in internal_catch (tag=137658849, func=0x80f542f <command_loop_2>, arg=137619657) at eval.c:1247
	c = {tag = 137658849, val = 137619657, next = 0x0, gcpro = 0x0, jmp = {{__jmpbuf = {138143936, 138143936, 138143952, -1081628536, 
        681263110, 235387241}, __mask_was_saved = 0, __saved_mask = {__val = {0, 0, 0, 0, 0, 0, 3083863421, 0, 0, 0, 0, 0, 0, 0, 3084698000, 
          192, 3084697976, 0, 177, 22, 137867424, 137855682, 137645512, 3213338744, 135536099, 137867425, 137855682, 137619657, 137645512, 
          137619681, 137855680, 0}}}}, backlist = 0x0, handlerlist = 0x0, lisp_eval_depth = 0, pdlcount = 2, poll_suppress_count = 1, 
  interrupt_input_blocked = 0, byte_stack = 0x0}
#25 0x080f5c56 in command_loop () at keyboard.c:1317
No locals.
#26 0x080f5f40 in recursive_edit_1 () at keyboard.c:942
	val = <value optimized out>
#27 0x080f605a in Frecursive_edit () at keyboard.c:1004
	buffer = 137619657
#28 0x080ed3ad in main (argc=3, argv=0xbf87ac94) at emacs.c:1781
	dummy = -1208519706
	stack_bottom_variable = 0 '\0'
	do_initial_setlocale = 1
	skip_args = 1
	rlim = {rlim_cur = 8388608, rlim_max = 18446744073709551615}
	no_loadup = 0
	junk = 0x0
	dname_arg = 0x0