bug#18516: Acknowledgement (24.4.50; EMACS crashes when I try to open Elisp manual)

["Vincent Belaïche" <vincent.b.1@hotmail.fr>]

[-- Attachment #1: Type: text/plain, Size: 2855 bytes --]

Дорогие Дмитрий, Илья, и другие,

----------------------------------------
> Date: Mon, 22 Sep 2014 17:39:36 +0300
> From: eliz@gnu.org
> Subject: Re: bug#18516: Acknowledgement (24.4.50; EMACS crashes when I try to open Elisp manual)
> To: dmantipov@yandex.ru
> CC: vincent.b.1@hotmail.fr; 18516-done@debbugs.gnu.org
>
> > Date: Mon, 22 Sep 2014 10:21:57 +0400
> > From: Dmitry Antipov <dmantipov@yandex.ru>
> > CC: 18516@debbugs.gnu.org, Eli Zaretskii <eliz@gnu.org>
> >
> > On 09/22/2014 08:21 AM, Vincent Belaïche wrote:
> >
> > > Here is attached the log of the gdb sessione encoded in raw-text coding
> > > system, please feel free to ask me for any further step --- like setting
> > > break points, dumping some variable contents, and so on --- if it can
> > > help locate the problem.
> >
> > Crash in Fexpand_file_name? Hm...there was some changes in r11780[123]
> > and r117806. Can you try to revert to r117800 and reproduce this crash?
>
> This was introduced in r117806 (alloca doesn't like negative arguments).
>
> Fixed in trunk revision 117918.

Could you please send to me the exact bzr command you would like me to
do in order to revert to whatever revision you think is of interest, and
then I can rebuild Emacs and try again to crash.

Another option would be to instrument Fexpand_file_name in order to find
when it crashes in more details, just send me a fileio.c as attachment
if you want me to do that.

After reading of Eli that the crash is within Fexpand_file_name, I have
done some more investigation how to provoke the crash with a simpler
command line, and I have found that the following arguments suffice:

-Q "--eval=(expand-file-name \"c:Invalid/path/info\" \"C:\\Programme\\GNU\\installation\\emacs-install\\emacs\\trunk\\src/\")"


Please note that:

1) C:\Programme\GNU\installation\emacs-install\emacs\trunk\src/ is the
   value of variable default-directory, and I need to pass it explicitly
   to expand-file-name for the crash to happen

2) It is on purpose that
   C:\Programme\GNU\installation\emacs-install\emacs\trunk\src/ mixes
   backward and forward slashes, it is the way it is when I launch Emacs
   with -Q and
   current directory=C:\Programme\GNU\installation\emacs-install\emacs\trunk\src

3) C:\Programme\GNU\installation\emacs-install\emacs\trunk\src is the
   directory where the C source code is found, and in which I lauch gdb
   according to Eli's recommendation.

4) c:Invalid/path/info is an invalid path, and it is on purpose that
   first slash after c: is missing.

Hopefully, this shorter settup will allow you to reproduce the
crash. Could you please try that before I have to do any bzr reverting.


VBR,
  Vincent.

PS: Attached is a gdb session log with the crash causing simpler settup.


[-- Attachment #2: bug18516_3.log --]
[-- Type: application/octet-stream, Size: 16043 bytes --]



C:\Programme\GNU\installation\emacs-install\emacs\trunk\src>gdb c:/Programme/GNU/Emacs/bin/emacs.exe
gdb c:/Programme/GNU/Emacs/bin/emacs.exe
GNU gdb (GDB) 7.4
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "i686-pc-mingw32".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from c:\Programme\GNU\Emacs\bin\emacs.exe...done.
SIGINT is used by the debugger.
Are you sure you want to change it? (y or n) [answered Y; input not from terminal]
DISPLAY = w32
TERM = emacs
Breakpoint 1 at 0x109721d: file emacs.c, line 360.
Temporary breakpoint 2 at 0x10adc12: file sysdep.c, line 911.
(gdb) run -Q "--eval=(expand-file-name \"c:Invalid/path/info\" \"C:\\Programme\\GNU\\installation\\emacs-install\\emacs\\trunk\\src/\")"
Starting program: c:\Programme\GNU\Emacs\bin\emacs.exe -Q "--eval=(expand-file-name \"c:Invalid/path/info\" \"C:\\Programme\\GNU\\installation\\emacs-install\\emacs\\trunk\\src/\")"
[New Thread 122956.0x20ee0]
[New Thread 122956.0x20674]
[New Thread 122956.0x2087c]

Program received signal SIGSEGV, Segmentation fault.
0x011a79a7 in __chkstk_ms ()
(gdb) bt full
#0  0x011a79a7 in __chkstk_ms ()
No symbol table info available.
#1  0x010c1ee7 in Fexpand_file_name (name=<optimized out>, 
    default_directory=84254425) at fileio.c:1390
        nm = 0x83eed2 "Invalid/path/info"
        nmlim = 0x11 <Address 0x11 out of bounds>
        newdir = <optimized out>
        newdirlim = <optimized out>
        target = <optimized out>
        tlen = <optimized out>
        pw = <optimized out>
        drive = 67
        collapse_newdir = <optimized out>
        is_escaped = <optimized out>
        length = <optimized out>
        nbytes = <optimized out>
        handler = <optimized out>
        result = <optimized out>
        handled_name = <optimized out>
        multibyte = false
        hdir = <optimized out>
        sa_count = 12
        sa_must_free = false
#2  0x011000fb in eval_sub (form=22758558) at eval.c:2184
        numargs = <optimized out>
        args_left = 21065338
        i = 2
        maxargs = 2
        argvals = {84254441, 84254425, 22678576, 21065338, 17833915, 
          21141850, 21065338, 21065338}
        fun = 18558869
        val = <optimized out>
        original_fun = 2
        original_args = 22758550
        funcar = 2
#3  0x0110208c in Feval (form=22758558, lexical=21065338) at eval.c:1999
No locals.
#4  0x01100c0e in Ffuncall (nargs=2, args=0x83f4dc) at eval.c:2729
        internal_argbuf = {22758558, 21065338, 21065338, 154, 8647900, 
          8647904, 8648040, 17875523}
        fun = 20425005
        original_fun = <optimized out>
        funcar = 2
        numargs = 1
        val = <optimized out>
        internal_args = 0x83f450
        i = <optimized out>
#5  0x011325e1 in exec_byte_code (bytestr=2090335604, vector=2, maxdepth=92, 
    args_template=1028, nargs=18864696, args=0x2) at bytecode.c:920
        targets = {0x113265e, 0x1132d6b, 0x1132d70, 0x1132d75, 0x11324b1, 
          0x11324b1, 0x113392a, 0x1134215, 0x11341f9, 0x11341fe, 0x1134203, 
          0x1134208, 0x11324dd, 0x11324dd, 0x1132a81, 0x11341d8, 0x1132c60, 
          0x1132c65, 0x1132bea, 0x1132bef, 0x1132533, 0x1132533, 0x1132ba2, 
          0x1132b81, 0x1132ce6, 0x1132cdc, 0x1132ce1, 0x1132cc6, 0x113258e, 
          0x113258e, 0x1132bd9, 0x1132b60, 0x1132c8b, 0x1132c90, 0x1132c95, 
          0x1132ca5, 0x11325c4, 0x11325c4, 0x1132ccb, 0x1132c6a, 0x11326d5, 
          0x11326da, 0x11326df, 0x1132cf5, 0x11325fb, 0x11325fb, 0x1132cb5, 
          0x11326b4, 0x1134052, 0x1134048, 0x1133f84, 0x113265e, 0x113265e, 
          0x113265e, 0x113265e, 0x113265e, 0x113384b, 0x11338c8, 0x11338f9, 
          0x1133e50, 0x1133e81, 0x1132b29, 0x1132bf4, 0x1133ebb, 0x1132af5, 
          0x1132c2c, 0x1133ee5, 0x1133cb4, 0x1133cdb, 0x1133d10, 0x1133d44, 
          0x1133db8, 0x1133ddc, 0x1133e11, 0x1133960, 0x1133984, 0x11339a8, 
          0x11339dd, 0x1133a15, 0x1133a4a, 0x1133a86, 0x1133aba, 0x1133aee, 
          0x1133b5f, 0x1133b8d, 0x1133bbb, 0x1133c77, 0x1133bfa, 0x1133c37, 
          0x1132f10, 0x1132f4d, 0x1132f81, 0x1132faa, 0x1132fde, 0x1133012, 
          0x1133046, 0x11330e6, 0x1132634, 0x1133119, 0x113313d, 0x11331aa, 
          0x11331da, 0x113320a, 0x1133231, 0x113325a, 0x1133280, 0x11332ad, 
          0x113265e, 0x11332da, 0x1133303, 0x113332c, 0x1133355, 0x113337e, 
          0x11333a7, 0x1132634, 0x113265e, 0x11333ce, 0x113340e, 0x1133432, 
          0x1133456, 0x113348e, 0x11334c3, 0x11334e7, 0x1133506, 0x113353e, 
          0x1133573, 0x11335ab, 0x11335d4, 0x113265e, 0x11343f1, 0x11326e5, 
          0x1132a92, 0x1132904, 0x11327cc, 0x11329f0, 0x11342db, 0x11343d8, 
          0x1132bb3, 0x1134352, 0x113437c, 0x1133f1a, 0x1133f44, 0x1134074, 
          0x11340b9, 0x113430f, 0x11337f9, 0x1132ee7, 0x11335f8, 0x1133634, 
          0x113365b, 0x113367f, 0x11336a3, 0x11336c7, 0x11336ff, 0x1133734, 
          0x1133769, 0x11337a1, 0x1132d85, 0x1132dbd, 0x1132df2, 0x1132e16, 
          0x1132e4b, 0x1132e83, 0x1132eb5, 0x11337c5, 0x113307a, 0x11330ae, 
          0x1132d05, 0x1132d3f, 0x113265e, 0x113275f, 0x1132999, 0x113282b, 
          0x11328af, 0x113425a, 0x1133d78, 0x1133b22, 0x113316a, 0x11340f8, 
          0x113412d, 0x113265e, 0x113265e, 0x1134171, 0x113265e, 0x113265e, 
          0x113265e, 0x113265e, 0x113265e, 0x113265e, 0x113265e, 0x113265e, 
          0x113265e, 0x11341aa <repeats 64 times>}
        count = 7
        stack = {
          pc = 0x133fed2 "\210é╝\003\016AÕ\235â╦\001╠µþ\016C\"\003åi\001\nëA\022óë▓\f╠┘\036DÐ\003\003\003#)Âââà\001\006	Í╠O▓\n┘▓\001ÞÚ\006\v!!▓\nëâª\001═\016E\006\vC\"\026E\006\bâÃ\001\016E▓	éÃ\001\006\bâ¢\001\006\b\006\n\006\nABí\210\006\bA▓	éÃ\001\006	\016EBë\026E▓	\210é╝\003\016AÛ\235â¾\001Ú\002å▄\001\nëA\022ó!Þ\001!Ù\001!âÚ\001ë▓\002ý\002╠┘#Â\003é╝\003\016AÝ\235â\023\002Ú\002å\004\002\nëA\022ó!Þ\001!ý\001╠┘ë$Â\003é╝\003\016A¯Ü"..., 
          byte_string = 18864681, 
          byte_string_start = 0x133fd83 "ã \210\bâ\021", 
          next = 0x83f6e0
        }
        result = 2090335604
        type = 8647908
#6  0x01100749 in funcall_lambda (fun=18864661, nargs=1, arg_vector=0x83f658)
    at eval.c:2894
        val = <optimized out>
        syms_left = <optimized out>
        next = 1028
        lexenv = <optimized out>
        i = <optimized out>
        optional = <optimized out>
        rest = <optimized out>
#7  0x0110099f in Ffuncall (nargs=2, args=0x83f654) at eval.c:2787
        fun = <optimized out>
        original_fun = 22522602
        funcar = 2
        numargs = 1
        val = <optimized out>
        internal_args = <optimized out>
        i = <optimized out>
#8  0x011325e1 in exec_byte_code (bytestr=2090335604, vector=2, maxdepth=68, 
    args_template=0, nargs=18851656, args=0x2) at bytecode.c:920
        targets = {0x113265e, 0x1132d6b, 0x1132d70, 0x1132d75, 0x11324b1, 
          0x11324b1, 0x113392a, 0x1134215, 0x11341f9, 0x11341fe, 0x1134203, 
          0x1134208, 0x11324dd, 0x11324dd, 0x1132a81, 0x11341d8, 0x1132c60, 
          0x1132c65, 0x1132bea, 0x1132bef, 0x1132533, 0x1132533, 0x1132ba2, 
          0x1132b81, 0x1132ce6, 0x1132cdc, 0x1132ce1, 0x1132cc6, 0x113258e, 
          0x113258e, 0x1132bd9, 0x1132b60, 0x1132c8b, 0x1132c90, 0x1132c95, 
          0x1132ca5, 0x11325c4, 0x11325c4, 0x1132ccb, 0x1132c6a, 0x11326d5, 
          0x11326da, 0x11326df, 0x1132cf5, 0x11325fb, 0x11325fb, 0x1132cb5, 
          0x11326b4, 0x1134052, 0x1134048, 0x1133f84, 0x113265e, 0x113265e, 
          0x113265e, 0x113265e, 0x113265e, 0x113384b, 0x11338c8, 0x11338f9, 
          0x1133e50, 0x1133e81, 0x1132b29, 0x1132bf4, 0x1133ebb, 0x1132af5, 
          0x1132c2c, 0x1133ee5, 0x1133cb4, 0x1133cdb, 0x1133d10, 0x1133d44, 
          0x1133db8, 0x1133ddc, 0x1133e11, 0x1133960, 0x1133984, 0x11339a8, 
          0x11339dd, 0x1133a15, 0x1133a4a, 0x1133a86, 0x1133aba, 0x1133aee, 
          0x1133b5f, 0x1133b8d, 0x1133bbb, 0x1133c77, 0x1133bfa, 0x1133c37, 
          0x1132f10, 0x1132f4d, 0x1132f81, 0x1132faa, 0x1132fde, 0x1133012, 
          0x1133046, 0x11330e6, 0x1132634, 0x1133119, 0x113313d, 0x11331aa, 
          0x11331da, 0x113320a, 0x1133231, 0x113325a, 0x1133280, 0x11332ad, 
          0x113265e, 0x11332da, 0x1133303, 0x113332c, 0x1133355, 0x113337e, 
          0x11333a7, 0x1132634, 0x113265e, 0x11333ce, 0x113340e, 0x1133432, 
          0x1133456, 0x113348e, 0x11334c3, 0x11334e7, 0x1133506, 0x113353e, 
          0x1133573, 0x11335ab, 0x11335d4, 0x113265e, 0x11343f1, 0x11326e5, 
          0x1132a92, 0x1132904, 0x11327cc, 0x11329f0, 0x11342db, 0x11343d8, 
          0x1132bb3, 0x1134352, 0x113437c, 0x1133f1a, 0x1133f44, 0x1134074, 
          0x11340b9, 0x113430f, 0x11337f9, 0x1132ee7, 0x11335f8, 0x1133634, 
          0x113365b, 0x113367f, 0x11336a3, 0x11336c7, 0x11336ff, 0x1133734, 
          0x1133769, 0x11337a1, 0x1132d85, 0x1132dbd, 0x1132df2, 0x1132e16, 
          0x1132e4b, 0x1132e83, 0x1132eb5, 0x11337c5, 0x113307a, 0x11330ae, 
          0x1132d05, 0x1132d3f, 0x113265e, 0x113275f, 0x1132999, 0x113282b, 
          0x11328af, 0x113425a, 0x1133d78, 0x1133b22, 0x113316a, 0x11340f8, 
          0x113412d, 0x113265e, 0x113265e, 0x1134171, 0x113265e, 0x113265e, 
          0x113265e, 0x113265e, 0x113265e, 0x113265e, 0x113265e, 0x113265e, 
          0x113265e, 0x11341aa <repeats 64 times>}
        count = 6
        stack = {
          pc = 0x1342b8d "\210Ã\016@ëâÓ\004ë@\002ä┘\004\201¡", 
          byte_string = 18851641, 
          byte_string_start = 0x1342703 "ã \020Ã\021\n\023Ã\024╚╔!ëÃ=ä0", 
          next = 0x83f870
        }
        result = 2090335604
        type = 8648280
#9  0x01100749 in funcall_lambda (fun=18851621, nargs=0, arg_vector=0x83f7fc)
    at eval.c:2894
        val = <optimized out>
        syms_left = <optimized out>
        next = 0
        lexenv = <optimized out>
        i = <optimized out>
        optional = <optimized out>
        rest = <optimized out>
#10 0x0110099f in Ffuncall (nargs=1, args=0x83f7f8) at eval.c:2787
        fun = <optimized out>
        original_fun = 22598642
        funcar = 2
        numargs = 0
        val = <optimized out>
        internal_args = <optimized out>
        i = <optimized out>
#11 0x011325e1 in exec_byte_code (bytestr=2090335604, vector=2, maxdepth=48, 
    args_template=0, nargs=8648696, args=0x1) at bytecode.c:920
        targets = {0x113265e, 0x1132d6b, 0x1132d70, 0x1132d75, 0x11324b1, 
          0x11324b1, 0x113392a, 0x1134215, 0x11341f9, 0x11341fe, 0x1134203, 
          0x1134208, 0x11324dd, 0x11324dd, 0x1132a81, 0x11341d8, 0x1132c60, 
          0x1132c65, 0x1132bea, 0x1132bef, 0x1132533, 0x1132533, 0x1132ba2, 
          0x1132b81, 0x1132ce6, 0x1132cdc, 0x1132ce1, 0x1132cc6, 0x113258e, 
          0x113258e, 0x1132bd9, 0x1132b60, 0x1132c8b, 0x1132c90, 0x1132c95, 
          0x1132ca5, 0x11325c4, 0x11325c4, 0x1132ccb, 0x1132c6a, 0x11326d5, 
          0x11326da, 0x11326df, 0x1132cf5, 0x11325fb, 0x11325fb, 0x1132cb5, 
          0x11326b4, 0x1134052, 0x1134048, 0x1133f84, 0x113265e, 0x113265e, 
          0x113265e, 0x113265e, 0x113265e, 0x113384b, 0x11338c8, 0x11338f9, 
          0x1133e50, 0x1133e81, 0x1132b29, 0x1132bf4, 0x1133ebb, 0x1132af5, 
          0x1132c2c, 0x1133ee5, 0x1133cb4, 0x1133cdb, 0x1133d10, 0x1133d44, 
          0x1133db8, 0x1133ddc, 0x1133e11, 0x1133960, 0x1133984, 0x11339a8, 
          0x11339dd, 0x1133a15, 0x1133a4a, 0x1133a86, 0x1133aba, 0x1133aee, 
          0x1133b5f, 0x1133b8d, 0x1133bbb, 0x1133c77, 0x1133bfa, 0x1133c37, 
          0x1132f10, 0x1132f4d, 0x1132f81, 0x1132faa, 0x1132fde, 0x1133012, 
          0x1133046, 0x11330e6, 0x1132634, 0x1133119, 0x113313d, 0x11331aa, 
          0x11331da, 0x113320a, 0x1133231, 0x113325a, 0x1133280, 0x11332ad, 
          0x113265e, 0x11332da, 0x1133303, 0x113332c, 0x1133355, 0x113337e, 
          0x11333a7, 0x1132634, 0x113265e, 0x11333ce, 0x113340e, 0x1133432, 
          0x1133456, 0x113348e, 0x11334c3, 0x11334e7, 0x1133506, 0x113353e, 
          0x1133573, 0x11335ab, 0x11335d4, 0x113265e, 0x11343f1, 0x11326e5, 
          0x1132a92, 0x1132904, 0x11327cc, 0x11329f0, 0x11342db, 0x11343d8, 
          0x1132bb3, 0x1134352, 0x113437c, 0x1133f1a, 0x1133f44, 0x1134074, 
          0x11340b9, 0x113430f, 0x11337f9, 0x1132ee7, 0x11335f8, 0x1133634, 
          0x113365b, 0x113367f, 0x11336a3, 0x11336c7, 0x11336ff, 0x1133734, 
          0x1133769, 0x11337a1, 0x1132d85, 0x1132dbd, 0x1132df2, 0x1132e16, 
          0x1132e4b, 0x1132e83, 0x1132eb5, 0x11337c5, 0x113307a, 0x11330ae, 
          0x1132d05, 0x1132d3f, 0x113265e, 0x113275f, 0x1132999, 0x113282b, 
          0x11328af, 0x113425a, 0x1133d78, 0x1133b22, 0x113316a, 0x11340f8, 
          0x113412d, 0x113265e, 0x113265e, 0x1134171, 0x113265e, 0x113265e, 
          0x113265e, 0x113265e, 0x113265e, 0x113265e, 0x113265e, 0x113265e, 
          0x113265e, 0x11341aa <repeats 64 times>}
        count = 4
        stack = {
          pc = 0x1343205 "\210)\210¹³²\"\210■╩ \"ë;ân\001\201H", 
          byte_string = 18849905, 
          byte_string_start = 0x13430b2 "\bâ\b", 
          next = 0x0
        }
        result = 2090335604
        type = 18849920
#12 0x01100749 in funcall_lambda (fun=18849885, nargs=0, arg_vector=0x83f910)
    at eval.c:2894
        val = <optimized out>
        syms_left = <optimized out>
        next = 0
        lexenv = <optimized out>
        i = <optimized out>
        optional = <optimized out>
        rest = <optimized out>
#13 0x010ffc34 in apply_lambda (fun=18849885, args=<optimized out>)
    at eval.c:2835
        args_left = 21065338
        i = <optimized out>
        numargs = 0
        arg_vector = 0x83f910
        tem = <optimized out>
        sa_must_free = <optimized out>
#14 0x010ffe7d in eval_sub (form=22169014) at eval.c:2256
        fun = <optimized out>
        val = <optimized out>
        original_fun = 22674562
        original_args = 21065338
        funcar = 2
#15 0x0110208c in Feval (form=22169014, lexical=21065338) at eval.c:1999
No locals.
#16 0x01099c44 in top_level_2 () at keyboard.c:1205
No locals.
#17 0x010ff352 in internal_condition_case (bfun=0x1099c2b <top_level_2>, 
    handlers=21115634, hfun=0x109b0c2 <cmd_error>) at eval.c:1350
        val = <optimized out>
        c = 0x4754280
#18 0x0109a32e in top_level_1 (ignore=21065338) at keyboard.c:1213
No locals.
#19 0x010ff296 in internal_catch (tag=21109474, func=0x109a2cf <top_level_1>, 
    arg=21065338) at eval.c:1111
        val = <optimized out>
        c = 0x1416e5a
#20 0x0109ad77 in command_loop () at keyboard.c:1174
No locals.
#21 recursive_edit_1 () at keyboard.c:785
        val = 0
#22 0x0109b00e in Frecursive_edit () at keyboard.c:856
        buffer = <optimized out>
#23 0x011aea9e in main (argc=<optimized out>, argv=0x34cc0) at emacs.c:1642
        dummy = 2009095316
        stack_bottom_variable = 1 '\001'
        do_initial_setlocale = <optimized out>
        dumping = false
        skip_args = 0
        no_loadup = false
        junk = 0x0
        dname_arg = 0x0
        ch_to_dir = 0x77c04e42 "¸Ï\033└¸ÏYH]├╠╠╠╠╠j\024h`(¥wÞ├%"
        original_pwd = 0x1525d06 "R\001÷\\R\001FVR\001r\nB\001¥:R\001l"

Lisp Backtrace:
"expand-file-name" (0x83f3bc)
"eval" (0x83f4e0)
"command-line-1" (0x83f658)
"command-line" (0x83f7fc)
"normal-top-level" (0x83f910)
(gdb)