From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.bugs Subject: bug#18162: 24.3.92; segfault on null face pointer in face_for_char Date: Fri, 01 Aug 2014 08:57:35 +0300 Message-ID: <838un8sqeo.fsf@gnu.org> References: <6ewqatjen6.fsf@just-testing.permabit.com> Reply-To: Eli Zaretskii NNTP-Posting-Host: plane.gmane.org X-Trace: ger.gmane.org 1406872706 15499 80.91.229.3 (1 Aug 2014 05:58:26 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Fri, 1 Aug 2014 05:58:26 +0000 (UTC) Cc: 18162@debbugs.gnu.org To: Ken Raeburn Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Fri Aug 01 07:58:19 2014 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1XD5r8-0003iU-TM for geb-bug-gnu-emacs@m.gmane.org; Fri, 01 Aug 2014 07:58:19 +0200 Original-Received: from localhost ([::1]:60061 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XD5r8-0003xA-8p for geb-bug-gnu-emacs@m.gmane.org; Fri, 01 Aug 2014 01:58:18 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:51123) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XD5qy-0003wB-Vo for bug-gnu-emacs@gnu.org; Fri, 01 Aug 2014 01:58:15 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1XD5qs-0000nu-OF for bug-gnu-emacs@gnu.org; Fri, 01 Aug 2014 01:58:08 -0400 Original-Received: from debbugs.gnu.org ([140.186.70.43]:46654) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XD5qs-0000np-KL for bug-gnu-emacs@gnu.org; Fri, 01 Aug 2014 01:58:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.80) (envelope-from ) id 1XD5qs-0003ak-1K for bug-gnu-emacs@gnu.org; Fri, 01 Aug 2014 01:58:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 01 Aug 2014 05:58:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 18162 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: Original-Received: via spool by 18162-submit@debbugs.gnu.org id=B18162.140687264213759 (code B ref 18162); Fri, 01 Aug 2014 05:58:01 +0000 Original-Received: (at 18162) by debbugs.gnu.org; 1 Aug 2014 05:57:22 +0000 Original-Received: from localhost ([127.0.0.1]:53597 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1XD5qD-0003Zq-Ht for submit@debbugs.gnu.org; Fri, 01 Aug 2014 01:57:21 -0400 Original-Received: from mtaout21.012.net.il ([80.179.55.169]:50852) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1XD5qA-0003ZX-9J for 18162@debbugs.gnu.org; Fri, 01 Aug 2014 01:57:20 -0400 Original-Received: from conversion-daemon.a-mtaout21.012.net.il by a-mtaout21.012.net.il (HyperSendmail v2007.08) id <0N9M00F0051GEP00@a-mtaout21.012.net.il> for 18162@debbugs.gnu.org; Fri, 01 Aug 2014 08:57:11 +0300 (IDT) Original-Received: from HOME-C4E4A596F7 ([87.69.4.28]) by a-mtaout21.012.net.il (HyperSendmail v2007.08) with ESMTPA id <0N9M00F7E5VAFS00@a-mtaout21.012.net.il>; Fri, 01 Aug 2014 08:57:11 +0300 (IDT) In-reply-to: <6ewqatjen6.fsf@just-testing.permabit.com> X-012-Sender: halo1@inter.net.il X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 140.186.70.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:92020 Archived-At: > From: Ken Raeburn > Date: Thu, 31 Jul 2014 19:24:13 -0400 > > (gdb) fr 6 > #6 face_for_char (f=0x66f0858, face=0x0, c=8230, pos=-1, object=13137010) at fontset.c:914 > 914 eassert (fontset_id_valid_p (face->fontset)); > (gdb) up > #7 0x0000000000619155 in Finternal_char_font (position=, ch=) at fontset.c:1863 > 1863 face_id = FACE_FOR_CHAR (f, FACE_FROM_ID (f, face_id), c, pos, Qnil); > (gdb) > > The incoming face_id value was optimized out, but since "position" is > nil (from looking in the caller's frame), it should've been assigned > from lookup_basic_face(f,DEFAULT_FACE_ID), and since > Vface_remapping_alist is nil, that would just be DEFAULT_FACE_ID or 0. > > c=8230 is HORIZONTAL ELLIPSIS Where did the ellipsis character come from? Did you have some buffer shown in that frame that could have used this character? According to the last keys you show below, you were typing into minibuffer, which is unlikely to have that character. > pos=-1 > > f->face_cache points to: > > $22 = { > buckets = 0x6122800, > f = 0x66f0858, > faces_by_id = 0x77a97c0, > size = 112, > used = 0, > menu_face_changed_p = false > } > > Since "used" is 0, FACE_FROM_ID returns a null pointer, which gets > passed to FACE_FOR_CHAR and face_for_char, and the latter assumes it's > not a null pointer. Sounds like some code called clear_face_cache, for some reason. Is f at all the same frame where you were typing? If not, the crash could have nothing to do with what you typed, but with some background activity on another frame.