From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.bugs Subject: bug#20802: Segfault when showing non-GTK+ tooltip Date: Sun, 14 Jun 2015 17:12:55 +0300 Message-ID: <83h9qapee0.fsf@gnu.org> References: <1434187118.10061.4.camel@gmx.de> <83381wq76d.fsf@gnu.org> <557C0526.5050607@gmx.at> <831thfri91.fsf@gnu.org> <557C2EF2.5030308@gmx.at> <83vberpv07.fsf@gnu.org> <557C3E1F.6030305@gmx.at> <83twubpt43.fsf@gnu.org> <557D5EE9.7070902@gmx.at> Reply-To: Eli Zaretskii NNTP-Posting-Host: plane.gmane.org X-Trace: ger.gmane.org 1434291267 23028 80.91.229.3 (14 Jun 2015 14:14:27 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sun, 14 Jun 2015 14:14:27 +0000 (UTC) Cc: tobias.getzner@gmx.de, 20802@debbugs.gnu.org To: martin rudalics Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Sun Jun 14 16:14:12 2015 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Z48fs-0006I3-BK for geb-bug-gnu-emacs@m.gmane.org; Sun, 14 Jun 2015 16:14:12 +0200 Original-Received: from localhost ([::1]:58781 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Z48fr-0003jZ-Ns for geb-bug-gnu-emacs@m.gmane.org; Sun, 14 Jun 2015 10:14:11 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:56222) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Z48fo-0003jT-K9 for bug-gnu-emacs@gnu.org; Sun, 14 Jun 2015 10:14:09 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Z48fj-0003iW-5E for bug-gnu-emacs@gnu.org; Sun, 14 Jun 2015 10:14:08 -0400 Original-Received: from debbugs.gnu.org ([140.186.70.43]:39512) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Z48fj-0003iS-1T for bug-gnu-emacs@gnu.org; Sun, 14 Jun 2015 10:14:03 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.80) (envelope-from ) id 1Z48fi-0004rZ-P2 for bug-gnu-emacs@gnu.org; Sun, 14 Jun 2015 10:14:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sun, 14 Jun 2015 14:14:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 20802 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: Original-Received: via spool by 20802-submit@debbugs.gnu.org id=B20802.143429119418628 (code B ref 20802); Sun, 14 Jun 2015 14:14:02 +0000 Original-Received: (at 20802) by debbugs.gnu.org; 14 Jun 2015 14:13:14 +0000 Original-Received: from localhost ([127.0.0.1]:53972 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Z48ev-0004qO-Da for submit@debbugs.gnu.org; Sun, 14 Jun 2015 10:13:13 -0400 Original-Received: from mtaout26.012.net.il ([80.179.55.182]:33223) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Z48es-0004q9-Su for 20802@debbugs.gnu.org; Sun, 14 Jun 2015 10:13:11 -0400 Original-Received: from conversion-daemon.mtaout26.012.net.il by mtaout26.012.net.il (HyperSendmail v2007.08) id <0NPX00J00U7QBA00@mtaout26.012.net.il> for 20802@debbugs.gnu.org; Sun, 14 Jun 2015 17:15:23 +0300 (IDT) Original-Received: from HOME-C4E4A596F7 ([87.69.4.28]) by mtaout26.012.net.il (HyperSendmail v2007.08) with ESMTPA id <0NPX00C5MU9NR580@mtaout26.012.net.il>; Sun, 14 Jun 2015 17:15:23 +0300 (IDT) In-reply-to: <557D5EE9.7070902@gmx.at> X-012-Sender: halo1@inter.net.il X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 140.186.70.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:103937 Archived-At: > Date: Sun, 14 Jun 2015 13:00:57 +0200 > From: martin rudalics > CC: tobias.getzner@gmx.de, 20802@debbugs.gnu.org > > What happens is given in the backtraces below. The first breakpoint is > hit when Emacs creates the image cache for the original frame > (f=0x13a7e00). The second breakpoint is hit when freeing the image > cache for the tooltip frame (f=0xe0c7a0). This removes the image_cache > created in make_image_cache at 0x1676f90. The third breakpoint is the > same as in my earlier posts. > > The reason seems obvious: When the color is not defined for the tooltip > frame we do _not_ increment the refcount of the image cache. But we > subsequently free the image cache in unwind_create_frame. Bad luck. Thanks. Now I know why this cannot be reproduced on Windows: this is bug#17524 coming back to haunt us. That bug was reported on Windows, I fixed it on Windows, then suggested a similar fix for X, but was told it didn't help there. So now please try making a fix on X similar to commit ebdc80316, and if that indeed doesn't help with this crash, perhaps some simple variation of that will. TIA