From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.bugs Subject: bug#20802: Segfault when showing non-GTK+ tooltip Date: Tue, 16 Jun 2015 20:12:50 +0300 Message-ID: <83lhfjmval.fsf@gnu.org> References: <1434187118.10061.4.camel@gmx.de> <83381wq76d.fsf@gnu.org> <1434439264.2078.6.camel@gmx.de> <558024F4.5090205@gmx.at> <1434468845.21431.2.camel@gmx.de> <83oakfmyq4.fsf@gnu.org> <1434472472.21431.4.camel@gmx.de> Reply-To: Eli Zaretskii NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8BIT X-Trace: ger.gmane.org 1434474875 2177 80.91.229.3 (16 Jun 2015 17:14:35 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Tue, 16 Jun 2015 17:14:35 +0000 (UTC) Cc: 20802@debbugs.gnu.org To: Tobias Getzner Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Tue Jun 16 19:14:18 2015 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Z4uRA-000654-HH for geb-bug-gnu-emacs@m.gmane.org; Tue, 16 Jun 2015 19:14:12 +0200 Original-Received: from localhost ([::1]:41522 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Z4uR9-0000hE-Lv for geb-bug-gnu-emacs@m.gmane.org; Tue, 16 Jun 2015 13:14:11 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:47224) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Z4uR5-0000h9-Q0 for bug-gnu-emacs@gnu.org; Tue, 16 Jun 2015 13:14:09 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Z4uR1-0006Ur-D3 for bug-gnu-emacs@gnu.org; Tue, 16 Jun 2015 13:14:07 -0400 Original-Received: from debbugs.gnu.org ([140.186.70.43]:41638) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Z4uR1-0006Uj-Am for bug-gnu-emacs@gnu.org; Tue, 16 Jun 2015 13:14:03 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.80) (envelope-from ) id 1Z4uR0-0000oA-Vz for bug-gnu-emacs@gnu.org; Tue, 16 Jun 2015 13:14:03 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 16 Jun 2015 17:14:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 20802 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: Original-Received: via spool by 20802-submit@debbugs.gnu.org id=B20802.14344747923040 (code B ref 20802); Tue, 16 Jun 2015 17:14:02 +0000 Original-Received: (at 20802) by debbugs.gnu.org; 16 Jun 2015 17:13:12 +0000 Original-Received: from localhost ([127.0.0.1]:56098 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Z4uQC-0000mx-1F for submit@debbugs.gnu.org; Tue, 16 Jun 2015 13:13:12 -0400 Original-Received: from mtaout20.012.net.il ([80.179.55.166]:65232) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Z4uQ9-0000mj-1e for 20802@debbugs.gnu.org; Tue, 16 Jun 2015 13:13:10 -0400 Original-Received: from conversion-daemon.a-mtaout20.012.net.il by a-mtaout20.012.net.il (HyperSendmail v2007.08) id <0NQ100100RNVNI00@a-mtaout20.012.net.il> for 20802@debbugs.gnu.org; Tue, 16 Jun 2015 20:13:02 +0300 (IDT) Original-Received: from HOME-C4E4A596F7 ([87.69.4.28]) by a-mtaout20.012.net.il (HyperSendmail v2007.08) with ESMTPA id <0NQ1001XQRTQIK70@a-mtaout20.012.net.il>; Tue, 16 Jun 2015 20:13:02 +0300 (IDT) In-reply-to: <1434472472.21431.4.camel@gmx.de> X-012-Sender: halo1@inter.net.il X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 140.186.70.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:103999 Archived-At: > From: Tobias Getzner > Cc: rudalics@gmx.at, 20802@debbugs.gnu.org > Date: Tue, 16 Jun 2015 18:34:32 +0200 > > On Di, 2015-06-16 at 18:58 +0300, Eli Zaretskii wrote: > > > > > > From: Tobias Getzner > > > Date: Tue, 16 Jun 2015 17:34:05 +0200 > > > > > > Thanks! I built from master (34a43ba), which includes your 93ae9f4. > > > I’m > > > still seeing a segfault for the steps given above. Backtrace below. > > > > Please run Emacs under GDB, put a breakpoint in > > x_free_frame_resources, then perform your steps, and show backtrace > > each time the breakpoint breaks. > > > > Thanks. > > > > Breakpoint 1, x_free_frame_resources (f=0x124fd70) at xterm.c:10970 > 10970 { > (gdb) bt > #0 x_free_frame_resources (f=0x124fd70) at xterm.c:10970 > #1 0x00000000004c9715 in unwind_create_frame (frame=19201397) at xfns.c:2842 > #2 0x00000000004c9759 in unwind_create_tip_frame (frame=) at xfns.c:4997 > #3 0x0000000000557b2e in unbind_to (count=, value=value@entry=0) at eval.c:3211 > #4 0x0000000000557cf9 in unwind_to_catch (catch=catch@entry=0x140a040, value=value@entry=19849283) > at eval.c:1157 > #5 0x00000000005592ed in Fsignal (error_symbol=error_symbol@entry=18624, data=) > at eval.c:1557 > #6 0x00000000005595f9 in xsignal (error_symbol=error_symbol@entry=18624, data=) > at eval.c:1581 > #7 0x0000000000559c6d in signal_error (s=s@entry=0x5e3d1d "Undefined color", arg=19849315, > arg@entry=34016084) at eval.c:1636 > #8 0x00000000004ccc57 in x_decode_color (f=, color_name=34016084, > mono_color=) at xfns.c:495 Is that the only call? If so, I don't understand hy Martin's change didn't work. > (gdb) cont > Continuing. > Fatal error 11: Segmentation fault > Program received signal SIGSEGV, Segmentation fault. > 0x000000000045e51e in note_mouse_highlight (f=f@entry=0x1193460, x=, y=19) at xdisp.c:29600 > 29600 struct image *img = IMAGE_FROM_ID (f, glyph->u.img_id); And this is a different segfault from what you've shown before. Can you step into the call to x_free_frame_resources, then step from there into free_frame_faces, and see what it does there? You are supposed to see that image_cache->refcount is at least 2, and therefore free_image_cache is not called.