From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Chong Yidong Newsgroups: gmane.emacs.devel,gmane.emacs.pretest.bugs Subject: Re: 23.0.60; Crash in face_at_buffer_position Date: Tue, 15 Apr 2008 09:10:23 -0400 Message-ID: <87tzi3e01s.fsf@stupidchicken.com> References: <480362A7.4010403@gmail.com> <480378C7.5050904@gmail.com> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: ger.gmane.org 1208265457 7313 80.91.229.12 (15 Apr 2008 13:17:37 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Tue, 15 Apr 2008 13:17:37 +0000 (UTC) Cc: emacs-pretest-bug@gnu.org, Stefan Monnier To: "Lennart Borgman \(gmail\)" Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Tue Apr 15 15:18:13 2008 connect(): Connection refused Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1Jll1n-0000D5-Mo for ged-emacs-devel@m.gmane.org; Tue, 15 Apr 2008 15:16:51 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1Jll18-0002Vj-Ua for ged-emacs-devel@m.gmane.org; Tue, 15 Apr 2008 09:16:11 -0400 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1Jll0b-0002Gf-QB for emacs-devel@gnu.org; Tue, 15 Apr 2008 09:15:37 -0400 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1Jll0Y-0002FG-GU for emacs-devel@gnu.org; Tue, 15 Apr 2008 09:15:36 -0400 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1Jll0Y-0002FB-8b for emacs-devel@gnu.org; Tue, 15 Apr 2008 09:15:34 -0400 Original-Received: from fencepost.gnu.org ([140.186.70.10]) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1Jll0X-0000bb-U5 for emacs-devel@gnu.org; Tue, 15 Apr 2008 09:15:33 -0400 Original-Received: from mx10.gnu.org ([199.232.76.166]) by fencepost.gnu.org with esmtp (Exim 4.67) (envelope-from ) id 1Jll0X-0004Ic-Lt for emacs-pretest-bug@gnu.org; Tue, 15 Apr 2008 09:15:33 -0400 Original-Received: from Debian-exim by monty-python.gnu.org with spam-scanned (Exim 4.60) (envelope-from ) id 1Jll0S-0000Zl-74 for emacs-pretest-bug@gnu.org; Tue, 15 Apr 2008 09:15:33 -0400 Original-Received: from mailfilter4o.centennialpr.net ([66.231.170.145] helo=mailfilter4.centennialpr.net) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1Jll0R-0000Z3-Rc for emacs-pretest-bug@gnu.org; Tue, 15 Apr 2008 09:15:28 -0400 Original-Received: from ptr.centennialpr.net (HELO furry) ([65.38.200.139]) by mailfilter4.centennialpr.net with SMTP; 15 Apr 2008 09:15:25 -0400 X-SBRS: None X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAKpHBEhBJsiL/2dsb2JhbACtDQQ X-IronPort-AV: i="4.25,660,1199678400"; d="scan'208"; a="169225994:sNHT19582778" Original-Received: by furry (Postfix, from userid 1000) id 27EB9C047; Tue, 15 Apr 2008 09:10:23 -0400 (EDT) In-Reply-To: <480378C7.5050904@gmail.com> (Lennart Borgman's message of "Mon, 14 Apr 2008 17:31:19 +0200") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.0.60 (gnu/linux) X-detected-kernel: by monty-python.gnu.org: Genre and OS details not recognized. X-detected-kernel: by monty-python.gnu.org: Linux 2.6, seldom 2.4 (older, 4) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:95261 gmane.emacs.pretest.bugs:22031 Archived-At: >> Most likely the SIGSEGV is nothing more than stack-overflow because of >> "infinite" recursion and the bug is probably not in >> face_at_buffer_position. > > But how can I see where it is? The parameters to > face_at_buffer_position looks strange. Maybe that is something useful? It might be that the code in xdisp.c could be rewritten to avoid the risk of buffer overflow. Could you send a reproducible crash recipe, if possible?