bug#56527: 28.1; Crash on macOS with magit

[Jonathan Mitchell <mitchell.jkyle@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 222 bytes --]

I think I've worked out how to print basic values in LLDB. The
vector=0x0000000102931240 appears to be a Marker object in the buffer
"magit-log: emacs". Both the marker and buffer are printed in the
attached debugger log.

[-- Attachment #2: debug emacs backtrace log.txt --]
[-- Type: text/plain, Size: 15229 bytes --]

In GNU Emacs 28.1.90 (build 1, aarch64-apple-darwin21.5.0, NS appkit-2113.50 Version 12.4 (Build 21F79))
 of 2022-07-13 built on Jonathans-MacBook-Air.local
Repository revision: ae0881e52cd69068d426053e6ea30be2fb4fd5d0
Repository branch: emacs-28
Windowing system distributor 'Apple', version 10.3.2113
System Description:  macOS 12.4

Configured using:
 'configure --enable-checking=all --enable-check-lisp-object-type
 'CFLAGS=-O0 -g3' --without-png --without-rsvg'

Configured features:
ACL GNUTLS JSON LCMS2 LIBXML2 MODULES NOTIFY KQUEUE NS PDUMPER THREADS
TOOLKIT_SCROLL_BARS ZLIB

Important settings:
  value of $LANG: en_US.UTF-8
  locale-coding-system: utf-8-unix

Major mode: Lisp Interaction

Minor modes in effect:
  tooltip-mode: t
  global-eldoc-mode: t
  eldoc-mode: t
  show-paren-mode: t
  electric-indent-mode: t
  mouse-wheel-mode: t
  tool-bar-mode: t
  menu-bar-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  blink-cursor-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t
  line-number-mode: t
  indent-tabs-mode: t
  transient-mark-mode: t

Load-path shadows:
None found.

Features:
(shadow sort mail-extr emacsbug message rmc puny dired dired-loaddefs
rfc822 mml mml-sec epa derived epg rfc6068 epg-config gnus-util rmail
rmail-loaddefs auth-source cl-seq eieio eieio-core cl-macs
eieio-loaddefs password-cache json map text-property-search time-date
subr-x seq byte-opt gv bytecomp byte-compile cconv mm-decode mm-bodies
mm-encode mail-parse rfc2231 mailabbrev gmm-utils mailheader cl-loaddefs
cl-lib sendmail rfc2047 rfc2045 ietf-drums mm-util mail-prsvr mail-utils
iso-transl tooltip eldoc paren electric uniquify ediff-hook vc-hooks
lisp-float-type elisp-mode mwheel term/ns-win ns-win ucs-normalize
mule-util term/common-win tool-bar dnd fontset image regexp-opt fringe
tabulated-list replace newcomment text-mode lisp-mode prog-mode register
page tab-bar menu-bar rfn-eshadow isearch easymenu timer select
scroll-bar mouse jit-lock font-lock syntax font-core term/tty-colors
frame minibuffer cl-generic cham georgian utf-8-lang misc-lang
vietnamese tibetan thai tai-viet lao korean japanese eucjp-ms cp51932
hebrew greek romanian slovak czech european ethiopic indian cyrillic
chinese composite emoji-zwj charscript charprop case-table epa-hook
jka-cmpr-hook help simple abbrev obarray cl-preloaded nadvice button
loaddefs faces cus-face macroexp files window text-properties overlay
sha1 md5 base64 format env code-pages mule custom widget
hashtable-print-readable backquote threads kqueue cocoa ns lcms2
multi-tty make-network-process emacs)

Memory information:
((conses 16 50345 6398)
 (symbols 48 6552 1)
 (strings 32 17816 1900)
 (string-bytes 1 586560)
 (vectors 16 13727)
 (vector-slots 8 182971 10284)
 (floats 8 21 38)
 (intervals 56 195 0)
 (buffers 992 10))

\f

(lldb) bt all
* thread #1, queue = 'com.apple.main-thread', stop reason = signal SIGABRT
  * frame #0: 0x00000001bdae6d98 libsystem_kernel.dylib`__pthread_kill + 8
    frame #1: 0x00000001bdb1bee0 libsystem_pthread.dylib`pthread_kill + 288
    frame #2: 0x00000001bda1e680 libsystem_c.dylib`raise + 32
    frame #3: 0x0000000100478d70 emacs`terminate_due_to_signal(sig=6, backtrace_limit=40) at emacs.c:437:3
    frame #4: 0x00000001004791f4 emacs`emacs_abort at sysdep.c:2282:3
    frame #5: 0x0000000100405488 emacs`ns_term_shutdown(sig=6) at nsterm.m:5367:7
    frame #6: 0x00000001001a0788 emacs`shut_down_emacs(sig=6, stuff=-> ) at emacs.c:2796:3
    frame #7: 0x0000000100478cf8 emacs`terminate_due_to_signal(sig=6, backtrace_limit=2147483647) at emacs.c:420:11
    frame #8: 0x00000001004796b8 emacs`die(msg="! PSEUDOVEC_STRUCT (vector, Lisp_Marker)->buffer", file="alloc.c", line=3139) at alloc.c:7481:3
    frame #9: 0x0000000100289520 emacs`cleanup_vector(vector=0x0000000102931240) at alloc.c:3139:7
    frame #10: 0x0000000100288c50 emacs`sweep_vectors at alloc.c:3218:5
    frame #11: 0x0000000100281278 emacs`gc_sweep at alloc.c:7245:3
    frame #12: 0x000000010027f8c8 emacs`garbage_collect at alloc.c:6178:3
    frame #13: 0x000000010027f170 emacs`maybe_garbage_collect at alloc.c:6045:5
    frame #14: 0x00000001002d5c9c emacs`maybe_gc at lisp.h:5142:5
    frame #15: 0x00000001002da78c emacs`Ffuncall(nargs=2, args=-> ) at eval.c:3007:3
    frame #16: 0x000000010035ead4 emacs`exec_byte_code(bytestr=-> , vector=-> , maxdepth=-> , args_template=-> , nargs=3, args=-> ) at bytecode.c:632:12
    frame #17: 0x00000001002e1570 emacs`fetch_and_exec_byte_code(fun=-> , syms_left=-> , nargs=3, args=-> ) at eval.c:3147:10
    frame #18: 0x00000001002dc668 emacs`funcall_lambda(fun=-> , nargs=3, arg_vector=-> ) at eval.c:3228:11
    frame #19: 0x00000001002da8dc emacs`Ffuncall(nargs=4, args=-> ) at eval.c:3027:11
    frame #20: 0x000000010035ead4 emacs`exec_byte_code(bytestr=-> , vector=-> , maxdepth=-> , args_template=-> , nargs=1, args=-> ) at bytecode.c:632:12
    frame #21: 0x00000001002e1570 emacs`fetch_and_exec_byte_code(fun=-> , syms_left=-> , nargs=1, args=-> ) at eval.c:3147:10
    frame #22: 0x00000001002dc668 emacs`funcall_lambda(fun=-> , nargs=1, arg_vector=-> ) at eval.c:3228:11
    frame #23: 0x00000001002da8dc emacs`Ffuncall(nargs=2, args=-> ) at eval.c:3027:11
    frame #24: 0x000000010035ead4 emacs`exec_byte_code(bytestr=-> , vector=-> , maxdepth=-> , args_template=-> , nargs=0, args=-> ) at bytecode.c:632:12
    frame #25: 0x00000001002e1570 emacs`fetch_and_exec_byte_code(fun=-> , syms_left=-> , nargs=0, args=-> ) at eval.c:3147:10
    frame #26: 0x00000001002dc668 emacs`funcall_lambda(fun=-> , nargs=0, arg_vector=-> ) at eval.c:3228:11
    frame #27: 0x00000001002da8dc emacs`Ffuncall(nargs=1, args=-> ) at eval.c:3027:11
    frame #28: 0x000000010035ead4 emacs`exec_byte_code(bytestr=-> , vector=-> , maxdepth=-> , args_template=-> , nargs=0, args=-> ) at bytecode.c:632:12
    frame #29: 0x00000001002e1570 emacs`fetch_and_exec_byte_code(fun=-> , syms_left=-> , nargs=0, args=-> ) at eval.c:3147:10
    frame #30: 0x00000001002dc668 emacs`funcall_lambda(fun=-> , nargs=0, arg_vector=-> ) at eval.c:3228:11
    frame #31: 0x00000001002da8dc emacs`Ffuncall(nargs=1, args=-> ) at eval.c:3027:11
    frame #32: 0x000000010035ead4 emacs`exec_byte_code(bytestr=-> , vector=-> , maxdepth=-> , args_template=-> , nargs=1, args=-> ) at bytecode.c:632:12
    frame #33: 0x00000001002e1570 emacs`fetch_and_exec_byte_code(fun=-> , syms_left=-> , nargs=1, args=-> ) at eval.c:3147:10
    frame #34: 0x00000001002dc668 emacs`funcall_lambda(fun=-> , nargs=1, arg_vector=-> ) at eval.c:3228:11
    frame #35: 0x00000001002da8dc emacs`Ffuncall(nargs=2, args=-> ) at eval.c:3027:11
    frame #36: 0x000000010035ead4 emacs`exec_byte_code(bytestr=-> , vector=-> , maxdepth=-> , args_template=-> , nargs=0, args=-> ) at bytecode.c:632:12
    frame #37: 0x00000001002e1570 emacs`fetch_and_exec_byte_code(fun=-> , syms_left=-> , nargs=0, args=-> ) at eval.c:3147:10
    frame #38: 0x00000001002dc668 emacs`funcall_lambda(fun=-> , nargs=0, arg_vector=-> ) at eval.c:3228:11
    frame #39: 0x00000001002da8dc emacs`Ffuncall(nargs=1, args=-> ) at eval.c:3027:11
    frame #40: 0x00000001002c5138 emacs`Ffuncall_interactively(nargs=1, args=-> ) at callint.c:260:32
    frame #41: 0x00000001002dc06c emacs`funcall_subr(subr=0x00000001005022a0, numargs=1, args=-> ) at eval.c:3078:12
    frame #42: 0x00000001002da888 emacs`Ffuncall(nargs=2, args=-> ) at eval.c:3023:11
    frame #43: 0x00000001002d7544 emacs`Fapply(nargs=3, args=-> ) at eval.c:2606:12
    frame #44: 0x00000001002c561c emacs`Fcall_interactively(function=-> , record_flag=-> , keys=-> ) at callint.c:353:36
    frame #45: 0x00000001002dc1c8 emacs`funcall_subr(subr=0x0000000100502270, numargs=3, args=-> ) at eval.c:3103:19
    frame #46: 0x00000001002da888 emacs`Ffuncall(nargs=4, args=-> ) at eval.c:3023:11
    frame #47: 0x000000010035ead4 emacs`exec_byte_code(bytestr=-> , vector=-> , maxdepth=-> , args_template=-> , nargs=1, args=-> ) at bytecode.c:632:12
    frame #48: 0x00000001002e1570 emacs`fetch_and_exec_byte_code(fun=-> , syms_left=-> , nargs=1, args=-> ) at eval.c:3147:10
    frame #49: 0x00000001002dc668 emacs`funcall_lambda(fun=-> , nargs=1, arg_vector=-> ) at eval.c:3228:11
    frame #50: 0x00000001002da8dc emacs`Ffuncall(nargs=2, args=-> ) at eval.c:3027:11
    frame #51: 0x00000001002db908 emacs`call1(fn=-> , arg1=-> ) at eval.c:2883:10
    frame #52: 0x00000001001a6d5c emacs`command_loop_1 at keyboard.c:1505:13
    frame #53: 0x00000001002d387c emacs`internal_condition_case(bfun=-> , handlers=-> , hfun=-> ) at eval.c:1450:25
    frame #54: 0x00000001001a6200 emacs`command_loop_2(handlers=-> ) at keyboard.c:1133:11
    frame #55: 0x00000001002d2a20 emacs`internal_catch(tag=-> , func=-> , arg=-> ) at eval.c:1181:25
    frame #56: 0x00000001001a538c emacs`command_loop at keyboard.c:1111:2
    frame #57: 0x00000001001a5198 emacs`recursive_edit_1 at keyboard.c:720:9
    frame #58: 0x00000001001a55fc emacs`Frecursive_edit at keyboard.c:803:3
    frame #59: 0x00000001001a2138 emacs`main(argc=1, argv=0x000000016fdff8c8) at emacs.c:2358:3
    frame #60: 0x0000000100b8908c dyld`start + 520
  thread #4
    frame #0: 0x00000001bdae9598 libsystem_kernel.dylib`__select + 8
    frame #1: 0x0000000100407210 emacs`-[EmacsApp fd_handler:](self=0x00000001013140d0, _cmd="fd_handler:", unused=0x0000000000000000) at nsterm.m:5873:20
    frame #2: 0x00000001beac363c Foundation`__NSThread__start__ + 808
    frame #3: 0x00000001bdb1c26c libsystem_pthread.dylib`_pthread_start + 148
  thread #5, name = 'com.apple.NSEventThread'
    frame #0: 0x00000001bdade8b0 libsystem_kernel.dylib`mach_msg_trap + 8
    frame #1: 0x00000001bdaded20 libsystem_kernel.dylib`mach_msg + 76
    frame #2: 0x00000001bdbe92b0 CoreFoundation`__CFRunLoopServiceMachPort + 372
    frame #3: 0x00000001bdbe7760 CoreFoundation`__CFRunLoopRun + 1180
    frame #4: 0x00000001bdbe6b24 CoreFoundation`CFRunLoopRunSpecific + 600
    frame #5: 0x00000001c08ba374 AppKit`_NSEventThread + 196
    frame #6: 0x00000001bdb1c26c libsystem_pthread.dylib`_pthread_start + 148
  thread #9
    frame #0: 0x00000001bdb17078 libsystem_pthread.dylib`start_wqthread
  thread #10
    frame #0: 0x00000001bdb17078 libsystem_pthread.dylib`start_wqthread
  thread #11
    frame #0: 0x00000001bdb17078 libsystem_pthread.dylib`start_wqthread
  thread #12
    frame #0: 0x00000001bdb17078 libsystem_pthread.dylib`start_wqthread
  thread #13
    frame #0: 0x00000001bdb17078 libsystem_pthread.dylib`start_wqthread

\f

(lldb) p *(struct Lisp_Marker *) 0x0000000102931240
(struct Lisp_Marker) $1248 = {
  header = (size = 4611686018477740032)
  buffer = 0x0000000131008600
  need_adjustment = false
  insertion_type = false
  next = nullptr
  charpos = 1
  bytepos = 1
}
(lldb) p vectorlike_marked_p (&((struct Lisp_Marker *) 0x0000000102931240)->header)
(bool) $1249 = false
(lldb) xdebug_print ((struct buffer *) 0x0000000131008600)->name_
"magit-log: emacs"
(lldb) p *(struct buffer *) 0x0000000131008600
(struct buffer) $1250 = {
  header = (size = -4611686018225860534)
  name_ = -> 
  filename_ = -> 
  directory_ = -> 
  backed_up_ = -> 
  save_length_ = -> 
  auto_save_file_name_ = -> 
  read_only_ = -> 
  mark_ = -> 
  local_var_alist_ = -> 
  major_mode_ = -> 
  local_minor_modes_ = -> 
  mode_name_ = -> 
  mode_line_format_ = -> 
  header_line_format_ = -> 
  tab_line_format_ = -> 
  keymap_ = -> 
  abbrev_table_ = -> 
  syntax_table_ = -> 
  category_table_ = -> 
  case_fold_search_ = -> 
  tab_width_ = -> 
  fill_column_ = -> 
  left_margin_ = -> 
  auto_fill_function_ = -> 
  downcase_table_ = -> 
  upcase_table_ = -> 
  case_canon_table_ = -> 
  case_eqv_table_ = -> 
  truncate_lines_ = -> 
  word_wrap_ = -> 
  ctl_arrow_ = -> 
  bidi_display_reordering_ = -> 
  bidi_paragraph_direction_ = -> 
  bidi_paragraph_separate_re_ = -> 
  bidi_paragraph_start_re_ = -> 
  selective_display_ = -> 
  selective_display_ellipses_ = -> 
  overwrite_mode_ = -> 
  abbrev_mode_ = -> 
  display_table_ = -> 
  mark_active_ = -> 
  enable_multibyte_characters_ = -> 
  buffer_file_coding_system_ = -> 
  file_format_ = -> 
  auto_save_file_format_ = -> 
  cache_long_scans_ = -> 
  width_table_ = -> 
  pt_marker_ = -> 
  begv_marker_ = -> 
  zv_marker_ = -> 
  point_before_scroll_ = -> 
  file_truename_ = -> 
  invisibility_spec_ = -> 
  last_selected_window_ = -> 
  display_count_ = -> 
  left_margin_cols_ = -> 
  right_margin_cols_ = -> 
  left_fringe_width_ = -> 
  right_fringe_width_ = -> 
  fringes_outside_margins_ = -> 
  scroll_bar_width_ = -> 
  scroll_bar_height_ = -> 
  vertical_scroll_bar_type_ = -> 
  horizontal_scroll_bar_type_ = -> 
  indicate_empty_lines_ = -> 
  indicate_buffer_boundaries_ = -> 
  fringe_indicator_alist_ = -> 
  fringe_cursor_alist_ = -> 
  display_time_ = -> 
  scroll_up_aggressively_ = -> 
  scroll_down_aggressively_ = -> 
  cursor_type_ = -> 
  extra_line_spacing_ = -> 
  cursor_in_non_selected_windows_ = -> 
  own_text = {
    beg = 0x000000010227cc00 "ae0881e52c * emacs-28 origin/emacs-28 ; Auto-commit of loaddefs files.\n9db6817d63 * Remove uneffective test\n7af88de410 * Mark async worker tmp file as utf-8-emacs-unix (bug#48029)\n2209650089 * Adapt Tramp version (don't merge)\n5e47ec9511 * ; * lisp/url/url-http.el (url-http-parse-headers): Fix typo.\nba0871bef1 * ; Fix typos: prefer American spelling\ne3e7f31faa * Adapt Tramp doc\na3dab1e621 * Don't mention cl-cXXXr aliases in cl-lib manual\n9183d1672c * ; * etc/PROBLEMS: Give a URL for bug#50666.\n1f508a8b6f * etc/PROBLEMS: Describe issues with native compilation on Cygwin\n84a5d47125 * ; Fix last change\n0461021893 * ; * lisp/emacs-lisp/comp.el (native-comp-speed): Explain the -1 value.\n876317271b * * lisp/find-dired.el (find-dired): Doc fix; add crossreference.\n115261b323 * ; Improve wording of recently-changed doc strings.\n3442de2edd * Doc fix; don't mention obsolete variable\nc4e251103b * ; * lisp/textmodes/rst.el: Update URLs.\n2ac0ddc4ac * ; * lisp/net/net-utils.el: Minor doc fixes.\nf9d01e5047 * ; * lisp/emacs-"...
    gpt = 15886
    z = 15886
    gpt_byte = 15890
    z_byte = 15890
    gap_size = 9051
    modiff = 2066
    chars_modiff = 2064
    save_modiff = 2066
    overlay_modiff = 523
    compact = 2066
    beg_unchanged = 15885
    end_unchanged = 0
    unchanged_modified = 2066
    overlay_unchanged_modified = 523
    intervals = 0x0000000101ca0bb8
    markers = 0x0000000131b79ab0
    inhibit_shrinking = false
    redisplay = false
  }
  text = 0x0000000131008858
  pt = 1
  pt_byte = 1
  begv = 1
  begv_byte = 1
  zv = 15886
  zv_byte = 15890
  base_buffer = nullptr
  indirections = 0
  window_count = 1
  local_flags = ""
  modtime = (tv_sec = 0, tv_nsec = -2)
  modtime_size = -1
  auto_save_modified = 0
  display_error_modiff = 0
  auto_save_failure_time = 0
  last_window_start = 1
  newline_cache = 0x0000600001748f80
  width_run_cache = nullptr
  bidi_paragraph_cache = 0x00006000017232c0
  prevent_redisplay_optimizations_p = false
  clip_changed = false
  inhibit_buffer_hooks = false
  overlays_before = 0x000000010290d3f8
  overlays_after = 0x0000000101cda548
  overlay_center = 887
  undo_list_ = -> 
}
(lldb)