bug#12251: 24.2.50; crash in note_mouse_highlight

[Sam Steingold <sds@gnu.org>]

[-- Attachment #1: Type: text/plain, Size: 4821 bytes --]

On Sat, Sep 1, 2012 at 5:36 AM, Eli Zaretskii <eliz@gnu.org> wrote:
>> On Thu, Aug 30, 2012 at 4:03 AM, martin rudalics <rudalics@gmx.at> wrote:
>> >> I am running
>> >> (emacs-bzr-version "109806
>> >> schwab@linux-m68k.org-20120828160850-hft2a31ibkjr9uks")
>> >> with your patch.
>> >
>> > And did you get a crash or the "window ... is not a live window"
>> > with that?
>>
>> no crashes, no errors.
>> yet.
>
> So do we still have a problem or problems with note_mouse_movement
> that I need to look into?

emacs just hang when I sent an email.
it keep raising an error (the top and bottom lines are blue - visual bell).
the emacs has just been rebuilt.
$ bzr revno
109892
I also applied your patch.

^Z
Program received signal SIGTSTP, Stopped (user).
0x00007ffff3eba8fc in pselect () from /lib/x86_64-linux-gnu/libc.so.6
(gdb) where
#0  0x00007ffff3eba8fc in pselect () from /lib/x86_64-linux-gnu/libc.so.6
#1  0x00000000004b998f in XTflash (f=0x1175d50) at
/home/sds/src/emacs/trunk/src/xterm.c:3178
#2  XTring_bell (f=0x1175d50) at /home/sds/src/emacs/trunk/src/xterm.c:3246
#3  0x00000000004e4a4f in cmd_error_internal (data=54077670,
context=0x7fffffffcf50 "")
    at /home/sds/src/emacs/trunk/src/keyboard.c:1138
#4  0x00000000004e4bc3 in cmd_error (data=54077670) at
/home/sds/src/emacs/trunk/src/keyboard.c:1071
#5  0x0000000000556f69 in internal_condition_case (bfun=0x4f01b0
<command_loop_1>, handlers=12039698, hfun=0x4e4ab0 <cmd_error>)
    at /home/sds/src/emacs/trunk/src/eval.c:1309
#6  0x00000000004e2a7e in command_loop_2 (ignore=<optimized out>) at
/home/sds/src/emacs/trunk/src/keyboard.c:1195
#7  0x0000000000556e18 in internal_catch (tag=<error reading variable:
Cannot access memory at address 0xffffffffffffffe0>,
    func=0x4e2a60 <command_loop_2>, arg=11987922) at
/home/sds/src/emacs/trunk/src/eval.c:1076
#8  0x00000000004e4587 in command_loop () at
/home/sds/src/emacs/trunk/src/keyboard.c:1174
#9  recursive_edit_1 () at /home/sds/src/emacs/trunk/src/keyboard.c:795
#10 0x00000000004e48c4 in Frecursive_edit () at
/home/sds/src/emacs/trunk/src/keyboard.c:859
#11 0x000000000041008a in main (argc=1, argv=<optimized out>) at
/home/sds/src/emacs/trunk/src/emacs.c:1647
(gdb) finish
Run till exit from #0  0x00007ffff3eba8fc in pselect () from
/lib/x86_64-linux-gnu/libc.so.6
0x00000000004b998f in XTflash (f=0x1175d50) at
/home/sds/src/emacs/trunk/src/xterm.c:3178
3178                pselect (0, NULL, NULL, NULL, &timeout, NULL);
(gdb)
Run till exit from #0  0x00000000004b998f in XTflash (f=0x1175d50) at
/home/sds/src/emacs/trunk/src/xterm.c:3178
input_available_signal (signo=29) at
/home/sds/src/emacs/trunk/src/keyboard.c:7240
7240    {
(gdb) f 4
#4  0x00000000004e4a4f in cmd_error_internal (data=54077670,
context=0x7fffffffcf50 "")
    at /home/sds/src/emacs/trunk/src/keyboard.c:1138
1138          bitch_at_user ();
(gdb) p data
$1 = 54077670
(gdb) xtype
Lisp_Cons
(gdb) xcons
$2 = (struct Lisp_Cons *) 0x33928e0
{
  car = 0xb7b7c2,
  u = {
    cdr = 0x3393116,
    chain = 0x3393116
  }
}
(gdb) p 0xb7b7c2
$3 = 12040130
(gdb) xtype
Lisp_Symbol
(gdb) xsymbol
$4 = (struct Lisp_Symbol *) 0xb7b7c0
"wrong-type-argument"
(gdb) p
$5 = (struct Lisp_Symbol *) 0xb7b7c0
(gdb) p 0x3393116
$6 = 54079766
(gdb) xtype
Lisp_Cons
(gdb) xcons
$7 = (struct Lisp_Cons *) 0x3393110
{
  car = 0xba3472,
  u = {
    cdr = 0x3393126,
    chain = 0x3393126
  }
}
(gdb) p 0xba3472
$8 = 12203122
(gdb) xtype
Lisp_Symbol
(gdb) xsymbol
$9 = (struct Lisp_Symbol *) 0xba3470
"window-live-p"
(gdb) p 0x3393126
$10 = 54079782
(gdb) xtype
Lisp_Cons
(gdb) xcons
$11 = (struct Lisp_Cons *) 0x3393120
{
  car = 0x3771195,
  u = {
    cdr = 0xb6ebd2,
    chain = 0xb6ebd2
  }
}
(gdb) p 0x3771195
$12 = 58134933
(gdb) xtype
Lisp_Vectorlike
PVEC_WINDOW
(gdb) xvector
$13 = (struct Lisp_Vector *) 0x3771190
0
(gdb) p *(struct Lisp_Vector *) 0x3771190
$14 = {
  header = {
    size = 4611686018427650087,
    next = {
      nbytes = 480,
      buffer = 0x1e0,
      vector = 0x1e0
    }
  },
  contents = {18308437}
}
(gdb) p 18308437
$15 = 18308437
(gdb) xtype
Lisp_Vectorlike
PVEC_FRAME
(gdb) xvect
xvector   xvectype
(gdb) xvector
$16 = (struct Lisp_Vector *) 0x1175d50
0
(gdb) p *(struct Lisp_Vector *) 0x1175d50
$17 = {
  header = {
    size = 4611686018427584534,
    next = {
      nbytes = 560,
      buffer = 0x230,
      vector = 0x230
    }
  },
  contents = {47727121}
}
(gdb) p 47727121
$18 = 47727121
(gdb) xtype
Lisp_String
(gdb) xstring
$19 = (struct Lisp_String *) 0x2d84210
"*unsent wide reply to Dmitri Hrapof* - /home/sds/Mail/drafts/1"
(gdb) p 0xb6ebd2
$20 = 11987922
(gdb) xtype
Lisp_Symbol
(gdb) xsymbol
$21 = (struct Lisp_Symbol *) 0xb6ebd0
"nil"

even though the window name is "unsent", the mail has actually been sent.


-- 
Sam Steingold <http://sds.podval.org> <http://www.childpsy.net/>

[-- Attachment #2: mylog.txt --]
[-- Type: text/plain, Size: 4443 bytes --]

#0  input_available_signal (signo=29) at /home/sds/src/emacs/trunk/src/keyboard.c:7240
        old_errno = <optimized out>
#1  <signal handler called>
No symbol table info available.
#2  0x00000000004b998f in XTflash (f=0x1175d50) at /home/sds/src/emacs/trunk/src/xterm.c:3178
        timeout = {
          tv_sec = 0, 
          tv_nsec = 10000000
        }
        current = <optimized out>
        flash_height = 13
        flash_left = 1
        height = 1861
        width = 1198
        gc = 0x3eaf840
#3  XTring_bell (f=0x1175d50) at /home/sds/src/emacs/trunk/src/xterm.c:3246
No locals.
#4  0x00000000004e4a4f in cmd_error_internal (data=54077670, context=0x7fffffffcf50 "")
    at /home/sds/src/emacs/trunk/src/keyboard.c:1138
        sf = <optimized out>
#5  0x00000000004e4bc3 in cmd_error (data=54077670) at /home/sds/src/emacs/trunk/src/keyboard.c:1071
        old_level = 40
        old_length = 40
        macroerror = "\000\353\266\000\000\000\000\000\000kM\242I9\246\305\022\274\270\000\000\000\000\000\002\000\000\000\000\000\000\000\322\353\266\000\000\000\000\000\270\325\377\377\377\177\000\000\377\377"
#6  0x0000000000556f69 in internal_condition_case (bfun=0x4f01b0 <command_loop_1>, handlers=12039698, hfun=0x4e4ab0 <cmd_error>)
    at /home/sds/src/emacs/trunk/src/eval.c:1309
        val = <optimized out>
        c = {
          tag = 11987922, 
          val = 54077670, 
          next = 0x7fffffffd160, 
          gcpro = 0x0, 
          jmp = {{
              __jmpbuf = {15355712, 9107840291477777466, 11987922, 140737488344504, 4294967295, 140737488344784, 
                -9107841581137400774, 9107840865985883194}, 
              __mask_was_saved = 0, 
              __saved_mask = {
                __val = {140737353918688, 140737353947624, 5225237, 4294967295, 0, 0, 15355712, 8597480, 0, 4294967295, 
                  140737488344784, 0, 140737351944052, 1, 0, 140737284769664}
              }
            }}, 
          backlist = 0x0, 
          handlerlist = 0x0, 
          lisp_eval_depth = 0, 
          pdlcount = 2, 
          poll_suppress_count = 1, 
          interrupt_input_blocked = 0, 
          byte_stack = 0x0
        }
        h = {
          handler = 12039698, 
          var = 11987922, 
          chosen_clause = 11987970, 
          tag = 0x7fffffffcfe0, 
          next = 0x0
        }
#7  0x00000000004e2a7e in command_loop_2 (ignore=<optimized out>) at /home/sds/src/emacs/trunk/src/keyboard.c:1195
        val = 4294967295
#8  0x0000000000556e18 in internal_catch (tag=<error reading variable: Cannot access memory at address 0xffffffffffffffe0>, 
    func=0x4e2a60 <command_loop_2>, arg=11987922) at /home/sds/src/emacs/trunk/src/eval.c:1076
        c = {
          tag = 12035570, 
          val = 11987922, 
          next = 0x0, 
          gcpro = 0x0, 
          jmp = {{
              __jmpbuf = {15355712, 9107840291477777466, 11987922, 140737488344504, 4294967295, 140737488344784, 
                -9107841581084971974, 9107840865881549882}, 
              __mask_was_saved = 0, 
              __saved_mask = {
                __val = {0, 0, 0, 0, 0, 0, 5898163, 0, 18883192, 140737488343712, 140737488343720, 0, 140737488343712, 6273846, 
                  11987922, 140737488343720}
              }
            }}, 
          backlist = 0x0, 
          handlerlist = 0x0, 
          lisp_eval_depth = 0, 
          pdlcount = 2, 
          poll_suppress_count = 1, 
          interrupt_input_blocked = 0, 
          byte_stack = 0x0
        }
#9  0x00000000004e4587 in command_loop () at /home/sds/src/emacs/trunk/src/keyboard.c:1174
No locals.
#10 recursive_edit_1 () at /home/sds/src/emacs/trunk/src/keyboard.c:795
        count = 1
        val = 11987922
#11 0x00000000004e48c4 in Frecursive_edit () at /home/sds/src/emacs/trunk/src/keyboard.c:859
        count = 0
        buffer = 11987922
#12 0x000000000041008a in main (argc=1, argv=<optimized out>) at /home/sds/src/emacs/trunk/src/emacs.c:1647
        dummy = 0
        stack_bottom_variable = 0 '\000'
        do_initial_setlocale = <optimized out>
        skip_args = 0
        rlim = {
          rlim_cur = 8720000, 
          rlim_max = 18446744073709551615
        }
        no_loadup = false
        junk = 0x0
        dname_arg = 0x0
        ch_to_dir = 0x7ffff3ddee40 "\212'"
quit
A debugging session is active.

	Inferior 1 [process 4280] will be killed.

Quit anyway? (y or n) EOF [assumed Y]