bug#21738: 25.0.50; eww freezes/crashes at times

[Kaushal Modi <kaushal.modi@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 421 bytes --]

Hi all,

I updated to the latest Imagemagick (v 6.9.2-4) and "r -Q" emacs
session still freezes in gdb when I evaluate

(eww "http://www.braveclojure.com/basic-emacs")

This time though, I got a much longer backtrace (attached) but the
main error is still similar (that number following UnregisterTIFFImage
changed):

> emacs: Memory allocation failed `No such file or directory' @ fatal/tiff.c/UnregisterTIFFImage/2379.

[-- Attachment #2: emacs_25_Imagemagick_eww_freeze_gdb_bt.log --]
[-- Type: application/octet-stream, Size: 12981 bytes --]

(gdb) r -Q
Starting program: /home/kmodi/downloads/git/emacs/src/emacs -Q
Missing separate debuginfo for /home/kmodi/usr_local/6/lib64/libgif.so.4
Try: yum --enablerepo='*-debug*' install /usr/lib/debug/.build-id/4d/d406f2679fcf6adf281479e95a0ae8f66c7c4e.debug
[Thread debugging using libthread_db enabled]
[New Thread 0x7fffedb6f700 (LWP 37949)]

(emacs:37940): GLib-GIO-CRITICAL **: g_settings_schema_source_lookup: assertion 'source != NULL' failed
[New Thread 0x7fffe5b13700 (LWP 38143)]
emacs: Memory allocation failed `No such file or directory' @ fatal/tiff.c/UnregisterTIFFImage/2379.
^Z
Program received signal SIGTSTP, Stopped (user).
0x0000003a9840eb9e in ?? () from /usr/lib64/libgomp.so.1
Missing separate debuginfos, use: debuginfo-install GConf2-2.28.0-6.el6.x86_64 ORBit2-2.14.17-5.el6.x86_64 alsa-lib-1.0.22-3.el6.x86_64 atk-1.30.0-1.el6.x86_64 bzip2-libs-1.0.5-7.el6_0.x86_64 dbus-libs-1.2.24-7.el6_3.x86_64 expat-2.0.1-11.el6_2.x86_64 fftw-3.2.1-3.1.el6.x86_64 gdk-pixbuf2-2.24.1-5.el6.x86_64 glibc-2.12-1.149.el6_6.5.x86_64 gmp-4.3.1-7.el6_2.2.x86_64 gtk2-2.24.23-6.el6.x86_64 gtk2-engines-2.18.4-5.el6.x86_64 libICE-1.0.6-1.el6.x86_64 libSM-1.2.1-2.el6.x86_64 libX11-1.6.0-2.2.el6.x86_64 libXau-1.0.6-4.el6.x86_64 libXcomposite-0.4.3-4.el6.x86_64 libXcursor-1.1.14-2.1.el6.x86_64 libXdamage-1.1.3-4.el6.x86_64 libXext-1.3.2-2.1.el6.x86_64 libXfixes-5.0.1-2.1.el6.x86_64 libXft-2.3.1-2.el6.x86_64 libXi-1.7.2-2.2.el6.x86_64 libXinerama-1.1.3-2.1.el6.x86_64 libXpm-3.5.10-2.el6.x86_64 libXrandr-1.4.1-2.1.el6.x86_64 libXrender-0.9.8-2.1.el6.x86_64 libXt-1.1.4-6.1.el6.x86_64 libacl-2.2.49-6.el6.x86_64 libattr-2.4.44-7.el6.x86_64 libcroco-0.6.2-5.el6.x86_64 libgcc-4.4.7-11.el6.x86_64 libgomp-4.4.7-11.el6.x86_64 libgsf-1.14.15-5.el6.x86_64 libjpeg-turbo-1.2.1-3.el6_5.x86_64 librsvg2-2.26.0-14.el6.x86_64 libselinux-2.0.94-5.8.el6.x86_64 libtiff-3.9.4-10.el6_5.x86_64 libuuid-2.17.2-12.18.el6.x86_64 libxcb-1.9.1-2.el6.x86_64 libxml2-2.7.6-14.el6_5.2.x86_64 ncurses-libs-5.7-3.20090208.el6.x86_64 pango-1.28.1-10.el6.x86_64 sssd-client-1.11.6-30.el6.x86_64 xz-libs-4.999.9-0.5.beta.20091007git.el6.x86_64 zlib-1.2.3-29.el6.x86_64
(gdb) bt
#0  0x0000003a9840eb9e in ?? () from /usr/lib64/libgomp.so.1
#1  0x00007ffff607b388 in LockMagickMutex () at ./magick/semaphore-private.h:63
#2  MagickCoreTerminus () at magick/magick.c:1368
#3  0x00007ffff603c559 in DefaultFatalErrorHandler (severity=FatalErrorException,
    reason=<value optimized out>, description=0x0) at magick/exception.c:335
#4  0x00007ffff603cb00 in CatchException (exception=0x194bdd0) at magick/exception.c:211
#5  0x00007ffff62223da in UnregisterTIFFImage () at coders/tiff.c:2379
#6  0x00007ffff60ea975 in UnregisterStaticModules () at magick/static.c:485
#7  0x00007ffff607b3ca in MagickCoreTerminus () at magick/magick.c:1389
#8  0x0000000000692ad5 in imagemagick_load_image (f=0x12ae8b0, img=0x18c3b10,
    contents=0x26847a8 "\211PNG\r\n\032\n", size=134459, filename=0x0) at image.c:8797
#9  0x0000000000692ca8 in imagemagick_load (f=0x12ae8b0, img=0x18c3b10) at image.c:8850
#10 0x0000000000688492 in lookup_image (f=0x12ae8b0, spec=37629795) at image.c:1751
#11 0x0000000000686ce3 in Fimage_metadata (spec=37629795, frame=0) at image.c:929
#12 0x00000000005f8487 in Ffuncall (nargs=2, args=0x7fffffff4f18) at eval.c:2653
#13 0x000000000063c36f in exec_byte_code (bytestr=11206412, vector=11206445, maxdepth=14,
    args_template=0, nargs=0, args=0x0) at bytecode.c:880
#14 0x00000000005f8f8b in funcall_lambda (fun=11206349, nargs=1, arg_vector=0xaaff2d) at eval.c:2876
#15 0x00000000005f86fe in Ffuncall (nargs=2, args=0x7fffffff5438) at eval.c:2699
#16 0x000000000063c36f in exec_byte_code (bytestr=26476228, vector=19890373, maxdepth=38,
    args_template=0, nargs=0, args=0x0) at bytecode.c:880
#17 0x00000000005f8f8b in funcall_lambda (fun=19886629, nargs=3, arg_vector=0x12f80c5) at eval.c:2876
#18 0x00000000005f86fe in Ffuncall (nargs=4, args=0x7fffffff5988) at eval.c:2699
#19 0x000000000063c36f in exec_byte_code (bytestr=25677076, vector=19886261, maxdepth=26,
    args_template=0, nargs=0, args=0x0) at bytecode.c:880
---Type <return> to continue, or q <return> to quit---
#20 0x00000000005f8f8b in funcall_lambda (fun=19127253, nargs=4, arg_vector=0x12f70b5) at eval.c:2876
#21 0x00000000005f86fe in Ffuncall (nargs=5, args=0x7fffffff5ec0) at eval.c:2699
#22 0x00000000005f78eb in Fapply (nargs=2, args=0x7fffffff6050) at eval.c:2278
#23 0x00000000005f835c in Ffuncall (nargs=3, args=0x7fffffff6048) at eval.c:2630
#24 0x000000000063c36f in exec_byte_code (bytestr=26798820, vector=27708837, maxdepth=30,
    args_template=0, nargs=0, args=0x0) at bytecode.c:880
#25 0x00000000005f8f8b in funcall_lambda (fun=27708981, nargs=2, arg_vector=0x1a6cda5) at eval.c:2876
#26 0x00000000005f86fe in Ffuncall (nargs=3, args=0x7fffffff6580) at eval.c:2699
#27 0x00000000005f78eb in Fapply (nargs=2, args=0x7fffffff6700) at eval.c:2278
#28 0x00000000005f835c in Ffuncall (nargs=3, args=0x7fffffff66f8) at eval.c:2630
#29 0x000000000063c36f in exec_byte_code (bytestr=29931604, vector=29590773, maxdepth=34,
    args_template=0, nargs=0, args=0x0) at bytecode.c:880
#30 0x00000000005f8f8b in funcall_lambda (fun=29591021, nargs=0, arg_vector=0x1c384f5) at eval.c:2876
#31 0x00000000005f86fe in Ffuncall (nargs=1, args=0x7fffffff6c48) at eval.c:2699
#32 0x000000000063c36f in exec_byte_code (bytestr=29943956, vector=29426061, maxdepth=38,
    args_template=0, nargs=0, args=0x0) at bytecode.c:880
#33 0x00000000005f8f8b in funcall_lambda (fun=29426181, nargs=3, arg_vector=0x1c1018d) at eval.c:2876
#34 0x00000000005f86fe in Ffuncall (nargs=4, args=0x7fffffff7198) at eval.c:2699
#35 0x000000000063c36f in exec_byte_code (bytestr=29962420, vector=29591189, maxdepth=18,
    args_template=0, nargs=0, args=0x0) at bytecode.c:880
#36 0x00000000005f8f8b in funcall_lambda (fun=29041581, nargs=2, arg_vector=0x1c38695) at eval.c:2876
#37 0x00000000005f86fe in Ffuncall (nargs=3, args=0x7fffffff76c0) at eval.c:2699
#38 0x00000000005f78eb in Fapply (nargs=2, args=0x7fffffff7780) at eval.c:2278
#39 0x00000000005f7e3b in apply1 (fn=16858272, arg=37621267) at eval.c:2494
#40 0x000000000064b80b in read_process_output_call (fun_and_args=37621251) at process.c:5237
---Type <return> to continue, or q <return> to quit---
#41 0x00000000005f52f3 in internal_condition_case_1 (bfun=0x64b7dd <read_process_output_call>,
    arg=37621251, handlers=0, hfun=0x64b80d <read_process_output_error_handler>) at eval.c:1333
#42 0x000000000064bfa0 in read_and_dispose_of_process_output (p=0x1c53ed8,
    chars=0x7fffffff78a0 "0\374\203\260\177\270\065\272\353^`\227\v\250ߊ\334\302dZ\253~\310vZ\217Պ,\"\"\"\307\003\263\200\211\311p\253~\303f'\340\231\265\004\333\351\226A\300|v\203s\260m\fe\274mMu2\237U@\016\f\307f\214Z\230\215\272dT\267\036\aށ\317\377\332Ɂ\375\216#,\206a\360ި\353\205\377s\340k\021\021\021\221\346d\025\230ͺ^\204\332\302l\325E#\330kBXg\340\264V\333ب\232\352\362pf\303\003[\215\255\356\356\027ؚ\\\255\372}\365\062\002\373%W_\032Ψ\265\330N7\v\f\206\005\006p\243g\243\355Qx\026\021\021\221\246f'@\006\353\346\340\061\230/Ԁ\f\346", <incomplete sequence \375\225>..., nbytes=2130, coding=0x1932460)
    at process.c:5445
#43 0x000000000064bbf5 in read_process_output (proc=29703901, channel=22) at process.c:5356
#44 0x000000000064b177 in wait_reading_process_output (time_limit=30, nsecs=0, read_kbd=-1,
    do_display=true, wait_for_cell=0, wait_proc=0x0, just_wait_proc=0) at process.c:5063
#45 0x00000000004240ef in sit_for (timeout=122, reading=true, display_option=1) at dispnew.c:5751
#46 0x000000000055d7e0 in read_char (commandflag=1, map=37621667, prev_event=0,
    used_mouse_menu=0x7fffffff912f, end_time=0x0) at keyboard.c:2700
#47 0x000000000056a83b in read_key_sequence (keybuf=0x7fffffff92f0, bufsize=30, prompt=0,
    dont_downcase_last=false, can_return_switch_frame=true, fix_current_buffer=true,
    prevent_redisplay=false) at keyboard.c:9028
#48 0x000000000055a511 in command_loop_1 () at keyboard.c:1346
#49 0x00000000005f518e in internal_condition_case (bfun=0x55a103 <command_loop_1>, handlers=18912,
    hfun=0x559900 <cmd_error>) at eval.c:1309
#50 0x0000000000559e0b in command_loop_2 (ignore=0) at keyboard.c:1086
#51 0x00000000005f4987 in internal_catch (tag=19632, func=0x559de2 <command_loop_2>, arg=0)
    at eval.c:1073
---Type <return> to continue, or q <return> to quit---
#52 0x0000000000559d45 in command_loop () at keyboard.c:1057
#53 0x00000000005594d5 in recursive_edit_1 () at keyboard.c:671
#54 0x0000000000559662 in Frecursive_edit () at keyboard.c:742
#55 0x00000000005f842f in Ffuncall (nargs=1, args=0x7fffffff9758) at eval.c:2647
#56 0x000000000063c36f in exec_byte_code (bytestr=26798916, vector=29345797, maxdepth=166,
    args_template=514, nargs=2, args=0x7fffffff9cb8) at bytecode.c:880
#57 0x00000000005f8c5a in funcall_lambda (fun=29346429, nargs=2, arg_vector=0x7fffffff9cb8)
    at eval.c:2810
#58 0x00000000005f86fe in Ffuncall (nargs=3, args=0x7fffffff9cb0) at eval.c:2699
#59 0x00000000005f78eb in Fapply (nargs=2, args=0x7fffffff9d70) at eval.c:2278
#60 0x00000000005f7e3b in apply1 (fn=16464, arg=29334707) at eval.c:2494
#61 0x00000000005f31b9 in call_debugger (arg=29334707) at eval.c:308
#62 0x00000000005f5e84 in maybe_call_debugger (conditions=9568955, sig=48816, data=29334659)
    at eval.c:1687
#63 0x00000000005f593e in Fsignal (error_symbol=48816, data=29334659) at eval.c:1506
#64 0x00000000005f5a62 in xsignal (error_symbol=48816, data=29334659) at eval.c:1542
#65 0x00000000005f5abd in xsignal1 (error_symbol=48816, arg=3374224) at eval.c:1557
#66 0x00000000005da862 in Fsymbol_value (symbol=3374224) at data.c:1201
#67 0x00000000005f6a32 in eval_sub (form=3374224) at eval.c:2029
#68 0x00000000005f89c9 in apply_lambda (fun=29013661, args=27145699, count=13) at eval.c:2746
#69 0x00000000005f723d in eval_sub (form=27145683) at eval.c:2168
#70 0x00000000005f67ca in Feval (form=27145683, lexical=0) at eval.c:1953
#71 0x00000000005f8487 in Ffuncall (nargs=3, args=0x7fffffffa318) at eval.c:2653
#72 0x000000000063c36f in exec_byte_code (bytestr=11106636, vector=11106669, maxdepth=22,
    args_template=1030, nargs=1, args=0x7fffffffa850) at bytecode.c:880
---Type <return> to continue, or q <return> to quit---
#73 0x00000000005f8c5a in funcall_lambda (fun=11106589, nargs=1, arg_vector=0x7fffffffa848)
    at eval.c:2810
#74 0x00000000005f86fe in Ffuncall (nargs=2, args=0x7fffffffa840) at eval.c:2699
#75 0x000000000063c36f in exec_byte_code (bytestr=11107372, vector=11107405, maxdepth=18,
    args_template=1030, nargs=1, args=0x7fffffffae78) at bytecode.c:880
#76 0x00000000005f8c5a in funcall_lambda (fun=11107317, nargs=1, arg_vector=0x7fffffffae70)
    at eval.c:2810
#77 0x00000000005f86fe in Ffuncall (nargs=2, args=0x7fffffffae68) at eval.c:2699
#78 0x00000000005f0519 in Ffuncall_interactively (nargs=2, args=0x7fffffffae68) at callint.c:248
#79 0x00000000005f835c in Ffuncall (nargs=3, args=0x7fffffffae60) at eval.c:2630
#80 0x00000000005f29bb in Fcall_interactively (function=3681328, record_flag=0, keys=13407221)
    at callint.c:836
#81 0x00000000005f84c5 in Ffuncall (nargs=4, args=0x7fffffffb1b8) at eval.c:2657
#82 0x000000000063c36f in exec_byte_code (bytestr=10416348, vector=10416381, maxdepth=54,
    args_template=4102, nargs=1, args=0x7fffffffb710) at bytecode.c:880
#83 0x00000000005f8c5a in funcall_lambda (fun=10416301, nargs=1, arg_vector=0x7fffffffb708)
    at eval.c:2810
#84 0x00000000005f86fe in Ffuncall (nargs=2, args=0x7fffffffb700) at eval.c:2699
#85 0x00000000005f7e8d in call1 (fn=14736, arg1=3681328) at eval.c:2509
#86 0x000000000055a8d3 in command_loop_1 () at keyboard.c:1458
#87 0x00000000005f518e in internal_condition_case (bfun=0x55a103 <command_loop_1>, handlers=18912,
    hfun=0x559900 <cmd_error>) at eval.c:1309
#88 0x0000000000559e0b in command_loop_2 (ignore=0) at keyboard.c:1086
#89 0x00000000005f4987 in internal_catch (tag=45552, func=0x559de2 <command_loop_2>, arg=0)
    at eval.c:1073
---Type <return> to continue, or q <return> to quit---
#90 0x0000000000559db4 in command_loop () at keyboard.c:1065
#91 0x00000000005594d5 in recursive_edit_1 () at keyboard.c:671
#92 0x0000000000559662 in Frecursive_edit () at keyboard.c:742
#93 0x0000000000557675 in main (argc=2, argv=0x7fffffffbbe8) at emacs.c:1644

Lisp Backtrace:
"image-metadata" (0xffff4f20)
"image-multi-frame-p" (0xffff5440)
"shr-put-image" (0xffff5990)
"shr-image-fetched" (0xffff5ec8)
"apply" (0xffff6050)
"url-queue-callback-function" (0xffff6588)
"apply" (0xffff6700)
"url-http-activate-callback" (0xffff6c50)
"url-http-content-length-after-change-function" (0xffff71a0)
"url-http-generic-filter" (0xffff76c8)
"recursive-edit" (0xffff9760)
"debug" (0xffff9cb8)
"eww" (0xffffa148)
"eval" (0xffffa320)
"elisp--eval-last-sexp" (0xffffa848)
"eval-last-sexp" (0xffffae70)
"funcall-interactively" (0xffffae68)
"call-interactively" (0xffffb1c0)
"command-execute" (0xffffb708)
(gdb)