From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Kenichi Handa Newsgroups: gmane.emacs.bugs Subject: bug#2435: Bug 2435 Date: Wed, 04 Mar 2009 11:16:53 +0900 Message-ID: References: <87fxhvcmvf.fsf@cyd.mit.edu> <87zlg2a7b9.fsf@cyd.mit.edu> Reply-To: Kenichi Handa , 2435@emacsbugs.donarmstrong.com NNTP-Posting-Host: lo.gmane.org X-Trace: ger.gmane.org 1236133440 3381 80.91.229.12 (4 Mar 2009 02:24:00 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Wed, 4 Mar 2009 02:24:00 +0000 (UTC) Cc: 2435@emacsbugs.donarmstrong.com To: Chong Yidong Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Wed Mar 04 03:25:16 2009 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1LegnI-0003OQ-83 for geb-bug-gnu-emacs@m.gmane.org; Wed, 04 Mar 2009 03:25:12 +0100 Original-Received: from localhost ([127.0.0.1]:40840 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1Leglw-0005sW-SO for geb-bug-gnu-emacs@m.gmane.org; Tue, 03 Mar 2009 21:23:48 -0500 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1Leglr-0005sK-Ff for bug-gnu-emacs@gnu.org; Tue, 03 Mar 2009 21:23:43 -0500 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1Leglp-0005s2-Tt for bug-gnu-emacs@gnu.org; Tue, 03 Mar 2009 21:23:43 -0500 Original-Received: from [199.232.76.173] (port=44632 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1Leglp-0005rz-Of for bug-gnu-emacs@gnu.org; Tue, 03 Mar 2009 21:23:41 -0500 Original-Received: from rzlab.ucr.edu ([138.23.92.77]:50428) by monty-python.gnu.org with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.60) (envelope-from ) id 1Leglp-0001Dh-8U for bug-gnu-emacs@gnu.org; Tue, 03 Mar 2009 21:23:41 -0500 Original-Received: from rzlab.ucr.edu (rzlab.ucr.edu [127.0.0.1]) by rzlab.ucr.edu (8.13.8/8.13.8/Debian-3) with ESMTP id n242Ndc0010120; Tue, 3 Mar 2009 18:23:39 -0800 Original-Received: (from debbugs@localhost) by rzlab.ucr.edu (8.13.8/8.13.8/Submit) id n242K3Zv008986; Tue, 3 Mar 2009 18:20:03 -0800 X-Loop: owner@emacsbugs.donarmstrong.com Resent-From: Kenichi Handa Resent-To: bug-submit-list@donarmstrong.com Resent-CC: Emacs Bugs Resent-Date: Wed, 04 Mar 2009 02:20:03 +0000 Resent-Message-ID: Resent-Sender: owner@emacsbugs.donarmstrong.com X-Emacs-PR-Message: followup 2435 X-Emacs-PR-Package: emacs X-Emacs-PR-Keywords: Original-Received: via spool by 2435-submit@emacsbugs.donarmstrong.com id=B2435.12361329788820 (code B ref 2435); Wed, 04 Mar 2009 02:20:03 +0000 Original-Received: (at 2435) by emacsbugs.donarmstrong.com; 4 Mar 2009 02:16:18 +0000 X-Spam-Bayes: score:0.5 Bayes not run. spammytokens:Tokens not available. hammytokens:Tokens not available. Original-Received: from mx1.aist.go.jp (mx1.aist.go.jp [150.29.246.133]) by rzlab.ucr.edu (8.13.8/8.13.8/Debian-3) with ESMTP id n242GEq3008807 for <2435@emacsbugs.donarmstrong.com>; Tue, 3 Mar 2009 18:16:15 -0800 Original-Received: from rqsmtp2.aist.go.jp (rqsmtp2.aist.go.jp [150.29.254.123]) by mx1.aist.go.jp with ESMTP id n242GC7G029999; Wed, 4 Mar 2009 11:16:12 +0900 (JST) env-from (handa@m17n.org) Original-Received: from smtp2.aist.go.jp by rqsmtp2.aist.go.jp with ESMTP id n242GCUo001224; Wed, 4 Mar 2009 11:16:12 +0900 (JST) env-from (handa@m17n.org) Original-Received: by smtp2.aist.go.jp with ESMTP id n242GBje013451; Wed, 4 Mar 2009 11:16:11 +0900 (JST) env-from (handa@m17n.org) Original-Received: from handa by etlken with local (Exim 4.69) (envelope-from ) id 1LegfF-0006kQ-1v; Wed, 04 Mar 2009 11:16:53 +0900 In-reply-to: <87zlg2a7b9.fsf@cyd.mit.edu> (message from Chong Yidong on Tue, 03 Mar 2009 11:40:26 -0500) X-detected-operating-system: by monty-python.gnu.org: GNU/Linux 2.6 (newer, 3) Resent-Date: Tue, 03 Mar 2009 21:23:43 -0500 X-BeenThere: bug-gnu-emacs@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:25953 Archived-At: In article <87zlg2a7b9.fsf@cyd.mit.edu>, Chong Yidong writes: >>> emacs -Q >>> M-x customize-group RET whitespace RET >>> C-v C-v > > > > I can't reproduce the crash with that. > It doesn't happen all the time---about once every three or four > attempts. Quite strange. I tried more than 10 times without crash. > > 2846 if (many_times_ok) > > 2847 { > > 2848 boolean simple = skip_one_char (laststart) == b; > > 2849 unsigned int startoffset = 0; > > 2850 re_opcode_t ofj = > > 2851 /* Check if the loop can match the empty string. */ > > 2852 (simple || !analyse_first (laststart, b, NULL, 0)) > > 2853 ? on_failure_jump : on_failure_jump_loop; > > > > Here, "simple" is always set to 1, so analyse_first is not > > called. > When I get the crash, simple is set to 0. > (gdb) p b > $4 = (unsigned char *) 0x8b927b7 "" > (gdb) p laststart > $5 = (unsigned char *) 0x8b92786 "\a\201\f" That is different in my case. When the execution reaches the above code (three or four times while displaying that Tibetan char), laststart is always "\004\200". Here the first byte \004 means `charset' OP, and that is reasonable because we are now handling '*' after "[...]". But '\a' (== 7 == stop_memory) is very strange. Please show me these values when simple is set to 0. (gdb) p bufp->buffer $58 = (unsigned char *) 0xa905aa0 "\004\200" (gdb) p laststart $59 = (unsigned char *) 0xa905ab2 "\004\200" (gdb) p bufp->buffer[0]@(b - bufp->buffer) $60 = "\004\200\000\000\002\000@\017\000i\017\000j\017\000j\017\000\004\200\000\000\004\000\220\017\000\271\017\000\272\017\000\272\017\000\273\017\000\273\017\000\274\017\000\274\017" (gdb) p laststart[0]@(b-laststart) $61 = "\004\200\000\000\004\000\220\017\000\271\017\000\272\017\000\272\017\000\273\017\000\273\017\000\274\017\000\274\017" Here, "\220\017\000" => 0xF90 "\271\017\000" => 0xFB9 "\272\017\000" => 0xFBA "\273\017\000" => 0xFBB "\274\017\000" => 0xFBC So, we are now processing the '*' just after the second [...] of tibetan-composable-pattern. --- Kenichi Handa handa@m17n.org