Unicode-2 crash by set-face-font

Unicode-2 crash by set-face-font

[Katsumi Yamaoka]

Hi,

The latest Emacs 23.0.60 built in Fedore 8 Linux crashes by the
directive like:

(set-face-font
 'default
 "-*-fixed-medium-r-normal-*-16-*-*-*-*-*-iso8859-1")

Backtrace:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1074623360 (LWP 26346)]
0x080e1862 in x_load_font (f=0x83b57a0, 
    fontname=0x880875c "-*-fixed-medium-r-normal-*-16-*-*-*-*-*-iso8859-1", 
    size=0) at xterm.c:10458
10458		  if (dpyinfo->font_table[i].name
(gdb) bt
#0  0x080e1862 in x_load_font (f=0x83b57a0, 
    fontname=0x880875c "-*-fixed-medium-r-normal-*-16-*-*-*-*-*-iso8859-1", 
    size=0) at xterm.c:10458
#1  0x080f1713 in fs_load_font (f=0x83b57a0, 
    fontname=0x880875c "-*-fixed-medium-r-normal-*-16-*-*-*-*-*-iso8859-1", 
    charset=-1) at fontset.c:1097
#2  0x080ca7e9 in set_lface_from_font_name (f=0x83b57a0, lface=143044572, 
    fontname=141801875, force_p=1, may_fail_p=1) at xfaces.c:3543
#3  0x080ccaea in Finternal_set_lisp_face_attribute (face=137729713, 
    attr=137703385, value=141801875, frame=137702737) at xfaces.c:4598
#4  0x080cbd4a in Finternal_set_lisp_face_attribute (face=137729713, 
    attr=137703385, value=141801875, frame=0) at xfaces.c:4268
#5  0x0816bc91 in Ffuncall (nargs=5, args=0xbfa95280) at eval.c:3035
#6  0x08195772 in Fbyte_code (bytestr=136394171, vector=136394188, maxdepth=48)
    at bytecode.c:679
#7  0x0816b6da in funcall_lambda (fun=136394108, nargs=4, 
    arg_vector=0xbfa953b4) at eval.c:3212
#8  0x0816bae1 in Ffuncall (nargs=5, args=0xbfa953b0) at eval.c:3082
#9  0x08195772 in Fbyte_code (bytestr=136395275, vector=136395292, maxdepth=40)
    at bytecode.c:679
#10 0x0816b6da in funcall_lambda (fun=136395212, nargs=2, 
    arg_vector=0xbfa95480) at eval.c:3212
#11 0x0816b8d6 in apply_lambda (fun=136395212, args=147665013, eval_flag=1)
    at eval.c:3136
#12 0x0816afb2 in Feval (form=147664989) at eval.c:2398
#13 0x08183461 in readevalloop (readcharfun=147366188, stream=0x0, 
    sourcename=141590851, evalfun=0x816add0 <Feval>, printflag=0, 
    unibyte=137702689, readfun=137702689, start=137702689, end=137702689)
    at lread.c:1783
#14 0x08183a69 in Feval_buffer (buffer=147366188, printflag=137702689, 
    filename=144110531, unibyte=137702689, do_allow_print=137702737)
    at lread.c:1846
#15 0x0816bcbf in Ffuncall (nargs=6, args=0xbfa95660) at eval.c:3039
#16 0x08195772 in Fbyte_code (bytestr=136278459, vector=136278476, maxdepth=48)
    at bytecode.c:679
#17 0x0816b6da in funcall_lambda (fun=136278388, nargs=4, 
    arg_vector=0xbfa95794) at eval.c:3212
#18 0x0816bae1 in Ffuncall (nargs=5, args=0xbfa95790) at eval.c:3082
#19 0x0816be69 in call4 (fn=138021577, arg1=144110531, arg2=144110531, 
    arg3=137702737, arg4=137702737) at eval.c:2879
#20 0x08184e20 in Fload (file=144110771, noerror=137702737, 
    nomessage=137702737, nosuffix=137702689, must_suffix=137702689)
    at lread.c:1197
#21 0x0816bcbf in Ffuncall (nargs=4, args=0xbfa95960) at eval.c:3039
#22 0x08195772 in Fbyte_code (bytestr=136425979, vector=136425996, maxdepth=56)
    at bytecode.c:679
#23 0x0816b6da in funcall_lambda (fun=136425956, nargs=0, 
    arg_vector=0xbfa95a94) at eval.c:3212
#24 0x0816bae1 in Ffuncall (nargs=1, args=0xbfa95a90) at eval.c:3082
#25 0x08195772 in Fbyte_code (bytestr=136429027, vector=136429052, maxdepth=16)
    at bytecode.c:679
#26 0x0816b195 in Feval (form=136429013) at eval.c:2362
#27 0x0816d6ef in internal_lisp_condition_case (var=137746889, 
    bodyform=136429013, handlers=136429085) at eval.c:1439
#28 0x08194a6f in Fbyte_code (bytestr=136426635, vector=136426652, maxdepth=56)
    at bytecode.c:869
#29 0x0816b6da in funcall_lambda (fun=136426612, nargs=0, 
    arg_vector=0xbfa95dc4) at eval.c:3212
#30 0x0816bae1 in Ffuncall (nargs=1, args=0xbfa95dc0) at eval.c:3082
#31 0x08195772 in Fbyte_code (bytestr=136423331, vector=136423348, maxdepth=48)
    at bytecode.c:679
#32 0x0816b6da in funcall_lambda (fun=136423308, nargs=0, 
    arg_vector=0xbfa95e90) at eval.c:3212
#33 0x0816b8d6 in apply_lambda (fun=136423308, args=137702689, eval_flag=1)
    at eval.c:3136
#34 0x0816afb2 in Feval (form=138087989) at eval.c:2398
#35 0x08109113 in top_level_2 () at keyboard.c:1390
#36 0x0816a672 in internal_condition_case (bfun=0x8109100 <top_level_2>, 
    handlers=137746889, hfun=0x810ca00 <cmd_error>) at eval.c:1494
#37 0x0810be10 in top_level_1 () at keyboard.c:1398
#38 0x0816a72a in internal_catch (tag=137741737, func=0x810bde0 <top_level_1>, 
    arg=137702689) at eval.c:1230
#39 0x0810c849 in command_loop () at keyboard.c:1353
#40 0x0810cbca in recursive_edit_1 () at keyboard.c:969
#41 0x0810cd01 in Frecursive_edit () at keyboard.c:1031
#42 0x0810240c in main (argc=3, argv=0xbfa965c4) at emacs.c:1809

Lisp Backtrace:
"internal-set-lisp-face-attribute" (0xbfa95284)
"set-face-attribute" (0xbfa953b4)
"set-face-font" (0xbfa95480)
"eval-buffer" (0xbfa95664)
"load-with-code-conversion" (0xbfa95794)
"load" (0xbfa95964)
0x821b1e4 PVEC_COMPILED
"byte-code" (0xbfa95b30)
"command-line" (0xbfa95dc4)
"normal-top-level" (0xbfa95e90)
(gdb) q

Regards,

Re: Unicode-2 crash by set-face-font

[Kenichi Handa]

In article <b4m4pd6fohf.fsf@jpl.org>, Katsumi Yamaoka <yamaoka@jpl.org> writes:

> Hi,
> The latest Emacs 23.0.60 built in Fedore 8 Linux crashes by the
> directive like:

> (set-face-font
>  'default
>  "-*-fixed-medium-r-normal-*-16-*-*-*-*-*-iso8859-1")

I confirmed the bug.  I'll fix it soon.

---
Kenichi Handa
handa@ni.aist.go.jp

Re: Unicode-2 crash by set-face-font

[Kenichi Handa]

In article <E1JHDNr-0008GC-RE@etlken.m17n.org>, Kenichi Handa <handa@ni.aist.go.jp> writes:

> In article <b4m4pd6fohf.fsf@jpl.org>, Katsumi Yamaoka <yamaoka@jpl.org> writes:
> > Hi,
> > The latest Emacs 23.0.60 built in Fedore 8 Linux crashes by the
> > directive like:

> > (set-face-font
> >  'default
> >  "-*-fixed-medium-r-normal-*-16-*-*-*-*-*-iso8859-1")

> I confirmed the bug.  I'll fix it soon.

I've just installed a fix.

---
Kenichi Handa
handa@ni.aist.go.jp

Re: Unicode-2 crash by set-face-font

[Katsumi Yamaoka]

>>>>> Kenichi Handa wrote:

> I've just installed a fix.

Works fine.  Thank you very much.

(I have now another problem with Unicode-2.  It will probably be
due to something I've written in my ~/.emacs file, but I'll report
it if it is generic one.)

Regards,

Re: Unicode-2 crash by set-face-font

[Katsumi Yamaoka]

>>>>> Katsumi Yamaoka wrote:

> (I have now another problem with Unicode-2.  It will probably be
> due to something I've written in my ~/.emacs file, but I'll report
> it if it is generic one.)

Oh, it's easy to reproduce.  Could you please try it?

1. Start Emacs Unicode-2 with the -Q option.

2. Eval these forms.

(setq debug-on-error t)
(set-face-font
 'default
 "-*-fixed-medium-r-normal-*-16-*-*-*-*-*-iso8859-1")

3. Type `C-x 5 2'.

Then I got the following error:

Debugger entered--Lisp error: (wrong-type-argument stringp #<save_value ptr=0x08be3170 int=2>)
  internal-set-lisp-face-attribute(default :font #<save_value ptr=0x08be3170 int=2> #<frame emacs@localhost 0x8372ca0>)
  set-face-attribute(default #<frame emacs@localhost 0x8372ca0> :font #<save_value ptr=0x08be3170 int=2>)
  face-set-after-frame-default(#<frame emacs@localhost 0x8372ca0>)
  x-create-frame-with-faces(nil)
  make-frame()
  make-frame-command()
  call-interactively(make-frame-command nil nil)

Regards,

Re: Unicode-2 crash by set-face-font

[Kenichi Handa]

In article <b4mejc9tl6w.fsf@jpl.org>, Katsumi Yamaoka <yamaoka@jpl.org> writes:

> Oh, it's easy to reproduce.  Could you please try it?

> 1. Start Emacs Unicode-2 with the -Q option.

> 2. Eval these forms.

> (setq debug-on-error t)
> (set-face-font
>  'default
>  "-*-fixed-medium-r-normal-*-16-*-*-*-*-*-iso8859-1")

> 3. Type `C-x 5 2'.

> Then I got the following error:

> Debugger entered--Lisp error: (wrong-type-argument stringp #<save_value ptr=0x08be3170 int=2>)

Oops, I've just installed a fix.

---
Kenichi Handa
handa@ni.aist.go.jp

Re: Unicode-2 crash by set-face-font

[Katsumi Yamaoka]

>>>>> Kenichi Handa wrote:

> Oops, I've just installed a fix.

Thanks.  But it crashes right after launching unfortunately.
Bootstrapping from scratch made no difference.

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1074623360 (LWP 22893)]
font_load_for_face (f=0x83b57a0, face=0x8bf8e30) at font.c:2761
2761	      face->font = font->font.font;
(gdb) bt
#0  font_load_for_face (f=0x83b57a0, face=0x8bf8e30) at font.c:2761
#1  0x080ce284 in realize_face (cache=0x8a5b568, attrs=0xbfc76b20, 
    former_face_id=<value optimized out>) at xfaces.c:7749
#2  0x080cea26 in realize_basic_faces (f=0x83b57a0) at xfaces.c:7535
#3  0x080d1244 in recompute_basic_faces (f=0x83b57a0) at xfaces.c:960
#4  0x0807c5cb in init_iterator (it=0xbfc76c14, w=0x8bedfb0, charpos=1, 
    bytepos=1, row=0x0, base_face_id=DEFAULT_FACE_ID) at xdisp.c:2537
#5  0x08080e0b in resize_mini_window (w=0x8bedfb0, exact_p=1) at xdisp.c:8505
#6  0x0805f1f5 in do_switch_frame (frame=137833636, track=1, for_deletion=0)
    at frame.c:873
#7  0x0805fa31 in Fselect_frame (frame=137833636) at frame.c:932
#8  0x0816bc11 in Ffuncall (nargs=2, args=0xbfc77090) at eval.c:3025
#9  0x08195752 in Fbyte_code (bytestr=136858371, vector=136858396, maxdepth=16)
    at bytecode.c:679
#10 0x0816b175 in Feval (form=136858357) at eval.c:2362
#11 0x0816b51f in Fprogn (args=142784091) at eval.c:451
#12 0x08169b1d in unbind_to (count=240, value=137702689) at eval.c:3380
#13 0x081955e4 in Fbyte_code (bytestr=136858259, vector=136858276, maxdepth=32)
    at bytecode.c:701
#14 0x0816b6ba in funcall_lambda (fun=136858220, nargs=1, 
    arg_vector=0xbfc772f4) at eval.c:3212
#15 0x0816bac1 in Ffuncall (nargs=2, args=0xbfc772f0) at eval.c:3082
#16 0x08195752 in Fbyte_code (bytestr=136408403, vector=136408420, maxdepth=32)
    at bytecode.c:679
#17 0x0816b6ba in funcall_lambda (fun=136408356, nargs=1, 
    arg_vector=0xbfc77414) at eval.c:3212
#18 0x0816bac1 in Ffuncall (nargs=2, args=0xbfc77410) at eval.c:3082
#19 0x08195752 in Fbyte_code (bytestr=136659067, vector=136659084, maxdepth=48)
    at bytecode.c:679
#20 0x0816b6ba in funcall_lambda (fun=136659020, nargs=1, 
    arg_vector=0xbfc77544) at eval.c:3212
#21 0x0816bac1 in Ffuncall (nargs=2, args=0xbfc77540) at eval.c:3082
#22 0x08195752 in Fbyte_code (bytestr=136656123, vector=136656140, maxdepth=48)
    at bytecode.c:679
#23 0x0816b6ba in funcall_lambda (fun=136656092, nargs=0, 
    arg_vector=0xbfc77674) at eval.c:3212
#24 0x0816bac1 in Ffuncall (nargs=1, args=0xbfc77670) at eval.c:3082
#25 0x08195752 in Fbyte_code (bytestr=136426635, vector=136426652, maxdepth=56)
    at bytecode.c:679
#26 0x0816b6ba in funcall_lambda (fun=136426612, nargs=0, 
    arg_vector=0xbfc777a4) at eval.c:3212
#27 0x0816bac1 in Ffuncall (nargs=1, args=0xbfc777a0) at eval.c:3082
#28 0x08195752 in Fbyte_code (bytestr=136423331, vector=136423348, maxdepth=48)
    at bytecode.c:679
#29 0x0816b6ba in funcall_lambda (fun=136423308, nargs=0, 
    arg_vector=0xbfc77870) at eval.c:3212
#30 0x0816b8b6 in apply_lambda (fun=136423308, args=137702689, eval_flag=1)
    at eval.c:3136
#31 0x0816af92 in Feval (form=138087989) at eval.c:2398
#32 0x081090f3 in top_level_2 () at keyboard.c:1390
#33 0x0816a652 in internal_condition_case (bfun=0x81090e0 <top_level_2>, 
    handlers=137746889, hfun=0x810c9e0 <cmd_error>) at eval.c:1494
#34 0x0810bdf0 in top_level_1 () at keyboard.c:1398
#35 0x0816a70a in internal_catch (tag=137741737, func=0x810bdc0 <top_level_1>, 
    arg=137702689) at eval.c:1230
#36 0x0810c829 in command_loop () at keyboard.c:1353
#37 0x0810cbaa in recursive_edit_1 () at keyboard.c:969
#38 0x0810cce1 in Frecursive_edit () at keyboard.c:1031
#39 0x081023ec in main (argc=3, argv=0xbfc77fa4) at emacs.c:1809

Lisp Backtrace:
"select-frame" (0xbfc77094)
"byte-code" (0xbfc77130)
"x-setup-function-keys" (0xbfc772f4)
"x-create-frame-with-faces" (0xbfc77414)
"make-frame" (0xbfc77544)
"frame-initialize" (0xbfc77674)
"command-line" (0xbfc777a4)
"normal-top-level" (0xbfc77870)
(gdb) q

Regards,

Re: Unicode-2 crash by set-face-font

[Kenichi Handa]

In article <b4mbq7crc4d.fsf@jpl.org>, Katsumi Yamaoka <yamaoka@jpl.org> writes:

>>>>>> Kenichi Handa wrote:
> > Oops, I've just installed a fix.

> Thanks.  But it crashes right after launching unfortunately.
> Bootstrapping from scratch made no difference.

Ummm, I can't reproduce it.

> Program received signal SIGSEGV, Segmentation fault.
> [Switching to Thread 1074623360 (LWP 22893)]
> font_load_for_face (f=0x83b57a0, face=0x8bf8e30) at font.c:2761
> 2761	      face->font = font->font.font;

Please check the value of font as this.
(gdb) p font
If it is not NULL, 
(gdb) p *font

---
Kenichi Handa
handa@ni.aist.go.jp

Re: Unicode-2 crash by set-face-font

[Katsumi Yamaoka]

>>>>> Kenichi Handa wrote:

>> Program received signal SIGSEGV, Segmentation fault.
>> [Switching to Thread 1074623360 (LWP 22893)]
>> font_load_for_face (f=0x83b57a0, face=0x8bf8e30) at font.c:2761
>> 2761	      face->font = font->font.font;

> Please check the value of font as this.
> (gdb) p font
> If it is not NULL,
> (gdb) p *font

I don't know what they mean ;-), but I got:

(gdb) p font
$1 = (struct font *) 0xffffffff
(gdb) p *font
Cannot access memory at address 0xffffffff

Well, I'm not sure it is concerned with this problem, but I don't
have X resource for Emacs at all.  Instead, I have some codes only
in the ~/.emacs file for customizing the appearance (i.e., fonts,
colors, etc.) of Emacs.  But I renamed .emacs to dot-emacs and
.emacs.d/ to dot-emacs.d/ when I ran gdb.

Regards,

Re: Unicode-2 crash by set-face-font

[Kenichi Handa]

In article <b4md4rskv4g.fsf@jpl.org>, Katsumi Yamaoka <yamaoka@jpl.org> writes:

>>>>>> Kenichi Handa wrote:
>>> Program received signal SIGSEGV, Segmentation fault.
>>> [Switching to Thread 1074623360 (LWP 22893)]
>>> font_load_for_face (f=0x83b57a0, face=0x8bf8e30) at font.c:2761
>>> 2761	      face->font = font->font.font;

> > Please check the value of font as this.
> > (gdb) p font
> > If it is not NULL,
> > (gdb) p *font

> I don't know what they mean ;-), but I got:

> (gdb) p font
> $1 = (struct font *) 0xffffffff
> (gdb) p *font
> Cannot access memory at address 0xffffffff

Ummm, what is the result of this command:
(gdb) p font_object
(gdb) pr

---
Kenichi Handa
handa@ni.aist.go.jp

Re: Unicode-2 crash by set-face-font

[Katsumi Yamaoka]

>>>>> Kenichi Handa wrote:

>> (gdb) p font
>> $1 = (struct font *) 0xffffffff
>> (gdb) p *font
>> Cannot access memory at address 0xffffffff

> Ummm, what is the result of this command:
> (gdb) p font_object
> (gdb) pr

Here they are:

(gdb) p font_object
$1 = 137733288
(gdb) pr
17216661

Re: Unicode-2 crash by set-face-font

[Kenichi Handa]

In article <b4mmyqvqw18.fsf@jpl.org>, Katsumi Yamaoka <yamaoka@jpl.org> writes:

> (gdb) p font_object
> $1 = 137733288
> (gdb) pr
> 17216661

It seems that the value is just a garbage.  Ummm, are there
anyone else who face the same crash?

---
Kenichi Handa
handa@ni.aist.go.jp

Re: Unicode-2 crash by set-face-font

[Katsumi Yamaoka]

>>>>> Kenichi Handa wrote:
> In article <b4mmyqvqw18.fsf@jpl.org>, Katsumi Yamaoka <yamaoka@jpl.org> writes:

>> (gdb) p font_object
>> $1 = 137733288
>> (gdb) pr
>> 17216661

> It seems that the value is just a garbage.  Ummm, are there
> anyone else who face the same crash?

I greatly thank anyone who tries building the latest Unicode-2.
I use Fedora 8 Linux that I update every day.  The configure
options I use are:

--verbose --enable-font-backend --with-freetype --with-xft
--with-gpm --with-rsvg --with-x-toolkit=lucid --without-gtk
--without-xim --with-dbus --without-dbus

(I'm not acquainted with all of them, though.)

gcc --version
 => gcc (GCC) 4.1.2 20070925 (Red Hat 4.1.2-33)

Regards,

Re: Unicode-2 crash by set-face-font

[Miles Bader]

Katsumi Yamaoka <yamaoka@jpl.org> writes:
>--with-dbus --without-dbus

???

-- 
Infancy, n. The period of our lives when, according to Wordsworth, 'Heaven
lies about us.' The world begins lying about us pretty soon afterward.

Re: Unicode-2 crash by set-face-font

[Katsumi Yamaoka]

>>>>> Miles Bader wrote:
> Katsumi Yamaoka <yamaoka@jpl.org> writes:
>>--with-dbus --without-dbus

> ???

Oops!

Re: Unicode-2 crash by set-face-font

[Katsumi Yamaoka]

>>>>> Katsumi Yamaoka wrote:

> I use Fedora 8 Linux that I update every day.  The configure
> options I use are:

> --verbose --enable-font-backend --with-freetype --with-xft
> --with-gpm --with-rsvg --with-x-toolkit=lucid --without-gtk
> --without-xim --with-dbus --without-dbus

> (I'm not acquainted with all of them, though.)

I tried bootstrapping Emacs Unicode-2 several times, varying
configure options, and found the one which might be the cause of
this trouble.  That is `--enable-font-backend'.  Emacs Unicode-2
built without the `--enable-font-backend' option works fine.

I know superficially what it is for, but I can live without it.
So, I will stop using it for some time.

Regards,

Re: Unicode-2 crash by set-face-font

[Kenichi Handa]

In article <b4my7aevd2v.fsf@jpl.org>, Katsumi Yamaoka <yamaoka@jpl.org> writes:

> I greatly thank anyone who tries building the latest Unicode-2.
> I use Fedora 8 Linux that I update every day.  The configure
> options I use are:

I've just installed (hopefully the right) fix.  Please try
again.

---
Kenichi Handa
handa@ni.aist.go.jp

Re: Unicode-2 crash by set-face-font

[Katsumi Yamaoka]

>>>>> Kenichi Handa wrote:

> I've just installed (hopefully the right) fix.  Please try
> again.

It works fine having built with the configure options:

 --verbose --enable-font-backend --with-freetype --with-xft
 ----with-gpm --with-rsvg --with-x-toolkit=lucid --without-gtk
 ----without-xim --with-dbus

Thank you very much.

Re: Unicode-2 crash by set-face-font

[Jason Rumney]

Kenichi Handa wrote:
> In article <b4my7aevd2v.fsf@jpl.org>, Katsumi Yamaoka <yamaoka@jpl.org> writes:
>
>   
>> I greatly thank anyone who tries building the latest Unicode-2.
>> I use Fedora 8 Linux that I update every day.  The configure
>> options I use are:
>>     
>
> I've just installed (hopefully the right) fix.  Please try
> again.
>   
After this change, the default font on Windows is larger than it should 
be. Other fonts (bold, italic, other charsets, variable etc) are the 
correct size.

I can't tell whether the cause is the change to font.c on 25 Jan, or the 
change to xfaces.c on 23 Jan since between these dates Emacs crashes on 
startup (as reported on this thread), but before 23 Jan the font was 
sized correctly.
These two changes were the only changes on emacs-unicode-2 branch in 
that timeframe (I verified that the offending change was in the src 
directory by pinning all other directories to 23 Jan and only updating src).

RE: Unicode-2 crash by set-face-font

[Herbert Euler]

> It seems that the value is just a garbage.  Ummm, are there
> anyone else who face the same crash?

Sorry for those messages.  I've located the change inside `lface'
that causes Emacs to crash on my machine.  It's line 3697 of
xfaces.c, in function set_lface_from_font_and_fontset:

  LFACE_FONT (lface) = make_unibyte_string (font->font.full_name,
                                             strlen (font->font.full_name));

After this assignment, the pointer inside LFACE becomes 0xffffffff.

Regards,
Guanpeng Xu
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

RE: Unicode-2 crash by set-face-font

[Herbert Euler]

I encounter a similar crash.  In my case, Emacs is even not started.
Here is the gdb information:

herbert@euler:/data/emacs/emacs/src$ gdb emacs
GNU gdb 6.7.1-debian
Copyright (C) 2007 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later 
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu"...
Using host libthread_db library "/lib/i686/cmov/libthread_db.so.1".
SIGINT is used by the debugger.
Are you sure you want to change it? (y or n) [answered Y; input not from terminal]
DISPLAY = :0.0
TERM = linux
Breakpoint 1 at 0x8106fb6: file emacs.c, line 432.
Breakpoint 2 at 0x8120a69: file sysdep.c, line 1432.
(gdb) r -Q
Starting program: /data/emacs/emacs/src/emacs -Q
[Thread debugging using libthread_db enabled]
[New Thread 0xb73b36b0 (LWP 30679)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb73b36b0 (LWP 30679)]
font_load_for_face (f=0x8bd0428, face=0x87b5ad8) at font.c:2761
2761          face->font = font->font.font;
(gdb) bt
#0  font_load_for_face (f=0x8bd0428, face=0x87b5ad8) at font.c:2761
#1  0x080cea50 in realize_face (cache=0x85c2520, attrs=0xbf9ceb14, former_face_id=) at xfaces.c:7749
#2  0x080cf2f2 in realize_basic_faces (f=0x8bd0428) at xfaces.c:7535
#3  0x080d17d4 in recompute_basic_faces (f=0x8bd0428) at xfaces.c:960
#4  0x0807f94d in init_iterator (it=0xbf9cebf4, w=0x87b7200, charpos=1, bytepos=1, row=0x0, base_face_id=DEFAULT_FACE_ID)
    at xdisp.c:2537
#5  0x080848dd in resize_mini_window (w=0x87b7200, exact_p=1) at xdisp.c:8505
#6  0x08062b15 in do_switch_frame (frame=137824364, track=1, for_deletion=0) at frame.c:873
#7  0x08063361 in Fselect_frame (frame=137824364) at frame.c:932
#8  0x08171abc in Ffuncall (nargs=2, args=0xbf9cf080) at eval.c:3025
#9  0x0819b22c in Fbyte_code (bytestr=136857459, vector=136857484, maxdepth=) at bytecode.c:679
#10 0x08170fce in Feval (form=136857445) at eval.c:2362
#11 0x0817129f in Fprogn (args=1) at eval.c:451
#12 0x0816f8ad in unbind_to (count=240, value=137693385) at eval.c:3380
#13 0x0819b1dc in Fbyte_code (bytestr=136857347, vector=136857364, maxdepth=) at bytecode.c:701
#14 0x08171446 in funcall_lambda (fun=136857308, nargs=1, arg_vector=0xbf9cf2f4) at eval.c:3212
#15 0x08171851 in Ffuncall (nargs=2, args=0xbf9cf2f0) at eval.c:3082
#16 0x0819b22c in Fbyte_code (bytestr=136407475, vector=136407492, maxdepth=) at bytecode.c:679
#17 0x08171446 in funcall_lambda (fun=136407428, nargs=1, arg_vector=0xbf9cf424) at eval.c:3212
#18 0x08171851 in Ffuncall (nargs=2, args=0xbf9cf420) at eval.c:3082
#19 0x0819b22c in Fbyte_code (bytestr=136658139, vector=136658156, maxdepth=) at bytecode.c:679
#20 0x08171446 in funcall_lambda (fun=136658092, nargs=1, arg_vector=0xbf9cf564) at eval.c:3212
#21 0x08171851 in Ffuncall (nargs=2, args=0xbf9cf560) at eval.c:3082
#22 0x0819b22c in Fbyte_code (bytestr=136655195, vector=136655212, maxdepth=) at bytecode.c:679
#23 0x08171446 in funcall_lambda (fun=136655164, nargs=0, arg_vector=0xbf9cf6a4) at eval.c:3212
#24 0x08171851 in Ffuncall (nargs=1, args=0xbf9cf6a0) at eval.c:3082
#25 0x0819b22c in Fbyte_code (bytestr=136425707, vector=136425724, maxdepth=) at bytecode.c:679
#26 0x08171446 in funcall_lambda (fun=136425684, nargs=0, arg_vector=0xbf9cf7e4) at eval.c:3212
#27 0x08171851 in Ffuncall (nargs=1, args=0xbf9cf7e0) at eval.c:3082
#28 0x0819b22c in Fbyte_code (bytestr=136422403, vector=136422420, maxdepth=) at bytecode.c:679
#29 0x08171446 in funcall_lambda (fun=136422380, nargs=0, arg_vector=0xbf9cf8b0) at eval.c:3212
#30 0x08171640 in apply_lambda (fun=136422380, args=137693385, eval_flag=1) at eval.c:3136
#31 0x08170d04 in Feval (form=138077709) at eval.c:2416
#32 0x0810ebb3 in top_level_2 () at keyboard.c:1390
#33 0x081703a0 in internal_condition_case (bfun=0x810eba0 , handlers=137737617, hfun=0x8112350 )
    at eval.c:1494
#34 0x08111770 in top_level_1 () at keyboard.c:1398
#35 0x0817047a in internal_catch (tag=137732465, func=0x8111740 , arg=137693385) at eval.c:1230
#36 0x08112199 in command_loop () at keyboard.c:1353
#37 0x0811251b in recursive_edit_1 () at keyboard.c:969
#38 0x08112651 in Frecursive_edit () at keyboard.c:1031
#39 0x08107dd2 in main (argc=2, argv=0xbf9cff64) at emacs.c:1809

Lisp Backtrace:
"select-frame" (0xbf9cf084)
"byte-code" (0xbf9cf120)
"x-setup-function-keys" (0xbf9cf2f4)
---Type  to continue, or q  to quit---
"x-create-frame-with-faces" (0xbf9cf424)
"make-frame" (0xbf9cf564)
"frame-initialize" (0xbf9cf6a4)
"command-line" (0xbf9cf7e4)
"normal-top-level" (0xbf9cf8b0)
(gdb) p face->font
$1 = (XFontStruct *) 0x0
(gdb) quit
The program is running.  Exit anyway? (y or n) y
herbert@euler:/data/emacs/emacs/src$


Regards,
Guanpeng Xu
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

RE: Unicode-2 crash by set-face-font

[Herbert Euler]

Oops, what I printed is not helpful.  Let me try to provide more helpful information later...

Regards,
Guanpeng Xu
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

RE: Unicode-2 crash by set-face-font

[Herbert Euler]

> herbert@euler:/data/emacs/emacs/src$ gdb emacs
> GNU gdb 6.7.1-debian
> Copyright (C) 2007 Free Software Foundation, Inc.
> License GPLv3+: GNU GPL version 3 or later 
> This is free software: you are free to change and redistribute it.
> There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
> and "show warranty" for details.
> This GDB was configured as "i486-linux-gnu"...
> Using host libthread_db library "/lib/i686/cmov/libthread_db.so.1".
> SIGINT is used by the debugger.
> Are you sure you want to change it? (y or n) [answered Y; input not from terminal]
> DISPLAY = :0.0
> TERM = linux
> Breakpoint 1 at 0x8106fb6: file emacs.c, line 432.
> Breakpoint 2 at 0x8120a69: file sysdep.c, line 1432.
> (gdb) r -Q
> Starting program: /data/emacs/emacs/src/emacs -Q
> [Thread debugging using libthread_db enabled]
> [New Thread 0xb73b36b0 (LWP 30679)]
> 
> Program received signal SIGSEGV, Segmentation fault.
> [Switching to Thread 0xb73b36b0 (LWP 30679)]
> font_load_for_face (f=0x8bd0428, face=0x87b5ad8) at font.c:2761
> 2761          face->font = font->font.font;
> (gdb) bt
> #0  font_load_for_face (f=0x8bd0428, face=0x87b5ad8) at font.c:2761
> #1  0x080cea50 in realize_face (cache=0x85c2520, attrs=0xbf9ceb14, former_face_id=) at xfaces.c:7749
> #2  0x080cf2f2 in realize_basic_faces (f=0x8bd0428) at xfaces.c:7535
> #3  0x080d17d4 in recompute_basic_faces (f=0x8bd0428) at xfaces.c:960
> #4  0x0807f94d in init_iterator (it=0xbf9cebf4, w=0x87b7200, charpos=1, bytepos=1, row=0x0, base_face_id=DEFAULT_FACE_ID)
>     at xdisp.c:2537
> #5  0x080848dd in resize_mini_window (w=0x87b7200, exact_p=1) at xdisp.c:8505
> #6  0x08062b15 in do_switch_frame (frame=137824364, track=1, for_deletion=0) at frame.c:873
> #7  0x08063361 in Fselect_frame (frame=137824364) at frame.c:932
> #8  0x08171abc in Ffuncall (nargs=2, args=0xbf9cf080) at eval.c:3025
> #9  0x0819b22c in Fbyte_code (bytestr=136857459, vector=136857484, maxdepth=) at bytecode.c:679
> #10 0x08170fce in Feval (form=136857445) at eval.c:2362
> #11 0x0817129f in Fprogn (args=1) at eval.c:451
> #12 0x0816f8ad in unbind_to (count=240, value=137693385) at eval.c:3380
> #13 0x0819b1dc in Fbyte_code (bytestr=136857347, vector=136857364, maxdepth=) at bytecode.c:701
> #14 0x08171446 in funcall_lambda (fun=136857308, nargs=1, arg_vector=0xbf9cf2f4) at eval.c:3212
> #15 0x08171851 in Ffuncall (nargs=2, args=0xbf9cf2f0) at eval.c:3082
> #16 0x0819b22c in Fbyte_code (bytestr=136407475, vector=136407492, maxdepth=) at bytecode.c:679
> #17 0x08171446 in funcall_lambda (fun=136407428, nargs=1, arg_vector=0xbf9cf424) at eval.c:3212
> #18 0x08171851 in Ffuncall (nargs=2, args=0xbf9cf420) at eval.c:3082
> #19 0x0819b22c in Fbyte_code (bytestr=136658139, vector=136658156, maxdepth=) at bytecode.c:679
> #20 0x08171446 in funcall_lambda (fun=136658092, nargs=1, arg_vector=0xbf9cf564) at eval.c:3212
> #21 0x08171851 in Ffuncall (nargs=2, args=0xbf9cf560) at eval.c:3082
> #22 0x0819b22c in Fbyte_code (bytestr=136655195, vector=136655212, maxdepth=) at bytecode.c:679
> #23 0x08171446 in funcall_lambda (fun=136655164, nargs=0, arg_vector=0xbf9cf6a4) at eval.c:3212
> #24 0x08171851 in Ffuncall (nargs=1, args=0xbf9cf6a0) at eval.c:3082
> #25 0x0819b22c in Fbyte_code (bytestr=136425707, vector=136425724, maxdepth=) at bytecode.c:679
> #26 0x08171446 in funcall_lambda (fun=136425684, nargs=0, arg_vector=0xbf9cf7e4) at eval.c:3212
> #27 0x08171851 in Ffuncall (nargs=1, args=0xbf9cf7e0) at eval.c:3082
> #28 0x0819b22c in Fbyte_code (bytestr=136422403, vector=136422420, maxdepth=) at bytecode.c:679
> #29 0x08171446 in funcall_lambda (fun=136422380, nargs=0, arg_vector=0xbf9cf8b0) at eval.c:3212
> #30 0x08171640 in apply_lambda (fun=136422380, args=137693385, eval_flag=1) at eval.c:3136
> #31 0x08170d04 in Feval (form=138077709) at eval.c:2416
> #32 0x0810ebb3 in top_level_2 () at keyboard.c:1390
> #33 0x081703a0 in internal_condition_case (bfun=0x810eba0 , handlers=137737617, hfun=0x8112350 )
>     at eval.c:1494
> #34 0x08111770 in top_level_1 () at keyboard.c:1398
> #35 0x0817047a in internal_catch (tag=137732465, func=0x8111740 , arg=137693385) at eval.c:1230
> #36 0x08112199 in command_loop () at keyboard.c:1353
> #37 0x0811251b in recursive_edit_1 () at keyboard.c:969
> #38 0x08112651 in Frecursive_edit () at keyboard.c:1031
> #39 0x08107dd2 in main (argc=2, argv=0xbf9cff64) at emacs.c:1809
> 
> Lisp Backtrace:
> "select-frame" (0xbf9cf084)
> "byte-code" (0xbf9cf120)
> "x-setup-function-keys" (0xbf9cf2f4)
> ---Type  to continue, or q  to quit---
> "x-create-frame-with-faces" (0xbf9cf424)
> "make-frame" (0xbf9cf564)
> "frame-initialize" (0xbf9cf6a4)
> "command-line" (0xbf9cf7e4)
> "normal-top-level" (0xbf9cf8b0)
> (gdb)


FWIW, here is the first difference I notice until now.  I'm continuing to investigate, but
hope this helpful.

During the starting of Emacs, realize_default_face is called many times.  In my case,
it crashes Emacs at the second time it is called.  I guess the relative part to this crash
in the code is the content of `attr', and so I print it:

(gdb) r -Q
The program being debugged has been started already.
Start it from the beginning? (y or n) y
Starting program: /data/emacs/emacs/src/emacs -Q
[Thread debugging using libthread_db enabled]
[New Thread 0xb74086b0 (LWP 1981)]
[Switching to Thread 0xb74086b0 (LWP 1981)]

Breakpoint 6, realize_default_face (f=0x83f2868) at xfaces.c:7535
7535      face = realize_face (c, attrs, DEFAULT_FACE_ID);
(gdb) p attrs[LFACE_FONT_INDEX]
$19 = 138252817
(gdb) pr
unspecified
(gdb) p ((union Lisp_Misc *) ((long) ((attrs[LFACE_FONT_INDEX]) & ~((((long) 1) << 3) - 1))))
$20 = (union Lisp_Misc *) 0x83d9210
(gdb) p *$
$21 = {
  u_any = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0
  },
  u_free = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    chain = 0x8263383,
    padding = "\341(=\b\341(=\b\311(=\b\000\000\000"
  },
  u_marker = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    need_adjustment = 0,
    insertion_type = 0,
    buffer = 0x8263383,
    next = 0x83d28e1,
    charpos = 138225889,
    bytepos = 138225865
  },
  u_intfwd = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    intvar = 0x8263383
  },
  u_boolfwd = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    boolvar = 0x8263383
  },
  u_objfwd = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    objvar = 0x8263383
  },
  u_buffer_objfwd = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    slottype = 136721283,
---Type  to continue, or q  to quit---
    offset = 138225889
  },
  u_buffer_local_value = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    local_if_set = 0,
    check_frame = 0,
    found_for_buffer = 0,
    found_for_frame = 0,
    realvalue = 136721283,
    buffer = 138225889,
    frame = 138225889,
    cdr = 138225865
  },
  u_overlay = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    next = 0x8263383,
    start = 138225889,
    end = 138225889,
    plist = 138225865
  },
  u_kboard_objfwd = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    offset = 136721283
  },
  u_save_value = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    dogc = 0,
    pointer = 0x8263383,
    integer = 138225889
  }
}
(gdb) c
Continuing.

Breakpoint 6, realize_default_face (f=0x8c4fbf8) at xfaces.c:7535
7535      face = realize_face (c, attrs, DEFAULT_FACE_ID);
(gdb) p attrs[LFACE_FONT_INDEX]
$22 = 141793459
(gdb) pr
"-Adobe-Courier-Medium-R-Normal--12-120-75-75-M-70-ISO8859-1"
(gdb) p ((union Lisp_Misc *) ((long) ((attrs[LFACE_FONT_INDEX]) & ~((((long) 1) << 3) - 1))))
$23 = (union Lisp_Misc *) 0x87398b0
(gdb) p *$
$24 = {
  u_any = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0
  },
  u_free = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    chain = 0xffffffff,
    padding = "\000\000\000\000\270\331\212\b\r\000\000\000\377\377\377\377"
  },
  u_marker = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    need_adjustment = 0,
    insertion_type = 0,
    buffer = 0xffffffff,
    next = 0x0,
    charpos = 143317432,
    bytepos = 13
  },
  u_intfwd = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    intvar = 0xffffffff
  },
  u_boolfwd = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    boolvar = 0xffffffff
  },
  u_objfwd = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    objvar = 0xffffffff
  },
  u_buffer_objfwd = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    slottype = -1,
---Type  to continue, or q  to quit---
    offset = 0
  },
  u_buffer_local_value = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    local_if_set = 0,
    check_frame = 0,
    found_for_buffer = 0,
    found_for_frame = 0,
    realvalue = -1,
    buffer = 0,
    frame = 143317432,
    cdr = 13
  },
  u_overlay = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    next = 0xffffffff,
    start = 0,
    end = 143317432,
    plist = 13
  },
  u_kboard_objfwd = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    offset = -1
  },
  u_save_value = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    dogc = 0,
    pointer = 0xffffffff,
    integer = 0
  }
}
(gdb)

There are many 0xffffffff's before the execution going into `realize_x_face' for the second
time, is that the cause of the crash?

Regards,
Guanpeng Xu
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

RE: Unicode-2 crash by set-face-font

[Herbert Euler]

OK.  Something happened in set_lface_from_font_and_fontset:

(gdb) r -Q
The program being debugged has been started already.
Start it from the beginning? (y or n) y
Starting program: /data/emacs/emacs/src/emacs -Q
[Thread debugging using libthread_db enabled]
[New Thread 0xb73a36b0 (LWP 18041)]
[Switching to Thread 0xb73a36b0 (LWP 18041)]

Breakpoint 6, realize_default_face (f=0x8c57f10) at xfaces.c:7450
7450              set_lface_from_font_and_fontset (f, lface, frame_font,
(gdb) p ((union Lisp_Misc *) ((long) (((((struct Lisp_Vector *) ((long) ((lface) & ~((((long) 1) << 3) - 1))))->contents)[LFACE_FONT_INDEX]) & ~((((long) 1) << 3) - 1))))
$32 = (union Lisp_Misc *) 0x83e0210
(gdb) p *$
$33 = {
  u_any = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0
  },
  u_free = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    chain = 0x8265c83,
    padding = "\341\230=\b\341\230=\b\311\230=\b\000\000\000"
  },
  u_marker = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    need_adjustment = 0,
    insertion_type = 0,
    buffer = 0x8265c83,
    next = 0x83d98e1,
    charpos = 138254561,
    bytepos = 138254537
  },
  u_intfwd = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    intvar = 0x8265c83
  },
  u_boolfwd = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    boolvar = 0x8265c83
  },
  u_objfwd = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    objvar = 0x8265c83
  },
  u_buffer_objfwd = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    slottype = 136731779,
---Type  to continue, or q  to quit---
    offset = 138254561
  },
  u_buffer_local_value = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    local_if_set = 0,
    check_frame = 0,
    found_for_buffer = 0,
    found_for_frame = 0,
    realvalue = 136731779,
    buffer = 138254561,
    frame = 138254561,
    cdr = 138254537
  },
  u_overlay = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    next = 0x8265c83,
    start = 138254561,
    end = 138254561,
    plist = 138254537
  },
  u_kboard_objfwd = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    offset = 136731779
  },
  u_save_value = {
    type = 16,
    gcmarkbit = 0,
    spacer = 0,
    dogc = 0,
    pointer = 0x8265c83,
    integer = 138254561
  }
}
(gdb) n
7466          f->default_face_done_p = 1;
(gdb) p ((union Lisp_Misc *) ((long) (((((struct Lisp_Vector *) ((long) ((lface) & ~((((long) 1) << 3) - 1))))->contents)[LFACE_FONT_INDEX]) & ~((((long) 1) << 3) - 1))))
$34 = (union Lisp_Misc *) 0x8794b70
(gdb) p *$
$35 = {
  u_any = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0
  },
  u_free = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    chain = 0xffffffff,
    padding = "\000\000\000\000t\025f\b\r\000\000\000\377\377\377\377"
  },
  u_marker = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    need_adjustment = 0,
    insertion_type = 0,
    buffer = 0xffffffff,
    next = 0x0,
    charpos = 140907892,
    bytepos = 13
  },
  u_intfwd = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    intvar = 0xffffffff
  },
  u_boolfwd = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    boolvar = 0xffffffff
  },
  u_objfwd = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    objvar = 0xffffffff
  },
  u_buffer_objfwd = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    slottype = -1,
---Type  to continue, or q  to quit---
    offset = 0
  },
  u_buffer_local_value = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    local_if_set = 0,
    check_frame = 0,
    found_for_buffer = 0,
    found_for_frame = 0,
    realvalue = -1,
    buffer = 0,
    frame = 140907892,
    cdr = 13
  },
  u_overlay = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    next = 0xffffffff,
    start = 0,
    end = 140907892,
    plist = 13
  },
  u_kboard_objfwd = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    offset = -1
  },
  u_save_value = {
    type = 59,
    gcmarkbit = 0,
    spacer = 0,
    dogc = 0,
    pointer = 0xffffffff,
    integer = 0
  }
}
(gdb)

Regards,
Guanpeng Xu
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/