bug#21428: 24.5; Crash of emacs on OS X, installed via homebrew cask

[Rainer M Krug <Rainer@krugs.de>]

[-- Attachment #1: Type: text/plain, Size: 26664 bytes --]

Eli Zaretskii <eliz@gnu.org> writes:

>> From: Rainer M Krug <Rainer@krugs.de>
>> Cc: 21428@debbugs.gnu.org,  mituharu+bug-gnu-emacs-mac@math.s.chiba-u.ac.jp
>> Date: Wed, 23 Sep 2015 10:41:39 +0200
>> 
>> OK - here is the backtrace I got.
>> 
>> Hope this helps,
>> 
>> Rainer
>> 
>> 
>> ,----
>> | (gdb) bt full
>> | #0  0x00007fff89f08c82 in __kill ()
>> | No symbol table info available.
>> | #1  0x0000000100179390 in terminate_due_to_signal (sig=6, backtrace_limit=40) at emacs.c:397
>> | No locals.
>> | #2  0x00000001001b0fe3 in emacs_abort () at sysdep.c:2219
>> | No locals.
>> | #3  0x000000010033d2f8 in ns_term_shutdown (sig=6) at nsterm.m:4599
>> | No locals.
>> | #4  0x0000000100179683 in shut_down_emacs (sig=6, stuff=0) at emacs.c:2038
>> | 	format = 0x10039bfa0 "Fatal error %d: "
>> | #5  0x000000010017932b in terminate_due_to_signal (sig=6, backtrace_limit=2147483647) at emacs.c:381
>> | No locals.
>> | #6 0x00000001002256eb in die (msg=0x1003b67ea "face != NULL",
>> | file=0x1003b24d0 "xdisp.c", line=24330) at alloc.c:6951
>> | No locals.
>> | #7 0x0000000100063797 in get_glyph_face_and_encoding
>> | (f=0x1058183a0, glyph=0x11c13e720, char2b=0x7fff5fbe6850) at
>> | xdisp.c:24330
>> | 	face = (struct face *) 0x0
>> | 	code = 0
>
> This abort happens when Emacs tries to invoke the Lisp debugger, in
> order to report some kind of error.
>
> Assuming you still have this session in the debugger, please do:
>
>  (gdb) frame 7
>  (gdb) p f->face_cache->used
>  (gdb) frame 9
>  (gdb) pgrow
>
> If the last command errors out due to "Undefined command", type this:
>
>  (gdb) source /path/to/emacs/src/.gdbinit
>
> and then try the "pgrow" command again.  Also, please show the output
> of this command:
>
>  (gdb) xbacktrace
>


OK - next crash and the session is open. I give you here some output:

,----
| disp.c:24330: Emacs fatal error: assertion failed: face != NULL
| Fatal error 6: Abort trap
| Program received signal SIGABRT, Aborted.
| 0x00007fff89f08c82 in __kill ()
| (gdb) pt full
| No symbol "full" in current context.
| (gdb) tb full
| Function "full" not defined.
| Make breakpoint pending on future shared library load? (y or [n]) n
| (gdb) bt
| #0  0x00007fff89f08c82 in __kill ()
| #1  0x0000000100179390 in terminate_due_to_signal (sig=6, backtrace_limit=40) at emacs.c:397
| #2  0x00000001001b0fe3 in emacs_abort () at sysdep.c:2219
| #3  0x000000010033d2f8 in ns_term_shutdown (sig=6) at nsterm.m:4599
| #4  0x0000000100179683 in shut_down_emacs (sig=6, stuff=0) at emacs.c:2038
| #5  0x000000010017932b in terminate_due_to_signal (sig=6, backtrace_limit=2147483647) at emacs.c:381
| #6  0x00000001002256eb in die (msg=0x1003b67ea "face != NULL", file=0x1003b24d0 "xdisp.c", line=24330) at alloc.c:6951
| #7  0x0000000100063797 in get_glyph_face_and_encoding (f=0x10201bba0, glyph=0x11c159ea0, char2b=0x7fff5fbf73c0) at xdisp.c:24330
| #8  0x00000001000b5ffd in fill_glyph_string (s=0x7fff5fbf73d0, face_id=31, start=14, end=22, overlaps=0) at xdisp.c:24555
| #9  0x000000010006dda9 in draw_glyphs (w=0x10201aa30, x=120, row=0x12790d100, area=TEXT_AREA, start=0, end=22, hl=DRAW_NORMAL_TEXT, overlaps=0) at xdisp.c:25222
| #10 0x000000010006d6d1 in x_write_glyphs (w=0x10201aa30, updated_row=0x12790d100, start=0x11c159c00, updated_area=TEXT_AREA, len=22) at xdisp.c:27256
| #11 0x0000000100012618 in update_text_area (w=0x10201aa30, updated_row=0x12790d100, vpos=37) at dispnew.c:3611
| #12 0x00000001000101d2 in update_window_line (w=0x10201aa30, vpos=37, mouse_face_overwritten_p=0x7fff5fbf7fe2) at dispnew.c:3854
| #13 0x0000000100008122 in update_window (w=0x10201aa30, force_p=true) at dispnew.c:3477
| #14 0x0000000100006f2f in update_window_tree (w=0x10201aa30, force_p=true) at dispnew.c:3219
| #15 0x0000000100006edd in update_window_tree (w=0x104e443a0, force_p=true) at dispnew.c:3217
| #16 0x0000000100006c0b in update_frame (f=0x10201bba0, force_p=true, inhibit_hairy_id_p=false) at dispnew.c:3108
| #17 0x0000000100052829 in redisplay_internal () at xdisp.c:13812
| #18 0x000000010005438c in redisplay_preserve_echo_area (from_where=2) at xdisp.c:14029
| #19 0x000000010000aedc in Fredisplay (force=0) at dispnew.c:5785
| #20 0x0000000100262f89 in Ffuncall (nargs=1, args=0x7fff5fbfaa60) at eval.c:2650
| #21 0x00000001002cd414 in exec_byte_code (bytestr=4299274556, vector=4299274589, maxdepth=30, args_template=3078, nargs=1, args=0x7fff5fbfb438) at bytecode.c:880
| #22 0x000000010026449f in funcall_lambda (fun=4299274509, nargs=1, arg_vector=0x7fff5fbfb430) at eval.c:2810
| #23 0x0000000100263222 in Ffuncall (nargs=2, args=0x7fff5fbfb428) at eval.c:2699
| #24 0x00000001002cd414 in exec_byte_code (bytestr=4300587916, vector=4300587949, maxdepth=18, args_template=0, nargs=0, args=0x0) at bytecode.c:880
| #25 0x0000000100264a49 in funcall_lambda (fun=4300587869, nargs=2, arg_vector=0x7fff5fbfbe00) at eval.c:2876
| #26 0x0000000100263222 in Ffuncall (nargs=3, args=0x7fff5fbfbdf8) at eval.c:2699
| #27 0x00000001002cd414 in exec_byte_code (bytestr=4300789212, vector=4300789245, maxdepth=38, args_template=0, nargs=0, args=0x0) at bytecode.c:880
| #28 0x0000000100264a49 in funcall_lambda (fun=4300789093, nargs=9, arg_vector=0x7fff5fbfc7f0) at eval.c:2876
| #29 0x0000000100263222 in Ffuncall (nargs=10, args=0x7fff5fbfc7e8) at eval.c:2699
| #30 0x00000001002cd414 in exec_byte_code (bytestr=4300790460, vector=4300790493, maxdepth=66, args_template=0, nargs=0, args=0x0) at bytecode.c:880
| #31 0x0000000100264a49 in funcall_lambda (fun=4300790285, nargs=10, arg_vector=0x7fff5fbfd220) at eval.c:2876
| #32 0x0000000100263222 in Ffuncall (nargs=11, args=0x7fff5fbfd218) at eval.c:2699
| #33 0x00000001002cd414 in exec_byte_code (bytestr=4300765260, vector=4300765293, maxdepth=46, args_template=0, nargs=0, args=0x0) at bytecode.c:880
| #34 0x0000000100264a49 in funcall_lambda (fun=4300765093, nargs=6, arg_vector=0x7fff5fbfdd90) at eval.c:2876
| #35 0x0000000100263222 in Ffuncall (nargs=7, args=0x7fff5fbfdd88) at eval.c:2699
| #36 0x0000000100255c8a in Ffuncall_interactively (nargs=7, args=0x7fff5fbfdd88) at callint.c:250
| #37 0x0000000100262e2d in Ffuncall (nargs=8, args=0x7fff5fbfdd80) at eval.c:2630
| #38 0x0000000100262a44 in Fapply (nargs=3, args=0x7fff5fbfe4f0) at eval.c:2278
| #39 0x0000000100256269 in Fcall_interactively (function=134874032, record_flag=0, keys=4336968605) at callint.c:387
| #40 0x0000000100262ff4 in Ffuncall (nargs=4, args=0x7fff5fbfe698) at eval.c:2657
| #41 0x00000001002cd414 in exec_byte_code (bytestr=4300037988, vector=4300038021, maxdepth=54, args_template=4102, nargs=1, args=0x7fff5fbff098) at bytecode.c:880
| #42 0x000000010026449f in funcall_lambda (fun=4300037941, nargs=1, arg_vector=0x7fff5fbff090) at eval.c:2810
| #43 0x0000000100263222 in Ffuncall (nargs=2, args=0x7fff5fbff088) at eval.c:2699
| #44 0x0000000100263d54 in call1 (fn=13632, arg1=134874032) at eval.c:2509
| #45 0x000000010017e8df in command_loop_1 () at keyboard.c:1460
| #46 0x0000000100260706 in internal_condition_case (bfun=0x10017dd30 <command_loop_1>, handlers=17616, hfun=0x1001995a0 <cmd_error>) at eval.c:1309
| #47 0x000000010019949c in command_loop_2 (ignore=0) at keyboard.c:1088
| #48 0x000000010025f7ce in internal_catch (tag=42768, func=0x100199470 <command_loop_2>, arg=0) at eval.c:1073
| #49 0x000000010017d070 in command_loop () at keyboard.c:1067
| #50 0x000000010017ceb2 in recursive_edit_1 () at keyboard.c:673
| #51 0x000000010017d2a3 in Frecursive_edit () at keyboard.c:744
| #52 0x000000010017ae4a in main (argc=1, argv=0x7fff5fbff8f8) at emacs.c:1643
| (gdb) bt full
| #0  0x00007fff89f08c82 in __kill ()
| No symbol table info available.
| #1  0x0000000100179390 in terminate_due_to_signal (sig=6, backtrace_limit=40) at emacs.c:397
| No locals.
| #2  0x00000001001b0fe3 in emacs_abort () at sysdep.c:2219
| No locals.
| #3  0x000000010033d2f8 in ns_term_shutdown (sig=6) at nsterm.m:4599
| No locals.
| #4  0x0000000100179683 in shut_down_emacs (sig=6, stuff=0) at emacs.c:2038
| 	format = 0x10039bfa0 "Fatal error %d: "
| #5  0x000000010017932b in terminate_due_to_signal (sig=6, backtrace_limit=2147483647) at emacs.c:381
| No locals.
| #6  0x00000001002256eb in die (msg=0x1003b67ea "face != NULL", file=0x1003b24d0 "xdisp.c", line=24330) at alloc.c:6951
| No locals.
| #7  0x0000000100063797 in get_glyph_face_and_encoding (f=0x10201bba0, glyph=0x11c159ea0, char2b=0x7fff5fbf73c0) at xdisp.c:24330
| 	face = (struct face *) 0x0
| 	code = 0
| #8  0x00000001000b5ffd in fill_glyph_string (s=0x7fff5fbf73d0, face_id=31, start=14, end=22, overlaps=0) at xdisp.c:24555
| 	glyph = (struct glyph *) 0x11c159ea0
| 	last = (struct glyph *) 0x11c15a020
| 	voffset = 0
| 	glyph_not_available_p = false
| #9  0x000000010006dda9 in draw_glyphs (w=0x10201aa30, x=120, row=0x12790d100, area=TEXT_AREA, start=0, end=22, hl=DRAW_NORMAL_TEXT, overlaps=0) at xdisp.c:25222
| 	face_id = 31
| 	char2b = (XChar2b *) 0x7fff5fbf73c0
| 	first_glyph = (struct glyph *) 0x11c159ea0
| 	head = (struct glyph_string *) 0x7fff5fbf78e0
| 	tail = (struct glyph_string *) 0x7fff5fbf73d0
| 	s = (struct glyph_string *) 0x7fff5fbf73d0
| 	clip_head = (struct glyph_string *) 0x0
| 	clip_tail = (struct glyph_string *) 0x0
| 	i = 14
| 	j = 1521915
| 	x_reached = 1
| 	last_x = 1258
| 	area_left = 8
| 	f = (struct frame *) 0x10201bba0
| 	sa_avail = 16252
| 	sa_count = 76
| 	sa_must_free = false
| #10 0x000000010006d6d1 in x_write_glyphs (w=0x10201aa30, updated_row=0x12790d100, start=0x11c159c00, updated_area=TEXT_AREA, len=22) at xdisp.c:27256
| 	x = 16778466
| 	hpos = 0
| 	chpos = 79
| #11 0x0000000100012618 in update_text_area (w=0x10201aa30, updated_row=0x12790d100, vpos=37) at dispnew.c:3611
| 	current_row = (struct glyph_row *) 0x12797fd00
| 	desired_row = (struct glyph_row *) 0x12790d100
| 	rif = (struct redisplay_interface *) 0x1007d8e98
| 	changed_p = false
| #12 0x00000001000101d2 in update_window_line (w=0x10201aa30, vpos=37, mouse_face_overwritten_p=0x7fff5fbf7fe2) at dispnew.c:3854
| 	current_row = (struct glyph_row *) 0x12797fd00
| 	desired_row = (struct glyph_row *) 0x12790d100
| 	rif = (struct redisplay_interface *) 0x1007d8e98
| 	changed_p = false
| #13 0x0000000100008122 in update_window (w=0x10201aa30, force_p=true) at dispnew.c:3477
| 	vpos = 37
| 	i = 36583
| 	end = (struct glyph_row *) 0x127913a00
| 	mode_line_row = (struct glyph_row *) 0x127913a00
| 	header_line_row = (struct glyph_row *) 0x12790ac00
| 	changed_p = true
| 	mouse_face_overwritten_p = true
| 	row = (struct glyph_row *) 0x12790d100
| 	yb = 1402
| 	n_updated = 0
| 	desired_matrix = (struct glyph_matrix *) 0x10115f880
| 	paused_p = false
| 	preempt_count = 17
| 	rif = (struct redisplay_interface *) 0x1007d8e98
| #14 0x0000000100006f2f in update_window_tree (w=0x10201aa30, force_p=true) at dispnew.c:3219
| 	paused_p = false
| #15 0x0000000100006edd in update_window_tree (w=0x104e443a0, force_p=true) at dispnew.c:3217
| 	paused_p = false
| #16 0x0000000100006c0b in update_frame (f=0x10201bba0, force_p=true, inhibit_hairy_id_p=false) at dispnew.c:3108
| 	paused_p = false
| 	root_window = (struct window *) 0x104e443a0
| #17 0x0000000100052829 in redisplay_internal () at xdisp.c:13812
| 	gcscrollbars = false
| 	f = (struct frame *) 0x10201bba0
| 	w = (struct window *) 0x10201aa30
| 	sw = (struct window *) 0x10201aa30
| 	fr = (struct frame *) 0x10201bba0
| 	pending = false
| 	must_finish = true
| 	match_p = true
| 	tlbufpos = {
|   charpos = 36424,
|   bytepos = 36477
| }
| 	tlendpos = {
|   charpos = 244498,
|   bytepos = 244503
| }
| 	number_of_visible_frames = 1
| 	count = 73
| 	sf = (struct frame *) 0x10201bba0
| 	polling_stopped_here = true
| 	tail = 4429384371
| 	frame = 4328635301
| 	consider_all_windows_p = true
| 	update_miniwindow_p = true
| #18 0x000000010005438c in redisplay_preserve_echo_area (from_where=2) at xdisp.c:14029
| No locals.
| #19 0x000000010000aedc in Fredisplay (force=0) at dispnew.c:5785
| 	count = 73
| #20 0x0000000100262f89 in Ffuncall (nargs=1, args=0x7fff5fbfaa60) at eval.c:2650
| 	internal_argbuf = 0x7fff5fbfa9e0
| 	fun = 4299121973
| 	original_fun = 92372976
| 	funcar = 4297305898
| 	numargs = 0
| 	lisp_numargs = 3710851743746
| 	val = 72057594037927936
| 	internal_args = (Lisp_Object *) 0x7fff5fbfa9e0
| 	count = 72
| #21 0x00000001002cd414 in exec_byte_code (bytestr=4299274556, vector=4299274589, maxdepth=30, args_template=3078, nargs=1, args=0x7fff5fbfb438) at bytecode.c:880
| 	targets = 0x1003ef560
| 	count = 72
| 	op = 0
| 	vectorp = (Lisp_Object *) 0x10041b960
| 	stack = {
|   pc = 0x1007caab3 "�\001�C",
|   byte_string = 4299274556,
|   byte_string_start = 0x1007caa78 "\001��\022",
|   next = 0x7fff5fbfbb40
| }
| 	top = (Lisp_Object *) 0x7fff5fbfaa60
| 	result = 140734799786464
| 	type = CATCHER
| #22 0x000000010026449f in funcall_lambda (fun=4299274509, nargs=1, arg_vector=0x7fff5fbfb430) at eval.c:2810
| 	val = 72057598341210024
| 	syms_left = 3078
| 	next = 51541123288
| 	lexenv = 4299274504
| 	count = 72
| 	i = 140734799786672
| 	optional = false
| 	rest = false
| #23 0x0000000100263222 in Ffuncall (nargs=2, args=0x7fff5fbfb428) at eval.c:2699
| 	fun = 4299274509
| 	original_fun = 134322272
| 	funcar = 4297289761
| 	numargs = 1
| 	lisp_numargs = 0
| 	val = 4303648616
| 	internal_args = (Lisp_Object *) 0x1001720d8
| 	count = 71
| #24 0x00000001002cd414 in exec_byte_code (bytestr=4300587916, vector=4300587949, maxdepth=18, args_template=0, nargs=0, args=0x0) at bytecode.c:880
| 	targets = 0x1003ef560
| 	count = 71
| 	op = 1
| 	vectorp = (Lisp_Object *) 0x10055c3b0
| 	stack = {
|   pc = 0x100743846 "��",
|   byte_string = 4300587916,
|   byte_string_start = 0x10074383e "\b?��",
|   next = 0x7fff5fbfc530
| }
| 	top = (Lisp_Object *) 0x7fff5fbfb428
| 	result = 5
| 	type = CONDITION_CASE
| #25 0x0000000100264a49 in funcall_lambda (fun=4300587869, nargs=2, arg_vector=0x7fff5fbfbe00) at eval.c:2876
| 	val = 72057598341210024
| 	syms_left = 0
| 	next = 92479312
| 	lexenv = 0
| 	count = 69
| 	i = 2
| 	optional = true
| 	rest = false
| #26 0x0000000100263222 in Ffuncall (nargs=3, args=0x7fff5fbfbdf8) at eval.c:2699
| 	fun = 4300587869
| 	original_fun = 93576800
| 	funcar = 4297289761
| 	numargs = 2
| 	lisp_numargs = 4297434026
| 	val = 140734799789536
| 	internal_args = (Lisp_Object *) 0x7fff5fbfbe00
| 	count = 68
| #27 0x00000001002cd414 in exec_byte_code (bytestr=4300789212, vector=4300789245, maxdepth=38, args_template=0, nargs=0, args=0x0) at bytecode.c:880
| 	targets = 0x1003ef560
| 	count = 59
| 	op = 2
| 	vectorp = (Lisp_Object *) 0x10058d600
| 	stack = {
|   pc = 0x10072d7e2 ".\t�",
|   byte_string = 4300789212,
|   byte_string_start = 0x10072d793 "\b�#",
|   next = 0x7fff5fbfcf60
| }
| 	top = (Lisp_Object *) 0x7fff5fbfbdf8
| 	result = 140734799791520
| 	type = CONDITION_CASE
| #28 0x0000000100264a49 in funcall_lambda (fun=4300789093, nargs=9, arg_vector=0x7fff5fbfc7f0) at eval.c:2876
| 	val = 72057598341210024
| 	syms_left = 0
| 	next = 93578848
| 	lexenv = 0
| 	count = 50
| 	i = 9
| 	optional = false
| 	rest = false
| #29 0x0000000100263222 in Ffuncall (nargs=10, args=0x7fff5fbfc7e8) at eval.c:2699
| 	fun = 4300789093
| 	original_fun = 93582496
| 	funcar = 4297289761
| 	numargs = 9
| 	lisp_numargs = 0
| 	val = 4303792896
| 	internal_args = (Lisp_Object *) 0x7fff5fbfc780
| 	count = 49
| #30 0x00000001002cd414 in exec_byte_code (bytestr=4300790460, vector=4300790493, maxdepth=66, args_template=0, nargs=0, args=0x0) at bytecode.c:880
| 	targets = 0x1003ef560
| 	count = 25
| 	op = 9
| 	vectorp = (Lisp_Object *) 0x10058dae0
| 	stack = {
|   pc = 0x10072d2bf "��\016f��\002� \036g��\016E!��\016F\016C\016\n#*��\002\016F\036h\036i�\016*�\016@!�\016h!#�*� \026c�\016E!��\016c!\026c�\b\016c\"�\026b�=��\003\016j\036kr��!q�p� �\016k\026jˉ\026l\026m̉\026n�\036o\036p� ���!�+�\036q\036r��\016\\�n\003\016\\9�j\003\016\\�N�o\003�o\003�\016A�x\003�y\003�\016T��\003�\003�\016@�\016F��\016s!�\t!�r\016rq�� �)�\016q!�+��"...,
|   byte_string = 4300790460,
|   byte_string_start = 0x10072cfe5 "\b�\006",
|   next = 0x7fff5fbfd960
| }
| 	top = (Lisp_Object *) 0x7fff5fbfc7e8
| 	result = 140735256396544
| 	type = CONDITION_CASE
| #31 0x0000000100264a49 in funcall_lambda (fun=4300790285, nargs=10, arg_vector=0x7fff5fbfd220) at eval.c:2876
| 	val = 72057598341210024
| 	syms_left = 0
| 	next = 93578848
| 	lexenv = 0
| 	count = 15
| 	i = 10
| 	optional = true
| 	rest = false
| #32 0x0000000100263222 in Ffuncall (nargs=11, args=0x7fff5fbfd218) at eval.c:2699
| 	fun = 4300790285
| 	original_fun = 93579520
| 	funcar = 9218868437227405312
| 	numargs = 10
| 	lisp_numargs = 0
| 	val = 38
| 	internal_args = (Lisp_Object *) 0xa200
| 	count = 14
| #33 0x00000001002cd414 in exec_byte_code (bytestr=4300765260, vector=4300765293, maxdepth=46, args_template=0, nargs=0, args=0x0) at bytecode.c:880
| 	targets = 0x1003ef560
| 	count = 14
| 	op = 10
| 	vectorp = (Lisp_Object *) 0x100587870
| 	stack = {
|   pc = 0x10072ffff "�",
|   byte_string = 4300765260,
|   byte_string_start = 0x10072fff2 "�\b\t��\nȉ\v\f\r&\n�",
|   next = 0x7fff5fbfedc0
| }
| 	top = (Lisp_Object *) 0x7fff5fbfd218
| 	result = 140734799796592
| 	type = CONDITION_CASE
| #34 0x0000000100264a49 in funcall_lambda (fun=4300765093, nargs=6, arg_vector=0x7fff5fbfdd90) at eval.c:2876
| 	val = 72057598341210024
| 	syms_left = 0
| 	next = 93578848
| 	lexenv = 0
| 	count = 8
| 	i = 6
| 	optional = true
| 	rest = false
| #35 0x0000000100263222 in Ffuncall (nargs=7, args=0x7fff5fbfdd88) at eval.c:2699
| 	fun = 4300765093
| 	original_fun = 134874032
| 	funcar = 4297226032
| 	numargs = 6
| 	lisp_numargs = 4759799891
| 	val = 4759799907
| 	internal_args = (Lisp_Object *) 0x11bb4c863
| 	count = 7
| #36 0x0000000100255c8a in Ffuncall_interactively (nargs=7, args=0x7fff5fbfdd88) at callint.c:250
| 	speccount = 6
| #37 0x0000000100262e2d in Ffuncall (nargs=8, args=0x7fff5fbfdd80) at eval.c:2630
| 	fun = 4303177037
| 	original_fun = 22176
| 	funcar = 4296483032
| 	numargs = 7
| 	lisp_numargs = 4303282088
| 	val = 0
| 	internal_args = (Lisp_Object *) 0x10026cf9e
| 	count = 5
| #38 0x0000000100262a44 in Fapply (nargs=3, args=0x7fff5fbfe4f0) at eval.c:2278
| 	i = 8
| 	numargs = 7
| 	funcall_nargs = 8
| 	funcall_args = (Lisp_Object *) 0x7fff5fbfdd80
| 	spread_arg = 0
| 	fun = 4303177037
| 	retval = 4378445587
| 	sa_avail = 16320
| 	sa_count = 5
| 	sa_must_free = false
| #39 0x0000000100256269 in Fcall_interactively (function=134874032, record_flag=0, keys=4336968605) at callint.c:387
| 	input = 4300765371
| 	funval = 4300765093
| 	events = 12287
| 	result = 4303326104
| 	args = (Lisp_Object *) 0x1000001001738fb
| 	visargs = (Lisp_Object *) 0x1007d451d
| 	specs = 4759800035
| 	filter_specs = 4300765371
| 	teml = 4296489211
| 	up_event = 0
| 	enable = 0
| 	sa_avail = 16384
| 	sa_count = 5
| 	sa_must_free = false
| 	speccount = 5
| 	next_event = 21474877952
| 	prefix_arg = 0
| 	string = 0x0
| 	tem = 0x10201bba0 "\021�\002\003"
| 	varies = (signed char *) 0x10134aae0 "\b\022 \001\001"
| 	i = 4297289069
| 	nargs = 140734799799648
| 	mark = 4303811800
| 	arg_from_tty = false
| 	key_count = 1
| 	record_then_fail = false
| 	save_this_command = 134874032
| 	save_last_command = 127541648
| 	save_this_original_command = 134874032
| 	save_real_this_command = 134874032
| #40 0x0000000100262ff4 in Ffuncall (nargs=4, args=0x7fff5fbfe698) at eval.c:2657
| 	internal_argbuf = 0x7fff5fbfe600
| 	fun = 4303176989
| 	original_fun = 92360496
| 	funcar = 4297532348
| 	numargs = 3
| 	lisp_numargs = 0
| 	val = 0
| 	internal_args = (Lisp_Object *) 0x7fff5fbfe6a0
| 	count = 4
| #41 0x00000001002cd414 in exec_byte_code (bytestr=4300037988, vector=4300038021, maxdepth=54, args_template=4102, nargs=1, args=0x7fff5fbff098) at bytecode.c:880
| 	targets = 0x1003ef560
| 	count = 4
| 	op = 3
| 	vectorp = (Lisp_Object *) 0x1004d5f88
| 	stack = {
|   pc = 0x100780513 "\006\0069��",
|   byte_string = 4300037988,
|   byte_string_start = 0x100780498 "�\020�?�\023",
|   next = 0x0
| }
| 	top = (Lisp_Object *) 0x7fff5fbfe698
| 	result = 128626
| 	type = CATCHER
| #42 0x000000010026449f in funcall_lambda (fun=4300037941, nargs=1, arg_vector=0x7fff5fbff090) at eval.c:2810
| 	val = 72057598341210024
| 	syms_left = 4102
| 	next = 51541123288
| 	lexenv = 4300037936
| 	count = 4
| 	i = 140734799802112
| 	optional = false
| 	rest = false
| #43 0x0000000100263222 in Ffuncall (nargs=2, args=0x7fff5fbff088) at eval.c:2699
| 	fun = 4300037941
| 	original_fun = 13632
| 	funcar = 1443100099
| 	numargs = 1
| 	lisp_numargs = 0
| 	val = 0
| 	internal_args = (Lisp_Object *) 0x10025aa5f
| 	count = 3
| #44 0x0000000100263d54 in call1 (fn=13632, arg1=134874032) at eval.c:2509
| No locals.
| #45 0x000000010017e8df in command_loop_1 () at keyboard.c:1460
| 	scount = 2
| 	cmd = 134874032
| 	keybuf = 0x7fff5fbff2f0
| 	i = 1
| 	prev_modiff = 168228
| 	prev_buffer = (struct buffer *) 0x1011f7150
| 	already_adjusted = false
| #46 0x0000000100260706 in internal_condition_case (bfun=0x10017dd30 <command_loop_1>, handlers=17616, hfun=0x1001995a0 <cmd_error>) at eval.c:1309
| 	val = 4303299704
| 	c = (struct handler *) 0x101706060
| #47 0x000000010019949c in command_loop_2 (ignore=0) at keyboard.c:1088
| 	val = 2
| #48 0x000000010025f7ce in internal_catch (tag=42768, func=0x100199470 <command_loop_2>, arg=0) at eval.c:1073
| 	val = 0
| 	c = (struct handler *) 0x101705f70
| #49 0x000000010017d070 in command_loop () at keyboard.c:1067
| No locals.
| #50 0x000000010017ceb2 in recursive_edit_1 () at keyboard.c:673
| 	count = 1
| 	val = 0
| #51 0x000000010017d2a3 in Frecursive_edit () at keyboard.c:744
| 	count = 0
| 	buffer = 0
| #52 0x000000010017ae4a in main (argc=1, argv=0x7fff5fbff8f8) at emacs.c:1643
| 	dummy = 140734799806464
| 	stack_bottom_variable = 0 '\0'
| 	do_initial_setlocale = true
| 	dumping = false
| 	skip_args = 0
| 	rlim = {
|   rlim_cur = 8720000,
|   rlim_max = 67104768
| }
| 	no_loadup = false
| 	junk = 0x0
| 	dname_arg = 0x0
| 	dname_arg2 = 0x7fff5fbff870 "\001"
| 	ch_to_dir = 0x0
| 	original_pwd = 0x0
| (gdb) frame 7
| #7  0x0000000100063797 in get_glyph_face_and_encoding (f=0x10201bba0, glyph=0x11c159ea0, char2b=0x7fff5fbf73c0) at xdisp.c:24330
| 24330	  eassert (face != NULL);
| Current language:  auto; currently minimal
| (gdb) p f->face_cache->used
| $1 = 31
| (gdb) frame 9
| #9  0x000000010006dda9 in draw_glyphs (w=0x10201aa30, x=120, row=0x12790d100, area=TEXT_AREA, start=0, end=22, hl=DRAW_NORMAL_TEXT, overlaps=0) at xdisp.c:25222
| 25222	  BUILD_GLYPH_STRINGS (i, end, head, tail, hl, x, last_x);
| (gdb) pgrow
| Undefined command: "pgrow".  Try "help".
| (gdb) p grow
| $2 = {<text variable, no debug info>} 0x7fff8a49c635 <grow>
| (gdb) /Users/rainerkrug/ownCompiled/emacs/src/.gdbinit
| Undefined command: "".  Try "help".
| (gdb) source /Users/rainerkrug/ownCompiled/emacs/src/.gdbinit
| Warning: /Users/rainerkrug/ownCompiled/emacs/../lwlib: No such file or directory.
| DISPLAY = /private/tmp/com.apple.launchd.x7OsOx87fJ/org.macosforge.xquartz:0
| TERM = xterm
| Breakpoint 1 at 0x1001792a2: file emacs.c, line 370.
| Breakpoint 2 at 0x1001b1d5f: file sysdep.c, line 907.
| (gdb) pgrow
| TEXT: 22 glyphs
|   0    0: CHAR[*] str=0xc3502c8[0] blev=0,btyp=L w=8 a+d=14+4 face=17 AVOID
|   1    8: CHAR[*] str=0xc3502c8[1] blev=0,btyp=L w=8 a+d=14+4 face=17 AVOID
|   2   16: CHAR[*] str=0xc3502c8[2] blev=0,btyp=L w=8 a+d=14+4 face=17 AVOID
|   3   24: CHAR[*] str=0xc3502c8[3] blev=0,btyp=L w=8 a+d=14+4 face=17 AVOID
|   4   32: CHAR[*] str=0xc3502c8[4] blev=0,btyp=L w=8 a+d=14+4 face=17 AVOID
|   5   40: CHAR[*] str=0xc3502c8[5] blev=0,btyp=L w=8 a+d=14+4 face=17 AVOID
|   6   48: CHAR[*] str=0xc3502c8[6] blev=0,btyp=L w=8 a+d=14+4 face=17 AVOID
|   7   56: CHAR[ ] str=0xc3502c8[7] blev=0,btyp=L w=8 a+d=14+4 AVOID
|   8   64: CHAR[-] pos=34336 blev=0,btyp=L w=8 a+d=14+4 MB
|   9   72: CHAR[ ] pos=34337 blev=0,btyp=L w=8 a+d=14+4 MB
|  10   80: CHAR[[] pos=34338 blev=0,btyp=L w=8 a+d=14+4 face=18 MB
|  11   88: CHAR[ ] pos=34339 blev=0,btyp=L w=8 a+d=14+4 face=18 MB
|  12   96: CHAR[]] pos=34340 blev=0,btyp=L w=8 a+d=14+4 face=18 MB
|  13  104: CHAR[ ] pos=34341 blev=0,btyp=L w=8 a+d=14+4 MB
|  14  112: CHAR[o] pos=34342 blev=0,btyp=L w=8 a+d=14+4 face=31 MB
|  15  120: CHAR[w] pos=34343 blev=0,btyp=L w=8 a+d=14+4 face=31 MB
|  16  128: CHAR[n] pos=34344 blev=0,btyp=L w=8 a+d=14+4 face=31 MB
|  17  136: CHAR[F] pos=34345 blev=0,btyp=L w=8 a+d=14+4 face=31 MB
|  18  144: CHAR[r] pos=34346 blev=0,btyp=L w=8 a+d=14+4 face=31 MB
|  19  152: CHAR[e] pos=34347 blev=0,btyp=L w=8 a+d=14+4 face=31 MB
|  20  160: CHAR[e] pos=34348 blev=0,btyp=L w=8 a+d=14+4 face=31 MB
|  21  168: CHAR[ ] pos=0 blev=0,btyp=B w=8 a+d=14+4 MB
| (gdb) xbacktrace
| "redisplay_internal (C function)" (0x0)
| "redisplay" (0x5fbfaa68)
| "sit-for" (0x5fbfb430)
| "isearch-lazy-highlight-new-loop" (0x5fbfbe00)
| "replace-highlight" (0x5fbfc7f0)
| "perform-replace" (0x5fbfd220)
| "query-replace" (0x5fbfdd90)
| "funcall-interactively" (0x5fbfdd88)
| "call-interactively" (0x5fbfe6a0)
| "command-execute" (0x5fbff090)
| (gdb)
`----

I'll leave the session open - please let me know if you need further
info or if I can close it.

By the way: these crashes usually happen when I do something quickly -
e.g. here I search-replaced some trivial string in org code blocks, the
last time I deleted repeatedly result blocks and empty lines.

Rainer

> Finally, please show what this produces:
>
>  (gdb) frame 36
>  (gdb) pp error_symbol
>  (gdb) pp data


-- 
Rainer M. Krug, PhD (Conservation Ecology, SUN), MSc (Conservation Biology, UCT), Dipl. Phys. (Germany)

Centre of Excellence for Invasion Biology
Stellenbosch University
South Africa

Tel :       +33 - (0)9 53 10 27 44
Cell:       +33 - (0)6 85 62 59 98
Fax :       +33 - (0)9 58 10 27 44

Fax (D):    +49 - (0)3 21 21 25 22 44

email:      Rainer@krugs.de

Skype:      RMkrug

PGP: 0x0F52F982

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 454 bytes --]