bug#38748: 28.0.50; crash on MacOS 10.15.2

[Andrii Kolomoiets <andreyk.mad@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 1045 bytes --]

Eli Zaretskii <eliz@gnu.org> writes:

>> Date: Thu, 26 Dec 2019 13:04:20 +0000
>> From: Alan Third <alan@idiocy.org>
>> Cc: 38748@debbugs.gnu.org
>> 
>> > 20  org.gnu.Emacs                 	0x00000001084a7c86 handle_sigsegv + 168
>> > 21  libsystem_platform.dylib      	0x00007fff6b73a42d _sigtramp + 29
>> > 22  ???                           	000000000000000000 0 + 0
>> > 23  org.gnu.Emacs                 	0x00000001084ddd80 mark_object + 272
>> > 24  org.gnu.Emacs                 	0x00000001084ddd80 mark_object + 272
>> 
>> Looks like a crash in GC.
>
> Yes, but why?
>
> One possibility is stack overflow.  If that's not the reason, then one
> needs to employ the technique described in etc/DEBUG to find out which
> object got corrupted and why.

I followed the steps described in etc/DEBUG.

Emacs is configured using:
'configure --without-xml2 --with-ns --with-modules
 --disable-ns-self-contained --enable-checking=yes,glyphs
 --enable-check-lisp-object-type 'CFLAGS=-O3 -g3''

See gdb session output attached.

Hope this will help.


[-- Attachment #2: gdb-bt-full.txt --]
[-- Type: text/plain, Size: 5609 bytes --]

Current directory is ~/workspace/emacs-build/src/
GNU gdb (GDB) 8.3
Copyright (C) 2019 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64-apple-darwin19.0.0".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
    <http://www.gnu.org/software/gdb/documentation/>.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from emacs...
SIGINT is used by the debugger.
Are you sure you want to change it? (y or n) [answered Y; input not from terminal]
DISPLAY = muffinmac.local
TERM = dumb
(gdb) run
Starting program: /Users/mad/workspace/emacs-build/src/emacs
[New Thread 0x1103 of process 53190]
[New Thread 0xe03 of process 53190]
[New Thread 0x1503 of process 53190]
warning: unhandled dyld version (16)
[New Thread 0x110f of process 53190]
[New Thread 0x1603 of process 53190]
[New Thread 0x1703 of process 53190]
[New Thread 0x1803 of process 53190]
[New Thread 0x1903 of process 53190]
[New Thread 0x2603 of process 53190]
[New Thread 0x2703 of process 53190]
[New Thread 0x2803 of process 53190]
[New Thread 0x2903 of process 53190]
[New Thread 0x1a0b of process 53190]
[New Thread 0xe5f of process 53190]
[New Thread 0x190f of process 53190]
[New Thread 0x1a3f of process 53190]
[New Thread 0x2607 of process 53190]
[New Thread 0x272f of process 53190]
[New Thread 0xe63 of process 53190]
[New Thread 0x111f of process 53190]
[New Thread 0x1607 of process 53190]
[New Thread 0x1a43 of process 53190]
[New Thread 0xe67 of process 53190]
[New Thread 0x1123 of process 53190]
[New Thread 0x160b of process 53190]
[New Thread 0x1803 of process 53190]
[New Thread 0x2753 of process 53190]
[New Thread 0x16a7 of process 53190]
[New Thread 0x1807 of process 53190]
[New Thread 0x1a6b of process 53190]
[New Thread 0x1b7f of process 53190]
[New Thread 0x2403 of process 53190]
[New Thread 0x2503 of process 53190]
[New Thread 0x261b of process 53190]
[New Thread 0x28df of process 53190]

Thread 3 hit Breakpoint 1, terminate_due_to_signal (sig=-272671680, backtrace_limit=-272671360) at ../../emacs/src/emacs.c:370
370	{
(gdb) bt full
#0  terminate_due_to_signal (sig=-272671680, backtrace_limit=-272671360) at ../../emacs/src/emacs.c:370
No locals.
#1  0x0000000000005490 in ?? ()
No symbol table info available.
#2  0x0000000000000013 in ?? ()
No symbol table info available.
#3  0x00007ffeefbf5d08 in ?? ()
No symbol table info available.
#4  0x0000001300000000 in ?? ()
No symbol table info available.
#5  0x0000000000005460 in ?? ()
No symbol table info available.
#6  0x000000000000d140 in ?? ()
No symbol table info available.
#7  0x000000000000d140 in ?? ()
No symbol table info available.
#8  0x000000000000d140 in ?? ()
No symbol table info available.
#9  0x000000000000d140 in ?? ()
No symbol table info available.
#10 0x0000000000002af0 in ?? ()
No symbol table info available.
#11 0x000000000000d140 in ?? ()
No symbol table info available.
#12 0x000000000000d140 in ?? ()
No symbol table info available.
#13 0x000000000000d140 in ?? ()
No symbol table info available.
#14 0x000000000000d140 in ?? ()
No symbol table info available.
#15 0x000000000000d140 in ?? ()
No symbol table info available.
#16 0x000000000000d140 in ?? ()
No symbol table info available.
#17 0x000000000000d140 in ?? ()
No symbol table info available.
#18 0x000000000000d140 in ?? ()
No symbol table info available.
#19 0x000000000000d140 in ?? ()
No symbol table info available.
#20 0x000000000000d140 in ?? ()
No symbol table info available.
#21 0x0000000001078300 in ?? ()
No symbol table info available.
#22 0x000000000000d140 in ?? ()
No symbol table info available.
#23 0x000000000000d140 in ?? ()
No symbol table info available.
#24 0x000000000000d140 in ?? ()
No symbol table info available.
#25 0x04584540b994009d in ?? ()
No symbol table info available.
#26 0x00000000efbf5d01 in ?? ()
No symbol table info available.
#27 0x0000000000000013 in ?? ()
No symbol table info available.
#28 0x0000000101b00e80 in ?? ()
No symbol table info available.
#29 0x00007ffeefbf60d0 in ?? ()
No symbol table info available.
#30 0x0000000101b00c50 in ?? ()
No symbol table info available.
#31 0x00007ffeefbf5df0 in ?? ()
No symbol table info available.
#32 0x0000000100106432 in merge_named_face (w=0x101b00c50, f=0x101b00c50, face_name=..., to=0x7ffeefbf60d0, named_merge_points=0x13, attr_filter=28315264) at ../../emacs/src/xfaces.c:2226
        from = {XIL(0x5460), XIL(0xd140), XIL(0xd140), XIL(0xd140), XIL(0xd140), XIL(0x2af0), XIL(0xd140), XIL(0xd140), XIL(0xd140), XIL(0xd140), XIL(0xd140), XIL(0xd140), XIL(0xd140), XIL(0xd140), XIL(0xd140), XIL(0xd140), XIL(0x1078300), XIL(0xd140), XIL(0xd140), XIL(0xd140)}
        val = <optimized out>
        ok = <optimized out>
        named_merge_point = <optimized out>
        from = <optimized out>
        val = <optimized out>
        ok = <optimized out>
Backtrace stopped: frame did not save the PC

Thread 3 hit Breakpoint 1, 0x00000001002dea74 in terminate_due_to_signal ()
(gdb) The program being debugged stopped while in a function called from GDB.
Evaluation of the expression containing the function
(backtrace_top) will be abandoned.
When the function is done executing, GDB will silently stop.