From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Harald Maier Newsgroups: gmane.emacs.bugs,gmane.emacs.pretest.bugs Subject: bug#1075: 23.0.60; [NS] wrong number of arguments in call to ns_free_indexed_color Date: Fri, 03 Oct 2008 19:24:54 +0200 Message-ID: References: <48E62E8B.5010905@lysator.liu.se> Reply-To: Harald Maier , 1075@emacsbugs.donarmstrong.com NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: ger.gmane.org 1223056275 2875 80.91.229.12 (3 Oct 2008 17:51:15 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Fri, 3 Oct 2008 17:51:15 +0000 (UTC) Cc: emacs-pretest-bug@gnu.org To: bug-gnu-emacs@gnu.org Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Fri Oct 03 19:52:12 2008 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1KlooQ-0003c1-5v for geb-bug-gnu-emacs@m.gmane.org; Fri, 03 Oct 2008 19:51:35 +0200 Original-Received: from localhost ([127.0.0.1]:32834 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1KlonM-0003aG-RR for geb-bug-gnu-emacs@m.gmane.org; Fri, 03 Oct 2008 13:50:28 -0400 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1Klon9-0003Mj-2s for bug-gnu-emacs@gnu.org; Fri, 03 Oct 2008 13:50:15 -0400 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1Klon7-0003Lx-V7 for bug-gnu-emacs@gnu.org; Fri, 03 Oct 2008 13:50:14 -0400 Original-Received: from [199.232.76.173] (port=40737 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1Klon7-0003Lo-9I for bug-gnu-emacs@gnu.org; Fri, 03 Oct 2008 13:50:13 -0400 Original-Received: from rzlab.ucr.edu ([138.23.92.77]:60895) by monty-python.gnu.org with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.60) (envelope-from ) id 1Klon6-0000YB-Bh for bug-gnu-emacs@gnu.org; Fri, 03 Oct 2008 13:50:12 -0400 Original-Received: from rzlab.ucr.edu (rzlab.ucr.edu [127.0.0.1]) by rzlab.ucr.edu (8.13.8/8.13.8/Debian-3) with ESMTP id m93Hnu1M021779; Fri, 3 Oct 2008 10:49:56 -0700 Original-Received: (from debbugs@localhost) by rzlab.ucr.edu (8.13.8/8.13.8/Submit) id m93HZ3Pc018240; Fri, 3 Oct 2008 10:35:03 -0700 X-Loop: don@donarmstrong.com Resent-From: Harald Maier Original-Sender: news Resent-To: bug-submit-list@donarmstrong.com Resent-CC: Emacs Bugs , don@donarmstrong.com Resent-Date: Fri, 03 Oct 2008 17:35:03 +0000 Resent-Message-ID: Resent-Sender: don@donarmstrong.com X-Emacs-PR-Message: report 1075 X-Emacs-PR-Package: emacs,ns X-Emacs-PR-Keywords: Original-Received: via spool by submit@emacsbugs.donarmstrong.com id=B.122305474916844 (code B ref -1); Fri, 03 Oct 2008 17:35:03 +0000 Original-Received: (at submit) by emacsbugs.donarmstrong.com; 3 Oct 2008 17:25:49 +0000 Original-Received: from lists.gnu.org (lists.gnu.org [199.232.76.165]) by rzlab.ucr.edu (8.13.8/8.13.8/Debian-3) with ESMTP id m93HPgWt016838 for ; Fri, 3 Oct 2008 10:25:44 -0700 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1KloPN-00005h-2v for bug-gnu-emacs@gnu.org; Fri, 03 Oct 2008 13:25:41 -0400 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1KloPL-00004s-G7 for bug-gnu-emacs@gnu.org; Fri, 03 Oct 2008 13:25:40 -0400 Original-Received: from [199.232.76.173] (port=51216 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1KloPL-0008WV-6F for bug-gnu-emacs@gnu.org; Fri, 03 Oct 2008 13:25:39 -0400 Original-Received: from main.gmane.org ([80.91.229.2]:49426 helo=ciao.gmane.org) by monty-python.gnu.org with esmtps (TLS-1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.60) (envelope-from ) id 1KloPJ-0004Yn-N2 for bug-gnu-emacs@gnu.org; Fri, 03 Oct 2008 13:25:39 -0400 Original-Received: from list by ciao.gmane.org with local (Exim 4.43) id 1KloP8-0007Hi-Ok for bug-gnu-emacs@gnu.org; Fri, 03 Oct 2008 17:25:27 +0000 Original-Received: from p54980d1b.dip0.t-ipconnect.de ([84.152.13.27]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Fri, 03 Oct 2008 17:25:26 +0000 Original-Received: from harald by p54980d1b.dip0.t-ipconnect.de with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Fri, 03 Oct 2008 17:25:26 +0000 X-Injected-Via-Gmane: http://gmane.org/ Original-Followup-To: gmane.emacs.pretest.bugs Original-Lines: 251 Original-X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: p54980d1b.dip0.t-ipconnect.de User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.0.60 (darwin) Cancel-Lock: sha1:YuKOPi70NzXnbntvuiTx+B+s8jo= X-detected-operating-system: by monty-python.gnu.org: GNU/Linux 2.6, seldom 2.4 (older, 4) X-detected-operating-system: by monty-python.gnu.org: GNU/Linux 2.6 (newer, 3) Resent-Date: Fri, 03 Oct 2008 13:50:13 -0400 X-BeenThere: bug-gnu-emacs@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:21053 gmane.emacs.pretest.bugs:23139 Archived-At: Lennart Staflin writes: > After a crash I with ns_free_indexed_color, and x_clear_image_1 on the > stack. I noticed that x_clear_image_1 calls ns_free_indexed_color with > only one argument, but it takes two arguments. Perhaps that explains a > number of crashes in ns_free_indexed_color. > > //Lennart Staflin > > > In GNU Emacs 23.0.60.1 (powerpc-apple-darwin8.11.0, *Step 9.0) > of 2008-10-03 on sin > Windowing system distributor `Apple', version 49.46.48 > configured using `configure '--with-ns' '--enable-maintainer-mode' > --without-x' '--with-jpeg' '--with-gif' '--with-png' 'CFLAGS=-g'' I am facing this bug too. Here is a full backtrace. It happens for me intermittent. Harald Program received signal EXC_BAD_ACCESS, Could not access memory. Reason: KERN_PROTECTION_FAILURE at address: 0x00000028 0x0015e306 in ns_free_indexed_color (idx=0, f=0x0) at nsterm.m:1310 (gdb) bt #0 0x0015e306 in ns_free_indexed_color (idx=0, f=0x0) at nsterm.m:1310 #1 0x0018513a in x_clear_image_1 (f=, img=0x195778f0, pixmap_p=, mask_p=1, colors_p=1) at image.c:1627 #2 0x00184b93 in free_image (f=0x0, img=0x195778f0) at image.c:1322 #3 0x001854db in clear_image_cache (f=0x8b7150, filter=25165833) at image.c:1836 #4 0x001855b6 in clear_image_caches (filter=25165833) at image.c:1873 #5 0x00035868 in redisplay_internal (preserve_echo_area=) at xdisp.c:12060 #6 0x00035d28 in redisplay_preserve_echo_area (from_where=13) at xdisp.c:12094 #7 0x00146de7 in status_notify (deleting_process=0x0) at process.c:6906 #8 0x001498dc in wait_reading_process_output (time_limit=30, microsecs=0, read_kbd=-1, do_display=1, wait_for_cell=25165833, wait_proc=0x0, just_wait_proc=0) at process.c:4678 #9 0x0000c296 in sit_for (timeout=240, reading=1, do_display=1) at dispnew.c:6619 #10 0x0009bbf8 in read_char (commandflag=1, nmaps=6, maps=0xbfffdfd0, prev_event=25165833, used_mouse_menu=0xbfffe0d8, end_time=0x0) at keyboard.c:2895 #11 0x0009dc3b in read_key_sequence (keybuf=0xbfffe198, bufsize=30, prompt=25165833, dont_downcase_last=0, can_return_switch_frame=1, fix_current_buffer=1) at keyboard.c:9349 #12 0x000a012a in command_loop_1 () at keyboard.c:1620 #13 0x00101ffd in internal_condition_case (bfun=0x9fef0 , handlers=25205497, hfun=0x96ba0 ) at eval.c:1511 #14 0x0008ff38 in command_loop_2 () at keyboard.c:1338 #15 0x00101edc in internal_catch (tag=0, func=0x8fef0 , arg=25165833) at eval.c:1247 #16 0x0008fc8e in command_loop () at keyboard.c:1317 #17 0x0008fd52 in recursive_edit_1 () at keyboard.c:942 #18 0x0008fed1 in Frecursive_edit () at keyboard.c:1004 #19 0x0008eb6b in main (argc=1, argv=0xbfffe5a4) at emacs.c:1689 (gdb) bt full #0 0x0015e306 in ns_free_indexed_color (idx=0, f=0x0) at nsterm.m:1310 color_table = #1 0x0018513a in x_clear_image_1 (f=, img=0x195778f0, pixmap_p=, mask_p=1, colors_p=1) at image.c:1627 No locals. #2 0x00184b93 in free_image (f=0x0, img=0x195778f0) at image.c:1322 c = (struct image_cache *) 0x16f0c540 #3 0x001854db in clear_image_cache (f=0x8b7150, filter=25165833) at image.c:1836 img = (struct image *) 0x195778f0 t = { tv_sec = 1218913349, tv_usec = 686755 } old = 1218911549 i = 3 nfreed = 2 c = (struct image_cache *) 0x16f0c540 #4 0x001855b6 in clear_image_caches (filter=25165833) at image.c:1873 tail = 4300800 #5 0x00035868 in redisplay_internal (preserve_echo_area=) at xdisp.c:12060 w = (struct window *) 0x195978f0 f = pause = 0 must_finish = 1 tlbufpos = { charpos = 425537696, bytepos = 425537696 } number_of_visible_frames = 1 polling_stopped_here = 1 old_frame = 9138516 consider_all_windows_p = #6 0x00035d28 in redisplay_preserve_echo_area (from_where=13) at xdisp.c:12094 No locals. #7 0x00146de7 in status_notify (deleting_process=0x0) at process.c:6906 proc = 422480020 buffer = 425665812 tail = msg = 51929347 #8 0x001498dc in wait_reading_process_output (time_limit=30, microsecs=0, read_kbd=-1, do_display=1, wait_for_cell=25165833, wait_proc=0x0, just_wait_proc=0) at process.c:4678 Atemp = { fds_bits = {0 } } Ctemp = { fds_bits = {0 } } timeout_reduced_for_timers = 1 channel = nfds = 1 Available = { fds_bits = {128, 0 } } Connecting = { fds_bits = {0 } } check_connect = 0 check_delay = 0 no_avail = xerrno = proc = timeout = { tv_sec = 0, tv_usec = 0 } end_time = { tv_sec = 1218913379, tv_usec = 636576 } wait_channel = -1 got_some_input = 1 #9 0x0000c296 in sit_for (timeout=240, reading=1, do_display=1) at dispnew.c:6619 sec = usec = 0 #10 0x0009bbf8 in read_char (commandflag=1, nmaps=6, maps=0xbfffdfd0, prev_event=25165833, used_mouse_menu=0xbfffe0d8, end_time=0x0) at keyboard.c:2895 tem0 = delay_level = 4 buffer_size = c = 25165833 count = jmpcount = 2 local_getcjmp = {918399, 0, 8098, 633595, 981200, 3440316, 0, 3440316, -1073750152, -1073750544, 25165855, 662, 635534, 23, 31, 31, 33554432, -1073807305} save_jump = {0 } key_already_recorded = 0 tem = save = previous_echo_area_message = 25165833 also_record = 25165833 reread = 0 polling_stopped_here = orig_kboard = (struct kboard *) 0x83b140 #11 0x0009dc3b in read_key_sequence (keybuf=0xbfffe198, bufsize=30, prompt=25165833, dont_downcase_last=0, can_return_switch_frame=1, fix_current_buffer=1) at keyboard.c:9349 interrupted_kboard = (KBOARD *) 0x83b140 key = 1058327 used_mouse_menu = 0 echo_local_start = 0 last_real_key_start = 0 keys_local_start = 0 local_first_binding = 0 from_string = 25165833 count = 2 t = 0 echo_start = 0 keys_start = 0 nmaps = 6 nmaps_allocated = 6 defs = (Lisp_Object * volatile) 0xbfffdfa0 submaps = (Lisp_Object * volatile) 0xbfffdfd0 orig_local_map = 50222101 orig_keymap = 25165833 localized_local_map = 0 first_binding = 0 first_unbound = 31 mock_input = 0 fkey = { parent = 4941253, map = 4941253, start = 0, end = 0 } keytran = { parent = 4386685, map = 4386685, start = 0, end = 0 } indec = { parent = 4941261, map = 4941261, start = 0, end = 0 } shift_translated = 0 delayed_switch_frame = 25165833 original_uppercase = -1073749720 original_uppercase_position = -1 starting_buffer = (struct buffer *) 0x19523aa0 fake_prefixed_keys = 25165833 #12 0x000a012a in command_loop_1 () at keyboard.c:1620 cmd = lose = nonundocount = 0 keybuf = {35523785, 617387, 3441000, 25165833, -1073749464, 617600, 366757405, -1073749538, -1073749512, -1880941328, 4301001, 152, -1073749538, 25165833, 1, 10, 0, -1895817300, 6307477, 1, -1073749448, -1791741113, 50388496, 0, -1073749492, -1073749680, 0, 3866624, 25165833, 33476529} i = 1 prev_modiff = 25222 prev_buffer = (struct buffer *) 0x19523aa0 already_adjusted = 0 #13 0x00101ffd in internal_condition_case (bfun=0x9fef0 , handlers=25205497, hfun=0x96ba0 ) at eval.c:1511 val = c = { tag = 25165833, val = 25165833, next = 0xbfffe34c, gcpro = 0x0, jmp = {-1073806465, -1880940628, 8098, 1056523, 25165833, 25165833, 3440252, 3440316, -1073749272, -1073749456, 31, 662, 1056666, 1245207, 3407903, 3407903, -1073807360, -1073807305}, backlist = 0x0, handlerlist = 0x0, lisp_eval_depth = 0, pdlcount = 2, poll_suppress_count = 1, interrupt_input_blocked = 0, byte_stack = 0x0 } h = { handler = 25205497, var = 25165833, chosen_clause = 25165881, tag = 0xbfffe248, next = 0x0 } #14 0x0008ff38 in command_loop_2 () at keyboard.c:1338 val = 0 #15 0x00101edc in internal_catch (tag=0, func=0x8fef0 , arg=25165833) at eval.c:1247 c = { tag = 25201569, val = 25165833, next = 0x0, gcpro = 0x0, jmp = {-1791753345, 0, 8098, 1056313, -1791740947, 19216, 3440384, 3440316, -1073749048, -1073749200, 25296927, 662, 1056463, 25296919, 25296927, 25165855, 6291456, 4259895}, backlist = 0x0, handlerlist = 0x0, lisp_eval_depth = 0, pdlcount = 2, poll_suppress_count = 1, interrupt_input_blocked = 0, byte_stack = 0x0 } #16 0x0008fc8e in command_loop () at keyboard.c:1317 No locals. #17 0x0008fd52 in recursive_edit_1 () at keyboard.c:942 val = #18 0x0008fed1 in Frecursive_edit () at keyboard.c:1004 buffer = 25165833 #19 0x0008eb6b in main (argc=1, argv=0xbfffe5a4) at emacs.c:1689 dummy = 0 stack_bottom_variable = 0 '\000' do_initial_setlocale = 1 skip_args = 0 rlim = { rlim_cur = 8388608, rlim_max = 67104768 } no_loadup = 0 junk = 0x0