bug#1362: 23.0.60 Crash

[Jason Schadel]

I recently built emacs to run on a mac but I keep having a problem.   
When it crashes, it seems to happen right when I edit a file after a  
minute or two of no activity in emacs.

The error received in gdb is as follows:
Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_PROTECTION_FAILURE at address: 0x00000000
0x9120c68c in objc_msgSend ()

Here is my emacs build info:
In GNU Emacs 23.0.60.1 (i386-apple-darwin9.5.0, NS apple-appkit-949.35)
 of 2008-11-11 on jasons.ofc.lair
Windowing system distributor `Apple', version  
97.112.112.108.101.45.97.112.112.107.105.116.45.57.52.57.46.51.53
configured using `configure  '--with-ns''

Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: nil
  value of $LC_CTYPE: nil
  value of $LC_MESSAGES: nil
  value of $LC_MONETARY: nil
  value of $LC_NUMERIC: nil
  value of $LC_TIME: nil
  value of $LANG: nil
  value of $XMODIFIERS: nil
  locale-coding-system: nil
  default-enable-multibyte-characters: t

Here is the gdb debugger 'bt full' output:
---- BEGIN bt full output ----
(gdb) bt full
#0  0x9120c68c in objc_msgSend ()
No symbol table info available.
#1  0x00182b23 in ns_free_indexed_color (idx=0, f=0x61bcecc) at  
nsterm.m:1301
        color_table = (struct ns_color_table *) 0x413e010
#2  0x001a98b0 in x_clear_image_1 (f=0x0, img=0x413e010,  
pixmap_p=<value temporarily unavailable, due to optimizations>,  
mask_p=1, colors_p=1) at image.c:1627
No locals.
#3  0x001a92f3 in free_image (f=0x0, img=0x413e010) at image.c:1322
        c = (struct image_cache *) 0x6610dc0
#4  0x001a9c4b in clear_image_cache (f=0x41b37b0, filter=83886089) at  
image.c:1836
        img = (struct image *) 0x413e010
        t = {
  tv_sec = 1226954276,
  tv_usec = 89420
}
        old = 1226952476
        i = 3
        nfreed = 0
        c = (struct image_cache *) 0x6610dc0
#5  0x001a9d26 in clear_image_caches (filter=83886089) at image.c:1873
        tail = 102485608
#6  0x00035838 in redisplay_internal (preserve_echo_area=<value  
temporarily unavailable, due to optimizations>) at xdisp.c:12005
        w = (struct window *) 0x41b3930
        pause = 0
        must_finish = 0
        tlbufpos = {
  charpos = 2,
  bytepos = 1
}
        number_of_visible_frames = 1
        polling_stopped_here = 1
        old_frame = 68892596
	consider_all_windows_p = <value temporarily unavailable, due to  
optimizations>
#7  0x00035d7a in redisplay_preserve_echo_area (from_where=8) at  
xdisp.c:12043
No locals.
#8  0x000bcbdc in detect_input_pending_run_timers (do_display=1) at  
keyboard.c:10537
        old_timers_run = 55744
#9  0x0016a337 in wait_reading_process_output (time_limit=30,  
microsecs=0, read_kbd=-1, do_display=1, wait_for_cell=83886089,  
wait_proc=0x0, just_wait_proc=0) at process.c:4895
        old_timers_run = 55744
        old_buffer = (struct buffer *) 0x66d5db0
        old_window = 68892980
        leave = <value temporarily unavailable, due to optimizations>
        timeout_reduced_for_timers = 1
        channel = <value temporarily unavailable, due to optimizations>
        nfds = 0
        Available = {
  fds_bits = {0 <repeats 32 times>}
}
        Connecting = {
  fds_bits = {0 <repeats 32 times>}
}
        check_connect = 0
        check_delay = 0
        no_avail = 0
        xerrno = <value temporarily unavailable, due to optimizations>
        proc = <value temporarily unavailable, due to optimizations>
        timeout = {
  tv_sec = 0,
  tv_usec = 257829
}
        end_time = {
  tv_sec = 1226954305,
  tv_usec = 266146
}
        wait_channel = -1
        got_some_input = 0
#10 0x0000c0d6 in sit_for (timeout=240, reading=1, do_display=1) at  
dispnew.c:6637
        sec = <value temporarily unavailable, due to optimizations>
        usec = 0
#11 0x000bdffc in read_char (commandflag=1, nmaps=4, maps=0xbfffee90,  
prev_event=83886089, used_mouse_menu=0xbfffef88, end_time=0x0) at  
keyboard.c:2892
        tem0 = <value temporarily unavailable, due to optimizations>
        delay_level = 4
        buffer_size = <value temporarily unavailable, due to optimizations>
        c = 83886089
        count = <value temporarily unavailable, due to optimizations>
        jmpcount = 2
	local_getcjmp = {1508223, 107830704, 8099, 773627, 1122109, 83916337,  
3574904, 3602428, -1073746360, -1073746800, -1073807329, 662, 775580,  
92143639, 31, -1073807329, 1114112, 107806775}
        save_jump = {0 <repeats 18 times>}
        key_already_recorded = 0
        tem = <value temporarily unavailable, due to optimizations>
        save = <value temporarily unavailable, due to optimizations>
        previous_echo_area_message = 83886089
        also_record = 83886089
        reread = 0
	polling_stopped_here = <value temporarily unavailable, due to  
optimizations>
        orig_kboard = (struct kboard *) 0x413e540
#12 0x000bf9a4 in read_key_sequence (keybuf=0xbffff048, bufsize=30,  
prompt=83886089, dont_downcase_last=0, can_return_switch_frame=1,  
fix_current_buffer=1) at keyboard.c:9344
        interrupted_kboard = (KBOARD *) 0x413e540
        key = 83886089
        used_mouse_menu = 0
        echo_local_start = 0
        last_real_key_start = 0
        keys_local_start = 0
        local_first_binding = 0
        from_string = 83886089
        count = 2
        t = 0
        echo_start = 0
        keys_start = 0
        nmaps = 4
        nmaps_allocated = 4
        defs = (Lisp_Object * volatile) 0xbfffee70
        submaps = (Lisp_Object * volatile) 0xbfffee90
        orig_local_map = 194789557
        orig_keymap = 83886089
        localized_local_map = 0
        first_binding = 0
        first_unbound = 31
        mock_input = 0
        fkey = {
  parent = 74484941,
  map = 74484941,
  start = 0,
  end = 0
}
        keytran = {
  parent = 67628925,
  map = 67628925,
  start = 0,
  end = 0
}
        indec = {
  parent = 74484957,
  map = 74484957,
  start = 0,
  end = 0
}
        shift_translated = 0
        delayed_switch_frame = 83886089
        original_uppercase = -1073745960
        original_uppercase_position = -1
        starting_buffer = (struct buffer *) 0x66d5db0
        fake_prefixed_keys = 83886089
#13 0x000c1eca in command_loop_1 () at keyboard.c:1621
        cmd = <value temporarily unavailable, due to optimizations>
        lose = <value temporarily unavailable, due to optimizations>
        nonundocount = 0
	keybuf = {88, 152, 3603112, 83886089, -1073745704, 757408, 187641053,  
-1073745778, -1073745752, -1880941348, 8343736, 152, -1073745778,  
83886089, 248, 10, 0, -1895817220, 73416336, 1, -1073745688,  
-1859280057, 109105168, 0, -1073745732, -1073745920, 0, 3997696,  
83886089, 92114441}
        i = 1
        prev_modiff = 51390
        prev_buffer = (struct buffer *) 0x66d5db0
        already_adjusted = 0
#14 0x00123cad in internal_condition_case (bfun=0xc1c90  
<command_loop_1>, handlers=83925777, hfun=0xb8dc0 <cmd_error>) at  
eval.c:1511
        val = <value temporarily unavailable, due to optimizations>
        c = {
  tag = 83886089,
  val = 83886089,
  next = 0xbffff1fc,
  gcpro = 0x0,
  jmp = {-1073806465, -1880940548, 8098, 1194939, 83886089, 83886089,  
3602364, 3602428, -1073745512, -1073745696, 31, 658, 1195082, 1376279,  
3538975, 3538975, -1073807360, -1073807305},
  backlist = 0x0,
  handlerlist = 0x0,
  lisp_eval_depth = 0,
  pdlcount = 2,
  poll_suppress_count = 1,
  interrupt_input_blocked = 0,
  byte_stack = 0x0
}
        h = {
  handler = 83925777,
  var = 83886089,
  chosen_clause = 83886137,
  tag = 0xbffff0f8,
  next = 0x0
}
#15 0x000b15d8 in command_loop_2 () at keyboard.c:1338
        val = 102485708
#16 0x00123b8c in internal_catch (tag=102485708, func=0xb1590  
<command_loop_2>, arg=83886089) at eval.c:1247
        c = {
  tag = 83921849,
  val = 83886089,
  next = 0x0,
  gcpro = 0x0,
  jmp = {-1859320961, 0, 8098, 1194729, -1859279891, 18608, 3602496,  
3602428, -1073745288, -1073745440, 84017183, 658, 1194879, 84017175,  
84017183, 83886111, 73400320, 8323127},
  backlist = 0x0,
  handlerlist = 0x0,
  lisp_eval_depth = 0,
  pdlcount = 2,
  poll_suppress_count = 1,
  interrupt_input_blocked = 0,
  byte_stack = 0x0
}
#17 0x000b132e in command_loop () at keyboard.c:1317
No locals.
#18 0x000b13f2 in recursive_edit_1 () at keyboard.c:942
        val = <value temporarily unavailable, due to optimizations>
#19 0x000b1571 in Frecursive_edit () at keyboard.c:1004
        buffer = 83886089
#20 0x000b022b in main (argc=1, argv=0xbffff44c) at emacs.c:1777
        dummy = -1881143876
        stack_bottom_variable = 0 '\0'
        do_initial_setlocale = 1
        skip_args = 0
        rlim = {
  rlim_cur = 8388608,
  rlim_max = 67104768
}
        no_loadup = 0
        junk = 0x0
        dname_arg = 0x0
(gdb)

---- End bt full ----