bug#2571: 23.0.91; Crashes on zooming pdf document

[Андрей Парамонов]

Hello!

I think I've managed to get a more or less meaningful backtrace:

#0  0xb7fa3424 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb7506956 in kill () from /lib/i686/cmov/libc.so.6
No symbol table info available.
#2  0x081236db in abort () at emacs.c:432
No locals.
#3  0x080c5505 in multibyte_chars_in_text (ptr=0x6 <Address 0x6 out of
bounds>, nbytes=59) at character.c:622
        endp = (const unsigned char *) 0xbfcbfa4b "¿ÏÂ\b\b\v"
        chars = 47
#4  0x0814ddce in insert_1 (
    string=0xbfcbfa10 "DocView: process pdf/ps->png changed status to
ð£Ð±Ð¸Ñ\202о\n.¿ÏÂ\b\b\v", nbytes=59,
    inherit=1, prepare=0, before_markers=0) at insdel.c:832
No locals.
#5  0x0807c232 in message_dolog (
    m=0xbfcbfa10 "DocView: process pdf/ps->png changed status to
ð£Ð±Ð¸Ñ\202о\n.¿ÏÂ\b\b\v", nbytes=59,
    nlflag=1, multibyte=1) at xdisp.c:7770
        oldbuf = (struct buffer *) 0x9010cf0
        oldbegv = 138204338
        oldzv = 138204362
        old_windows_or_buffers_changed = 0
        oldpoint = 138204314
        old_deactivate_mark = 137964825
        tem = <value optimized out>
#6  0x0808c359 in message3 (m=139231691, nbytes=59, multibyte=1) at xdisp.c:8005
No locals.
#7  0x0818e6ef in Fmessage (nargs=3, args=0xbfcbfb24) at editfns.c:3382
        val = <value optimized out>
#8  0x08192b36 in Ffuncall (nargs=4, args=0xbfcbfb20) at eval.c:3025
        fun = <value optimized out>
        original_fun = 138151641
        funcar = <value optimized out>
        numargs = 3
        val = <value optimized out>
        backtrace = {next = 0xbfcbfc28, function = 0xbfcbfb20, args =
0xbfcbfb24, nargs = 3, evalargs = 0 '\0',
  debug_on_exit = 0 '\0'}
        internal_args = (Lisp_Object *) 0xbfcbfb24
        i = <value optimized out>
#9  0x081c79f0 in Fbyte_code (bytestr=138492019, vector=150750684,
maxdepth=<value optimized out>)
    at bytecode.c:678
        op = 240
        stack = {pc = 0x9016b72 "\207ÉÊ\tË\"!\2054", top = 0xbfcbfb2c, bottom
= 0xbfcbfb20,
  byte_string = 138492019, byte_string_start = 0x9016b64
"ÄÅ\b\"\204\017", constants = 150750684, next = 0x0}
        top = (Lisp_Object *) 0xbfcbfb20
        result = <value optimized out>
#10 0x08194a63 in funcall_lambda (fun=150877404, nargs=2,
arg_vector=0xbfcbfc64) at eval.c:3231
        val = <value optimized out>
        syms_left = <value optimized out>
        next = <value optimized out>
        i = 2
        optional = 0
        rest = 0
#11 0x0819299b in Ffuncall (nargs=3, args=0xbfcbfc60) at eval.c:3101
        fun = 150877404
        original_fun = 151060545
        funcar = <value optimized out>
        numargs = 2
        val = <value optimized out>
        backtrace = {next = 0x0, function = 0xbfcbfc60, args = 0xbfcbfc64,
nargs = 2, evalargs = 0 '\0',
  debug_on_exit = 0 '\0'}
        internal_args = (Lisp_Object *) 0xbfcbfc64
        i = <value optimized out>
#12 0x08193fbb in Fapply (nargs=2, args=0xbfcbfcb0) at eval.c:2532
        ret_ungc_val = 0
        i = <value optimized out>
        numargs = <value optimized out>
        spread_arg = 137964825
        funcall_args = (Lisp_Object *) 0xbfcbfc60
        fun = <value optimized out>
#13 0x08194104 in apply1 (fn=151060545, arg=140923909) at eval.c:2796
No locals.
#14 0x081cb24d in read_process_output_call (fun_and_args=140953573) at
process.c:5149
No locals.
#15 0x08191d66 in internal_condition_case_1 (bfun=0x81cb230
<read_process_output_call>, arg=140953573,
    handlers=138007961, hfun=0x81cb2a0 <exec_sentinel_error_handler>)
at eval.c:1559
        val = <value optimized out>
        c = {tag = 137964825, val = 137964825, next = 0xbfcc067c, gcpro =
0x0, jmp = {{__jmpbuf = {150809672,
        150000604, 151060545, -1077150296, 1621349270, -983559943},
__mask_was_saved = 0, __saved_mask = {
        __val = {3217817048, 135918005, 150844292, 150844310, 1, 0, 1,
6, 11, 139231787, 1, 11, 3217817048,
          135916991, 6, 11, 0, 138004296, 137990162, 151063792,
3217816952, 135803995, 138004297, 137990162,
          137964873, 151063792, 137964849, 137990160, 150809672,
138004296, 138004297, 137964873}}}},
  backlist = 0x0, handlerlist = 0xbfcc0744, lisp_eval_depth = 0,
pdlcount = 6, poll_suppress_count = 1,
  interrupt_input_blocked = 0, byte_stack = 0x0}
        h = {handler = 138007961, var = 137964825, chosen_clause = 150809672,
tag = 0xbfcbfccc,
  next = 0xbfcc0744}
#16 0x081cb4d7 in exec_sentinel (proc=150000604, reason=139231771) at
process.c:6752
        sentinel = 151060545
        odeactivate = 137964825
        p = <value optimized out>
        outer_running_asynch_code = 0
        waiting = -1
#17 0x081cb6ec in status_notify (deleting_process=0x0) at process.c:6856
        symbol = 138106689
        p = (struct Lisp_Process *) 0x8f0d3d8
        proc = 150000604
        buffer = 149997036
        tail = <value optimized out>
        msg = 139231771
#18 0x081cf725 in wait_reading_process_output (time_limit=120,
microsecs=0, read_kbd=-1, do_display=1,
    wait_for_cell=137964825, wait_proc=0x0, just_wait_proc=0) at process.c:4676
        Atemp = {fds_bits = {0 <repeats 32 times>}}
        Ctemp = {fds_bits = {0 <repeats 32 times>}}
        timeout_reduced_for_timers = 1
        channel = 141341184
        nfds = 0
        Available = {fds_bits = {0 <repeats 32 times>}}
        Connecting = {fds_bits = {0 <repeats 32 times>}}
        check_connect = 150232728
        check_delay = 64
        no_avail = <value optimized out>
        xerrno = 30
        proc = -1215667220
        timeout = {tv_sec = 0, tv_usec = 0}
        end_time = {tv_sec = 1236546511, tv_usec = 376155}
        wait_channel = -1
        got_some_input = 0
#19 0x08058e48 in sit_for (timeout=960, reading=1, do_display=1) at
dispnew.c:6644
        sec = 120
        usec = 0
#20 0x0813215a in read_char (commandflag=1, nmaps=2, maps=0xbfcc0480,
prev_event=137964825,
    used_mouse_menu=0xbfcc0534, end_time=0x0) at keyboard.c:2946
        tem0 = <value optimized out>
        delay_level = 120
        buffer_size = <value optimized out>
        c = 137964825
        local_getcjmp = {{__jmpbuf = {2, 150059940, 1, -1077148616,
1868452758, -781006087},
    __mask_was_saved = 0, __saved_mask = {__val = {151063792,
3217818472, 135544010, 140868429, 137994177, 0,
        140530378, 3217818496, 137964825, 3217818696, 135841449,
137994177, 8, 151063796, 0, 140530378,
        0 <repeats 16 times>}}}}
        save_jump = {{__jmpbuf = {0, 0, 0, 0, 0, 0}, __mask_was_saved = 0,
__saved_mask = {__val = {
        0 <repeats 32 times>}}}}
        key_already_recorded = 0
        tem = 0
        save = <value optimized out>
        previous_echo_area_message = 137964825
        also_record = 137964825
        reread = 0
        polling_stopped_here = <value optimized out>
        orig_kboard = (struct kboard *) 0x8685e90
#21 0x08133721 in read_key_sequence (keybuf=0xbfcc05e4, bufsize=30,
prompt=137964825, dont_downcase_last=0,
    can_return_switch_frame=1, fix_current_buffer=1) at keyboard.c:9432
        interrupted_kboard = (KBOARD *) 0x8685e90
        key = -1077148408
        used_mouse_menu = 0
        echo_local_start = 0
        last_real_key_start = 0
        keys_local_start = 0
        local_first_binding = 0
        from_string = 137964825
        count = 2
        t = 0
        echo_start = 0
        keys_start = 0
        nmaps = 2
        nmaps_allocated = 2
        defs = (Lisp_Object * volatile) 0xbfcc0460
        submaps = (Lisp_Object * volatile) 0xbfcc0480
        orig_local_map = 140986589
        orig_keymap = 137964825
        localized_local_map = 0
        first_binding = 0
        first_unbound = 31
        mock_input = 0
        fkey = {parent = 138462725, map = 138462725, start = 0, end = 0}
        keytran = {parent = 137958269, map = 137958269, start = 0, end = 0}
        indec = {parent = 138462733, map = 138462733, start = 0, end = 0}
        shift_translated = 0
        delayed_switch_frame = 137964825
        original_uppercase = 137964825
        original_uppercase_position = -1
        starting_buffer = (struct buffer *) 0x9010cf0
        fake_prefixed_keys = 137964825
#22 0x08135844 in command_loop_1 () at keyboard.c:1640
        cmd = <value optimized out>
        lose = <value optimized out>
        nonundocount = 0
        keybuf = {344, 48, 63, -1219629808, -1219634912, 0, 0, 0, 0, 1, 1013,
-1224767816, -1217533280,
  134545180, -1219593184, 134523780, 1, -1208217612, -1472036457, 0,
-1077148088, -1077148240, 0, 134479872,
  137964825, 138858809, 0, 138491168, 138491152, -1077148056}
        i = <value optimized out>
        prev_modiff = 2
        prev_buffer = (struct buffer *) 0x9010cf0
        already_adjusted = 0
#23 0x08191fa0 in internal_condition_case (bfun=0x8135660
<command_loop_1>, handlers=138007961,
    hfun=0x812fec0 <cmd_error>) at eval.c:1511
        val = <value optimized out>
        c = {tag = 137964825, val = 137964825, next = 0xbfcc0790, gcpro =
0x0, jmp = {{__jmpbuf = {0,
        138491168, 138491152, -1077147816, 1867953046, -983265031},
__mask_was_saved = 0, __saved_mask = {
        __val = {3086749684, 3070199288, 24, 3217819092, 3086667901,
3076751348, 1635, 3076751348, 138021000,
          138021000, 3086733320, 3217819040, 3076751348, 276967387,
3077434016, 8655230, 63, 3217819696,
          3217819404, 3217819696, 3217819544, 135527956, 2,
3075353696, 3077434016, 0, 4294967295, 3086749684,
          134523780, 3086751344, 3217819488, 3086687819}}}}, backlist
= 0x0, handlerlist = 0x0,
  lisp_eval_depth = 0, pdlcount = 2, poll_suppress_count = 1,
interrupt_input_blocked = 0, byte_stack = 0x0}
        h = {handler = 138007961, var = 137964825, chosen_clause = 1, tag =
0xbfcc067c, next = 0x0}
#24 0x0812f315 in command_loop_2 () at keyboard.c:1357
        val = 0
#25 0x0819207a in internal_catch (tag=138003985, func=0x812f2f0
<command_loop_2>, arg=137964825) at eval.c:1247
        c = {tag = 138003985, val = 137964825, next = 0x0, gcpro = 0x0, jmp =
{{__jmpbuf = {0, 138491168,
        138491152, -1077147560, 1867862934, -988116743},
__mask_was_saved = 0, __saved_mask = {__val = {0, 0,
          0, 0, 0, 3076755896, 3076638463, 3076645256, 3076632721,
3076632541, 0, 0, 0, 3076755832, 177, 22, 0,
          1, 139434808, 0, 138204128, 138204482, 137990680,
3217819720, 135803995, 138204129, 138204482,
          137964825, 137990680, 137964849, 138204480, 0}}}}, backlist
= 0x0, handlerlist = 0x0,
  lisp_eval_depth = 0, pdlcount = 2, poll_suppress_count = 1,
interrupt_input_blocked = 0, byte_stack = 0x0}
#26 0x0812fd0f in command_loop () at keyboard.c:1336
No locals.
#27 0x0813009b in recursive_edit_1 () at keyboard.c:951
        val = <value optimized out>
#28 0x081301e4 in Frecursive_edit () at keyboard.c:1013
        buffer = 137964825
#29 0x081246ef in main (argc=2, argv=0xbfcc0c64) at emacs.c:1852
        dummy = 139457048
        stack_bottom_variable = 8 '\b'
        do_initial_setlocale = 1
        skip_args = 0
        rlim = {rlim_cur = 8388608, rlim_max = 18446744073709551615}
        no_loadup = 0
        junk = 0x0
        dname_arg = 0x0

Many thanks to Romain Francoise for providing emacs-snapshot-dbg Debian package!

Andrey