bug#11541: - Another reproduction - Emacs 24.2; Null pointer on OSX with cocoa UI

[mrevilgnome]

I'm frequently running into bug 11541, but only when using emacs via
the cocoa UI. It does not reproduce when using the console. This
occurs with both the emacs compiled via homebrew and the 24.2 obtained
from http://emacsformacosx.com/. The amusing thing is that the file I
was using to prepare the bug report also causes the stack trace, so
I've attached it to this email as a reproduction case. Backtrace is
below.

╰─$ gdb /usr/local/Cellar/emacs/24.2/Emacs.app/Contents/MacOS/Emacs
GNU gdb 6.3.50-20050815 (Apple version gdb-1752) (Sat Jan 28 03:02:46
UTC 2012)
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "x86_64-apple-darwin"...Reading symbols for
shared libraries .......... done

(gdb) set args -Q
(gdb) r
Starting program:
/usr/local/Cellar/emacs/24.2/Emacs.app/Contents/MacOS/Emacs -Q
Reading symbols for shared libraries
+++++++++.............................................................................................................................
done
Reading symbols for shared libraries . done
Reading symbols for shared libraries ....... done
Reading symbols for shared libraries . done
Reading symbols for shared libraries . done
Reading symbols for shared libraries . done
Reading symbols for shared libraries . done
Reading symbols for shared libraries . done
Reading symbols for shared libraries ......... done
Reading symbols for shared libraries . done
Reading symbols for shared libraries . done
Reading symbols for shared libraries . done

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_INVALID_ADDRESS at address: 0x0000000000000000
0x00007fff8a5c93c2 in CFStringGetLength ()
(gdb) bt full
#0  0x00007fff8a5c93c2 in CFStringGetLength ()
No symbol table info available.
#1  0x00007fff8a5e09e9 in CFStringCompareWithOptionsAndLocale ()
No symbol table info available.
#2  0x00007fff86a337b2 in
CompareLocalizedDescriptorsByTraitsAndPrecedence ()
No symbol table info available.
#3  0x00007fff8a601fdd in __CFSimpleMergeSort ()
No symbol table info available.
#4  0x00007fff8a602083 in __CFSimpleMergeSort ()
No symbol table info available.
#5  0x00007fff8a602083 in __CFSimpleMergeSort ()
No symbol table info available.
#6  0x00007fff8a602083 in __CFSimpleMergeSort ()
No symbol table info available.
#7  0x00007fff8a602067 in __CFSimpleMergeSort ()
No symbol table info available.
#8  0x00007fff8a602067 in __CFSimpleMergeSort ()
No symbol table info available.
#9  0x00007fff8a602067 in __CFSimpleMergeSort ()
No symbol table info available.
#10 0x00007fff8a602067 in __CFSimpleMergeSort ()
No symbol table info available.
#11 0x00007fff8a602067 in __CFSimpleMergeSort ()
No symbol table info available.
#12 0x00007fff8a601ef6 in CFSortIndexes ()
No symbol table info available.
#13 0x00007fff8a5d4e33 in CFQSortArray ()
No symbol table info available.
#14 0x00007fff8a5d4bb8 in CFArraySortValues ()
No symbol table info available.
#15 0x00007fff86a5db28 in TDescriptorSource::GetAllDescriptors ()
No symbol table info available.
#16 0x00007fff86a2a587 in TDescriptor::CreateMatchingDescriptors ()
No symbol table info available.
#17 0x00007fff8bbec599 in -[NSCTFontDescriptor
matchingFontDescriptorsWithMandatoryKeys:] ()
No symbol table info available.
#18 0x000000010017ae8e in ns_findfonts ()
No symbol table info available.
#19 0x000000010010fc02 in font_list_entities ()
No symbol table info available.
#20 0x0000000100111bb9 in font_find_for_lface ()
No symbol table info available.
#21 0x0000000100154e0b in fontset_find_font ()
No symbol table info available.
#22 0x00000001001519bf in fontset_font ()
No symbol table info available.
#23 0x00000001001517ed in face_for_char ()
No symbol table info available.
#24 0x0000000100015b8d in get_next_display_element ()
No symbol table info available.
#25 0x00000001000223b6 in display_line ()
No symbol table info available.
#26 0x000000010003e6eb in try_window_reusing_current_matrix ()
No symbol table info available.
#27 0x0000000100038b67 in redisplay_window ()
No symbol table info available.
---Type <return> to continue, or q <return> to quit---
#28 0x0000000100037cbd in redisplay_window_1 ()
No symbol table info available.
#29 0x00000001000febef in internal_condition_case_1 ()
No symbol table info available.
#30 0x000000010001de23 in redisplay_internal ()
No symbol table info available.
#31 0x000000010009b2f6 in read_char ()
No symbol table info available.
#32 0x0000000100097983 in read_key_sequence ()
No symbol table info available.
#33 0x0000000100096326 in command_loop_1 ()
No symbol table info available.
#34 0x00000001001000ba in internal_condition_case ()
No symbol table info available.
#35 0x00000001000a5adb in command_loop_2 ()
No symbol table info available.
#36 0x00000001000ffb57 in internal_catch ()
No symbol table info available.
#37 0x0000000100094a21 in recursive_edit_1 ()
No symbol table info available.
#38 0x0000000100094bd0 in Frecursive_edit ()
No symbol table info available.
#39 0x0000000100093bc0 in main ()
No symbol table info available.




In GNU Emacs 24.2.1 (x86_64-apple-darwin11.4.0, NS apple-appkit-1138.47)
 of 2012-09-26 on mine.local
Windowing system distributor `Apple', version 10.3.1138
Configured using:
 `configure '--prefix=/usr/local/Cellar/emacs/24.2' '--without-dbus'
 '--enable-locallisppath=/usr/local/share/emacs/site-lisp'
 '--infodir=/usr/local/Cellar/emacs/24.2/share/info/emacs' '--with-ns'
 '--disable-ns-self-contained' 'CC=cc''

Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: nil
  value of $LC_CTYPE: en_US.UTF-8
  value of $LC_MESSAGES: nil
  value of $LC_MONETARY: nil
  value of $LC_NUMERIC: nil
  value of $LC_TIME: nil
  value of $LANG: en_US.UTF-8
  value of $XMODIFIERS: nil
  locale-coding-system: utf-8-unix
  default enable-multibyte-characters: t

Major mode: Fundamental

Minor modes in effect:
  erc-track-mode: t
  global-auto-complete-mode: t
  display-time-mode: t
  show-paren-mode: t
  mouse-wheel-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t
  column-number-mode: t
  line-number-mode: t
  transient-mark-mode: t

Recent input:
ESC [ ? 1 ; 2 c ESC x r e p o TAB r TAB RET

Recent messages:
("/usr/local/Cellar/emacs/24.2/Emacs.app/Contents/MacOS/Emacs")
Ruby: ruby-1.9.3-p0 Gemset: global
Source file `/Users/mstump/.emacs.d/elpa/yaml-mode-0.0.7/yaml-mode.el'
newer than byte-compiled file
Source file `/Users/mstump/.emacs.d/elpa/clojure-mode-1.11.5/clojure-mode.el'
newer than byte-compiled file
For information about GNU Emacs and the GNU system, type C-h C-a.
Making completion list...

Load-path shadows:
/Users/mstump/.emacs.d/vendor/rinari/util/jump/which-func hides
/usr/local/Cellar/emacs/24.2/share/emacs/24.2/lisp/progmodes/which-func
~/.emacs.d/init hides /Users/mstump/.emacs.d/vendor/rinari/test/init
/usr/local/Cellar/emacs/24.2/share/emacs/24.2/lisp/emacs-lisp/ert
hides /Users/mstump/.emacs.d/vendor/rvm/tests/ert
~/.emacs.d/init hides /Users/mstump/.emacs.d/vendor/rinari/util/jump/test/init
/Users/mstump/.emacs.d/vendor/rinari/test/elunit hides
/Users/mstump/.emacs.d/vendor/rinari/util/jump/test/elunit
/usr/local/Cellar/emacs/24.2/share/emacs/24.2/lisp/emacs-lisp/ert
hides /Users/mstump/.emacs.d/vendor/rinari/util/test/ert/ert

Features:
(shadow sort gnus-util mail-extr emacsbug message rfc822 mml mml-sec
mm-decode mm-bodies mm-encode mail-parse rfc2231 mailabbrev gmm-utils
mailheader sendmail rfc2047 rfc2045 ietf-drums mm-util mail-prsvr
mail-utils help-mode view evernote-mode tree-widget hl-tags-mode
coffee-mode remember org-install erc-track erc-match tls erc-goodies erc
erc-backend erc-compat format-spec browse-kill-ring uniquify byte-opt
warnings ac-slime auto-complete-config auto-complete popup
clojure-jump-to-file midje-mode midje-mode-praise newcomment
clojure-test-mode slime bytecomp byte-compile cconv macroexp apropos
hideshow pp clojure-mode anything yaml-mode rhtml-mode rhtml-navigation
derived rhtml-sgml-hacks rhtml-ruby-hook sgml-mode rhtml-erb rhtml-fonts
rinari advice advice-preload jump inflections help-fns findr
ruby-compilation which-func imenu pcomplete inf-ruby edmacro kmacro
compile comint ansi-color ring ruby-mode regexp-opt rvm tango-dark-theme
ido markdown-mode thingatpt noutline outline easy-mmode color-theme
easymenu wid-edit time time-date paren anything-complete-autoloads
browse-kill-ring-autoloads clojure-test-mode-autoloads
clojure-mode-autoloads clojurescript-mode-autoloads
coffee-mode-autoloads color-theme-autoloads erc-nick-notify-autoloads
hideshowvis-autoloads hippie-expand-slime-autoloads magit-autoloads
markdown-mode-autoloads midje-mode-autoloads slime-fuzzy-autoloads
slime-autoloads yaml-mode-autoloads package tabulated-list cl tooltip
ediff-hook vc-hooks lisp-float-type mwheel ns-win tool-bar dnd fontset
image fringe lisp-mode register page menu-bar rfn-eshadow timer select
scroll-bar mouse jit-lock font-lock syntax facemenu font-core frame cham
georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao
korean japanese hebrew greek romanian slovak czech european ethiopic
indian cyrillic chinese case-table epa-hook jka-cmpr-hook help simple
abbrev minibuffer loaddefs button faces cus-face files text-properties
overlay sha1 md5 base64 format env code-pages mule custom widget
hashtable-print-readable backquote make-network-process ns multi-tty
emacs)

bug_report.txt
Description: Text document