segfault on Solaris 8 when using frames

[Jim Morris]

In GNU Emacs 21.3.2 (i386-pc-solaris2.8, X toolkit)
of 2004-08-24 on aragorn
configured using `configure  --disable-faces --prefix=/usr/local 
--with-x-toolkit=lucid --with-gcc --with-jpeg --with-png --with-xpm 
--with-x'
Important settings:
 value of $LC_ALL: nil
 value of $LC_COLLATE: nil
 value of $LC_CTYPE: nil
 value of $LC_MESSAGES: nil
 value of $LC_MONETARY: nil
 value of $LC_NUMERIC: nil
 value of $LC_TIME: nil
 value of $LANG: C
 locale-coding-system: nil
 default-enable-multibyte-characters: t

Please describe exactly what actions triggered the bug
and the precise symptoms of the bug:

When starting emacs under X11, emacs segfaults. It appears that
emacsFrameClass -> core_class.superclass pointer is being corrupted.  This
same problem also appears on Solaris 8/Sparc.  On both platforms,
emacs is being compiled with gcc 3.4.1 and binutils 2.14.

GNU gdb 6.2
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain 
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-pc-solaris2.8"...
Core was generated by `./emacs'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/openwin/lib/libXaw.so.5...done.
Loaded symbols for /usr/openwin/lib/libXaw.so.5
Reading symbols from /usr/openwin/lib/libXmu.so.4...done.
Loaded symbols for /usr/openwin/lib/libXmu.so.4
Reading symbols from /usr/openwin/lib/libXt.so.4...done.
Loaded symbols for /usr/openwin/lib/libXt.so.4
Reading symbols from /usr/openwin/lib/libSM.so.6...done.
Loaded symbols for /usr/openwin/lib/libSM.so.6
Reading symbols from /usr/openwin/lib/libICE.so.6...done.
Loaded symbols for /usr/openwin/lib/libICE.so.6
Reading symbols from /usr/openwin/lib/libXext.so.0...done.
Loaded symbols for /usr/openwin/lib/libXext.so.0
Reading symbols from /usr/opt/lib/libjpeg.so.62...done.
Loaded symbols for /usr/local/lib/libjpeg.so.62
Reading symbols from /usr/opt/lib/libpng.so.3...done.
Loaded symbols for /usr/local/lib/libpng.so.3
Reading symbols from /usr/opt/lib/libz.so...done.
Loaded symbols for /usr/local/lib/libz.so
Reading symbols from /usr/lib/libm.so.1...done.
Loaded symbols for /usr/lib/libm.so.1
Reading symbols from /usr/opt/lib/libXpm.so.4.11...done.
Loaded symbols for /usr/local/lib/libXpm.so.4.11
Reading symbols from /usr/openwin/lib/libX11.so.4...done.
Loaded symbols for /usr/openwin/lib/libX11.so.4
Reading symbols from /usr/lib/libsocket.so.1...done.
Loaded symbols for /usr/lib/libsocket.so.1
Reading symbols from /usr/lib/libnsl.so.1...done.
Loaded symbols for /usr/lib/libnsl.so.1
Reading symbols from /usr/lib/libkstat.so.1...done.
Loaded symbols for /usr/lib/libkstat.so.1
Reading symbols from /usr/lib/libkvm.so.1...done.
Loaded symbols for /usr/lib/libkvm.so.1
Reading symbols from /usr/lib/libelf.so.1...done.
Loaded symbols for /usr/lib/libelf.so.1
Reading symbols from /usr/lib/libcurses.so.1...done.
Loaded symbols for /usr/lib/libcurses.so.1
Reading symbols from /usr/lib/libc.so.1...done.
Loaded symbols for /usr/lib/libc.so.1
Reading symbols from /usr/lib/libdl.so.1...done.
Loaded symbols for /usr/lib/libdl.so.1
Reading symbols from /usr/openwin/lib/libdga.so.1...done.
Loaded symbols for /usr/openwin/lib/libdga.so.1
Reading symbols from /usr/lib/libmp.so.2...done.
Loaded symbols for /usr/lib/libmp.so.2
#0  0xdf74aab0 in _libc_kill () from /usr/lib/libc.so.1
DISPLAY = :0.0
TERM = dtterm
Breakpoint 1 at 0x8102fc4: file emacs.c, line 387.
Breakpoint 2 at 0x80df445: file xterm.c, line 11997.
(gdb) set pagination off
(gdb) where
#0  0xdf74aab0 in _libc_kill () from /usr/lib/libc.so.1
#1  0xdf74a470 in kill () from /usr/lib/libc.so.1
#2  0x08102fb9 in fatal_error_signal (sig=11) at emacs.c:354
#3  <signal handler called>
#4  0xdfaf2c95 in XtInitializeWidgetClass () from 
/usr/openwin/lib/libXt.so.4
#5  0xdfaf35de in _XtCreateWidget () from /usr/openwin/lib/libXt.so.4
#6  0xdfaf3798 in XtCreateWidget () from /usr/openwin/lib/libXt.so.4
#7  0x080ebdb5 in x_window (f=0x853e800, window_prompting=0, 
minibuffer_only=0) at xfns.c:3644
#8  0x080edbc0 in Fx_create_frame (parms=1481199020) at xfns.c:4431
#9  0x0817ed0d in Ffuncall (nargs=2, args=0x8046718) at eval.c:2659
#10 0x081ba818 in Fbyte_code (bytestr=942332048, vector=1210767584, 
maxdepth=5) at bytecode.c:716
#11 0x0817f62e in funcall_lambda (fun=1210767460, nargs=1, 
arg_vector=0x80468f4) at eval.c:2851
#12 0x0817ef77 in Ffuncall (nargs=2, args=0x80468f0) at eval.c:2707
#13 0x081ba818 in Fbyte_code (bytestr=942286556, vector=1210722048, 
maxdepth=3) at bytecode.c:716
#14 0x0817f62e in funcall_lambda (fun=1210721964, nargs=1, 
arg_vector=0x8046ac4) at eval.c:2851
#15 0x0817ef77 in Ffuncall (nargs=2, args=0x8046ac0) at eval.c:2707
#16 0x081ba818 in Fbyte_code (bytestr=942282892, vector=1210718452, 
maxdepth=4) at bytecode.c:716
#17 0x0817f62e in funcall_lambda (fun=1210718320, nargs=0, 
arg_vector=0x8046c94) at eval.c:2851
#18 0x0817ef77 in Ffuncall (nargs=1, args=0x8046c90) at eval.c:2707
#19 0x081ba818 in Fbyte_code (bytestr=942437568, vector=1210874280, 
maxdepth=5) at bytecode.c:716
#20 0x0817f62e in funcall_lambda (fun=1210873000, nargs=0, 
arg_vector=0x8046e74) at eval.c:2851
#21 0x0817ef77 in Ffuncall (nargs=1, args=0x8046e70) at eval.c:2707
#22 0x081ba818 in Fbyte_code (bytestr=942433632, vector=1210869232, 
maxdepth=5) at bytecode.c:716
#23 0x0817f62e in funcall_lambda (fun=1210869064, nargs=0, 
arg_vector=0x8046fd0) at eval.c:2851
#24 0x0817f239 in apply_lambda (fun=1210869064, args=405732356, 
eval_flag=1) at eval.c:2770
#25 0x0817de02 in Feval (form=1480198516) at eval.c:2055
#26 0x08105e58 in top_level_2 () at keyboard.c:1254
#27 0x0817c5bc in internal_condition_case (bfun=0x8105e45 <top_level_2>, 
handlers=405854428, hfun=0x8105b16 <cmd_error>) at eval.c:1267
#28 0x08105e8a in top_level_1 () at keyboard.c:1262
#29 0x0817c119 in internal_catch (tag=405806756, func=0x8105e5a 
<top_level_1>, arg=405732356) at eval.c:1030
#30 0x08105dcc in command_loop () at keyboard.c:1223
#31 0x0810589d in recursive_edit_1 () at keyboard.c:950
#32 0x081059da in Frecursive_edit () at keyboard.c:1006
#33 0x08104460 in main (argc=1, argv=0x80473f0, envp=0x80473f8) at 
emacs.c:1547
(gdb) print &widgetClassRec
$1 = (<data variable, no debug info> *) 0xdfb32508
(gdb) print emacsFrameClass -> core_class.superclass
$2 = 0xbf664a10
(gdb) print *emacsFrameClass
$3 = {
 core_class = {
   superclass = 0xbf664a10,
   class_name = 0x81f6885 "EmacsFrame",
   widget_size = 164,
   class_initialize = 0,
   class_part_initialize = 0,
   class_inited = 0 '\0',
   initialize = 0x81dc061 <EmacsFrameInitialize>,
   initialize_hook = 0,
   realize = 0x81dc0ae <EmacsFrameRealize>,
   actions = 0x0,
   num_actions = 0,
   resources = 0x81ff720,
   num_resources = 13,
   xrm_class = 0,
   compress_motion = 1 '\001',
   compress_exposure = 1 '\001',
   compress_enterleave = 1 '\001',
   visible_interest = 0 '\0',
   destroy = 0x81dc10b <EmacsFrameDestroy>,
   resize = 0x81dc20a <EmacsFrameResize>,
   expose = 0x804eba0 <_XtInherit>,
   set_values = 0x81dc2a2 <EmacsFrameSetValues>,
   set_values_hook = 0,
   set_values_almost = 0x804eba0 <_XtInherit>,
   get_values_hook = 0,
   accept_focus = 0x804eba0 <_XtInherit>,
   version = 11006,
   callback_private = 0x0,
   tm_table = 0x0,
   query_geometry = 0x81dc491 <EmacsFrameQueryGeometry>,
   display_accelerator = 0x804eba0 <_XtInherit>,
   extension = 0x0
 }
}
(gdb) print widgetClassRec
$4 = {
 core_class = {
   superclass = 0xdfb32488,
   class_name = 0xdfb3257c "Core",
   widget_size = 116,
   class_initialize = 0,
   class_part_initialize = 0xdfaf2810 <CoreClassPartInitialize>,
   class_inited = 7 '\a',
   initialize = 0xdfaf28c4 <CoreInitialize>,
   initialize_hook = 0,
   realize = 0xdfaf2948 <CoreRealize>,
   actions = 0x0,
   num_actions = 0,
   resources = 0x8457380,
   num_resources = 18,
   xrm_class = 331,
   compress_motion = 0 '\0',
   compress_exposure = 1 '\001',
   compress_enterleave = 0 '\0',
   visible_interest = 0 '\0',
   destroy = 0xdfaf2974 <CoreDestroy>,
   resize = 0,
   expose = 0,
   set_values = 0xdfaf29c4 <CoreSetValues>,
   set_values_hook = 0,
   set_values_almost = 0xdfaf2b48 <CoreSetValuesAlmost>,
   get_values_hook = 0,
   accept_focus = 0,
   version = 11006,
   callback_private = 0x8366e48,
   tm_table = 0x0,
   query_geometry = 0,
   display_accelerator = 0,
   extension = 0x0
 }
}

Jim