Re: Emacs 22.1 reproducible crash

[Gardner Bell]

--- YAMAMOTO Mitsuharu <address@hidden> wrote:

> >>>>> On Tue, 31 Jul 2007 07:10:20 -0400 (EDT), Gardner Bell
> <address@hidden> said:
> 
> > After running make clean and make distclean the gmalloc.c from
> trunk
> > causes this segfault during make.
> 
> Could you try with the latest src/emacs.c and src/gmalloc.c in the
> EMACS_22_BASE branch?
> 
>  
>
http://cvs.savannah.gnu.org/viewvc/*checkout*/emacs/src/emacs.c?revision=1.401.2.2&root=emacs&pathrev=EMACS_22_BASE
>  
>
http://cvs.savannah.gnu.org/viewvc/*checkout*/emacs/src/gmalloc.c?revision=1.21.2.4&root=emacs&pathrev=EMACS_22_BASE
> 
>                                    YAMAMOTO Mitsuharu
>                               address@hidden
> 

Same thing, slightly different backtrace this time.  I have also
noticed that this is triggered much easier when using the mouse to
open, and close files.

(gdb) run
Starting program: /usr/local/bin/emacs 
[New LWP 100092]
[New Thread 0x836f000 (LWP 100092)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x836f000 (LWP 100092)]
0x081a0e80 in _free_internal_nolock (ptr=0x29a98000) at gmalloc.c:1327
1327              next->next = prev->next;

(gdb) where
#0  0x081a0e80 in _free_internal_nolock (ptr=0x29a98000) at
gmalloc.c:1327
#1  0x081a151b in _free_internal (ptr=0x29a98000) at gmalloc.c:1363
#2  0x08147fa1 in emacs_blocked_free (ptr=0x29a98000, ptr2=0x29a98100)
    at alloc.c:1207
#3  0x288cb98b in g_slice_get_config () from
/usr/local/lib/libglib-2.0.so.0
#4  0x288cbc41 in g_slice_get_config () from
/usr/local/lib/libglib-2.0.so.0
#5  0x288cbc95 in g_slice_get_config () from
/usr/local/lib/libglib-2.0.so.0
#6  0x288cc689 in g_slice_free1 () from /usr/local/lib/libglib-2.0.so.0
#7  0x288aa06d in g_hash_table_lookup_extended ()
   from /usr/local/lib/libglib-2.0.so.0
#8  0x288aa4f4 in g_hash_table_remove_all ()
   from /usr/local/lib/libglib-2.0.so.0
#9  0x288aa72d in g_hash_table_destroy () from
/usr/local/lib/libglib-2.0.so.0
#10 0x2841ddc0 in gtk_drag_finish () from
/usr/local/lib/libgtk-x11-2.0.so.0
#11 0x2885b40c in g_object_unref () from
/usr/local/lib/libgobject-2.0.so.0
#12 0x282c2626 in gtk_file_info_render_icon ()
   from /usr/local/lib/libgtk-x11-2.0.so.0
#13 0x2885b40c in g_object_unref () from
/usr/local/lib/libgobject-2.0.so.0
#14 0x283cf249 in gtk_tree_model_filter_convert_child_iter_to_iter ()
   from /usr/local/lib/libgtk-x11-2.0.so.0
#15 0x283cf3ce in gtk_tree_model_filter_convert_child_iter_to_iter ()
   from /usr/local/lib/libgtk-x11-2.0.so.0
#16 0x2885b40c in g_object_unref () from
/usr/local/lib/libgobject-2.0.so.0
---Type <return> to continue, or q <return> to quit---
#17 0x283e408b in gtk_tree_view_set_model ()
   from /usr/local/lib/libgtk-x11-2.0.so.0
#18 0x282add17 in gtk_file_chooser_button_new ()
   from /usr/local/lib/libgtk-x11-2.0.so.0
#19 0x2841e9dc in gtk_file_system_unix_new ()
   from /usr/local/lib/libgtk-x11-2.0.so.0
#20 0x2841eb89 in gtk_file_system_unix_new ()
   from /usr/local/lib/libgtk-x11-2.0.so.0
#21 0x288b5040 in g_source_is_destroyed () from
/usr/local/lib/libglib-2.0.so.0
#22 0x288b6cd5 in g_main_context_dispatch ()
   from /usr/local/lib/libglib-2.0.so.0
#23 0x288b9828 in g_main_context_check () from
/usr/local/lib/libglib-2.0.so.0
#24 0x288b9c15 in g_main_context_iteration ()
   from /usr/local/lib/libglib-2.0.so.0
#25 0x28303d1d in gtk_main_iteration () from
/usr/local/lib/libgtk-x11-2.0.so.0
#26 0x080f0623 in xg_get_file_name (f=0x870e200, 
    prompt=0x82bb28c "Find file: ", 
    default_filename=0x8874878 "/home/dan/emacs-22.1/", mustmatch_p=1, 
    only_dir_p=0) at gtkutil.c:1571
#27 0x080d0ec7 in Fx_file_dialog (prompt=136569160, dir=140336259, 
    default_filename=140294931, mustmatch=137492529,
only_dir_p=137492481)
    at xfns.c:5591
#28 0x0812887e in Fread_file_name (prompt=136569163, dir=140336259, 
---Type <return> to continue, or q <return> to quit---
    default_filename=140294931, mustmatch=137492529, initial=137492481,

    predicate=137492481) at fileio.c:6407
#29 0x0815bafc in Ffuncall (nargs=5, args=0xbfbfe140) at eval.c:3016
#30 0x08185a0c in Fbyte_code (bytestr=136171491, vector=136171508,
maxdepth=Variable "maxdepth" is not available.
)
    at bytecode.c:679
#31 0x0815b526 in funcall_lambda (fun=136171452, nargs=2, 
    arg_vector=0xbfbfe284) at eval.c:3184
#32 0x0815b930 in Ffuncall (nargs=3, args=0xbfbfe280) at eval.c:3054
#33 0x08185a0c in Fbyte_code (bytestr=136569107, vector=136569124,
maxdepth=Variable "maxdepth" is not available.
)
    at bytecode.c:679
#34 0x0815b526 in funcall_lambda (fun=136569076, nargs=0, 
    arg_vector=0xbfbfe3b4) at eval.c:3184
#35 0x0815b930 in Ffuncall (nargs=1, args=0xbfbfe3b0) at eval.c:3054
#36 0x0815d2c9 in apply1 (fn=140259473, arg=137492481) at eval.c:2738
#37 0x08158ea0 in Fcall_interactively (function=140259473, 
    record_flag=137492481, keys=137492481) at callint.c:406
#38 0x080f8354 in Fcommand_execute (cmd=140259473,
record_flag=137492481, 
    keys=137492481, special=137492481) at keyboard.c:10036
#39 0x08103869 in command_loop_1 () at keyboard.c:1873
#40 0x0815a54b in internal_condition_case (bfun=0x81034f0
<command_loop_1>,  handlers=137552497, hfun=0x80fde80 <cmd_error>) at
eval.c:1481
#41 0x080fd2d3 in command_loop_2 () at keyboard.c:1329
#42 0x0815a605 in internal_catch (tag=137541593, 
---Type <return> to continue, or q <return> to quit---
    func=0x80fd2b0 <command_loop_2>, arg=137492481) at eval.c:1222
#43 0x080fdcbc in command_loop () at keyboard.c:1308
#44 0x080fe05a in recursive_edit_1 () at keyboard.c:1006
#45 0x080fe146 in Frecursive_edit () at keyboard.c:1067
#46 0x080f4375 in main (argc=1, argv=0xbfbfe87c) at emacs.c:1769
(gdb) return
Make _free_internal_nolock return now? (y or n) y
#0  _free_internal (
    ptr=0x29a98000) at gmalloc.c:1364
1364      UNLOCK ();
(gdb)