Crash in gnus

[Vin Shelton]

Greetings,

While using gnus to read the cygwin mailing list from gmane.os.cygwin,
I sometimes get a crash.  Here is the backtrace from running under
gdb.  This is an up-to-the-minute emacs, fresh from bzr.  I have been
seeing this crash for a month or two:

Starting program: /opt/bin/emacs
[Thread debugging using libthread_db enabled]

Program received signal SIGSEGV, Segmentation fault.
0x00000000004b4c98 in x_draw_glyph_string_background
(s=0x7fffffffb830, force_p=1)
    at /opt/src/emacs-2011-10-26/src/xterm.c:1213
1213          else if (FONT_HEIGHT (s->font) < s->height - 2 * box_line_width
(gdb) bt
#0  0x00000000004b4c98 in x_draw_glyph_string_background
(s=0x7fffffffb830, force_p=1)
    at /opt/src/emacs-2011-10-26/src/xterm.c:1213
#1  0x00000000004ba81c in x_draw_glyph_string (s=0x7fffffffb830)
    at /opt/src/emacs-2011-10-26/src/xterm.c:2743
#2  0x0000000000446e57 in draw_glyphs (w=0x226b7b0, x=1253, row=<value
optimized out>,
    area=TEXT_AREA, start=0, end=<value optimized out>,
hl=DRAW_NORMAL_TEXT, overlaps=0)
    at /opt/src/emacs-2011-10-26/src/xdisp.c:23020
#3  0x000000000044d05e in x_write_glyphs (start=<value optimized out>, len=26)
    at /opt/src/emacs-2011-10-26/src/xdisp.c:24654
#4  0x000000000040de72 in update_text_area (w=0x226b7b0, vpos=30,
    mouse_face_overwritten_p=0x7fffffffbcbc)
    at /opt/src/emacs-2011-10-26/src/dispnew.c:3765
#5  update_window_line (w=0x226b7b0, vpos=30,
mouse_face_overwritten_p=0x7fffffffbcbc)
    at /opt/src/emacs-2011-10-26/src/dispnew.c:4006
#6  0x000000000040e6f5 in update_window (w=<value optimized out>,
    force_p=<value optimized out>) at
/opt/src/emacs-2011-10-26/src/dispnew.c:3625
#7  0x00000000004109e3 in update_window_tree (w=0x226b7b0, force_p=1)
    at /opt/src/emacs-2011-10-26/src/dispnew.c:3326
#8  0x00000000004109bf in update_window_tree (w=0x2269e60, force_p=1)
    at /opt/src/emacs-2011-10-26/src/dispnew.c:3324
#9  0x0000000000413ad8 in update_frame (f=0xf63540, force_p=1,
inhibit_hairy_id_p=0)
    at /opt/src/emacs-2011-10-26/src/dispnew.c:3253
#10 0x000000000043fee0 in redisplay_internal ()
    at /opt/src/emacs-2011-10-26/src/xdisp.c:13167
#11 0x00000000004f4960 in read_char (commandflag=1, nmaps=2,
maps=0x7fffffffdc10,
    prev_event=11884882, used_mouse_menu=0x7fffffffddc4, end_time=0x0)
    at /opt/src/emacs-2011-10-26/src/keyboard.c:2443
#12 0x00000000004f6eb4 in read_key_sequence (keybuf=0x7fffffffde20,
prompt=11884882,
    dont_downcase_last=0, can_return_switch_frame=1,
fix_current_buffer=1, bufsize=30)
    at /opt/src/emacs-2011-10-26/src/keyboard.c:9290
#13 0x00000000004f8a7b in command_loop_1 ()
    at /opt/src/emacs-2011-10-26/src/keyboard.c:1447
#14 0x000000000055e766 in internal_condition_case (bfun=0x4f88b0
<command_loop_1>,
    handlers=11937026, hfun=0x4ed820 <cmd_error>)
    at /opt/src/emacs-2011-10-26/src/eval.c:1499
#15 0x00000000004ec24e in command_loop_2 (ignore=<value optimized out>)
    at /opt/src/emacs-2011-10-26/src/keyboard.c:1158
#16 0x000000000055e648 in internal_catch (tag=Cannot access memory at
address 0xfffffffffffffff7
)
    at /opt/src/emacs-2011-10-26/src/eval.c:1256
#17 0x00000000004ed2da in command_loop () at
/opt/src/emacs-2011-10-26/src/keyboard.c:1137
#18 recursive_edit_1 () at /opt/src/emacs-2011-10-26/src/keyboard.c:757
#19 0x00000000004ed61c in Frecursive_edit ()
    at /opt/src/emacs-2011-10-26/src/keyboard.c:821
#20 0x00000000004e7cdb in main (argc=<value optimized out>,
argv=<value optimized out>)
    at /opt/src/emacs-2011-10-26/src/emacs.c:1706
(gdb) q
A debugging session is active.

        Inferior 1 [process 30497] will be killed.

Quit anyway? (y or n) y

Please let me know if you need any more info.

Regards,
  Vin Shelton