Regular crashes with abort() in mark_maybe_pointer with trunk

[Julien Danjou]

Hi,

Since at least yesterday, latest trunk version crashes regularly.

I've grabbed 2 backtraces so far, attached.

I'm sure that the change responsible has been done between the commits:

commit 1e211d886c96420904ad197cfee7fce7ae7b9d83
Author: Stefan Monnier <address@hidden>
Date:   Fri Jun 22 09:42:38 2012 -0400

    Provide generalized variables in core Elisp.


commit b17778189e1df0a56e48a5f6f0b52f7bebbdfdd7
Author: Julien Danjou <address@hidden>
Date:   Thu Jun 28 12:40:24 2012 +0200

    term: rework color cutomizing


I know this because emacs-snapshot for Debian that I package worked
correctly for the 20120622 version, and stopped working with this last
commit. Something in between changed something causing this.

If nobody has an idea, I can try to bisect but that will require
sometimes since the crash is still random to me (not sure how to
reproduce for sure).

(gdb) run
Starting program: /usr/bin/emacs-snapshot 
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7fffeb001700 (LWP 15764)]
[New Thread 0x7fffea800700 (LWP 15765)]

Program received signal SIGABRT, Aborted.
0x00007ffff1fcb757 in kill () at ../sysdeps/unix/syscall-template.S:82
82  ../sysdeps/unix/syscall-template.S: No such file or directory.
(gdb) bt
#0  0x00007ffff1fcb757 in kill () at ../sysdeps/unix/syscall-template.S:82
#1  0x00000000004feb15 in abort () at emacs.c:390
#2  0x000000000055e5b1 in mark_maybe_pointer (p=<optimized out>) at alloc.c:4571
#3  mark_memory (end=<optimized out>, start=<optimized out>) at alloc.c:4656
#4  mark_stack () at alloc.c:4895
#5  Fgarbage_collect () at alloc.c:5484
#6  0x0000000000575e05 in Ffuncall (nargs=2, address@hidden) at eval.c:2757
#7  0x00000000005acda0 in exec_byte_code (bytestr=<optimized out>, 
vector=36116069,
maxdepth=<optimized out>, args_template=<optimized out>, address@hidden, 
args=<optimized
out>, address@hidden)
    at bytecode.c:784
#8  0x0000000000575bd1 in funcall_lambda (fun=36116413, address@hidden,
address@hidden) at eval.c:3052
#9  0x0000000000575eeb in Ffuncall (nargs=4, address@hidden) at eval.c:2881
#10 0x00000000005acda0 in exec_byte_code (bytestr=<optimized out>, 
vector=36595181,
maxdepth=<optimized out>, args_template=<optimized out>, address@hidden, 
args=<optimized
out>, address@hidden)
    at bytecode.c:784
#11 0x0000000000575bd1 in funcall_lambda (fun=36595453, address@hidden,
address@hidden) at eval.c:3052
#12 0x0000000000575eeb in Ffuncall (nargs=1, address@hidden) at eval.c:2881
#13 0x00000000005acda0 in exec_byte_code (bytestr=<optimized out>, 
vector=36595621,
maxdepth=<optimized out>, args_template=<optimized out>, address@hidden, 
args=<optimized
out>, address@hidden)
    at bytecode.c:784
#14 0x0000000000575bd1 in funcall_lambda (fun=36596245, address@hidden,
address@hidden) at eval.c:3052
#15 0x0000000000575eeb in Ffuncall (nargs=2, address@hidden) at eval.c:2881
#16 0x00000000005acda0 in exec_byte_code (bytestr=<optimized out>, 
vector=36647413,
maxdepth=<optimized out>, args_template=<optimized out>, address@hidden, 
args=<optimized
out>, address@hidden)
    at bytecode.c:784
#17 0x0000000000575bd1 in funcall_lambda (fun=36632029, address@hidden,
address@hidden) at eval.c:3052
#18 0x0000000000575eeb in Ffuncall (nargs=4, address@hidden) at eval.c:2881
#19 0x00000000005acda0 in exec_byte_code (bytestr=<optimized out>, 
vector=36650605,
maxdepth=<optimized out>, args_template=<optimized out>, address@hidden, 
args=<optimized
out>, address@hidden)
    at bytecode.c:784
#20 0x0000000000575bd1 in funcall_lambda (fun=36650949, address@hidden,
address@hidden) at eval.c:3052
#21 0x0000000000575eeb in Ffuncall (nargs=6, address@hidden) at eval.c:2881
#22 0x00000000005acda0 in exec_byte_code (bytestr=<optimized out>, 
vector=36650029,
maxdepth=<optimized out>, args_template=<optimized out>, address@hidden, 
args=<optimized
out>, address@hidden)
    at bytecode.c:784
#23 0x0000000000575bd1 in funcall_lambda (fun=36650541, address@hidden,
address@hidden) at eval.c:3052
#24 0x0000000000575eeb in Ffuncall (nargs=3, address@hidden) at eval.c:2881
#25 0x00000000005acda0 in exec_byte_code (bytestr=<optimized out>, 
vector=36650997,
maxdepth=<optimized out>, args_template=<optimized out>, address@hidden, 
args=<optimized
out>, address@hidden)
    at bytecode.c:784
#26 0x0000000000575bd1 in funcall_lambda (fun=36651141, address@hidden,
address@hidden) at eval.c:3052
#27 0x0000000000575eeb in Ffuncall (address@hidden, address@hidden) at
eval.c:2881
#28 0x0000000000576407 in apply1 (address@hidden, address@hidden) at eval.c:2556
#29 0x0000000000571fdd in Fcall_interactively (function=34451250, 
record_flag=12014114,
keys=12049333) at callint.c:378
#30 0x0000000000576077 in Ffuncall (address@hidden, address@hidden) at
eval.c:2827
#31 0x00000000005762b4 in call3 (fn=<optimized out>, arg1=<optimized out>, 
arg2=<optimized
out>, arg3=<optimized out>) at eval.c:2620
#32 0x00000000004ffa8d in Fcommand_execute (cmd=<optimized out>, 
record_flag=<optimized out>,
keys=<optimized out>, special=<optimized out>) at keyboard.c:10342
#33 0x000000000050f0fb in command_loop_1 () at keyboard.c:1573
#34 0x00000000005744b3 in internal_condition_case (address@hidden 
<command_loop_1>,
handlers=12065890, address@hidden <cmd_error>) at eval.c:1333
#35 0x000000000050208e in command_loop_2 (address@hidden) at keyboard.c:1155
#36 0x00000000005743ab in internal_catch (tag=<error reading variable: Cannot 
access memory at
address 0x3d68>, address@hidden <command_loop_2>, arg=12014114) at eval.c:1090
#37 0x0000000000503747 in command_loop () at keyboard.c:1134
#38 recursive_edit_1 () at keyboard.c:754
#39 0x0000000000503a6a in Frecursive_edit () at keyboard.c:818
#40 0x00000000004187bd in main (argc=1, argv=<optimized out>) at emacs.c:1693

Second backtrace:
(gdb) bt
#0  0x00007ffff1fcb757 in kill () at ../sysdeps/unix/syscall-template.S:82
#1  0x00000000004fea15 in abort () at emacs.c:390
#2  0x000000000055e4b1 in mark_maybe_pointer (p=<optimized out>) at alloc.c:4571
#3  mark_memory (end=<optimized out>, start=<optimized out>) at alloc.c:4656
#4  mark_stack () at alloc.c:4895
#5  Fgarbage_collect () at alloc.c:5485
#6  0x00000000005ad178 in exec_byte_code (bytestr=<optimized out>, 
vector=<optimized out>, maxdepth=<optimized out>, args_template=<optimized 
out>, address@hidden, args=<optimized out>, address@hidden)
    at bytecode.c:819
#7  0x0000000000575af1 in funcall_lambda (fun=39389517, address@hidden, 
address@hidden) at eval.c:3052
#8  0x0000000000575e0b in Ffuncall (nargs=2, address@hidden) at eval.c:2881
#9  0x00000000005accc0 in exec_byte_code (bytestr=<optimized out>, 
vector=40113197, maxdepth=<optimized out>, args_template=<optimized out>, 
address@hidden, args=<optimized out>, address@hidden)
    at bytecode.c:784
#10 0x0000000000575af1 in funcall_lambda (fun=40113581, address@hidden, 
address@hidden) at eval.c:3052
#11 0x0000000000575e0b in Ffuncall (nargs=5, address@hidden) at eval.c:2881
#12 0x00000000005accc0 in exec_byte_code (bytestr=<optimized out>, 
vector=36684005, maxdepth=<optimized out>, args_template=<optimized out>, 
nargs=<optimized out>, args=<optimized out>) at bytecode.c:784
#13 0x0000000000575484 in eval_sub (address@hidden) at eval.c:2173
#14 0x00000000005781af in internal_lisp_condition_case (var=12014114, 
bodyform=36617366, handlers=36617030) at eval.c:1287
#15 0x00000000005ad5f3 in exec_byte_code (bytestr=<optimized out>, 
vector=<optimized out>, maxdepth=<optimized out>, args_template=<optimized 
out>, address@hidden, args=<optimized out>, address@hidden)
    at bytecode.c:980
#16 0x0000000000575af1 in funcall_lambda (fun=36661557, address@hidden, 
address@hidden) at eval.c:3052
#17 0x0000000000575e0b in Ffuncall (nargs=5, address@hidden) at eval.c:2881
#18 0x00000000005accc0 in exec_byte_code (bytestr=<optimized out>, 
vector=37027173, maxdepth=<optimized out>, args_template=<optimized out>, 
address@hidden, args=<optimized out>, address@hidden)
    at bytecode.c:784
#19 0x0000000000575af1 in funcall_lambda (fun=37027549, address@hidden, 
address@hidden) at eval.c:3052
#20 0x0000000000575e0b in Ffuncall (nargs=3, address@hidden) at eval.c:2881
#21 0x00000000005accc0 in exec_byte_code (bytestr=<optimized out>, 
vector=37539117, maxdepth=<optimized out>, args_template=<optimized out>, 
address@hidden, args=<optimized out>, address@hidden)
    at bytecode.c:784
#22 0x0000000000575af1 in funcall_lambda (fun=37565189, address@hidden, 
address@hidden) at eval.c:3052
#23 0x0000000000575e0b in Ffuncall (nargs=3, address@hidden) at eval.c:2881
#24 0x00000000005accc0 in exec_byte_code (bytestr=<optimized out>, 
vector=39241109, maxdepth=<optimized out>, args_template=<optimized out>, 
address@hidden, args=<optimized out>, address@hidden)
    at bytecode.c:784
#25 0x0000000000575af1 in funcall_lambda (fun=39241565, address@hidden, 
address@hidden) at eval.c:3052
#26 0x0000000000575e0b in Ffuncall (nargs=5, address@hidden) at eval.c:2881
#27 0x00000000005accc0 in exec_byte_code (bytestr=<optimized out>, 
vector=39241725, maxdepth=<optimized out>, args_template=<optimized out>, 
address@hidden, args=<optimized out>, address@hidden)
    at bytecode.c:784
#28 0x0000000000575af1 in funcall_lambda (fun=39241789, address@hidden, 
address@hidden) at eval.c:3052
#29 0x0000000000575e0b in Ffuncall (nargs=2, address@hidden) at eval.c:2881
#30 0x00000000005accc0 in exec_byte_code (bytestr=<optimized out>, 
vector=39261117, maxdepth=<optimized out>, args_template=<optimized out>, 
address@hidden, args=<optimized out>, address@hidden)
    at bytecode.c:784
#31 0x0000000000575af1 in funcall_lambda (fun=39261389, address@hidden, 
address@hidden) at eval.c:3052
#32 0x0000000000575e0b in Ffuncall (nargs=4, address@hidden) at eval.c:2881
#33 0x00000000005accc0 in exec_byte_code (bytestr=<optimized out>, 
vector=39260693, maxdepth=<optimized out>, args_template=<optimized out>, 
address@hidden, args=<optimized out>, address@hidden)
    at bytecode.c:784
#34 0x0000000000575af1 in funcall_lambda (fun=39260957, address@hidden, 
address@hidden) at eval.c:3052
#35 0x0000000000575e0b in Ffuncall (nargs=1, address@hidden) at eval.c:2881
#36 0x00000000005accc0 in exec_byte_code (bytestr=<optimized out>, 
vector=39240637, maxdepth=<optimized out>, args_template=<optimized out>, 
address@hidden, args=<optimized out>, address@hidden)
    at bytecode.c:784
#37 0x0000000000575af1 in funcall_lambda (fun=39240965, address@hidden, 
address@hidden) at eval.c:3052
#38 0x0000000000575e0b in Ffuncall (nargs=1, args=0x7fffffffc9a0) at eval.c:2881
#39 0x00000000005762c9 in funcall_nil (nargs=<optimized out>, args=<optimized 
out>) at eval.c:2337
#40 0x00000000005748c5 in run_hook_with_args (nargs=1, args=0x7fffffffc9a0, 
funcall=0x5762c0 <funcall_nil>) at eval.c:2526
#41 0x0000000000574a86 in Frun_hooks (nargs=1, args=0x7fffffffcb68) at 
eval.c:2364
#42 0x000000000057601c in Ffuncall (address@hidden, address@hidden) at 
eval.c:2802
#43 0x0000000000576f9f in Fapply (nargs=2, args=0x7fffffffcb60) at eval.c:2272
#44 0x000000000057601c in Ffuncall (nargs=<optimized out>, address@hidden) at 
eval.c:2802
#45 0x00000000005accc0 in exec_byte_code (bytestr=<optimized out>, 
vector=29036341, maxdepth=<optimized out>, args_template=<optimized out>, 
address@hidden, args=<optimized out>, address@hidden)
    at bytecode.c:784
#46 0x0000000000575af1 in funcall_lambda (fun=21265109, address@hidden, 
address@hidden) at eval.c:3052
#47 0x0000000000575e0b in Ffuncall (nargs=2, address@hidden) at eval.c:2881
#48 0x00000000005accc0 in exec_byte_code (bytestr=<optimized out>, 
vector=37332285, maxdepth=<optimized out>, args_template=<optimized out>, 
address@hidden, args=<optimized out>, address@hidden)
    at bytecode.c:784
#49 0x0000000000575af1 in funcall_lambda (fun=37332909, address@hidden, 
address@hidden) at eval.c:3052
#50 0x0000000000575e0b in Ffuncall (nargs=2, address@hidden) at eval.c:2881
#51 0x00000000005accc0 in exec_byte_code (bytestr=<optimized out>, 
vector=37362885, maxdepth=<optimized out>, args_template=<optimized out>, 
address@hidden, args=<optimized out>, address@hidden)
    at bytecode.c:784
#52 0x0000000000575af1 in funcall_lambda (fun=37363141, address@hidden, 
address@hidden) at eval.c:3052
#53 0x0000000000575e0b in Ffuncall (nargs=4, address@hidden) at eval.c:2881
---Type <return> to continue, or q <return> to quit---
#54 0x00000000005accc0 in exec_byte_code (bytestr=<optimized out>, 
vector=37366093, maxdepth=<optimized out>, args_template=<optimized out>, 
address@hidden, args=<optimized out>, address@hidden)
    at bytecode.c:784
#55 0x0000000000575af1 in funcall_lambda (fun=37366437, address@hidden, 
address@hidden) at eval.c:3052
#56 0x0000000000575e0b in Ffuncall (nargs=6, address@hidden) at eval.c:2881
#57 0x00000000005accc0 in exec_byte_code (bytestr=<optimized out>, 
vector=37365517, maxdepth=<optimized out>, args_template=<optimized out>, 
address@hidden, args=<optimized out>, address@hidden)
    at bytecode.c:784
#58 0x0000000000575af1 in funcall_lambda (fun=37366029, address@hidden, 
address@hidden) at eval.c:3052
#59 0x0000000000575e0b in Ffuncall (nargs=3, address@hidden) at eval.c:2881
#60 0x00000000005accc0 in exec_byte_code (bytestr=<optimized out>, 
vector=37366485, maxdepth=<optimized out>, args_template=<optimized out>, 
address@hidden, args=<optimized out>, address@hidden)
    at bytecode.c:784
#61 0x0000000000575af1 in funcall_lambda (fun=37366629, address@hidden, 
address@hidden) at eval.c:3052
#62 0x0000000000575e0b in Ffuncall (address@hidden, address@hidden) at 
eval.c:2881
#63 0x0000000000576327 in apply1 (address@hidden, address@hidden) at eval.c:2556
#64 0x0000000000571efd in Fcall_interactively (function=36351522, 
record_flag=12014114, keys=12049333) at callint.c:378
#65 0x0000000000575f97 in Ffuncall (address@hidden, address@hidden) at 
eval.c:2827
#66 0x00000000005761d4 in call3 (fn=<optimized out>, arg1=<optimized out>, 
arg2=<optimized out>, arg3=<optimized out>) at eval.c:2620
#67 0x00000000004ff98d in Fcommand_execute (cmd=<optimized out>, 
record_flag=<optimized out>, keys=<optimized out>, special=<optimized out>) at 
keyboard.c:10342
#68 0x000000000050effb in command_loop_1 () at keyboard.c:1573
#69 0x00000000005743d3 in internal_condition_case (address@hidden 
<command_loop_1>, handlers=12065890, address@hidden <cmd_error>) at eval.c:1333
#70 0x0000000000501f8e in command_loop_2 (address@hidden) at keyboard.c:1155
#71 0x00000000005742cb in internal_catch (tag=<error reading variable: Cannot 
access memory at address 0x1f20>, address@hidden <command_loop_2>, 
arg=12014114) at eval.c:1090
#72 0x0000000000503647 in command_loop () at keyboard.c:1134
#73 recursive_edit_1 () at keyboard.c:754
#74 0x000000000050396a in Frecursive_edit () at keyboard.c:818
#75 0x00000000004187bd in main (argc=1, argv=<optimized out>) at emacs.c:1693



-- 
           Julien

pgpKUiSahEP8S.pgp
Description: PGP signature