EXC_BAD_ACCESS on Mac

[山本和彦]

Hi all,

I'm using Emacs HEAD ("24.3.50.1") on Mac. It *often* crashes when I'm
reading e-mail messages with Mew. I took trace with gdb. The value of
"glyph" is 0x5bfe and this causes EXC_BAD_ACCESS.

If other information is necessary to fix this bug, please let me know.

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: 13 at address: 0x0000000000000000
0x000000010001b317 in get_glyph_face_and_encoding (f=0x10c408758, glyph=0x5bfe, 
char2b=0x7fff5fbfb790, two_byte_p=0x7fff5fbfb754) at xdisp.c:22544
22544           code = face->font->driver->encode_char (face->font, 
glyph->u.ch);
(gdb) info stack
#0  0x000000010001b317 in get_glyph_face_and_encoding (f=0x10c408758, 
glyph=0x5bfe, char2b=0x7fff5fbfb790, two_byte_p=0x7fff5fbfb754) at xdisp.c:22544
#1  0x000000010001b44d in fill_glyph_string (s=0x10c408758, face_id=1606399872, 
start=1606399888, end=1606399828, overlaps=677) at xdisp.c:22766
#2  0x000000010001bded in draw_glyphs (w=0x10c408758, x=8, row=0x7fff5fbfb790, 
area=1606399828, start=677, end=677, hl=DRAW_NORMAL_TEXT, overlaps=0) at 
xdisp.c:23384
#3  0x00000001000205fd in expose_area (w=0x10c408c68, row=0x2a5, 
r=0x7fff5fbfbbc8, area=1606399828) at xdisp.c:28166
#4  0x0000000100020775 in expose_line (w=0x10c408c68, row=0x1180f9f00, 
r=0x7fff5fbfbbc8) at xdisp.c:28224
#5  0x00000001000235db in expose_window (w=0x10c408c68, fr=0x7fff5fbfbc20) at 
xdisp.c:28454
#6  0x000000010002386a in expose_window_tree (w=0x10c408758, r=0x7fff5fbfbcb0) 
at xdisp.c:28523
#7  0x000000010002385d in expose_window_tree (w=0x10c408758, r=0x7fff5fbfbcb0) 
at xdisp.c:28520
#8  0x00000001000273a0 in expose_frame (f=0x10c408758, x=1606401200, 
y=1606399888, w=1606399828, h=677) at xdisp.c:28578
#9  0x00007fff8936b140 in -[NSView _drawRect:clip:] ()
#10 0x00007fff89367fb3 in -[NSView 
_recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:]
 ()
#11 0x00007fff89368a44 in -[NSView 
_recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:]
 ()
#12 0x00007fff89368a44 in -[NSView 
_recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:]
 ()
#13 0x00007fff89367143 in -[NSThemeFrame 
_recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:]
 ()
#14 0x00007fff89362d6d in -[NSView 
_displayRectIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:] ()
#15 0x00007fff8932cc93 in -[NSView displayIfNeeded] ()
#16 0x00007fff8932c1cc in _handleWindowNeedsDisplayOrLayoutOrUpdateConstraints 
()
#17 0x00007fff898f7901 in __83-[NSWindow 
_postWindowNeedsDisplayOrLayoutOrUpdateConstraintsUnlessPostingDisabled]_block_invoke_01208
 ()
#18 0x00007fff88949417 in 
__CFRUNLOOP_IS_CALLING_OUT_TO_AN_OBSERVER_CALLBACK_FUNCTION__ ()
#19 0x00007fff88949381 in __CFRunLoopDoObservers ()
#20 0x00007fff889247b8 in __CFRunLoopRun ()
#21 0x00007fff889240e2 in CFRunLoopRunSpecific ()
#22 0x00007fff8f68ceb4 in RunCurrentEventLoopInMode ()
#23 0x00007fff8f68cb94 in ReceiveNextEventCommon ()
#24 0x00007fff8f68cae3 in BlockUntilNextEventMatchingListInMode ()
#25 0x00007fff89329533 in _DPSNextEvent ()
#26 0x00007fff89328df2 in -[NSApplication 
nextEventMatchingMask:untilDate:inMode:dequeue:] ()
#27 0x00007fff893201a3 in -[NSApplication run] ()
#28 0x000000010018ed40 in ns_read_socket (terminal=0x7fff5fbfebc0, 
hold_quit=0x7fff5fbfeea0) at nsterm.m:3526
#29 0x00000001000aa92f in gobble_input () at keyboard.c:6850
#30 0x00000001000aaa55 in get_input_pending [inlined] () at 
/Users/kazu/work/emacs/src/keyboard.c:6771
#31 0x00000001000aaa55 in detect_input_pending_run_timers (do_display=false) at 
keyboard.c:9918
#32 0x00000001000aed58 in read_char (commandflag=1606414736, 
map=140734799802768, prev_event=-1, used_mouse_menu=0x7fff5fbff190, 
end_time=0x7fff5fbff190) at keyboard.c:2558
#33 0x00000001000b1570 in read_key_sequence () at keyboard.c:8433
#34 0x00000001000b2f74 in command_loop_1 () at keyboard.c:1449
#35 0x0000000100118e7b in internal_condition_case (bfun=0x1000b1b70 
<command_loop_1>, handlers=4328600218, hfun=0x1000b3000 <cmd_error>) at 
eval.c:1214
#36 0x00000001000b1b4e in command_loop_2 (ignore=140734799803240) at 
keyboard.c:1164
#37 0x0000000100118f67 in internal_catch (tag=140734799803240, func=0x1000b1b10 
<command_loop_2>, arg=140734799803240) at eval.c:988
#38 0x00000001000b3580 in command_loop [inlined] () at 
/Users/kazu/work/emacs/src/keyboard.c:1143
#39 0x00000001000b3580 in recursive_edit_1 () at keyboard.c:776
#40 0x00000001000a4b0d in Frecursive_edit () at keyboard.c:840
#41 0x00000001000a19ef in main (argc=5838656, argv=0x7fff5fbff910) at 
emacs.c:1543
(gdb) 

--Kazu