Emacs crashes after customizing tabbar-default-face

[Stephen Berman]

This bug report will be sent to the Free Software Foundation,
not to your local site managers!
Please write in English if possible, because the Emacs maintainers
usually do not have translators to read other languages for them.

Your bug report will be posted to the address@hidden mailing list.

Please describe exactly what actions triggered the bug
and the precise symptoms of the bug:


Using David Ponce's tabbar.el, I invoked customize-face, unchecked the
Background attribute of tabbar-default-face and saved the
customization.  This resulted in a stream of messages alternating
between "Invalid face background" and "Invalid face foreground".  The
messages were not displayed in the echo area but only in the
*Messages* buffer.  Rapidly scrolling the *Messages* buffer while
these messages were being recorded caused Emacs to crash.  Rechecking
the Background attribute of tabbar-default-face and saving the setting
eliminated the messages and scrolling the *Messages* buffer no longer
caused Emacs to crash.  This (both the crash and the stream of
messages) has only happened with this particular customization;
unchecking the Foreground attribute, or unchecking or otherwise
customizing the Fore- or Background attributes of the other tabbar
faces, has been innocuous.

The crashes happen both with tabbar.el versions 1.3 and 1.4 (current
CVS) and with CVS Emacs from 2003-10-10 (the latest I have) as well as
the released Emacs 21.3.1.  Here is a recipe to reproduce the crash.
Start Emacs like this:

gdb --args emacs -q --no-site

GNU gdb 5.3.92
Copyright 2003 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i586-suse-linux"...
(gdb) r
Starting program: /usr/local/bin/emacs -q --no-site

Now load tabbar.el, then type `M-x tabbar-mode', then `M-x
customize-face RET tabbar-default-face'.  In the Custom buffer uncheck
the Background checkbox, save the customization (for the session or
for the future), then switch to the *Messages* buffer and observe the
above mentioned messages.  Scroll rapidly up and down the *Messages*
buffer (I do this both with the wheel of my mouse and with the
scrollbar), and sooner or later Emacs crashes (sometimes it takes
several minutes of scrolling, clicking the tabbar, and switching
buffers, but the crash happens eventually).  Here's the backtrace of
the last crash I induced this way (with tabbar v1.4 and CVS Emacs from
2003-10-10; I currently only have a stripped executable of Emacs
21.3.1 on hand):

Program received signal SIGABRT, Aborted.
0x4064db71 in kill () from /lib/i686/libc.so.6
(gdb) backtrace
#0  0x4064db71 in kill () from /lib/i686/libc.so.6
#1  0x08116506 in abort () at emacs.c:417
#2  0x081b8a68 in temp_set_point_both (buffer=0x844b0b0, charpos=6,
    bytepos=1635) at intervals.c:1941
#3  0x080a28ca in redisplay_window (window=-2007082552, just_this_one_p=0)
    at xdisp.c:12000
#4  0x0809f96d in redisplay_window_0 (window=-2007082552) at xdisp.c:10456
#5  0x08177c44 in internal_condition_case_1 (
    bfun=0x809f940 <redisplay_window_0>, arg=-2007082552,
    handlers=-1472161696, hfun=0x809f920 <redisplay_window_error>)
    at eval.c:1374
#6  0x0809f904 in redisplay_windows (window=6) at xdisp.c:10435
#7  0x0809eb5a in redisplay_internal (preserve_echo_area=1) at xdisp.c:10021
#8  0x08124e42 in detect_input_pending_run_timers (do_display=1)
    at keyboard.c:9913
#9  0x081abaa2 in wait_reading_process_input (time_limit=30, microsecs=0,
    read_kbd=536870911, do_display=1) at process.c:4338
#10 0x08088d3f in sit_for (sec=30, usec=0, reading=1, display=1,
    initial_display=0) at dispnew.c:6251
#11 0x0811c009 in read_char (commandflag=1, nmaps=2, maps=0xbfffeb50,
    prev_event=675295284, used_mouse_menu=0xbfffeb88) at keyboard.c:2720
#12 0x08122e25 in read_key_sequence (keybuf=0xbfffecb0, bufsize=30,
    prompt=675295284, dont_downcase_last=0, can_return_switch_frame=1,
    fix_current_buffer=1) at keyboard.c:8825
#13 0x081191d7 in command_loop_1 () at keyboard.c:1504
#14 0x08177b3d in internal_condition_case (bfun=0x8119040 <command_loop_1>,
    handlers=675388964, hfun=0x8118c00 <cmd_error>) at eval.c:1333
#15 0x08118eeb in command_loop_2 () at keyboard.c:1292
#16 0x0817769a in internal_catch (tag=0, func=0x8118ed0 <command_loop_2>,
    arg=675295284) at eval.c:1094
#17 0x08118ea1 in command_loop () at keyboard.c:1271
#18 0x08118962 in recursive_edit_1 () at keyboard.c:987
#19 0x08118a9f in Frecursive_edit () at keyboard.c:1043
#20 0x0811723e in main (argc=3, argv=0xbffff294) at emacs.c:1666


In GNU Emacs 21.3.50.3 (i686-pc-linux-gnu, GTK+ Version 2.2.3)
 of 2004-01-19 on feldmann
configured using `configure '--with-x-toolkit=gtk''

Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: nil
  value of $LC_CTYPE: nil
  value of $LC_MESSAGES: nil
  value of $LC_MONETARY: nil
  value of $LC_NUMERIC: nil
  value of $LC_TIME: nil
  value of $LANG: en_US
  locale-coding-system: iso-latin-1
  default-enable-multibyte-characters: t

Major mode: Fundamental

Minor modes in effect:
  tabbar-mode: t
  recentf-mode: t
  auto-compression-mode: t
  display-time-mode: t
  tool-bar-mode: t
  mouse-wheel-mode: t
  menu-bar-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  unify-8859-on-encoding-mode: t
  column-number-mode: t
  line-number-mode: t

Recent input:
<help-echo> <mouse-movement> <mouse-1> <help-echo> 
<down-mouse-1> <mouse-1> <down-mouse-5> <mouse-5> <down-mouse-5> 
<mouse-5> <down-mouse-5> <mouse-5> <down-mouse-5> <mouse-5> 
<double-down-mouse-5> <double-mouse-5> <triple-down-mouse-5> 
<triple-mouse-5> <down-mouse-5> <mouse-5> <double-down-mouse-5> 
<double-mouse-5> <down-mouse-4> <mouse-4> <double-down-mouse-4> 
<double-mouse-4> <triple-down-mouse-4> <triple-mouse-4> 
<triple-down-mouse-4> <triple-mouse-4> <down-mouse-5> 
<mouse-5> <double-down-mouse-5> <double-mouse-5> <triple-down-mouse-5> 
<triple-mouse-5> <triple-down-mouse-5> <triple-mouse-5> 
<down-mouse-4> <mouse-4> <down-mouse-5> <mouse-5> <double-down-mouse-5> 
<double-mouse-5> <triple-down-mouse-5> <triple-mouse-5> 
<down-mouse-4> <mouse-4> <double-down-mouse-4> <double-mouse-4> 
<down-mouse-5> <mouse-5> <down-mouse-5> <mouse-5> <double-down-mouse-5> 
<double-mouse-5> <triple-down-mouse-5> <triple-mouse-5> 
<triple-down-mouse-5> <triple-mouse-5> <triple-down-mouse-5> 
<triple-mouse-5> <triple-down-mouse-5> <triple-mouse-5> 
<down-mouse-4> <mouse-4> <double-down-mouse-4> <double-mouse-4> 
<triple-down-mouse-4> <triple-mouse-4> <help-echo> 
<help-echo> <help-echo> <help-echo> <menu-bar> <files> 
<open recent> </home/steve/bewerbung/ (1)> <anschreiben_muster.txt> 
<down-mouse-1> <mouse-1> <down-mouse-1> <mouse-1> M-x 
b u g <tab> <backspace> <backspace> <backspace> r e 
p <tab> o <tab> r <tab> <return>

Recent messages:
Invalid face foreground
Invalid face background
Invalid face foreground
Invalid face background
Invalid face foreground
Invalid face background
Invalid face foreground
mwheel-scroll: End of buffer [9 times]
Making completion list... [2 times]
Loading emacsbug...done