segmentation fault in Fcons

[Robert Mecklenburg]

This version of emacs has not been updated from the cvs tree in two
days.

While reading mail with vm 7.18 I received a SIGSEGV:

Program received signal SIGSEGV, Segmentation fault.
Fcons (car=675344400, cdr=-1456900304) at alloc.c:2350
2350          cons_free_list = *(struct Lisp_Cons **)&cons_free_list->cdr;
(gdb) p cons_free_list
$1 = (struct Lisp_Cons *) 0x2840f010
(gdb) pr
nil
(gdb) p car
$2 = 675344400
(gdb) pr
nil
(gdb) p cdr
$3 = -1456900304
(gdb) pr
(nil)
(gdb) where
#0  Fcons (car=675344400, cdr=-1456900304) at alloc.c:2350
#1  0x0816bfd1 in Fmake_list (length=2, init=675344400) at alloc.c:2452
#2  0x08187a7e in concat (nargs=1, args=0xbfffd9e4, target_type=Lisp_Cons, 
last_special=1)
    at fns.c:653
#3  0x081872d6 in Fappend (nargs=2, args=0xbfffd9e4) at fns.c:432
#4  0x08182efd in Ffuncall (nargs=3, args=0xbfffd9e0) at eval.c:2707
#5  0x081afb81 in Fbyte_code (bytestr=1751215584, vector=-2005761128, 
maxdepth=10)
    at bytecode.c:689
#6  0x0818326b in funcall_lambda (fun=-2007003648, nargs=2, 
arg_vector=0xbfffdb20)
    at eval.c:2913
#7  0x08182d25 in Ffuncall (nargs=3, args=0xbfffdb1c) at eval.c:2783
#8  0x081afb81 in Fbyte_code (bytestr=1753624848, vector=-2004469408, 
maxdepth=6)
    at bytecode.c:689
#9  0x0818248c in Feval (form=-1467616704) at eval.c:2088
#10 0x081810be in Fcondition_case (args=-1456915184) at eval.c:1280
#11 0x081af33e in Fbyte_code (bytestr=1753624832, vector=-2004469264, 
maxdepth=3)
    at bytecode.c:870
#12 0x0818326b in funcall_lambda (fun=-2004469128, nargs=0, 
arg_vector=0xbfffdf0c)
    at eval.c:2913
#13 0x08182d25 in Ffuncall (nargs=1, args=0xbfffdf08) at eval.c:2783
#14 0x08182851 in run_hook_with_args (nargs=1, args=0xbfffdf08, 
cond=to_completion)
    at eval.c:2394
#15 0x0818274a in Frun_hooks (nargs=1, args=0xbfffdfb4) at eval.c:2262
#16 0x08182efd in Ffuncall (nargs=2, args=0xbfffdfb0) at eval.c:2707
#17 0x08182ad8 in call1 (fn=675428096, arg1=675540120) at eval.c:2520
#18 0x081231c7 in safe_run_hooks_1 (hook=675344448) at keyboard.c:1971
#19 0x081811cd in internal_condition_case (bfun=0x81231b0 <safe_run_hooks_1>,
    handlers=675344448, hfun=0x81231d0 <safe_run_hooks_error>) at eval.c:1333
#20 0x0812325f in safe_run_hooks (hook=675540120) at keyboard.c:1999
#21 0x0809ddf9 in update_menu_bar (f=0x8564e08, save_match_data=0) at 
xdisp.c:8227
#22 0x0809db9d in prepare_menu_bars () at xdisp.c:8119
#23 0x0809ff3d in redisplay_internal (preserve_echo_area=1) at xdisp.c:9785
#24 0x080a10f6 in redisplay_preserve_echo_area (from_where=11) at xdisp.c:10380
#25 0x081b621c in wait_reading_process_input (time_limit=30, microsecs=0,
    read_kbd=536870911, do_display=1) at process.c:4276
#26 0x0808a6cf in sit_for (sec=30, usec=0, reading=1, display=1, 
initial_display=0)
    at dispnew.c:6407
#27 0x081247e9 in read_char (commandflag=1, nmaps=3, maps=0xbfffeaf0,
    prev_event=675344400, used_mouse_menu=0xbfffeb28) at keyboard.c:2697
#28 0x0812b5e5 in read_key_sequence (keybuf=0xbfffec50, bufsize=30, 
prompt=675344400,
    dont_downcase_last=0, can_return_switch_frame=1, fix_current_buffer=1)
    at keyboard.c:8770
#29 0x08121997 in command_loop_1 () at keyboard.c:1476
#30 0x081811cd in internal_condition_case (bfun=0x8121800 <command_loop_1>,
---Type <return> to continue, or q <return> to quit---
    handlers=675405312, hfun=0x81213c0 <cmd_error>) at eval.c:1333
#31 0x081216ab in command_loop_2 () at keyboard.c:1264
#32 0x08180d2a in internal_catch (tag=675399328, func=0x8121690 
<command_loop_2>,
    arg=675344400) at eval.c:1094
#33 0x08121661 in command_loop () at keyboard.c:1243
#34 0x08121122 in recursive_edit_1 () at keyboard.c:959
#35 0x0812125f in Frecursive_edit () at keyboard.c:1015
#36 0x0811f9ef in main (argc=3, argv=0xbffff264) at emacs.c:1692
(gdb)
(gdb) info locals
val = -1472139248
(gdb) p val
$4 = -1472139248
(gdb) pr
(20 . "nil")
(gdb) up
#6  0x08187a7e in concat (nargs=1, args=0xbfffd9e4, target_type=Lisp_Cons, 
last_special=1)
    at fns.c:653
653         val = Fmake_list (make_number (result_len), Qnil);
(gdb) p args
$7 = (int *) 0xbfffd9e4
(gdb) p *args
$8 = -1456892896
(gdb) pr
(keymap "Open Recent")




In GNU Emacs 21.3.50.8 (i686-pc-linux-gnu, GTK+ Version 2.2.4)
 of 2004-05-10 on oops.realmsys.com
configured using `configure '--with-x11' '--with-x-toolkit=gtk''

Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: en_US
  value of $LC_CTYPE: en_US
  value of $LC_MESSAGES: en_US
  value of $LC_MONETARY: en_US
  value of $LC_NUMERIC: en_US
  value of $LC_TIME: en_US
  value of $LANG: en_US
  locale-coding-system: iso-latin-1
  default-enable-multibyte-characters: t

Major mode: WorkLog

Minor modes in effect:
  show-paren-mode: t
  auto-image-file-mode: t
  recentf-mode: t
  auto-compression-mode: t
  tool-bar-mode: t
  mouse-wheel-mode: t
  menu-bar-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  unify-8859-on-encoding-mode: t
  column-number-mode: t
  line-number-mode: t
  transient-mark-mode: t

Recent input:
s <help-echo> <help-echo> <help-echo> <help-echo> <help-echo> 
<menu-bar> <help-menu> <report-emacs-bug>

Recent messages:
Loading core-utils (source)...done
Loading /usr/local/share/emacs/site-lisp/local/local.el (source)...done
Loading ~/bin/emacs-helpers (source)...done
Loading semantic-el...done
Loading jit-lock...done
Mark set
Loading userlock...done
/home/mecklen/.worklog locked by address@hidden (pid 22089): (s, q, p, ?)? 
Mark set
Loading emacsbug...done


-- 
Robert