SIGSEGV when yanking large selection

[Chris Moore]

This bug report will be sent to the Free Software Foundation,
not to your local site managers!

Please write in English if possible, because the Emacs maintainers
usually do not have translators to read other languages for them.

Your bug report will be posted to the address@hidden mailing list.

Please describe exactly what actions triggered the bug
and the precise symptoms of the bug:

I was trying to split a 12 megabyte file into smaller parts.  I marked
9.5 megabytes of it, killed the region, used find-file to find a new
file, yanked from the kill ring into the new buffer, saved the buffer
and then tried to switch to the old 12 megabyte (now 2.5 megabyte)
buffer.  Around this time, Emacs stopped responding.  The PC was
swapping, which is unusual.  I waited for a while, but it turned out
that Emacs had crashed.  Here's the dump:

Program received signal SIGSEGV, Segmentation fault.
0x080d96a8 in queue_selection_requests_unwind (frame=145820300)
    at xselect.c:566
566         x_stop_queuing_selection_requests (FRAME_X_DISPLAY (f));
(gdb) where
#0  0x080d96a8 in queue_selection_requests_unwind (frame=145820300)
    at xselect.c:566
#1  0x081512df in unbind_to (count=2, value=138305553) at eval.c:3085
#2  0x0814e780 in unwind_to_catch (catch=0xbffff200, value=143551973)
    at eval.c:1137
#3  0x0814efe1 in Fsignal (error_symbol=138366481, data=143552005)
    at eval.c:1532
#4  0x0814f5ea in error (
    m=0x81a5f00 "Timed out waiting for property-notify event", a1=0x0, a2=0x0, 
    a3=0x0) at eval.c:1760
#5  0x080da312 in wait_for_property_change (location=Variable "location" is not 
available.
) at xselect.c:1117
#6  0x080d9a52 in x_reply_selection_request (event=0xbfffed60, format=8, 
    data=0xb7fb7c4 "xx xxx xx xx xx   xx   xxxx  xx xx xxxx xxxx  x x xx xx xxxx
xx  x x", ' ' <repeats 20 times>, "x x x        xx xx xx xxx xx\nxx xxx xx xx xx
  xxx x xxxx  xx xx xxxx xxxxx    xxx xxxxxxxxx", ' ' <repeats 22 times>..., 
    size=9366586, type=399) at xselect.c:688
#7  0x080d9c17 in x_handle_selection_request (event=0xbfffed60)
    at xselect.c:833
#8  0x080f19e6 in swallow_events (do_display=0) at keyboard.c:4173
#9  0x080ef35a in read_char (commandflag=1, nmaps=3, maps=0xbfffefe0, 
    prev_event=138305553, used_mouse_menu=0xbffff018) at keyboard.c:2477
#10 0x080f6d51 in read_key_sequence (keybuf=0xbffff140, bufsize=30, 
    prompt=138305553, dont_downcase_last=0, can_return_switch_frame=1, 
    fix_current_buffer=1) at keyboard.c:8781
#11 0x080ecee7 in command_loop_1 () at keyboard.c:1489
#12 0x0814ebed in internal_condition_case (bfun=0x80ecd40 <command_loop_1>, 
    handlers=138366481, hfun=0x80ec870 <cmd_error>) at eval.c:1333
#13 0x080ecb7b in command_loop_2 () at keyboard.c:1271
#14 0x0814e70a in internal_catch (tag=138360489, 
    func=0x80ecb60 <command_loop_2>, arg=138305553) at eval.c:1094
#15 0x080ecb31 in command_loop () at keyboard.c:1250
#16 0x080ec5c2 in recursive_edit_1 () at keyboard.c:961
#17 0x080ec70f in Frecursive_edit () at keyboard.c:1022
#18 0x080eae8f in main (argc=3, argv=0xbffff754) at emacs.c:1693
(gdb) 

(Note: the "xxx xxx" string was originally text from the buffer which
       I didn't want to post to the list).

This is an Emacs build from the latest CVS sources as of 28-May.

In GNU Emacs 21.3.50.2 (i686-pc-linux-gnu, X toolkit)
 of 2004-05-28 on chrislap.ourcpu.com
Important settings:
  value of $LC_ALL: C
  value of $LC_COLLATE: en_US
  value of $LC_CTYPE: en_US
  value of $LC_MESSAGES: en_US
  value of $LC_MONETARY: en_GB
  value of $LC_NUMERIC: en_GB
  value of $LC_TIME: en_US
  value of $LANG: en_US
  locale-coding-system: nil
  default-enable-multibyte-characters: t

Major mode: Lisp Interaction

Minor modes in effect:
  auto-compression-mode: t
  display-time-mode: t
  show-paren-mode: t
  iswitchb-mode: t
  mouse-wheel-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  unify-8859-on-encoding-mode: t
  column-number-mode: t
  line-number-mode: t
  transient-mark-mode: t
  overwrite-mode: overwrite-mode-textual