Crash when switching from emacs menu to w3 menu in menu bar

[Klaus Zeitler]

Symptoms:

When I switch in a w3 buffer between [emacs] and [w3] menus, emacs
crashes. I haven't found an exact recipe yet, but clicking a few menus to 
display their contents and switching back and forth between [emacs] and [w3]
menus will eventually result in a crash.

Here's the backtrace:

#0  0xfeb9fc14 in _libc_kill () from /usr/lib/libc.so.1
#1  0x000e1230 in fatal_error_signal (sig=11)
    at /vol/freeware/cvs/emacs/head/emacs/src/emacs.c:427
#2  <signal handler called>
#3  0x000e624c in show_help_echo (help=1868850540, window=3313665,
    object=3313665, pos=0, ok_to_overwrite_keystroke_echo=0)
    at /vol/freeware/cvs/emacs/head/emacs/src/keyboard.c:2303
#4  0x000e63ec in read_char (commandflag=1, nmaps=5, maps=0xffbede50,
    prev_event=3313665, used_mouse_menu=0xffbedee8)
    at /vol/freeware/cvs/emacs/head/emacs/src/keyboard.c:3146
#5  0x000eee60 in read_key_sequence (keybuf=0xffbee030, bufsize=30,
    prompt=3313665, dont_downcase_last=0, can_return_switch_frame=1,
    fix_current_buffer=1)
    at /vol/freeware/cvs/emacs/head/emacs/src/keyboard.c:8817
#6  0x000e4288 in command_loop_1 ()
    at /vol/freeware/cvs/emacs/head/emacs/src/keyboard.c:1528
#7  0x0014aaf0 in internal_condition_case (bfun=0xe40cc <command_loop_1>,
    handlers=3398233, hfun=0xe3b18 <cmd_error>)
    at /vol/freeware/cvs/emacs/head/emacs/src/eval.c:1451
#8  0x000e3e9c in command_loop_2 ()
    at /vol/freeware/cvs/emacs/head/emacs/src/keyboard.c:1318
#9  0x0014a5d8 in internal_catch (tag=3387353, func=0xe3e78 <command_loop_2>,
    arg=3313665) at /vol/freeware/cvs/emacs/head/emacs/src/eval.c:1210
#10 0x000e3e28 in command_loop ()
    at /vol/freeware/cvs/emacs/head/emacs/src/keyboard.c:1297
#11 0x000e385c in recursive_edit_1 ()
    at /vol/freeware/cvs/emacs/head/emacs/src/keyboard.c:990
#12 0x000e39b8 in Frecursive_edit ()
    at /vol/freeware/cvs/emacs/head/emacs/src/keyboard.c:1051
#13 0x000e2734 in main (argc=0, argv=0xffbee59c)
    at /vol/freeware/cvs/emacs/head/emacs/src/emacs.c:1782


When I start emacs in gdb, I get:

Program received signal SIGSEGV, Segmentation fault.
0x000e624c in show_help_echo (help=1868850540, window=3313665, object=3313665, 
    pos=0, ok_to_overwrite_keystroke_echo=0)
    at /vol/freeware/cvs/emacs/head/emacs/src/keyboard.c:2303
warning: Source file is more recent than executable.

2303      if (STRINGP (help) || NILP (help))
(gdb) p help
$1 = 1868850540
(gdb) pr

Program received signal SIGSEGV, Segmentation fault.
0x0015f870 in print_object (obj=1868850540, printcharfun=3425497, escapeflag=1)
    at /vol/freeware/cvs/emacs/head/emacs/src/print.c:1427
1427                    strout (buf, -1, -1, printcharfun, 0);
The program being debugged was signaled while in a function called from GDB.
GDB remains in the frame where the signal was received.
To change this behavior use "set unwindonsignal on"
Evaluation of the expression containing the function (debug_print) will be 
abandoned.



In GNU Emacs 22.0.50.30 (sparc-sun-solaris2.8, Motif Version 2.1.0)
 of 2005-07-12 on sfsws4
X server distributor `Sun Microsystems, Inc.', version 11.0.6410
configured using `configure '--with-gcc' 
'--prefix=/vol/freeware/SunOS-5.8/emacs/cvs' 
'--sharedstatedir=/vol/freeware/SunOS-5.8/emacs/cvs/share' 
'--with-x-toolkit=motif' 
'--x-includes=/usr/openwin/include:/usr/local/gnu/include:/opt/exp/gnu/include:/opt/exp/include:/opt/exp/lib/xpm/include'
 
'--x-libraries=/usr/openwin/lib:/usr/local/gnu/lib:/opt/exp/gnu/lib:/opt/exp/lib:/opt/exp/lib/xpm/lib'
 '--with-pop' 'CC=gcc''

Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: nil
  value of $LC_CTYPE: nil
  value of $LC_MESSAGES: nil
  value of $LC_MONETARY: nil
  value of $LC_NUMERIC: nil
  value of $LC_TIME: nil
  value of $LANG: C
  locale-coding-system: nil
  default-enable-multibyte-characters: t

Major mode: Lisp Interaction

Minor modes in effect:
  tool-bar-mode: t
  mouse-wheel-mode: t
  auto-compression-mode: t
  menu-bar-mode: t
  blink-cursor-mode: t
  unify-8859-on-encoding-mode: t
  utf-translate-cjk-mode: t
  line-number-mode: t
  next-error-follow-minor-mode:  Fol

Recent input:
<help-echo> <help-echo> <help-echo> <menu-bar> <help-menu> 
<report-emacs-bug>

Recent messages:
Loading mwheel...done
(/usr/local/gnu/cvs/head/bin/emacs -Q --no-site-file)
Loading tool-bar...done
Loading image...done
For information about the GNU Project and its goals, type C-h C-p.
Loading emacsbug...done