GNU bug report logs - #77046
31.0.50; Emacs sometimes crashes

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: emacs; Reported by: Markus Triska <triska@HIDDEN>; dated Sun, 16 Mar 2025 09:56:02 UTC; Maintainer for emacs is bug-gnu-emacs@HIDDEN.

Message received at 77046 <at> debbugs.gnu.org:


Received: (at 77046) by debbugs.gnu.org; 22 Mar 2025 15:55:55 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Mar 22 11:55:55 2025
Received: from localhost ([127.0.0.1]:44807 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tw1CV-0000HN-7B
	for submit <at> debbugs.gnu.org; Sat, 22 Mar 2025 11:55:55 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10]:52744)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <eliz@HIDDEN>) id 1tw1CS-0000H8-WA
 for 77046 <at> debbugs.gnu.org; Sat, 22 Mar 2025 11:55:53 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <eliz@HIDDEN>)
 id 1tw1CM-0006R2-5k; Sat, 22 Mar 2025 11:55:46 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org;
 s=fencepost-gnu-org; h=References:Subject:In-Reply-To:To:From:Date:
 mime-version; bh=q4IAsssp4TG6xbWc/Xgr7/QtPLznMNj6lgHjSOr6ZbQ=; b=DnEef9VpP0sv
 +VrF6HkARJbf0XXwJvTUs6YzFBag2zT3PdY65HeusjDh/S7Do4qIczRKBnjP40wCA8JoezbR/XRy+
 OJME7rvj8V/XVQqI5PICI6KMNGQmmw+5XqRk6sGDIaosEqqxUL+LBS7rc4ybSd0macQ1SQ/ikISzz
 RJvKuRCjxPofNrWFsSXKeVr9J60FAlkQ38yqzOQkLZna42QDnabX4W/STm5PrE3bU6oxCzg8VF1TU
 cendO0TR7axZbEMI2Zmuk7EcwF1Rx2fGqGn0/+EBetaRakXsKAITu81crkSyVNvQKe+p8oJFCtym0
 epLmeafigBsfyAbGZIWNsQ==;
Date: Sat, 22 Mar 2025 17:55:41 +0200
Message-Id: <86h63lhxfm.fsf@HIDDEN>
From: Eli Zaretskii <eliz@HIDDEN>
To: Pip Cet <pipcet@HIDDEN>
In-Reply-To: <87frj5feal.fsf@HIDDEN> (message from Pip Cet on Sat, 22
 Mar 2025 12:20:16 +0000)
Subject: Re: bug#77046: 31.0.50; Emacs sometimes crashes
References: <87y0x5paeg.fsf@HIDDEN> <86msdltddx.fsf@HIDDEN>
 <87r02xi4ks.fsf@HIDDEN> <86ldt5tcsw.fsf@HIDDEN>
 <87iko8d6fl.fsf@HIDDEN> <86v7s7sup8.fsf@HIDDEN>
 <87tt7r34yg.fsf@HIDDEN> <86zfhjqwl5.fsf@HIDDEN>
 <87wmch8pgk.fsf@HIDDEN> <87frj5feal.fsf@HIDDEN>
X-Spam-Score: -2.3 (--)
X-Debbugs-Envelope-To: 77046
Cc: gerd.moellmann@HIDDEN, 77046 <at> debbugs.gnu.org, triska@HIDDEN
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -3.3 (---)

> Date: Sat, 22 Mar 2025 12:20:16 +0000
> From: Pip Cet <pipcet@HIDDEN>
> Cc: Eli Zaretskii <eliz@HIDDEN>, gerd.moellmann@HIDDEN, 77046 <at> debbugs.gnu.org
> 
> > #6 0x000055555566e969 in tty_lookup_color (f=f@entry=0x555555aeff60,
> > color=0x555555a008e4, tty_color=tty_color@entry=0x7fffffffc720,
> > std_color=std_color@entry=0x0) at xfaces.c:1090
> > #7 0x0000555555675d8c in tty_defined_color (f=0x555555aeff60,
> > color_name=0x555555ae1270 "unspecified-bg", color_def=0x7fffffffc720,
> > alloc=<optimized out>, _makeIndex=<optimized out>) at xfaces.c:1153
> > #8 0x000055555566e426 in load_color2 (f=0x555555aeff60,
> > face=0x555555a6d370, name=0x555555a00634,
> > target_index=LFACE_BACKGROUND_INDEX, color=0x7fffffffc720) at
> > xfaces.c:1300
> 
> That line is:
> 
>   if (!FRAME_TERMINAL (f)->defined_color_hook
>       (f, SSDATA (name), color, true, true))
> 
> which looks very unsafe to me: the SSDATA pointer will become invalid
> when we compact strings, which we might do since tty_lookup_color calls
> into Lisp.  The color_name pointer is used after that point in
> tty_defined_color, possibly causing false negatives for the strcmp in
> lines 1157/1159.
> 
> However, that doesn't really explain this crash, it's just another
> (possibly latent) SDATA bug.  At first glance, there seem to be more of
> hose in xfaces.c, though, so it's possible something further up the call
> chain results in a corrupt SDATA pointer.

Does the below look OK?  I think it solves several SSDATA issues,
since tty_defined_color is called from several other places that pass
it SSDATA of some Lisp string.  But if you see some other place where
similar problems could happen and are not solved by the patch below,
please point them out.

diff --git a/src/xfaces.c b/src/xfaces.c
index fbbaffb..7a4571c 100644
--- a/src/xfaces.c
+++ b/src/xfaces.c
@@ -1150,14 +1150,18 @@ tty_defined_color (struct frame *f, const char *color_name,
   color_def->green = 0;
 
   if (*color_name)
-    status = tty_lookup_color (f, build_string (color_name), color_def, NULL);
-
-  if (color_def->pixel == FACE_TTY_DEFAULT_COLOR && *color_name)
     {
-      if (strcmp (color_name, "unspecified-fg") == 0)
-	color_def->pixel = FACE_TTY_DEFAULT_FG_COLOR;
-      else if (strcmp (color_name, "unspecified-bg") == 0)
-	color_def->pixel = FACE_TTY_DEFAULT_BG_COLOR;
+      Lisp_Object lcolor = build_string (color_name);
+      status = tty_lookup_color (f, lcolor, color_def, NULL);
+
+      if (color_def->pixel == FACE_TTY_DEFAULT_COLOR)
+	{
+	  color_name = SSDATA (lcolor);
+	  if (strcmp (color_name, "unspecified-fg") == 0)
+	    color_def->pixel = FACE_TTY_DEFAULT_FG_COLOR;
+	  else if (strcmp (color_name, "unspecified-bg") == 0)
+	    color_def->pixel = FACE_TTY_DEFAULT_BG_COLOR;
+	}
     }
 
   if (color_def->pixel != FACE_TTY_DEFAULT_COLOR)




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.

Message received at 77046 <at> debbugs.gnu.org:


Received: (at 77046) by debbugs.gnu.org; 22 Mar 2025 15:39:56 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Mar 22 11:39:56 2025
Received: from localhost ([127.0.0.1]:44731 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tw0x2-0004rd-1T
	for submit <at> debbugs.gnu.org; Sat, 22 Mar 2025 11:39:56 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10]:49686)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <eliz@HIDDEN>) id 1tw0wz-0004rQ-Ud
 for 77046 <at> debbugs.gnu.org; Sat, 22 Mar 2025 11:39:54 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <eliz@HIDDEN>)
 id 1tw0wu-0001fi-05; Sat, 22 Mar 2025 11:39:48 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org;
 s=fencepost-gnu-org; h=References:Subject:In-Reply-To:To:From:Date:
 mime-version; bh=WvMHGsqSS4zOxk8aJWPN2bpIQMOT6k7EqLq1r2ZtT+4=; b=Rl3A71QR9XV+
 MchCkmflGRIV8BimKwfLSeuR0NQiSicX8HZzKEOYHySRxQ6YeIj9M7spn3dm+Zl2zJrI5wGC9nP1c
 1QNFH+W+yJEVe0WBje0gMfGapuviBWtsqYfg6EpAD28NAXfujC8he9IhxkqXzqsGY09tMBOEtVwEH
 Sy/CFecM9DYmS+cIZ7Xa6zIR6L7talSj6J/y2Eg2mqDpGcsaj0d4Bg50Mg/TPfj8r3zijPluoPwtd
 DTD+QtqYhYhOMBJSX4lFotVZWKGez3hLbUFTR+sb2n8TwgWcmSyoWpRoeqyGt36hJGSPv/tkfByqj
 daZQq7dsEjKGbx4rty1Qhg==;
Date: Sat, 22 Mar 2025 17:39:45 +0200
Message-Id: <86jz8hhy66.fsf@HIDDEN>
From: Eli Zaretskii <eliz@HIDDEN>
To: Markus Triska <triska@HIDDEN>
In-Reply-To: <8734f5du76.fsf@HIDDEN> (message from Markus Triska on Sat, 
 22 Mar 2025 15:19:09 +0100)
Subject: Re: bug#77046: 31.0.50; Emacs sometimes crashes
References: <87y0x5paeg.fsf@HIDDEN> <86msdltddx.fsf@HIDDEN>
 <87r02xi4ks.fsf@HIDDEN> <86ldt5tcsw.fsf@HIDDEN>
 <87iko8d6fl.fsf@HIDDEN> <86v7s7sup8.fsf@HIDDEN>
 <87tt7r34yg.fsf@HIDDEN> <86zfhjqwl5.fsf@HIDDEN>
 <87wmch8pgk.fsf@HIDDEN> <87frj5feal.fsf@HIDDEN>
 <875xk1qhtw.fsf@HIDDEN> <8734f5du76.fsf@HIDDEN>
X-Spam-Score: -2.3 (--)
X-Debbugs-Envelope-To: 77046
Cc: gerd.moellmann@HIDDEN, pipcet@HIDDEN, 77046 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -3.3 (---)

> From: Markus Triska <triska@HIDDEN>
> Cc: Eli Zaretskii <eliz@HIDDEN>,  gerd.moellmann@HIDDEN,  77046 <at> debbugs.gnu.org
> Date: Sat, 22 Mar 2025 15:19:09 +0100
> 
> 
> Program received signal SIGSEGV, Segmentation fault.
> 0x000055555559de87 in first_enabled_row (matrix=0x0) at dispnew.c:3499
> 3499	  for (int i = 0; i < matrix->nrows; ++i)
> #0  0x000055555559de87 in first_enabled_row (matrix=0x0) at dispnew.c:3499
> #1  0x000055555559deb9 in make_matrix_current (f=0x555555c57ae8) at dispnew.c:3511
> #2  0x000055555559e719 in copy_child_glyphs (root=0x555555b15660, child=0x555555c57ae8) at dispnew.c:3715
> #3  0x000055555559f5ba in combine_updates_for_frame (f=0x555555b15660, inhibit_scrolling=false) at dispnew.c:4020
> #4  0x000055555559f944 in combine_updates (roots=XIL(0x7ffff7345eb3)) at dispnew.c:4073
> #5  0x00005555556021e4 in redisplay_internal () at xdisp.c:17748

That's exactly the crash that I fixed with commit 412a6fad98e7 a week
ago, after which I could no longer reproduce the problem.  So either
your source tree is out of sync with the master branch, or some other
factor is at work here.  Or maybe this backtrace is from Emacs before
my fix?

What does the below produce in GDB?

  (gdb) frame 1
  (gdb) print f->after_make_frame




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.

Message received at 77046 <at> debbugs.gnu.org:


Received: (at 77046) by debbugs.gnu.org; 22 Mar 2025 15:35:27 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Mar 22 11:35:27 2025
Received: from localhost ([127.0.0.1]:44720 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tw0sh-0004k7-3s
	for submit <at> debbugs.gnu.org; Sat, 22 Mar 2025 11:35:27 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10]:52858)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <eliz@HIDDEN>) id 1tw0se-0004js-Oa
 for 77046 <at> debbugs.gnu.org; Sat, 22 Mar 2025 11:35:25 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <eliz@HIDDEN>)
 id 1tw0sY-0000gb-Oz; Sat, 22 Mar 2025 11:35:18 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org;
 s=fencepost-gnu-org; h=References:Subject:In-Reply-To:To:From:Date:
 mime-version; bh=JLGwzWIyr7XXK6h6LkHormFwhgYP2obIgpidAWL6SD8=; b=oLYKyURcyswU
 2RYMp4B9KpaqYUChbR5srItUDnLrxQ23cf89upQMcguYGLaoox1CPJcDN6yffihfbcAB89vH6XODC
 k+uMPgBqxyAh+VbZg105yGqCrrRzK7EFlNdli0LqZ3c1nJDS2O8EFj90j0VYZQEKC3v4Rt//wVzHi
 sDRUqmk7nMgUpxBaA/NAlN9DwsFMfr/ZzApm8NDBFmsNBcae/ekRDX03cOCDUxGFRLVmZwzi6BKph
 Qs5aHhX/Wkr8856QoLnHvfqeqIDuztFR7XGx41bbjdlcJ6WV9UM/KIPxPkfNMghKiNa/oc59cxlBc
 kjT86YLWeyXGCjajgALJDQ==;
Date: Sat, 22 Mar 2025 17:35:14 +0200
Message-Id: <86ldsxhydp.fsf@HIDDEN>
From: Eli Zaretskii <eliz@HIDDEN>
To: Markus Triska <triska@HIDDEN>
In-Reply-To: <875xk1qhtw.fsf@HIDDEN> (message from Markus Triska on Sat, 
 22 Mar 2025 15:07:55 +0100)
Subject: Re: bug#77046: 31.0.50; Emacs sometimes crashes
References: <87y0x5paeg.fsf@HIDDEN> <86msdltddx.fsf@HIDDEN>
 <87r02xi4ks.fsf@HIDDEN> <86ldt5tcsw.fsf@HIDDEN>
 <87iko8d6fl.fsf@HIDDEN> <86v7s7sup8.fsf@HIDDEN>
 <87tt7r34yg.fsf@HIDDEN> <86zfhjqwl5.fsf@HIDDEN>
 <87wmch8pgk.fsf@HIDDEN> <87frj5feal.fsf@HIDDEN>
 <875xk1qhtw.fsf@HIDDEN>
X-Spam-Score: -2.3 (--)
X-Debbugs-Envelope-To: 77046
Cc: gerd.moellmann@HIDDEN, pipcet@HIDDEN, 77046 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -3.3 (---)

> From: Markus Triska <triska@HIDDEN>
> Cc: Eli Zaretskii <eliz@HIDDEN>,  gerd.moellmann@HIDDEN,  77046 <at> debbugs.gnu.org
> Date: Sat, 22 Mar 2025 15:07:55 +0100
> 
> Pip Cet <pipcet@HIDDEN> writes:
> 
> > As Eli points out, this is very puzzling.  Can you disassemble
> > internal_equal_1 ("disass internal_equal_1") in the Emacs binary and
> > evaluate "p *(struct Lisp_String *)0x7ffff47f2fa8" and "p *(struct
> 
> Regarding the strange positions, I think I found out what is causing
> this: When I press C-g C-x C-c in the example I posted, then GDB
> apparently already becomes active after C-g! I previously did not notice
> it because I thought I had input the entire key sequence and expected
> GDB to become active in this way only after a crash.
> 
> If possible, could you please recommend a way to run the example so that
> GDB only becomes active when a crash is encountered?

Yes, say

  (gdb) source /path/to/emacs/src/.gdbinit

before starting Emacs under GDB.  On TTY frames, Emacs programs the
terminal to generate SIGINT when the user presses C-g, so Emacs gets
delivered SIGINT and GDB kicks in.  The file src/.gdbinit in the Emacs
source tree causes GDB to pass SIGINT to Emacs without stopping it.




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.

Message received at 77046 <at> debbugs.gnu.org:


Received: (at 77046) by debbugs.gnu.org; 22 Mar 2025 14:19:15 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Mar 22 10:19:15 2025
Received: from localhost ([127.0.0.1]:44486 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tvzgw-0003OW-Rp
	for submit <at> debbugs.gnu.org; Sat, 22 Mar 2025 10:19:15 -0400
Received: from [78.47.144.35] (port=56004 helo=metalevel.at)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <triska@HIDDEN>) id 1tvzgu-0003OJ-89
 for 77046 <at> debbugs.gnu.org; Sat, 22 Mar 2025 10:19:12 -0400
Received: by metalevel.at (Postfix, from userid 1000)
 id D5D5E9C780; Sat, 22 Mar 2025 15:19:09 +0100 (CET)
From: Markus Triska <triska@HIDDEN>
To: Pip Cet <pipcet@HIDDEN>
Subject: Re: bug#77046: 31.0.50; Emacs sometimes crashes
References: <87y0x5paeg.fsf@HIDDEN> <86msdltddx.fsf@HIDDEN>
 <87r02xi4ks.fsf@HIDDEN> <86ldt5tcsw.fsf@HIDDEN>
 <87iko8d6fl.fsf@HIDDEN> <86v7s7sup8.fsf@HIDDEN>
 <87tt7r34yg.fsf@HIDDEN> <86zfhjqwl5.fsf@HIDDEN>
 <87wmch8pgk.fsf@HIDDEN> <87frj5feal.fsf@HIDDEN>
 <875xk1qhtw.fsf@HIDDEN>
Date: Sat, 22 Mar 2025 15:19:09 +0100
In-Reply-To: <875xk1qhtw.fsf@HIDDEN> (Markus Triska's message of "Sat,
 22 Mar 2025 15:07:55 +0100")
Message-ID: <8734f5du76.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 1.3 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  I found it, please see below, does this help? All the best, 
 Markus Program received signal SIGSEGV, Segmentation fault. 0x000055555559de87
 in first_enabled_row (matrix=0x0) at dispnew.c:3499 3499 for (int i = 0;
 i < matrix->nrows; ++i) #0 0x000055555559de87 in first_ [...] 
 Content analysis details:   (1.3 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
 query to Validity was blocked.  See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243
 for more information.
 [78.47.144.35 listed in sa-trusted.bondedsender.org]
 0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
 0.0 SPF_NONE               SPF: sender does not publish an SPF Record
 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
 query to Validity was blocked.  See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243
 for more information.
 [78.47.144.35 listed in bl.score.senderscore.com]
 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
X-Debbugs-Envelope-To: 77046
Cc: gerd.moellmann@HIDDEN, Eli Zaretskii <eliz@HIDDEN>,
 77046 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.3 (/)


I found it, please see below, does this help?

All the best,
Markus

Program received signal SIGSEGV, Segmentation fault.
0x000055555559de87 in first_enabled_row (matrix=0x0) at dispnew.c:3499
3499	  for (int i = 0; i < matrix->nrows; ++i)
#0  0x000055555559de87 in first_enabled_row (matrix=0x0) at dispnew.c:3499
#1  0x000055555559deb9 in make_matrix_current (f=0x555555c57ae8) at dispnew.c:3511
#2  0x000055555559e719 in copy_child_glyphs (root=0x555555b15660, child=0x555555c57ae8) at dispnew.c:3715
#3  0x000055555559f5ba in combine_updates_for_frame (f=0x555555b15660, inhibit_scrolling=false) at dispnew.c:4020
#4  0x000055555559f944 in combine_updates (roots=XIL(0x7ffff7345eb3)) at dispnew.c:4073
#5  0x00005555556021e4 in redisplay_internal () at xdisp.c:17748
#6  0x00005555555ff87d in redisplay () at xdisp.c:16802
#7  0x00005555557668ec in read_char (commandflag=1, map=XIL(0x7ffff73463e3), prev_event=XIL(0), used_mouse_menu=0x7fffffffd739, end_time=0x0) at keyboard.c:2672
#8  0x000055555577babf in read_key_sequence (keybuf=0x7fffffffd960, prompt=XIL(0), dont_downcase_last=false, can_return_switch_frame=true, fix_current_buffer=true, prevent_redisplay=false, disable_text_conversion_p=false) at keyboard.c:10848
#9  0x00005555557628c8 in command_loop_1 () at keyboard.c:1424
#10 0x000055555584abfd in internal_condition_case (bfun=0x55555576247a <command_loop_1>, handlers=XIL(0x90), hfun=0x55555576186d <cmd_error>) at eval.c:1620
#11 0x000055555576201d in command_loop_2 (handlers=XIL(0x90)) at keyboard.c:1163
#12 0x0000555555849fce in internal_catch (tag=XIL(0x11df0), func=0x555555761fef <command_loop_2>, arg=XIL(0x90)) at eval.c:1300
#13 0x0000555555761fab in command_loop () at keyboard.c:1141
#14 0x00005555557612ef in recursive_edit_1 () at keyboard.c:749
#15 0x0000555555761523 in Frecursive_edit () at keyboard.c:832
#16 0x000055555575ca31 in main (argc=5, argv=0x7fffffffde28) at emacs.c:2560

Lisp Backtrace:
"redisplay_internal (C function)" (0x0)




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.

Message received at 77046 <at> debbugs.gnu.org:


Received: (at 77046) by debbugs.gnu.org; 22 Mar 2025 14:07:59 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Mar 22 10:07:59 2025
Received: from localhost ([127.0.0.1]:44451 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tvzW3-0002p6-7w
	for submit <at> debbugs.gnu.org; Sat, 22 Mar 2025 10:07:59 -0400
Received: from [78.47.144.35] (port=55844 helo=metalevel.at)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <triska@HIDDEN>) id 1tvzW1-0002ox-4z
 for 77046 <at> debbugs.gnu.org; Sat, 22 Mar 2025 10:07:58 -0400
Received: by metalevel.at (Postfix, from userid 1000)
 id B52FF9C78C; Sat, 22 Mar 2025 15:07:55 +0100 (CET)
From: Markus Triska <triska@HIDDEN>
To: Pip Cet <pipcet@HIDDEN>
Subject: Re: bug#77046: 31.0.50; Emacs sometimes crashes
References: <87y0x5paeg.fsf@HIDDEN> <86msdltddx.fsf@HIDDEN>
 <87r02xi4ks.fsf@HIDDEN> <86ldt5tcsw.fsf@HIDDEN>
 <87iko8d6fl.fsf@HIDDEN> <86v7s7sup8.fsf@HIDDEN>
 <87tt7r34yg.fsf@HIDDEN> <86zfhjqwl5.fsf@HIDDEN>
 <87wmch8pgk.fsf@HIDDEN> <87frj5feal.fsf@HIDDEN>
Date: Sat, 22 Mar 2025 15:07:55 +0100
In-Reply-To: <87frj5feal.fsf@HIDDEN> (Pip Cet's message of "Sat, 22
 Mar 2025 12:20:16 +0000")
Message-ID: <875xk1qhtw.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 1.3 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  Pip Cet <pipcet@HIDDEN> writes: > As Eli points out, 
 this is very puzzling. Can you disassemble > internal_equal_1 ("disass
 internal_equal_1")
 in the Emacs binary and > evaluate "p *(struct Lisp_String *)0x7ffff47f2fa8"
 and "p *(str [...] 
 Content analysis details:   (1.3 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
 0.0 SPF_NONE               SPF: sender does not publish an SPF Record
 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
 The query to Validity was blocked.  See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243
 for more information.
 [78.47.144.35 listed in sa-trusted.bondedsender.org]
 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
 query to Validity was blocked.  See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243
 for more information.
 [78.47.144.35 listed in bl.score.senderscore.com]
 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
X-Debbugs-Envelope-To: 77046
Cc: gerd.moellmann@HIDDEN, Eli Zaretskii <eliz@HIDDEN>,
 77046 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.3 (/)

Pip Cet <pipcet@HIDDEN> writes:

> As Eli points out, this is very puzzling.  Can you disassemble
> internal_equal_1 ("disass internal_equal_1") in the Emacs binary and
> evaluate "p *(struct Lisp_String *)0x7ffff47f2fa8" and "p *(struct

Regarding the strange positions, I think I found out what is causing
this: When I press C-g C-x C-c in the example I posted, then GDB
apparently already becomes active after C-g! I previously did not notice
it because I thought I had input the entire key sequence and expected
GDB to become active in this way only after a crash.

If possible, could you please recommend a way to run the example so that
GDB only becomes active when a crash is encountered?

Also, I have now recompiled Emacs as advised for debugging (i.e., with
--enable-checking='yes,glyphs' --enable-check-lisp-object-type \
CFLAGS='-O0 -g3').

The output I see on the shell (without GDB) for the example follows.

All the best,
Markus

$ ./emacs -nw -Q --load recenter_sometimes_not_recentering_nw.el
Fatal error 11: Segmentation fault
Backtrace:
./emacs(+0x23fcf8)[0x568e3c9fdcf8]
./emacs(+0x20547a)[0x568e3c9c347a]
./emacs(+0x23f42b)[0x568e3c9fd42b]
./emacs(+0x23f3fc)[0x568e3c9fd3fc]
./emacs(+0x23f474)[0x568e3c9fd474]
./emacs(+0x23f624)[0x568e3c9fd624]
/lib/x86_64-linux-gnu/libc.so.6(+0x42990)[0x7add5de42990]
./emacs(+0x49e87)[0x568e3c807e87]
./emacs(+0x49eb9)[0x568e3c807eb9]
./emacs(+0x4a719)[0x568e3c808719]
./emacs(+0x4b5ba)[0x568e3c8095ba]
./emacs(+0x4b944)[0x568e3c809944]
./emacs(+0xae1e4)[0x568e3c86c1e4]
./emacs(+0xab87d)[0x568e3c86987d]
./emacs(+0x2128ec)[0x568e3c9d08ec]
./emacs(+0x227abf)[0x568e3c9e5abf]
./emacs(+0x20e8c8)[0x568e3c9cc8c8]
./emacs(+0x2f6bfd)[0x568e3cab4bfd]
./emacs(+0x20e01d)[0x568e3c9cc01d]
./emacs(+0x2f5fce)[0x568e3cab3fce]
./emacs(+0x20dfab)[0x568e3c9cbfab]
./emacs(+0x20d2ef)[0x568e3c9cb2ef]
./emacs(+0x20d523)[0x568e3c9cb523]
./emacs(+0x208a31)[0x568e3c9c6a31]
/lib/x86_64-linux-gnu/libc.so.6(+0x28150)[0x7add5de28150]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0x89)[0x7add5de28209]
./emacs(+0x3f5c5)[0x568e3c7fd5c5]





Information forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.

Message received at 77046 <at> debbugs.gnu.org:


Received: (at 77046) by debbugs.gnu.org; 22 Mar 2025 12:20:31 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Mar 22 08:20:31 2025
Received: from localhost ([127.0.0.1]:41376 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tvxq2-0002DC-H5
	for submit <at> debbugs.gnu.org; Sat, 22 Mar 2025 08:20:30 -0400
Received: from mail-40133.protonmail.ch ([185.70.40.133]:19753)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <pipcet@HIDDEN>)
 id 1tvxpz-0002Cy-JG
 for 77046 <at> debbugs.gnu.org; Sat, 22 Mar 2025 08:20:28 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.com;
 s=protonmail3; t=1742646020; x=1742905220;
 bh=ZFIxv/aXjs54mJc1Nq6QywT0y/U5E1tYgSy7Ru6LB3Q=;
 h=Date:To:From:Cc:Subject:Message-ID:In-Reply-To:References:
 Feedback-ID:From:To:Cc:Date:Subject:Reply-To:Feedback-ID:
 Message-ID:BIMI-Selector:List-Unsubscribe:List-Unsubscribe-Post;
 b=Kva0GaLYUaxWl5gIGvZ2X2iBVSQJY5ZvJt/ragh6eTb1zBxrsyr/R1A/viLfKABht
 YWoWoD+gtr3v3fq6EccG103+Sn79VR3FXR1JPrz7IrvVD7TjoVhDi0el1agxipXCmy
 kVMwIisemou65NqrZmygYIRV60xsitOXl30Rm6C5y1mEmCUufB03m1bAC46KahmQib
 E0yHNMXCDezvc3/Zh3L56qNAvfRLVQMovVEKHyulVWHe2yrEIta3GXY4KhTqLHQ1dU
 uDF4RSIin/PDeT1W0ksjaG0r2qITc/D6FThGF+4NlmaDw+BIxzLiTEzW7MegWjT8t6
 5nuey+B4fmiYQ==
Date: Sat, 22 Mar 2025 12:20:16 +0000
To: Markus Triska <triska@HIDDEN>
From: Pip Cet <pipcet@HIDDEN>
Subject: Re: bug#77046: 31.0.50; Emacs sometimes crashes
Message-ID: <87frj5feal.fsf@HIDDEN>
In-Reply-To: <87wmch8pgk.fsf@HIDDEN>
References: <87y0x5paeg.fsf@HIDDEN> <86msdltddx.fsf@HIDDEN>
 <87r02xi4ks.fsf@HIDDEN> <86ldt5tcsw.fsf@HIDDEN>
 <87iko8d6fl.fsf@HIDDEN> <86v7s7sup8.fsf@HIDDEN>
 <87tt7r34yg.fsf@HIDDEN> <86zfhjqwl5.fsf@HIDDEN>
 <87wmch8pgk.fsf@HIDDEN>
Feedback-ID: 112775352:user:proton
X-Pm-Message-ID: 403a7e33cc7ed41e561aa7e57b17b3196b4694e4
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 77046
Cc: gerd.moellmann@HIDDEN, Eli Zaretskii <eliz@HIDDEN>,
 77046 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

"Markus Triska" <triska@HIDDEN> writes:

> Eli Zaretskii <eliz@HIDDEN> writes:
>
>> Thanks.  I tried on GNU/Linux.
>
> I still get a crash also on Ubuntu 23.10, from which I also reported the
> original issue. I attach the new backtrace below.
>
>> I wonder what is it with your environment that produces unreproducible
>> results, even for such simple problems.  Note that the backtrace
>> you've shown indicated the crash was while loading some Lisp file,
>> which I don't understand at all.
>
> I try to keep every system I use as plain and simple as possible. To the
> best of my knowledge, this Ubuntu 23.10 is very close to a default
> installation, with a few additional packages installed.
>
> Please see below for the new backtrace, using:
>
>     $ ./emacs --version
>     GNU Emacs 31.0.50
>     Development version cf7fdd374ac9 on master branch; build date 2025-03=
-22.
>
> Thank you and all the best,
> Markus
>
> #0 0x000055555575e5a2 in internal_equal_1 (o1=3D0x7ffff47f2fac,
> o2=3Do2@entry=3D0x555555a008e4, equal_kind=3Dequal_kind@entry=3DEQUAL_PLA=
IN,
> depth=3Ddepth@entry=3D0, ht=3Dht@entry=3D0x7fffffffc4f8) at fns.c:2836

As Eli points out, this is very puzzling.  Can you disassemble
internal_equal_1 ("disass internal_equal_1") in the Emacs binary and
evaluate "p *(struct Lisp_String *)0x7ffff47f2fa8" and "p *(struct
Lisp_String *)0x555555a008e0" in a gdb session (either a live one or one
launched on the Emacs core dump)?

That should let us know why we fault at this strange source position.

> #1  0x000055555575f6a5 in internal_equal (ht=3D<optimized out>, depth=3D0=
, equal_kind=3DEQUAL_PLAIN, o2=3D0x555555a008e4, o1=3D<optimized out>) at f=
ns.c:3000
> #2  Fequal (o2=3D0x555555a008e4, o1=3D<optimized out>) at fns.c:2795
> #3  Fassoc (key=3D0x555555a008e4, alist=3D0x7ffff47ec1bb, testfn=3D0x0) a=
t fns.c:2025
> #4 0x0000555555796e2d in exec_byte_code (fun=3D<optimized out>,
> args_template=3D<optimized out>, nargs=3D<optimized out>, args=3D<optimiz=
ed
> out>) at /emacs/src/lisp.h:2230
> #5  0x000055555574b42e in Ffuncall (nargs=3Dnargs@entry=3D3, args=3Dargs@=
entry=3D0x7fffffffc680) at eval.c:3087

> #6 0x000055555566e969 in tty_lookup_color (f=3Df@entry=3D0x555555aeff60,
> color=3D0x555555a008e4, tty_color=3Dtty_color@entry=3D0x7fffffffc720,
> std_color=3Dstd_color@entry=3D0x0) at xfaces.c:1090
> #7 0x0000555555675d8c in tty_defined_color (f=3D0x555555aeff60,
> color_name=3D0x555555ae1270 "unspecified-bg", color_def=3D0x7fffffffc720,
> alloc=3D<optimized out>, _makeIndex=3D<optimized out>) at xfaces.c:1153
> #8 0x000055555566e426 in load_color2 (f=3D0x555555aeff60,
> face=3D0x555555a6d370, name=3D0x555555a00634,
> target_index=3DLFACE_BACKGROUND_INDEX, color=3D0x7fffffffc720) at
> xfaces.c:1300

That line is:

  if (!FRAME_TERMINAL (f)->defined_color_hook
      (f, SSDATA (name), color, true, true))

which looks very unsafe to me: the SSDATA pointer will become invalid
when we compact strings, which we might do since tty_lookup_color calls
into Lisp.  The color_name pointer is used after that point in
tty_defined_color, possibly causing false negatives for the strcmp in
lines 1157/1159.

However, that doesn't really explain this crash, it's just another
(possibly latent) SDATA bug.  At first glance, there seem to be more of
hose in xfaces.c, though, so it's possible something further up the call
chain results in a corrupt SDATA pointer.

Pip





Information forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.

Message received at 77046 <at> debbugs.gnu.org:


Received: (at 77046) by debbugs.gnu.org; 22 Mar 2025 12:05:10 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Mar 22 08:05:09 2025
Received: from localhost ([127.0.0.1]:41335 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tvxbB-0001Qv-EX
	for submit <at> debbugs.gnu.org; Sat, 22 Mar 2025 08:05:09 -0400
Received: from mail-wm1-x331.google.com ([2a00:1450:4864:20::331]:47603)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
 (Exim 4.84_2) (envelope-from <gerd.moellmann@HIDDEN>)
 id 1tvxb8-0001QC-CR
 for 77046 <at> debbugs.gnu.org; Sat, 22 Mar 2025 08:05:06 -0400
Received: by mail-wm1-x331.google.com with SMTP id
 5b1f17b1804b1-43cf034d4abso30581645e9.3
 for <77046 <at> debbugs.gnu.org>; Sat, 22 Mar 2025 05:05:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=gmail.com; s=20230601; t=1742645100; x=1743249900; darn=debbugs.gnu.org;
 h=mime-version:user-agent:message-id:date:references:in-reply-to
 :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to;
 bh=d4B6LXiJZjEp+hKwHeRCUSt5VCl5BdlOJ8fG/G8pegA=;
 b=ftc6YPUqbptxUkecGd5mZ0Aei7vGuP904YACeBkG2LF+vaElhzOPWR5FUqoQmpbw4r
 mTzBw4EZuoPsFI+Uo4fxq+Dh6cAi2Qs0PjadJco9VqTvvA69glmhc01kZioT6EKacIuh
 gIbfv1zcCGrE2bPm9jFsJqXBsfdcZrbFD5+5MWZDofIC/2axY7nXD2g4TqiXzWNNsQJF
 rGuwd4w5ki7Ttqp5JgKAIa4eVMQ95QWgQui0tdqTze308ynWHYFVEWdK0TltbTu/9B6P
 1tsXkZhENM+T/gTF9mlGpcYkclaqs0VjHzoGdyzEBCK9heAZqyMcRWH/i6pGy64kvUd0
 N9Cg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1742645100; x=1743249900;
 h=mime-version:user-agent:message-id:date:references:in-reply-to
 :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date
 :message-id:reply-to;
 bh=d4B6LXiJZjEp+hKwHeRCUSt5VCl5BdlOJ8fG/G8pegA=;
 b=mdiXdtAiGK112Y5pyagimeyZU2sRAojeotnTcedymy/9xXGMS0xaXebuvxGBq/FxIv
 +xO0H3JJ2mfFar/QLx298erDA7mUwbMS2V+J7iGb68KBT036HJ0D59lRx8dIFiNVnaiO
 mnaYP0F7qXy4AUj5BMe4hjUe2Pl9JpqXuotyT9vOn8y1tbylvRWwAFZRXDpFC1VSIWIb
 oIIqhhcsTgHmxg6oYNOcz2WVVDINMmWM+q+7neMHqFb/t24JnCUW6F8lz21L8Z59avek
 aplrWw9zYBt45LlcRqnBBN9DL53w8+wu4QVndgKb+du9erm9uKwvmrtt/TVwEOh5acUh
 76+g==
X-Forwarded-Encrypted: i=1;
 AJvYcCUEtz7LCRL/tSDFe9jHzPPIVhbawjwCAvuPwB1FyEPEXCvKK8sV25bQZrnfKwvL0knEH2MKuQ==@debbugs.gnu.org
X-Gm-Message-State: AOJu0YxglX9FTxBYpy/jKZ7pph0YxdTcck7H0BAa8PoGMW2+DeRhgyDK
 tPS5h2FwPM0aYDJI62qEk7wLgdeLMcATOUOhBik7QIKccvOJN5bdC6RdaQ==
X-Gm-Gg: ASbGncv6b0u15qDN6ttrzE+lt6XJ2ocE1b1U7qH4iwUmRSWMRcN/mj9QtffewfMaBPe
 gzj0o3+HayTTJSPRCDE4MAfLiT0lChEXpSFV3eYRO4K45K5VILJVyQ2po0AMTGe3svzW85MHUDs
 cv/l93sKqjmLkRPBN5rxs5hfxW6Z+nOnIefTK+AgusOaNT+bnGUdZcEykZ5ddxg4aJDQQ51ya3N
 Kwed1Do6ndc7xNxdDa5Gk8G22DbWSvXw2TPz02hq2FWX2JFif9z/7bZUqN5+ZyMjF6CkU7bRmfn
 +IeLgm4hA0cbmcvoQmKnK/p7zOjUXKHQWj3x7fossBLluzyN+fDMKIKiDOEe8Le6mPIpEqbYMl7
 UKZArvnteM4U5qdGJHAZtc6mwLHZqpq7Qs56SAJgNwaTyj74zszfFwQ==
X-Google-Smtp-Source: AGHT+IE6EcRt9DsSsMS/Qfads23g3kOQFMaEKRLK23yoIJz2LYPX0Ur6gDBLpV/bFgTPImktxIQj0w==
X-Received: by 2002:a5d:648e:0:b0:390:ff25:79c8 with SMTP id
 ffacd0b85a97d-3997f90990fmr7800788f8f.20.1742645099419; 
 Sat, 22 Mar 2025 05:04:59 -0700 (PDT)
Received: from pro2 (p200300e0b7145700710257a0fb2f1f7a.dip0.t-ipconnect.de.
 [2003:e0:b714:5700:7102:57a0:fb2f:1f7a])
 by smtp.gmail.com with ESMTPSA id
 ffacd0b85a97d-3997f9b3c2csm4892668f8f.46.2025.03.22.05.04.58
 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
 Sat, 22 Mar 2025 05:04:59 -0700 (PDT)
From: =?utf-8?Q?Gerd_M=C3=B6llmann?= <gerd.moellmann@HIDDEN>
To: Eli Zaretskii <eliz@HIDDEN>
Subject: Re: bug#77046: 31.0.50; Emacs sometimes crashes
In-Reply-To: <86ldsxjpgo.fsf@HIDDEN>
References: <87y0x5paeg.fsf@HIDDEN> <86sendtewh.fsf@HIDDEN>
 <m2wmcpb4bk.fsf@HIDDEN> <86msdltddx.fsf@HIDDEN>
 <87r02xi4ks.fsf@HIDDEN> <86ldt5tcsw.fsf@HIDDEN>
 <87iko8d6fl.fsf@HIDDEN> <86v7s7sup8.fsf@HIDDEN>
 <87tt7r34yg.fsf@HIDDEN> <86zfhjqwl5.fsf@HIDDEN>
 <87wmch8pgk.fsf@HIDDEN> <86ldsxjpgo.fsf@HIDDEN>
Date: Sat, 22 Mar 2025 13:04:58 +0100
Message-ID: <m2jz8h8e51.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 77046
Cc: 77046 <at> debbugs.gnu.org, Markus Triska <triska@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Eli Zaretskii <eliz@HIDDEN> writes:

>> From: Markus Triska <triska@HIDDEN>
>> Cc: gerd.moellmann@HIDDEN,  77046 <at> debbugs.gnu.org
>> Date: Sat, 22 Mar 2025 09:00:27 +0100
>> 
>> Please see below for the new backtrace, using:
>> 
>>     $ ./emacs --version
>>     GNU Emacs 31.0.50
>>     Development version cf7fdd374ac9 on master branch; build date 2025-03-22.
>> 
>> Thank you and all the best,
>> Markus
>> 
>> #0  0x000055555575e5a2 in internal_equal_1 (o1=0x7ffff47f2fac, o2=o2@entry=0x555555a008e4, equal_kind=equal_kind@entry=EQUAL_PLAIN, depth=depth@entry=0, ht=ht@entry=0x7fffffffc4f8) at fns.c:2836
>
> Line 2836 of fns.c is this:
>
>   static bool
>   internal_equal_1 (Lisp_Object o1, Lisp_Object o2, enum equal_kind equal_kind,
> 		    int depth, Lisp_Object *ht)
>   { <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
>    tail_recurse:
>     if (depth > 10)
>
> So the only way I can understand how that line could trigger a crash
> is that you have C stack overflow, something that is hard to believe
> with just 55 call-stack frames in the backtrace.  IOW, it's a mystery
> how and why does this crash in your case.
>
> Maybe Gerd could have some ideas.

Not really, I'm afraid, except to build Emacs with debug, configure with
--enable-checking=yes,glyphs and try to get it reproduced.




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.

Message received at 77046 <at> debbugs.gnu.org:


Received: (at 77046) by debbugs.gnu.org; 22 Mar 2025 11:05:10 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Mar 22 07:05:10 2025
Received: from localhost ([127.0.0.1]:41048 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tvwf7-0003NQ-RB
	for submit <at> debbugs.gnu.org; Sat, 22 Mar 2025 07:05:10 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10]:37448)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <eliz@HIDDEN>) id 1tvwf5-0003HO-OU
 for 77046 <at> debbugs.gnu.org; Sat, 22 Mar 2025 07:05:08 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <eliz@HIDDEN>)
 id 1tvwez-00074T-RL; Sat, 22 Mar 2025 07:05:01 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org;
 s=fencepost-gnu-org; h=References:Subject:In-Reply-To:To:From:Date:
 mime-version; bh=1HGLfEHRWKn5QeN61Mr3N0lXTLSifktslpHVSXoC4Uw=; b=TxKXBKdk+2ze
 zScrZtCI5L2EZgsDB2ETs/riRKnP0ujTQIVD+oiEsTUPoXPpJyGA4AnIIZMFy/Eis3wmwFaeZKQv/
 SUBzpeDw2FHmwl4pxEO8FL24lfnBrk4m2xdktWno+rUeFYMsrqEJHsQ/FiF0bINCBg8J2uyx4fgXK
 ezSAOSnbTq4cfF52alLxLzhsVZ5A3TfAvdhVqHXJaTlKJaZsu1prDXLbG8CJM4UNuMtfn7Knw2RiV
 STgpRSXvlnf79kS37FB7JyEWZrCN/vGH/x5E6o6s2TeVd+ly6mo39wJyDJxvZpmVCeHd8fhbRsP7c
 N/lgElScRO1f/YNbc89VTw==;
Date: Sat, 22 Mar 2025 13:04:55 +0200
Message-Id: <86ldsxjpgo.fsf@HIDDEN>
From: Eli Zaretskii <eliz@HIDDEN>
To: Markus Triska <triska@HIDDEN>
In-Reply-To: <87wmch8pgk.fsf@HIDDEN> (message from Markus Triska on Sat, 
 22 Mar 2025 09:00:27 +0100)
Subject: Re: bug#77046: 31.0.50; Emacs sometimes crashes
References: <87y0x5paeg.fsf@HIDDEN> <86sendtewh.fsf@HIDDEN>
 <m2wmcpb4bk.fsf@HIDDEN> <86msdltddx.fsf@HIDDEN>
 <87r02xi4ks.fsf@HIDDEN> <86ldt5tcsw.fsf@HIDDEN>
 <87iko8d6fl.fsf@HIDDEN> <86v7s7sup8.fsf@HIDDEN>
 <87tt7r34yg.fsf@HIDDEN> <86zfhjqwl5.fsf@HIDDEN>
 <87wmch8pgk.fsf@HIDDEN>
X-Spam-Score: -2.3 (--)
X-Debbugs-Envelope-To: 77046
Cc: gerd.moellmann@HIDDEN, 77046 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -3.3 (---)

> From: Markus Triska <triska@HIDDEN>
> Cc: gerd.moellmann@HIDDEN,  77046 <at> debbugs.gnu.org
> Date: Sat, 22 Mar 2025 09:00:27 +0100
> 
> Please see below for the new backtrace, using:
> 
>     $ ./emacs --version
>     GNU Emacs 31.0.50
>     Development version cf7fdd374ac9 on master branch; build date 2025-03-22.
> 
> Thank you and all the best,
> Markus
> 
> #0  0x000055555575e5a2 in internal_equal_1 (o1=0x7ffff47f2fac, o2=o2@entry=0x555555a008e4, equal_kind=equal_kind@entry=EQUAL_PLAIN, depth=depth@entry=0, ht=ht@entry=0x7fffffffc4f8) at fns.c:2836

Line 2836 of fns.c is this:

  static bool
  internal_equal_1 (Lisp_Object o1, Lisp_Object o2, enum equal_kind equal_kind,
		    int depth, Lisp_Object *ht)
  { <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
   tail_recurse:
    if (depth > 10)

So the only way I can understand how that line could trigger a crash
is that you have C stack overflow, something that is hard to believe
with just 55 call-stack frames in the backtrace.  IOW, it's a mystery
how and why does this crash in your case.

Maybe Gerd could have some ideas.




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.

Message received at 77046 <at> debbugs.gnu.org:


Received: (at 77046) by debbugs.gnu.org; 22 Mar 2025 08:00:32 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Mar 22 04:00:32 2025
Received: from localhost ([127.0.0.1]:40682 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tvtmR-0003R5-Jx
	for submit <at> debbugs.gnu.org; Sat, 22 Mar 2025 04:00:32 -0400
Received: from [78.47.144.35] (port=53200 helo=metalevel.at)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <triska@HIDDEN>) id 1tvtmP-0003Qv-8k
 for 77046 <at> debbugs.gnu.org; Sat, 22 Mar 2025 04:00:29 -0400
Received: by metalevel.at (Postfix, from userid 1000)
 id D3CC49C780; Sat, 22 Mar 2025 09:00:27 +0100 (CET)
From: Markus Triska <triska@HIDDEN>
To: Eli Zaretskii <eliz@HIDDEN>
Subject: Re: bug#77046: 31.0.50; Emacs sometimes crashes
References: <87y0x5paeg.fsf@HIDDEN> <86sendtewh.fsf@HIDDEN>
 <m2wmcpb4bk.fsf@HIDDEN> <86msdltddx.fsf@HIDDEN>
 <87r02xi4ks.fsf@HIDDEN> <86ldt5tcsw.fsf@HIDDEN>
 <87iko8d6fl.fsf@HIDDEN> <86v7s7sup8.fsf@HIDDEN>
 <87tt7r34yg.fsf@HIDDEN> <86zfhjqwl5.fsf@HIDDEN>
Date: Sat, 22 Mar 2025 09:00:27 +0100
In-Reply-To: <86zfhjqwl5.fsf@HIDDEN> (Eli Zaretskii's message of "Mon, 17 Mar
 2025 21:35:34 +0200")
Message-ID: <87wmch8pgk.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 1.3 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  Eli Zaretskii <eliz@HIDDEN> writes: > Thanks. I tried on
 GNU/Linux. I still get a crash also on Ubuntu 23.10, from which I also reported
 the original issue. I attach the new backtrace below. 
 Content analysis details:   (1.3 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
 The query to Validity was blocked.  See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243
 for more information.
 [78.47.144.35 listed in sa-accredit.habeas.com]
 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
 query to Validity was blocked.  See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243
 for more information.
 [78.47.144.35 listed in bl.score.senderscore.com]
 0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
 0.0 SPF_NONE               SPF: sender does not publish an SPF Record
 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
X-Debbugs-Envelope-To: 77046
Cc: gerd.moellmann@HIDDEN, 77046 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.3 (/)

Eli Zaretskii <eliz@HIDDEN> writes:

> Thanks.  I tried on GNU/Linux.

I still get a crash also on Ubuntu 23.10, from which I also reported the
original issue. I attach the new backtrace below.

> I wonder what is it with your environment that produces unreproducible
> results, even for such simple problems.  Note that the backtrace
> you've shown indicated the crash was while loading some Lisp file,
> which I don't understand at all.

I try to keep every system I use as plain and simple as possible. To the
best of my knowledge, this Ubuntu 23.10 is very close to a default
installation, with a few additional packages installed.

Please see below for the new backtrace, using:

    $ ./emacs --version
    GNU Emacs 31.0.50
    Development version cf7fdd374ac9 on master branch; build date 2025-03-22.

Thank you and all the best,
Markus

#0  0x000055555575e5a2 in internal_equal_1 (o1=0x7ffff47f2fac, o2=o2@entry=0x555555a008e4, equal_kind=equal_kind@entry=EQUAL_PLAIN, depth=depth@entry=0, ht=ht@entry=0x7fffffffc4f8) at fns.c:2836
#1  0x000055555575f6a5 in internal_equal (ht=<optimized out>, depth=0, equal_kind=EQUAL_PLAIN, o2=0x555555a008e4, o1=<optimized out>) at fns.c:3000
#2  Fequal (o2=0x555555a008e4, o1=<optimized out>) at fns.c:2795
#3  Fassoc (key=0x555555a008e4, alist=0x7ffff47ec1bb, testfn=0x0) at fns.c:2025
#4  0x0000555555796e2d in exec_byte_code (fun=<optimized out>, args_template=<optimized out>, nargs=<optimized out>, args=<optimized out>) at /emacs/src/lisp.h:2230
#5  0x000055555574b42e in Ffuncall (nargs=nargs@entry=3, args=args@entry=0x7fffffffc680) at eval.c:3087
#6  0x000055555566e969 in tty_lookup_color (f=f@entry=0x555555aeff60, color=0x555555a008e4, tty_color=tty_color@entry=0x7fffffffc720, std_color=std_color@entry=0x0) at xfaces.c:1090
#7  0x0000555555675d8c in tty_defined_color (f=0x555555aeff60, color_name=0x555555ae1270 "unspecified-bg", color_def=0x7fffffffc720, alloc=<optimized out>, _makeIndex=<optimized out>) at xfaces.c:1153
#8  0x000055555566e426 in load_color2 (f=0x555555aeff60, face=0x555555a6d370, name=0x555555a00634, target_index=LFACE_BACKGROUND_INDEX, color=0x7fffffffc720) at xfaces.c:1300
#9  0x000055555566eafe in load_color (target_index=LFACE_BACKGROUND_INDEX, name=0x555555a00634, face=0x555555a6d370, f=0x555555aeff60) at xfaces.c:1363
#10 map_tty_color (f=f@entry=0x555555aeff60, face=face@entry=0x555555a6d370, color=0x555555a00634, idx=idx@entry=LFACE_BACKGROUND_INDEX, defaulted=<optimized out>) at xfaces.c:6575
#11 0x00005555556765a5 in realize_tty_face (cache=0x555555a667e0, attrs=0x7fffffffc810) at xfaces.c:6725
#12 realize_face (cache=cache@entry=0x555555a667e0, attrs=attrs@entry=0x7fffffffc810, former_face_id=former_face_id@entry=16) at xfaces.c:6127
#13 0x0000555555677ea8 in realize_named_face (f=f@entry=0x555555aeff60, symbol=symbol@entry=0xac80, id=id@entry=16) at xfaces.c:6095
#14 0x000055555567828a in realize_basic_faces (f=f@entry=0x555555aeff60) at xfaces.c:5902
#15 0x000055555567892d in init_frame_faces (f=f@entry=0x555555aeff60) at xfaces.c:687
#16 0x00005555555b5478 in Fmake_terminal_frame (parms=<optimized out>) at frame.c:1682
#17 0x0000555555796e2d in exec_byte_code (fun=<optimized out>, args_template=<optimized out>, nargs=<optimized out>, args=<optimized out>) at /emacs/src/lisp.h:2230
#18 0x000055555574b42e in Ffuncall (nargs=nargs@entry=2, args=args@entry=0x7ffff35ff370) at eval.c:3087
#19 0x000055555574baa2 in Fapply (nargs=2, args=0x7ffff35ff370) at eval.c:2716
#20 0x0000555555796e2d in exec_byte_code (fun=<optimized out>, args_template=<optimized out>, nargs=<optimized out>, args=<optimized out>) at /emacs/src/lisp.h:2230
#21 0x000055555574fde4 in apply_lambda (fun=<optimized out>, args=<optimized out>, count=count@entry=...) at eval.c:3209
#22 0x000055555574e3d2 in eval_sub (form=<optimized out>) at eval.c:2681
#23 0x0000555555750061 in Flet (args=<optimized out>) at eval.c:1094
#24 0x000055555574e77f in eval_sub (form=<optimized out>) at eval.c:2543
#25 0x0000555555750280 in Fprogn (body=<optimized out>) at eval.c:439
#26 Flet (args=<optimized out>) at eval.c:1123
#27 0x000055555574e77f in eval_sub (form=<optimized out>) at eval.c:2543
#28 0x000055555574f7d8 in Fprogn (body=<optimized out>) at eval.c:439
#29 funcall_lambda (fun=fun@entry=0x555555a5b7ed, nargs=nargs@entry=0, arg_vector=arg_vector@entry=0x7fffffffd1f0) at eval.c:3344
#30 0x000055555574fde4 in apply_lambda (fun=<optimized out>, args=<optimized out>, count=count@entry=...) at eval.c:3209
#31 0x000055555574e3d2 in eval_sub (form=<optimized out>) at eval.c:2681
#32 0x000055555574f450 in Fprogn (body=<optimized out>) at eval.c:439
#33 prog_ignore (body=<optimized out>) at eval.c:450
#34 Fwhile (args=<optimized out>) at eval.c:1144
#35 0x000055555574e77f in eval_sub (form=<optimized out>) at eval.c:2543
#36 0x000055555577819e in readevalloop_eager_expand_eval (val=<optimized out>, val@entry=0x7ffff739e1c3, macroexpand=0xae30) at lread.c:2358
#37 0x000055555577fb4c in readevalloop (readcharfun=readcharfun@entry=0x555555a5b20d, infile0=infile0@entry=0x0, sourcename=sourcename@entry=0x555555a57d24, printflag=printflag@entry=false, unibyte=unibyte@entry=0x0, readfun=readfun@entry=0x0, start=0x0, end=<optimized out>) at lread.c:2540
#38 0x0000555555780dbe in Feval_buffer (buffer=<optimized out>, printflag=0x0, filename=0x555555a57d24, unibyte=0x0, do_allow_print=<optimized out>) at lread.c:2618
#39 0x0000555555796e2d in exec_byte_code (fun=<optimized out>, args_template=<optimized out>, nargs=<optimized out>, args=<optimized out>) at /emacs/src/lisp.h:2230
#40 0x000055555574b42e in Ffuncall (nargs=nargs@entry=5, args=args@entry=0x7fffffffd7b0) at eval.c:3087
#41 0x00005555557809b1 in Fload (file=0x555555a57a64, noerror=<optimized out>, nomessage=0x30, nosuffix=<optimized out>, must_suffix=<optimized out>) at lread.c:1615
#42 0x0000555555796e2d in exec_byte_code (fun=<optimized out>, args_template=<optimized out>, nargs=<optimized out>, args=<optimized out>) at /emacs/src/lisp.h:2230
#43 0x000055555574fde4 in apply_lambda (fun=<optimized out>, args=<optimized out>, count=count@entry=...) at eval.c:3209
#44 0x000055555574e3d2 in eval_sub (form=form@entry=0x7ffff49c14eb) at eval.c:2681
#45 0x0000555555750be3 in Feval (form=0x7ffff49c14eb, lexical=<optimized out>) at eval.c:2456
#46 0x0000555555749b77 in internal_condition_case (bfun=bfun@entry=0x5555556b9e10 <top_level_2>, handlers=handlers@entry=0x90, hfun=hfun@entry=0x5555556c2630 <cmd_error>) at eval.c:1620
#47 0x00005555556ba94a in top_level_1 (ignore=ignore@entry=0x0) at keyboard.c:1191
#48 0x0000555555749ab9 in internal_catch (tag=tag@entry=0x11df0, func=func@entry=0x5555556ba920 <top_level_1>, arg=arg@entry=0x0) at eval.c:1300
#49 0x00005555556b9d6f in command_loop () at keyboard.c:1140
#50 0x00005555556c21a5 in recursive_edit_1 () at keyboard.c:749
#51 0x00005555556c2544 in Frecursive_edit () at keyboard.c:832
#52 0x000055555559ec1e in main (argc=<optimized out>, argv=0x7fffffffde38) at emacs.c:2560





Information forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.

Message received at 77046 <at> debbugs.gnu.org:


Received: (at 77046) by debbugs.gnu.org; 17 Mar 2025 19:35:53 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon Mar 17 15:35:53 2025
Received: from localhost ([127.0.0.1]:32780 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tuGFc-0007xn-BE
	for submit <at> debbugs.gnu.org; Mon, 17 Mar 2025 15:35:53 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10]:46042)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <eliz@HIDDEN>) id 1tuGFZ-0007x1-DN
 for 77046 <at> debbugs.gnu.org; Mon, 17 Mar 2025 15:35:50 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <eliz@HIDDEN>)
 id 1tuGFP-0001ik-6h; Mon, 17 Mar 2025 15:35:43 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org;
 s=fencepost-gnu-org; h=References:Subject:In-Reply-To:To:From:Date:
 mime-version; bh=ZT0B1dUQ6r/AOH1efhQ/kwDtE7Yu5J27XOwbTOC7Fkk=; b=k/GxM1VsL56M
 ZodNqoHgWtm96zlCr5eB0r7NOaUGQ9+jzVX8OQri1HsDkDSNeA1bTUq/Lnui/0mA2i44yoEBXf4iw
 2XCpLlpy9a4y4pfQxmN4WxqLaHgTs7zc21bS9htOSAeh8/wfBMMqwaUUdIBqMNnYvbQKyqiM4v6l5
 l3MIyKAHtlphxWblhjQio1Xbjst0PAxIErsr1+juYNCfSxt9ZFetCVtylblBBYV4KugaqXX5/u0Y7
 rpEh0jW3tDN9y7HHY93+LEcBzfCgykK2aEiB9fsjxlpkfYyfFWxASLxggpfW89uwekiAq8pMrUJes
 leO0mwGgVDU+ExhA/r0pmw==;
Date: Mon, 17 Mar 2025 21:35:34 +0200
Message-Id: <86zfhjqwl5.fsf@HIDDEN>
From: Eli Zaretskii <eliz@HIDDEN>
To: Markus Triska <triska@HIDDEN>
In-Reply-To: <87tt7r34yg.fsf@HIDDEN> (message from Markus Triska on Mon, 
 17 Mar 2025 19:08:39 +0100)
Subject: Re: bug#77046: 31.0.50; Emacs sometimes crashes
References: <87y0x5paeg.fsf@HIDDEN> <86sendtewh.fsf@HIDDEN>
 <m2wmcpb4bk.fsf@HIDDEN> <86msdltddx.fsf@HIDDEN>
 <87r02xi4ks.fsf@HIDDEN> <86ldt5tcsw.fsf@HIDDEN>
 <87iko8d6fl.fsf@HIDDEN> <86v7s7sup8.fsf@HIDDEN>
 <87tt7r34yg.fsf@HIDDEN>
X-Spam-Score: -2.3 (--)
X-Debbugs-Envelope-To: 77046
Cc: gerd.moellmann@HIDDEN, 77046 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -3.3 (---)

> From: Markus Triska <triska@HIDDEN>
> Cc: gerd.moellmann@HIDDEN,  77046 <at> debbugs.gnu.org
> Date: Mon, 17 Mar 2025 19:08:39 +0100
> 
> Eli Zaretskii <eliz@HIDDEN> writes:
> 
> > With the same backtrace which ends with
> 
> The new crash is now on OSX, where I cannot easily run gdb and do not
> see the backtrace. I will try again on the system from which I initially
> reported this, when I can physically access it again next week.

Thanks.  I tried on GNU/Linux.

> > ?  Then I cannot reproduce this.  What is the probablity to get a
> > crash in your case using that recipe?  One in 3? one in 10? one in
> > 100?
> 
> My guess is around 1 in 10. I now got a crash again after 6 tries. It is
> good to leave it running for a bit, and then interrupt it.

I leave it to run to frame numbers in hundreds or thousands before I
interrupt the command.  It never crashes, definitely not 1 in 10.

I wonder what is it with your environment that produces unreproducible
results, even for such simple problems.  Note that the backtrace
you've shown indicated the crash was while loading some Lisp file,
which I don't understand at all.




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.

Message received at 77046 <at> debbugs.gnu.org:


Received: (at 77046) by debbugs.gnu.org; 17 Mar 2025 18:08:45 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon Mar 17 14:08:45 2025
Received: from localhost ([127.0.0.1]:60835 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tuEtI-0002lr-NT
	for submit <at> debbugs.gnu.org; Mon, 17 Mar 2025 14:08:45 -0400
Received: from [78.47.144.35] (port=47390 helo=metalevel.at)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <triska@HIDDEN>) id 1tuEtE-0002lE-Sb
 for 77046 <at> debbugs.gnu.org; Mon, 17 Mar 2025 14:08:41 -0400
Received: by metalevel.at (Postfix, from userid 1000)
 id A5FF19C777; Mon, 17 Mar 2025 19:08:39 +0100 (CET)
From: Markus Triska <triska@HIDDEN>
To: Eli Zaretskii <eliz@HIDDEN>
Subject: Re: bug#77046: 31.0.50; Emacs sometimes crashes
References: <87y0x5paeg.fsf@HIDDEN> <86sendtewh.fsf@HIDDEN>
 <m2wmcpb4bk.fsf@HIDDEN> <86msdltddx.fsf@HIDDEN>
 <87r02xi4ks.fsf@HIDDEN> <86ldt5tcsw.fsf@HIDDEN>
 <87iko8d6fl.fsf@HIDDEN> <86v7s7sup8.fsf@HIDDEN>
Date: Mon, 17 Mar 2025 19:08:39 +0100
In-Reply-To: <86v7s7sup8.fsf@HIDDEN> (Eli Zaretskii's message of "Mon, 17 Mar
 2025 14:33:23 +0200")
Message-ID: <87tt7r34yg.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 1.3 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview: Eli Zaretskii <eliz@HIDDEN> writes: > With the same
 backtrace
 which ends with The new crash is now on OSX, where I cannot easily run gdb
 and do not see the backtrace. I will try again on the system from which I
 initially reported this, when I can physically access it again next [...]
 Content analysis details:   (1.3 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
 The query to Validity was blocked.  See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243
 for more information.
 [78.47.144.35 listed in sa-trusted.bondedsender.org]
 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
 query to Validity was blocked.  See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243
 for more information.
 [78.47.144.35 listed in bl.score.senderscore.com]
 0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
 0.0 SPF_NONE               SPF: sender does not publish an SPF Record
 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
X-Debbugs-Envelope-To: 77046
Cc: gerd.moellmann@HIDDEN, 77046 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.3 (/)

Eli Zaretskii <eliz@HIDDEN> writes:

> With the same backtrace which ends with

The new crash is now on OSX, where I cannot easily run gdb and do not
see the backtrace. I will try again on the system from which I initially
reported this, when I can physically access it again next week.

> ?  Then I cannot reproduce this.  What is the probablity to get a
> crash in your case using that recipe?  One in 3? one in 10? one in
> 100?

My guess is around 1 in 10. I now got a crash again after 6 tries. It is
good to leave it running for a bit, and then interrupt it.





Information forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.

Message received at 77046 <at> debbugs.gnu.org:


Received: (at 77046) by debbugs.gnu.org; 17 Mar 2025 12:33:47 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon Mar 17 08:33:47 2025
Received: from localhost ([127.0.0.1]:56537 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tu9f9-0004vv-0i
	for submit <at> debbugs.gnu.org; Mon, 17 Mar 2025 08:33:47 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10]:48284)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <eliz@HIDDEN>) id 1tu9f6-0004uv-Ux
 for 77046 <at> debbugs.gnu.org; Mon, 17 Mar 2025 08:33:45 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <eliz@HIDDEN>)
 id 1tu9ey-0005by-TY; Mon, 17 Mar 2025 08:33:38 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org;
 s=fencepost-gnu-org; h=References:Subject:In-Reply-To:To:From:Date:
 mime-version; bh=rqjPaTGLDdIBMHBTCvWmXj0dktfIfJDJTvQ+2XJEwPA=; b=AreTEe/d+Qhf
 fBYsoOYndj88Vkm335jdsmjQuNuCePCQCdfA9hhDYF2MAVDkUfJKnl/bOZuuz33cOJGj7ZvNsml1k
 08Sgc30NyleuvmBe5JE9yLtsNmRkGxi7Fbg+j8kHkelF0uk2W0zkrVY/FUqYoqmgqbbK+GVGZNLqn
 hcVCBSL3FTc2JAxlqhP4YguWNiOUo4u21E4Idg768MYCjsjz3FQTXbOeTRjbEbBg3kwYdsaaiDkwf
 S7bmlg+QeOCiE/GgJpMFn6RxWI+T59WTTd+fXyxblXNp+3SMYZGAuEyNviG6Dp4h7J4OHZ6UbryYU
 +r6w3UVz513WeGkCa/mQmQ==;
Date: Mon, 17 Mar 2025 14:33:23 +0200
Message-Id: <86v7s7sup8.fsf@HIDDEN>
From: Eli Zaretskii <eliz@HIDDEN>
To: Markus Triska <triska@HIDDEN>
In-Reply-To: <87iko8d6fl.fsf@HIDDEN> (message from Markus Triska on Sun, 
 16 Mar 2025 22:14:22 +0100)
Subject: Re: bug#77046: 31.0.50; Emacs sometimes crashes
References: <87y0x5paeg.fsf@HIDDEN> <86sendtewh.fsf@HIDDEN>
 <m2wmcpb4bk.fsf@HIDDEN> <86msdltddx.fsf@HIDDEN>
 <87r02xi4ks.fsf@HIDDEN> <86ldt5tcsw.fsf@HIDDEN>
 <87iko8d6fl.fsf@HIDDEN>
X-Spam-Score: -2.3 (--)
X-Debbugs-Envelope-To: 77046
Cc: gerd.moellmann@HIDDEN, 77046 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -3.3 (---)

> From: Markus Triska <triska@HIDDEN>
> Cc: gerd.moellmann@HIDDEN,  77046 <at> debbugs.gnu.org
> Date: Sun, 16 Mar 2025 22:14:22 +0100
> 
> Eli Zaretskii <eliz@HIDDEN> writes:
> 
> >> Thank you all for looking into this and installing a correction!
> >
> > Please tell if you still have crashes after the fix.
> 
> Yes, I still get crashes also with the now current master branch:
> 
>     $ ./emacs --version
>     GNU Emacs 31.0.50
>     Development version eab14d68b2e7 on master branch; build date 2025-03-16.

With the same backtrace which ends with

> #0  0x000055555575c057 in plist_get (plist=<optimized out>, prop=0x7c20) at fns.c:2621
> #1  0x000055555575c347 in Fget (propname=<optimized out>, symbol=<optimized out>) at fns.c:2641

?  Then I cannot reproduce this.  What is the probablity to get a
crash in your case using that recipe?  One in 3? one in 10? one in
100?




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.

Message received at 77046 <at> debbugs.gnu.org:


Received: (at 77046) by debbugs.gnu.org; 16 Mar 2025 21:14:30 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sun Mar 16 17:14:29 2025
Received: from localhost ([127.0.0.1]:51001 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ttvJU-0002Mi-JL
	for submit <at> debbugs.gnu.org; Sun, 16 Mar 2025 17:14:29 -0400
Received: from [78.47.144.35] (port=35170 helo=metalevel.at)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <triska@HIDDEN>) id 1ttvJQ-0002Lp-Vb
 for 77046 <at> debbugs.gnu.org; Sun, 16 Mar 2025 17:14:26 -0400
Received: by metalevel.at (Postfix, from userid 1000)
 id 3513B9C790; Sun, 16 Mar 2025 22:14:22 +0100 (CET)
From: Markus Triska <triska@HIDDEN>
To: Eli Zaretskii <eliz@HIDDEN>
Subject: Re: bug#77046: 31.0.50; Emacs sometimes crashes
References: <87y0x5paeg.fsf@HIDDEN> <86sendtewh.fsf@HIDDEN>
 <m2wmcpb4bk.fsf@HIDDEN> <86msdltddx.fsf@HIDDEN>
 <87r02xi4ks.fsf@HIDDEN> <86ldt5tcsw.fsf@HIDDEN>
Date: Sun, 16 Mar 2025 22:14:22 +0100
Message-ID: <87iko8d6fl.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 1.3 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  Eli Zaretskii <eliz@HIDDEN> writes: >> Thank you all for
 looking into this and installing a correction! > > Please tell if you still
 have crashes after the fix. Yes, I still get crashes also with the now current
 master branch: 
 Content analysis details:   (1.3 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
 query to Validity was blocked.  See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243
 for more information.
 [78.47.144.35 listed in sa-trusted.bondedsender.org]
 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
 query to Validity was blocked.  See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243
 for more information.
 [78.47.144.35 listed in bl.score.senderscore.com]
 0.0 SPF_NONE               SPF: sender does not publish an SPF Record
 0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
X-Debbugs-Envelope-To: 77046
Cc: gerd.moellmann@HIDDEN, 77046 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.3 (/)

Eli Zaretskii <eliz@HIDDEN> writes:

>> Thank you all for looking into this and installing a correction!
>
> Please tell if you still have crashes after the fix.

Yes, I still get crashes also with the now current master branch:

    $ ./emacs --version
    GNU Emacs 31.0.50
    Development version eab14d68b2e7 on master branch; build date 2025-03-16.




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.

Message received at 77046 <at> debbugs.gnu.org:


Received: (at 77046) by debbugs.gnu.org; 16 Mar 2025 11:50:37 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sun Mar 16 07:50:37 2025
Received: from localhost ([127.0.0.1]:45852 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ttmVo-0006Cz-Fz
	for submit <at> debbugs.gnu.org; Sun, 16 Mar 2025 07:50:36 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10]:34646)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <eliz@HIDDEN>) id 1ttmVl-0006C2-Ev
 for 77046 <at> debbugs.gnu.org; Sun, 16 Mar 2025 07:50:34 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <eliz@HIDDEN>)
 id 1ttmVd-0000BO-UX; Sun, 16 Mar 2025 07:50:27 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org;
 s=fencepost-gnu-org; h=MIME-version:References:Subject:In-Reply-To:To:From:
 Date; bh=GFUWR2kFlYlOwcGooli8B+TMSGEPBTsQ3k/q7TebpWY=; b=ULjlgG9914KU8Kxxi96Y
 QHwUVflqxJYtvu39kKxt7SwInQGTsJaws6TRXaQvVVV6hEQBzgvkohQFOJKVwWK6JryG17BW6+8gd
 sBbMCrxmGe5HdfkDegNNfR+CAOmXrOz4tDDK00wVNCqS8tYXWmHJPSPskYZU3XeAfvnki/w1dvdbV
 fk1OI0vG2793QEtVdfOgMxrG+C3YWm0hYQZwYuqMpCntIglaH0N/T2iDRU45uYAeWhIXjqxWOE3cO
 tIFMCYd893Xt6DApTKyXUyBwDbki6D+NjX4UMqahsSKxsmkEsSzDjWViL2F4BnozX+bWZPCL9Jq1+
 Vv0LN7DmZKRNCg==;
Date: Sun, 16 Mar 2025 13:50:07 +0200
Message-Id: <86ldt5tcsw.fsf@HIDDEN>
From: Eli Zaretskii <eliz@HIDDEN>
To: Markus Triska <triska@HIDDEN>
In-Reply-To: <87r02xi4ks.fsf@HIDDEN> (message from Markus Triska on Sun, 
 16 Mar 2025 12:43:15 +0100)
Subject: Re: bug#77046: 31.0.50; Emacs sometimes crashes
References: <87y0x5paeg.fsf@HIDDEN> <86sendtewh.fsf@HIDDEN>
 <m2wmcpb4bk.fsf@HIDDEN> <86msdltddx.fsf@HIDDEN>
 <87r02xi4ks.fsf@HIDDEN>
MIME-version: 1.0
Content-type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Spam-Score: -2.3 (--)
X-Debbugs-Envelope-To: 77046
Cc: gerd.moellmann@HIDDEN, 77046 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -3.3 (---)

> From: Markus Triska <triska@HIDDEN>
> Cc: Gerd Möllmann <gerd.moellmann@HIDDEN>,
>   77046 <at> debbugs.gnu.org
> Date: Sun, 16 Mar 2025 12:43:15 +0100
> 
> Thank you all for looking into this and installing a correction!

Please tell if you still have crashes after the fix.




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.

Message received at 77046 <at> debbugs.gnu.org:


Received: (at 77046) by debbugs.gnu.org; 16 Mar 2025 11:43:20 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sun Mar 16 07:43:20 2025
Received: from localhost ([127.0.0.1]:45815 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ttmOl-0004z5-D2
	for submit <at> debbugs.gnu.org; Sun, 16 Mar 2025 07:43:19 -0400
Received: from [78.47.144.35] (port=58202 helo=metalevel.at)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <triska@HIDDEN>) id 1ttmOi-0004yl-ST
 for 77046 <at> debbugs.gnu.org; Sun, 16 Mar 2025 07:43:17 -0400
Received: by metalevel.at (Postfix, from userid 1000)
 id B06719C772; Sun, 16 Mar 2025 12:43:15 +0100 (CET)
From: Markus Triska <triska@HIDDEN>
To: Eli Zaretskii <eliz@HIDDEN>
Subject: Re: bug#77046: 31.0.50; Emacs sometimes crashes
References: <87y0x5paeg.fsf@HIDDEN> <86sendtewh.fsf@HIDDEN>
 <m2wmcpb4bk.fsf@HIDDEN> <86msdltddx.fsf@HIDDEN>
Date: Sun, 16 Mar 2025 12:43:15 +0100
In-Reply-To: <86msdltddx.fsf@HIDDEN> (Eli Zaretskii's message of "Sun, 16 Mar
 2025 13:37:30 +0200")
Message-ID: <87r02xi4ks.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 1.3 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview: Thank you all for looking into this and installing a
 correction!
 Eli Zaretskii <eliz@HIDDEN> writes: >> (I wonder a bit though, how redisplay
 got its hands on that child frame. >> OTOH. the OP's .el with
 make-frame/delete-frame
 and redisplays in a >> tight loop is something so unusual...) > > Exactly
 [...] Content analysis details:   (1.3 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
 query to Validity was blocked.  See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243
 for more information.
 [78.47.144.35 listed in bl.score.senderscore.com]
 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
 The query to Validity was blocked.  See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243
 for more information.
 [78.47.144.35 listed in sa-accredit.habeas.com]
 0.0 SPF_NONE               SPF: sender does not publish an SPF Record
 0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
X-Debbugs-Envelope-To: 77046
Cc: Gerd =?utf-8?Q?M=C3=B6llmann?= <gerd.moellmann@HIDDEN>,
 77046 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.3 (/)

Thank you all for looking into this and installing a correction!

Eli Zaretskii <eliz@HIDDEN> writes:

>> (I wonder a bit though, how redisplay got its hands on that child frame.
>> OTOH. the OP's .el with make-frame/delete-frame and redisplays in a
>> tight loop is something so unusual...)
>
> Exactly my thoughts.

Tight loops I use in tests help to quickly exhibit issues that occur
only rarely. #76186 is another example of such an issue: It occurs very
rarely, and the tight loop helps to elicit it in a short time.

All the best,
Markus




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.

Message received at 77046 <at> debbugs.gnu.org:


Received: (at 77046) by debbugs.gnu.org; 16 Mar 2025 11:37:43 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sun Mar 16 07:37:43 2025
Received: from localhost ([127.0.0.1]:45781 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ttmJK-0004C8-NV
	for submit <at> debbugs.gnu.org; Sun, 16 Mar 2025 07:37:43 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10]:50656)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <eliz@HIDDEN>) id 1ttmJI-0004BZ-7T
 for 77046 <at> debbugs.gnu.org; Sun, 16 Mar 2025 07:37:40 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <eliz@HIDDEN>)
 id 1ttmJB-000724-Sb; Sun, 16 Mar 2025 07:37:34 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org;
 s=fencepost-gnu-org; h=MIME-version:References:Subject:In-Reply-To:To:From:
 Date; bh=O0FK0Gbte8tApiLZvTdJjFTT1yO77PQsPD9xMJ/Md4s=; b=pWngOr7MeYRsPhKCyLQN
 d/DVZfQV3PtXHyi18J7ln5sCTptrAy2PacEGDQQEbe53DmAKS5xW2JL2y84VF9ooSZdeM1DC5MOeb
 IwN4DHi1lB8z2M7WekpJICzf8xuI6SG94NXYRmmqzI3EB96RnHj0z4ZPO4FnV3oojiq2unOlWFzQN
 vQ9W0f0FprqlzDGT0L6zy/iI9o6h5AF+t6YgLvMWq4WndYh5031pLtZgGue4x+krfVNGkaUid8xD1
 hoyFuMHDCyTTHJAFtHuetRxPJMjspo5r+CArezu1so2Cp6V0klzSJIrGxZLHG6G4gfo1KZiqRj4/4
 v2WI22o4uuVmFw==;
Date: Sun, 16 Mar 2025 13:37:30 +0200
Message-Id: <86msdltddx.fsf@HIDDEN>
From: Eli Zaretskii <eliz@HIDDEN>
To: Gerd =?utf-8?Q?M=C3=B6llmann?= <gerd.moellmann@HIDDEN>
In-Reply-To: <m2wmcpb4bk.fsf@HIDDEN> (message from Gerd =?utf-8?Q?M?=
 =?utf-8?Q?=C3=B6llmann?= on Sun, 16 Mar 2025 12:30:39 +0100)
Subject: Re: bug#77046: 31.0.50; Emacs sometimes crashes
References: <87y0x5paeg.fsf@HIDDEN> <86sendtewh.fsf@HIDDEN>
 <m2wmcpb4bk.fsf@HIDDEN>
MIME-version: 1.0
Content-type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Spam-Score: -2.3 (--)
X-Debbugs-Envelope-To: 77046
Cc: 77046 <at> debbugs.gnu.org, triska@HIDDEN
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -3.3 (---)

> From: Gerd Möllmann <gerd.moellmann@HIDDEN>
> Cc: Markus Triska <triska@HIDDEN>,  77046 <at> debbugs.gnu.org
> Date: Sun, 16 Mar 2025 12:30:39 +0100
> 
> Yes, I think your patch is correct.

Thanks, installed on master.

> (I wonder a bit though, how redisplay got its hands on that child frame.
> OTOH. the OP's .el with make-frame/delete-frame and redisplays in a
> tight loop is something so unusual...)

Exactly my thoughts.




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.

Message received at 77046 <at> debbugs.gnu.org:


Received: (at 77046) by debbugs.gnu.org; 16 Mar 2025 11:30:53 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sun Mar 16 07:30:53 2025
Received: from localhost ([127.0.0.1]:45759 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ttmCi-0001fP-1i
	for submit <at> debbugs.gnu.org; Sun, 16 Mar 2025 07:30:53 -0400
Received: from mail-wm1-x330.google.com ([2a00:1450:4864:20::330]:50610)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
 (Exim 4.84_2) (envelope-from <gerd.moellmann@HIDDEN>)
 id 1ttmCd-0001Mj-9K
 for 77046 <at> debbugs.gnu.org; Sun, 16 Mar 2025 07:30:48 -0400
Received: by mail-wm1-x330.google.com with SMTP id
 5b1f17b1804b1-43cef035a3bso7963375e9.1
 for <77046 <at> debbugs.gnu.org>; Sun, 16 Mar 2025 04:30:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=gmail.com; s=20230601; t=1742124641; x=1742729441; darn=debbugs.gnu.org;
 h=mime-version:user-agent:message-id:date:references:in-reply-to
 :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to;
 bh=wRfmnJufB95CgqWY5A+yXMamJhP070HKjO8ib05dtV4=;
 b=AdKx62hrFx1nh1XIl3GYZjHdQHFSemE4yxgHsMYnpczfsFkdy33MavUkNKgWEFcxlf
 StEu/Zo29j1qhLkHrWMw8SSW8U94R5kiE0IPJUzEjlBXeVnhqYPIekFFXMBVd8cJAC+r
 WElV3+25po7Dq+4FxCkdeLg3owOmkGf6g6SIRQwzdA/uIV8mWXMQGpikxazpDpKz9F8g
 AGOQbDCDP8fhy+rLp1xOACPhhaGDD4vLXfIKSmJKlQN1m2l2v299YobnsCRyac7CW8PQ
 OKKSspVMU0GLT+BN+hhq5b3Bj21Anf7ae3LTKFdkH6GBes3XVDJFYS4PutiUs8rlIvV4
 Um5A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1742124641; x=1742729441;
 h=mime-version:user-agent:message-id:date:references:in-reply-to
 :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date
 :message-id:reply-to;
 bh=wRfmnJufB95CgqWY5A+yXMamJhP070HKjO8ib05dtV4=;
 b=vHfwZ1eVj6z7hNxTlJKm2mEetFUYcY1CsISY9353vaclgEj2HINpTx17wjXQXvWYdO
 WIlM3Lz5zsbaMu9q3cl+7DJ/k6auICzvoskcQt2zmaBJ39HI0z1lv1q6hUD90A036L09
 jFROmtIaqBPws8TdDD+9c9MQaHppoIK1Zd4NVbXBMZOpkODZL89oUTnlW97qkAaMOzTl
 fLTCXHl2+6iTfhe2jhy0gmW713YxI7qX276Wuk3y72EhLeNGXf0wZZAaJPWP5HYpB6vK
 F6hbihr2KvCfcMCQ751FPO/N/vX1AFWOAmlKpPsUVT5RYjX+ajez/mJexo3sB4/qFArv
 2Rlg==
X-Forwarded-Encrypted: i=1;
 AJvYcCXeIgts9VL3NdolqTeIOod7j846FWAHyRMi+90DT7UG390axhL4+MQK0zeOMXKgnj7y6r4lcA==@debbugs.gnu.org
X-Gm-Message-State: AOJu0YzVASBpq5+Tw20m2Zn0kN/wACE9dRS5PBSCu4eFs51ZUy/m2NTr
 i+gJgUtJmBA5jxHpzDuodCXF6P26UVmF2oL+GoWBfSolkLsfaEFbiixpbg==
X-Gm-Gg: ASbGncucLovGg5jIx9IAeDvjAFdA4IoZ2Pc3t3O4MfZBt2sSKVZ8y9uR6ANEM4My6o/
 M8cGwxkDozj4PolEgq2PJWtWY8wrPyOEaXGIOCvwJJkCWLaYbOHr8QEobdzKgaWuy99Jx/to9YQ
 yn2GIp1bcO0MMm4+GoAOF2fvjQugGYfFekgQlhFDvPLXeGi797K0BIWooLy7x2cf2h4pIsAL2GW
 W8L1TllpW9p8U3ezimqkQZUvG6azfN9PU4VNQrnDH2wgbhyyM8/T0RKLRPi4IqfOwa/xTAQtvog
 orxfjyLiXnAErZ2CodTvMmzhbPRXFUn0cwvBzaf4/XfRSVKf3Toi4peO217yOVp7CZ3mbcds4GC
 SNCyUq5G9P9KibuIhCc9afyqqgLSddOabSJx+3nZP/TYVf6usCtRGTA==
X-Google-Smtp-Source: AGHT+IEi7PVsJmnnR1EaR03ybQ6mvThwdFlj9uvx1pAa8uy6ZYlYN5kAUZPPMVD6G6G3DFB2Wzs4Sg==
X-Received: by 2002:a05:600c:1d05:b0:43c:efed:732c with SMTP id
 5b1f17b1804b1-43d1ed0f578mr90652975e9.28.1742124640325; 
 Sun, 16 Mar 2025 04:30:40 -0700 (PDT)
Received: from pro2 (p200300e0b737950025f24de7973e1333.dip0.t-ipconnect.de.
 [2003:e0:b737:9500:25f2:4de7:973e:1333])
 by smtp.gmail.com with ESMTPSA id
 5b1f17b1804b1-43d1fe755b0sm54401375e9.1.2025.03.16.04.30.39
 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
 Sun, 16 Mar 2025 04:30:39 -0700 (PDT)
From: =?utf-8?Q?Gerd_M=C3=B6llmann?= <gerd.moellmann@HIDDEN>
To: Eli Zaretskii <eliz@HIDDEN>
Subject: Re: bug#77046: 31.0.50; Emacs sometimes crashes
In-Reply-To: <86sendtewh.fsf@HIDDEN>
References: <87y0x5paeg.fsf@HIDDEN> <86sendtewh.fsf@HIDDEN>
Date: Sun, 16 Mar 2025 12:30:39 +0100
Message-ID: <m2wmcpb4bk.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 77046
Cc: 77046 <at> debbugs.gnu.org, Markus Triska <triska@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Eli Zaretskii <eliz@HIDDEN> writes:

> Gerd, any comments for the patch?  I found that
> combine_updates_for_frame was trying to combine updates for a
> topmost_child frame whose after_make_frame flag was false and whose
> desired_matrix was NULL.  That caused a segfault in
> make_matrix_current, called from copy_child_glyphs, when make_current
> dereferenced the pointer to desired_matrix.  AFAIU, we should not even
> try redisplaying such frames.
>
> diff --git a/src/xdisp.c b/src/xdisp.c
> index ac65493..d7e0691 100644
> --- a/src/xdisp.c
> +++ b/src/xdisp.c
> @@ -17569,7 +17569,10 @@ #define AINC(a,i)							\
>  	  if (is_tty_frame (f))
>  	    {
>  	      /* Ignore all invisible tty frames, children or root.  */
> -	      if (!frame_redisplay_p (f))
> +	      if (!frame_redisplay_p (f)
> +		  /* Ignore frames not yet completely made, which we
> +		     cannot safely redisplay.  */
> +		  || !f->after_make_frame)
>  		continue;
>  
>  	      /* Remember tty root frames which we've seen.  */
>

Yes, I think your patch is correct.

(I wonder a bit though, how redisplay got its hands on that child frame.
OTOH. the OP's .el with make-frame/delete-frame and redisplays in a
tight loop is something so unusual...)




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.

Message received at 77046 <at> debbugs.gnu.org:


Received: (at 77046) by debbugs.gnu.org; 16 Mar 2025 11:04:58 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sun Mar 16 07:04:58 2025
Received: from localhost ([127.0.0.1]:45676 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ttlne-00055g-DU
	for submit <at> debbugs.gnu.org; Sun, 16 Mar 2025 07:04:58 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10]:45500)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <eliz@HIDDEN>) id 1ttlnb-00055A-Ll
 for 77046 <at> debbugs.gnu.org; Sun, 16 Mar 2025 07:04:56 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <eliz@HIDDEN>)
 id 1ttlnV-0002kZ-GG; Sun, 16 Mar 2025 07:04:49 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org;
 s=fencepost-gnu-org; h=MIME-version:References:Subject:In-Reply-To:To:From:
 Date; bh=V80kC/jDXEGmGxpolXz0ZjxSuJUaBIuKymClZ47aCq4=; b=GhIrAkLqoy+FZnuHg6mO
 CNybjvayfedQxTcHRRDKw4Yr0UrhFYFQ7Aal/BZkTR61KtBsrVzRIzrFqERDzezu/ngBah59CtfMf
 b6K4/6z8ZIvSIv7J1knk1iZrMxJNgVJTzoorb6H1m/D/8WZwez3uQ5acfCzR4piz/HB0gbPAVZDTV
 b/u3bv3fzBje8VDkDbC+IjdCIerE5xhP80A70W/zJEOphNlKUUcwei7cPX3eXtpEqrWW3Rbo/hbo9
 zgtfTINv3a204G8pMbKSEsYXRHtFID1QRqeJQ+nbrxZEGgLZ6lALkbux/nJTzmm8rqsjGTzSQTOXS
 G9GOjIfJnptDtg==;
Date: Sun, 16 Mar 2025 13:04:46 +0200
Message-Id: <86sendtewh.fsf@HIDDEN>
From: Eli Zaretskii <eliz@HIDDEN>
To: Markus Triska <triska@HIDDEN>,
 =?utf-8?Q?Gerd_M=C3=B6llmann?= <gerd.moellmann@HIDDEN>
In-Reply-To: <87y0x5paeg.fsf@HIDDEN> (message from Markus Triska on Sun, 
 16 Mar 2025 10:55:35 +0100)
Subject: Re: bug#77046: 31.0.50; Emacs sometimes crashes
References: <87y0x5paeg.fsf@HIDDEN>
MIME-version: 1.0
Content-type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Spam-Score: -2.3 (--)
X-Debbugs-Envelope-To: 77046
Cc: 77046 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -3.3 (---)

> From: Markus Triska <triska@HIDDEN>
> Date: Sun, 16 Mar 2025 10:55:35 +0100
> 
> Dear all,
> 
> while trying to reproduce #76186 with "-nw", I sometimes encounter a
> crash. In https://debbugs.gnu.org/cgi/bugreport.cgi?bug=76186#83, Eli
> says this is worth a separate report, and so I am filing it here.
> 
> To try to reproduce the problem, please download the following file:
> 
>     https://www.metalevel.at/ei/recenter_sometimes_not_recentering_nw.el
> 
> and then launch Emacs with:
> 
>     $ emacs -Q -nw --load recenter_sometimes_not_recentering_nw.el
> 
> Leave it running for a while, and then press:
> 
>     C-g C-x C-c
> 
> Sometimes, but not always, this yields:
> 
>     /lib/x86_64-linux-gnu/libc.so.6(+0x28150)[0x7ad890e28150]
>     /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0x89)[0x7ad890e28209]
>     emacs(+0x5bab5)[0x57deda682ab5]
>     Segmentation fault (core dumped)
> 
> A backtrace produced by gdb after the crash is encountered follows.

Thanks.  I see a very different backtrace, not sure why.  The problem
I see is fixed with the patch below.  Does it fix the problem for you?

Gerd, any comments for the patch?  I found that
combine_updates_for_frame was trying to combine updates for a
topmost_child frame whose after_make_frame flag was false and whose
desired_matrix was NULL.  That caused a segfault in
make_matrix_current, called from copy_child_glyphs, when make_current
dereferenced the pointer to desired_matrix.  AFAIU, we should not even
try redisplaying such frames.

diff --git a/src/xdisp.c b/src/xdisp.c
index ac65493..d7e0691 100644
--- a/src/xdisp.c
+++ b/src/xdisp.c
@@ -17569,7 +17569,10 @@ #define AINC(a,i)							\
 	  if (is_tty_frame (f))
 	    {
 	      /* Ignore all invisible tty frames, children or root.  */
-	      if (!frame_redisplay_p (f))
+	      if (!frame_redisplay_p (f)
+		  /* Ignore frames not yet completely made, which we
+		     cannot safely redisplay.  */
+		  || !f->after_make_frame)
 		continue;
 
 	      /* Remember tty root frames which we've seen.  */

> I hope this helps also as a small step towards resolving #76186.

I don't think this is related to the original problem in bug#76186.




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 16 Mar 2025 09:55:53 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sun Mar 16 05:55:52 2025
Received: from localhost ([127.0.0.1]:45511 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ttkim-0003fM-23
	for submit <at> debbugs.gnu.org; Sun, 16 Mar 2025 05:55:52 -0400
Received: from lists.gnu.org ([2001:470:142::17]:33212)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <triska@HIDDEN>)
 id 1ttkih-0003eH-GN
 for submit <at> debbugs.gnu.org; Sun, 16 Mar 2025 05:55:50 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <triska@HIDDEN>)
 id 1ttkib-0003eG-NN
 for bug-gnu-emacs@HIDDEN; Sun, 16 Mar 2025 05:55:41 -0400
Received: from [78.47.144.35] (helo=metalevel.at)
 by eggs.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <triska@HIDDEN>) id 1ttkiY-0007o0-SB
 for bug-gnu-emacs@HIDDEN; Sun, 16 Mar 2025 05:55:41 -0400
Received: from mt-VivoBook (localhost [127.0.0.1])
 by metalevel.at (Postfix) with ESMTPS id 72FE69C751
 for <bug-gnu-emacs@HIDDEN>; Sun, 16 Mar 2025 10:55:36 +0100 (CET)
Received: by mt-VivoBook (Postfix, from userid 1000)
 id 43F3580644; Sun, 16 Mar 2025 10:55:35 +0100 (CET)
From: Markus Triska <triska@HIDDEN>
To: bug-gnu-emacs@HIDDEN
Subject: 31.0.50; Emacs sometimes crashes
X-Debbugs-Cc: 
Date: Sun, 16 Mar 2025 10:55:35 +0100
Message-ID: <87y0x5paeg.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
X-Host-Lookup-Failed: Reverse DNS lookup failed for 78.47.144.35 (failed)
Received-SPF: none client-ip=78.47.144.35; envelope-from=triska@HIDDEN;
 helo=metalevel.at
X-Spam_score_int: -10
X-Spam_score: -1.1
X-Spam_bar: -
X-Spam_report: (-1.1 / 5.0 requ) BAYES_00=-1.9,
 RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001,
 RDNS_NONE=0.793, SPF_HELO_NONE=0.001,
 SPF_NONE=0.001 autolearn=no autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Dear all,

while trying to reproduce #76186 with "-nw", I sometimes encounter a
crash. In https://debbugs.gnu.org/cgi/bugreport.cgi?bug=76186#83, Eli
says this is worth a separate report, and so I am filing it here.

To try to reproduce the problem, please download the following file:

    https://www.metalevel.at/ei/recenter_sometimes_not_recentering_nw.el

and then launch Emacs with:

    $ emacs -Q -nw --load recenter_sometimes_not_recentering_nw.el

Leave it running for a while, and then press:

    C-g C-x C-c

Sometimes, but not always, this yields:

    /lib/x86_64-linux-gnu/libc.so.6(+0x28150)[0x7ad890e28150]
    /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0x89)[0x7ad890e28209]
    emacs(+0x5bab5)[0x57deda682ab5]
    Segmentation fault (core dumped)

A backtrace produced by gdb after the crash is encountered follows.

I hope this helps also as a small step towards resolving #76186.

Thank you and all the best,
Markus


#0  0x000055555575c057 in plist_get (plist=<optimized out>, prop=0x7c20) at fns.c:2621
#1  0x000055555575c347 in Fget (propname=<optimized out>, symbol=<optimized out>) at fns.c:2641
#2  0x0000555555797aa0 in exec_byte_code (fun=<optimized out>, args_template=<optimized out>, nargs=<optimized out>, args=<optimized out>) at bytecode.c:1207
#3  0x000055555574a98e in Ffuncall (nargs=nargs@entry=2, args=args@entry=0x7ffff35ff370) at eval.c:3069
#4  0x000055555574b002 in Fapply (nargs=2, args=0x7ffff35ff370) at eval.c:2698
#5  0x00005555557962bd in exec_byte_code (fun=<optimized out>, args_template=<optimized out>, nargs=<optimized out>, args=<optimized out>) at /emacs/src/lisp.h:2230
#6  0x000055555574f284 in apply_lambda (fun=<optimized out>, args=<optimized out>, count=count@entry=...) at eval.c:3191
#7  0x000055555574d872 in eval_sub (form=<optimized out>) at eval.c:2663
#8  0x000055555574f501 in Flet (args=<optimized out>) at eval.c:1076
#9  0x000055555574dc1f in eval_sub (form=<optimized out>) at eval.c:2525
#10 0x000055555574f720 in Fprogn (body=<optimized out>) at eval.c:439
#11 Flet (args=<optimized out>) at eval.c:1105
#12 0x000055555574dc1f in eval_sub (form=<optimized out>) at eval.c:2525
#13 0x000055555574ec78 in Fprogn (body=<optimized out>) at eval.c:439
#14 funcall_lambda (fun=fun@entry=0x555555a58bad, nargs=nargs@entry=0, arg_vector=arg_vector@entry=0x7fffffffd1e0) at eval.c:3326
#15 0x000055555574f284 in apply_lambda (fun=<optimized out>, args=<optimized out>, count=count@entry=...) at eval.c:3191
#16 0x000055555574d872 in eval_sub (form=<optimized out>) at eval.c:2663
#17 0x000055555574e8f0 in Fprogn (body=<optimized out>) at eval.c:439
#18 prog_ignore (body=<optimized out>) at eval.c:450
#19 Fwhile (args=<optimized out>) at eval.c:1126
#20 0x000055555574dc1f in eval_sub (form=<optimized out>) at eval.c:2525
#21 0x000055555577762e in readevalloop_eager_expand_eval (val=<optimized out>, val@entry=0x7ffff735dff3, macroexpand=0xae30) at lread.c:2358
#22 0x000055555577efdc in readevalloop (readcharfun=readcharfun@entry=0x555555a585cd, infile0=infile0@entry=0x0, sourcename=sourcename@entry=0x555555a60ae4, printflag=printflag@entry=false, unibyte=unibyte@entry=0x0, readfun=readfun@entry=0x0, start=0x0, end=<optimized out>) at lread.c:2540
#23 0x000055555578024e in Feval_buffer (buffer=<optimized out>, printflag=0x0, filename=0x555555a60ae4, unibyte=0x0, do_allow_print=<optimized out>) at lread.c:2618
#24 0x00005555557962bd in exec_byte_code (fun=<optimized out>, args_template=<optimized out>, nargs=<optimized out>, args=<optimized out>) at /emacs/src/lisp.h:2230
#25 0x000055555574a98e in Ffuncall (nargs=nargs@entry=5, args=args@entry=0x7fffffffd7a0) at eval.c:3069
#26 0x000055555577fe41 in Fload (file=0x555555a59994, noerror=<optimized out>, nomessage=0x30, nosuffix=<optimized out>, must_suffix=<optimized out>) at lread.c:1615
#27 0x00005555557962bd in exec_byte_code (fun=<optimized out>, args_template=<optimized out>, nargs=<optimized out>, args=<optimized out>) at /emacs/src/lisp.h:2230
#28 0x000055555574f284 in apply_lambda (fun=<optimized out>, args=<optimized out>, count=count@entry=...) at eval.c:3191
#29 0x000055555574d872 in eval_sub (form=form@entry=0x7ffff49c1153) at eval.c:2663
#30 0x0000555555750083 in Feval (form=0x7ffff49c1153, lexical=<optimized out>) at eval.c:2438
#31 0x00005555557490d7 in internal_condition_case (bfun=bfun@entry=0x5555556b9720 <top_level_2>, handlers=handlers@entry=0x90, hfun=hfun@entry=0x5555556c1c30 <cmd_error>) at eval.c:1602
#32 0x00005555556ba25a in top_level_1 (ignore=ignore@entry=0x0) at keyboard.c:1191
#33 0x0000555555749019 in internal_catch (tag=tag@entry=0x11df0, func=func@entry=0x5555556ba230 <top_level_1>, arg=arg@entry=0x0) at eval.c:1282
#34 0x00005555556b967f in command_loop () at keyboard.c:1140
#35 0x00005555556c17a5 in recursive_edit_1 () at keyboard.c:749
#36 0x00005555556c1b44 in Frecursive_edit () at keyboard.c:832
#37 0x000055555559ebde in main (argc=<optimized out>, argv=0x7fffffffde28) at emacs.c:2560
quit



In GNU Emacs 31.0.50 (build 1, x86_64-pc-linux-gnu, X toolkit, Xaw
 scroll bars) of 2025-03-16 built on laptop
Repository revision: db0bed7a68cd2308eba61247a6a77f73533ffef6
Repository branch: master
Windowing system distributor 'The X.Org Foundation', version 11.0.12302000
System Description: Ubuntu 23.10

Configured using:
 'configure --with-gif=ifavailable --with-tiff=ifavailable
 --with-gnutls=ifavailable'

Configured features:
FREETYPE GMP JPEG LIBXML2 MODULES NOTIFY INOTIFY PDUMPER PNG SECCOMP
SOUND THREADS TOOLKIT_SCROLL_BARS X11 XDBE XFT XIM XPM LUCID ZLIB

Important settings:
  value of $LC_MONETARY: de_DE.UTF-8
  value of $LC_NUMERIC: de_DE.UTF-8
  value of $LC_TIME: de_DE.UTF-8
  value of $LANG: en_US.UTF-8
  value of $XMODIFIERS: @im=ibus
  locale-coding-system: utf-8-unix





Acknowledgement sent to Markus Triska <triska@HIDDEN>:
New bug report received and forwarded. Copy sent to bug-gnu-emacs@HIDDEN. Full text available.
Report forwarded to bug-gnu-emacs@HIDDEN:
bug#77046; Package emacs. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Sat, 22 Mar 2025 16:00:03 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.