bad mojo in voodoo_free_hook

Hi, Xemacs 21.4.8 will occasionally exhibit the following problem, often triggered by running mail-send-and-exit in a mail buffer (though this is not the only cause, it was the most recent). The window will not not refresh, and xemacs will begin to take the entire cpu. The only recovery seems to be a kill -9 of the process (although in the case documented below, returning from frame #28 brought things back to life enough that I could shut down cleanly). I've included below a backtrace from gdb attaching to the runaway process. I haven't worked out how to reproduce the problem on demand, but I get it enough that if it would be helpful, I can dig up any information you might like. Thanks, --art $ uname -a SunOS dev26 5.6 Generic_105181-29 sun4u sparc SUNW,Ultra-80 (gdb) attach 16376 Attaching to program `/home/mgleeson/bin/xemacs-21.4.8', process 16376 Reading symbols from /home/mgleeson/lib/libaudio.so.1.4...done. Reading symbols from /usr/dt/lib/libtt.so.2...done. Reading symbols from /usr/openwin/lib/libXmu.so.4...done. Reading symbols from /usr/openwin/lib/libXt.so.4...done. Reading symbols from /usr/openwin/lib/libXext.so.0...done. Reading symbols from /usr/openwin/lib/libX11.so.4...done. Reading symbols from /usr/lib/libkstat.so.1...done. Reading symbols from /usr/lib/libm.so.1...done. Reading symbols from /usr/lib/libsocket.so.1...done. Reading symbols from /usr/lib/libnsl.so.1...done. Reading symbols from /usr/lib/libdl.so.1...done. Reading symbols from /usr/lib/libc.so.1...done. Reading symbols from /usr/openwin/lib/libSM.so.6...done. Reading symbols from /usr/openwin/lib/libICE.so.6...done. Reading symbols from /usr/lib/libmp.so.2...done. Reading symbols from /usr/platform/SUNW,Ultra-80/lib/libc_psr.so.1...done. Symbols already loaded for /home/mgleeson/lib/libaudio.so.1.4 Symbols already loaded for /usr/dt/lib/libtt.so.2 Symbols already loaded for /usr/openwin/lib/libXmu.so.4 Symbols already loaded for /usr/openwin/lib/libXt.so.4 Symbols already loaded for /usr/openwin/lib/libXext.so.0 Symbols already loaded for /usr/openwin/lib/libX11.so.4 Symbols already loaded for /usr/lib/libkstat.so.1 Symbols already loaded for /usr/lib/libm.so.1 Symbols already loaded for /usr/lib/libsocket.so.1 Symbols already loaded for /usr/lib/libnsl.so.1 Symbols already loaded for /usr/lib/libdl.so.1 Symbols already loaded for /usr/lib/libc.so.1 Symbols already loaded for /usr/openwin/lib/libSM.so.6 Symbols already loaded for /usr/openwin/lib/libICE.so.6 Symbols already loaded for /usr/lib/libmp.so.2 Symbols already loaded for /usr/platform/SUNW,Ultra-80/lib/libc_psr.so.1 0xef339d00 in _setcontext () (gdb) bt #0 0xef339d00 in _setcontext () #1 0xef324c68 in sigsetjmp () #2 0x7f788 in condition_case_1 (handlers=7411456, bfun=0x829d8 <Feval>, barg=7411048, hfun=0x7f830 <run_condition_case_handlers>, harg=2394116) at eval.c:1631 #3 0x7fb80 in condition_case_3 (bodyform=7411048, var=2394116, handlers=7411456) at eval.c:1729 #4 0x5956c in execute_rare_opcode (stack_ptr=0xefffe24c, program_ptr=0x650033 "\210É\024\bÍ=« ÎÏ\r!Ð\"ÑÏ\r!Ð\"=«\021\013ÒÎÏ\r!Ð\"!=«\005\r\024ª\n\bÓ=«\005Ô\013!\210\nÇ\r!\211\025=\021\n¬Œ\r\022ªž\f­\016Õ\f!­\tÖ×\f\"\210É\211\024,\207", opcode=Bcondition_case) at bytecode.c:1271 #5 0x583f8 in execute_optimized_program ( program=0x650033 "\210É\024\bÍ=« ÎÏ\r!Ð\"ÑÏ\r!Ð\"=«\021\013ÒÎÏ\r!Ð\"!=«\005\r\024ª\n\bÓ=«\005Ô\013!\210\nÇ\r!\211\025=\021\n¬Œ\r\022ªž\f­\016Õ\f!­\tÖ×\f\"\210É\211\024,\207", stack_depth=4, constants_data=0x708910) at bytecode.c:656 #6 0x58220 in funcall_compiled_function (fun=7379648, nargs=2, args=0xefffe428) at bytecode.c:515 #7 0x837b8 in Ffuncall (nargs=2, args=0xefffe424) at eval.c:3563 #8 0x585c8 in execute_optimized_program (program=0xd1a521 "\207", stack_depth=2, constants_data=0x70aad0) at bytecode.c:746 #9 0x58220 in funcall_compiled_function (fun=7379676, nargs=1, args=0xefffe5f0) at bytecode.c:515 #10 0x837b8 in Ffuncall (nargs=1, args=0xefffe5ec) at eval.c:3563 #11 0x585c8 in execute_optimized_program (program=0x17586c1 "),\207", stack_depth=1, constants_data=0x708890) at bytecode.c:746 #12 0x58220 in funcall_compiled_function (fun=7379900, nargs=0, args=0xefffe9fc) at bytecode.c:515 #13 0x837b8 in Ffuncall (nargs=0, args=0xefffe9f8) at eval.c:3563 #14 0x84184 in run_hook_with_args_in_buffer (buf=0x248804, nargs=1, args=0xefffe9f8, cond=RUN_HOOKS_TO_COMPLETION) at eval.c:4020 #15 0x86c94 in run_hook_with_args (nargs=1, args=0xefffe9f8, cond=RUN_HOOKS_TO_COMPLETION) at eval.c:4033 #16 0x88308 in Frun_hooks (nargs=1, args=0xefffe9f8) at eval.c:3887 #17 0x83768 in Ffuncall (nargs=1, args=0xefffe9f4) at eval.c:3549 #18 0x585c8 in execute_optimized_program ( program=0x64cb93 ")ª\035\t\b>­\006ÑÒ\016\026\"?­\020Õ\r!ª\013\t\b>­\006ÑÒ\016\026\",\207te (') it will be\nparsed a lisp expression and consequently one may do his o\a\004Í", stack_depth=1, constants_data=0x708c90) at bytecode.c:746 #19 0x58220 in funcall_compiled_function (fun=7379256, nargs=4, args=0xefffebc8) at bytecode.c:515 #20 0x837b8 in Ffuncall (nargs=4, args=0xefffebc4) at eval.c:3563 #21 0x585c8 in execute_optimized_program (program=0x17438c3 "\210Ò\t!)\207CG\234", stack_depth=4, constants_data=0x16b7b10) at bytecode.c:746 #22 0x58220 in funcall_compiled_function (fun=23369000, nargs=1, args=0xefffed94) at bytecode.c:515 #23 0x837b8 in Ffuncall (nargs=1, args=0xefffed90) at eval.c:3563 #24 0x5d40c in Fcall_interactively (function=6928580, record_flag=2394116, keys=2394116) at callint.c:940 #25 0x82550 in Fcommand_execute (cmd=6928580, record_flag=2394116, keys=2394116) at eval.c:2970 #26 0xaf30c in execute_command_event (command_builder=0x4dee80, event=5653412) at event-stream.c:3915 #27 0xaf950 in Fdispatch_event (event=5653412) at event-stream.c:4199 #28 0x620e8 in Fcommand_loop_1 () at cmdloop.c:583 #29 0x62350 in command_loop_1 (dummy=2394116) at cmdloop.c:494 #30 0x7f7ec in condition_case_1 (handlers=2394212, bfun=0x62334 <command_loop_1>, barg=2394116, hfun=0x623b0 <cmd_error>, harg=2394116) at eval.c:1651 #31 0x624c0 in command_loop_2 (dummy=2394116) at cmdloop.c:256 #32 0x8760c in internal_catch (tag=2474156, func=0x62474 <command_loop_2>, arg=2394116, threw=0x0) at eval.c:1317 #33 0x61c94 in initial_command_loop (load_me=2394116) at cmdloop.c:305 #34 0x7c43c in sort_args (argc=2184192, argv=0xeffff5c4) at emacs.c:2353 #35 0x7e070 in voodoo_free_hook (mem=0x1) at emacs.c:2782 (gdb)