[Bug: 21.5-b10] Crash displaying X glyphs

================================================================ Dear Bug Team! With current CVS, I chose the Help -> About XEmacs menu item. Clicking on *any* developer with a picture results in a crash with this backtrace: Program received signal SIGSEGV, Segmentation fault. 0x420749f9 in free () from /lib/i686/libc.so.6 (gdb) bt #0 0x420749f9 in free () from /lib/i686/libc.so.6 #1 0x40423fa3 in XInitImage () from /usr/X11R6/lib/libX11.so.6 #2 0x082a67c4 in x_init_image_instance_from_eimage (ii=0x8898d60, width=120, height=154, slices=1, eimage=0x88a5ee0 "%G����������������������������������������������������������������������������������������������������%＠..., dest_mask=111, instantiator=143112312, domain=140938040) at /usr/src/xemacs/xemacs-21.5/src/glyphs-x.c:887 #3 0x08176ff4 in png_instantiate (image_instance=143232352, instantiator=143112312, pointer_fg=1080462728, pointer_bg=1080462728, dest_mask=111, domain=140938040) at /usr/src/xemacs/xemacs-21.5/src/glyphs-eimage.c:1037 #4 0x0816663e in instantiate_image_instantiator (governing_domain=138867280, domain=140938040, instantiator=143112312, pointer_fg=1080462728, pointer_bg=1080462728, dest_mask=111, glyph=143165680) at /usr/src/xemacs/xemacs-21.5/src/frame.h:63 #5 0x0816cec6 in image_instantiate (specifier=1080462728, matchspec=1080203044, domain=140938040, instantiator=143112312, depth=0) at /usr/src/xemacs/xemacs-21.5/src/glyphs.c:3348 #6 0x080ec728 in va_call_trapping_problems_1 (ai_mi_madre=0xdeadbee7) at /usr/src/xemacs/xemacs-21.5/src/eval.c:5152 #7 0x080ec1c4 in call_trapping_problems_2 (opaque=139537768) at /usr/src/xemacs/xemacs-21.5/src/eval.c:4849 #8 0x080e7927 in call_with_condition_handler ( handler=0x80ebf7e <flagged_a_squirmer>, handler_arg=-559038745, fun=0x80ec183 <call_trapping_problems_2>, arg=139537768) at /usr/src/xemacs/xemacs-21.5/src/eval.c:2100 #9 0x080ec1f0 in call_trapping_problems_1 (opaque=-559038745) at /usr/src/xemacs/xemacs-21.5/src/eval.c:4855 #10 0x080e6ccf in internal_catch (tag=-559038745, func=0x80ec1cb <call_trapping_problems_1>, arg=139537768, threw=0xbfffe8b4, thrown_tag=0xbfffe8b8) at /usr/src/xemacs/xemacs-21.5/src/eval.c:1510 #11 0x080ec3d7 in call_trapping_problems (warning_class=-1073747776, warning_string=0x0, flags=98315, problem=0x0, fun=0x80ec694 <va_call_trapping_problems_1>, arg=0xbfffe980) at /usr/src/xemacs/xemacs-21.5/src/eval.c:5064 #12 0x080ec99e in call_with_suspended_errors ( fun=0x816c885 <image_instantiate>, retval=1080203044, class_=1080422432, errb= {really_unlikely_name_to_have_accidentally_in_a_non_errb_structure = 8675309}, nargs=5) at /usr/src/xemacs/xemacs-21.5/src/eval.c:5241 #13 0x08257bd6 in specifier_instance_from_inst_list (specifier=143112240, matchspec=1080203044, domain=140938040, inst_list=141030792, errb= {really_unlikely_name_to_have_accidentally_in_a_non_errb_structure = 8675309}, no_quit=1, depth=3) at /usr/src/xemacs/xemacs-21.5/src/specifier.c:2508 #14 0x08257f32 in specifier_instance (specifier=143112240, matchspec=1080203044, domain=140938040, errb= {really_unlikely_name_to_have_accidentally_in_a_non_errb_structure = 8675309}, no_quit=1, no_fallback=0, depth=143112312) at /usr/src/xemacs/xemacs-21.5/src/specifier.c:2625 #15 0x0816f40c in glyph_image_instance (glyph=143165680, domain=-559038745, errb= {really_unlikely_name_to_have_accidentally_in_a_non_errb_structure = -559038745}, no_quit=-559038745) at /usr/src/xemacs/xemacs-21.5/src/glyphs.c:3939 #16 0x0817181d in update_glyph_cachel_data (w=0x8668b38, glyph=143165680, cachel=0xbfffeb50) at /usr/src/xemacs/xemacs-21.5/src/glyphs.c:4259 #17 0x081719cc in add_glyph_cachel (w=0x8668b38, glyph=-559038745) at /usr/src/xemacs/xemacs-21.5/src/glyphs.c:4287 #18 0x08171b02 in get_glyph_cachel_index (w=0x8668b38, glyph=143165680) at /usr/src/xemacs/xemacs-21.5/src/glyphs.c:4312 #19 0x081fb1bf in add_glyph_rune (data=0xbfffed10, gb=0x8898cb8, pos_type=1, allow_cursor=0, cachel=0x0) at /usr/src/xemacs/xemacs-21.5/src/redisplay.c:1817 #20 0x081fc08e in add_glyph_runes (data=0xbfffed10, pos_type=1) at /usr/src/xemacs/xemacs-21.5/src/redisplay.c:2101 #21 0x081fe036 in create_text_block (w=0x8668b38, dl=0x886d5f8, byte_start_pos=2, prop=0xbfffee3c, type=-559038745) at /usr/src/xemacs/xemacs-21.5/src/redisplay.c:2456 #22 0x081f8345 in generate_display_line (w=0x8668b38, dl=0x886d5f8, bounds=1, start_pos=2, prop=0xdeadbee7, type=-559038745) at /usr/src/xemacs/xemacs-21.5/src/buffer.h:615 #23 0x0820b1e9 in regenerate_window (w=0x8668b38, start_pos=2, point=-559038745, type=1) at /usr/src/xemacs/xemacs-21.5/src/redisplay.c:5535 #24 0x0820cabb in redisplay_window (window=140938040, skip_selected=0) at /usr/src/xemacs/xemacs-21.5/src/redisplay.c:6326 #25 0x0820def5 in redisplay_frame (f=0x8667ce0, preemption_check=1) at /usr/src/xemacs/xemacs-21.5/src/redisplay.c:6773 #26 0x0820e1c3 in redisplay_device (d=0x846f250, automatic=1) at /usr/src/xemacs/xemacs-21.5/src/redisplay.c:6855 #27 0x0820e75d in redisplay_without_hooks () at /usr/src/xemacs/xemacs-21.5/src/redisplay.c:6931 #28 0x080fdb4e in Fnext_event (event=142707896, prompt=1080462728) at /usr/src/xemacs/xemacs-21.5/src/event-stream.c:2342 #29 0x080b38c8 in Fcommand_loop_1 () at /usr/src/xemacs/xemacs-21.5/src/cmdloop.c:568 #30 0x080e7221 in condition_case_1 (handlers=-559038745, bfun=0x80b365d <command_loop_1>, barg=1080462728, hfun=0x80b329d <cmd_error>, harg=1080462728) at /usr/src/xemacs/xemacs-21.5/src/eval.c:1889 #31 0x080b33ab in command_loop_3 () at /usr/src/xemacs/xemacs-21.5/src/cmdloop.c:251 #32 0x080b33cd in command_loop_2 (dummy=1080462728) at /usr/src/xemacs/xemacs-21.5/src/cmdloop.c:262 #33 0x080e6ccf in internal_catch (tag=-559038745, func=0x80b33c2 <command_loop_2>, arg=1080462728, threw=0x0, thrown_tag=0x0) at /usr/src/xemacs/xemacs-21.5/src/eval.c:1510 #34 0x080b34a7 in initial_command_loop (load_me=0) at /usr/src/xemacs/xemacs-21.5/src/cmdloop.c:300 #35 0x080e2547 in xemacs_21_5_b10_i686_pc_linux (argc=1, argv=0xbffff474, envp=0xbffff47c, restart=0) at /usr/src/xemacs/xemacs-21.5/src/emacs.c:2354 #36 0x080e3024 in Fdump_emacs (filename=1, symfile=-1073744780) at /usr/src/xemacs/xemacs-21.5/src/emacs.c:2792 #37 0x420158d4 in __libc_start_main () from /lib/i686/libc.so.6 ================================================================ System Info to help track down your bug: --------------------------------------- uname -a: Linux diannao.ittc.ku.edu 2.4.18-10 #1 Wed Aug 7 11:39:21 EDT 2002 i686 unknown ../xemacs-21.5/configure '--prefix=/usr/local/test' '--mail-locking=flock' '--with-pop' '--with-mule' '--with-xfs' '--with-dialogs=athena' '--with-widgets=athena' '--pdump' '--with-wmcommand' '--debug' '--error-checking=all' '--use-kkcc' '--cflags=-march=i686 -O2 -ggdb -pipe' XEmacs 21.5-b10 "burdock" (+CVS-20030207) configured for `i686-pc-linux'. Compilation / Installation: Source code location: /usr/src/xemacs/xemacs-21.5 Installation prefix: /usr/local/test Operating system description file: `s/linux.h' Machine description file: `m/intel386.h' Compiler: gcc -Wall -Wno-switch -Winline -Wmissing-prototypes -Wsign-compare -Wundef -Wstrict-prototypes -Wpacked -Wshadow -Wmissing-declarations -march=i686 -O2 -ggdb -pipe Relocating allocator for buffers: no GNU version of malloc: yes - Using Doug Lea's new malloc from the GNU C Library. Window System: Compiling in support for the X window system: - X Windows headers location: /usr/X11R6/include - X Windows libraries location: /usr/X11R6/lib - Handling WM_COMMAND properly. Compiling in support for the Athena widget set: - Athena headers location: X11/Xaw - Athena library to link: Xaw Using Lucid menubars. Using Lucid scrollbars. Using Athena dialog boxes. Using Athena native widgets. TTY: Compiling in support for ncurses. Compiling in support for GPM (General Purpose Mouse). Images: Compiling in support for GIF images (builtin). Compiling in support for XPM images. Compiling in support for PNG images. Compiling in support for JPEG images. Compiling in support for TIFF images. Compiling in support for X-Face message headers. Sound: Compiling in support for sound (native). Compiling in support for ESD (Enlightened Sound Daemon). Databases: Compiling in support for Berkeley database. Compiling in support for LDAP. Compiling in support for PostgreSQL. - Using PostgreSQL header file: libpq-fe.h - Using PostgreSQL V7 bindings. Internationalization: Compiling in support for Mule (multi-lingual Emacs). Compiling in support for XIM (X11R5+ I18N input method). - Using Motif to provide XIM support. Compiling in support for Canna on Mule. Mail: Compiling in support for POP mail retrieval. Compiling in support for "flock" mail spool file locking method. Other Features: Inhibiting IPv6 canonicalization at startup. Compiling in support for dynamic shared object modules. Using the new GC algorithms. Using the new portable dumper. Compiling in support for extra debugging code. WARNING: --------------------------------------------------------- WARNING: Compiling in support for runtime error checking. WARNING: XEmacs will run noticeably more slowly as a result. WARNING: Error checking is on by default for XEmacs beta releases. WARNING: --------------------------------------------------------- Load-Path Lisp Shadows: ---------------------- (/users/james/emacs/vcard /usr/local/test/lib/xemacs/xemacs-packages/lisp/gnus/vcard /usr/local/test/lib/xemacs/mule-packages/lisp/mule-base/viet-util /usr/local/test/lib/xemacs-21.5-b10/lisp/mule/viet-util /usr/local/test/lib/xemacs/mule-packages/lisp/mule-base/japan-util /usr/local/test/lib/xemacs-21.5-b10/lisp/mule/japan-util /usr/local/test/lib/xemacs/mule-packages/lisp/mule-base/korea-util /usr/local/test/lib/xemacs-21.5-b10/lisp/mule/korea-util /usr/local/test/lib/xemacs/mule-packages/lisp/mule-base/ethio-util /usr/local/test/lib/xemacs-21.5-b10/lisp/mule/ethio-util /usr/local/test/lib/xemacs/mule-packages/lisp/mule-base/cyril-util /usr/local/test/lib/xemacs-21.5-b10/lisp/mule/cyril-util /usr/local/test/lib/xemacs/mule-packages/lisp/mule-base/china-util /usr/local/test/lib/xemacs-21.5-b10/lisp/mule/china-util /usr/local/test/lib/xemacs/xemacs-packages/lisp/build/build-report /usr/local/test/lib/xemacs-21.5-b10/lisp/build-report /usr/local/test/lib/xemacs/mule-packages/lisp/mule-ucs/unicode /usr/local/test/lib/xemacs-21.5-b10/lisp/unicode) Installed XEmacs Packages: ------------------------- ((zenirc:version 1.13 :type regular) (xslt-process :version 1.11 :type regular) (xslide :version 1.04 :type regular) (xemacs-devel :version 1.5 :type single-file) (xemacs-base :version 1.75 :type regular) (x-symbol :version 4.41 :type regular) (w3 :version 1.28 :type regular) (vm :version 7.07 :type regular) (viper :version 1.35 :type regular) (view-process :version 1.12 :type regular) (vhdl :version 1.16 :type regular) (vc-cc :version 1.21 :type regular) (vc :version 1.35 :type regular) (tramp :version 1.11 :type regular) (tpu :version 1.12 :type regular) (tooltalk :version 1.13 :type regular) (tm :version 1.35 :type regular) (time :version 1.12 :type regular) (textools :version 1.14 :type regular) (text-modes :version 1.58 :type single-file) (texinfo :version 1.23 :type regular) (supercite :version 1.19 :type regular) (strokes :version 1.08 :type regular) (speedbar :version 1.26 :type regular) (sounds-wav :version 1.1 :type regular) (sounds-au :version 1.1 :type regular) (sml-mode :version 0.07000000000000001 :type regular) (slider :version 1.13 :type regular) (sieve :version 1.11 :type regular) (sh-script :version 1.17 :type regular) (sgml :version 1.08 :type regular) (semantic :version 1.17 :type regular) (scheme :version 1.13 :type regular) (sasl :version 1.12 :type regular) (ruby-modes :version 1.01 :type regular) (rmail :version 1.13 :type regular) (reftex :version 1.28 :type regular) (python-modes :version 1.02 :type single-file) (psgml-dtds :version 1.02 :type regular) (psgml :version 1.38 :type regular) (ps-print :version 1.08 :type regular) (prog-modes :version 1 .72 :type single-file) (pgg :version 1.02 :type regular) (perl-modes :version 1.04 :type single-file) (pcomplete :version 1.02 :type regular) (pcl-cvs :version 1.64 :type regular) (pc :version 1.25 :type single-file) (os-utils :version 1.3 :type single-file) (ocaml :version 0.04 :type regular) (net-utils :version 1.31 :type single-file) (mmm-mode :version 1.0 :type regular) (misc-games :version 1.16 :type single-file) (mine :version 1.14 :type regular) (mh-e :version 1.17 :type regular) (mew :version 1.17 :type regular) (mailcrypt :version 2.12 :type regular) (mail-lib :version 1.56 :type regular) (liece :version 1.1 :type regular) (jde :version 1.43 :type regular) (ispell :version 1.24 :type regular) (ilisp :version 1.29 :type regular) (igrep :version 1.1 :type regular) (idlwave :version 1.28 :type regular) (ibuffer :version 1.08 :type regular) (hm--html-menus :version 1.18 :type regular) (haskell-mode :version 1.05 :type regular) (gnus :version 1.65 :type regular) (gnats :version 1.15 :type regular) (games :version 1.13 :type regular) (fsf-compat :version 1.12 :type single-file) (frame-icon :version 1.09 :type regular) (fortran-modes :version 1.02 :type single-file) (forms :version 1.14 :type regular) (footnote :version 1.15 :type regular) (eudc :version 1.37 :type regular) (eterm :version 1.13 :type regular) (ess :version 1.03 :type regular) (eshell :version 1.04 :type regular) (emerge :version 1.09 :type regular) (elib :version 1.1 :type single-file) (eieio :version 1.04 :type regular) (efs :version 1.29 :type regular) (edt :version 1.12 :type regular) (edit-utils :version 1.98 :type single-file) (ediff :version 1.46 :type regular) (edebug :version 1.15 :type regular) (ecrypto :version 0.12 :type regular) (ecb :version 1.01 :type regular) (docbookide :version 0.06 :type regular) (dired :version 1.13 :type regular) (dictionary :version 1.11 :type regular) (debug :version 1.16 :type regular) (crisp :version 1.12 :type regular) (cookie :version 1.14 :type regular) (clearcase :version 1.04 :type regular) (cc-mode :version 1.32 :type regular) (calendar :version 1.19 :type regular) (calc :version 1.23 :type regular) (c-support :version 1.16 :type single-file) (build :version 1.1 :type regular) (bbdb :version 1.21 :type regular) (auctex :version 1.33 :type regular) (apel :version 1.26 :type regular) (ada :version 1.13 :type regular) (Sun :version 1.13 :type regular) (skk :version 1.23 :type regular) (mule-ucs :version 1.04 :type regular) (mule-base :version 1.42 :type regular) (lookup :version 1.13 :type regular) (locale :version 1.2 :type regular) (leim :version 1.2 :type regular) (latin-unity :version 1.07 :type regular) (egg-its :version 1.26 :type regular) (edict :version 1.13 :type regular)) Installed Modules: ----------------- Features: -------- (gnus-ems wid-edit gnus-xmas efs-cu mail-extr message messagexmas mml mm-decode mm-encode mailcap mm-bodies uudecode mail-parse rfc2045 rfc2231 rfc2047 gnus-util qp ietf-drums time-date parse-time mail-abbrevs nnheader nnheaderxm mm-util mail-prsvr mail-utils mailheader xemacsbug shadow sendmail rfc822 paren blink-paren icomplete tex-site font-lock cus-face vc-hooks tramp regexp-opt advice advice-preload shell comint ring format-spec timer ediff-hook jka-compr zenirc-autoloads xslt-process-autoloads xslide-autoloads xemacs-devel-autoloads xemacs-base-autoloads x-symbol-autoloads w3-autoloads vm-autoloads viper-autoloads view-process-autoloads vhdl-autoloads vc-cc-autoloads vc-autoloads tramp-autoloads tpu-autoloads tooltalk-autoloads tm-autoloads time-autoloads textools-autoloads text-modes-autoloads texinfo-autoloads supercite-autoloads strokes-autoloads speedbar-autoloads sounds-wav-autoloads sounds-au-autoloads sml-mode-autoloads slider-autoloads sieve-autoloads sh-script-autoloads sgml-autoloads semantic-autoloads scheme-autoloads sasl-autoloads ruby-modes-autoloads rmail-autoloads reftex-autoloads python-modes-autoloads psgml-dtds-autoloads psgml-autoloads ps-print-autoloads prog-modes-autoloads pgg-autoloads perl-modes-autoloads pcomplete-autoloads pcl-cvs-autoloads pc-autoloads os-utils-autoloads ocaml-autoloads net-utils-autoloads mmm-mode-autoloads misc-games-autoloads mine-autoloads mh-e-autoloads mew-autoloads mailcrypt-autoloads mail-lib-autoloads liece-autoloads jde-autoloads ispell-autoloads ilisp-autoloads igrep-autoloads idlwave-autoloads ibuffer-autoloads hm--html-menus-autoloads haskell-mode-autoloads gnus-autoloads gnats-autoloads games-autoloads fsf-compat-autoloads frame-icon-autoloads fortran-modes-autoloads forms-autoloads footnote-autoloads eudc-autoloads eterm-autoloads ess-autoloads eshell-autoloads emerge-autoloads elib-autoloads eieio-autoloads efs-autoloads edt-autoloads edit-utils-autoloads ediff-autoloads edebug-autoloads ecrypto-autoloads ecb-autoloads docbookide-autoloads dired-autoloads dictionary-autoloads debug-autoloads crisp-autoloads cookie-autoloads clearcase-autoloads cc-mode-autoloads calendar-autoloads calc-autoloads c-support-autoloads build-autoloads bbdb-autoloads auctex-autoloads apel-autoloads ada-autoloads Sun-autoloads skk-autoloads mule-ucs-autoloads mule-base-autoloads lookup-autoloads locale-autoloads leim-autoloads latin-unity-autoloads egg-its-autoloads edict-autoloads build-21.5-autoloads mule-autoloads auto-autoloads loadhist rsz-minibuf auto-show fontl-hooks x-iso8859-1 canna-leim tibetan lao devanagari indian slovenian czech romanian ccl code-cmds gutter-items menubar-items x-menubar mode-motion mouse behavior itimer auto-save lisp-mode easymenu iso8859-1 page buff-menu lib-complete cus-file derived env text-props frame obsolete cus-start custom widget cl-extra mini-cl cl cl-19 packages backquote very-early-lisp CANNA unicode lucid-scrollbars cut-buffer lucid-menubars athena-dialogs x c-balloon-help tty-frames tty toolbar esd-sound native-sound scrollbar unix-processes multicast network-streams subprocesses modules menu-accelerator-support menubar berkeley-db md5 xemacs xim mule gutter tiff png gif jpeg xface xpm xbm lisp-float-type file-coding linux dialog devices window-system base64) Recent keystrokes: ----------------- misc-user Recent messages (most recent first): ----------------------------------- Fontifying *mail to XEmacs Beta*... done. Loading gnus-ems...done Fontifying *mail to XEmacs Beta*... Loading gnus-xmas...done Loading gnus-xmas... Loading gnus-ems... Loading efs-cu...done Loading efs-cu... Parsing /users/james/.mailrc... done Parsing /users/james/.mailrc... Loading mail-extr...done Loading mail-extr... Loading message...done Loading message... Loading xemacsbug...done Fontifying *scratch*... done. Loading xemacsbug... Paren mode is paren Loading paren...done Loading paren... -- Jerry James http://www.ittc.ku.edu/~james/