Re: [Bug: 21.4.21] Segfault on reading png

J. Turnbull <stephen(a)xemacs.org&gt; wrote: Here is another one - all I needed to do to trigger it is M-x customize-face RET RET: $ xemacs --vanilla Warning: Missing charsets in String to FontSet conversion Fatal error (11). Your files have been auto-saved. Use `M-x recover-session' to recover them. Your version of XEmacs was distributed with a PROBLEMS file that may describe your crash, and with luck a workaround. Please check it first, but do report the crash anyway. Please report this bug by invoking M-x report-emacs-bug, or by selecting `Send Bug Report' from the Help menu. If necessary, send ordinary email to `xemacs-beta(a)xemacs.org&#39;. *MAKE SURE* to include the XEmacs configuration from M-x describe-installation, or equivalently the file Installation in the top of the build tree. *Please* try *hard* to obtain a C stack backtrace; without it, we are unlikely to be able to analyze the problem. Locate the core file produced as a result of this crash (often called `core' or `core.<process-id>', and located in the directory in which you started XEmacs or your home directory), and type gdb /usr/bin/xemacs core then type `where' at the debugger prompt. No GDB on your system? You may have DBX, or XDB, or SDB. (Ask your system administrator if you need help.) If no core file was produced, enable them (often with `ulimit -c unlimited' in case of future recurrance of the crash. Lisp backtrace follows: # (unwind-protect ...) # (unwind-protect ...) # (unwind-protect ...) # (catch #<INTERNAL OBJECT (XEmacs bug?) (opaque-ptr, adr=0x99b228) 0x9c39d0> ...) # (unwind-protect ...) # bind (inhibit-quit) # (condition-case ... . error) # (catch top-level ...) Segmentation fault (core dumped) $ gdb /usr/bin/xemacs core GNU gdb 6.8-debian Copyright (C) 2008 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu"... Reading symbols from /usr/lib/libXaw.so.7...done. Loaded symbols for /usr/lib/libXaw.so.7 Reading symbols from /usr/lib/libtiff.so.4...done. Loaded symbols for /usr/lib/libtiff.so.4 Reading symbols from /usr/lib/libpng12.so.0...done. Loaded symbols for /usr/lib/libpng12.so.0 Reading symbols from /usr/lib/libjpeg.so.62...done. Loaded symbols for /usr/lib/libjpeg.so.62 Reading symbols from /usr/lib/libcompface.so.1...done. Loaded symbols for /usr/lib/libcompface.so.1 Reading symbols from /usr/lib/libXpm.so.4...done. Loaded symbols for /usr/lib/libXpm.so.4 Reading symbols from /usr/lib/libXmu.so.6...done. Loaded symbols for /usr/lib/libXmu.so.6 Reading symbols from /usr/lib/libXt.so.6...done. Loaded symbols for /usr/lib/libXt.so.6 Reading symbols from /usr/lib/libXext.so.6...done. Loaded symbols for /usr/lib/libXext.so.6 Reading symbols from /usr/lib/libX11.so.6...done. Loaded symbols for /usr/lib/libX11.so.6 Reading symbols from /usr/lib/libSM.so.6...done. Loaded symbols for /usr/lib/libSM.so.6 Reading symbols from /usr/lib/libICE.so.6...done. Loaded symbols for /usr/lib/libICE.so.6 Reading symbols from /usr/lib/libdb-4.6.so...done. Loaded symbols for /usr/lib/libdb-4.6.so Reading symbols from /usr/lib/libgpm.so.1...done. Loaded symbols for /usr/lib/libgpm.so.1 Reading symbols from /lib/libncurses.so.5...done. Loaded symbols for /lib/libncurses.so.5 Reading symbols from /usr/lib/libldap_r-2.4.so.2...done. Loaded symbols for /usr/lib/libldap_r-2.4.so.2 Reading symbols from /lib/libm.so.6...done. Loaded symbols for /lib/libm.so.6 Reading symbols from /lib/libutil.so.1...done. Loaded symbols for /lib/libutil.so.1 Reading symbols from /lib/libc.so.6...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/libdl.so.2...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /usr/lib/liblber-2.4.so.2...done. Loaded symbols for /usr/lib/liblber-2.4.so.2 Reading symbols from /usr/lib/libz.so.1...done. Loaded symbols for /usr/lib/libz.so.1 Reading symbols from /usr/lib/libXau.so.6...done. Loaded symbols for /usr/lib/libXau.so.6 Reading symbols from /usr/lib/libxcb-xlib.so.0...done. Loaded symbols for /usr/lib/libxcb-xlib.so.0 Reading symbols from /usr/lib/libxcb.so.1...done. Loaded symbols for /usr/lib/libxcb.so.1 Reading symbols from /lib/libpthread.so.0...done. Loaded symbols for /lib/libpthread.so.0 Reading symbols from /lib/libresolv.so.2...done. Loaded symbols for /lib/libresolv.so.2 Reading symbols from /usr/lib/libsasl2.so.2...done. Loaded symbols for /usr/lib/libsasl2.so.2 Reading symbols from /usr/lib/libgnutls.so.13...done. Loaded symbols for /usr/lib/libgnutls.so.13 Reading symbols from /lib/ld-linux-x86-64.so.2...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /usr/lib/libXdmcp.so.6...done. Loaded symbols for /usr/lib/libXdmcp.so.6 Reading symbols from /usr/lib/libtasn1.so.3...done. Loaded symbols for /usr/lib/libtasn1.so.3 Reading symbols from /lib/libgcrypt.so.11...done. Loaded symbols for /lib/libgcrypt.so.11 Reading symbols from /lib/libgpg-error.so.0...done. Loaded symbols for /lib/libgpg-error.so.0 Reading symbols from /lib/libnss_files.so.2...done. Loaded symbols for /lib/libnss_files.so.2 Reading symbols from /lib/libnss_nis.so.2...done. Loaded symbols for /lib/libnss_nis.so.2 Reading symbols from /lib/libnsl.so.1...done. Loaded symbols for /lib/libnsl.so.1 Reading symbols from /usr/lib/libXcursor.so.1...done. Loaded symbols for /usr/lib/libXcursor.so.1 Reading symbols from /usr/lib/libXrender.so.1...done. Loaded symbols for /usr/lib/libXrender.so.1 Reading symbols from /usr/lib/libXfixes.so.3...done. Loaded symbols for /usr/lib/libXfixes.so.3 Core was generated by `xemacs --vanilla'. Program terminated with signal 11, Segmentation fault. [New process 9675] #0 0x00002b641e930527 in kill () from /lib/libc.so.6 (gdb) where #0 0x00002b641e930527 in kill () from /lib/libc.so.6 #1 0x000000000048db5e in fatal_error_signal (sig=11) at emacs.c:642 #2 <signal handler called> #3 0x00002b641e975bcb in free () from /lib/libc.so.6 #4 0x00002b641d3c01c2 in ?? () from /usr/lib/libX11.so.6 #5 0x00000000005d434c in x_init_image_instance_from_eimage (ii=0xfaf250, width=63, height=19, slices=1, eimage=0xfb46a0 "%G���������������������������������������������������������������������������������������������%＠}}{%G������%＠..., dest_mask=111, instantiator=15666816, domain=13200608) at glyphs-x.c:988 #6 0x0000000000531f5a in png_instantiate (image_instance=<value optimized out>, instantiator=15666816, pointer_fg=<value optimized out>, pointer_bg=<value optimized out>, dest_mask=111, domain=13200608) at glyphs-eimage.c:1045 #7 0x0000000000527983 in instantiate_image_instantiator (governing_domain=12037104, domain=13200608, instantiator=15666816, pointer_fg=47709044446448, pointer_bg=47709044446448, dest_mask=111, glyph=15665408) at glyphs.c:776 #8 0x000000000052db5b in image_instantiate (specifier=<value optimized out>, matchspec=<value optimized out>, domain=13200608, instantiator=15666816, depth=3) at glyphs.c:3259 #9 0x0000000000492c93 in call_with_suspended_errors_1 (opaque_arg=<value optimized out>) at eval.c:2112 #10 0x000000000049108e in internal_catch (tag=<value optimized out>, func=0x492af0 <call_with_suspended_errors_1>, arg=10379568, threw=0x7fff8ecfe26c) at eval.c:1318 #11 0x0000000000492917 in call_with_suspended_errors (fun=0x52d4e0 <image_instantiate>, retval=47709043986920, class=47709044446448, errb=<value optimized out>, nargs=5) at eval.c:2205 #12 0x00000000005a9070 in specifier_instance_from_inst_list (specifier=15665504, matchspec=47709043986920, domain=13200608, inst_list=15574352, errb=<value optimized out>, no_quit=<value optimized out>, depth=3) at specifier.c:2510 #13 0x00000000005a941e in specifier_instance (specifier=15665504, matchspec=47709043986920, domain=<value optimized out>, errb=<value optimized out>, no_quit=1, no_fallback=0, depth=3) at specifier.c:2625 #14 0x0000000000523886 in glyph_image_instance (glyph=15665408, domain=13200608, errb= {really_unlikely_name_to_have_accidentally_in_a_non_errb_structure = 42}, no_quit=1) at glyphs.c:3855 #15 0x0000000000526d00 in update_glyph_cachel_data (w=0xc96ce0, glyph=15665408, cachel=0x7fff8ecfe4f0) at glyphs.c:4170 #16 0x0000000000526fcd in get_glyph_cachel_index (w=0xdeadbeef, glyph=16504432) at glyphs.c:4198 #17 0x0000000000577790 in add_glyph_rune (data=0x7fff8ecfe6d0, gb=0xdd3650, pos_type=1, allow_cursor=0, cachel=0x0) at redisplay.c:1679 #18 0x0000000000579654 in add_glyph_runes (data=0x7fff8ecfe6d0, pos_type=1) at redisplay.c:1963 #19 0x0000000000580de2 in generate_display_line (w=0xc96ce0, dl=0xddf3a0, bounds=<value optimized out>, start_pos=175, prop=0x7fff8ecfe938, type=<value optimized out>) at redisplay.c:2318 #20 0x00000000005827f5 in regenerate_window (w=0xc96ce0, start_pos=175, point=<value optimized out>, type=1) at redisplay.c:5367 #21 0x000000000058854a in redisplay_window (window=13200608, skip_selected=<value optimized out>) at redisplay.c:6301 #22 0x00000000005893a8 in redisplay_frame (f=0xc96a70, preemption_check=0) at redisplay.c:6595 #23 0x000000000058988b in redisplay_device (d=0xb7abf0, automatic=<value optimized out>) at redisplay.c:6679 #24 0x0000000000589e8a in redisplay () at redisplay.c:6766 #25 0x00000000004eb298 in Fnext_event (event=14441584, prompt=<value optimized out>) at event-stream.c:2179 #26 0x00000000004724ec in Fcommand_loop_1 () at cmdloop.c:574 #27 0x0000000000492e26 in condition_case_1 (handlers=<value optimized out>, bfun=0x4725b0 <command_loop_1>, barg=47709044446448, hfun=0x472660 <cmd_error>, harg=47709044446448) at eval.c:1652 #28 0x0000000000472620 in command_loop_2 (dummy=<value optimized out>) at cmdloop.c:256 #29 0x000000000049108e in internal_catch (tag=<value optimized out>, func=0x4725f0 <command_loop_2>, arg=47709044446448, threw=0x0) at eval.c:1318 #30 0x0000000000472b29 in initial_command_loop (load_me=<value optimized out>) at cmdloop.c:305 #31 0x000000000048e46a in xemacs_21_4_21_x86_64_pc_linux (argc=2, argv=0x7fff8ecff0e8, envp=<value optimized out>, restart=0) at emacs.c:2460 #32 0x000000000048f0d0 in main (argc=<value optimized out>, argv=<value optimized out>, envp=<value optimized out>) at emacs.c:2829 (gdb) quit $ XEmacs 21.4.21, libpng 1.2.27 (Ubuntu intreprid-backport) on Ubuntu hardy on and amd64 machine, gcc (GCC) 4.2.3 (Ubuntu 4.2.3-2ubuntu7). Best regards, Adam _______________________________________________ XEmacs-Beta mailing list XEmacs-Beta(a)xemacs.org http://calypso.tux.org/cgi-bin/mailman/listinfo/xemacs-beta