crash

popped up a compose button in vm, crash. this is from about a day old cvs update. redhat linux 6.1 Lisp backtrace follows: # bind (frame-being-created) make-frame(nil) # bind (params types) vm-goto-new-frame(composition) # bind (folder-buffer newsgroups references cc in-reply-to subject to buffer-name) vm-mail-internal(nil nil) # bind (to) #<compiled-function (&optional to) "...(39)" [vm-session-initialization vm-check-for-killed-folder vm-mail-buffer buffer-name error "Folder buffer has been killed." vm-check-for-killed-summary vm-mail-internal nil to run-hooks vm-mail-hook vm-mail-mode-hook] 3 "Send a mail message from within VM, or from without.\nOptional argument TO is a string that should contain a comma separated\nrecipient list." nil>() call-interactively(vm-mail) # (condition-case ... . error) # (catch top-level ...) gdb output: #0 0x403cc4e1 in __kill () from /lib/libc.so.6 (gdb) where #0 0x403cc4e1 in __kill () from /lib/libc.so.6 #1 0x8080991 in fatal_error_signal (sig=6) at emacs.c:272 #2 0x403cc408 in __restore () at ../sysdeps/unix/sysv/linux/i386/sigaction.c:127 #3 0x403cd868 in abort () at ../sysdeps/generic/abort.c:88 #4 0x80808f7 in assert_failed (file=0x81c4466 "lisp.h", line=588, expr=0x81c4440 "RECORD_TYPEP (obj, lrecord_type_cons)") at emacs.c:2770 #5 0x80e8956 in display_table_entry (ch=10, face_table=136570980, window_table=136570980) at lisp.h:588 #6 0x8125652 in create_string_text_block (w=0x878ab88, disp_string=142475772, dl=0xbffff198, start_pos=0, prop=0xbffff194, default_face=0) at redisplay.c:4586 #7 0x8125fbf in generate_displayable_area (w=0x878ab88, disp_string=142475772, xpos=4, ypos=0, width=576, height=200, dla=0x90a27c8, start_pos=0, default_face=0) at redisplay.c:4961 #8 0x80f79ba in calculate_gutter_size (w=0x878ab88, pos=TOP_GUTTER) at gutter.c:339 #9 0x80f91df in init_frame_gutters (f=0x8d0e6b8) at gutter.c:864 #10 0x80d99d3 in Fmake_frame (props=136570980, device=136570980) at frame.c:485 #11 0x8085020 in Ffuncall (nargs=2, args=0xbffff370) at eval.c:3196 #12 0x8060544 in execute_optimized_program ( program=0x875b678 "À\031\n«\021\t¬\016\n＠\013\236A＠\021\nA\211\022¬ñÄÅ!«\tÆÅ\t!!\210ª\031ÄÇ!«\tÈÇ\t!!\210ª\fÄÉ!«\aÈÉ\t!!\210ÊË !\210\016\f­\005ÍË !)\207\215u\bA\001", stack_depth=4, constants_data=0x86cc1b8) at bytecode.c:747 #13 0x80601a9 in funcall_compiled_function (fun=141439336, nargs=1, args=0xbffff46c) at bytecode.c:519 #14 0x808506f in Ffuncall (nargs=2, args=0xbffff468) at eval.c:3210 #15 0x8060544 in execute_optimized_program ( program=0x8ccb148 "À\031\nÃ>«\003p\021Ä\r®\002Æ!q\210\016\a®\004ÈÉ!\026\nË\016\f«\004ͪ\002Î!\210Ï \210\016\020«\004Ñ \210Ò\016\023!\210\016\024¬!ÕÖ!«\016Ö\016\023\016\027C\"\210Ø\026\024ª\017\016\027:«\n\016\023\016\027¤\210Ø\026\024\t\026\031\016\032­\013\016\e­\aÜ ­\003Ý \026\036\016\032«\bÜ «\004ß \210Õà!«\006à \210ª\026\016!Ø=«\020À\026!â\016#®\002ä!«\004å \210\016&;«\bç\016&è±\003\210é\016*®\002ëè±\003\210\016,«\bí\016,è±\003\210î\016/®\002ëè±\003\210\0160«\bñ\0160è"..., stack_depth=6, constants_data=0x8a66390) at bytecode.c:747 #16 0x80601a9 in funcall_compiled_function (fun=144083612, nargs=2, args=0xbffff570) at bytecode.c:519 #17 0x808506f in Ffuncall (nargs=3, args=0xbffff56c) at eval.c:3210 #18 0x8060544 in execute_optimized_program ( program=0x874e8b8 "À \210Á \210\n«\016Ã\n!¬\006ÄÅ!«\004\nq\210Æ \210ÇÈ\016\t\"\210ÊË!\210ÊÌ!\207", stack_depth=3, constants_data=0x8612768) at bytecode.c:747 #19 0x80601a9 in funcall_compiled_function (fun=140268468, nargs=0, args=0xbffff680) at bytecode.c:519 #20 0x808506f in Ffuncall (nargs=1, args=0xbffff67c) at eval.c:3210 #21 0x80884f4 in apply1 (fn=140268468, arg=136570980) at eval.c:3793 #22 0x80636ae in Fcall_interactively (function=138801572, record_flag=136570980, keys=136570980) at callint.c:394 #23 0x8083b07 in Fcommand_execute (cmd=138801572, record=136570980, keys=136570980) at eval.c:2613 #24 0x80b4053 in execute_command_event (command_builder=0x84e3580, event=149591396) at event-stream.c:4331 #25 0x80b4a4e in Fdispatch_event (event=149591396) at event-stream.c:4690 #26 0x806926d in Fcommand_loop_1 () at cmdloop.c:575 #27 0x806949d in command_loop_1 (dummy=136570980) at cmdloop.c:490 #28 0x808907b in condition_case_1 (handlers=136571076, bfun=0x8069468 <command_loop_1>, barg=136570980, hfun=0x8068890 <cmd_error>, harg=136570980) at eval.c:1629 #29 0x806957c in command_loop_2 (dummy=136570980) at cmdloop.c:252 #30 0x8088f5f in internal_catch (tag=136642788, func=0x8069544 <command_loop_2>, arg=136570980, threw=0x0) at eval.c:1304 #31 0x8068c0d in initial_command_loop (load_me=136570980) at cmdloop.c:301 #32 0x807ef72 in xemacs_21_2_b31_i686_pc_linux (argc=3, argv=0xbffffb94, envp=0xbffffba4, restart=0) at emacs.c:1879 #33 0x8080b7a in main (argc=3, argv=0xbffffb94, envp=0xbffffba4) at emacs.c:2305 #34 0x403c61eb in __libc_start_main (main=0x8080a80 <main>, argc=3, argv=0xbffffb94, init=0x804ebd4 <_init>, fini=0x81927d0 <_fini>, rtld_fini=0x4000a610 <_dl_fini>, stack_end=0xbffffb8c) at ../sysdeps/generic/libc-start.c:90