21.1.12 crash in DGifSlurp

I was merrily reading my mail with vm, using w3 to render HTML, when xemacs keeled over. Unfortunately I couldn't reproduce the crash, but I have the core. Stack trace and Installation follow: I'm not familiar with the XEmacs gif code, I can't find any crashes in DGifSlurp in the archives. The offending line appears to be do { ===> if (AddExtensionBlock(sp, ExtData[0], ExtData+1) == GIF_ERROR) GifInternError(GifFile, D_GIF_ERR_NOT_ENOUGH_MEM); DGifGetExtensionNext(GifFile, &ExtData); } while (ExtData != NULL); If there's anything else I can do to narrow this down, please let me know; meanwhile I'll try to make it happen again (and maybe I'll build xemacs with -g...) Thanks Isaac #0 0x4030dd21 in __kill () from /lib/libc.so.6 #1 0x809de81 in fatal_error_signal (sig=11) at emacs.c:263 #2 <signal handler called> #3 0x80ab3e5 in DGifSlurp (GifFile=0x8c18c08) at dgif_lib.c:757 #4 0x80eae57 in gif_instantiate (image_instance=144626968, instantiator=143722728, pointer_fg=136811764, pointer_bg=136811764, dest_mask=47, domain=140933280) at glyphs-eimage.c:663 #5 0x80e73b0 in image_instantiate (specifier=143950976, matchspec=136605516, domain=140933280, instantiator=143722728, depth=3) at glyphs.c:516 #6 0x80a03f0 in primitive_funcall (fn=0x80e7034 <image_instantiate>, nargs=5, args=0xbfffa7c8) at eval.c:2862 #7 0x809fa6b in call_with_suspended_errors ( fun=0x80e7034 <image_instantiate>, retval=136605516, class=136911928, errb=ERROR_ME, nargs=5) at eval.c:2137 #8 0x8125c61 in specifier_instance_from_inst_list (specifier=143950976, matchspec=136605516, domain=140933280, inst_list=143374876, errb=ERROR_ME, no_quit=0, depth=3) at specifier.c:2385 #9 0x8125efc in specifier_instance (specifier=143950976, matchspec=136605516, domain=140933280, errb=ERROR_ME, no_quit=0, no_fallback=0, depth=1) at specifier.c:2501 #10 0x8126054 in Fspecifier_instance (specifier=143950976, domain=136811764, default_=136811764, no_fallback=136811764) at specifier.c:2591 #11 0x80a11be in funcall_recording_as (recorded_as=136925752, nargs=1, args=0xbfffa9c8) at eval.c:3193 #12 0x80a518d in Ffuncall (nargs=2, args=0xbfffa9c8) at eval.c:3238 #13 0x8084b46 in Fbyte_code (bytestr=140981452, vector=141740408, maxdepth=7) at bytecode.c:416 #14 0x80a0c6d in Feval (form=141797584) at eval.c:3063 #15 0x809f22d in condition_case_3 (bodyform=141797584, var=136811764, handlers=141797500) at eval.c:1653 #16 0x8084fd3 in Fbyte_code (bytestr=140976932, vector=141881344, maxdepth=61) at bytecode.c:576 #17 0x80a1ee1 in funcall_lambda (fun=141842144, nargs=1, arg_vector=0xbfffb65c) at eval.c:3597 #18 0x80a13ce in funcall_recording_as (recorded_as=142089376, nargs=1, args=0xbfffb658) at eval.c:3214 #19 0x80a518d in Ffuncall (nargs=2, args=0xbfffb658) at eval.c:3238 #20 0x8084b46 in Fbyte_code (bytestr=140978644, vector=141576856, maxdepth=11) at bytecode.c:416 #21 0x80a1ee1 in funcall_lambda (fun=141841976, nargs=1, arg_vector=0xbfffb7e0) at eval.c:3597 #22 0x80a13ce in funcall_recording_as (recorded_as=142089264, nargs=1, args=0xbfffb7dc) at eval.c:3214 #23 0x80a18dc in Fapply (nargs=3, args=0xbfffb7dc) at eval.c:3238 #24 0x81488f4 in Fwidget_apply (nargs=2, args=0xbfffb914) at widget.c:107 #25 0x80a1288 in funcall_recording_as (recorded_as=136929136, nargs=2, args=0xbfffb910) at eval.c:3197 #26 0x80a518d in Ffuncall (nargs=3, args=0xbfffb910) at eval.c:3238 #27 0x8084b46 in Fbyte_code (bytestr=140978372, vector=141576920, maxdepth=11) at bytecode.c:416 #28 0x80a1ee1 in funcall_lambda (fun=141842004, nargs=2, arg_vector=0xbfffba90) at eval.c:3597 #29 0x80a13ce in funcall_recording_as (recorded_as=142089208, nargs=2, args=0xbfffba8c) at eval.c:3214 #30 0x80a18dc in Fapply (nargs=3, args=0xbfffba8c) at eval.c:3238 #31 0x81488f4 in Fwidget_apply (nargs=3, args=0xbfffbb50) at widget.c:107 #32 0x80a1288 in funcall_recording_as (recorded_as=136929136, nargs=3, args=0xbfffbb4c) at eval.c:3197 #33 0x80a518d in Ffuncall (nargs=4, args=0xbfffbb4c) at eval.c:3238 #34 0x8084b46 in Fbyte_code (bytestr=141190916, vector=142099064, maxdepth=15) at bytecode.c:416 #35 0x80a1ee1 in funcall_lambda (fun=142113632, nargs=2, arg_vector=0xbfffbc20) at eval.c:3597 #36 0x80a1abd in apply_lambda (fun=142113632, numargs=2, unevalled_args=136811764) at eval.c:3501 #37 0x80a0dac in Feval (form=142277424) at eval.c:3085 #38 0x809f22d in condition_case_3 (bodyform=142277424, var=136811764, handlers=142277364) at eval.c:1653 #39 0x8084fd3 in Fbyte_code (bytestr=141251900, vector=142281832, maxdepth=7) at bytecode.c:576 #40 0x80a0c6d in Feval (form=142277640) at eval.c:3063 #41 0x80a51ca in Fprogn (args=142277184) at eval.c:758 #42 0x8084f6c in Fbyte_code (bytestr=141252284, vector=142281976, maxdepth=5) at bytecode.c:554 #43 0x80a1ee1 in funcall_lambda (fun=142232224, nargs=2, arg_vector=0xbfffc4f8) at eval.c:3597 #44 0x80a13ce in funcall_recording_as (recorded_as=138227744, nargs=2, args=0xbfffc4f4) at eval.c:3214 #45 0x80a518d in Ffuncall (nargs=3, args=0xbfffc4f4) at eval.c:3238 #46 0x8084b46 in Fbyte_code (bytestr=140447428, vector=140790464, maxdepth=11) at bytecode.c:416 #47 0x80a0c6d in Feval (form=140697936) at eval.c:3063 #48 0x809f22d in condition_case_3 (bodyform=140697936, var=137183592, handlers=140697624) at eval.c:1653 #49 0x8084fd3 in Fbyte_code (bytestr=140447604, vector=140790640, maxdepth=7) at bytecode.c:576 #50 0x80a1ee1 in funcall_lambda (fun=140501592, nargs=1, arg_vector=0xbfffc930) at eval.c:3597 #51 0x80a13ce in funcall_recording_as (recorded_as=140261924, nargs=1, args=0xbfffc92c) at eval.c:3214 #52 0x80a518d in Ffuncall (nargs=2, args=0xbfffc92c) at eval.c:3238 #53 0x8084b46 in Fbyte_code (bytestr=140563172, vector=140790024, maxdepth=7) at bytecode.c:416 #54 0x80a0c6d in Feval (form=140698320) at eval.c:3063 #55 0x809f22d in condition_case_3 (bodyform=140698320, var=136811764, handlers=140705796) at eval.c:1653 #56 0x8084fd3 in Fbyte_code (bytestr=140564148, vector=140790144, maxdepth=13) at bytecode.c:576 #57 0x80a1ee1 in funcall_lambda (fun=140501508, nargs=1, arg_vector=0xbfffd684) at eval.c:3597 #58 0x80a13ce in funcall_recording_as (recorded_as=140251588, nargs=1, args=0xbfffd680) at eval.c:3214 #59 0x80a518d in Ffuncall (nargs=2, args=0xbfffd680) at eval.c:3238 #60 0x8084b46 in Fbyte_code (bytestr=140553108, vector=140789656, maxdepth=13) at bytecode.c:416 #61 0x80a1ee1 in funcall_lambda (fun=140501480, nargs=0, arg_vector=0xbfffd750) at eval.c:3597 #62 0x80a1abd in apply_lambda (fun=140501480, numargs=0, unevalled_args=136811764) at eval.c:3501 #63 0x80a0dac in Feval (form=140962420) at eval.c:3085 #64 0x809f22d in condition_case_3 (bodyform=140962420, var=136909956, handlers=140962336) at eval.c:1653 #65 0x8084fd3 in Fbyte_code (bytestr=140977156, vector=140979208, maxdepth=13) at bytecode.c:576 #66 0x80a1ee1 in funcall_lambda (fun=140966404, nargs=0, arg_vector=0xbfffe37c) at eval.c:3597 #67 0x80a13ce in funcall_recording_as (recorded_as=140295984, nargs=0, args=0xbfffe378) at eval.c:3214 #68 0x80a518d in Ffuncall (nargs=1, args=0xbfffe378) at eval.c:3238 #69 0x8084b46 in Fbyte_code (bytestr=140965068, vector=140978864, maxdepth=11) at bytecode.c:416 #70 0x80a1ee1 in funcall_lambda (fun=140966376, nargs=0, arg_vector=0xbfffe580) at eval.c:3597 #71 0x80a13ce in funcall_recording_as (recorded_as=139952360, nargs=0, args=0xbfffe57c) at eval.c:3214 #72 0x80a518d in Ffuncall (nargs=1, args=0xbfffe57c) at eval.c:3238 #73 0x8084b46 in Fbyte_code (bytestr=142534572, vector=141597496, maxdepth=5) at bytecode.c:416 #74 0x80a1ee1 in funcall_lambda (fun=143300320, nargs=1, arg_vector=0xbfffe6ac) at eval.c:3597 #75 0x80a13ce in funcall_recording_as (recorded_as=143300320, nargs=1, args=0xbfffe6a8) at eval.c:3214 #76 0x80a437b in call1 (fn=143300320, arg0=143238428) at eval.c:3238 #77 0x812d304 in mapatoms_1 (sym=143238428, arg=0xbfffe700) at symbols.c:404 #78 0x81296ed in Fmapatoms (function=143300320, obarray=144059344) at symbols.c:391 #79 0x80a1288 in funcall_recording_as (recorded_as=136927276, nargs=2, args=0xbffff2bc) at eval.c:3197 #80 0x80a518d in Ffuncall (nargs=3, args=0xbffff2bc) at eval.c:3238 #81 0x8084b46 in Fbyte_code (bytestr=142529652, vector=143886272, maxdepth=15) at bytecode.c:416 #82 0x80a1ee1 in funcall_lambda (fun=143300348, nargs=0, arg_vector=0xbffff41c) at eval.c:3597 #83 0x80a13ce in funcall_recording_as (recorded_as=143300348, nargs=0, args=0xbffff418) at eval.c:3214 #84 0x80a42ec in apply1 (fn=143300348, arg=136811764) at eval.c:3238 #85 0x8086042 in Fcall_interactively (function=139828056, record_flag=136811764, keys=136811764) at callint.c:397 #86 0x80a00c8 in Fcommand_execute (cmd=139828056, record=136811764, keys=136811764) at eval.c:2584 #87 0x80c1d12 in execute_command_event (command_builder=0x8399c48, event=141845536) at event-stream.c:4346 #88 0x80c23d5 in Fdispatch_event (event=141845536) at event-stream.c:4685 #89 0x808ab6a in Fcommand_loop_1 () at cmdloop.c:579 #90 0x808ad2a in command_loop_1 (dummy=136811764) at cmdloop.c:494 #91 0x80a4e6b in condition_case_1 (handlers=136811876, bfun=0x808ad14 <command_loop_1>, barg=136811764, hfun=0x808a670 <cmd_error>, harg=136811764) at eval.c:1653 #92 0x808adfe in command_loop_2 (dummy=136811764) at cmdloop.c:256 #93 0x80a4d4f in internal_catch (tag=136886136, func=0x808adcc <command_loop_2>, arg=136811764, threw=0x0) at eval.c:1328 #94 0x808a8ac in initial_command_loop (load_me=136811764) at cmdloop.c:305 #95 0x809ccc1 in xemacs_21_1_12_i686_pc_linux () at emacs.c:1720 #96 0x809e17d in main (argc=3, argv=0xbffff904, envp=0xbffff914) at emacs.c:2137 #97 0x403079cb in __libc_start_main (main=0x809e078 <main>, argc=3, argv=0xbffff904, init=0x80776c4 <_init>, fini=0x815ffe4 <_fini>, rtld_fini=0x4000ae60 <_dl_fini>, stack_end=0xbffff8fc) at ../sysdeps/generic/libc-start.c:92 uname -a: Linux yitzchak 2.2.14-5.0 #1 Tue Mar 7 21:07:39 EST 2000 i686 unknown ./configure XEmacs 21.1.12 "Channel Islands" configured for `i686-pc-linux'. Where should the build process find the source code? /usr/local/src/xemacs-21.1.12 What installation prefix should install use? /usr/local What operating system and machine description files should XEmacs use? `s/linux.h' and `m/intel386.h' What compiler should XEmacs be built with? gcc -g -O3 -Wall -Wno-switch Should XEmacs use the GNU version of malloc? yes (Using Doug Lea's new malloc from the GNU C Library.) Should XEmacs use the relocating allocator for buffers? yes What window system should XEmacs use? x11 Where do we find X Windows header files? /usr/X11R6/include Where do we find X Windows libraries? /usr/X11R6/lib Compiling in support for XAUTH. Compiling in support for XPM images. Compiling in support for PNG image handling. Compiling in support for (builtin) GIF image handling. Compiling in support for JPEG image handling. Compiling in support for TIFF image handling. Compiling in native sound support. Compiling in support for Berkeley DB. Compiling in support for ncurses. Compiling in support for GPM (General Purpose Mouse). Compiling in support for proper session-management. Using Lucid menubars. Using Lucid scrollbars. Using Athena dialog boxes. Compiling in DLL support. movemail will use "dot-locking" for locking mail spool files. Using Lisp_Objects with minimal tagbits.