21.2.44 crash on Solaris 2.7

Here's a 100% repeatable crash for me. See the attached Installation file for system specifics. $ xemacs-21.2 -vanilla Using the menus, Edit->Find. The Find window comes up momentarily and then xemacs crashes. The lisp traceback says: # (unwind-protect ...) # (catch #<INTERNAL OBJECT (XEmacs bug?) (opaque-ptr, adr=0x304c68) 0x36d000> ...) # (unwind-protect ...) # bind (inhibit-quit) # (unwind-protect ...) # (unwind-protect ...) # (catch #<INTERNAL OBJECT (XEmacs bug?) (opaque-ptr, adr=0x304c68) 0x36d000> ...) # (unwind-protect ...) # bind (inhibit-quit) # (condition-case ... . error) # (catch top-level ...) Abort (core dumped) The C traceback is: #0 0xfeb18790 in _libc_kill () from /usr/lib/libc.so.1 #1 0xabd84 in fatal_error_signal (sig=6) at emacs.c:535 #2 <signal handler called> #3 0xfeb18790 in _libc_kill () from /usr/lib/libc.so.1 #4 0xfeab9524 in abort () from /usr/lib/libc.so.1 #5 0xaec08 in assert_failed (file=0x2de1e0 "lwlib.c", line=938, expr=0x2de1e8 "abort()") at emacs.c:3214 #6 0x256d94 in instantiate_widget_instance (instance=0x78e440) at lwlib.c:938 #7 0x256ed4 in lw_make_widget (id=8126784, parent=0x7c3000, pop_up_p=0 '\000') at lwlib.c:389 #8 0x257c90 in lw_create_widget (type=0x2d6ca8 "text-field", name=0x75dea8 "", id=65553, val=0x71ef40, parent=0x7c3000, pop_up_p=0 '\000', pre_activate_cb=0, selection_cb=0xe22c0 <popup_selection_callback>, post_activate_cb=0) at lwlib.c:993 #9 0x230318 in x_widget_instantiate (image_instance=8136448, instantiator=3182592, pointer_fg=3181568, pointer_bg=2976768, dest_mask=2975744, domain=8136832, type=0x2d6ca8 "text-field", wv=0x71ef40) at glyphs-x.c:2539 #10 0x2328cc in x_edit_field_instantiate (image_instance=8136448, instantiator=8127616, pointer_fg=3360772, pointer_bg=3360772, dest_mask=111, domain=8136832) at glyphs-x.c:2710 #11 0x15a214 in instantiate_image_instantiator ( governing_domain=3583872, domain=8136832, instantiator=8127616, pointer_fg=3360772, pointer_bg=3360772, dest_mask=111, glyph=8127808) at glyphs.c:798 #12 0x161f70 in image_instantiate (specifier=0, matchspec=8127808, domain=8136832, instantiator=8127616, depth=3360772) at glyphs.c:3251 #13 0xb2ecc in call_with_suspended_errors_1 (opaque_arg=-4271540) at eval.c:2112 #14 0xb32cc in call_with_suspended_errors ( fun=0x161604 <image_instantiate>, retval=2936132, class=3360772, errb=Cannot access memory at address 0x2a. ) at eval.c:1317 #15 0x1fbe34 in specifier_instance_from_inst_list (specifier=8136960, matchspec=2936132, domain=8136832, inst_list=8132448, errb= Cannot access memory at address 0x2a. ) at specifier.c:2510 #16 0x1fc2c4 in specifier_instance (specifier=8136960, matchspec=2936132, domain=8136832, errb= Cannot access memory at address 0x2a. ) at specifier.c:2625 #17 0x16a638 in glyph_query_geometry (glyph_or_image=8127808, width=0xffbed4bc, height=0xffbed4b8, disp=IMAGE_DESIRED_GEOMETRY, domain=8136832) at glyphs.c:3845 #18 0x170c1c in layout_query_geometry (image_instance=8136832, width=0xffbed630, height=0xffbed62c, disp=IMAGE_DESIRED_GEOMETRY, domain=0) at glyphs-widget.c:1151 #19 0x16ef50 in widget_query_geometry (image_instance=8136832, width=0xffbed630, height=0xffbed62c, disp=IMAGE_DESIRED_GEOMETRY, domain=8109056) at glyphs-widget.c:472 #20 0x15e400 in image_instance_query_geometry (image_instance=8136832, width=0xffbed630, height=0xffbed62c, disp=IMAGE_DESIRED_GEOMETRY, domain=8109056) at glyphs.c:1950 #21 0x15e5c4 in image_instance_layout (image_instance=8136832, width=-1, height=-1, xoffset=-2, yoffset=-2, domain=8109056) at glyphs.c:2003 #22 0x15a30c in instantiate_image_instantiator (governing_domain=0, domain=8109056, instantiator=8069632, pointer_fg=3360772, pointer_bg=3360772, dest_mask=111, glyph=8070144) at glyphs.c:811 #23 0x161f70 in image_instantiate (specifier=0, matchspec=8070144, domain=8109056, instantiator=8069632, depth=3360772) at glyphs.c:3251 #24 0xb2ecc in call_with_suspended_errors_1 (opaque_arg=-4269796) at eval.c:2112 #25 0xb32cc in call_with_suspended_errors ( fun=0x161604 <image_instantiate>, retval=2936132, class=3360772, errb=Cannot access memory at address 0x2a. ) at eval.c:1317 #26 0x1fbe34 in specifier_instance_from_inst_list (specifier=8108416, matchspec=2936132, domain=8109056, inst_list=6321824, errb= Cannot access memory at address 0x2a. ) at specifier.c:2510 #27 0x1fc2c4 in specifier_instance (specifier=8108416, matchspec=2936132, domain=8109056, errb= Cannot access memory at address 0x2a. ) at specifier.c:2625 #28 0x16a638 in glyph_query_geometry (glyph_or_image=8070144, width=0xffbedb8c, height=0xffbedb88, disp=IMAGE_DESIRED_GEOMETRY, domain=8109056) at glyphs.c:3845 #29 0x170f08 in layout_layout (image_instance=8109056, width=280, height=143, xoffset=280, yoffset=3182592, domain=7904256) at glyphs-widget.c:1237 #30 0x1796dc in widget_layout (image_instance=8109056, width=280, height=143, xoffset=-2, yoffset=-2, domain=7904256) at glyphs-widget.c:529 #31 0x15e714 in image_instance_layout (image_instance=8109056, width=280, height=143, xoffset=-2, yoffset=-2, domain=7904256) at glyphs.c:2036 #32 0x164828 in glyph_width (glyph_or_image=8109056, domain=7904256) at glyphs.c:3881 #33 0x1667c0 in update_glyph_cachel_data (w=0x789c00, glyph=7929472, cachel=0xffbeddf8) at glyphs.c:4174 #34 0x1668ac in get_glyph_cachel_index (w=0x789c00, glyph=7929472) at glyphs.c:4190 #35 0x1bf24c in add_glyph_rune (data=0xffbedf60, gb=0x77e700, pos_type=0, allow_cursor=0, cachel=0x0) at redisplay.c:1529 #36 0x1c64a0 in create_string_text_block (w=0x789c00, disp_string=6829972, dl=0xffbee058, start_pos=0, prop=0xffbee054, default_face=4) at redisplay.c:1780 #37 0x1c71ec in generate_displayable_area (w=0x789c00, disp_string=6829972, xpos=-4267944, ypos=4, width=-4267948, height=143, dla=0x78ee60, start_pos=0, default_face=4) at redisplay.c:4951 #38 0x181ba0 in output_gutter (f=0x785800, pos=TOP_GUTTER, force=0) at gutter.c:410 #39 0x182930 in update_frame_gutters (f=0x785800) at gutter.c:634 #40 0x1c9c84 in redisplay_frame (f=0x785800, preemption_check=0) #41 0x1ca0ac in redisplay_device (d=0x6a2c00, automatic=6792704) at redisplay.c:6498 #42 0x1ca4e8 in redisplay_without_hooks () at redisplay.c:6557 #43 0x1d3bfc in redisplay () at redisplay.c:6614 #44 0x112380 in Fnext_event (event=7439964, prompt=3360772) at event-stream.c:2177 #45 0x8de38 in Fcommand_loop_1 () at cmdloop.c:574 #46 0x8e0e0 in command_loop_1 (dummy=6931840) at cmdloop.c:494 #47 0xb20f4 in condition_case_1 (handlers=3139164, bfun=0x8e094 <command_loop_1>, barg=3360772, hfun=0x8e140 <cmd_error>, harg=3360772) at eval.c:1651 #48 0x8e250 in command_loop_2 (dummy=3360772) at cmdloop.c:256 #49 0xbaf94 in internal_catch (tag=3441100, func=0x8e204 <command_loop_2>, arg=3360772, threw=0x0) at eval.c:1317 #50 0x8d560 in initial_command_loop (load_me=3360772) at cmdloop.c:305 #51 0xada0c in sort_args (argc=2644992, argv=0xffbeea74) at emacs.c:2253 If more info is needed, I can supply that since it's 100% repeatable. Ray Installation file: