I'm still experiencing the make-frame-on-display crash I reported a
few months ago. Recently, the messages became a bit more gossip than they used 
to. The crash doesn't happen all the time and I just didn't find a constant
way to reproduce it. Just try make-frame-on-display on a few different ones
(including :0, :0.0 and other machines) in -vanilla, and I get this:
Fatal error (10).
Your files have been auto-saved.
Use `M-x recover-session' to recover them.
[...]
Lisp backtrace follows:
  x-win-init-sun()
  # bind (vendor)
  x-initialize-keyboard()
  # (unwind-protect ...)
  # bind (--letf-save--54228 console)
  #<compiled-function (console) "...(39)" [selected-console
--letf-save--54228 (...) console --store--54227 select-console console-type x
x-initialize-keyboard x-initialize-compose] 2>(#<x-console on
"localhost:0" 0xe5c>)
  # bind (frame-being-created)
  make-frame(nil #<x-device on ":0.0" 0xe61>)
  # bind (props connection type)
  make-frame-on-device(x ":0" nil)
  # bind (props display)
  make-frame-on-display(":0")
  # bind (command-debug-status)
  call-interactively(make-frame-on-display)
  command-execute(make-frame-on-display t)
  # bind (_execute_command_keys_ _execute_command_name_ prefix-arg)
  execute-extended-command(nil)
  # bind (command-debug-status)
  call-interactively(execute-extended-command)
  # (condition-case ... . error)
  # (catch top-level ...)
[1]  + bus error (core dumped)  xemacs -vanilla
(gdb) core ~/core
Core was generated by `/inf/metheny/latest/xemacs-21.0-b37/src/xemacs -vanilla'.
Program terminated with signal 10, Bus error.
Reading symbols from /usr/X11R6/lib/libXm.so.3...done.
Reading symbols from /usr/local/lib/libcanna.so.1...done.
Reading symbols from /usr/local/lib/libRKC.so.1...done.
Reading symbols from /usr/X11R6/lib/libtiff.so...done.
Reading symbols from /usr/local/lib/libz.so.1.1.1...done.
Reading symbols from /usr/X11R6/lib/libXpm.so.4.11...done.
Reading symbols from /usr/openwin/lib/libtt.so.2...done.
Reading symbols from /usr/X11/lib/libXmu.so.5.0...done.
Reading symbols from /usr/X11/lib/libXt.so.5.0...done.
Reading symbols from /usr/X11/lib/libXext.so.5.0...done.
Reading symbols from /usr/X11/lib/libX11.so.5.0...done.
Reading symbols from /usr/X11R6/lib/libSM.so.6.0...done.
Reading symbols from /usr/X11R6/lib/libICE.so.6.3...done.
Reading symbols from /usr/lib/libdl.so.1...done.
Reading symbols from /usr/lib/libintl.so.1...done.
Reading symbols from /usr/lib/libkvm.so.1...done.
Reading symbols from /usr/lib/libkstat.so.1...done.
Reading symbols from /usr/lib/libm.so.1...done.
Reading symbols from /usr/lib/libsocket.so.1...done.
Reading symbols from /usr/lib/libnsl.so.1...done.
---Type <return> to continue, or q <return> to quit---
Reading symbols from /usr/lib/libelf.so.1...done.
Reading symbols from /usr/lib/libc.so.1...done.
Reading symbols from /usr/openwin/lib/libXt.so.4...done.
Reading symbols from /usr/openwin/lib/libX11.so.4...done.
Reading symbols from /usr/ucblib/libucb.so.1...done.
Reading symbols from /usr/lib/libresolv.so.1...done.
Reading symbols from /usr/lib/libw.so.1...done.
Reading symbols from /usr/lib/libmp.so.1...done.
Reading symbols from /usr/openwin/lib/libXext.so.0...done.
Reading symbols from /usr/platform/SUNW,Ultra-1/lib/libc_psr.so.1...done.
#0  0xef074424 in kill ()
(gdb) 
(gdb) up
#1  0x8f6b8 in fatal_error_signal (sig=10) at emacs.c:260
(gdb) 
#2  <signal handler called>
(gdb) 
#3  0x1c4a90 in reject_constant_symbols (sym=-1604973460, newval=540818572, 
    function_p=1, follow_past_lisp_magic=0) at symbols.c:563
(gdb) 
#4  0x1c4de8 in Ffset (sym=-1604973460, newdef=540818572) at symbols.c:660
(gdb) 
#5  0x62c24 in Fbyte_code (bytestr=1614561588, vector=-2143534416, 
    maxdepth=4075520) at bytecode.c:740
(gdb) 
#6  0x993e4 in funcall_lambda (fun=540821228, nargs=0, arg_vector=0xefffcf54)
    at eval.c:3597
(gdb) 
#7  0x980b8 in funcall_recording_as (recorded_as=540821228, nargs=0, 
    args=0xefffcf50) at eval.c:3214
(gdb) 
#8  0x9810c in Ffuncall (nargs=1, args=0xefffcf50) at eval.c:3238
(gdb) 
#9  0x621e8 in Fbyte_code (bytestr=1614549260, vector=-2143547056, 
    maxdepth=4075520) at bytecode.c:416
(gdb) 
#10 0x993e4 in funcall_lambda (fun=540807656, nargs=0, arg_vector=0xefffd2cc)
    at eval.c:3597
(gdb) 
#11 0x980b8 in funcall_recording_as (recorded_as=540807656, nargs=0, 
    args=0xefffd2c8) at eval.c:3214
(gdb) 
#12 0x9810c in Ffuncall (nargs=1, args=0xefffd2c8) at eval.c:3238
(gdb) 
#13 0x621e8 in Fbyte_code (bytestr=1614551484, vector=-2143544848, 
    maxdepth=4075520) at bytecode.c:416
(gdb) 
#14 0x993e4 in funcall_lambda (fun=540809840, nargs=1, arg_vector=0xefffd66c)
    at eval.c:3597
(gdb) 
#15 0x980b8 in funcall_recording_as (recorded_as=540809840, nargs=1, 
    args=0xefffd668) at eval.c:3214
(gdb) 
#16 0x9810c in Ffuncall (nargs=2, args=0xefffd668) at eval.c:3238
(gdb) 
#17 0x9975c in run_hook_with_args_in_buffer (buf=0xa0413004, nargs=2, 
    args=0xefffd668, cond=RUN_HOOKS_TO_COMPLETION) at eval.c:3748
(gdb) 
#18 0x997d0 in run_hook_with_args (nargs=2, args=0xefffd668, 
    cond=RUN_HOOKS_TO_COMPLETION) at eval.c:3761
(gdb) 
#19 0x99868 in va_run_hook_with_args (hook_var=-1606261676, nargs=1)
    at eval.c:3833
(gdb) 
#20 0x130c24 in Fmake_frame (props=-1606340604, device=543774208)
    at frame.c:536
(gdb) 
#21 0x97ed8 in funcall_recording_as (recorded_as=540060264, nargs=2, 
    args=0xefffd998) at eval.c:3197
(gdb) 
#22 0x9810c in Ffuncall (nargs=3, args=0xefffd998) at eval.c:3238
(gdb) 
#23 0x621e8 in Fbyte_code (bytestr=1614056324, vector=-2144040032, 
    maxdepth=4075520) at bytecode.c:416
(gdb) 
#24 0x993e4 in funcall_lambda (fun=540314552, nargs=3, arg_vector=0xefffdcf4)
    at eval.c:3597
(gdb) 
#25 0x980b8 in funcall_recording_as (recorded_as=540314552, nargs=3, 
    args=0xefffdcf0) at eval.c:3214
(gdb) 
#26 0x9810c in Ffuncall (nargs=4, args=0xefffdcf0) at eval.c:3238
(gdb) 
#27 0x621e8 in Fbyte_code (bytestr=1614551716, vector=-2143544592, 
    maxdepth=4075520) at bytecode.c:416
(gdb) 
#28 0x993e4 in funcall_lambda (fun=540810012, nargs=1, arg_vector=0xefffdfa4)
    at eval.c:3597
(gdb) 
#29 0x980b8 in funcall_recording_as (recorded_as=540810012, nargs=1, 
    args=0xefffdfa0) at eval.c:3214
(gdb) 
#30 0x9810c in Ffuncall (nargs=2, args=0xefffdfa0) at eval.c:3238
(gdb) 
#31 0x653a4 in Fcall_interactively (function=-1605025308, 
    record_flag=-1606340580, keys=-1606340604) at callint.c:935
(gdb) 
#32 0x966d4 in Fcommand_execute (cmd=-1605025308, record=-1606340580, 
    keys=-1606340604) at eval.c:2584
(gdb) 
#33 0x97da4 in funcall_recording_as (recorded_as=540046060, nargs=2, 
    args=0xefffe510) at eval.c:3193
(gdb) 
#34 0x9810c in Ffuncall (nargs=3, args=0xefffe510) at eval.c:3238
(gdb) 
#35 0x621e8 in Fbyte_code (bytestr=1613976632, vector=-2144119536, 
    maxdepth=4075520) at bytecode.c:416
(gdb) 
#36 0x993e4 in funcall_lambda (fun=540235304, nargs=1, arg_vector=0xefffe7cc)
    at eval.c:3597
(gdb) 
#37 0x980b8 in funcall_recording_as (recorded_as=540235304, nargs=1, 
    args=0xefffe7c8) at eval.c:3214
(gdb) 
#38 0x9810c in Ffuncall (nargs=2, args=0xefffe7c8) at eval.c:3238
(gdb) 
#39 0x653a4 in Fcall_interactively (function=-1605691732, 
    record_flag=-1606340604, keys=-1606340604) at callint.c:935
(gdb) 
#40 0x966d4 in Fcommand_execute (cmd=-1605691732, record=-1606340604, 
    keys=-1606340604) at eval.c:2584
(gdb) 
#41 0xfadac in execute_command_event (command_builder=0x48ebc0, 
    event=543668344) at event-stream.c:4289
(gdb) 
#42 0xfbf50 in Fdispatch_event (event=543668344) at event-stream.c:4583
(gdb) 
#43 0x70ea8 in Fcommand_loop_1 () at cmdloop.c:574
(gdb) 
#44 0x70b00 in command_loop_1 (dummy=-1606340604) at cmdloop.c:494
(gdb) 
#45 0x94f10 in condition_case_1 (handlers=4008960, 
    bfun=0x70a5c <command_loop_1>, barg=-1606340604, hfun=0x6fc40 <cmd_error>,
    harg=-1606340604) at eval.c:1653
(gdb) 
#46 0x6fd54 in command_loop_3 () at cmdloop.c:256
(gdb) 
#47 0x6fd7c in command_loop_2 (dummy=-1606340604) at cmdloop.c:267
(gdb) 
#48 0x94a84 in internal_catch (tag=-1606262660, func=0x6fd70 <command_loop_2>, 
    arg=-1606340604, threw=0x0) at eval.c:1328
(gdb) 
#49 0x701f0 in initial_command_loop (load_me=458096) at cmdloop.c:305
(gdb) 
#50 0x90bc4 in xemacs_21_0_b37_sparc_sun_solaris2_5 (argc=2, argv=0xeffff07c, 
    envp=0xeffff088, restart=4059820) at emacs.c:1672
(gdb) 
#51 0x91378 in main (argc=0, argv=0xeffff07c, envp=0xeffff088) at emacs.c:2089
(gdb) 
Initial frame selected; you cannot go up.
(gdb)