[CRASH] make-frame-on-display

I'm still experiencing the make-frame-on-display crash I reported a few months ago. Recently, the messages became a bit more gossip than they used to. The crash doesn't happen all the time and I just didn't find a constant way to reproduce it. Just try make-frame-on-display on a few different ones (including :0, :0.0 and other machines) in -vanilla, and I get this: Fatal error (10). Your files have been auto-saved. Use `M-x recover-session' to recover them. [...] Lisp backtrace follows: x-win-init-sun() # bind (vendor) x-initialize-keyboard() # (unwind-protect ...) # bind (--letf-save--54228 console) #<compiled-function (console) "...(39)" [selected-console --letf-save--54228 (...) console --store--54227 select-console console-type x x-initialize-keyboard x-initialize-compose] 2>(#<x-console on "localhost:0" 0xe5c>) # bind (frame-being-created) make-frame(nil #<x-device on ":0.0" 0xe61>) # bind (props connection type) make-frame-on-device(x ":0" nil) # bind (props display) make-frame-on-display(":0") # bind (command-debug-status) call-interactively(make-frame-on-display) command-execute(make-frame-on-display t) # bind (_execute_command_keys_ _execute_command_name_ prefix-arg) execute-extended-command(nil) # bind (command-debug-status) call-interactively(execute-extended-command) # (condition-case ... . error) # (catch top-level ...) [1] + bus error (core dumped) xemacs -vanilla (gdb) core ~/core Core was generated by `/inf/metheny/latest/xemacs-21.0-b37/src/xemacs -vanilla'. Program terminated with signal 10, Bus error. Reading symbols from /usr/X11R6/lib/libXm.so.3...done. Reading symbols from /usr/local/lib/libcanna.so.1...done. Reading symbols from /usr/local/lib/libRKC.so.1...done. Reading symbols from /usr/X11R6/lib/libtiff.so...done. Reading symbols from /usr/local/lib/libz.so.1.1.1...done. Reading symbols from /usr/X11R6/lib/libXpm.so.4.11...done. Reading symbols from /usr/openwin/lib/libtt.so.2...done. Reading symbols from /usr/X11/lib/libXmu.so.5.0...done. Reading symbols from /usr/X11/lib/libXt.so.5.0...done. Reading symbols from /usr/X11/lib/libXext.so.5.0...done. Reading symbols from /usr/X11/lib/libX11.so.5.0...done. Reading symbols from /usr/X11R6/lib/libSM.so.6.0...done. Reading symbols from /usr/X11R6/lib/libICE.so.6.3...done. Reading symbols from /usr/lib/libdl.so.1...done. Reading symbols from /usr/lib/libintl.so.1...done. Reading symbols from /usr/lib/libkvm.so.1...done. Reading symbols from /usr/lib/libkstat.so.1...done. Reading symbols from /usr/lib/libm.so.1...done. Reading symbols from /usr/lib/libsocket.so.1...done. Reading symbols from /usr/lib/libnsl.so.1...done. ---Type <return> to continue, or q <return> to quit--- Reading symbols from /usr/lib/libelf.so.1...done. Reading symbols from /usr/lib/libc.so.1...done. Reading symbols from /usr/openwin/lib/libXt.so.4...done. Reading symbols from /usr/openwin/lib/libX11.so.4...done. Reading symbols from /usr/ucblib/libucb.so.1...done. Reading symbols from /usr/lib/libresolv.so.1...done. Reading symbols from /usr/lib/libw.so.1...done. Reading symbols from /usr/lib/libmp.so.1...done. Reading symbols from /usr/openwin/lib/libXext.so.0...done. Reading symbols from /usr/platform/SUNW,Ultra-1/lib/libc_psr.so.1...done. #0 0xef074424 in kill () (gdb) (gdb) up #1 0x8f6b8 in fatal_error_signal (sig=10) at emacs.c:260 (gdb) #2 <signal handler called> (gdb) #3 0x1c4a90 in reject_constant_symbols (sym=-1604973460, newval=540818572, function_p=1, follow_past_lisp_magic=0) at symbols.c:563 (gdb) #4 0x1c4de8 in Ffset (sym=-1604973460, newdef=540818572) at symbols.c:660 (gdb) #5 0x62c24 in Fbyte_code (bytestr=1614561588, vector=-2143534416, maxdepth=4075520) at bytecode.c:740 (gdb) #6 0x993e4 in funcall_lambda (fun=540821228, nargs=0, arg_vector=0xefffcf54) at eval.c:3597 (gdb) #7 0x980b8 in funcall_recording_as (recorded_as=540821228, nargs=0, args=0xefffcf50) at eval.c:3214 (gdb) #8 0x9810c in Ffuncall (nargs=1, args=0xefffcf50) at eval.c:3238 (gdb) #9 0x621e8 in Fbyte_code (bytestr=1614549260, vector=-2143547056, maxdepth=4075520) at bytecode.c:416 (gdb) #10 0x993e4 in funcall_lambda (fun=540807656, nargs=0, arg_vector=0xefffd2cc) at eval.c:3597 (gdb) #11 0x980b8 in funcall_recording_as (recorded_as=540807656, nargs=0, args=0xefffd2c8) at eval.c:3214 (gdb) #12 0x9810c in Ffuncall (nargs=1, args=0xefffd2c8) at eval.c:3238 (gdb) #13 0x621e8 in Fbyte_code (bytestr=1614551484, vector=-2143544848, maxdepth=4075520) at bytecode.c:416 (gdb) #14 0x993e4 in funcall_lambda (fun=540809840, nargs=1, arg_vector=0xefffd66c) at eval.c:3597 (gdb) #15 0x980b8 in funcall_recording_as (recorded_as=540809840, nargs=1, args=0xefffd668) at eval.c:3214 (gdb) #16 0x9810c in Ffuncall (nargs=2, args=0xefffd668) at eval.c:3238 (gdb) #17 0x9975c in run_hook_with_args_in_buffer (buf=0xa0413004, nargs=2, args=0xefffd668, cond=RUN_HOOKS_TO_COMPLETION) at eval.c:3748 (gdb) #18 0x997d0 in run_hook_with_args (nargs=2, args=0xefffd668, cond=RUN_HOOKS_TO_COMPLETION) at eval.c:3761 (gdb) #19 0x99868 in va_run_hook_with_args (hook_var=-1606261676, nargs=1) at eval.c:3833 (gdb) #20 0x130c24 in Fmake_frame (props=-1606340604, device=543774208) at frame.c:536 (gdb) #21 0x97ed8 in funcall_recording_as (recorded_as=540060264, nargs=2, args=0xefffd998) at eval.c:3197 (gdb) #22 0x9810c in Ffuncall (nargs=3, args=0xefffd998) at eval.c:3238 (gdb) #23 0x621e8 in Fbyte_code (bytestr=1614056324, vector=-2144040032, maxdepth=4075520) at bytecode.c:416 (gdb) #24 0x993e4 in funcall_lambda (fun=540314552, nargs=3, arg_vector=0xefffdcf4) at eval.c:3597 (gdb) #25 0x980b8 in funcall_recording_as (recorded_as=540314552, nargs=3, args=0xefffdcf0) at eval.c:3214 (gdb) #26 0x9810c in Ffuncall (nargs=4, args=0xefffdcf0) at eval.c:3238 (gdb) #27 0x621e8 in Fbyte_code (bytestr=1614551716, vector=-2143544592, maxdepth=4075520) at bytecode.c:416 (gdb) #28 0x993e4 in funcall_lambda (fun=540810012, nargs=1, arg_vector=0xefffdfa4) at eval.c:3597 (gdb) #29 0x980b8 in funcall_recording_as (recorded_as=540810012, nargs=1, args=0xefffdfa0) at eval.c:3214 (gdb) #30 0x9810c in Ffuncall (nargs=2, args=0xefffdfa0) at eval.c:3238 (gdb) #31 0x653a4 in Fcall_interactively (function=-1605025308, record_flag=-1606340580, keys=-1606340604) at callint.c:935 (gdb) #32 0x966d4 in Fcommand_execute (cmd=-1605025308, record=-1606340580, keys=-1606340604) at eval.c:2584 (gdb) #33 0x97da4 in funcall_recording_as (recorded_as=540046060, nargs=2, args=0xefffe510) at eval.c:3193 (gdb) #34 0x9810c in Ffuncall (nargs=3, args=0xefffe510) at eval.c:3238 (gdb) #35 0x621e8 in Fbyte_code (bytestr=1613976632, vector=-2144119536, maxdepth=4075520) at bytecode.c:416 (gdb) #36 0x993e4 in funcall_lambda (fun=540235304, nargs=1, arg_vector=0xefffe7cc) at eval.c:3597 (gdb) #37 0x980b8 in funcall_recording_as (recorded_as=540235304, nargs=1, args=0xefffe7c8) at eval.c:3214 (gdb) #38 0x9810c in Ffuncall (nargs=2, args=0xefffe7c8) at eval.c:3238 (gdb) #39 0x653a4 in Fcall_interactively (function=-1605691732, record_flag=-1606340604, keys=-1606340604) at callint.c:935 (gdb) #40 0x966d4 in Fcommand_execute (cmd=-1605691732, record=-1606340604, keys=-1606340604) at eval.c:2584 (gdb) #41 0xfadac in execute_command_event (command_builder=0x48ebc0, event=543668344) at event-stream.c:4289 (gdb) #42 0xfbf50 in Fdispatch_event (event=543668344) at event-stream.c:4583 (gdb) #43 0x70ea8 in Fcommand_loop_1 () at cmdloop.c:574 (gdb) #44 0x70b00 in command_loop_1 (dummy=-1606340604) at cmdloop.c:494 (gdb) #45 0x94f10 in condition_case_1 (handlers=4008960, bfun=0x70a5c <command_loop_1>, barg=-1606340604, hfun=0x6fc40 <cmd_error>, harg=-1606340604) at eval.c:1653 (gdb) #46 0x6fd54 in command_loop_3 () at cmdloop.c:256 (gdb) #47 0x6fd7c in command_loop_2 (dummy=-1606340604) at cmdloop.c:267 (gdb) #48 0x94a84 in internal_catch (tag=-1606262660, func=0x6fd70 <command_loop_2>, arg=-1606340604, threw=0x0) at eval.c:1328 (gdb) #49 0x701f0 in initial_command_loop (load_me=458096) at cmdloop.c:305 (gdb) #50 0x90bc4 in xemacs_21_0_b37_sparc_sun_solaris2_5 (argc=2, argv=0xeffff07c, envp=0xeffff088, restart=4059820) at emacs.c:1672 (gdb) #51 0x91378 in main (argc=0, argv=0xeffff07c, envp=0xeffff088) at emacs.c:2089 (gdb) Initial frame selected; you cannot go up. (gdb)