System: Solaris 2.7, gcc 2.7.2.2, full tarball of 21.2.32. In a VM window, I pressed C-g to get XEmacs to stop whatever it was doing. The window refreshed, and, immediately after, I clicked in the scrollbar area just below the scrollbar but above the bottom arrow. XEmacs crashed then. No lisp backtrace (in some kernel buffer somewhere), but the C backtrace is appended. Ray #0 0xfec16870 in _libc_kill () from /usr/lib/libc.so.1 #1 0xa429c in fatal_error_signal (sig=11) at emacs.c:293 #2 <signal handler called> #3 real_window (mir=0x0, no_abort=1) at window.c:489 #4 0xce764 in x_update_vertical_scrollbar_callback (widget=0xd9b200, id=65568, client_data=0xffbed948) at scrollbar-x.c:409 #5 0x220748 in xlw_scrollbar_callback (widget=0xd9b200, closure=0xda5a40, call_data=0xffbeda28) at lwlib-Xlw.c:220 #6 0xfef0ec84 in XtCallCallbackList () from /usr/openwin/lib/libXt.so.4 #7 0x221354 in call_callbacks (w=0xd9b200, reason=3, value=2, pixel=313, event=0xffbedde4) at xlwscrollbar.c:390 #8 0x2246d8 in Select (widget=0xd9b200, event=0xffbedde4, parms=0x0, num_parms=0xfef4a124) at xlwscrollbar.c:1725 #9 0xfef11c30 in HandleActions () from /usr/openwin/lib/libXt.so.4 #10 0xfef10a50 in HandleSimpleState () from /usr/openwin/lib/libXt.so.4 #11 0xfef10528 in _XtTranslateEvent () from /usr/openwin/lib/libXt.so.4 #12 0xfef1045c in XtDispatchEventToWidget () from /usr/openwin/lib/libXt.so.4 #13 0xfef0fce8 in _XtDefaultDispatcher () from /usr/openwin/lib/libXt.so.4 #14 0xfef0f810 in XtDispatchEvent () from /usr/openwin/lib/libXt.so.4 #15 0xfef12fa0 in XtAppProcessEvent () from /usr/openwin/lib/libXt.so.4 #16 0x1eaae8 in emacs_Xt_event_pending_p (user_p=1) at event-Xt.c:2798 #17 0xfae40 in detect_input_pending () at event-stream.c:888 #18 0xfaf08 in Finput_pending_p () at event-stream.c:912 #19 0xae174 in Ffuncall (nargs=0, args=0xffbee144) at eval.c:3218 #20 0x78fb0 in execute_optimized_program (program=0xffbee144 "", stack_depth=0, constants_data=0x732f10) at bytecode.c:747 #21 0x78810 in funcall_compiled_function (fun=7587616, nargs=0, args=0xffbee4b4) at bytecode.c:519 #22 0xae364 in Ffuncall (nargs=0, args=0xffbee4b0) at eval.c:3253 #23 0xaf0ac in run_hook_with_args_in_buffer (buf=0x2e6804, nargs=1, args=0xffbee4b0, cond=RUN_HOOKS_TO_COMPLETION) at eval.c:3704 #24 0xaf12c in run_hook_with_args (nargs=1, args=0xffbee4b0, cond=RUN_HOOKS_TO_COMPLETION) at eval.c:3717 #25 0xb24cc in catch_them_squirmers_run_hook (hook_symbol=-4266832) at eval.c:3571 #26 0xaa254 in condition_case_1 (handlers=2805760, bfun=0xb24ac <catch_them_squirmers_run_hook>, barg=3139244, hfun=0xb243c <allow_quit_safe_run_hook_caught_a_squirmer>, harg=19688100) at eval.c:1644 #27 0xb0350 in safe_run_hook_trapping_errors ( warning_string=0x25ca50 "Error in `post-command-hook' (setting hook to nil)", hook_symbol=3139244, allow_quit=1) at eval.c:4323 #28 0x10111c in post_command_hook () at event-stream.c:3930 #29 0x100f34 in execute_command_event (command_builder=0x60f040, event=25570444) at event-stream.c:3839 #30 0x1018ac in Fdispatch_event (event=25570444) at event-stream.c:4155 #31 0x87ee0 in Fcommand_loop_1 () at cmdloop.c:575 #32 0x87c74 in command_loop_1 (dummy=3041284) at cmdloop.c:490 #33 0xaa254 in condition_case_1 (handlers=2805760, bfun=0x87c28 <command_loop_1>, barg=3041284, hfun=0x880c0 <cmd_error>, harg=3041284) at eval.c:1644 #34 0x881d0 in command_loop_2 (dummy=3041284) at cmdloop.c:252 #35 0xa9de8 in internal_catch (tag=3123444, func=0x88184 <command_loop_2>, arg=3041284, threw=0x0) at eval.c:1310 #36 0x875a8 in initial_command_loop (load_me=557444) at cmdloop.c:301 #37 0xa5ebc in xemacs_21_2_b32_sparc_sun_solaris2_7 (argc=1, argv=0xffbeedb4, envp=0xffbeedbc, restart=0) at emacs.c:1873 #38 0xa66d8 in main (argc=1, argv=0xffbeedb4, envp=0xffbeedbc) at emacs.c:2292