[17336] in Athena Bugs
8.3 SPARC emacs core dump
daemon@ATHENA.MIT.EDU (John Carr)
Tue Nov 2 09:25:45 1999
Message-Id: <199911021425.JAA17411@mint-square.mit.edu>
To: bugs@MIT.EDU
Date: Tue, 02 Nov 1999 09:25:34 -0500
From: John Carr <jfc@MIT.EDU>
emacs dumped core on mint-square, an 8.3 dialup. I had just iconified
and deiconified the window a couple times while running X through ssh
over a T1 connection so emacs may have received several events at once.
The stack trace indicates that it crashed due to a bad pointer in
xdisp.c:redisplay_internal(), apparently at line 1438. The variable
struct buffer *b
pointed to garbage data:
(gdb) p *b
$15 = {
size = 2315696,
next = 0x102ef92c,
own_text = {
beg = 0x102ef944 <Address 0x102ef944 out of bounds>,
gpt = 271513900,
z = 1076840744,
gpt_byte = 0,
z_byte = 2315712,
gap_size = 271513924,
modiff = 271513924,
save_modiff = 271513900,
overlay_modiff = 271513900,
intervals = 0x0,
markers = 2315732
},
text = 0x102ef95c, *** the bad pointer it tripped over ***
pt = 271513924,
(gdb's register contents of that stack frame are inconsistent with
this, but I don't trust its stack-walking code.)
More gdb information follows. If you need the complete core file send
me email. I don't want to make it world-readable.
#0 0xef40820c in _libc_kill () from /usr/lib/libc.so.1
#1 0xdd2e4 in fatal_error_signal (sig=11) at emacs.c:246
#2 <signal handler called>
#3 0x5ff30 in redisplay_internal (preserve_echo_area=0) at xdisp.c:1438
#4 0x5e790 in redisplay () at xdisp.c:1014
#5 0xe3a50 in read_char (commandflag=1, nmaps=2, maps=0xeffff440,
prev_event=271513900, used_mouse_menu=0xeffff50c) at keyboard.c:1940
#6 0xef744 in read_key_sequence (keybuf=0xeffff638, bufsize=30,
prompt=271513900, dont_downcase_last=0, can_return_switch_frame=1,
fix_current_buffer=1) at keyboard.c:6962
#7 0xe1634 in command_loop_1 () at keyboard.c:1270
#8 0x191d54 in internal_condition_case (bfun=0xe11a8 <command_loop_1>,
handlers=271514380, hfun=0xe0bc8 <cmd_error>) at eval.c:1157
#9 0xe0fa8 in command_loop_2 () at keyboard.c:1091
#10 0x1916c0 in internal_catch (tag=271514356, func=0xe0f84 <command_loop_2>,
arg=271513900) at eval.c:932
#11 0xe0f40 in command_loop () at keyboard.c:1070
#12 0xe08c0 in recursive_edit_1 () at keyboard.c:820
#13 0xe0a68 in Frecursive_edit () at keyboard.c:868
#14 0xdede8 in main (argc=5, argv=0xeffffbb4, envp=0xeffffbcc) at emacs.c:1309
0x5ff10 <redisplay_internal+6008>: ld [ %l6 + 0x34 ], %o0
0x5ff14 <redisplay_internal+6012>: sethi %hi(0xffffc00), %o2
0x5ff18 <redisplay_internal+6016>: or %o2, 0x3ff, %o1 ! 0xfffffff
0x5ff1c <redisplay_internal+6020>: and %o0, %o1, %i2
0x5ff20 <redisplay_internal+6024>: sethi %hi(0x2b3000), %o0
0x5ff24 <redisplay_internal+6028>:
clr [ %o0 + 0x2dc ] ! 0x2b32dc <blank_end_of_window>
0x5ff28 <redisplay_internal+6032>: sethi %hi(0x2e8800), %o0
0x5ff2c <redisplay_internal+6036>: ld [ %i2 + 0x34 ], %o1
0x5ff30 <redisplay_internal+6040>: ld [ %o1 + 0x18 ], %o2
0x5ff34 <redisplay_internal+6044>: st %o2, [ %o0 + 0x140 ]
(%i2 is the variable `b', %pc = 0x5ff30, %o1 contains 0 which is
inconsistent with the value that should have been loaded by 0x5ff2c)
