bug#3659: FW: 23.0.95; crash on set-frame-font

[Glenn Morris]

Kenichi Handa wrote:

> % emacs --xrm 'Emacs*FontBackend: x'

I cannot find a font that makes set-frame-font crash. However,
S-Mouse-1 'Increase buffer text size' about 5 times still causes a
crash (a separate issue?).

Program received signal SIGSEGV, Segmentation fault.
0xfcf31c60 in strcmp () from /lib/libc.so.1
(gdb) bt
#0  0xfcf31c60 in strcmp () from /lib/libc.so.1
#1  0xfd997600 in ComparePixmapDatas () from /usr/dt/lib/libXm.so.4
#2  0xfda8c8f0 in _XmRemoveHashEntry () from /usr/dt/lib/libXm.so.4
#3  0xfd9f4160 in XmDestroyPixmap () from /usr/dt/lib/libXm.so.4
#4  0xfd9cf6d4 in _XmArrowPixmapCacheDelete () from /usr/dt/lib/libXm.so.4
#5  0xfd9ce964 in Destroy () from /usr/dt/lib/libXm.so.4
#6  0xfd874390 in Phase2Destroy () from /usr/openwin/lib/libXt.so.4
#7  0xfd873a78 in Recursive () from /usr/openwin/lib/libXt.so.4
#8  0xfd873a78 in Recursive () from /usr/openwin/lib/libXt.so.4
#9  0xfd873ac8 in Recursive () from /usr/openwin/lib/libXt.so.4
#10 0xfd87408c in XtPhase2Destroy () from /usr/openwin/lib/libXt.so.4
#11 0xfd873c84 in _XtDoPhase2Destroy () from /usr/openwin/lib/libXt.so.4
#12 0xfd873a00 in XtDestroyWidget () from /usr/openwin/lib/libXt.so.4
#13 0x00368a30 in xm_destroy_instance (instance=0x965210) at lwlib-Xm.c:1747
#14 0x00362694 in destroy_one_instance (instance=0x965210)
    at lwlib/lwlib.c:1045
#15 0x00362788 in lw_destroy_all_widgets (id=65541)
    at lwlib/lwlib.c:1090
#16 0x000c9b68 in pop_down_menu (arg=-1600996040) at xmenu.c:1853
#17 0x0029c868 in unbind_to (count=10, value=542261264) at eval.c:3400
#18 0x000c9f58 in create_and_show_popup_menu (f=0x671c80, first_wv=0x994bc0, 
    x=500, y=422, for_click=1) at xmenu.c:1931
#19 0x000cac9c in xmenu_show (f=0x671c80, x=244, y=211, for_click=1, 
    keymaps=1, title=1615002964, error=0xffbf85e0) at xmenu.c:2152
#20 0x000c7678 in Fx_popup_menu (position=-1601031168, menu=-1596750128)
    at xmenu.c:505
#21 0x0029b330 in Ffuncall (nargs=3, args=0xffbf8720) at eval.c:3048
#22 0x0030adc4 in Fbyte_code (bytestr=1615002564, vector=-2143093804, 
    maxdepth=9) at bytecode.c:678
#23 0x0029bedc in funcall_lambda (fun=-2143093860, nargs=1, 
    arg_vector=0xffbf8a14) at eval.c:3232
#24 0x0029b5c0 in Ffuncall (nargs=2, args=0xffbf8a10) at eval.c:3091
#25 0x0029375c in Fcall_interactively (function=546805920, 
    record_flag=542261264, keys=-2142035960) at callint.c:868
#26 0x0029b374 in Ffuncall (nargs=4, args=0xffbf8ca8) at eval.c:3051
#27 0x0029aaf0 in call3 (fn=542446264, arg1=546805920, arg2=542261264, 
    arg3=542261264) at eval.c:2871
#28 0x001d31d8 in Fcommand_execute (cmd=546805920, record_flag=542261264, 
    keys=542261264, special=542261264) at keyboard.c:10449
#29 0x001bb474 in command_loop_1 () at keyboard.c:1901
#30 0x002973cc in internal_condition_case (bfun=0x1b8c78 <command_loop_1>, 
    handlers=542323144, hfun=0x1b8114 <cmd_error>) at eval.c:1512
#31 0x001b8768 in command_loop_2 () at keyboard.c:1359
#32 0x00296b5c in internal_catch (tag=542319272, 
    func=0x1b8740 <command_loop_2>, arg=542261264) at eval.c:1248
#33 0x001b86e8 in command_loop () at keyboard.c:1338
#34 0x001b7964 in recursive_edit_1 () at keyboard.c:953
#35 0x001b7c40 in Frecursive_edit () at keyboard.c:1015
#36 0x001b547c in main (argc=4, argv=0xffbf943c) at emacs.c:1852

Lisp Backtrace:
"x-popup-menu" (0xffbf8724)
"mouse-appearance-menu" (0xffbf8a14)
"call-interactively" (0xffbf8cac)




> % emacs --xrm 'Emacs*FontBackend: xft'

emacs -Q --xrm 'Emacs*FontBackend: xft' \
  --font '-Adobe-Courier-normal-normal-normal-*-14-*-*-*-m-90-iso10646-1'

(I have to specify a font else Emacs complains about my normal
misc-fixed not being defined.)

crashes on startup with:

Program received signal SIGSEGV, Segmentation fault.
0xfd3c8b0c in XftLockFace () from /usr/openwin/lib/libXft.so.2
(gdb) bt
#0  0xfd3c8b0c in XftLockFace () from /usr/openwin/lib/libXft.so.2
#1  0x0035a728 in xftfont_open (f=0x66b810, entity=-2134315232, pixel_size=14)
    at xftfont.c:290
#2  0x002bf44c in font_open_entity (f=0x66b810, entity=-2134315232, 
    pixel_size=14) at font.c:2926
#3  0x002c1c8c in font_open_for_lface (f=0x66b810, entity=-2134315232, 
    attrs=0xffbf7408, spec=-2133418072) at font.c:3429
#4  0x002c1d50 in font_load_for_lface (f=0x66b810, attrs=0xffbf7408, 
    spec=-2133418072) at font.c:3454
#5  0x0015f494 in realize_x_face (cache=0xc902b8, attrs=0xffbf7408)
    at xfaces.c:5892
#6  0x0015eff8 in realize_face (cache=0xc902b8, attrs=0xffbf7408, 
    former_face_id=-1) at xfaces.c:5781
#7  0x0015bde0 in lookup_face (f=0x66b810, attr=0xffbf7408) at xfaces.c:4723
#8  0x00160fa0 in face_at_string_position (w=0x676910, string=1616937248, 
    pos=1, bufpos=0, region_beg=-1, region_end=-1, endptr=0xffbf7548, 
    base_face_id=MODE_LINE_FACE_ID, mouse_p=0) at xfaces.c:6532
#9  0x000ac10c in display_string (string=0x5269f0 "*scratch*", 
    lisp_string=542261264, face_string=1616937248, face_string_pos=1, start=0, 
    it=0xffbf7900, field_width=12, precision=-8, max_x=0, multibyte=0)
    at xdisp.c:18928
#10 0x000a8788 in display_mode_element (it=0xffbf7900, depth=4, field_width=0, 
    precision=-8, elt=1616937248, props=542261264, risky=0) at xdisp.c:17678
#11 0x000a8e40 in display_mode_element (it=0xffbf7900, depth=3, field_width=0, 
    precision=-8, elt=-1604295440, props=542261264, risky=0) at xdisp.c:17850
#12 0x000a8e40 in display_mode_element (it=0xffbf7900, depth=1, field_width=0, 
    precision=0, elt=-1604293320, props=542261264, risky=0) at xdisp.c:17850
#13 0x000a7784 in display_mode_line (w=0x676910, face_id=MODE_LINE_FACE_ID, 
    format=-1604293400) at xdisp.c:17362
#14 0x000a74a0 in display_mode_lines (w=0x676910) at xdisp.c:17307
#15 0x000a718c in redisplay_mode_lines (window=-2140706544, force=0)
    at xdisp.c:17265
#16 0x0008c1dc in echo_area_display (update_frame_p=1) at xdisp.c:9209
#17 0x00088ef0 in message3_nolog (m=1616680176, nbytes=65, multibyte=0)
    at xdisp.c:8083
#18 0x00088a8c in message3 (m=1616680176, nbytes=65, multibyte=0)
    at xdisp.c:8018
#19 0x0028b294 in Fmessage (nargs=2, args=0xffbf8244) at editfns.c:3389
#20 0x0029b13c in Ffuncall (nargs=3, args=0xffbf8240) at eval.c:3026
#21 0x0030adc4 in Fbyte_code (bytestr=1614711308, vector=-2143385060, 
    maxdepth=3) at bytecode.c:678
#22 0x0029bedc in funcall_lambda (fun=-2143385100, nargs=0, 
    arg_vector=0xffbf8504) at eval.c:3232
#23 0x0029b5c0 in Ffuncall (nargs=1, args=0xffbf8500) at eval.c:3091
#24 0x0030adc4 in Fbyte_code (bytestr=1614712136, vector=-2143384232, 
    maxdepth=10) at bytecode.c:678
#25 0x0029bedc in funcall_lambda (fun=-2143384280, nargs=1, 
    arg_vector=0xffbf87dc) at eval.c:3232
#26 0x0029b5c0 in Ffuncall (nargs=2, args=0xffbf87d8) at eval.c:3091
#27 0x0030adc4 in Fbyte_code (bytestr=1614698544, vector=-2143397824, 
    maxdepth=7) at bytecode.c:678
#28 0x0029bedc in funcall_lambda (fun=-2143397864, nargs=0, 
    arg_vector=0xffbf8aac) at eval.c:3232
#29 0x0029b5c0 in Ffuncall (nargs=1, args=0xffbf8aa8) at eval.c:3091
#30 0x0030adc4 in Fbyte_code (bytestr=1614695204, vector=-2143401164, 
    maxdepth=6) at bytecode.c:678
#31 0x0029bedc in funcall_lambda (fun=-2143401204, nargs=0, 
    arg_vector=0xffbf8cb8) at eval.c:3232
#32 0x0029b934 in apply_lambda (fun=-2143401204, args=542261264, eval_flag=1)
    at eval.c:3156
#33 0x00299ba0 in Feval (form=-1604600808) at eval.c:2418
#34 0x001b87bc in top_level_2 () at keyboard.c:1368
#35 0x002973cc in internal_condition_case (bfun=0x1b87a4 <top_level_2>, 
    handlers=542323144, hfun=0x1b8114 <cmd_error>) at eval.c:1512
#36 0x001b8818 in top_level_1 () at keyboard.c:1376
#37 0x00296b5c in internal_catch (tag=542319272, func=0x1b87cc <top_level_1>, 
    arg=542261264) at eval.c:1248
#38 0x001b86c0 in command_loop () at keyboard.c:1331
#39 0x001b7964 in recursive_edit_1 () at keyboard.c:953
#40 0x001b7c40 in Frecursive_edit () at keyboard.c:1015
#41 0x001b547c in main (argc=6, argv=0xffbf93ec) at emacs.c:1852

Lisp Backtrace:
"message" (0xffbf8244)
"display-startup-echo-area-message" (0xffbf8504)
"command-line-1" (0xffbf87dc)
"command-line" (0xffbf8aac)
"normal-top-level" (0xffbf8cb8)