bug#39962: 27.0.90; Crash in Emacs 27.0.90

[Pieter van Oostrum]

Eli Zaretskii <eliz@gnu.org> writes:

>
> Wait a minute... how come m->charpos is zero?  That should never
> happen, since buffer positions start from 1, and the value should be
> close to m->bytepos anyway.
>
> Can you show the full C backtrace?
>
(gdb) bt
#0  terminate_due_to_signal (sig=6, backtrace_limit=2147483647) at emacs.c:371
#1  0x00000001002a4abb in die (
    msg=0x10050ff57 "m->bytepos >= m->charpos && m->bytepos - m->charpos <= 
Z_BYTE - Z", file=0x10050fdda "insdel.c", line=295) at alloc.c:7246
#2  0x0000000100233af4 in adjust_markers_for_insert (from=36399, 
    from_byte=36399, to=36401, to_byte=36401, before_markers=false)
    at insdel.c:294
#3  0x00000001002344d0 in insert_from_string_1 (string=XIL(0x15b29a904), 
    pos=0, pos_byte=0, nchars=2, nbytes=2, inherit=false, before_markers=false)
    at insdel.c:1060
#4  0x0000000100233e18 in insert_from_string (string=XIL(0x15b29a904), pos=0, 
    pos_byte=0, length=2, length_byte=2, inherit=false) at insdel.c:967
#5  0x00000001002ec4c2 in general_insert_function (
    insert_func=0x1002320b0 <insert>, 
    insert_from_string_func=0x100233d80 <insert_from_string>, inherit=false, 
    nargs=1, args=0x7ffeefbf5ce8) at editfns.c:1334
#6  0x00000001002ec1db in Finsert (nargs=1, args=0x7ffeefbf5ce8)
    at editfns.c:1370
#7  0x00000001003a7d53 in exec_byte_code (bytestr=XIL(0x10d25eb84), 
    vector=XIL(0x10e0fc055), maxdepth=make_fixnum(6), args_template=XIL(0), 
    nargs=0, args=0x0) at bytecode.c:1075
#8  0x0000000100317436 in funcall_lambda (fun=XIL(0x10e0fde35), nargs=1, 
    arg_vector=0x7ffeefbf6e80) at eval.c:3067
#9  0x0000000100314bfe in Ffuncall (nargs=2, args=0x7ffeefbf6e78)
    at eval.c:2796
#10 0x00000001003a51df in exec_byte_code (bytestr=XIL(0x10d25ea24), 
    vector=XIL(0x10e0fb0a5), maxdepth=make_fixnum(3), args_template=XIL(0), 
    nargs=0, args=0x0) at bytecode.c:633
#11 0x0000000100317436 in funcall_lambda (fun=XIL(0x10e0fa1c5), nargs=0, 
    arg_vector=0x7ffeefbf7e50) at eval.c:3067
#12 0x0000000100314bfe in Ffuncall (nargs=1, args=0x7ffeefbf7e48)
    at eval.c:2796
#13 0x00000001003a51df in exec_byte_code (bytestr=XIL(0x10434b554), 
    vector=XIL(0x105c5b3c5), maxdepth=make_fixnum(4), args_template=XIL(0), 
    nargs=0, args=0x0) at bytecode.c:633
#14 0x0000000100317436 in funcall_lambda (fun=XIL(0x105c5b465), nargs=1, 
    arg_vector=0x7ffeefbf8e50) at eval.c:3067
#15 0x0000000100314bfe in Ffuncall (nargs=2, args=0x7ffeefbf8e48)
    at eval.c:2796
#16 0x0000000100315cb4 in call1 (fn=XIL(0x105c5b465), arg1=XIL(0xdbdceb0))
    at eval.c:2654
#17 0x000000010037aa6d in mapatoms_1 (sym=XIL(0xdbdceb0), 
    function=XIL(0x105c5b465)) at lread.c:4380
#18 0x000000010037a90e in map_obarray (obarray=XIL(0x10e182e95), 
    fn=0x10037aa50 <mapatoms_1>, arg=XIL(0x105c5b465)) at lread.c:4369
#19 0x000000010037aa31 in Fmapatoms (function=XIL(0x105c5b465), 
    obarray=XIL(0x10e182e95)) at lread.c:4391
--Type <RET> for more, q to quit, c to continue without paging--
#20 0x00000001003165cc in funcall_subr (subr=0x10055b5a8, numargs=2, 
    args=0x7ffeefbf91a0) at eval.c:2869
#21 0x0000000100314bae in Ffuncall (nargs=3, args=0x7ffeefbf9198)
    at eval.c:2794
#22 0x00000001003a51df in exec_byte_code (bytestr=XIL(0x10434b514), 
    vector=XIL(0x105c5b495), maxdepth=make_fixnum(6), args_template=XIL(0), 
    nargs=0, args=0x0) at bytecode.c:633
#23 0x0000000100317436 in funcall_lambda (fun=XIL(0x105c5b585), nargs=0, 
    arg_vector=0x7ffeefbfa1c0) at eval.c:3067
#24 0x0000000100314bfe in Ffuncall (nargs=1, args=0x7ffeefbfa1b8)
    at eval.c:2796
#25 0x00000001003a51df in exec_byte_code (bytestr=XIL(0x10d25f184), 
    vector=XIL(0x10d9f2205), maxdepth=make_fixnum(13), args_template=XIL(0), 
    nargs=0, args=0x0) at bytecode.c:633
#26 0x0000000100317436 in funcall_lambda (fun=XIL(0x10e0899b5), nargs=9, 
    arg_vector=0x7ffeefbfb610) at eval.c:3067
#27 0x0000000100314bfe in Ffuncall (nargs=10, args=0x7ffeefbfb608)
    at eval.c:2796
#28 0x00000001003a51df in exec_byte_code (bytestr=XIL(0x10d25e434), 
    vector=XIL(0x10d9f26d5), maxdepth=make_fixnum(11), args_template=XIL(0), 
    nargs=0, args=0x0) at bytecode.c:633
#29 0x0000000100317436 in funcall_lambda (fun=XIL(0x10e0ae1a5), nargs=2, 
    arg_vector=0x7ffeefbfc960) at eval.c:3067
#30 0x0000000100314bfe in Ffuncall (nargs=3, args=0x7ffeefbfc958)
    at eval.c:2796
#31 0x00000001002fd9ca in Ffuncall_interactively (nargs=3, args=0x7ffeefbfc958)
    at callint.c:254
#32 0x0000000100316486 in funcall_subr (subr=0x100558db8, numargs=3, 
    args=0x7ffeefbfc958) at eval.c:2847
#33 0x0000000100314bae in Ffuncall (nargs=4, args=0x7ffeefbfc950)
    at eval.c:2794
#34 0x0000000100314966 in Fapply (nargs=3, args=0x7ffeefbfd6f0) at eval.c:2424
#35 0x00000001002fdf30 in Fcall_interactively (function=XIL(0x4a62fc0), 
    record_flag=XIL(0), keys=XIL(0x160edff25)) at callint.c:342
#36 0x0000000100316602 in funcall_subr (subr=0x100558d88, numargs=3, 
    args=0x7ffeefbfd9c0) at eval.c:2872
#37 0x0000000100314bae in Ffuncall (nargs=4, args=0x7ffeefbfd9b8)
    at eval.c:2794
#38 0x00000001003a51df in exec_byte_code (bytestr=XIL(0x106a3df8c), 
    vector=XIL(0x106a3dadd), maxdepth=make_fixnum(13), 
    args_template=make_fixnum(1025), nargs=1, args=0x7ffeefbfea28)
    at bytecode.c:633
#39 0x0000000100316c95 in funcall_lambda (fun=XIL(0x106a3daad), nargs=1, 
    arg_vector=0x7ffeefbfea20) at eval.c:2989
#40 0x0000000100314bfe in Ffuncall (nargs=2, args=0x7ffeefbfea18)
    at eval.c:2796
#41 0x0000000100315cb4 in call1 (fn=XIL(0x3960), arg1=XIL(0x4a62fc0))
--Type <RET> for more, q to quit, c to continue without paging--
    at eval.c:2654
#42 0x00000001001c7640 in command_loop_1 () at keyboard.c:1463
#43 0x000000010030d5bf in internal_condition_case (
    bfun=0x1001c68e0 <command_loop_1>, handlers=XIL(0x90), 
    hfun=0x1001e9fa0 <cmd_error>) at eval.c:1355
#44 0x00000001001e9e81 in command_loop_2 (ignore=XIL(0)) at keyboard.c:1091
#45 0x000000010030c6f8 in internal_catch (tag=XIL(0xc450), 
    func=0x1001e9e50 <command_loop_2>, arg=XIL(0)) at eval.c:1116
#46 0x00000001001c5955 in command_loop () at keyboard.c:1070
#47 0x00000001001c5727 in recursive_edit_1 () at keyboard.c:714
#48 0x00000001001c5bd6 in Frecursive_edit () at keyboard.c:786
#49 0x00000001001c273e in main (argc=1, argv=0x7ffeefbff660) at emacs.c:2054
[New Thread 0x2753 of process 52920]
[New Thread 0x2a7b of process 52920]

Lisp Backtrace:
Cannot access memory at address 0xcfeb5c0
(gdb) 

-- 
Pieter van Oostrum
www: http://pieter.vanoostrum.org/
PGP key: [8DAE142BE17999C4]