bug#39962: 27.0.90; Crash in Emacs 27.0.90

[Pieter van Oostrum]

Pip Cet <pipcet@gmail.com> writes:

> On Thu, Mar 19, 2020 at 1:23 PM Pieter van Oostrum
> <pieter-l@vanoostrum.org> wrote:
>> (gdb) p ((Lisp_Object) {(Lisp_Word) (0xd4269c0)})
>> $5 = XIL(0xd4269c0)
>> (gdb) xsymbol
>> $6 = (struct Lisp_Symbol *) 0x10de5f6d0
>> "<v>"
>
> Okay, so that symbol is valid.
>
> I think it's not a coincidence this crash happens during
> keyboard/mouse input. I'm attaching a patch which increases the window
> for the race condition that I think is happening. It slows down Emacs
> significantly, but it should still be almost usable.
>
> If you have the time, could you install the patch, start Emacs the
> same way you did to produce your original crash, and do similar things
> you did that time? If we're lucky, we'll be getting an assert failure
> rather than mere corruption.
>
With that patch (the latest 0001-more-debugging.patch) Emacs gets extremely 
slow (about 10 times slower that normal). Also, while it is processing, it 
becomes completely unresponsive: the cursor becomes an spinning beach ball, it 
won't even resize the windows, or react to C-g.

I got the old Marker corruption back.


insdel.c:295: Emacs fatal error: assertion failed: m->bytepos >= m->charpos && 
m->bytepos - m->charpos <= Z_BYTE - Z

Thread 3 hit Breakpoint 1, terminate_due_to_signal (sig=6, 
--Type <RET> for more, q to quit, c to continue without paging--
    backtrace_limit=2147483647) at emacs.c:371
371       signal (sig, SIG_DFL);
(gdb) bt
#0  terminate_due_to_signal (sig=6, backtrace_limit=2147483647) at emacs.c:371
#1  0x00000001002a4a1b in die (
    msg=0x10050ff60 "m->bytepos >= m->charpos && m->bytepos - m->charpos <= 
Z_BYTE - Z", file=0x10050fde3 "insdel.c", line=295) at alloc.c:7264
#2  0x0000000100233a24 in adjust_markers_for_insert (from=529592, 
    from_byte=529598, to=529594, to_byte=529600, before_markers=false)
    at insdel.c:294
#3  0x0000000100234400 in insert_from_string_1 (string=XIL(0x11542c474), 
    pos=0, pos_byte=0, nchars=2, nbytes=2, inherit=false, before_markers=false)
    at insdel.c:1060
#4  0x0000000100233d48 in insert_from_string (string=XIL(0x11542c474), pos=0, 
    pos_byte=0, length=2, length_byte=2, inherit=false) at insdel.c:967
#5  0x00000001002ec552 in general_insert_function (
    insert_func=0x100231fe0 <insert>, 
    insert_from_string_func=0x100233cb0 <insert_from_string>, inherit=false, 
    nargs=1, args=0x7ffeefbed388) at editfns.c:1334
#6  0x00000001002ec26b in Finsert (nargs=1, args=0x7ffeefbed388)
    at editfns.c:1370
#7  0x00000001003a7dd3 in exec_byte_code (bytestr=XIL(0x10d1be5f4), 
    vector=XIL(0x10dba5245), maxdepth=make_fixnum(6), args_template=XIL(0), 
    nargs=0, args=0x0) at bytecode.c:1075
#8  0x00000001003174b6 in funcall_lambda (fun=XIL(0x10dcbd9c5), nargs=1, 
    arg_vector=0x7ffeefbee520) at eval.c:3067
#9  0x0000000100314c7e in Ffuncall (nargs=2, args=0x7ffeefbee518)
    at eval.c:2796
#10 0x00000001003a525f in exec_byte_code (bytestr=XIL(0x10d415114), 
    vector=XIL(0x10dc9b965), maxdepth=make_fixnum(3), args_template=XIL(0), 
    nargs=0, args=0x0) at bytecode.c:633
#11 0x00000001003174b6 in funcall_lambda (fun=XIL(0x10dc9b9b5), nargs=0, 
    arg_vector=0x7ffeefbef4f0) at eval.c:3067
#12 0x0000000100314c7e in Ffuncall (nargs=1, args=0x7ffeefbef4e8)
    at eval.c:2796
#13 0x00000001003a525f in exec_byte_code (bytestr=XIL(0x10b8d2fc4), 
    vector=XIL(0x104c8b925), maxdepth=make_fixnum(4), args_template=XIL(0), 
    nargs=0, args=0x0) at bytecode.c:633
#14 0x00000001003174b6 in funcall_lambda (fun=XIL(0x104c8b9c5), nargs=1, 
    arg_vector=0x7ffeefbf04f0) at eval.c:3067
#15 0x0000000100314c7e in Ffuncall (nargs=2, args=0x7ffeefbf04e8)
    at eval.c:2796
#16 0x0000000100315d34 in call1 (fn=XIL(0x104c8b9c5), arg1=XIL(0x1e229380))
    at eval.c:2654
#17 0x000000010037aaed in mapatoms_1 (sym=XIL(0x1e229380), 
    function=XIL(0x104c8b9c5)) at lread.c:4380
#18 0x000000010037a98e in map_obarray (obarray=XIL(0x10e267435), 
    fn=0x10037aad0 <mapatoms_1>, arg=XIL(0x104c8b9c5)) at lread.c:4369
#19 0x000000010037aab1 in Fmapatoms (function=XIL(0x104c8b9c5), 
    obarray=XIL(0x10e267435)) at lread.c:4391
--Type <RET> for more, q to quit, c to continue without paging--
#20 0x000000010031664c in funcall_subr (subr=0x10055b588, numargs=2, 
    args=0x7ffeefbf0840) at eval.c:2869
#21 0x0000000100314c2e in Ffuncall (nargs=3, args=0x7ffeefbf0838)
    at eval.c:2794
#22 0x00000001003a525f in exec_byte_code (bytestr=XIL(0x10b8d2f84), 
    vector=XIL(0x104c8b9f5), maxdepth=make_fixnum(6), args_template=XIL(0), 
    nargs=0, args=0x0) at bytecode.c:633
#23 0x00000001003174b6 in funcall_lambda (fun=XIL(0x104c8bae5), nargs=0, 
    arg_vector=0x7ffeefbf1860) at eval.c:3067
#24 0x0000000100314c7e in Ffuncall (nargs=1, args=0x7ffeefbf1858)
    at eval.c:2796
#25 0x00000001003a525f in exec_byte_code (bytestr=XIL(0x10b8c51d4), 
    vector=XIL(0x104ca2dd5), maxdepth=make_fixnum(6), args_template=XIL(0), 
    nargs=0, args=0x0) at bytecode.c:633
#26 0x00000001003174b6 in funcall_lambda (fun=XIL(0x104ca3075), nargs=1, 
    arg_vector=0x7ffeefbf29e0) at eval.c:3067
#27 0x0000000100314c7e in Ffuncall (nargs=2, args=0x7ffeefbf29d8)
    at eval.c:2796
#28 0x00000001003a525f in exec_byte_code (bytestr=XIL(0x10b8dbb14), 
    vector=XIL(0x1057428e5), maxdepth=make_fixnum(3), args_template=XIL(0), 
    nargs=0, args=0x0) at bytecode.c:633
#29 0x00000001003174b6 in funcall_lambda (fun=XIL(0x105742965), nargs=1, 
    arg_vector=0x7ffeefbf3d40) at eval.c:3067
#30 0x0000000100314c7e in Ffuncall (nargs=2, args=0x7ffeefbf3d38)
    at eval.c:2796
#31 0x0000000100311165 in Fapply (nargs=3, args=0x7ffeefbf3d38) at eval.c:2377
#32 0x0000000100316506 in funcall_subr (subr=0x100559368, numargs=3, 
    args=0x7ffeefbf3d38) at eval.c:2847
#33 0x0000000100314c2e in Ffuncall (nargs=4, args=0x7ffeefbf3d30)
    at eval.c:2794
#34 0x00000001003a525f in exec_byte_code (bytestr=XIL(0x10612797c), 
    vector=XIL(0x105742635), maxdepth=make_fixnum(5), 
    args_template=make_fixnum(128), nargs=0, args=0x7ffeefbf4ce0)
    at bytecode.c:633
#35 0x0000000100316d15 in funcall_lambda (fun=XIL(0x105742665), nargs=0, 
    arg_vector=0x7ffeefbf4ce0) at eval.c:2989
#36 0x0000000100314c7e in Ffuncall (nargs=1, args=0x7ffeefbf4cd8)
    at eval.c:2796
#37 0x00000001003a525f in exec_byte_code (bytestr=XIL(0x10b8d46d4), 
    vector=XIL(0x10570e495), maxdepth=make_fixnum(7), args_template=XIL(0), 
    nargs=0, args=0x0) at bytecode.c:633
#38 0x00000001003174b6 in funcall_lambda (fun=XIL(0x10570e665), nargs=0, 
    arg_vector=0x7ffeefbf5dd0) at eval.c:3067
#39 0x0000000100314c7e in Ffuncall (nargs=1, args=0x7ffeefbf5dc8)
    at eval.c:2796
#40 0x00000001003a525f in exec_byte_code (bytestr=XIL(0x10d106884), 
    vector=XIL(0x104c9d3d5), maxdepth=make_fixnum(7), args_template=XIL(0), 
--Type <RET> for more, q to quit, c to continue without paging--
    nargs=0, args=0x0) at bytecode.c:633
#41 0x00000001003174b6 in funcall_lambda (fun=XIL(0x104c9d665), nargs=0, 
    arg_vector=0x7ffeefbf6fc0) at eval.c:3067
#42 0x0000000100314c7e in Ffuncall (nargs=1, args=0x7ffeefbf6fb8)
    at eval.c:2796
#43 0x00000001003a525f in exec_byte_code (bytestr=XIL(0x10450fb84), 
    vector=XIL(0x104c9fc35), maxdepth=make_fixnum(2), args_template=XIL(0), 
    nargs=0, args=0x0) at bytecode.c:633
#44 0x00000001003174b6 in funcall_lambda (fun=XIL(0x104c9fc95), nargs=1, 
    arg_vector=0x7ffeefbf8310) at eval.c:3067
#45 0x0000000100314c7e in Ffuncall (nargs=2, args=0x7ffeefbf8308)
    at eval.c:2796
#46 0x0000000100311165 in Fapply (nargs=3, args=0x7ffeefbf8308) at eval.c:2377
#47 0x0000000100316506 in funcall_subr (subr=0x100559368, numargs=3, 
    args=0x7ffeefbf8308) at eval.c:2847
#48 0x0000000100314c2e in Ffuncall (nargs=4, args=0x7ffeefbf8300)
    at eval.c:2794
#49 0x00000001003a525f in exec_byte_code (bytestr=XIL(0x10612797c), 
    vector=XIL(0x104c9f995), maxdepth=make_fixnum(5), 
    args_template=make_fixnum(128), nargs=0, args=0x7ffeefbf92b0)
    at bytecode.c:633
#50 0x0000000100316d15 in funcall_lambda (fun=XIL(0x104c9f9c5), nargs=0, 
    arg_vector=0x7ffeefbf92b0) at eval.c:2989
#51 0x0000000100314c7e in Ffuncall (nargs=1, args=0x7ffeefbf92a8)
    at eval.c:2796
#52 0x00000001003a525f in exec_byte_code (bytestr=XIL(0x10d1018c4), 
    vector=XIL(0x1056f6405), maxdepth=make_fixnum(9), args_template=XIL(0), 
    nargs=0, args=0x0) at bytecode.c:633
#53 0x00000001003174b6 in funcall_lambda (fun=XIL(0x104ca02a5), nargs=1, 
    arg_vector=0x7ffeefbfa4c0) at eval.c:3067
#54 0x0000000100314c7e in Ffuncall (nargs=2, args=0x7ffeefbfa4b8)
    at eval.c:2796
#55 0x00000001003a525f in exec_byte_code (bytestr=XIL(0x10d107ee4), 
    vector=XIL(0x104cb0ac5), maxdepth=make_fixnum(2), args_template=XIL(0), 
    nargs=0, args=0x0) at bytecode.c:633
#56 0x00000001003174b6 in funcall_lambda (fun=XIL(0x104cb0b25), nargs=2, 
    arg_vector=0x7ffeefbfb810) at eval.c:3067
#57 0x0000000100314c7e in Ffuncall (nargs=3, args=0x7ffeefbfb808)
    at eval.c:2796
#58 0x00000001003111f8 in Fapply (nargs=3, args=0x7ffeefbfb808) at eval.c:2381
#59 0x0000000100316506 in funcall_subr (subr=0x100559368, numargs=3, 
    args=0x7ffeefbfb808) at eval.c:2847
#60 0x0000000100314c2e in Ffuncall (nargs=4, args=0x7ffeefbfb800)
    at eval.c:2794
#61 0x00000001003a525f in exec_byte_code (bytestr=XIL(0x10612797c), 
    vector=XIL(0x104cb08b5), maxdepth=make_fixnum(5), 
    args_template=make_fixnum(128), nargs=1, args=0x7ffeefbfca50)
--Type <RET> for more, q to quit, c to continue without paging--
    at bytecode.c:633
#62 0x0000000100316d15 in funcall_lambda (fun=XIL(0x104cb08e5), nargs=1, 
    arg_vector=0x7ffeefbfca50) at eval.c:2989
#63 0x0000000100314c7e in Ffuncall (nargs=2, args=0x7ffeefbfca48)
    at eval.c:2796
#64 0x00000001002fda4a in Ffuncall_interactively (nargs=2, args=0x7ffeefbfca48)
    at callint.c:254
#65 0x0000000100316506 in funcall_subr (subr=0x100558d98, numargs=2, 
    args=0x7ffeefbfca48) at eval.c:2847
#66 0x0000000100314c2e in Ffuncall (nargs=3, args=0x7ffeefbfca40)
    at eval.c:2794
#67 0x00000001003012f4 in Fcall_interactively (function=XIL(0x4c867c0), 
    record_flag=XIL(0), keys=XIL(0x15a8034f5)) at callint.c:783
#68 0x0000000100316682 in funcall_subr (subr=0x100558d68, numargs=3, 
    args=0x7ffeefbfd9c0) at eval.c:2872
#69 0x0000000100314c2e in Ffuncall (nargs=4, args=0x7ffeefbfd9b8)
    at eval.c:2794
#70 0x00000001003a525f in exec_byte_code (bytestr=XIL(0x10623df8c), 
    vector=XIL(0x10623dadd), maxdepth=make_fixnum(13), 
    args_template=make_fixnum(1025), nargs=1, args=0x7ffeefbfea28)
    at bytecode.c:633
#71 0x0000000100316d15 in funcall_lambda (fun=XIL(0x10623daad), nargs=1, 
    arg_vector=0x7ffeefbfea20) at eval.c:2989
#72 0x0000000100314c7e in Ffuncall (nargs=2, args=0x7ffeefbfea18)
    at eval.c:2796
#73 0x0000000100315d34 in call1 (fn=XIL(0x3960), arg1=XIL(0x4c867c0))
    at eval.c:2654
#74 0x00000001001c74f0 in command_loop_1 () at keyboard.c:1463
#75 0x000000010030d63f in internal_condition_case (
    bfun=0x1001c6790 <command_loop_1>, handlers=XIL(0x90), 
    hfun=0x1001e9e50 <cmd_error>) at eval.c:1355
#76 0x00000001001e9d31 in command_loop_2 (ignore=XIL(0)) at keyboard.c:1091
#77 0x000000010030c778 in internal_catch (tag=XIL(0xc450), 
    func=0x1001e9d00 <command_loop_2>, arg=XIL(0)) at eval.c:1116
#78 0x00000001001c5805 in command_loop () at keyboard.c:1070
#79 0x00000001001c55d7 in recursive_edit_1 () at keyboard.c:714
#80 0x00000001001c5a86 in Frecursive_edit () at keyboard.c:786
#81 0x00000001001c25ee in main (argc=1, argv=0x7ffeefbff660) at emacs.c:2054
[New Thread 0x240f of process 5346]

Lisp Backtrace:
"vm-set-summary-pointer" (0xefbee520)
"vm-do-needed-summary-rebuild" (0xefbef4f0)
0x4c8b9c0 PVEC_COMPILED
"mapatoms" (0xefbf0840)
"vm-update-summary-and-mode-line" (0xefbf1860)
0x4ca3070 PVEC_COMPILED
--Type <RET> for more, q to quit, c to continue without paging--
"ad-Advice-vm-decode-mime-message" (0xefbf3d40)
"apply" (0xefbf3d38)
"vm-decode-mime-message" (0xefbf4ce0)
"vm-show-current-message" (0xefbf5dd0)
0x4c9d660 PVEC_COMPILED
"ad-Advice-vm-present-current-message" (0xefbf8310)
"apply" (0xefbf8308)
"vm-present-current-message" (0xefbf92b0)
0x4ca02a0 PVEC_COMPILED
"ad-Advice-vm-scroll-forward" (0xefbfb810)
"apply" (0xefbfb808)
"vm-scroll-forward" (0xefbfca50)
"funcall-interactively" (0xefbfca48)
"call-interactively" (0xefbfd9c0)
"command-execute" (0xefbfea20)
(gdb) 


-- 
Pieter van Oostrum
www: http://pieter.vanoostrum.org/
PGP key: [8DAE142BE17999C4]