crash in GC

[Sam Steingold]

GNU Emacs 21.3.50.21 (i686-pc-linux-gnu, X toolkit, Xaw3d scroll bars)
 of 2002-12-15 on loiso.podval.org

(gdb) run --
Starting program: /usr/local/src/emacs/src/emacs --

Program received signal SIGSEGV, Segmentation fault.
mem_find (start=0xa6fef5c) at alloc.c:2751
2751      while (start < p->start || start >= p->end)
(gdb) p start
$1 = (void *) 0xa6fef5c
(gdb) p p
$2 = (struct mem_node *) 0x0
(gdb) where
#0  mem_find (start=0xa6fef5c) at alloc.c:2751
#1  0x0811d144 in mark_maybe_object (obj=1517285212) at alloc.c:3336
#2  0x0811afd9 in mark_memory (start=0xbfffd240, end=0xbffff3dc)
    at alloc.c:3545
#3  0x0811b02c in mark_stack () at alloc.c:3781
#4  0x0811b557 in Fgarbage_collect () at alloc.c:4152
#5  0x0812f314 in Ffuncall (nargs=3, args=0xbfffd3d0) at eval.c:2681
#6  0x0812eb0e in Fapply (nargs=2, args=0xbfffd460) at eval.c:2248
#7  0x0812eefd in apply1 (fn=412461620, arg=1494465156) at eval.c:2504
#8  0x0815d478 in read_process_output_call (fun_and_args=1494465132)
    at process.c:4293
#9  0x0812d810 in internal_condition_case_1 (
    bfun=0x815d460 <read_process_output_call>, arg=1494465132, 
    handlers=405471332, hfun=0x815d47c <read_process_output_error_handler>)
    at eval.c:1392
#10 0x0815d6f9 in read_process_output (proc=1259168120, channel=1259168120)
    at process.c:4496
#11 0x0815ccbe in wait_reading_process_input (time_limit=-1, microsecs=0, 
    read_kbd=0, do_display=0) at process.c:4134
#12 0x0815c0ff in Faccept_process_output (process=1259168120, timeout=16, 
    timeout_msecs=0) at process.c:3415
#13 0x0812f22e in Ffuncall (nargs=3, args=0xbfffdbf0) at eval.c:2741
#14 0x08156d54 in Fbyte_code (bytestr=412458708, vector=2, 
    maxdepth=-1073750944) at bytecode.c:709
#15 0x0812f51f in funcall_lambda (fun=1217666352, nargs=2, 
    arg_vector=0xbfffdd74) at eval.c:2928
#16 0x0812f107 in Ffuncall (nargs=3, args=0xbfffdd70) at eval.c:2798
#17 0x08156d54 in Fbyte_code (bytestr=405582564, vector=2, 
    maxdepth=-1073750672) at bytecode.c:709
#18 0x0812f51f in funcall_lambda (fun=1217117720, nargs=1, 
    arg_vector=0xbfffde84) at eval.c:2928
#19 0x0812f107 in Ffuncall (nargs=2, args=0xbfffde80) at eval.c:2798
#20 0x08156d54 in Fbyte_code (bytestr=411191172, vector=1, 
    maxdepth=-1073750400) at bytecode.c:709
#21 0x0812f51f in funcall_lambda (fun=1217447328, nargs=2, 
    arg_vector=0xbfffdfa4) at eval.c:2928
#22 0x0812f107 in Ffuncall (nargs=3, args=0xbfffdfa0) at eval.c:2798
#23 0x08156d54 in Fbyte_code (bytestr=406274076, vector=2, 
    maxdepth=-1073750112) at bytecode.c:709
#24 0x0812f51f in funcall_lambda (fun=1217583280, nargs=2, 
    arg_vector=0xbfffe0b4) at eval.c:2928
#25 0x0812f107 in Ffuncall (nargs=3, args=0xbfffe0b0) at eval.c:2798
#26 0x08156d54 in Fbyte_code (bytestr=406274076, vector=2, 
    maxdepth=-1073749840) at bytecode.c:709
#27 0x0812f51f in funcall_lambda (fun=1217290864, nargs=2, 
    arg_vector=0xbfffe1d4) at eval.c:2928
#28 0x0812f107 in Ffuncall (nargs=3, args=0xbfffe1d0) at eval.c:2798
#29 0x08156d54 in Fbyte_code (bytestr=405875452, vector=2, 
    maxdepth=-1073749552) at bytecode.c:709
#30 0x0812f51f in funcall_lambda (fun=1217301688, nargs=2, 
    arg_vector=0xbfffe2f4) at eval.c:2928
#31 0x0812f107 in Ffuncall (nargs=3, args=0xbfffe2f0) at eval.c:2798
---Type <return> to continue, or q <return> to quit---
#32 0x08156d54 in Fbyte_code (bytestr=410750900, vector=2, 
    maxdepth=-1073749264) at bytecode.c:709
#33 0x0812f51f in funcall_lambda (fun=1216588808, nargs=2, 
    arg_vector=0xbfffe404) at eval.c:2928
#34 0x0812f107 in Ffuncall (nargs=3, args=0xbfffe400) at eval.c:2798
#35 0x08156d54 in Fbyte_code (bytestr=405579572, vector=2, 
    maxdepth=-1073748992) at bytecode.c:709
#36 0x0812f51f in funcall_lambda (fun=1216608640, nargs=2, 
    arg_vector=0xbfffe524) at eval.c:2928
#37 0x0812f107 in Ffuncall (nargs=3, args=0xbfffe520) at eval.c:2798
#38 0x08156d54 in Fbyte_code (bytestr=405579572, vector=2, 
    maxdepth=-1073748704) at bytecode.c:709
#39 0x0812f51f in funcall_lambda (fun=1216183264, nargs=1, 
    arg_vector=0xbfffe644) at eval.c:2928
#40 0x0812f107 in Ffuncall (nargs=2, args=0xbfffe640) at eval.c:2798
#41 0x08156d54 in Fbyte_code (bytestr=408621940, vector=1, 
    maxdepth=-1073748416) at bytecode.c:709
#42 0x0812f51f in funcall_lambda (fun=1216172928, nargs=3, 
    arg_vector=0xbfffe764) at eval.c:2928
#43 0x0812f107 in Ffuncall (nargs=4, args=0xbfffe760) at eval.c:2798
#44 0x08156d54 in Fbyte_code (bytestr=411108948, vector=3, 
    maxdepth=-1073748128) at bytecode.c:709
#45 0x0812e87a in Feval (form=136774776) at eval.c:2096
#46 0x0812c3b1 in Fprogn (args=0) at eval.c:424
#47 0x0812fcb7 in unbind_to (count=15, value=405471332) at eval.c:3097
#48 0x08156da6 in Fbyte_code (bytestr=411108948, vector=3, 
    maxdepth=-1073747696) at bytecode.c:730
#49 0x0812f51f in funcall_lambda (fun=1216709400, nargs=3, 
    arg_vector=0xbfffea24) at eval.c:2928
#50 0x0812f107 in Ffuncall (nargs=4, args=0xbfffea20) at eval.c:2798
#51 0x08156d54 in Fbyte_code (bytestr=411108924, vector=3, 
    maxdepth=-1073747424) at bytecode.c:709
#52 0x0812f51f in funcall_lambda (fun=1216424088, nargs=3, 
    arg_vector=0xbfffeb34) at eval.c:2928
#53 0x0812f107 in Ffuncall (nargs=4, args=0xbfffeb30) at eval.c:2798
#54 0x08156d54 in Fbyte_code (bytestr=411108924, vector=3, 
    maxdepth=-1073747152) at bytecode.c:709
#55 0x0812f51f in funcall_lambda (fun=1216707888, nargs=2, 
    arg_vector=0xbfffec44) at eval.c:2928
#56 0x0812f107 in Ffuncall (nargs=3, args=0xbfffec40) at eval.c:2798
#57 0x08156d54 in Fbyte_code (bytestr=411108924, vector=2, 
    maxdepth=-1073746880) at bytecode.c:709
#58 0x0812f51f in funcall_lambda (fun=1216423448, nargs=0, 
    arg_vector=0xbfffed54) at eval.c:2928
#59 0x0812f107 in Ffuncall (nargs=1, args=0xbfffed50) at eval.c:2798
#60 0x08156d54 in Fbyte_code (bytestr=408565300, vector=0, 
    maxdepth=-1073746608) at bytecode.c:709
#61 0x0812f51f in funcall_lambda (fun=1214571896, nargs=1, 
    arg_vector=0xbfffee94) at eval.c:2928
#62 0x0812f107 in Ffuncall (nargs=2, args=0xbfffee90) at eval.c:2798
#63 0x0812af51 in Fcall_interactively (function=405471332, 
    record_flag=405471332, keys=1225264840) at callint.c:819
---Type <return> to continue, or q <return> to quit---
#64 0x080e147a in Fcommand_execute (cmd=409258084, record_flag=405471332, 
    keys=405471332, special=405471332) at keyboard.c:9536
#65 0x080d6d8a in command_loop_1 () at keyboard.c:1690
#66 0x0812d71e in internal_condition_case (bfun=0x80d6a60 <command_loop_1>, 
    handlers=405567940, hfun=0x80d665c <cmd_error>) at eval.c:1352
#67 0x080d6946 in command_loop_2 () at keyboard.c:1274
#68 0x0812d2d9 in internal_catch (tag=0, func=0x80d6928 <command_loop_2>, 
    arg=405471332) at eval.c:1112
#69 0x080d68fc in command_loop () at keyboard.c:1253
#70 0x080d643b in recursive_edit_1 () at keyboard.c:969
#71 0x080d6548 in Frecursive_edit () at keyboard.c:1025
#72 0x080d4ea3 in main (argc=2, argv=0xbffff654) at emacs.c:1647
#73 0x420158d4 in __libc_start_main () from /lib/i686/libc.so.6
(gdb) up
#1  0x0811d144 in mark_maybe_object (obj=1517285212) at alloc.c:3336
3336      struct mem_node *m = mem_find (po);
(gdb) p po
$3 = (void *) 0xa6fef5c
(gdb) p *po
Attempt to dereference a generic pointer.
(gdb) down
#0  mem_find (start=0xa6fef5c) at alloc.c:2751
2751      while (start < p->start || start >= p->end)
(gdb) list
2746      /* Make the search always successful to speed up the loop below.  */
2747      mem_z.start = start;
2748      mem_z.end = (char *) start + 1;
2749
2750      p = mem_root;
2751      while (start < p->start || start >= p->end)
2752        p = start < p->start ? p->left : p->right;
2753      return p;
2754    }
2755
(gdb) p mem_root
$4 = (struct mem_node *) 0x843c8e0
(gdb) p *mem_root
$5 = {
  left = 0x83c0968, 
  right = 0x8c33c58, 
  parent = 0x0, 
  start = 0x847eb18, 
  end = 0x847ef14, 
  color = MEM_BLACK, 
  type = MEM_TYPE_CONS
}
(gdb) p p
$6 = (struct mem_node *) 0x0
(gdb) p *mem_root->lift
There is no member named lift.
(gdb) p *mem_root->left
$7 = {
  left = 0x83ad420, 
  right = 0x83d6bd8, 
  parent = 0x843c8e0, 
  start = 0x83c0948, 
  end = 0x83c0964, 
  color = MEM_BLACK, 
  type = MEM_TYPE_VECTOR
}
(gdb) p *mem_root->left->right
$8 = {
  left = 0x83cbaa0, 
  right = 0x83e0d50, 
  parent = 0x83c0968, 
  start = 0x83d6bb8, 
  end = 0x83d6bd4, 
  color = MEM_BLACK, 
  type = MEM_TYPE_VECTOR
}
(gdb) p *mem_root->left->left
$9 = {
  left = 0x83a4658, 
  right = 0x83b73a0, 
  parent = 0x83c0968, 
  start = 0x83ad400, 
  end = 0x83ad41c, 
  color = MEM_BLACK, 
  type = MEM_TYPE_VECTOR
}
(gdb) p *mem_root->right->right
$10 = {
  left = 0x8cdceb8, 
  right = 0x8e7b320, 
  parent = 0x8c33c58, 
  start = 0x8d9ab00, 
  end = 0x8d9aef4, 
  color = MEM_BLACK, 
  type = MEM_TYPE_SYMBOL
}
(gdb) p *mem_root->right->left
$11 = {
  left = 0x8639d88, 
  right = 0x8bea0c0, 
  parent = 0x8c33c58, 
  start = 0x88af258, 
  end = 0x88af274, 
  color = MEM_BLACK, 
  type = MEM_TYPE_VECTOR
}


-- 
Sam Steingold (http://www.podval.org/~sds) running RedHat8 GNU/Linux
<http://www.camera.org> <http://www.iris.org.il> <http://www.memri.org/>
<http://www.mideasttruth.com/> <http://www.palestine-central.com/links.html>
Warning! Dates in calendar are closer than they appear!