Crash of CVS emacs on MacOSX

[Piet van Oostrum]

I built emacs from cvs on March 15 (the last entry in src/Changelog is:
2004-03-14  Steven Tamm <address@hidden>

        * Makefile.in (XMENU_OBJ): Do not include xmenu.o if
        HAVE_CARBON is defined.
), and I get crashes with gnus.

The latest one was when I did 'g' in *Groups* and it just seemed to hang.
So after fetching tea I hit C-g a couple of times and got the following
info from gdb. I hope this gives some clue. I had similar crashes with
slightly older versions.

gdb -cd ~/Projects/cvs/emacs/src /Applications/Emacs.app/Contents/MacOS/Emacs 
GNU gdb 5.3-20030128 (Apple version gdb-309) (Thu Dec  4 15:41:30 GMT 2003)
Copyright 2003 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "powerpc-apple-darwin".
Reading symbols for shared libraries ..... done
DISPLAY = localhost
TERM = xterm-color
Breakpoint 1 at 0x9009ec18
(gdb) run
Starting program: /Applications/Emacs.app/Contents/MacOS/Emacs -geometry 
80x40+0+0
Reading symbols for shared libraries 
+.................................................. done
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free
*** malloc[12804]: Deallocation of a pointer not malloced: 0x3578b30; This 
could be a double free(), or free() called with the middle of an allocated 
block; Try setting environment variable MallocHelp to see tools to help debug
*** malloc[12804]: error for object 0x3546dc0: Double free

Program received signal EXC_BAD_ACCESS, Could not access memory.
0x00000000 in ?? ()
(gdb) bt
#0  0x00000000 in ?? ()
Cannot access memory at address 0x0
Cannot access memory at address 0x0
#1  0x92896f64 in _CallMenuDef(MenuData*, short, Rect*, Point, short*) ()
#2  0x928460ac in SendMenuInit(MenuData*) ()
#3  0x92802320 in MenuData::Initialize(OpaqueEventRef*) ()
#4  0x927f484c in 
HIObject::HandleClassHIObjectEvent(OpaqueEventHandlerCallRef*, OpaqueEventRef*, 
void*) ()
#5  0x927f32a8 in HIObject::EventHook(OpaqueEventHandlerCallRef*, 
OpaqueEventRef*, void*) ()
#6  0x927d2384 in DispatchEventToHandlers ()
#7  0x927d25f8 in SendEventToEventTargetInternal ()
#8  0x927d6a60 in SendEventToEventTargetWithOptions ()
#9  0x927eec1c in HIObject::Create(__CFString const*, OpaqueEventRef*, 
HIObject**) ()
#10 0x927f352c in HIObjectCreate ()
#11 0x92818ea0 in CreateMenuData(MenuDefSpec const*, short, unsigned char 
const*, unsigned long, unsigned char, MenuData**) ()
#12 0x928c2408 in _NewMenu(short, unsigned char const*) ()
#13 0x928c823c in NewMenu ()
#14 0x001401ec in fill_menubar (wv=0x26a8c90) at macmenu.c:2319
#15 0x0013f58c in set_frame_menubar (f=0xa4a4b0, first_time=55678720, 
deep_p=-1073752272) at macmenu.c:1523
#16 0x00025cc0 in update_menu_bar (f=0xa4a4b0, save_match_data=3506104) at 
xdisp.c:8184
#17 0x0002599c in prepare_menu_bars () at xdisp.c:8063
#18 0x000282bc in redisplay_internal (preserve_echo_area=8) at xdisp.c:9729
#19 0x0007d1c4 in read_char (commandflag=1, nmaps=5, maps=0xbfffed30, 
prev_event=595592192, used_mouse_menu=0xbfffee44) at keyboard.c:2472
#20 0x000857d8 in read_key_sequence (keybuf=0x0, bufsize=3495968, prompt=0, 
dont_downcase_last=67468, can_return_switch_frame=493055853, 
fix_current_buffer=778137712) at keyboard.c:8770
#21 0x0007afa0 in command_loop_1 () at keyboard.c:1476
#22 0x000df8e8 in internal_condition_case (bfun=0x7aae4 <command_loop_1>, 
handlers=595637240, hfun=0x7a4e4 <cmd_error>) at eval.c:1333
#23 0x0007a90c in command_loop_2 () at keyboard.c:1264
#24 0x000df350 in internal_catch (tag=8, func=0x7a8cc <command_loop_2>, 
arg=595592192) at eval.c:1094
#25 0x0007a864 in command_loop () at keyboard.c:1243
#26 0x0007a280 in recursive_edit_1 () at keyboard.c:959
#27 0x0007a408 in Frecursive_edit () at keyboard.c:1015
#28 0x00078f30 in main (argc=3506104, argv=0x355598) at emacs.c:1683
(gdb) 


-- 
Piet van Oostrum <address@hidden>
URL: http://www.cs.uu.nl/~piet [PGP]
Private email: address@hidden