23.0.50; Emacs seg fault

[Leo]

Please write in English if possible, because the Emacs maintainers
usually do not have translators to read other languages for them.

Your bug report will be posted to the address@hidden mailing list.

Please describe exactly what actions triggered the bug
and the precise symptoms of the bug:

To reproduce:
    1. emacs -nw -q in screen
    2. M-x server-start
    3. switch to Linux console (Ctrl + Alt + F1)
    4. emacsclient -t

Emacs segfault.

Starting program: /home/emacs/src/emacs -nw -q
[Thread debugging using libthread_db enabled]
[New Thread -1208805664 (LWP 1919)]
[Switching to Thread -1208805664 (LWP 1919)]
[Detaching after fork from child process 1922. (Try `set detach-on-fork off'.)]

Breakpoint 1, abort () at emacs.c:431
431       kill (getpid (), SIGABRT);
#0  abort () at emacs.c:431
#1  0x08194676 in wait_reading_process_output (time_limit=30, microsecs=0, 
read_kbd=-1, do_display=1, wait_for_cell=137551137, 
    wait_proc=0x0, just_wait_proc=0) at process.c:4880
#2  0x08055dc0 in sit_for (timeout=240, reading=1, do_display=1) at 
dispnew.c:6610
#3  0x081061eb in read_char (commandflag=1, nmaps=2, maps=0xbf9a98c0, 
prev_event=137551137, used_mouse_menu=0xbf9a9958, end_time=0x0)
    at keyboard.c:2990
#4  0x08108023 in read_key_sequence (keybuf=0xbf9a9a04, bufsize=30, 
prompt=137551137, dont_downcase_last=0, can_return_switch_frame=1, 
    fix_current_buffer=1) at keyboard.c:9382
#5  0x08109ba3 in command_loop_1 () at keyboard.c:1689
#6  0x08160e9b in internal_condition_case (bfun=0x8109a10 <command_loop_1>, 
handlers=137617737, hfun=0x8104320 <cmd_error>) at eval.c:1494
#7  0x08103793 in command_loop_2 () at keyboard.c:1403
#8  0x08160f5a in internal_catch (tag=137600017, func=0x8103770 
<command_loop_2>, arg=137551137) at eval.c:1229
#9  0x08104187 in command_loop () at keyboard.c:1382
#10 0x081044ea in recursive_edit_1 () at keyboard.c:991
#11 0x08104621 in Frecursive_edit () at keyboard.c:1053
#12 0x080f9e1b in main (argc=3, argv=0xbf9aa104) at emacs.c:1778
#0  abort () at emacs.c:431
No locals.
#1  0x08194676 in wait_reading_process_output (time_limit=30, microsecs=0, 
read_kbd=-1, do_display=1, wait_for_cell=137551137, 
    wait_proc=0x0, just_wait_proc=0) at process.c:4880
        p = (struct Lisp_Process *) 0x0
        timeout_reduced_for_timers = 0
        channel = -1
        nfds = -1
        Available = {
  fds_bits = {6016, 0 <repeats 31 times>}
}
        Connecting = {
  fds_bits = {0 <repeats 32 times>}
}
        check_connect = 0
        check_delay = 0
        no_avail = 0
        xerrno = 9
        proc = 147454996
        timeout = {
  tv_sec = 29, 
  tv_usec = 999998
}
        end_time = {
  tv_sec = 1191099870, 
  tv_usec = 304570
}
        wait_channel = -1
        got_some_input = 0
#2  0x08055dc0 in sit_for (timeout=240, reading=1, do_display=1) at 
dispnew.c:6610
        sec = 30
        usec = 0
#3  0x081061eb in read_char (commandflag=1, nmaps=2, maps=0xbf9a98c0, 
prev_event=137551137, used_mouse_menu=0xbf9a9958, end_time=0x0)
    at keyboard.c:2990
        tem0 = <value optimized out>
        delay_level = 30
        buffer_size = <value optimized out>
        c = 137551137
        local_getcjmp = {{
    __jmpbuf = {146492704, 0, 0, -1080387464, -164052838, -474759691}, 
    __mask_was_saved = 0, 
    __saved_mask = {
      __val = {3214579568, 147461064, 8, 3214579628, 147461068, 3214579848, 
135641385, 137586513, 8, 147461068, 135497457, 3214579648, 
        1148267489, 3214579648, 1148267637, 8192, 0, 0, 0, 1536, 137583004, 
3214579752, 135944360, 137583000, 0, 0, 0, 0, 0, 0, 192, 1536}
    }
  }}
        save_jump = {{
    __jmpbuf = {0, 0, 0, 0, 0, 0}, 
    __mask_was_saved = 0, 
    __saved_mask = {
      __val = {0 <repeats 32 times>}
    }
  }}
        key_already_recorded = 0
        tem = <value optimized out>
        save = 0
        previous_echo_area_message = 137551137
        also_record = 137551137
        reread = 0
        polling_stopped_here = <value optimized out>
        orig_kboard = (struct kboard *) 0x85853b8
#4  0x08108023 in read_key_sequence (keybuf=0xbf9a9a04, bufsize=30, 
prompt=137551137, dont_downcase_last=0, can_return_switch_frame=1, 
    fix_current_buffer=1) at keyboard.c:9382
        interrupted_kboard = (KBOARD *) 0x85853b8
        key = 137583004
        used_mouse_menu = 0
        echo_local_start = 0
        last_real_key_start = 0
        keys_local_start = 0
        local_first_binding = 0
        from_string = 137551137
        count = 2
        t = 0
        echo_start = 0
        keys_start = 0
        nmaps = 2
        nmaps_allocated = 2
        defs = (Lisp_Object * volatile) 0xbf9a98a0
        submaps = (Lisp_Object * volatile) 0xbf9a98c0
        orig_local_map = 139431389
        orig_keymap = 137551137
        localized_local_map = 0
        first_binding = 0
        first_unbound = 31
        mock_input = 0
        fkey = {
  parent = 137792381, 
  map = 137792381, 
  start = 0, 
  end = 0
}
        keytran = {
  parent = 139585893, 
  map = 139585893, 
  start = 0, 
  end = 0
}
        delayed_switch_frame = 137551137
        original_uppercase = 0
        original_uppercase_position = -1
        starting_buffer = (struct buffer *) 0x8335998
        fake_prefixed_keys = 137551137
#5  0x08109ba3 in command_loop_1 () at keyboard.c:1689
        cmd = <value optimized out>
        lose = <value optimized out>
        nonundocount = 0
        keybuf = {216, 960, 1, 0, 1, -1080387008, 1149472756, 139825424, 
-1080387008, 1148500410, -1080386856, 0, 1149472756, 1151599692, 
  139825424, -1080386976, 1, -1080386800, 1148085840, 0, -1080386968, 
-1080387120, 0, 276955136, 137551137, 138163281, 0, 137632360, 
  137632344, -1080386936}
        i = <value optimized out>
        prev_modiff = 40
        prev_buffer = (struct buffer *) 0x8ca13c8
        already_adjusted = 0
#6  0x08160e9b in internal_condition_case (bfun=0x8109a10 <command_loop_1>, 
handlers=137617737, hfun=0x8104320 <cmd_error>) at eval.c:1494
        val = <value optimized out>
        c = {
  tag = 137551137, 
  val = 137551137, 
  next = 0xbf9a9bb0, 
  gcpro = 0x0, 
  jmp = {{
      __jmpbuf = {0, 137632360, 137632344, -1080386696, -165592934, 
-284628491}, 
      __mask_was_saved = 0, 
      __saved_mask = {
        __val = {3214580456, 135580631, 3214580692, 139999528, 15, 15, 
3214580692, 4294967295, 3214580504, 135581280, 3214580692, 15, 
          3214580492, 3214580488, 0, 134537141, 15, 15, 3214580692, 137793733, 
3214580536, 135581342, 3214580692, 15, 2, 16718, 1148684992, 
          800, 3214580952, 135649499, 3214580692, 139912459}
      }
    }}, 
  backlist = 0x0, 
  handlerlist = 0x0, 
  lisp_eval_depth = 0, 
  pdlcount = 2, 
  poll_suppress_count = 1, 
  interrupt_input_blocked = 0, 
  byte_stack = 0x0
}
        h = {
  handler = 137617737, 
  var = 137551137, 
  chosen_clause = 0, 
  tag = 0xbf9a9a9c, 
  next = 0x0
}
#7  0x08103793 in command_loop_2 () at keyboard.c:1403
        val = 9
#8  0x08160f5a in internal_catch (tag=137600017, func=0x8103770 
<command_loop_2>, arg=137551137) at eval.c:1229
        c = {
  tag = 137600017, 
  val = 137551137, 
  next = 0x0, 
  gcpro = 0x0, 
  jmp = {{
      __jmpbuf = {0, 137632360, 137632344, -1080386440, -165470054, 
-284492811}, 
      __mask_was_saved = 0, 
      __saved_mask = {
        __val = {775239725, 3629926, 0 <repeats 12 times>, 540091136, 
542133587, 137735794, 137735792, 137739008, 3214580824, 135606748, 
          137739009, 137735794, 137551137, 137583000, 137551161, 2, 0, 
137739008, 137739009, 137551137, 3214580888}
      }
    }}, 
  backlist = 0x0, 
  handlerlist = 0x0, 
  lisp_eval_depth = 0, 
  pdlcount = 2, 
  poll_suppress_count = 1, 
  interrupt_input_blocked = 0, 
  byte_stack = 0x0
}
#9  0x08104187 in command_loop () at keyboard.c:1382
No locals.
#10 0x081044ea in recursive_edit_1 () at keyboard.c:991
        val = <value optimized out>
#11 0x08104621 in Frecursive_edit () at keyboard.c:1053
        buffer = 137551137
#12 0x080f9e1b in main (argc=3, argv=0xbf9aa104) at emacs.c:1778
        tz = 0x0
        dummy = -1080385416
        stack_bottom_variable = 8 '\b'
        do_initial_setlocale = 1
        skip_args = 1
        rlim = {
  rlim_cur = 10485760, 
  rlim_max = 18446744073709551615
}
        no_loadup = 0
        junk = 0x0
The program is running.  Exit anyway? (y or n)

If Emacs crashed, and you have the Emacs process in the gdb debugger,
please include the output from the following gdb commands:
    `bt full' and `xbacktrace'.
If you would like to further debug the crash, please read the file
/usr/local/packages/emacs/share/emacs/23.0.50/etc/DEBUG for instructions.


In GNU Emacs 23.0.50.4 (i686-pc-linux-gnu, GTK+ Version 2.10.14)
 of 2007-09-29 on Fedora
configured using `configure  '--prefix=/usr/local/packages/emacs' 
'--enable-locallisppath=/usr/local/share/emacs/site-lisp' 
'--without-toolkit-scroll-bars''

Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: nil
  value of $LC_CTYPE: nil
  value of $LC_MESSAGES: nil
  value of $LC_MONETARY: nil
  value of $LC_NUMERIC: nil
  value of $LC_TIME: nil
  value of $LANG: en_GB.UTF-8
  locale-coding-system: utf-8
  default-enable-multibyte-characters: t

Major mode: Group

Minor modes in effect:
  gnus-topic-mode: t
  gnus-undo-mode: t
  dired-omit-mode: t
  recentf-mode: t
  icomplete-mode: t
  show-paren-mode: t
  savehist-mode: t
  xterm-mouse-mode: t
  delete-selection-mode: t
  global-auto-revert-mode: t
  display-time-mode: t
  minibuffer-indicate-depth-mode: t
  partial-completion-mode: t
  which-function-mode: t
  shell-dirtrack-mode: t
  mouse-wheel-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  unify-8859-on-encoding-mode: t
  utf-translate-cjk-mode: t
  auto-compression-mode: t
  column-number-mode: t
  line-number-mode: t
  transient-mark-mode: t

Recent input:
C-x 1 ESC [ > 0 ; 2 2 7 ; 0 c ESC O B ESC O A ESC O 
B ESC O B ESC O A ESC O B C-x g n ESC O B ESC O B ESC 
O B ESC O B ESC O B ESC O B ESC O B ESC O B ESC O B 
ESC O B ESC O B ESC O B ESC O B ESC O B ESC O B ESC 
O B ESC O B ESC O B ESC O B ESC O B ESC O B ESC O B 
ESC O B ESC O B ESC O B ESC O B ESC O B ESC O A RET 
ESC O B RET SPC SPC q n RET RET SPC q n n p ESC x r 
e p o r TAB RET

Recent messages:
Loading gnus-bcklg...done
Loading gnus-async...done
Loading ansi-color...done
Loading gnus-cite...done
Parsing BBDB... (frobnicating...done)
Retrieving newsgroup: gmane.emacs.gnus.general...
Fetching headers for gmane.emacs.gnus.general...done
Scoring...done
Generating summary...done
Loading emacsbug...done