Re: Segfault and font corruption in menu under Windows

[Ralf Angeli]

* Jason Rumney (2006-08-04) writes:

> Ralf Angeli wrote:
>> IIUC the next step is to look at why get_menu_item_info puts an
>> integer into dwItemData.
>>   
> It's a pointer.

Oh, I see.

> I can't reproduce the problem,

For convenience reasons I am checking this by loading a LaTeX file and
opening the "Preview" menu (which has three menu entries in a bold
font).  But at least on my system I can produce the same result with
the test case I provided.

> and the line numbers in your stack traces 
> are slightly out from what I have in a clean CVS checkout.

Here is the same procedure with a fresh checkout:

(gdb) b w32fns.c:3583
Breakpoint 3 at 0x1135c1a: file w32fns.c, line 3583.
(gdb) run
Starting program: c:/Programme/Emacs/bin/emacs.exe -geometry 80x40+0+0
(gdb) c
Continuing.
[Switching to thread 2836.0xb8]

Breakpoint 3, w32_wnd_proc (hwnd=0xc0384, msg=43, wParam=0, lParam=552399328)
    at w32fns.c:3583
3583                      old_font = SelectObject (hdc, menu_font);
(gdb) p title
$1 = 0x8609d0 "G"
(gdb) delete
Delete all breakpoints? (y or n) y
(gdb) watch *(char *)0x8609d0
Hardware watchpoint 4: *(char *) 8784336
(gdb) c
Continuing.
Hardware watchpoint 4: *(char *) 8784336

Old value = 71 'G'
New value = -18 '\356'
0x7c913105 in _libkernel32_a_iname ()
(gdb) bt
#0  0x7c913105 in _libkernel32_a_iname ()
#1  0x00840000 in ?? ()
#2  0x7c97e062 in _libkernel32_a_iname ()
#3  0x7c95a5d0 in _libkernel32_a_iname ()
#4  0x7c9368ad in _libkernel32_a_iname ()
#5  0x0112c345 in w32_free_submenu_strings (menu=0x4903ed) at w32menu.c:2509
#6  0x0112c31c in w32_free_submenu_strings (menu=0x1c039d) at w32menu.c:2514
#7  0x0112c38c in w32_free_menu_strings (hwnd=0xc0384) at w32menu.c:2532
#8  0x01135ead in w32_wnd_proc (hwnd=0xc0384, msg=275, wParam=3, lParam=0)
    at w32fns.c:3438
#9  0x77d18734 in _libkernel32_a_iname ()
#10 0x77d18816 in _libkernel32_a_iname ()
#11 0x77d1c63f in _libkernel32_a_iname ()
#12 0x77d1e905 in _libkernel32_a_iname ()
#13 0x6d18160b in _libwinspool_a_iname ()
#14 0x77d18734 in _libkernel32_a_iname ()
#15 0x77d18816 in _libkernel32_a_iname ()
#16 0x77d189cd in _libkernel32_a_iname ()
#17 0x77d196c7 in _libkernel32_a_iname ()
#18 0x01134941 in w32_msg_pump (msg_buf=0x113) at w32fns.c:2607
#19 0x01136a90 in w32_msg_worker (dw=0) at w32fns.c:2732
#20 0x7c80b50b in _libkernel32_a_iname ()
(gdb) frame 5
#5  0x0112c345 in w32_free_submenu_strings (menu=0x4903ed) at w32menu.c:2509
2509              local_free (info.dwItemData);
(gdb) p info.dwItemData
$2 = 8784336
(gdb) xtype
Lisp_Int
(gdb) xint
$3 = 1098042
(gdb)

-- 
Ralf