bug#246: 23.0.60; Xft backend support is not working properly resulting in segfaults

[Ashish Shukla आशीष शुक्ल]

I'm running emacs-cvs package in Gentoo Linux (amd64).

;; following emacs lisp code triggers the segfault.

; set font to any Xft font
(set-face-font 'default "Liberation Mono-9")
(message (face-font 'default))
; above results in "-unknown-Liberation 
Mono-normal-normal-normal-*-12-*-*-*-m-0-*-*"
; ready to segfault
(set-face-font 'font-lock-keyword-face (face-font 'default))

abbe@chateau /usr/portage/distfiles/cvs-src/emacs $ gdb emacs 
GNU gdb 6.7.1
Copyright (C) 2007 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-pc-linux-gnu"...
Using host libthread_db library "/lib/libthread_db.so.1".
(gdb) run
Starting program: /usr/bin/emacs 
[Thread debugging using libthread_db enabled]
[New Thread 0x2b775d6c3fe0 (LWP 25658)]

Program received signal SIGABRT, Aborted.
[Switching to Thread 0x2b775d6c3fe0 (LWP 25658)]
0x00002b7758dff5a7 in kill () from /lib/libc.so.6
(gdb) bt full
#0  0x00002b7758dff5a7 in kill () from /lib/libc.so.6
No symbol table info available.
#1  0x00000000004cd4e5 in abort () at emacs.c:428
No locals.
#2  0x0000000000585ad7 in font_list_entities (frame=25658, spec=<value 
optimized out>) at font.c:2332
        f = (FRAME_PTR) 0xba1db0
        driver_list = (struct font_driver_list *) 0x1859910
        ftype = <value optimized out>
        family = <value optimized out>
        alternate_familes = <value optimized out>
        vec = <value optimized out>
        size = <value optimized out>
        need_filtering = <value optimized out>
        n_family = <value optimized out>
        i = <value optimized out>
#3  0x000000000058614d in font_find_for_lface (f=0xba1db0, attrs=0x1aaca20, 
spec=35022435, c=-1) at font.c:2767
        encoding = (struct charset *) 0x540cfa
        repertory = (struct charset *) 0x7fff56e60ba8
        frame = 12197300
        entities = <value optimized out>
        val = <value optimized out>
        props = {0, 36896704, 35006563, 0, 35006563}
        size = 0
        i = <value optimized out>
        result = <value optimized out>
#4  0x0000000000586579 in font_load_for_lface (f=0x643a, attrs=0x6, spec=25658) 
at font.c:2873
        entity = <value optimized out>
#5  0x000000000048b6dc in Finternal_set_lisp_face_attribute (face=30771825, 
attr=<value optimized out>, value=35022435, frame=10725873) at xfaces.c:3321
        font_object = <value optimized out>
        lface = 27970068
        old_value = 10771441
        prop_index = <value optimized out>
#6  0x000000000048a91e in Finternal_set_lisp_face_attribute (face=30771825, 
attr=10767409, value=35007011, frame=0) at xfaces.c:3030
        tail = <value optimized out>
        lface = <value optimized out>
        old_value = 10725777
        prop_index = <value optimized out>
#7  0x0000000000538283 in Ffuncall (nargs=<value optimized out>, args=<value 
optimized out>) at eval.c:3040
        fun = <value optimized out>
        original_fun = <value optimized out>
        funcar = <value optimized out>
        numargs = 4
        val = <value optimized out>
        backtrace = {next = 0x7fff56e60cd0, function = 0x7fff56e60ba0, args = 
0x7fff56e60ba8, nargs = 4, evalargs = 0 '\0', debug_on_exit = 0 '\0'}
        internal_args = (Lisp_Object *) 0x7fff56e60ba8
        i = <value optimized out>
#8  0x000000000056249c in Fbyte_code (bytestr=<value optimized out>, 
vector=21307969, maxdepth=63) at bytecode.c:678
        v1 = <value optimized out>
        v2 = <value optimized out>
        count = 15
---Type <return> to continue, or q <return> to quit---
        op = 25658
        vectorp = (Lisp_Object *) 0x83a390
        stack = {pc = 0x9a20b3 "\210)\nAA\211\022\204$", top = 0x7fff56e60bc0, 
bottom = 0x7fff56e60ba0, byte_string = 8627043, byte_string_start = 0x9a207f 
"\b\204\b", 
  constants = 8627076, next = 0x7fff56e60d70}
        top = <value optimized out>
        result = <value optimized out>
#9  0x0000000000537d2c in funcall_lambda (fun=8626924, nargs=4, 
arg_vector=0x7fff56e60d38) at eval.c:3217
        val = <value optimized out>
        syms_left = <value optimized out>
        next = <value optimized out>
        i = 4
        optional = 0
        rest = 1
#10 0x00000000005380db in Ffuncall (nargs=<value optimized out>, args=<value 
optimized out>) at eval.c:3087
        fun = 25658
        original_fun = 21307921
        funcar = <value optimized out>
        numargs = 4
        val = <value optimized out>
        backtrace = {next = 0x7fff56e60f20, function = 0x7fff56e60d30, args = 
0x7fff56e60d38, nargs = 4, evalargs = 0 '\0', debug_on_exit = 0 '\0'}
        internal_args = (Lisp_Object *) 0x7fff56e60d38
        i = <value optimized out>
#11 0x000000000056249c in Fbyte_code (bytestr=<value optimized out>, 
vector=11060673, maxdepth=40) at bytecode.c:678
        v1 = <value optimized out>
        v2 = <value optimized out>
        count = 12
        op = 25658
        vectorp = (Lisp_Object *) 0x83ac00
        stack = {pc = 0x9a1f5f "\207", top = 0x7fff56e60d50, bottom = 
0x7fff56e60d30, byte_string = 8629203, byte_string_start = 0x9a1f59 
"=fffd\b\t=fffd\n$\207", constants = 8629236, 
  next = 0x7fff56e61030}
        top = <value optimized out>
        result = <value optimized out>
#12 0x0000000000537d2c in funcall_lambda (fun=8629076, nargs=2, 
arg_vector=0x7fff56e60e50) at eval.c:3217
        val = <value optimized out>
        syms_left = <value optimized out>
        next = <value optimized out>
        i = 2
        optional = 1
        rest = 0
#13 0x0000000000537e8b in apply_lambda (fun=8629076, args=35007011, 
eval_flag=1) at eval.c:3141
        args_left = 10725777
        arg_vector = (Lisp_Object *) 0x643a
        i = 0
        tem = 35007011
#14 0x0000000000537580 in Feval (form=<value optimized out>) at eval.c:2403
        fun = 25658
        val = <value optimized out>
        original_fun = 21308353
        original_args = 37050037
        funcar = <value optimized out>
---Type <return> to continue, or q <return> to quit---
        backtrace = {next = 0x7fff56e60fa0, function = 0x7fff56e60f48, args = 
0x7fff56e60e50, nargs = 2, evalargs = 0 '\0', debug_on_exit = 0 '\0'}
#15 0x0000000000538238 in Ffuncall (nargs=<value optimized out>, args=<value 
optimized out>) at eval.c:3030
        fun = <value optimized out>
        original_fun = <value optimized out>
        funcar = <value optimized out>
        numargs = 1
        val = <value optimized out>
        backtrace = {next = 0x7fff56e61120, function = 0x7fff56e61008, args = 
0x7fff56e61010, nargs = 1, evalargs = 0 '\0', debug_on_exit = 0 '\0'}
        internal_args = (Lisp_Object *) 0x7fff56e61010
        i = 6
#16 0x000000000056249c in Fbyte_code (bytestr=<value optimized out>, vector=0, 
maxdepth=8) at bytecode.c:678
        v1 = <value optimized out>
        v2 = <value optimized out>
        count = 8
        op = 25658
        vectorp = (Lisp_Object *) 0x8ff8a0
        stack = {pc = 0x961ddf "!)\207", top = 0x7fff56e61010, bottom = 
0x7fff56e61000, byte_string = 9435251, byte_string_start = 0x961dd0 "\b\203\b", 
constants = 9435284, 
  next = 0x7fff56e611b0}
        top = <value optimized out>
        result = <value optimized out>
#17 0x0000000000537d2c in funcall_lambda (fun=9435180, nargs=1, 
arg_vector=0x7fff56e61188) at eval.c:3217
        val = <value optimized out>
        syms_left = <value optimized out>
        next = <value optimized out>
        i = 1
        optional = 0
        rest = 0
#18 0x00000000005380db in Ffuncall (nargs=<value optimized out>, args=<value 
optimized out>) at eval.c:3087
        fun = 25658
        original_fun = 30839761
        funcar = <value optimized out>
        numargs = 1
        val = <value optimized out>
        backtrace = {next = 0x7fff56e612a0, function = 0x7fff56e61180, args = 
0x7fff56e61188, nargs = 1, evalargs = 0 '\0', debug_on_exit = 0 '\0'}
        internal_args = (Lisp_Object *) 0x7fff56e61188
        i = <value optimized out>
#19 0x000000000056249c in Fbyte_code (bytestr=<value optimized out>, 
vector=30839809, maxdepth=8) at bytecode.c:678
        v1 = <value optimized out>
        v2 = <value optimized out>
        count = 6
        op = 25658
        vectorp = (Lisp_Object *) 0x8ffa90
        stack = {pc = 0x961d43 "\v)B\211\034A\n=\204\033", top = 
0x7fff56e61188, bottom = 0x7fff56e61180, byte_string = 9435747, 
byte_string_start = 0x961d36 "\b\204\b", 
  constants = 9435780, next = 0x0}
        top = <value optimized out>
        result = <value optimized out>
#20 0x0000000000537d2c in funcall_lambda (fun=9435668, nargs=1, 
arg_vector=0x7fff56e61358) at eval.c:3217
        val = <value optimized out>
        syms_left = <value optimized out>
        next = <value optimized out>
---Type <return> to continue, or q <return> to quit---
        i = 1
        optional = 0
        rest = 0
#21 0x00000000005380db in Ffuncall (nargs=<value optimized out>, args=<value 
optimized out>) at eval.c:3087
        fun = 25658
        original_fun = 20926721
        funcar = <value optimized out>
        numargs = 1
        val = <value optimized out>
        backtrace = {next = 0x7fff56e61500, function = 0x7fff56e61350, args = 
0x7fff56e61358, nargs = 1, evalargs = 0 '\0', debug_on_exit = 0 '\0'}
        internal_args = (Lisp_Object *) 0x7fff56e61358
        i = <value optimized out>
#22 0x00000000005354b5 in Fcall_interactively (function=20926721, 
record_flag=10725777, keys=10792804) at callint.c:857
        val = <value optimized out>
        args = (Lisp_Object *) 0x7fff56e61350
        visargs = (Lisp_Object *) 0x7fff56e61330
        specs = <value optimized out>
        filter_specs = 1
        teml = <value optimized out>
        up_event = 10725777
        enable = 10725777
        speccount = 3
        next_event = 2
        prefix_arg = 10725777
        string = <value optimized out>
        tem = <value optimized out>
        varies = (int *) 0x7fff56e61310
        i = 3
        j = 1
        foo = <value optimized out>
        prompt1 = '\0' <repeats 99 times>
        arg_from_tty = 0
        key_count = 2
        record_then_fail = 0
        save_this_command = 20926721
        save_last_command = 10782769
        save_this_original_command = 20926721
        save_real_this_command = 20926721
#23 0x0000000000538266 in Ffuncall (nargs=<value optimized out>, args=<value 
optimized out>) at eval.c:3036
        fun = <value optimized out>
        original_fun = <value optimized out>
        funcar = <value optimized out>
        numargs = 3
        val = <value optimized out>
        backtrace = {next = 0x0, function = 0x7fff56e61560, args = 
0x7fff56e61568, nargs = 3, evalargs = 0 '\0', debug_on_exit = 0 '\0'}
        internal_args = (Lisp_Object *) 0x7fff56e61568
        i = <value optimized out>
#24 0x000000000053847f in call3 (fn=<value optimized out>, arg1=<value 
optimized out>, arg2=25658, arg3=-1) at eval.c:2856
        ret_ungc_val = 0
        args = {10984657, 20926721, 10725777, 10725777}
---Type <return> to continue, or q <return> to quit---
#25 0x00000000004dfb2d in command_loop_1 () at keyboard.c:1910
        cmd = <value optimized out>
        lose = <value optimized out>
        nonundocount = 0
        keybuf = {192, 40, 35, 5700377148, 8708948, 8708944, 0, 0, 1, 
140734651309336, 140734651307696, 5469568, 2822930838, 140734651307856, 
140734651307880, 47791591992032, 
  0, 47791668466824, 47791589704888, 4233874, 47791592041760, 4214560, 
4294967296, 4294968214, 0, 140734651307640, 140734651307408, 0, 10725777, 
20929745}
        i = <value optimized out>
        prev_modiff = 488
        prev_buffer = (struct buffer *) 0xa446d0
        already_adjusted = 0
#26 0x0000000000536c04 in internal_condition_case (bfun=0x4df77a 
<command_loop_1>, handlers=10812977, hfun=0x4da138 <cmd_error>) at eval.c:1499
        val = <value optimized out>
        c = {tag = 10725777, val = 10725777, next = 0x7fff56e61850, gcpro = 
0x0, jmp = {{__jmpbuf = {11400592, 1811265834515693076, 11400592, 11400592, 1, 
140734651309336, 
        -1811497934966227436, 1811266543526739476}, __mask_was_saved = 0, 
__saved_mask = {__val = {5143533, 47791592014064, 47791589704888, 
47791592041760, 4294967295, 
          4294967296, 8176136, 11400592, 11400592, 1, 140734651309336, 0, 
47791506528129, 140733193388033, 0, 0}}}}, backlist = 0x0, handlerlist = 0x0, 
lisp_eval_depth = 0, 
  pdlcount = 2, poll_suppress_count = 1, interrupt_input_blocked = 0, 
byte_stack = 0x0}
        h = {handler = 10812977, var = 10725777, chosen_clause = 10725777, tag 
= 0x7fff56e616e0, next = 0x0}
#27 0x00000000004d949c in command_loop_2 () at keyboard.c:1367
        val = 0
#28 0x0000000000536cf9 in internal_catch (tag=<value optimized out>, 
func=0x4d9482 <command_loop_2>, arg=10725777) at eval.c:1235
        c = {tag = 10794273, val = 10725777, next = 0x0, gcpro = 0x0, jmp = 
{{__jmpbuf = {11400592, 1811265834515693076, 11400592, 11400592, 1, 
140734651309336, 
        -1811497935016559084, 1811266543496068628}, __mask_was_saved = 0, 
__saved_mask = {__val = {0, 0, 0, 0, 0, 0, 0, 0, 11119202, 11119200, 11125584, 
10766032, 11125585, 
          10725777, 5408525, 11125584}}}}, backlist = 0x0, handlerlist = 0x0, 
lisp_eval_depth = 0, pdlcount = 2, poll_suppress_count = 1, 
interrupt_input_blocked = 0, 
  byte_stack = 0x0}
#29 0x00000000004d9fab in command_loop () at keyboard.c:1346
No locals.
#30 0x00000000004da2e2 in recursive_edit_1 () at keyboard.c:955
        val = <value optimized out>
#31 0x00000000004da404 in Frecursive_edit () at keyboard.c:1017
        buffer = 10725777
#32 0x00000000004ce472 in main (argc=<value optimized out>, 
argv=0x7fff56e61e38) at emacs.c:1772
        displayname = 0x0
        count_before = <value optimized out>
        dummy = 47791506587648
        stack_bottom_variable = 0 '\0'
        do_initial_setlocale = 1
        skip_args = 0
        rlim = {rlim_cur = 8720000, rlim_max = 18446744073709551615}
        no_loadup = 0
        junk = 0x0
(gdb) xbacktrace
Undefined command: "xbacktrace".  Try "help".


In GNU Emacs 23.0.60.1 (x86_64-pc-linux-gnu, GTK+ Version 2.12.8)
 of 2008-05-14 on chateau
Windowing system distributor `The X.Org Foundation', version 11.0.10300000
configured using `configure  '--prefix=/usr' '--host=x86_64-pc-linux-gnu' 
'--mandir=/usr/share/man' '--infodir=/usr/share/info' '--datadir=/usr/share' 
'--sysconfdir=/etc' '--localstatedir=/var/lib' '--program-suffix=-emacs-23' 
'--infodir=/usr/share/info/emacs-23' '--without-carbon' '--with-sound' 
'--with-x' '--with-toolkit-scroll-bars' '--with-gif' '--with-jpeg' '--with-png' 
'--with-rsvg' '--with-tiff' '--with-xpm' '--enable-font-backend' 
'--with-freetype' '--with-xft' '--with-libotf' '--with-m17n-flt' 
'--with-x-toolkit=gtk' '--without-hesiod' '--without-kerberos' 
'--without-kerberos5' '--with-gpm' '--with-dbus' '--libdir=/usr/lib64' 
'--build=x86_64-pc-linux-gnu' 'build_alias=x86_64-pc-linux-gnu' 
'host_alias=x86_64-pc-linux-gnu' 'CFLAGS=-O2 -pipe -mtune=nocona -march=nocona 
-ggdb' 'LDFLAGS=-Wl,--hash-style,both''

Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: nil
  value of $LC_CTYPE: nil
  value of $LC_MESSAGES: nil
  value of $LC_MONETARY: nil
  value of $LC_NUMERIC: nil
  value of $LC_TIME: nil
  value of $LANG: C
  value of $XMODIFIERS: nil
  locale-coding-system: nil
  default-enable-multibyte-characters: t

Major mode: Group

Minor modes in effect:
  gnus-undo-mode: t
  jabber-activity-mode: t
  erc-track-mode: t
  erc-services-mode: t
  erc-networks-mode: t
  erc-ring-mode: t
  erc-netsplit-mode: t
  erc-menu-mode: t
  erc-match-mode: t
  erc-pcomplete-mode: t
  erc-button-mode: t
  erc-fill-mode: t
  erc-stamp-mode: t
  erc-autojoin-mode: t
  erc-smiley-mode: t
  erc-irccontrols-mode: t
  erc-noncommands-mode: t
  erc-readonly-mode: t
  display-time-mode: t
  server-mode: t
  show-paren-mode: t
  xterm-mouse-mode: t
  tooltip-mode: t
  mouse-wheel-mode: t
  menu-bar-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  global-auto-composition-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t
  column-number-mode: t
  line-number-mode: t
  transient-mark-mode: t

Recent input:
<menu> m y - s e t u p - f o <tab> <return> M-x e m 
a <tab> b u <tab> C-g M-x M-x g n u s <return> <help-echo> 
<help-echo> <help-echo> U n n m a i <tab> s e n <tab> 
<return> <down> <return> 5 0 <return> <C-end> <up> 
<up> <up> <up> <up> <up> <up> <up> <up> <up> <down> 
<down> <up> <return> <down> <help-echo> <help-echo> 
q M-x e m a <tab> b u <tab> C-g <help-echo> <help-echo> 
<help-echo> <help-echo> <help-echo> <help-echo> <help-echo> 
<help-echo> <help-echo> <help-echo> <help-echo> <help-echo> 
<help-echo> <help-echo> <help-echo> <help-echo> <help-echo> 
<help-echo> <help-echo> <help-echo> <help-echo> <help-echo> 
<help-echo> <help-echo> <help-echo> <help-echo> <help-echo> 
<help-echo> <menu-bar> <help-menu> <send-emacs-bug-report> 
C-g <help-echo> <help-echo> <help-echo> <help-echo> 
<help-echo> <help-echo> <menu-bar> <help-menu> <se
nd-emacs-bug-report>

Recent messages:
Checking new news...done
Retrieving newsgroup: nnmaildir:sent-mail...
Fetching headers for nnmaildir:sent-mail...done
Generating summary...done
No more unread articles
Mark set
byte-code: Wrong number of arguments: #[(target old new) "=c3  
#=87" [old new target replace-regexp-in-string] 4], 4
Quit
byte-code: Command attempted to use minibuffer while in minibuffer
Quit