bug#276: 23.0.60; crash after C-x 5 1

[Eric Hanchrow]

Please write in English if possible, because the Emacs maintainers
usually do not have translators to read other languages for them.

Your bug report will be posted to the emacs-pretest-bug@gnu.org mailing list.

Please describe exactly what actions triggered the bug
and the precise symptoms of the bug:

I had started emacs in console mode, created one or two X frames with
M-x make-frame-on-display, and then did C-x 5 1 from the console frame.

SIGINT is used by the debugger.
Are you sure you want to change it? (y or n) [answered Y; input not from 
terminal]
DISPLAY = localhost:10.0
TERM = screen
Breakpoint 1 at 0x8110376: file emacs.c, line 430.
Breakpoint 2 at 0x812a2f9: file sysdep.c, line 1319.
Starting program: /usr/local/src/nother-emacs/src/emacs -nw
[Thread debugging using libthread_db enabled]
[New Thread 0xb704c720 (LWP 17228)]
[Switching to Thread 0xb704c720 (LWP 17228)]

Program received signal SIGTSTP, Stopped (user).
0xb7f14410 in __kernel_vsyscall ()
Continuing.

Program received signal SIGSEGV, Segmentation fault.
0x081c1e30 in font_clear_cache (f=0xd3663e8, cache=<value optimized out>, 
driver=0x8355860)
    at font.c:2249
2249                  if (EQ (driver->type, AREF (entity, FONT_TYPE_INDEX)))
#0  0x081c1e30 in font_clear_cache (f=0xd3663e8, cache=<value optimized out>, 
    driver=0x8355860) at font.c:2249
        entity = 0
        tail = <value optimized out>
        elt = <value optimized out>
#1  0x081c4c43 in font_update_drivers (f=0xd3663e8, new_drivers=137751833) at 
font.c:2204
        active_drivers = 137751833
        list = (struct font_driver_list *) 0xaeeaca8
#2  0x0806315e in Fdelete_frame (frame=221668332, force=137751833) at 
frame.c:1465
        f = (struct frame *) 0xd3663e8
        sf = (struct frame *) 0x837e880
        kb = <value optimized out>
#3  0x0817abfd in Ffuncall (nargs=2, args=0xbfbe68e0) at eval.c:3035
        fun = <value optimized out>
        original_fun = <value optimized out>
        funcar = <value optimized out>
        numargs = 1
        val = <value optimized out>
        backtrace = {
  next = 0xbfbe69e4, 
  function = 0xbfbe68e0, 
  args = 0xbfbe68e4, 
  nargs = 1, 
  evalargs = 0 '\0', 
  debug_on_exit = 0 '\0'
}
        internal_args = (Lisp_Object *) 0xbfbe6860
        i = <value optimized out>
#4  0x081a4c7c in Fbyte_code (bytestr=136719507, vector=136719524, 
    maxdepth=<value optimized out>) at bytecode.c:679
        op = 0
        vectorp = (Lisp_Object *) 0x8262ca8
        stack = {
  pc = 0x82c1a2b "\210\vA\211\023\204\036", 
  top = 0xbfbe68e4, 
  bottom = 0xbfbe68e0, 
  byte_string = 136719507, 
  byte_string_start = 0x82c19fe "\b\204\a", 
  constants = 136719524, 
  next = 0x0
}
        top = (Lisp_Object *) 0xbfbe68e0
        result = <value optimized out>
#5  0x0817a544 in funcall_lambda (fun=136719460, nargs=0, arg_vector=0xbfbe6a24)
    at eval.c:3219
        val = <value optimized out>
        syms_left = <value optimized out>
        next = <value optimized out>
        i = 0
        optional = 1
        rest = 0
#6  0x0817a98b in Ffuncall (nargs=1, args=0xbfbe6a20) at eval.c:3089
        fun = 136719460
        original_fun = 148140369
        funcar = <value optimized out>
        numargs = 0
        val = <value optimized out>
        backtrace = {
  next = 0xbfbe6b84, 
  function = 0xbfbe6a20, 
  args = 0xbfbe6a24, 
  nargs = 0, 
  evalargs = 0 '\0', 
  debug_on_exit = 0 '\0'
}
        internal_args = (Lisp_Object *) 0xbfbe6a24
        i = <value optimized out>
#7  0x0817c389 in apply1 (fn=148140369, arg=137751833) at eval.c:2773
        ret_ungc_val = 137996249
#8  0x0817696f in Fcall_interactively (function=148140369, 
record_flag=137751833, 
    keys=137790220) at callint.c:391
        input = <value optimized out>
        args = <value optimized out>
        visargs = <value optimized out>
        specs = 137751833
        filter_specs = <value optimized out>
        teml = <value optimized out>
        up_event = <value optimized out>
        enable = 137751833
        next_event = <value optimized out>
        prefix_arg = 137751833
        string = <value optimized out>
        tem = <value optimized out>
        varies = <value optimized out>
        i = <value optimized out>
        j = <value optimized out>
        foo = <value optimized out>
        prompt1 = '\0' <repeats 45 times>, " ", '\0' <repeats 53 times>
        arg_from_tty = <value optimized out>
        key_count = 3
        record_then_fail = <value optimized out>
        save_this_command = 148140369
        save_last_command = 137993153
        save_this_original_command = 148140369
        save_real_this_command = 148140369
#9  0x0817abe4 in Ffuncall (nargs=4, args=0xbfbe6bc0) at eval.c:3038
        fun = <value optimized out>
        original_fun = <value optimized out>
        funcar = <value optimized out>
        numargs = 3
        val = <value optimized out>
        backtrace = {
  next = 0x0, 
  function = 0xbfbe6bc0, 
  args = 0xbfbe6bc4, 
  nargs = 3, 
  evalargs = 0 '\0', 
  debug_on_exit = 0 '\0'
}
        internal_args = (Lisp_Object *) 0xbfbe6bc4
        i = <value optimized out>
#10 0x0817ad39 in call3 (fn=137914577, arg1=148140369, arg2=137751833, 
arg3=137751833)
    at eval.c:2862
        ret_ungc_val = 137996249
#11 0x0812161e in command_loop_1 () at keyboard.c:1912
        cmd = <value optimized out>
        lose = <value optimized out>
        nonundocount = 0
        keybuf = {192, 424, 392, 197232533, 137751881, -1078039498, 137751833, 
0, 
  137751833, -1078039432, 135381749, 197232533, -1078039498, 0, 0, 0, 0, 0, 0, 
-1078039468, 
  -1078039632, 0, -65536, 137751833, 142929961, -16121856, 0, 138262592, 
138262576, 
  -16121856}
        i = <value optimized out>
        prev_modiff = 92199
        prev_buffer = (struct buffer *) 0x91ace40
        already_adjusted = 0
#12 0x08179460 in internal_condition_case (bfun=0x81212c0 <command_loop_1>, 
    handlers=137794977, hfun=0x811c240 <cmd_error>) at eval.c:1501
        val = <value optimized out>
        c = {
  tag = 137751833, 
  val = 137751833, 
  next = 0xbfbe6da0, 
  gcpro = 0x0, 
  jmp = {{
      __jmpbuf = {0, 138262592, 138262576, -1078039192, 1759051905, 992494574}, 
      __mask_was_saved = 0, 
      __saved_mask = {
        __val = {3075300124, 3216900098, 3086103129, 134542728, 3078044220, 
3086155764, 
          3216927680, 3070620892, 3216927732, 3086082137, 148212528, 
3216927668, 
          3076607988, 148212528, 3086140860, 3216927680, 3216927936, 
3216928032, 
          3216928320, 4294967295, 3216928168, 135436771, 3216928320, 
3216928032, 128, 0, 0, 
          0, 0, 0, 0, 0}
      }
    }}, 
  backlist = 0x0, 
  handlerlist = 0x0, 
  lisp_eval_depth = 0, 
  pdlcount = 2, 
  poll_suppress_count = 1, 
  interrupt_input_blocked = 0, 
  byte_stack = 0x0
}
        h = {
  handler = 137794977, 
  var = 137751833, 
  chosen_clause = 137751881, 
  tag = 0xbfbe6c8c, 
  next = 0x0
}
#13 0x0811b653 in command_loop_2 () at keyboard.c:1369
        val = 137996249
#14 0x0817953a in internal_catch (tag=137790953, func=0x811b630 
<command_loop_2>, 
    arg=137751833) at eval.c:1237
        c = {
  tag = 137790953, 
  val = 137751833, 
  next = 0x0, 
  gcpro = 0x0, 
  jmp = {{
      __jmpbuf = {0, 138262592, 138262576, -1078038936, 1759191169, 992631790}, 
      __mask_was_saved = 0, 
      __saved_mask = {
        __val = {0, 0, 0, 0, 0, 0, 0, 3075693969, 0, 0, 0, 0, 0, 0, 0, 
146835808, 
          3076485877, 0, 3076612496, 0, 137977970, 137977968, 137981208, 
3216928344, 
          135704021, 137981209, 137977970, 137751833, 137777680, 0, 0, 
137751857}
      }
    }}, 
  backlist = 0x0, 
  handlerlist = 0x0, 
  lisp_eval_depth = 0, 
  pdlcount = 2, 
  poll_suppress_count = 1, 
  interrupt_input_blocked = 0, 
  byte_stack = 0x0
}
#15 0x0811c0a7 in command_loop () at keyboard.c:1348
No locals.
#16 0x0811c41b in recursive_edit_1 () at keyboard.c:957
        val = <value optimized out>
#17 0x0811c551 in Frecursive_edit () at keyboard.c:1019
        buffer = 137751833
#18 0x0811114c in main (argc=2, argv=0xbfbe7274) at emacs.c:1774
        dummy = 0
        stack_bottom_variable = 8 '\b'
        do_initial_setlocale = 1
        skip_args = 1
        rlim = {
  rlim_cur = 8388608, 
  rlim_max = 18446744073709551615
}
        no_loadup = 0
        junk = 0x0

Lisp Backtrace:
"delete-frame" (0xbfbe68e4)
"delete-other-frames" (0xbfbe6a24)
"call-interactively" (0xbfbe6bc4)
quit
The program is running.  Exit anyway? (y or n) 
If Emacs crashed, and you have the Emacs process in the gdb debugger,
please include the output from the following gdb commands:
    `bt full' and `xbacktrace'.
If you would like to further debug the crash, please read the file
/usr/local/src/nother-emacs/etc/DEBUG for instructions.


In GNU Emacs 23.0.60.2 (i686-pc-linux-gnu, GTK+ Version 2.12.9)
 of 2008-05-16 on debian
configured using `configure  '--enable-maintainer-mode' '--with-xpm=no' 
'--with-jpeg=no' '--with-gif=no' '--with-tiff=no' '--with-xft' 
'--with-x-toolkit=gtk''

Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: nil
  value of $LC_CTYPE: nil
  value of $LC_MESSAGES: nil
  value of $LC_MONETARY: nil
  value of $LC_NUMERIC: nil
  value of $LC_TIME: nil
  value of $LANG: nil
  value of $XMODIFIERS: nil
  locale-coding-system: utf-8-unix
  default-enable-multibyte-characters: t

Major mode: ERC

Minor modes in effect:
  erc-ring-mode: t
  erc-pcomplete-mode: t
  erc-netsplit-mode: t
  erc-button-mode: t
  erc-fill-mode: t
  erc-stamp-mode: t
  flyspell-mode: t
  erc-autojoin-mode: t
  erc-track-mode: t
  erc-track-minor-mode: t
  erc-match-mode: t
  erc-log-mode: t
  erc-services-mode: t
  erc-irccontrols-mode: t
  erc-noncommands-mode: t
  erc-readonly-mode: t
  desktop-save-mode: t
  recentf-mode: t
  display-time-mode: t
  global-auto-revert-mode: t
  shell-dirtrack-mode: t
  iswitchb-mode: t
  mouse-wheel-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  global-auto-composition-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t
  line-number-mode: t
  transient-mark-mode: t
  abbrev-mode: t

Recent input:
RET C-x b e m C-r C-r RET w e l l , SPC t h a t ' l 
l SPC t e a c h SPC m e SPC t o SPC c r e a t e SPC 
a n SPC d e l e t e SPC m o r e SPC t h a n SPC t w 
o SPC f r a m e s SPC i n SPC o n e SPC w e e k RET 
ESC x r e p o r t - e m TAB b TAB RET

Recent messages:
Note: file is write protected
Desktop: 35 buffers restored, 1 failed to restore.
For information about GNU Emacs and the GNU system, type C-h C-a.
Starting new Ispell process [default] ...
ERC color interpretation ON
Connecting to irc.freenode.net:6667... ...done
Logging in as 'offby1'...
Logging in without password
Logging in as 'offby1'... done
ERC color interpretation ON [7 times]

-- 
... democracy is the worst form of government except all those
other forms that have been tried from time to time.
        -- Winston Churchill, cited at http://en.wikipedia.org/wiki/Democracy