bug#21666: 25.0.50; Random segfaults

[Jorgen Schaefer]

Hello!
I have seen repeated crashes by Emacs from (almost) current git. I can
not reproduce them, but they do happen regularly during normal
interaction. Backtrace at the end of the report.

I'll try and keep gdb attached to my Emacs session for when this happens
again. Let me know if I can do something to provide more information.


In GNU Emacs 25.0.50.1 (x86_64-unknown-linux-gnu)
 of 2015-10-09
Repository revision: e6013e8c8f3de0ca39c17a2da95346b4a320e6d0
System Description:     Debian GNU/Linux 8.2 (jessie)

Configured using:
 'configure --without-x CFLAGS=-ggdb'

Configured features:
JPEG SOUND DBUS NOTIFY ACL GNUTLS LIBXML2 ZLIB

Important settings:
  value of $LC_ALL: 
  value of $LC_COLLATE: de_DE.UTF-8
  value of $LC_CTYPE: de_DE.UTF-8
  value of $LC_MESSAGES: POSIX
  value of $LC_MONETARY: POSIX
  value of $LC_NUMERIC: POSIX
  value of $LC_TIME: POSIX
  value of $LANG: POSIX
  locale-coding-system: utf-8-unix

Recent messages:
Ispell process killed
Local Ispell dictionary set to american
Starting new Ispell process /usr/bin/aspell with default dictionary...
Ispell process killed
Local Ispell dictionary set to american
Starting new Ispell process /usr/bin/aspell with default dictionary...
Ispell process killed
Local Ispell dictionary set to german8
Starting new Ispell process /usr/bin/aspell with american dictionary...
Making completion list...

Memory information:
((conses 16 506667 25645)
 (symbols 48 50697 0)
 (miscs 40 491 575)
 (strings 32 127558 15042)
 (string-bytes 1 3874485)
 (vectors 16 48820)
 (vector-slots 8 816309 4597)
 (floats 8 686 1437)
 (intervals 56 3007 158)
 (buffers 976 29)
 (heap 1024 39125 2060))


Program received signal SIGSEGV, Segmentation fault.
CAR (c=139) at lisp.h:1201
1201: NILP (c) ? Qniln];
(gdb) bt
#0  CAR (c=139) at lisp.h:1201
#1  0x0000000000557e10 in Fcar (list=136) at data.c:530
#2  0x000000000057575d in eval_sub (form=28413219) at eval.c:2123r
#3  0x00000000005756bc in eval_sub (form=28413203) at eval.c:2111
#4  0x0000000000571b2d in Fcond (args=28407859) at eval.c:405
#5  0x0000000000575476 in eval_sub (form=28407443) at eval.c:2085
#6  0x0000000000571bd2 in Fprogn (body=28407491) at eval.c:427
#7  0x000000000057762a in funcall_lambda (fun=44604627, nargs=1,
    arg_vector=0x7fffffff4cc8) at eval.c:2869
#8  0x0000000000576ecd in Ffuncall (nargs=2, args=0x7fffffff4cc0)
    at eval.c:2711
#9  0x00000000005765a4 in call1 (fn=44604611, arg1=139) at eval.c:2509
#10 0x0000000000581269 in mapcar1 (leni=2544, vals=0x3619420, fn=44604611,
    seq=41799763) at fns.c:2530
#11 0x0000000000581621 in Fmapcar (function=44604611, sequence=41799763)
    at fns.c:2595
#12 0x000000000057578c in eval_sub (form=28411379) at eval.c:2126
#13 0x0000000000571bd2 in Fprogn (body=28411427) at eval.c:427
#14 0x0000000000572952 in FletX (args=28407635) at eval.c:879
#15 0x0000000000575476 in eval_sub (form=28407651) at eval.c:2085
#16 0x0000000000571bd2 in Fprogn (body=28407715) at eval.c:427
#17 0x000000000057762a in funcall_lambda (fun=28405795, nargs=3,
    arg_vector=0x7fffffff5100) at eval.c:2869
#18 0x0000000000577148 in apply_lambda (fun=28405811, args=28417283, count=92)
    at eval.c:2751
#19 0x0000000000575b20 in eval_sub (form=28417299) at eval.c:2198
#20 0x0000000000571cfa in Fsetq (args=28417331) at eval.c:494
#21 0x0000000000575476 in eval_sub (form=28417347) at eval.c:2085
#22 0x0000000000571bd2 in Fprogn (body=28415683) at eval.c:427
#23 0x0000000000575476 in eval_sub (form=28415699) at eval.c:2085
#24 0x0000000000571ad3 in Fif (args=28415731) at eval.c:384
#25 0x0000000000575476 in eval_sub (form=28415747) at eval.c:2085
#26 0x0000000000571bd2 in Fprogn (body=28415939) at eval.c:427
#27 0x0000000000572d3f in Flet (args=28413955) at eval.c:943
#28 0x0000000000575476 in eval_sub (form=28413971) at eval.c:2085
#29 0x0000000000571bd2 in Fprogn (body=28414035) at eval.c:427
#30 0x000000000057762a in funcall_lambda (fun=28414131, nargs=2,
    arg_vector=0x7fffffff58f0) at eval.c:2869
#31 0x0000000000577148 in apply_lambda (fun=28414147, args=29716595, count=85)
    at eval.c:2751
#32 0x0000000000575b20 in eval_sub (form=29716579) at eval.c:2198
#33 0x0000000000571bd2 in Fprogn (body=29716675) at eval.c:427
#34 0x0000000000572952 in FletX (args=29714883) at eval.c:879
#35 0x0000000000575476 in eval_sub (form=29714899) at eval.c:2085
#36 0x0000000000571bd2 in Fprogn (body=29714931) at eval.c:427
#37 0x0000000000575476 in eval_sub (form=29714915) at eval.c:2085
#38 0x0000000000571ad3 in Fif (args=29714963) at eval.c:384
#39 0x0000000000575476 in eval_sub (form=29714947) at eval.c:2085
#40 0x0000000000571bd2 in Fprogn (body=29715043) at eval.c:427
---Type <return> to continue, or q <return> to quit---
#41 0x000000000057762a in funcall_lambda (fun=29715139, nargs=7,
    arg_vector=0x7fffffff5f40) at eval.c:2869
#42 0x0000000000577148 in apply_lambda (fun=29715155, args=28479411, count=79)
    at eval.c:2751
#43 0x0000000000575b20 in eval_sub (form=28479571) at eval.c:2198
#44 0x0000000000571bd2 in Fprogn (body=28476067) at eval.c:427
#45 0x0000000000563d13 in Fsave_current_buffer (args=28475971)
    at editfns.c:1027
#46 0x0000000000575476 in eval_sub (form=28475955) at eval.c:2085
#47 0x0000000000571bd2 in Fprogn (body=28475619) at eval.c:427
#48 0x0000000000571b70 in Fcond (args=28475603) at eval.c:409
#49 0x0000000000575476 in eval_sub (form=28475587) at eval.c:2085
#50 0x0000000000571bd2 in Fprogn (body=28475523) at eval.c:427
#51 0x000000000057762a in funcall_lambda (fun=28475187, nargs=5,
    arg_vector=0x7fffffff6548) at eval.c:2869
#52 0x0000000000576ecd in Ffuncall (nargs=6, args=0x7fffffff6540)
    at eval.c:2711
#53 0x0000000000576003 in Fapply (nargs=5, args=0x7fffffff6600) at eval.c:2278
#54 0x0000000000575656 in eval_sub (form=26515859) at eval.c:2103
#55 0x0000000000571bd2 in Fprogn (body=26515123) at eval.c:427
#56 0x0000000000571b70 in Fcond (args=26515027) at eval.c:409
#57 0x0000000000575476 in eval_sub (form=26516723) at eval.c:2085
#58 0x0000000000571bd2 in Fprogn (body=26509027) at eval.c:427
#59 0x0000000000572952 in FletX (args=26614371) at eval.c:879
#60 0x0000000000575476 in eval_sub (form=26614259) at eval.c:2085
#61 0x0000000000571bd2 in Fprogn (body=26614099) at eval.c:427
#62 0x0000000000563d13 in Fsave_current_buffer (args=26614147)
    at editfns.c:1027
#63 0x0000000000575476 in eval_sub (form=26614211) at eval.c:2085
#64 0x0000000000571bd2 in Fprogn (body=26613299) at eval.c:427
#65 0x000000000057762a in funcall_lambda (fun=26612147, nargs=5,
    arg_vector=0x7fffffff6d18) at eval.c:2869
#66 0x0000000000576ecd in Ffuncall (nargs=6, args=0x7fffffff6d10)
    at eval.c:2711
#67 0x0000000000576003 in Fapply (nargs=2, args=0x7fffffff6dd0) at eval.c:2278
#68 0x0000000000575656 in eval_sub (form=29409219) at eval.c:2103
#69 0x00000000005737fa in internal_lisp_condition_case (var=4245808,
    bodyform=29409219, handlers=29407395) at eval.c:1278
#70 0x000000000057337c in Fcondition_case (args=29409203) at eval.c:1203
#71 0x0000000000575476 in eval_sub (form=29409187) at eval.c:2085
#72 0x0000000000571bd2 in Fprogn (body=29407411) at eval.c:427
#73 0x0000000000571af1 in Fif (args=29409107) at eval.c:385
#74 0x0000000000575476 in eval_sub (form=29409091) at eval.c:2085
#75 0x0000000000571bd2 in Fprogn (body=29408019) at eval.c:427
#76 0x0000000000572d3f in Flet (args=29408035) at eval.c:943
#77 0x0000000000575476 in eval_sub (form=29408051) at eval.c:2085
#78 0x0000000000571bd2 in Fprogn (body=29408067) at eval.c:427
#79 0x0000000000572dff in Fwhile (args=29408083) at eval.c:962
#80 0x0000000000575476 in eval_sub (form=29408099) at eval.c:2085
---Type <return> to continue, or q <return> to quit---
#81 0x0000000000571bd2 in Fprogn (body=29408115) at eval.c:427
#82 0x0000000000572d3f in Flet (args=29408131) at eval.c:943
#83 0x0000000000575476 in eval_sub (form=29408147) at eval.c:2085
#84 0x0000000000571bd2 in Fprogn (body=29406627) at eval.c:427
#85 0x000000000057762a in funcall_lambda (fun=29406723, nargs=7,
    arg_vector=0x7fffffff78f8) at eval.c:2869
#86 0x0000000000576ecd in Ffuncall (nargs=8, args=0x7fffffff78f0)
    at eval.c:2711
#87 0x0000000000576003 in Fapply (nargs=6, args=0x7fffffff79c0) at eval.c:2278
#88 0x0000000000575656 in eval_sub (form=29379347) at eval.c:2103
#89 0x0000000000571bd2 in Fprogn (body=29378355) at eval.c:427
#90 0x0000000000575476 in eval_sub (form=29378387) at eval.c:2085
#91 0x0000000000571ad3 in Fif (args=29378419) at eval.c:384
#92 0x0000000000575476 in eval_sub (form=29378435) at eval.c:2085
#93 0x0000000000571bd2 in Fprogn (body=29376691) at eval.c:427
#94 0x0000000000572d3f in Flet (args=29376707) at eval.c:943
#95 0x0000000000575476 in eval_sub (form=29376723) at eval.c:2085
#96 0x0000000000571bd2 in Fprogn (body=29376739) at eval.c:427
#97 0x000000000057762a in funcall_lambda (fun=29376835, nargs=5,
    arg_vector=0x7fffffff7ff0) at eval.c:2869
#98 0x0000000000577148 in apply_lambda (fun=29376851, args=26672659, count=49)
    at eval.c:2751
#99 0x0000000000575b20 in eval_sub (form=26672707) at eval.c:2198
#100 0x0000000000571bd2 in Fprogn (body=26671907) at eval.c:427
#101 0x0000000000571af1 in Fif (args=26676579) at eval.c:385
#102 0x0000000000575476 in eval_sub (form=26678099) at eval.c:2085
#103 0x0000000000571bd2 in Fprogn (body=26670435) at eval.c:427
#104 0x000000000057762a in funcall_lambda (fun=26736179, nargs=5,
    arg_vector=0x7fffffff8478) at eval.c:2869
#105 0x0000000000576ecd in Ffuncall (nargs=6, args=0x7fffffff8470)
    at eval.c:2711
#106 0x0000000000576003 in Fapply (nargs=2, args=0x7fffffff8530) at eval.c:2278
#107 0x0000000000575656 in eval_sub (form=29409219) at eval.c:2103
#108 0x00000000005737fa in internal_lisp_condition_case (var=4245808,
    bodyform=29409219, handlers=29407395) at eval.c:1278
#109 0x000000000057337c in Fcondition_case (args=29409203) at eval.c:1203
#110 0x0000000000575476 in eval_sub (form=29409187) at eval.c:2085
#111 0x0000000000571bd2 in Fprogn (body=29407411) at eval.c:427
#112 0x0000000000571af1 in Fif (args=29409107) at eval.c:385
#113 0x0000000000575476 in eval_sub (form=29409091) at eval.c:2085
#114 0x0000000000571bd2 in Fprogn (body=29408019) at eval.c:427
#115 0x0000000000572d3f in Flet (args=29408035) at eval.c:943
#116 0x0000000000575476 in eval_sub (form=29408051) at eval.c:2085
#117 0x0000000000571bd2 in Fprogn (body=29408067) at eval.c:427
#118 0x0000000000572dff in Fwhile (args=29408083) at eval.c:962
#119 0x0000000000575476 in eval_sub (form=29408099) at eval.c:2085
#120 0x0000000000571bd2 in Fprogn (body=29408115) at eval.c:427
#121 0x0000000000572d3f in Flet (args=29408131) at eval.c:943
#122 0x0000000000575476 in eval_sub (form=29408147) at eval.c:2085
---Type <return> to continue, or q <return> to quit---
#123 0x0000000000571bd2 in Fprogn (body=29406627) at eval.c:427
#124 0x000000000057762a in funcall_lambda (fun=29406723, nargs=7,
    arg_vector=0x7fffffff9058) at eval.c:2869
#125 0x0000000000576ecd in Ffuncall (nargs=8, args=0x7fffffff9050)
    at eval.c:2711
#126 0x0000000000576003 in Fapply (nargs=6, args=0x7fffffff9120) at eval.c:2278
#127 0x0000000000575656 in eval_sub (form=29379187) at eval.c:2103
#128 0x0000000000571bd2 in Fprogn (body=29378371) at eval.c:427
#129 0x0000000000575476 in eval_sub (form=29378387) at eval.c:2085
#130 0x0000000000571ad3 in Fif (args=29378419) at eval.c:384
#131 0x0000000000575476 in eval_sub (form=29378435) at eval.c:2085
#132 0x0000000000571bd2 in Fprogn (body=29376691) at eval.c:427
#133 0x0000000000572d3f in Flet (args=29376707) at eval.c:943
#134 0x0000000000575476 in eval_sub (form=29376723) at eval.c:2085
#135 0x0000000000571bd2 in Fprogn (body=29376739) at eval.c:427
#136 0x000000000057762a in funcall_lambda (fun=29376835, nargs=5,
    arg_vector=0x7fffffff9808) at eval.c:2869
#137 0x0000000000576ecd in Ffuncall (nargs=6, args=0x7fffffff9800)
    at eval.c:2711
#138 0x0000000000576003 in Fapply (nargs=5, args=0x7fffffff98c0) at eval.c:2278
#139 0x0000000000575656 in eval_sub (form=29386419) at eval.c:2103
#140 0x0000000000571bd2 in Fprogn (body=29386547) at eval.c:427
#141 0x0000000000572952 in FletX (args=29385507) at eval.c:879
#142 0x0000000000575476 in eval_sub (form=29385523) at eval.c:2085
#143 0x0000000000571bd2 in Fprogn (body=29385603) at eval.c:427
#144 0x000000000057762a in funcall_lambda (fun=29383683, nargs=2,
    arg_vector=0x7fffffff9c50) at eval.c:2869
#145 0x0000000000577148 in apply_lambda (fun=29383699, args=29388323, count=24)
    at eval.c:2751
#146 0x0000000000575b20 in eval_sub (form=29388307) at eval.c:2198
#147 0x0000000000571bd2 in Fprogn (body=29388355) at eval.c:427
#148 0x0000000000572d3f in Flet (args=29388067) at eval.c:943
#149 0x0000000000575476 in eval_sub (form=29387907) at eval.c:2085
#150 0x0000000000571bd2 in Fprogn (body=29388483) at eval.c:427
#151 0x0000000000572dff in Fwhile (args=29387891) at eval.c:962
#152 0x0000000000575476 in eval_sub (form=29387827) at eval.c:2085
#153 0x0000000000571bd2 in Fprogn (body=29388499) at eval.c:427
#154 0x0000000000572d3f in Flet (args=29387811) at eval.c:943
#155 0x0000000000575476 in eval_sub (form=29389667) at eval.c:2085
#156 0x0000000000571bd2 in Fprogn (body=29387027) at eval.c:427
#157 0x0000000000575476 in eval_sub (form=29387043) at eval.c:2085
#158 0x0000000000571ad3 in Fif (args=29387075) at eval.c:384
#159 0x0000000000575476 in eval_sub (form=29387091) at eval.c:2085
#160 0x0000000000571bd2 in Fprogn (body=29385731) at eval.c:427
#161 0x000000000057762a in funcall_lambda (fun=29385827, nargs=2,
    arg_vector=0x7fffffffa6e8) at eval.c:2869
#162 0x0000000000576ecd in Ffuncall (nargs=3, args=0x7fffffffa6e0)
    at eval.c:2711
#163 0x0000000000576003 in Fapply (nargs=2, args=0x7fffffffa7a0) at eval.c:2278
---Type <return> to continue, or q <return> to quit---
#164 0x0000000000576552 in apply1 (fn=15835456, arg=42197571) at eval.c:2494
#165 0x00000000005c64d2 in read_process_output_call (fun_and_args=42197267)
    at process.c:5241
#166 0x0000000000573ac2 in internal_condition_case_1 (
    bfun=0x5c64a4 <read_process_output_call>, arg=42197267, handlers=16416,
    hfun=0x5c64d4 <read_process_output_error_handler>) at eval.c:1333
#167 0x00000000005c6c63 in read_and_dispose_of_process_output (p=0x27781c0,
    chars=0x7fffffffa8b0 ":gattsu!~gattsu@jdhankle.com PRIVMSG #emacs 
:lol\r\np\002", nbytes=50, coding=0x23e4fc0) at process.c:5449
#168 0x00000000005c68b1 in read_process_output (proc=41386437, channel=9)
    at process.c:5360
#169 0x00000000005c5e87 in wait_reading_process_output (time_limit=2,
    nsecs=999975529, read_kbd=-1, do_display=true, wait_for_cell=0,
    wait_proc=0x0, just_wait_proc=0) at process.c:5067
#170 0x00000000004e2e56 in kbd_buffer_get_event (kbp=0x7fffffffbe48,
    used_mouse_menu=0x0, end_time=0x7fffffffc420) at keyboard.c:3786
#171 0x00000000004df878 in read_event_from_main_queue (
    end_time=0x7fffffffc420, local_getcjmp=0x7fffffffc1f0, used_mouse_menu=0x0)
    at keyboard.c:2129
#172 0x00000000004dfab9 in read_decoded_event_from_main_queue (
    end_time=0x7fffffffc420, local_getcjmp=0x7fffffffc1f0, prev_event=0,
    used_mouse_menu=0x0) at keyboard.c:2192
#173 0x00000000004e0f71 in read_char (commandflag=0, map=0, prev_event=0,
    used_mouse_menu=0x0, end_time=0x7fffffffc420) at keyboard.c:2787
#174 0x000000000059daf9 in read_filtered_event (no_switch_frame=false,
    ascii_required=false, error_nonascii=false, input_method=true, seconds=14)
    at lread.c:609
#175 0x000000000059dddd in Fread_event (prompt=0, inherit_input_method=39456,
    seconds=14) at lread.c:721
#176 0x0000000000576be9 in Ffuncall (nargs=4, args=0x7fffffffc580)
    at eval.c:2657
#177 0x00000000005b8037 in exec_byte_code (bytestr=8831356, vector=8831389,
    maxdepth=30, args_template=3078, nargs=1, args=0x7fffffffcab0)
    at bytecode.c:880
#178 0x000000000057737f in funcall_lambda (fun=8831309, nargs=1,
    arg_vector=0x7fffffffcaa8) at eval.c:2810
#179 0x0000000000576dfc in Ffuncall (nargs=2, args=0x7fffffffcaa0)
    at eval.c:2699
#180 0x00000000005b8037 in exec_byte_code (bytestr=27571796, vector=26240117,
    maxdepth=14, args_template=2, nargs=0, args=0x7fffffffcfb8)
    at bytecode.c:880
#181 0x000000000057737f in funcall_lambda (fun=26240269, nargs=0,
    arg_vector=0x7fffffffcfb8) at eval.c:2810
#182 0x0000000000576dfc in Ffuncall (nargs=1, args=0x7fffffffcfb0)
    at eval.c:2699
#183 0x00000000005b8037 in exec_byte_code (bytestr=27567188, vector=26240845,
    maxdepth=30, args_template=2, nargs=0, args=0x7fffffffd4e0)
    at bytecode.c:880
#184 0x000000000057737f in funcall_lambda (fun=26274869, nargs=0,
---Type <return> to continue, or q <return> to quit---
    arg_vector=0x7fffffffd4e0) at eval.c:2810
#185 0x0000000000576dfc in Ffuncall (nargs=1, args=0x7fffffffd4d8)
    at eval.c:2699
#186 0x0000000000576571 in call0 (fn=15122304) at eval.c:2501
#187 0x00000000004df233 in safe_run_hooks_1 (nargs=2, args=0x7fffffffd580)
    at keyboard.c:1770
#188 0x0000000000573db6 in internal_condition_case_n (
    bfun=0x4df210 <safe_run_hooks_1>, nargs=2, args=0x7fffffffd580,
    handlers=39456, hfun=0x4df235 <safe_run_hooks_error>) at eval.c:1391
#189 0x00000000004df4b1 in safe_run_hook_funcall (nargs=2, args=0x7fffffffd610)
    at keyboard.c:1818
#190 0x0000000000576461 in run_hook_with_args (nargs=2, args=0x7fffffffd610,
    funcall=0x4df45e <safe_run_hook_funcall>) at eval.c:2466
#191 0x00000000004df51b in safe_run_hooks (hook=33264) at keyboard.c:1834
#192 0x00000000004de0f0 in command_loop_1 () at keyboard.c:1474
#193 0x0000000000573957 in internal_condition_case (
    bfun=0x4dd931 <command_loop_1>, handlers=16416, hfun=0x4dd13d <cmd_error>)
    at eval.c:1309
#194 0x00000000004dd649 in command_loop_2 (ignore=0) at keyboard.c:1088
#195 0x0000000000573119 in internal_catch (tag=40656,
    func=0x4dd620 <command_loop_2>, arg=0) at eval.c:1073
#196 0x00000000004dd5e9 in command_loop () at keyboard.c:1067
#197 0x00000000004dcd0c in recursive_edit_1 () at keyboard.c:673
#198 0x00000000004dce9f in Frecursive_edit () at keyboard.c:744
#199 0x00000000004dada7 in main (argc=1, argv=0x7fffffffdac8) at emacs.c:1643