crash in cvs head

[Sam Steingold]

GNU Emacs 22.0.50.9 (i686-pc-linux-gnu, X toolkit, Xaw3d scroll bars)
 of 2006-06-26 on quant8

Program received signal SIGSEGV, Segmentation fault.
x_free_frame_resources (f=0xb8b0588) at xterm.c:9018
9018      if (dpyinfo->display)
(gdb) where
#0  x_free_frame_resources (f=0xb8b0588) at xterm.c:9018
#1  0x080cedf4 in unwind_create_frame (frame=193660300) at xfns.c:2968
#2  0x0814e2ed in unbind_to (count=800, value=137541833) at eval.c:3260
#3  0x0814e909 in unwind_to_catch (catch=0xbf82e2fc, value=Variable "value" is 
not available.
) at eval.c:1259
#4  0x08150673 in Fsignal (error_symbol=137586497, data=137541833)
    at eval.c:1692
#5  0x081588a7 in Fassq (key=137697129, list=210757485) at fns.c:1536
#6  0x0805bb43 in x_get_arg (dpyinfo=0xa5bca30, alist=210757461,
    param=137697129, attribute=0x81a158b "iconName", class=0x81a2bc6 "Title",
    type=RES_TYPE_STRING) at frame.c:3524
#7  0x080d39da in Fx_create_frame (parms=210757541) at xfns.c:3080
#8  0x08150263 in Ffuncall (nargs=2, args=0xbf82da28) at eval.c:2904
#9  0x0817b08f in Fbyte_code (bytestr=136369563, vector=136369644, maxdepth=40)
    at bytecode.c:694
#10 0x0814fdb8 in funcall_lambda (fun=136369516, nargs=1,
    arg_vector=0xbf82db54) at eval.c:3091
#11 0x081501b7 in Ffuncall (nargs=2, args=0xbf82db50) at eval.c:2959
#12 0x0817b08f in Fbyte_code (bytestr=136807355, vector=136807396, maxdepth=24)
    at bytecode.c:694
#13 0x0814fdb8 in funcall_lambda (fun=136807308, nargs=1,
    arg_vector=0xbf82dc74) at eval.c:3091
#14 0x081501b7 in Ffuncall (nargs=2, args=0xbf82dc70) at eval.c:2959
#15 0x0817b08f in Fbyte_code (bytestr=136802179, vector=136802324, maxdepth=40)
    at bytecode.c:694
#16 0x0814fdb8 in funcall_lambda (fun=136802124, nargs=1,
    arg_vector=0xbf82dda4) at eval.c:3091
#17 0x081501b7 in Ffuncall (nargs=2, args=0xbf82dda0) at eval.c:2959
#18 0x08151539 in call1 (fn=139816017, arg1=214434196) at eval.c:2693
#19 0x0810b255 in Fpop_to_buffer (buffer=205377659, other_window=137541833,
    norecord=137541833) at buffer.c:1726
#20 0x08150296 in Ffuncall (nargs=2, args=0xbf82de50) at eval.c:2910
#21 0x0817b08f in Fbyte_code (bytestr=205377691, vector=179411964, maxdepth=32)
    at bytecode.c:694
#22 0x0814fdb8 in funcall_lambda (fun=199764332, nargs=1,
    arg_vector=0xbf82df74) at eval.c:3091
#23 0x081501b7 in Ffuncall (nargs=2, args=0xbf82df70) at eval.c:2959
#24 0x0817b08f in Fbyte_code (bytestr=136606035, vector=136606060, maxdepth=16)
    at bytecode.c:694
#25 0x0814fdb8 in funcall_lambda (fun=136606004, nargs=0,
    arg_vector=0xbf82e094) at eval.c:3091
#26 0x081501b7 in Ffuncall (nargs=1, args=0xbf82e090) at eval.c:2959
#27 0x08151a49 in apply1 (fn=138552673, arg=137541833) at eval.c:2649
#28 0x0814d375 in Fcall_interactively (function=138552673,
    record_flag=137541833, keys=179186388) at callint.c:412
#29 0x080eefa3 in Fcommand_execute (cmd=138552673, record_flag=137541833,
    keys=137541833, special=137541833) at keyboard.c:9759
#30 0x080fa21b in command_loop_1 () at keyboard.c:1791
#31 0x0814eda2 in internal_condition_case (bfun=0x80f9ea0 <command_loop_1>,
    handlers=137586473, hfun=0x80f4ca0 <cmd_error>) at eval.c:1476
#32 0x080f3f43 in command_loop_2 () at keyboard.c:1328
#33 0x0814ee5a in internal_catch (tag=137610057,
---Type <return> to continue, or q <return> to quit---
    func=0x80f3f20 <command_loop_2>, arg=137541833) at eval.c:1214
#34 0x080f4906 in command_loop () at keyboard.c:1295
#35 0x080f4a0a in recursive_edit_1 () at keyboard.c:1000
#36 0x08114fb6 in read_minibuf (map=137529837, initial=195494923,
    prompt=140206656, backup_n=Variable "backup_n" is not available.
) at minibuf.c:725
#37 0x0811563e in Fcompleting_read (prompt=195495243, table=137661881,
    predicate=195494923, require_match=Variable "require_match" is not 
available.
) at minibuf.c:1771
#38 0x081186bf in Fread_file_name (prompt=195495243, dir=Variable "dir" is not 
available.
) at fileio.c:6436
#39 0x08150317 in Ffuncall (nargs=4, args=0xbf82e6f4) at eval.c:2923
#40 0x0817b08f in Fbyte_code (bytestr=181798667, vector=181802060, maxdepth=48)
    at bytecode.c:694
#41 0x0814fdb8 in funcall_lambda (fun=181802332, nargs=6,
    arg_vector=0xbf82e824) at eval.c:3091
#42 0x081501b7 in Ffuncall (nargs=7, args=0xbf82e820) at eval.c:2959
#43 0x0817b08f in Fbyte_code (bytestr=181798971, vector=181803044, maxdepth=56)
    at bytecode.c:694
#44 0x0814fdb8 in funcall_lambda (fun=181803252, nargs=1,
    arg_vector=0xbf82e954) at eval.c:3091
#45 0x081501b7 in Ffuncall (nargs=2, args=0xbf82e950) at eval.c:2959
#46 0x0817b08f in Fbyte_code (bytestr=181798603, vector=181801700, maxdepth=16)
    at bytecode.c:694
#47 0x0814f7e9 in Feval (form=181721525) at eval.c:2250
#48 0x0814fbdf in Fprogn (args=181721885) at eval.c:434
#49 0x0808e88e in Fsave_window_excursion (args=181721885) at window.c:6486
#50 0x0817a316 in Fbyte_code (bytestr=181798571, vector=181801812, maxdepth=24)
    at bytecode.c:855
#51 0x0814fdb8 in funcall_lambda (fun=181801964, nargs=3,
    arg_vector=0xbf82eba4) at eval.c:3091
#52 0x081501b7 in Ffuncall (nargs=4, args=0xbf82eba0) at eval.c:2959
#53 0x0817b08f in Fbyte_code (bytestr=181301787, vector=181311644, maxdepth=48)
    at bytecode.c:694
#54 0x0814fdb8 in funcall_lambda (fun=181311956, nargs=1,
    arg_vector=0xbf82ecd4) at eval.c:3091
#55 0x081501b7 in Ffuncall (nargs=2, args=0xbf82ecd0) at eval.c:2959
#56 0x0817b08f in Fbyte_code (bytestr=181301995, vector=181312284, maxdepth=16)
    at bytecode.c:694
#57 0x0814fdb8 in funcall_lambda (fun=181312428, nargs=1,
    arg_vector=0xbf82ee64) at eval.c:3091
#58 0x081501b7 in Ffuncall (nargs=2, args=0xbf82ee60) at eval.c:2959
#59 0x0814d5d3 in Fcall_interactively (function=180818193,
    record_flag=137541833, keys=179186388) at callint.c:884
#60 0x080eefa3 in Fcommand_execute (cmd=180818193, record_flag=137541833,
    keys=137541833, special=137541833) at keyboard.c:9759
#61 0x080fa21b in command_loop_1 () at keyboard.c:1791
#62 0x0814eda2 in internal_condition_case (bfun=0x80f9ea0 <command_loop_1>,
    handlers=137586473, hfun=0x80f4ca0 <cmd_error>) at eval.c:1476
#63 0x080f3f43 in command_loop_2 () at keyboard.c:1328
#64 0x0814ee5a in internal_catch (tag=137582705,
    func=0x80f3f20 <command_loop_2>, arg=137541833) at eval.c:1214
#65 0x080f495c in command_loop () at keyboard.c:1307
#66 0x080f4a0a in recursive_edit_1 () at keyboard.c:1000
---Type <return> to continue, or q <return> to quit---
#67 0x080f4b07 in Frecursive_edit () at keyboard.c:1061
#68 0x080eb165 in main (argc=2, argv=0xbf82f754) at emacs.c:1794

Lisp Backtrace:
"x-create-frame" (0xc8fe7a5)
"x-create-frame-with-faces" (0xa7f35bd)
"make-frame" (0xa7f35bd)
"special-display-popup-frame" (0xcc80194)
"pop-to-buffer" (0xc3dd07b)
"info" (0x824717b)
"view-emacs-FAQ" (0x832b8c9)
"call-interactively" (0x8422561)
"read-file-name" (0xba7054b)
"gnus-read-save-file-name" (0xad6085b)
"gnus-summary-save-in-mail" (0x832b8c9)
"byte-code" (0xad606cb)
"gnus-article-save" (0xd7c1cd4)
"gnus-summary-save-article" (0x832b8c9)
"gnus-summary-save-article-mail" (0x832b8c9)
"call-interactively" (0xac71111)
(gdb) list
1794      Frecursive_edit ();
1795      /* NOTREACHED */
1796      return 0;
1797    }
1798    ^L
1799    /* Sort the args so we can find the most important ones
1800       at the beginning of argv.  */
1801
1802    /* First, here's a table of all the standard options.  */
1803
(gdb) p dpyinfo
$1 = (struct x_display_info *) 0x0
(gdb) up
#1  0x080cedf4 in unwind_create_frame (frame=193660300) at xfns.c:2968
2968          x_free_frame_resources (f);
(gdb) p f
No symbol "f" in current context.
(gdb) list
2963        {
2964    #if GLYPH_DEBUG
2965          struct x_display_info *dpyinfo = FRAME_X_DISPLAY_INFO (f);
2966    #endif
2967
2968          x_free_frame_resources (f);
2969
2970    #if GLYPH_DEBUG
2971          /* Check that reference counts are indeed correct.  */
2972          xassert (dpyinfo->reference_count == dpyinfo_refcount);
(gdb) c
Continuing.
Fatal error (11)
Program terminated with signal SIGINT, Interrupt.
The program no longer exists.

note that after "c" emacs did not die right away but was left in a
somewhat weird state: echo area contained an error message about trying
to run a nil function from menu-bar-update-hook (which was indeed
reported as nil) and minibuffer was not usable.

-- 
Sam Steingold (http://www.podval.org/~sds) on Fedora Core release 5 (Bordeaux)
http://dhimmi.com http://openvotingconsortium.org http://jihadwatch.org
http://mideasttruth.com http://iris.org.il http://honestreporting.com
I'd give my right arm to be ambidextrous.