SEGV in _XPollfdCacheDel while creating new frame

[Robert Mecklenburg]

I was reading mail with vm 7.18.  I tried to switch to another mail
folder (the emacs folder!) and got this crash.  Switching entails
creating a new frame.  I was not able to repeat the fault.

I updated my CVS emacs 8am MDT 8-2-2004.

Program received signal SIGSEGV, Segmentation fault.
0x40568df2 in _XPollfdCacheDel () from /usr/X11R6/lib/libX11.so.6
(gdb) where
#0  0x40568df2 in _XPollfdCacheDel () from /usr/X11R6/lib/libX11.so.6
#1  0x40569ec8 in _XRead () from /usr/X11R6/lib/libX11.so.6
#2  0x4056a990 in _XReply () from /usr/X11R6/lib/libX11.so.6
#3  0x40551776 in XAllocColor () from /usr/X11R6/lib/libX11.so.6
#4  0x080f780a in x_alloc_nearest_color_1 (dpy=0x86484c0, cmap=32, 
color=0xbfffd4d0) at xterm.c:1700
#5  0x08103c2c in x_defined_color (f=0x9926d90, color_name=0x9c26988 "grey88", 
color=0xbfffd4d0, alloc_p=1) at xfns.c:704
#6  0x080eaff7 in load_color (f=0x9926d90, face=0x96f39a0, name=156836395, 
target_index=LFACE_BACKGROUND_INDEX)
    at xfaces.c:1595
#7  0x080eb13d in load_face_colors (f=0x9926d90, face=0x96f39a0, attrs=0x0) at 
xfaces.c:1683
#8  0x080f437f in realize_x_face (cache=0x9881d98, attrs=0xbfffd680, 
c=160591248, base_face=0x0) at xfaces.c:7117
#9  0x080f4294 in realize_face (cache=0x9881d98, attrs=0xbfffd680, c=0, 
base_face=0x0, former_face_id=-1)
    at xfaces.c:7016
#10 0x080f4f1b in face_at_buffer_position (w=0x91f9dd8, pos=9381, 
region_beg=-1, region_end=-1, endptr=0xbfffd718,
    limit=9481, mouse=0) at xfaces.c:5570
#11 0x08096841 in handle_face_prop (it=0xbfffda50) at xdisp.c:2852
#12 0x0809630b in handle_stop (it=0xbfffda50) at xdisp.c:2587
#13 0x08095d69 in start_display (it=0xbfffda50, w=0x91f9dd8, pos=Unhandled 
dwarf expression opcode
) at xdisp.c:2284
#14 0x080c9123 in Frecenter (arg=152203045) at window.c:5171
#15 0x08189390 in Ffuncall (nargs=2, args=0xbfffdd20) at eval.c:2747
#16 0x081b4849 in Fbyte_code (bytestr=152529483, vector=151935996, maxdepth=16) 
at bytecode.c:689
#17 0x08189720 in funcall_lambda (fun=151936796, nargs=0, 
arg_vector=0xbfffde34) at eval.c:2923
#18 0x08189203 in Ffuncall (nargs=1, args=0xbfffde30) at eval.c:2793
#19 0x081b4849 in Fbyte_code (bytestr=152529387, vector=152530420, maxdepth=48) 
at bytecode.c:689
#20 0x08189720 in funcall_lambda (fun=151924548, nargs=1, 
arg_vector=0xbfffdf54) at eval.c:2923
#21 0x08189203 in Ffuncall (nargs=2, args=0xbfffdf50) at eval.c:2793
#22 0x081b4849 in Fbyte_code (bytestr=152529339, vector=151905236, maxdepth=24) 
at bytecode.c:689
#23 0x08189720 in funcall_lambda (fun=151922228, nargs=0, 
arg_vector=0xbfffe064) at eval.c:2923
#24 0x08189203 in Ffuncall (nargs=1, args=0xbfffe060) at eval.c:2793
#25 0x081b4849 in Fbyte_code (bytestr=142421483, vector=151414436, maxdepth=32) 
at bytecode.c:689
#26 0x08189720 in funcall_lambda (fun=152195524, nargs=1, 
arg_vector=0xbfffe194) at eval.c:2923
#27 0x08189203 in Ffuncall (nargs=2, args=0xbfffe190) at eval.c:2793
#28 0x08188fa8 in call1 (fn=152195524, arg1=158934729) at eval.c:2530
#29 0x081a16f2 in map_obarray (obarray=141228668, fn=0x81a1700 <mapatoms_1>, 
arg=152195524) at lread.c:3331
#30 0x081a1756 in Fmapatoms (function=152195524, obarray=141228668) at 
lread.c:3355
#31 0x08189390 in Ffuncall (nargs=3, args=0xbfffe250) at eval.c:2747
#32 0x081b4849 in Fbyte_code (bytestr=142421499, vector=142632372, maxdepth=24) 
at bytecode.c:689
#33 0x08189720 in funcall_lambda (fun=151578412, nargs=0, 
arg_vector=0xbfffe364) at eval.c:2923
#34 0x08189203 in Ffuncall (nargs=1, args=0xbfffe360) at eval.c:2793
#35 0x081b4849 in Fbyte_code (bytestr=152529115, vector=152529940, maxdepth=56) 
at bytecode.c:689
#36 0x08189720 in funcall_lambda (fun=142516724, nargs=2, 
arg_vector=0xbfffe484) at eval.c:2923
#37 0x08189203 in Ffuncall (nargs=3, args=0xbfffe480) at eval.c:2793
#38 0x081b4849 in Fbyte_code (bytestr=151229587, vector=151497052, maxdepth=72) 
at bytecode.c:689
#39 0x0818892a in Feval (form=150769757) at eval.c:2101
#40 0x0818716a in internal_catch (tag=138752081, func=0x8188500 <Feval>, 
arg=150769757) at eval.c:1107
#41 0x081b4061 in Fbyte_code (bytestr=151229619, vector=151829188, maxdepth=16) 
at bytecode.c:852
#42 0x08189720 in funcall_lambda (fun=142409724, nargs=3, 
arg_vector=0xbfffe7e4) at eval.c:2923
#43 0x08189203 in Ffuncall (nargs=4, args=0xbfffe7e0) at eval.c:2793
#44 0x081b4849 in Fbyte_code (bytestr=151236011, vector=142761996, maxdepth=32) 
at bytecode.c:689
#45 0x08189720 in funcall_lambda (fun=142762204, nargs=2, 
arg_vector=0xbfffe8f4) at eval.c:2923
#46 0x08189203 in Ffuncall (nargs=3, args=0xbfffe8f0) at eval.c:2793
#47 0x08188b2c in Fapply (nargs=2, args=0xbfffe970) at eval.c:2189
#48 0x08188f5c in apply1 (fn=145290745, arg=158781917) at eval.c:2497
---Type <return> to continue, or q <return> to quit---
#49 0x08184af5 in Fcall_interactively (function=145290745, 
record_flag=138493969, keys=158764476) at callint.c:407
#50 0x08130b3e in Fcommand_execute (cmd=145290745, record_flag=138493969, 
keys=138493969, special=138493969)
    at keyboard.c:9724
#51 0x081251d3 in command_loop_1 () at keyboard.c:1776
#52 0x0818762d in internal_condition_case (bfun=0x8124de0 <command_loop_1>, 
handlers=138554897,
    hfun=0x81248e0 <cmd_error>) at eval.c:1346
#53 0x08124c0b in command_loop_2 () at keyboard.c:1306
#54 0x0818716a in internal_catch (tag=138548905, func=0x8124bf0 
<command_loop_2>, arg=138493969) at eval.c:1107
#55 0x08124bc7 in command_loop () at keyboard.c:1285
#56 0x08124612 in recursive_edit_1 () at keyboard.c:978
#57 0x0812475f in Frecursive_edit () at keyboard.c:1039
#58 0x08122e9f in main (argc=3, argv=0xbffff154) at emacs.c:1687
(gdb) frame 4
#4  0x080f780a in x_alloc_nearest_color_1 (dpy=0x86484c0, cmap=32, 
color=0xbfffd4d0) at xterm.c:1700
1700      rc = XAllocColor (dpy, cmap, color);
(gdb) p color
$1 = (XColor *) 0xbfffd4d0
(gdb) p *color
$2 = {
  pixel = 63,
  red = 57568,
  green = 57568,
  blue = 57568,
  flags = 7 '\a',
  pad = -65 '\277'
}
(gdb) xbacktrace
"recenter"
"vm-auto-center-summary"
"vm-set-summary-pointer"
"vm-do-needed-summary-rebuild"
0x91251c4 PVEC_COMPILED
"mapatoms"
"vm-update-summary-and-mode-line"
"vm-summarize"
"byte-code"
"vm"
"vm-visit-folder"
"call-interactively"
(gdb) up
#5  0x08103c2c in x_defined_color (f=0x9926d90, color_name=0x9c26988 "grey88", 
color=0xbfffd4d0, alloc_p=1) at xfns.c:704
(gdb) p f
$4 = (struct frame *) 0x9926d90
(gdb) p *f
$5 = {
  size = 1073742932,
  next = 0x9821cc8,
  name = 152898131,
  icon_name = 138493969,
  title = 138493969,
  focus_frame = 138493969,
  root_window = 153541428,
  selected_window = 153066972,
  minibuffer_window = 157730852,
  param_alist = 160336925,
  scroll_bars = 138493969,
  condemned_scroll_bars = 138493969,
  menu_bar_items = 154942140,
  face_alist = 160323333,
  menu_bar_vector = 166061084,
  menu_bar_items_used = 1364,
  buffer_predicate = 138493969,
  buffer_list = 165646933,
  menu_bar_window = 138493969,
  tool_bar_window = 138493969,
  tool_bar_items = 138493969,
  desired_tool_bar_string = 138493969,
  current_tool_bar_string = 138493969,
  face_cache = 0x9881d98,
  namebuf = 0x0,
  current_pool = 0x0,
  desired_pool = 0x0,
  desired_matrix = 0x0,
  current_matrix = 0x0,
  glyphs_initialized_p = 1,
  external_tool_bar = 1,
  tool_bar_lines = 0,
  n_tool_bar_items = 0,
  decode_mode_spec_buffer = 0x9f3db58 "address@hidden",
  insert_line_cost = 0x985f1a0,
  delete_line_cost = 0x96bb770,
  insert_n_lines_cost = 0x91effc8,
  delete_n_lines_cost = 0x9573e40,
  text_lines = 49,
  text_cols = 80,
  total_lines = 0,
  total_cols = 86,
  new_text_lines = 0,
  new_text_cols = 0,
  left_pos = 190,
  top_pos = 380,
  pixel_height = 698,
  pixel_width = 516,
  x_pixels_diff = 5,
  y_pixels_diff = 87,
  win_gravity = 1,
---Type <return> to continue, or q <return> to quit---
  size_hint_flags = 6,
  border_width = 0,
  internal_border_width = 0,
  column_width = 6,
  line_height = 13,
  output_method = output_x_window,
  output_data = {
    x = 0x9df2010,
    w32 = 0x9df2010,
    mac = 0x9df2010,
    nothing = 165617680
  },
  fringe_cols = 3,
  left_fringe_width = 9,
  right_fringe_width = 9,
  kboard = 0x8637da8,
  want_fullscreen = 0,
  menu_bar_lines = 0,
  external_menu_bar = 1,
  display_preempted = 0 '\0',
  visible = 1 '\001',
  iconified = 0 '\0',
  async_visible = 1 '\001',
  async_iconified = 0 '\0',
  garbaged = 0 '\0',
  has_minibuffer = 1 '\001',
  wants_modeline = 1 '\001',
  can_have_scroll_bars = 1 '\001',
  vertical_scroll_bar_type = vertical_scroll_bar_right,
  desired_cursor = FILLED_BOX_CURSOR,
  cursor_width = -1073750856,
  blink_off_cursor = DEFAULT_CURSOR,
  blink_off_cursor_width = 0,
  auto_raise = 0 '\0',
  auto_lower = 0 '\0',
  no_split = 0 '\0',
  explicit_name = 0 '\0',
  window_sizes_changed = 1 '\001',
  message_buf = 0x96d4750 
"address@hidden;\003\t\350\b\211\tx\271f\t\320\271f\t",
  scroll_bottom_vpos = 0,
  config_scroll_bar_width = 16,
  config_scroll_bar_cols = 3,
  scroll_bar_actual_width = 18,
  cost_calculation_baud_rate = 19200,
  mouse_moved = 1 '\001',
  gamma = 0,
  extra_line_spacing = 0,
  resized_p = 0,
  force_flush_display_p = 1,
  default_face_done_p = 1
}
gdb) up
#6  0x080eaff7 in load_color (f=0x9926d90, face=0x96f39a0, name=156836395, 
target_index=LFACE_BACKGROUND_INDEX)
    at xfaces.c:1595
1595      if (!defined_color (f, SDATA (name), &color, 1))
(gdb) p *face
$6 = {
  id = 0,
  gc = 0x0,
  font = 0x0,
  stipple = 0,
  foreground = 0,
  background = 0,
  underline_color = 0,
  overline_color = 0,
  strike_through_color = 0,
  box_color = 0,
  font_name = 0x0,
  font_info_id = 0,
  fontset = 63,
  pixmap_w = 0,
  pixmap_h = 0,
  box_line_width = 0,
  box = FACE_NO_BOX,
  use_box_color_for_shadows_p = 0,
  lface = {138494353, 154950499, 138543113, 792, 138542873, 138542729, 
138493969, 138493969, 156836587, 156836395,
    138493969, 138493969, 138493969, 138493969, 138493969, 138493969, 480},
  hash = 0,
  charset = 0,
  underline_p = 0,
  overline_p = 0,
  strike_through_p = 0,
  foreground_defaulted_p = 0,
  background_defaulted_p = 0,
  underline_defaulted_p = 0,
  overline_color_defaulted_p = 0,
  strike_through_color_defaulted_p = 0,
  box_color_defaulted_p = 0,
  tty_bold_p = 0,
  tty_dim_p = 0,
  tty_underline_p = 0,
  tty_alt_charset_p = 0,
  tty_reverse_p = 0,
  tty_blinking_p = 0,
  colors_copied_bitwise_p = 0,
  overstrike = 0,
  next = 0x0,
  prev = 0x0,
  ascii_face = 0x96f39a0
}


In GNU Emacs 21.3.50.2 (i686-pc-linux-gnu, GTK+ Version 2.2.4)
 of 2004-08-02 on oops.realmsys.com
configured using `configure '--with-x11' '--with-x-toolkit=gtk''

Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: en_US
  value of $LC_CTYPE: en_US
  value of $LC_MESSAGES: en_US
  value of $LC_MONETARY: en_US
  value of $LC_NUMERIC: en_US
  value of $LC_TIME: en_US
  value of $LANG: en_US
  locale-coding-system: iso-latin-1
  default-enable-multibyte-characters: t

Major mode: Lisp Interaction

Minor modes in effect:
  show-paren-mode: t
  eldoc-mode: t
  auto-image-file-mode: t
  recentf-mode: t
  auto-compression-mode: t
  tool-bar-mode: t
  mouse-wheel-mode: t
  menu-bar-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  unify-8859-on-encoding-mode: t
  utf-translate-cjk-mode: t
  column-number-mode: t
  line-number-mode: t
  transient-mark-mode: t

Recent input:
C-p C-p C-k C-k C-k C-k C-x C-s C-c m v <tab> <tab> 
c h <tab> <return> p n q v e m <tab> <return> n n n 
n n n n n n n n p p p q v <tab> <tab> e c <tab> <return> 
p q v <tab> <tab> j d <tab> <return> q v <tab> <tab> 
j s <tab> <return> 3 M M M n * <return> d d d d # # 
# S q v <tab> <tab> <tab> C-g <switch-frame> <down-mouse-1> 
<mouse-movement> <mouse-1> <help-echo> <help-echo> 
<help-echo> <help-echo> <help-echo> <menu-bar> <help-menu> 
<report-emacs-bug>

Recent messages:
Stuffing attributes...
Ordering updates...
Stuffing attributes... done
Saving...
Wrote /home/mecklen/Mail/jswat
Quitting...
Making completion list...
Quit
Loading emacsbug...done
Quit


-- 
Robert