Re: Segfault and font corruption in menu under Windows

[Ralf Angeli]

Resurrecting this thread from last October.  For reference see
<URL:http://thread.gmane.org/address@hidden>.

* Jason Rumney (2006-10-11) writes:

> There was a resource leak when popup menus were cancelled (by pressing 
> ESC) without selecting any option.

On the AUCTeX bug list there was another report about a crash
involving menu and pop-up menu interaction.  See
<URL:http://thread.gmane.org/address@hidden>.

I can reproduce the crash quite reliably.  Here is some GDB output:

--8<---------------cut here---------------start------------->8---
(gdb) run
Starting program: c:/Programme/Emacs/bin/emacs.exe 

Program received signal SIGTRAP, Trace/breakpoint trap.
[Switching to thread 2756.0xb48]
0x7c911231 in _libkernel32_a_iname ()
(gdb) warning: HEAP[emacs.exe]: 
warning: Invalid Address specified to RtlFreeHeap( 00840000, 00860608 )


(gdb) bt
#0  0x7c911231 in _libkernel32_a_iname ()
#1  0x7c97c943 in _libkernel32_a_iname ()
#2  0x7c97cd80 in _libkernel32_a_iname ()
#3  0x7c97df66 in _libkernel32_a_iname ()
#4  0x7c95a5d0 in _libkernel32_a_iname ()
#5  0x7c9368ad in _libkernel32_a_iname ()
#6  0x0112de8e in w32_free_submenu_strings (menu=0x603cf) at w32menu.c:2497
#7  0x0112de65 in w32_free_submenu_strings (menu=0x403df) at w32menu.c:2502
#8  0x0112ded5 in w32_free_menu_strings (hwnd=0x8023a) at w32menu.c:2520
#9  0x01137aa4 in w32_wnd_proc (hwnd=0x8023a, msg=275, wParam=3, lParam=0)
    at w32fns.c:3417
#10 0x77d18734 in _libkernel32_a_iname ()
#11 0x77d18816 in _libkernel32_a_iname ()
#12 0x77d1c63f in _libkernel32_a_iname ()
#13 0x77d1e905 in _libkernel32_a_iname ()
#14 0x6d18160b in _libwinspool_a_iname ()
#15 0x77d18734 in _libkernel32_a_iname ()
#16 0x77d18816 in _libkernel32_a_iname ()
#17 0x77d189cd in _libkernel32_a_iname ()
#18 0x77d196c7 in _libkernel32_a_iname ()
#19 0x01136522 in w32_msg_pump (msg_buf=0x113) at w32fns.c:2587
#20 0x01138687 in w32_msg_worker (arg=0x0) at w32fns.c:2711
#21 0x7c80b683 in _libkernel32_a_iname ()
--8<---------------cut here---------------end--------------->8---

And here the output of `report-emacs-bug':

--8<---------------cut here---------------start------------->8---
In GNU Emacs 22.0.93.1 (i386-mingw-nt5.1.2600)
 of 2007-01-26 on NEUTRINO
X server distributor `Microsoft Corp.', version 5.1.2600
configured using `configure --with-gcc (3.4) --cflags 
-Ic:/Programme/GnuWin32/include'

Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: nil
  value of $LC_CTYPE: nil
  value of $LC_MESSAGES: nil
  value of $LC_MONETARY: nil
  value of $LC_NUMERIC: nil
  value of $LC_TIME: nil
  value of $LANG: DEU
  locale-coding-system: cp1252
  default-enable-multibyte-characters: t

Major mode: Message

Minor modes in effect:
  mml-mode: t
  show-paren-mode: t
  savehist-mode: t
  recentf-mode: t
  iswitchb-mode: t
  display-time-mode: t
  desktop-save-mode: t
  encoded-kbd-mode: t
  tooltip-mode: t
  mouse-wheel-mode: t
  menu-bar-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  blink-cursor-mode: t
  unify-8859-on-encoding-mode: t
  utf-translate-cjk-mode: t
  auto-compression-mode: t
  column-number-mode: t
  line-number-mode: t
  transient-mark-mode: t
  abbrev-mode: t

Recent input:
C-f C-f C-f C-f C-f C-f C-f C-f C-f C-f C-f C-f C-f 
C-f C-f C-f C-f C-f C-f C-f C-f C-f C-f C-f C-f C-f 
C-f C-f C-SPC M-f M-f M-f M-w <switch-frame> C-n C-n 
C-n C-n C-n C-p C-p C-p C-p <return> A n d SPC h e 
r e SPC t h e SPC o u t p u t SPC o f SPC ` r e p o 
r t - e m a c s - b u g ' : <return> <return> M-x r 
e p o r t - e m <tab> <return>

Recent messages:
Fetching headers for nntp+news.gmane.org:gmane.emacs.pretest.bugs...done
Scoring...done
Generating summary...done
No more unread articles
Mark saved where search started
End of message [8 times]
Mark set
Auto-saving...
Mark set
Loading emacsbug...done
--8<---------------cut here---------------end--------------->8---

I'm a bit in a hurry now, but I can check if the crash does not happen
when MENU_FREE_DELAY is set to 0.

For now I'll advise the original bug reporter to leave his hands off
the menus when using the Windows port of Emacs. )c:

-- 
Ralf