SIGSEGV in remove_properties

[Juri Linkov]

Emacs crashed somewhere inside fontification invoked by the timer.
It seems this is not reproducible.

I will keep this gdb session running for several days, so I can
provide more information.

In GNU Emacs 22.0.50 (i686-pc-linux-gnu) of 2005-03-05

Program received signal SIGSEGV, Segmentation fault.
0x081844ab in remove_properties (plist=-8, list=137345817, i=0x8fc1ba0, 
    object=145405308) at textprop.c:489
489               this = XCDR (XCDR (tail2));
(gdb) bt
#0  0x081844ab in remove_properties (plist=-8, list=137345817, i=0x8fc1ba0, 
    object=145405308) at textprop.c:489
#1  0x08186057 in Fremove_text_properties (start=124224, end=124568, 
    properties=144658909, object=145405308) at textprop.c:1542
#2  0x08146ab9 in Ffuncall (nargs=4, args=0xbfffda50) at eval.c:2797
#3  0x0816f88e in Fbyte_code (bytestr=137597721, vector=3, 
    maxdepth=-1073751360) at bytecode.c:686
#4  0x08146e53 in funcall_lambda (fun=144936700, nargs=2, 
    arg_vector=0xbfffdbf4) at eval.c:2974
#5  0x0814693d in Ffuncall (nargs=3, args=0xbfffdbf0) at eval.c:2843
#6  0x0816f88e in Fbyte_code (bytestr=137597721, vector=2, 
    maxdepth=-1073751056) at bytecode.c:686
#7  0x08146e53 in funcall_lambda (fun=140618748, nargs=2, 
    arg_vector=0xbfffdd24) at eval.c:2974
#8  0x0814693d in Ffuncall (nargs=3, args=0xbfffdd20) at eval.c:2843
#9  0x0816f88e in Fbyte_code (bytestr=137597721, vector=2, 
    maxdepth=-1073750752) at bytecode.c:686
#10 0x08146e53 in funcall_lambda (fun=140665684, nargs=3, 
    arg_vector=0xbfffde64) at eval.c:2974
#11 0x0814693d in Ffuncall (nargs=4, args=0xbfffde60) at eval.c:2843
#12 0x0816f88e in Fbyte_code (bytestr=140859609, vector=3, 
    maxdepth=-1073750432) at bytecode.c:686
#13 0x08146e53 in funcall_lambda (fun=140729540, nargs=2, 
    arg_vector=0xbfffe098) at eval.c:2974
#14 0x0814693d in Ffuncall (nargs=3, args=0xbfffe094) at eval.c:2843
#15 0x081464ce in run_hook_with_args (nargs=3, args=0xbfffe094, 
    cond=to_completion) at eval.c:2452
#16 0x0814637e in Frun_hook_with_args (nargs=-8, args=0xfffffff8)
    at eval.c:2340
#17 0x08146bf7 in Ffuncall (nargs=4, args=0xbfffe090) at eval.c:2767
#18 0x0816f88e in Fbyte_code (bytestr=137602065, vector=3, 
    maxdepth=-1073749872) at bytecode.c:686
#19 0x08145eec in Feval (form=137071896) at eval.c:2138
#20 0x08144c0a in Fcondition_case (args=137345817) at eval.c:1332
#21 0x0817080b in Fbyte_code (bytestr=137602065, vector=143, 
    maxdepth=-1073749232) at bytecode.c:864
#22 0x08146e53 in funcall_lambda (fun=144925004, nargs=2, 
    arg_vector=0xbfffe454) at eval.c:2974
#23 0x0814693d in Ffuncall (nargs=3, args=0xbfffe450) at eval.c:2843
#24 0x0816f88e in Fbyte_code (bytestr=144759001, vector=2, 
    maxdepth=-1073748912) at bytecode.c:686
#25 0x08145eec in Feval (form=137071896) at eval.c:2138
#26 0x08144c0a in Fcondition_case (args=137345817) at eval.c:1332
#27 0x0817080b in Fbyte_code (bytestr=137496417, vector=143, 
    maxdepth=-1073748256) at bytecode.c:864
#28 0x08146e53 in funcall_lambda (fun=144926820, nargs=0, 
    arg_vector=0xbfffe8d8) at eval.c:2974
#29 0x0814693d in Ffuncall (nargs=1, args=0xbfffe8d4) at eval.c:2843
#30 0x08146235 in Fapply (nargs=2, args=0xbfffe8d4) at eval.c:2284
#31 0x08146bf7 in Ffuncall (nargs=3, args=0xbfffe8d0) at eval.c:2767
#32 0x0816f88e in Fbyte_code (bytestr=139424729, vector=2, 
    maxdepth=-1073747760) at bytecode.c:686
#33 0x08145eec in Feval (form=137071896) at eval.c:2138
#34 0x08144c0a in Fcondition_case (args=137345817) at eval.c:1332
#35 0x0817080b in Fbyte_code (bytestr=139424729, vector=143, 
    maxdepth=-1073747120) at bytecode.c:864
#36 0x08146e53 in funcall_lambda (fun=136754628, nargs=1, 
    arg_vector=0xbfffecb4) at eval.c:2974
#37 0x0814693d in Ffuncall (nargs=2, args=0xbfffecb0) at eval.c:2843
#38 0x081466f0 in call1 (fn=137397561, arg1=144815428) at eval.c:2578
#39 0x080e8751 in timer_check (do_it_now=1) at keyboard.c:4452
#40 0x080e76ab in readable_events (flags=1) at keyboard.c:3511
#41 0x080eab2d in get_input_pending (addr=0x82ee214, flags=1)
    at keyboard.c:6542
#42 0x080ef388 in detect_input_pending_run_timers (do_display=1)
    at keyboard.c:9880
#43 0x08176740 in wait_reading_process_output (time_limit=75, microsecs=0, 
    read_kbd=-1, do_display=1, wait_for_cell=137345817, wait_proc=0x0, 
    just_wait_proc=0) at process.c:4453
#44 0x08056db7 in sit_for (sec=75, usec=0, reading=1, display=1, 
    initial_display=0) at dispnew.c:6367
#45 0x080e69f6 in read_char (commandflag=1, nmaps=4, maps=0xbffff2bc, 
    prev_event=137345817, used_mouse_menu=0xbffff2f8) at keyboard.c:2769
#46 0x080ed414 in read_key_sequence (keybuf=0xbffff420, bufsize=30, 
    prompt=137345817, dont_downcase_last=0, can_return_switch_frame=1, 
    fix_current_buffer=1) at keyboard.c:8803
#47 0x080e3c43 in command_loop_1 () at keyboard.c:1538
#48 0x08144d1e in internal_condition_case (bfun=0x80e3ab0 <command_loop_1>, 
    handlers=137406817, hfun=0x80e35a0 <cmd_error>) at eval.c:1385
#49 0x080e38fe in command_loop_2 () at keyboard.c:1319
#50 0x0814485b in internal_catch (tag=-8, func=0x80e38d0 <command_loop_2>, 
    arg=137345817) at eval.c:1144
#51 0x080e38a3 in command_loop () at keyboard.c:1298
#52 0x080e3304 in recursive_edit_1 () at keyboard.c:991
#53 0x080e3441 in Frecursive_edit () at keyboard.c:1052
#54 0x080e19ad in main (argc=1, argv=0xbffffaa4) at emacs.c:1767
(gdb) xbt
"remove-text-properties"
"cperl-font-lock-unfontify-region-function"
"font-lock-unfontify-region"
"font-lock-default-fontify-region"
"font-lock-fontify-region"
"run-hook-with-args"
"byte-code"
"jit-lock-fontify-now"
"byte-code"
"jit-lock-stealth-fontify"
"apply"
"byte-code"
"timer-event-handler"
(gdb) p tail2
$2 = 135956603
(gdb) xty
Lisp_String
(gdb) xstr
$3 = (struct Lisp_String *) 0x81a8878
"nil"

-- 
Juri Linkov
http://www.jurta.org/emacs/