[Octave-bug-tracker] [bug #63180] Octave crashes opening a GUI with an indexed object and menu with callback

[Markus Mützel]

Follow-up Comment #2, bug #63180 (project octave):

Same with a current build (not stripped) from the default branch (hg id
6cf7dab21e9b) on Windows.


Thread 31 hit Breakpoint 1, 0x00007ff9f3c82547 in msvcrt!abort () from
C:\WINDOWS\System32\msvcrt.dll
(gdb) bt
#0  0x00007ff9f3c82547 in msvcrt!abort () from C:\WINDOWS\System32\msvcrt.dll
#1  0x00007ff99efd2b56 in ?? () from C:\msys64\mingw64\bin\libstdc++-6.dll
#2  0x00007ff99efc5706 in ?? () from C:\msys64\mingw64\bin\libstdc++-6.dll
#3  0x00007ff99f0cad83 in ?? () from C:\msys64\mingw64\bin\libstdc++-6.dll
#4  0x00007ff99efc5c59 in ?? () from C:\msys64\mingw64\bin\libstdc++-6.dll
#5  0x00007ff9eb56275d in ?? () from C:\msys64\mingw64\bin\libgcc_s_seh-1.dll
#6  0x00007ff99f0cbbc5 in ?? () from C:\msys64\mingw64\bin\libstdc++-6.dll
#7  0x00007ff9f58b3e1f in ntdll!.chkstk () from C:\WINDOWS\SYSTEM32\ntdll.dll
#8  0x00007ff9f582eae6 in ntdll!RtlFindCharInUnicodeString () from
C:\WINDOWS\SYSTEM32\ntdll.dll
#9  0x00007ff9f58b2e0e in ntdll!KiUserExceptionDispatcher () from
C:\WINDOWS\SYSTEM32\ntdll.dll
#10 0x00007ff9f2dffaec in RaiseException () from
C:\WINDOWS\System32\KernelBase.dll
#11 0x00007ff9eb562811 in ?? () from C:\msys64\mingw64\bin\libgcc_s_seh-1.dll
#12 0x00007ff99f0cb379 in ?? () from C:\msys64\mingw64\bin\libstdc++-6.dll
#13 0x00007ff906ff4d07 in octave::error_system::throw_error
(this=this@entry=0x1c8088f9a48, ex=...) at ../libinterp/corefcn/error.cc:890
#14 0x00007ff906a0234d in octave::error_system::throw_error
(this=this@entry=0x1c8088f9a48, err_type="error", id="",
    message="break_closure_cycles: invalid object", stack_info_arg=empty
std::__cxx11::list) at ../libinterp/corefcn/error.cc:885
#15 0x00007ff906a02600 in octave::error_system::error_1 (this=0x1c8088f9a48,
id=<optimized out>, fmt=<optimized out>, args=<optimized out>)
    at ../libinterp/corefcn/error.cc:580
#16 0x00007ff906a02666 in error_1 (
    id=0x7ff90707d7e7 <typeinfo name for
std::_Bind<octave::Fdlmread(octave::interpreter&, octave_value_list const&,
int)::{lambda()#1} ()>+9639> "",
    fmt=0x7ff9070220f5 "%s: invalid object", args=0x9b72ffbaf8
"¥!\002\aù\177") at ../libinterp/corefcn/error.cc:90
#17 0x00007ff906a02686 in verror (fmt=0x1 <error: Cannot access memory at
address 0x1>, args=0x7ff9f3cee7a0 "P\vø\vÈ\001")
    at ../libinterp/corefcn/error.cc:975
#18 0x00007ff906a026b2 in error (fmt=0x1c88012e8b0 "à}\f\aù\177") at
../libinterp/corefcn/error.cc:983
#19 0x00007ff906e9c4f7 in octave::cdef_object_rep::err_invalid_object
(who=0x7ff9070221a5 "break_closure_cycles", this=<optimized out>)
    at ../libinterp/octave-value/cdef-object.h:197
#20 octave::cdef_object_rep::break_closure_cycles (this=<optimized out>) at
../libinterp/octave-value/cdef-object.h:123
#21 0x00007ff906d1675f in octave::user_fcn_stack_frame::break_closure_cycles
(this=0x1c809cfa7e0,
    frame=std::shared_ptr<octave::stack_frame> (use count 3, weak count 0) =
{...}) at ../libinterp/corefcn/stack-frame.cc:2375
#22 0x00007ff906948177 in octave::call_stack::pop (this=0x1c8088fa890) at
../libinterp/corefcn/call-stack.cc:769
#23 0x00007ff906807ef7 in std::function<void ()>::operator()() const
(this=0x9b72ffbbf0)
    at C:/msys64/mingw64/include/c++/12.2.0/bits/std_function.h:587
#24 octave::unwind_action::run (this=0x9b72ffbbf0) at
../liboctave/util/unwind-prot.h:204
#25 octave::unwind_action::~unwind_action (this=0x9b72ffbbf0,
__in_chrg=<optimized out>) at ../liboctave/util/unwind-prot.h:185
#26 octave_user_function::call (this=this@entry=0x1c809f2c3a0, tw=...,
nargout=nargout@entry=0, args=...)
    at ../libinterp/octave-value/ov-usr-fcn.cc:488
#27 0x00007ff9068ad6fa in octave::tree_identifier::evaluate_n (this=<optimized
out>, tw=..., nargout=0) at ../libinterp/parse-tree/pt-id.cc:130
#28 0x00007ff906ea245a in octave::tree_identifier::evaluate (this=<optimized
out>, tw=..., nargout=<optimized out>)
    at ../libinterp/parse-tree/pt-id.h:98
#29 0x00007ff9068a3ee6 in octave::tree_evaluator::visit_statement
(this=0x1c8088fa768, stmt=...) at ../libinterp/parse-tree/pt-eval.cc:3940
#30 0x00007ff90688fe1b in octave::tree_statement::accept (tw=...,
this=0x1c881228f60) at ../libinterp/parse-tree/pt-stmt.h:124
#31 octave::tree_evaluator::visit_statement_list (this=0x1c8088fa768, lst=...)
at ../libinterp/parse-tree/pt-eval.cc:4025
#32 0x00007ff9068927a8 in octave::tree_statement_list::accept (tw=...,
this=<optimized out>) at ../libinterp/parse-tree/pt-stmt.h:201
#33 octave::tree_evaluator::eval (this=0x1c8088fa768, stmt_list=...,
interactive=<optimized out>) at ../libinterp/parse-tree/pt-eval.cc:985
--Type <RET> for more, q to quit, c to continue without paging--c
#34 0x00007ff9068a00b1 in octave::tree_evaluator::repl
(this=this@entry=0x1c8088fa768) at ../libinterp/parse-tree/pt-eval.cc:804
#35 0x00007ff906bb13a1 in octave::interpreter::main_loop (this=0x1c8088f9940)
at ../libinterp/corefcn/interpreter.cc:1350
#36 octave::interpreter::execute (this=this@entry=0x1c8088f9940) at
../libinterp/corefcn/interpreter.cc:916
#37 0x00007ff94da59561 in octave::interpreter_qobject::execute
(this=0x1c80db14480) at ../libgui/src/interpreter-qobject.cc:89
#38 0x00007ff9938c166b in QObject::event(QEvent*) () from
C:\msys64\mingw64\bin\Qt5Core.dll
#39 0x00007ff98d9c7bfe in QApplicationPrivate::notify_helper(QObject*,
QEvent*) () from C:\msys64\mingw64\bin\Qt5Widgets.dll
#40 0x00007ff94dab6343 in octave::octave_qapplication::notify
(this=0x1c80dabc070, receiver=<optimized out>, ev=<optimized out>) at
../libgui/src/octave-qobject.cc:148
#41 0x00007ff993894ef8 in QCoreApplication::notifyInternal2(QObject*, QEvent*)
() from C:\msys64\mingw64\bin\Qt5Core.dll
#42 0x00007ff99389b298 in QCoreApplicationPrivate::sendPostedEvents(QObject*,
int, QThreadData*) () from C:\msys64\mingw64\bin\Qt5Core.dll
#43 0x00007ff9938ef20c in
QEventDispatcherWin32::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) ()
from C:\msys64\mingw64\bin\Qt5Core.dll
#44 0x00007ff993893ad3 in
QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from
C:\msys64\mingw64\bin\Qt5Core.dll
#45 0x00007ff9936c9751 in QThread::run() () from
C:\msys64\mingw64\bin\Qt5Core.dll
#46 0x00007ff9936ca38d in QThreadPrivate::start(void*) () from
C:\msys64\mingw64\bin\Qt5Core.dll
#47 0x00007ff9f469244d in KERNEL32!BaseThreadInitThunk () from
C:\WINDOWS\System32\kernel32.dll
#48 0x00007ff9f586df78 in ntdll!RtlUserThreadStart () from
C:\WINDOWS\SYSTEM32\ntdll.dll
#49 0x0000000000000000 in ?? ()
Backtrace stopped: previous frame inner to this frame (corrupt stack?)
(gdb)


Really, looks like an invalid classdef object from somewhere.

CC'ing jwe since he is the only one who has a decent understanding of the
classdef code afaict.


    _______________________________________________________

Reply to this item at:

  <https://savannah.gnu.org/bugs/?63180>

_______________________________________________
Message sent via Savannah
https://savannah.gnu.org/