GNU bug report logs - #22818
25.0.91; nextstep/Emacs.app Crash ns_compute_glyph_string_overhangs

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: emacs; Reported by: "Aaron S. Hawley" <aaron.s.hawley@HIDDEN>; dated Fri, 26 Feb 2016 13:43:02 UTC; Maintainer for emacs is bug-gnu-emacs@HIDDEN.
Removed tag(s) unreproducible. Request was from Stefan Kangas <stefan@HIDDEN> to control <at> debbugs.gnu.org. Full text available.

Message received at 22818 <at> debbugs.gnu.org:


Received: (at 22818) by debbugs.gnu.org; 19 Nov 2016 19:38:55 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Nov 19 14:38:55 2016
Received: from localhost ([127.0.0.1]:35330 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1c8BTT-0003Ti-9H
	for submit <at> debbugs.gnu.org; Sat, 19 Nov 2016 14:38:55 -0500
Received: from mail-wj0-f169.google.com ([209.85.210.169]:35487)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <athird@HIDDEN>) id 1c8BTR-0003TV-SC
 for 22818 <at> debbugs.gnu.org; Sat, 19 Nov 2016 14:38:54 -0500
Received: by mail-wj0-f169.google.com with SMTP id v7so9918064wjy.2
 for <22818 <at> debbugs.gnu.org>; Sat, 19 Nov 2016 11:38:53 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=googlemail.com; s=20120113;
 h=sender:date:from:to:cc:subject:message-id:references:mime-version
 :content-disposition:in-reply-to:user-agent;
 bh=Ulen1+mY328dwcXY89pVwNybPIYDxThSDqJecTzW36Y=;
 b=dt2gVxojStgELwXynOPgH9zcKjigXfGGJkyl36N7WheV3QgjrOfJSjZ6rwc/RNyPFk
 wD3nA6KGJBsUlbDNYdXsWaV9qnxAfeY4uGg4Clqn+E4gZB9HPS3p8cSZFOMr1AxpZNkI
 7SmZHV12oNET/4IscVUBYoIeimvFGfidJv0ncI2aHJPiNBS8nOig1TbFVWMMZuVVtw41
 gh5GP4W8eAIO7wHnMC7sLc5/0yObI9lDngyV4qTGQ5RSy/QoVKELiwSSKQ/Q/ow+hS0M
 HK40y3ov67yE7koE26DVYmu2dL3ghrB3M/tZyW+roL6OnBujnbm/MHkOF8QdzgJYnOG4
 MCtA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:sender:date:from:to:cc:subject:message-id
 :references:mime-version:content-disposition:in-reply-to:user-agent;
 bh=Ulen1+mY328dwcXY89pVwNybPIYDxThSDqJecTzW36Y=;
 b=MwjEIR5Fmx6dYMxd3cc+YtHSr2bfQA90feMd4jFVlVJHZyZ6ZdGHguPBcGB5jptbit
 38Po8rKx7nQamL9jIF3UiFP2SPE30NITyMNV5UWvZBY2gqEQTKrZy2shKF0dlIu3IEka
 b/Sd8iIhO6+5oo1jD847uRjlg5Qy2WkJoTUYKdDWEeN1yqx3cm9NT228yY/0REg5H09f
 af+MZrOmEWcKm34lczF/eGdlBS6oxCX7KyUTAb+sDGArwaRraTKZKvTYXGFl83eh/j/7
 aI5HlZMqls87jdOg7LoBW+IlFWYtyx3rirwJFGb3BMDmfzDWV5GEGjGDRqmBbM6RxK9i
 GNQA==
X-Gm-Message-State: AKaTC03mnxWcPQ7eztI8HTP+tZEpTvW+buXlHw2WiDM6gktl64whT0CsQeGlf3Xv+hmsMg==
X-Received: by 10.194.20.68 with SMTP id l4mr3777564wje.49.1479584328200;
 Sat, 19 Nov 2016 11:38:48 -0800 (PST)
Received: from breton.holly.idiocy.org
 (ip6-2001-08b0-03f8-8129-6c02-5eab-bb15-1042.holly.idiocy.org.
 [2001:8b0:3f8:8129:6c02:5eab:bb15:1042])
 by smtp.gmail.com with ESMTPSA id w8sm5774951wmw.4.2016.11.19.11.38.47
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Sat, 19 Nov 2016 11:38:47 -0800 (PST)
Date: Sat, 19 Nov 2016 19:38:45 +0000
From: Alan Third <alan@HIDDEN>
To: Eli Zaretskii <eliz@HIDDEN>
Subject: Re: bug#22818: 25.1.1 Emacs.app crash
 ns_compute_glyph_string_overhangs
Message-ID: <20161119193845.GA36809@HIDDEN>
References: <20161119100703.GA66661@HIDDEN>
 <83k2bzbw8g.fsf@HIDDEN>
 <20161119111823.GA66770@HIDDEN>
 <83inrjbsq2.fsf@HIDDEN>
 <20161119145336.GA591@HIDDEN>
 <83d1hrbj71.fsf@HIDDEN>
 <20161119155112.GB591@HIDDEN>
 <83bmxbbaq0.fsf@HIDDEN>
 <20161119190539.GA36653@HIDDEN>
 <83y40f9snb.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <83y40f9snb.fsf@HIDDEN>
User-Agent: Mutt/1.7.0 (2016-08-17)
X-Spam-Score: -0.0 (/)
X-Debbugs-Envelope-To: 22818
Cc: 22818 <at> debbugs.gnu.org, josh@HIDDEN
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.0 (/)

On Sat, Nov 19, 2016 at 09:27:52PM +0200, Eli Zaretskii wrote:
> > 
> > (gdb) p lface_id_to_name[17]
> > $1 = 31008
> > (gdb) xsymbol
> > $2 = (struct Lisp_Symbol *) 0x7ab8
> > Cannot access memory at address 0x7ac0
> > (gdb) p next_lface_id
> > $3 = 84
> 
> Strange.  What about other indices between zero and 83?  Are they all
> invalid symbols like this one?

As far as I can see, yes.
-- 
Alan Third




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#22818; Package emacs. Full text available.

Message received at 22818 <at> debbugs.gnu.org:


Received: (at 22818) by debbugs.gnu.org; 19 Nov 2016 19:28:14 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Nov 19 14:28:14 2016
Received: from localhost ([127.0.0.1]:35326 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1c8BJ8-0003Bg-6c
	for submit <at> debbugs.gnu.org; Sat, 19 Nov 2016 14:28:14 -0500
Received: from eggs.gnu.org ([208.118.235.92]:57507)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <eliz@HIDDEN>) id 1c8BJ6-0003BU-0H
 for 22818 <at> debbugs.gnu.org; Sat, 19 Nov 2016 14:28:12 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <eliz@HIDDEN>) id 1c8BIx-0005sr-NX
 for 22818 <at> debbugs.gnu.org; Sat, 19 Nov 2016 14:28:06 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_50,RP_MATCHES_RCVD
 autolearn=disabled version=3.3.2
Received: from fencepost.gnu.org ([2001:4830:134:3::e]:47470)
 by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from <eliz@HIDDEN>)
 id 1c8BIx-0005sn-Jt; Sat, 19 Nov 2016 14:28:03 -0500
Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:4774
 helo=home-c4e4a596f7)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128)
 (Exim 4.82) (envelope-from <eliz@HIDDEN>)
 id 1c8BIu-0001td-QG; Sat, 19 Nov 2016 14:28:03 -0500
Date: Sat, 19 Nov 2016 21:27:52 +0200
Message-Id: <83y40f9snb.fsf@HIDDEN>
From: Eli Zaretskii <eliz@HIDDEN>
To: Alan Third <alan@HIDDEN>
In-reply-to: <20161119190539.GA36653@HIDDEN> (message from
 Alan Third on Sat, 19 Nov 2016 19:05:39 +0000)
Subject: Re: bug#22818: 25.1.1 Emacs.app crash
 ns_compute_glyph_string_overhangs
References: <jk60igfumowk3e.fsf@HIDDEN> <83twb4aqwp.fsf@HIDDEN>
 <20161119100703.GA66661@HIDDEN>
 <83k2bzbw8g.fsf@HIDDEN>
 <20161119111823.GA66770@HIDDEN>
 <83inrjbsq2.fsf@HIDDEN>
 <20161119145336.GA591@HIDDEN>
 <83d1hrbj71.fsf@HIDDEN>
 <20161119155112.GB591@HIDDEN>
 <83bmxbbaq0.fsf@HIDDEN> <20161119190539.GA36653@HIDDEN>
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-Received-From: 2001:4830:134:3::e
X-Spam-Score: -7.9 (-------)
X-Debbugs-Envelope-To: 22818
Cc: 22818 <at> debbugs.gnu.org, josh@HIDDEN
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Reply-To: Eli Zaretskii <eliz@HIDDEN>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -7.9 (-------)

> Date: Sat, 19 Nov 2016 19:05:39 +0000
> From: Alan Third <alan@HIDDEN>
> Cc: josh@HIDDEN, 22818 <at> debbugs.gnu.org
> 
> >   (gdb) break Fredraw_display
> >   (gdb) r -Q
> > 
> > Then, after Emacs starts up, type "M-x redraw-display RET", and at the
> > GDB prompt type:
> > 
> >   (gdb) p lface_id_to_name[17]
> >   (gdb) xsymbol
> > 
> > What does that show?
> > 
> > And what is the value of next_lface_id at that point?
> 
> (gdb) p lface_id_to_name[17]
> $1 = 31008
> (gdb) xsymbol
> $2 = (struct Lisp_Symbol *) 0x7ab8
> Cannot access memory at address 0x7ac0
> (gdb) p next_lface_id
> $3 = 84

Strange.  What about other indices between zero and 83?  Are they all
invalid symbols like this one?




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#22818; Package emacs. Full text available.

Message received at 22818 <at> debbugs.gnu.org:


Received: (at 22818) by debbugs.gnu.org; 19 Nov 2016 19:05:50 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Nov 19 14:05:50 2016
Received: from localhost ([127.0.0.1]:35318 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1c8AxS-0002Zv-9X
	for submit <at> debbugs.gnu.org; Sat, 19 Nov 2016 14:05:50 -0500
Received: from mail-wj0-f172.google.com ([209.85.210.172]:36191)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <athird@HIDDEN>) id 1c8AxQ-0002Zc-ML
 for 22818 <at> debbugs.gnu.org; Sat, 19 Nov 2016 14:05:49 -0500
Received: by mail-wj0-f172.google.com with SMTP id qp4so9720262wjc.3
 for <22818 <at> debbugs.gnu.org>; Sat, 19 Nov 2016 11:05:48 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=googlemail.com; s=20120113;
 h=sender:date:from:to:cc:subject:message-id:references:mime-version
 :content-disposition:in-reply-to:user-agent;
 bh=Q7TuBQ0dMZsEKGyKTdOeEarXL6UgBVMJIkjAy2KZGR0=;
 b=ldnZ2dLiDl/zLWmgFCRNiPFGPqgorh+EJH+/5xSlip9ox5bTGHB/4C/vyNv7ozzUiu
 qv8yfCD8xyx64rpGHZQ6/6pGJimtno92qJssamG+bmWpLtw0SVr2qvUmgCEjZM9gRM8q
 49GLa2KZq3FKxnuvPQQDKisWTFZs7GhqfLTrTZqRAvbpPJWlmB0L9qnb17PCgoPyiowH
 mrssQi2Q8oww1t+T7uG39doXg0CDGgMTLTc7tBrIZGSG+ho64YJGgCGHqoJxJDs1OOv2
 4GQbKqONfMbl8dc81zrbYDjCriiMJnvYQKL9mtqUDNxF2ytfS4ug8G0wkVqZj+GEj1x/
 iLbQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:sender:date:from:to:cc:subject:message-id
 :references:mime-version:content-disposition:in-reply-to:user-agent;
 bh=Q7TuBQ0dMZsEKGyKTdOeEarXL6UgBVMJIkjAy2KZGR0=;
 b=iM71bd/NYMQ3PnR4sSKgONe5Ik5gQJsdA7z1zRiIqXk+KEG2/xbVhr5iw2PDHoJ5Lw
 AsEziEKdvF0SW43gZwpPyWjn7DwsBzf9rKAHS23kvyL8XGh6EYEAmFsqJqH//wstJlTz
 yEzNP/3uZ27UuwqBe9q8a24kiNWeeTbF2Wzs30IpnJ/bHCrNcLyMxGXNn1hNqL1NBKe9
 xnigidK7/BH9qtHxJugHjFYXsDwU2UEkwuZor59FUQddFGgODiHQNjZGLiW7Eg24XzAS
 59+Q1pJKWu4Ocr37D+Wc5y1jfLQn+g3NB4yr0JzUkl8V9hl82YMj2K5tKUfrVx+Um2Ze
 oXjg==
X-Gm-Message-State: AKaTC00Bs7YrpECah+S4ziMnru7X+GUh7R0gt13qiXrIBHc6CeTZ1PXJKYsHPXrcEPTBjg==
X-Received: by 10.194.209.169 with SMTP id mn9mr3576074wjc.114.1479582342793; 
 Sat, 19 Nov 2016 11:05:42 -0800 (PST)
Received: from breton.holly.idiocy.org
 (ip6-2001-08b0-03f8-8129-6c02-5eab-bb15-1042.holly.idiocy.org.
 [2001:8b0:3f8:8129:6c02:5eab:bb15:1042])
 by smtp.gmail.com with ESMTPSA id 63sm10156439wmg.2.2016.11.19.11.05.41
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Sat, 19 Nov 2016 11:05:42 -0800 (PST)
Date: Sat, 19 Nov 2016 19:05:39 +0000
From: Alan Third <alan@HIDDEN>
To: Eli Zaretskii <eliz@HIDDEN>
Subject: Re: bug#22818: 25.1.1 Emacs.app crash
 ns_compute_glyph_string_overhangs
Message-ID: <20161119190539.GA36653@HIDDEN>
References: <jk60igfumowk3e.fsf@HIDDEN> <83twb4aqwp.fsf@HIDDEN>
 <20161119100703.GA66661@HIDDEN>
 <83k2bzbw8g.fsf@HIDDEN>
 <20161119111823.GA66770@HIDDEN>
 <83inrjbsq2.fsf@HIDDEN>
 <20161119145336.GA591@HIDDEN>
 <83d1hrbj71.fsf@HIDDEN>
 <20161119155112.GB591@HIDDEN>
 <83bmxbbaq0.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <83bmxbbaq0.fsf@HIDDEN>
User-Agent: Mutt/1.7.0 (2016-08-17)
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 22818
Cc: 22818 <at> debbugs.gnu.org, josh@HIDDEN
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.0 (/)

On Sat, Nov 19, 2016 at 08:12:07PM +0200, Eli Zaretskii wrote:
> > Date: Sat, 19 Nov 2016 15:51:12 +0000
> > From: Alan Third <alan@HIDDEN>
> > Cc: josh@HIDDEN, 22818 <at> debbugs.gnu.org
> > 
> > (gdb) p s->face.id
> > $1 = 17
> > (gdb) p lface_id_to_name[17]
> > $2 = 31008
> > (gdb) xsymbol
> > $3 = (struct Lisp_Symbol *) 0x7ab8
> > Cannot access memory at address 0x7ac0
> > (gdb) 
> 
> So I guess that face was freed or otherwise made invalid.  I thought
> we've got rid of these problems, sigh...
> 
> If you start "emacs -Q", let Emacs start up, and then look at that
> face ID, do you see a valid symbol?  IOW, do this:
> 
>   $ gdb ./emacs
>   ...
>   (gdb) break Fredraw_display
>   (gdb) r -Q
> 
> Then, after Emacs starts up, type "M-x redraw-display RET", and at the
> GDB prompt type:
> 
>   (gdb) p lface_id_to_name[17]
>   (gdb) xsymbol
> 
> What does that show?
> 
> And what is the value of next_lface_id at that point?

(gdb) p lface_id_to_name[17]
$1 = 31008
(gdb) xsymbol
$2 = (struct Lisp_Symbol *) 0x7ab8
Cannot access memory at address 0x7ac0
(gdb) p next_lface_id
$3 = 84

-- 
Alan Third




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#22818; Package emacs. Full text available.

Message received at 22818 <at> debbugs.gnu.org:


Received: (at 22818) by debbugs.gnu.org; 19 Nov 2016 18:12:18 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Nov 19 13:12:17 2016
Received: from localhost ([127.0.0.1]:35308 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1c8A7d-0000y4-MH
	for submit <at> debbugs.gnu.org; Sat, 19 Nov 2016 13:12:17 -0500
Received: from eggs.gnu.org ([208.118.235.92]:41052)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <eliz@HIDDEN>) id 1c8A7c-0000xj-2o
 for 22818 <at> debbugs.gnu.org; Sat, 19 Nov 2016 13:12:16 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <eliz@HIDDEN>) id 1c8A7S-0005WZ-RW
 for 22818 <at> debbugs.gnu.org; Sat, 19 Nov 2016 13:12:10 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_50,RP_MATCHES_RCVD
 autolearn=disabled version=3.3.2
Received: from fencepost.gnu.org ([2001:4830:134:3::e]:46008)
 by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from <eliz@HIDDEN>)
 id 1c8A7S-0005WV-OM; Sat, 19 Nov 2016 13:12:06 -0500
Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:4695
 helo=home-c4e4a596f7)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128)
 (Exim 4.82) (envelope-from <eliz@HIDDEN>)
 id 1c8A7R-0004em-Am; Sat, 19 Nov 2016 13:12:06 -0500
Date: Sat, 19 Nov 2016 20:12:07 +0200
Message-Id: <83bmxbbaq0.fsf@HIDDEN>
From: Eli Zaretskii <eliz@HIDDEN>
To: Alan Third <alan@HIDDEN>
In-reply-to: <20161119155112.GB591@HIDDEN> (message from Alan
 Third on Sat, 19 Nov 2016 15:51:12 +0000)
Subject: Re: bug#22818: 25.1.1 Emacs.app crash
 ns_compute_glyph_string_overhangs
References: <CAFw1JJ7Fbfognbq7uEhUgeN0B4pdxEtqkUo2sybf86FZBPYz+w@HIDDEN>
 <jk60igfumowk3e.fsf@HIDDEN> <83twb4aqwp.fsf@HIDDEN>
 <20161119100703.GA66661@HIDDEN>
 <83k2bzbw8g.fsf@HIDDEN>
 <20161119111823.GA66770@HIDDEN>
 <83inrjbsq2.fsf@HIDDEN>
 <20161119145336.GA591@HIDDEN>
 <83d1hrbj71.fsf@HIDDEN> <20161119155112.GB591@HIDDEN>
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-Received-From: 2001:4830:134:3::e
X-Spam-Score: -7.9 (-------)
X-Debbugs-Envelope-To: 22818
Cc: 22818 <at> debbugs.gnu.org, josh@HIDDEN
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Reply-To: Eli Zaretskii <eliz@HIDDEN>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -7.9 (-------)

> Date: Sat, 19 Nov 2016 15:51:12 +0000
> From: Alan Third <alan@HIDDEN>
> Cc: josh@HIDDEN, 22818 <at> debbugs.gnu.org
> 
> (gdb) p s->face.id
> $1 = 17
> (gdb) p lface_id_to_name[17]
> $2 = 31008
> (gdb) xsymbol
> $3 = (struct Lisp_Symbol *) 0x7ab8
> Cannot access memory at address 0x7ac0
> (gdb) 

So I guess that face was freed or otherwise made invalid.  I thought
we've got rid of these problems, sigh...

If you start "emacs -Q", let Emacs start up, and then look at that
face ID, do you see a valid symbol?  IOW, do this:

  $ gdb ./emacs
  ...
  (gdb) break Fredraw_display
  (gdb) r -Q

Then, after Emacs starts up, type "M-x redraw-display RET", and at the
GDB prompt type:

  (gdb) p lface_id_to_name[17]
  (gdb) xsymbol

What does that show?

And what is the value of next_lface_id at that point?




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#22818; Package emacs. Full text available.

Message received at 22818 <at> debbugs.gnu.org:


Received: (at 22818) by debbugs.gnu.org; 19 Nov 2016 15:51:22 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Nov 19 10:51:22 2016
Received: from localhost ([127.0.0.1]:35279 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1c87vG-0005cg-EH
	for submit <at> debbugs.gnu.org; Sat, 19 Nov 2016 10:51:22 -0500
Received: from mail-wj0-f173.google.com ([209.85.210.173]:34864)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <athird@HIDDEN>) id 1c87vE-0005cQ-SF
 for 22818 <at> debbugs.gnu.org; Sat, 19 Nov 2016 10:51:21 -0500
Received: by mail-wj0-f173.google.com with SMTP id v7so8384118wjy.2
 for <22818 <at> debbugs.gnu.org>; Sat, 19 Nov 2016 07:51:20 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=googlemail.com; s=20120113;
 h=sender:date:from:to:cc:subject:message-id:references:mime-version
 :content-disposition:content-transfer-encoding:in-reply-to
 :user-agent; bh=godURiKD9Scnv417rRVwwo/OCaixVjHmhVG+hd7gzoU=;
 b=f7lPfB+1sFdlrYoCqqGSWyw8TSq/IfCNajIVF/K+R/FUw5v4nCxUs8XN5j7j1i0u8g
 TEI7GMX9PRQhA63flbHFZxzz5oX/4qj8TC/xI+J2mDQcQd7HUnCnygJ9bvvhif8953hi
 opEz5OFhhlz02GTeAMtANSRADaheXPg5GtvNEW9fJ2vlztCr/w4yvagTmV5oajleEpLj
 BIzGaSGB6F2GA4BC4cVFIigkb8+5wrWPJFd1MY6HuqIrUlUkycugyukW8SwxGGx1OblD
 mbhJSxUjkYGrIAs/kX+MuRxMpzi5f8dLDR3lPRw15eV3of8aIMEFrgH1jOzIcfePZ9vD
 ZQFg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:sender:date:from:to:cc:subject:message-id
 :references:mime-version:content-disposition
 :content-transfer-encoding:in-reply-to:user-agent;
 bh=godURiKD9Scnv417rRVwwo/OCaixVjHmhVG+hd7gzoU=;
 b=O2BVD9u9sJ32toOXr3OGXU8e8mWpIiCVKKcF57ylU7GSUIRh4jLw6O+XrOelhBKPjF
 mEsqUji2T8h+DQ2ZJZ8Nl2zY34FibBEKHWpkaIRtn0jWm0tmZF+B2i7i5m5DsMXYMKQF
 IGFhwrPicmIL/QwtP+AmEgMC+/fYk1giUKxqwTSMzXAqv42nzlPY1EdsWJtKD4eMe5+O
 A7XIOoyNXqETAr2ZNMlFMQBTbG/RiK9tvdbO3YU9a2IKrHcH04NlMm1YXUB0sSRtJchs
 jjjThwxUvnwFtx+b+46aF8ZSU9KxfnviShEpUZhq3XUyTjWvzkyOmfbU2L1KXas1Y2cA
 oTVA==
X-Gm-Message-State: AKaTC01HG6c9BBu/iXQZZrYMYXk2EFjzSRL1DYudUwb2EEAFN9sZIEuiIHmATuPLDx1kBQ==
X-Received: by 10.194.121.6 with SMTP id lg6mr3813178wjb.105.1479570674960;
 Sat, 19 Nov 2016 07:51:14 -0800 (PST)
Received: from breton.holly.idiocy.org
 (ip6-2001-08b0-03f8-8129-6c02-5eab-bb15-1042.holly.idiocy.org.
 [2001:8b0:3f8:8129:6c02:5eab:bb15:1042])
 by smtp.gmail.com with ESMTPSA id d65sm9342134wmh.11.2016.11.19.07.51.13
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Sat, 19 Nov 2016 07:51:14 -0800 (PST)
Date: Sat, 19 Nov 2016 15:51:12 +0000
From: Alan Third <alan@HIDDEN>
To: Eli Zaretskii <eliz@HIDDEN>
Subject: Re: bug#22818: 25.1.1 Emacs.app crash
 ns_compute_glyph_string_overhangs
Message-ID: <20161119155112.GB591@HIDDEN>
References: <CAFw1JJ7Fbfognbq7uEhUgeN0B4pdxEtqkUo2sybf86FZBPYz+w@HIDDEN>
 <jk60igfumowk3e.fsf@HIDDEN> <83twb4aqwp.fsf@HIDDEN>
 <20161119100703.GA66661@HIDDEN>
 <83k2bzbw8g.fsf@HIDDEN>
 <20161119111823.GA66770@HIDDEN>
 <83inrjbsq2.fsf@HIDDEN>
 <20161119145336.GA591@HIDDEN>
 <83d1hrbj71.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <83d1hrbj71.fsf@HIDDEN>
User-Agent: Mutt/1.7.0 (2016-08-17)
X-Spam-Score: 0.5 (/)
X-Debbugs-Envelope-To: 22818
Cc: 22818 <at> debbugs.gnu.org, josh@HIDDEN
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.5 (/)

On Sat, Nov 19, 2016 at 05:09:06PM +0200, Eli Zaretskii wrote:
> > Date: Sat, 19 Nov 2016 14:53:36 +0000
> > From: Alan Third <alan@HIDDEN>
> > Cc: josh@HIDDEN, 22818 <at> debbugs.gnu.org
> > 
> > (gdb) p s->face.id
> > $2 = 17
> > (gdb) p lface_id_to_name[17]
> > $3 = 31008
> > (gdb) xsymbol(lface_id_to_name[17])
> > $4 = (struct Lisp_Symbol *) 0x7ab8
> > Cannot access memory at address 0x7ac0
> > 
> > am I doing this wrong?
> 
> The last command should be simply "xsymbol".  Those x* commands are
> defined such that they always operate on the last result printed by
> GDB.

Thanks, unfortunately it doesn’t look any different. I’ll paste my
whole gdb session in in case you can see me doing something stupid.

breton:/Users/alan/src/emacs/emacs-25/src>gdb ../nextstep/Emacs.app/Contents/MacOS/Emacs
GNU gdb (GDB) 7.12
Copyright (C) 2016 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-apple-darwin16.1.0".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from ../nextstep/Emacs.app/Contents/MacOS/Emacs...done.
SIGINT is used by the debugger.
Are you sure you want to change it? (y or n) [answered Y; input not from terminal]
DISPLAY = /private/tmp/com.apple.launchd.U7C5wbWrEt/org.macosforge.xquartz:0
TERM = xterm-256color
Breakpoint 1 at 0x100130a42: file emacs.c, line 354.
Temporary breakpoint 2 at 0x10015d86f: file sysdep.c, line 915.
(gdb) run -Q ~/test-file
Starting program: /Users/alan/src/emacs/emacs-25/nextstep/Emacs.app/Contents/MacOS/Emacs -Q ~/test-file
[New Thread 0x1403 of process 716]
warning: unhandled dyld version (15)
[New Thread 0x1207 of process 716]
[New Thread 0x1503 of process 716]
[New Thread 0x1603 of process 716]
[New Thread 0x1703 of process 716]
[New Thread 0x1803 of process 716]
[New Thread 0x1903 of process 716]
[New Thread 0x1a03 of process 716]
[New Thread 0x1b03 of process 716]

Thread 2 received signal SIGSEGV, Segmentation fault.
0x00000001002c0940 in ns_compute_glyph_string_overhangs (s=0x7fff5fbfb780)
    at nsterm.m:2681
2681	      if (EQ (font->driver->type, Qns))
(gdb) p s->face.id
$1 = 17
(gdb) p lface_id_to_name[17]
$2 = 31008
(gdb) xsymbol
$3 = (struct Lisp_Symbol *) 0x7ab8
Cannot access memory at address 0x7ac0
(gdb) 

I’ve tried building with CFLAGS set to:

-g
-g3
-gmodules

and gcc on OS X is actually CLang.
-- 
Alan Third




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#22818; Package emacs. Full text available.

Message received at 22818 <at> debbugs.gnu.org:


Received: (at 22818) by debbugs.gnu.org; 19 Nov 2016 15:09:09 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Nov 19 10:09:08 2016
Received: from localhost ([127.0.0.1]:35270 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1c87GO-0004Vj-Ms
	for submit <at> debbugs.gnu.org; Sat, 19 Nov 2016 10:09:08 -0500
Received: from eggs.gnu.org ([208.118.235.92]:49673)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <eliz@HIDDEN>) id 1c87GN-0004VV-Jx
 for 22818 <at> debbugs.gnu.org; Sat, 19 Nov 2016 10:09:07 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <eliz@HIDDEN>) id 1c87GF-00042k-DJ
 for 22818 <at> debbugs.gnu.org; Sat, 19 Nov 2016 10:09:02 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_50,RP_MATCHES_RCVD
 autolearn=disabled version=3.3.2
Received: from fencepost.gnu.org ([2001:4830:134:3::e]:42361)
 by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from <eliz@HIDDEN>)
 id 1c87GF-00042g-9f; Sat, 19 Nov 2016 10:08:59 -0500
Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:4551
 helo=home-c4e4a596f7)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128)
 (Exim 4.82) (envelope-from <eliz@HIDDEN>)
 id 1c87GE-00061q-Jj; Sat, 19 Nov 2016 10:08:59 -0500
Date: Sat, 19 Nov 2016 17:09:06 +0200
Message-Id: <83d1hrbj71.fsf@HIDDEN>
From: Eli Zaretskii <eliz@HIDDEN>
To: Alan Third <alan@HIDDEN>
In-reply-to: <20161119145336.GA591@HIDDEN> (message from Alan
 Third on Sat, 19 Nov 2016 14:53:36 +0000)
Subject: Re: bug#22818: 25.1.1 Emacs.app crash
 ns_compute_glyph_string_overhangs
References: <CAFw1JJ7Fbfognbq7uEhUgeN0B4pdxEtqkUo2sybf86FZBPYz+w@HIDDEN>
 <jk60igfumowk3e.fsf@HIDDEN> <83twb4aqwp.fsf@HIDDEN>
 <20161119100703.GA66661@HIDDEN>
 <83k2bzbw8g.fsf@HIDDEN>
 <20161119111823.GA66770@HIDDEN>
 <83inrjbsq2.fsf@HIDDEN> <20161119145336.GA591@HIDDEN>
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-Received-From: 2001:4830:134:3::e
X-Spam-Score: -7.9 (-------)
X-Debbugs-Envelope-To: 22818
Cc: 22818 <at> debbugs.gnu.org, josh@HIDDEN
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Reply-To: Eli Zaretskii <eliz@HIDDEN>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -7.9 (-------)

> Date: Sat, 19 Nov 2016 14:53:36 +0000
> From: Alan Third <alan@HIDDEN>
> Cc: josh@HIDDEN, 22818 <at> debbugs.gnu.org
> 
> (gdb) p s->face.id
> $2 = 17
> (gdb) p lface_id_to_name[17]
> $3 = 31008
> (gdb) xsymbol(lface_id_to_name[17])
> $4 = (struct Lisp_Symbol *) 0x7ab8
> Cannot access memory at address 0x7ac0
> 
> am I doing this wrong?

The last command should be simply "xsymbol".  Those x* commands are
defined such that they always operate on the last result printed by
GDB.

Thanks.




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#22818; Package emacs. Full text available.

Message received at 22818 <at> debbugs.gnu.org:


Received: (at 22818) by debbugs.gnu.org; 19 Nov 2016 14:53:46 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Nov 19 09:53:46 2016
Received: from localhost ([127.0.0.1]:34580 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1c871W-0003t7-FF
	for submit <at> debbugs.gnu.org; Sat, 19 Nov 2016 09:53:46 -0500
Received: from mail-wj0-f175.google.com ([209.85.210.175]:35687)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <athird@HIDDEN>) id 1c871U-0003sm-Sl
 for 22818 <at> debbugs.gnu.org; Sat, 19 Nov 2016 09:53:45 -0500
Received: by mail-wj0-f175.google.com with SMTP id v7so7995599wjy.2
 for <22818 <at> debbugs.gnu.org>; Sat, 19 Nov 2016 06:53:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=googlemail.com; s=20120113;
 h=sender:date:from:to:cc:subject:message-id:references:mime-version
 :content-disposition:content-transfer-encoding:in-reply-to
 :user-agent; bh=89aNhRCcru9+maYKr/Y8FcaSNirwOYD9ath3Jv7cDYM=;
 b=KHGz7G8H0kQHtVA2evwQjQyRfZcKcPNCz2xWehNkEE/NoPJo/k4oD3YTH8mUWk78Sl
 Ds5yTfwiaeeM1wgLxOyJ5YNnGSj+c5GS8B3ZeJ2rXxW8NuMhJLxSVGOceOKmUkCr6iH0
 DkEU1OF5b2RStC1M94mxdQcy+57zoVHeT3swnMey2cB8kBDjPVjuUMVDm3ApCJ2nKOkg
 XTna8hvzwCdED73H6AOqdOquig9qYdmne7uGi8Psv4fHe3NjbgYJOGHrXtxN4enWaM2i
 DpmoZyVyFMLKCYE2qE9Ks/wNN4AYHQPy6RSAj2vISI7jB9AWyu/C8qhYkccSEDRmzdZO
 CwMA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:sender:date:from:to:cc:subject:message-id
 :references:mime-version:content-disposition
 :content-transfer-encoding:in-reply-to:user-agent;
 bh=89aNhRCcru9+maYKr/Y8FcaSNirwOYD9ath3Jv7cDYM=;
 b=c/MIZSNLuJBFJrKAH591LRuxBOexdccZJ4E3BYazyOATbNykfq8++2OGBjzBeJhXsE
 /6ckwgqfbvHp7G7s5C0y0gpkwx/5tLkerw+hsnW+SPReoeQxvQaBnP3XrmghsjNzM0eP
 tAGQjioCcXmJ8cT00oTLBly859tiAjY6yhFT5FqXX8OfZoXQ+5iW6Sqc6bYHv/VchM+6
 LLFic3olqVu/ul4ZX6HjkeGYbCJtxnAtcArbjhGj8aFj6yPPCwqGVN0r9owz7WgcundV
 ZhWtTUoIsrZ3Qsd6hiBVqYMHn6B6ePd7MfoqDn0Fbyq+AB1JtTJCa7d6HkmqLG0OB4py
 DEzA==
X-Gm-Message-State: AKaTC00X2AtplbU+l+9AM/9MJY2qIKAPiLPR2MxheDlDYLwICO2/vf+6jnpiVlfX5LdMGw==
X-Received: by 10.194.141.141 with SMTP id ro13mr3072105wjb.76.1479567219119; 
 Sat, 19 Nov 2016 06:53:39 -0800 (PST)
Received: from breton.holly.idiocy.org (idiocy.org. [217.169.17.33])
 by smtp.gmail.com with ESMTPSA id t84sm9096396wmt.7.2016.11.19.06.53.38
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Sat, 19 Nov 2016 06:53:38 -0800 (PST)
Date: Sat, 19 Nov 2016 14:53:36 +0000
From: Alan Third <alan@HIDDEN>
To: Eli Zaretskii <eliz@HIDDEN>
Subject: Re: bug#22818: 25.1.1 Emacs.app crash
 ns_compute_glyph_string_overhangs
Message-ID: <20161119145336.GA591@HIDDEN>
References: <CAFw1JJ7Fbfognbq7uEhUgeN0B4pdxEtqkUo2sybf86FZBPYz+w@HIDDEN>
 <jk60igfumowk3e.fsf@HIDDEN> <83twb4aqwp.fsf@HIDDEN>
 <20161119100703.GA66661@HIDDEN>
 <83k2bzbw8g.fsf@HIDDEN>
 <20161119111823.GA66770@HIDDEN>
 <83inrjbsq2.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <83inrjbsq2.fsf@HIDDEN>
User-Agent: Mutt/1.7.0 (2016-08-17)
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 22818
Cc: 22818 <at> debbugs.gnu.org, josh@HIDDEN
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.0 (/)

On Sat, Nov 19, 2016 at 01:43:17PM +0200, Eli Zaretskii wrote:
> > Date: Sat, 19 Nov 2016 11:18:23 +0000
> > From: Alan Third <alan@HIDDEN>
> > Cc: josh@HIDDEN, 22818 <at> debbugs.gnu.org
> > 
> > I’m trying to work out how to do this, but in the mean‐time here’s s->face:
> > 
> > (lldb) fr v *s->face
> > (face) *s->face = {
> > [...]
> >   id = 19
> 
> What is the value of lface_id_to_name[19]?  It should be a Lisp
> symbol; if so, what is that symbol's name?  (The file src/.gdbinit
> defines a command, xsymbol, to display the name of a symbol, but I
> don't know how to do that with LLDB.)

I’ve run into some sort of a problem here as lldb was throwing up an
error, so I signed gdb to try it and it’s also giving an error:

(gdb) p s->face.id
$2 = 17
(gdb) p lface_id_to_name[17]
$3 = 31008
(gdb) xsymbol(lface_id_to_name[17])
$4 = (struct Lisp_Symbol *) 0x7ab8
Cannot access memory at address 0x7ac0

am I doing this wrong?
-- 
Alan Third




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#22818; Package emacs. Full text available.

Message received at 22818 <at> debbugs.gnu.org:


Received: (at 22818) by debbugs.gnu.org; 19 Nov 2016 11:43:22 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Nov 19 06:43:21 2016
Received: from localhost ([127.0.0.1]:34513 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1c843F-0005kv-MI
	for submit <at> debbugs.gnu.org; Sat, 19 Nov 2016 06:43:21 -0500
Received: from eggs.gnu.org ([208.118.235.92]:49303)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <eliz@HIDDEN>) id 1c843E-0005kd-28
 for 22818 <at> debbugs.gnu.org; Sat, 19 Nov 2016 06:43:20 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <eliz@HIDDEN>) id 1c8435-0002L0-Rd
 for 22818 <at> debbugs.gnu.org; Sat, 19 Nov 2016 06:43:14 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.9 required=5.0 tests=BAYES_40,RP_MATCHES_RCVD
 autolearn=disabled version=3.3.2
Received: from fencepost.gnu.org ([2001:4830:134:3::e]:40010)
 by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from <eliz@HIDDEN>)
 id 1c8435-0002Kt-Oj; Sat, 19 Nov 2016 06:43:11 -0500
Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:4290
 helo=home-c4e4a596f7)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128)
 (Exim 4.82) (envelope-from <eliz@HIDDEN>)
 id 1c8434-0005I5-Vu; Sat, 19 Nov 2016 06:43:11 -0500
Date: Sat, 19 Nov 2016 13:43:17 +0200
Message-Id: <83inrjbsq2.fsf@HIDDEN>
From: Eli Zaretskii <eliz@HIDDEN>
To: Alan Third <alan@HIDDEN>
In-reply-to: <20161119111823.GA66770@HIDDEN> (message from
 Alan Third on Sat, 19 Nov 2016 11:18:23 +0000)
Subject: Re: bug#22818: 25.1.1 Emacs.app crash
 ns_compute_glyph_string_overhangs
References: <CAFw1JJ7Fbfognbq7uEhUgeN0B4pdxEtqkUo2sybf86FZBPYz+w@HIDDEN>
 <jk60igfumowk3e.fsf@HIDDEN> <83twb4aqwp.fsf@HIDDEN>
 <20161119100703.GA66661@HIDDEN>
 <83k2bzbw8g.fsf@HIDDEN> <20161119111823.GA66770@HIDDEN>
MIME-version: 1.0
Content-type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-Received-From: 2001:4830:134:3::e
X-Spam-Score: -7.9 (-------)
X-Debbugs-Envelope-To: 22818
Cc: 22818 <at> debbugs.gnu.org, josh@HIDDEN
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Reply-To: Eli Zaretskii <eliz@HIDDEN>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -7.9 (-------)

> Date: Sat, 19 Nov 2016 11:18:23 +0000
> From: Alan Third <alan@HIDDEN>
> Cc: josh@HIDDEN, 22818 <at> debbugs.gnu.org
> 
> I’m trying to work out how to do this, but in the mean‐time here’s s->face:
> 
> (lldb) fr v *s->face
> (face) *s->face = {
> [...]
>   id = 19

What is the value of lface_id_to_name[19]?  It should be a Lisp
symbol; if so, what is that symbol's name?  (The file src/.gdbinit
defines a command, xsymbol, to display the name of a symbol, but I
don't know how to do that with LLDB.)




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#22818; Package emacs. Full text available.

Message received at 22818 <at> debbugs.gnu.org:


Received: (at 22818) by debbugs.gnu.org; 19 Nov 2016 11:18:33 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Nov 19 06:18:33 2016
Received: from localhost ([127.0.0.1]:34484 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1c83fE-00053L-Qx
	for submit <at> debbugs.gnu.org; Sat, 19 Nov 2016 06:18:32 -0500
Received: from mail-wm0-f41.google.com ([74.125.82.41]:37552)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <athird@HIDDEN>) id 1c83fD-000537-Ca
 for 22818 <at> debbugs.gnu.org; Sat, 19 Nov 2016 06:18:31 -0500
Received: by mail-wm0-f41.google.com with SMTP id t79so73238760wmt.0
 for <22818 <at> debbugs.gnu.org>; Sat, 19 Nov 2016 03:18:31 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=googlemail.com; s=20120113;
 h=sender:date:from:to:cc:subject:message-id:references:mime-version
 :content-disposition:content-transfer-encoding:in-reply-to
 :user-agent; bh=q6nZiVlHnn4lByaTjhGC5YHazr9F3rgVKnqrcGwMEhg=;
 b=GjK+iluH2M2i0DGw754fT07pAkCZ3QjYxtcTDQgqIYMzGQ0/ipqfPN+PXpIZNJmNB6
 8UuQtAbCJ1H4sBqhwHbJL1Xj0f9f4H/semuu9agNhTcXQLr1TapHFgLmw1veSv5o+SUi
 Dd2hJpCzF4FlDHsIGsO71Ccu6viggohTooxaiS4jc0DGvNIgmxNdvlAl/IWgRGimhtmp
 pRhpW06g10QFxEaBTKt0yPQ6XIEpfSs0Qymt2OO5z9JyYH9yzHEYO9Z23Z6Y58KN6BIy
 UUDTSTAqM6qCDm9+r16ZU4UNH1e2t74vRc+g0epog65n+CoGGOF+dj7esLBv4dYoEbAy
 bRQQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:sender:date:from:to:cc:subject:message-id
 :references:mime-version:content-disposition
 :content-transfer-encoding:in-reply-to:user-agent;
 bh=q6nZiVlHnn4lByaTjhGC5YHazr9F3rgVKnqrcGwMEhg=;
 b=X6c9F2V/cT/kiso4XkuKAXlX2z1OyIlCM5rl1gDXa6DGsAJhYuuOYwYBTO/H8cjZ+i
 uQW/hSnhHT5sGuMMsC/Ep8vpM++xnwGl8Qhv1NXd9EBJZWfA+dA/VFchR8k9dOnmW/DW
 amAeZhKEVQTLnmj5cUGnlifdJFnbSRYvLByhmZaAUabVtBB61UGEjthM0/Y9epBmJh8W
 K7RvieMXl69N2/5EJaPC+gqx3OJtytqBVWGjUY4YSb9y6f8l0CpdJaooRM5FyzXaFOkK
 G4/076/2mTDr0jxYbF8YDRmZj2ez+aIKCSFStcRxS6EcbLckW+H3HmiYPG8mn/iiZ3zV
 uAhw==
X-Gm-Message-State: AKaTC02E9sxKqM/veZhqqUCFE2275yHq5qHVds4QQoc+W2Ds1Zzf6L/nPSG91kjRDsV7lQ==
X-Received: by 10.28.51.211 with SMTP id z202mr3091690wmz.125.1479554305685;
 Sat, 19 Nov 2016 03:18:25 -0800 (PST)
Received: from breton.holly.idiocy.org
 (ip6-2001-08b0-03f8-8129-4145-2d31-d9b8-2802.holly.idiocy.org.
 [2001:8b0:3f8:8129:4145:2d31:d9b8:2802])
 by smtp.gmail.com with ESMTPSA id l67sm8788402wmf.0.2016.11.19.03.18.25
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Sat, 19 Nov 2016 03:18:25 -0800 (PST)
Date: Sat, 19 Nov 2016 11:18:23 +0000
From: Alan Third <alan@HIDDEN>
To: Eli Zaretskii <eliz@HIDDEN>
Subject: Re: bug#22818: 25.1.1 Emacs.app crash
 ns_compute_glyph_string_overhangs
Message-ID: <20161119111823.GA66770@HIDDEN>
References: <CAFw1JJ7Fbfognbq7uEhUgeN0B4pdxEtqkUo2sybf86FZBPYz+w@HIDDEN>
 <jk60igfumowk3e.fsf@HIDDEN> <83twb4aqwp.fsf@HIDDEN>
 <20161119100703.GA66661@HIDDEN>
 <83k2bzbw8g.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <83k2bzbw8g.fsf@HIDDEN>
User-Agent: Mutt/1.7.0 (2016-08-17)
X-Spam-Score: 0.5 (/)
X-Debbugs-Envelope-To: 22818
Cc: 22818 <at> debbugs.gnu.org, josh@HIDDEN
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.5 (/)

On Sat, Nov 19, 2016 at 12:27:27PM +0200, Eli Zaretskii wrote:
> So the question now becomes: how did that glyph_string got a NULL
> font?  The answer is somewhere in the code that generates glyph
> strings as part of the call to BUILD_GLYPH_STRINGS.  Can you try
> figuring out why does that happen, by stepping through the code in
> BUILD_GLYPH_STRINGS?

I’m trying to work out how to do this, but in the mean‐time here’s s->face:

(lldb) fr v *s->face
(face) *s->face = {
  lface = {
    [0] = 17952
    [1] = 4311871236
    [2] = 4298401388
    [3] = 32304
    [4] = 482
    [5] = 32304
    [6] = 32304
    [7] = 0
    [8] = 0
    [9] = 4313454388
    [10] = 4313454420
    [11] = 0
    [12] = 0
    [13] = 0
    [14] = 0
    [15] = 4356698701
    [16] = 0
    [17] = 4313448132
    [18] = 44496
  }
  id = 19
  gc = 0x0000000000000000
  stipple = 0
  foreground = 2
  background = 1
  underline_color = 0
  overline_color = 0
  strike_through_color = 0
  box_color = 0
  font = 0x0000000000000000
  fontset = 3
  box_line_width = 0
  box = FACE_NO_BOX
  underline_type = FACE_UNDER_LINE
  use_box_color_for_shadows_p = false
  underline_p = false
  overline_p = false
  strike_through_p = false
  foreground_defaulted_p = false
  background_defaulted_p = false
  underline_defaulted_p = false
  overline_color_defaulted_p = false
  strike_through_color_defaulted_p = false
  box_color_defaulted_p = false
  tty_bold_p = false
  tty_italic_p = false
  tty_underline_p = false
  tty_reverse_p = false
  colors_copied_bitwise_p = true
  overstrike = false
  synth_ital = false
  hash = 7029
  next = 0x000000010fd7e5d0
  prev = 0x000000010c5eda00
  ascii_face = 0x00000001011afac0
}

I don’t know if that tells you anything useful.
-- 
Alan Third




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#22818; Package emacs. Full text available.

Message received at 22818 <at> debbugs.gnu.org:


Received: (at 22818) by debbugs.gnu.org; 19 Nov 2016 10:27:32 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Nov 19 05:27:32 2016
Received: from localhost ([127.0.0.1]:34468 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1c82rs-0003of-9N
	for submit <at> debbugs.gnu.org; Sat, 19 Nov 2016 05:27:32 -0500
Received: from eggs.gnu.org ([208.118.235.92]:39397)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <eliz@HIDDEN>) id 1c82rq-0003oR-9C
 for 22818 <at> debbugs.gnu.org; Sat, 19 Nov 2016 05:27:30 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <eliz@HIDDEN>) id 1c82rh-0000hh-Sh
 for 22818 <at> debbugs.gnu.org; Sat, 19 Nov 2016 05:27:25 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_50,RP_MATCHES_RCVD
 autolearn=disabled version=3.3.2
Received: from fencepost.gnu.org ([2001:4830:134:3::e]:39482)
 by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from <eliz@HIDDEN>)
 id 1c82rh-0000hb-Pn; Sat, 19 Nov 2016 05:27:21 -0500
Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:3683
 helo=home-c4e4a596f7)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128)
 (Exim 4.82) (envelope-from <eliz@HIDDEN>)
 id 1c82rh-00089P-1x; Sat, 19 Nov 2016 05:27:21 -0500
Date: Sat, 19 Nov 2016 12:27:27 +0200
Message-Id: <83k2bzbw8g.fsf@HIDDEN>
From: Eli Zaretskii <eliz@HIDDEN>
To: Alan Third <alan@HIDDEN>
In-reply-to: <20161119100703.GA66661@HIDDEN> (message from
 Alan Third on Sat, 19 Nov 2016 10:07:03 +0000)
Subject: Re: bug#22818: 25.1.1 Emacs.app crash
 ns_compute_glyph_string_overhangs
References: <CAFw1JJ7Fbfognbq7uEhUgeN0B4pdxEtqkUo2sybf86FZBPYz+w@HIDDEN>
 <jk60igfumowk3e.fsf@HIDDEN>
 <83twb4aqwp.fsf@HIDDEN> <20161119100703.GA66661@HIDDEN>
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-Received-From: 2001:4830:134:3::e
X-Spam-Score: -7.9 (-------)
X-Debbugs-Envelope-To: 22818
Cc: 22818 <at> debbugs.gnu.org, josh@HIDDEN
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Reply-To: Eli Zaretskii <eliz@HIDDEN>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -7.9 (-------)

> Date: Sat, 19 Nov 2016 10:07:03 +0000
> From: Alan Third <alan@HIDDEN>
> Cc: Josh Berdine <josh@HIDDEN>, 22818 <at> debbugs.gnu.org
> 
> On Sat, Nov 19, 2016 at 09:07:50AM +0200, Eli Zaretskii wrote:
> > Can you convert the address in frame #0 into line numbers?  Judging by
> > the faulting address, 0xd0, some pointer in
> > ns_compute_glyph_string_overhangs is a null pointer, but it's hard to
> > tell which one without the line number information.
> 
> I finally managed to replicate this on my own build:
> 
> (lldb) run -Q ~/test-file
> Process 66588 launched: '/Users/alan/src/emacs/emacs-25/nextstep/Emacs.app/Contents/MacOS/Emacs' (x86_64)
> Process 66588 stopped
> * thread #1: tid = 0x154600, 0x00000001002c0940 Emacs`ns_compute_glyph_string_overhangs(s=0x00007fff5fbfb6f0) + 224 at nsterm.m:2681, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0xd0)
>     frame #0: 0x00000001002c0940 Emacs`ns_compute_glyph_string_overhangs(s=0x00007fff5fbfb6f0) + 224 at nsterm.m:2681
>    2678	  else
>    2679	    {
>    2680	      s->left_overhang = 0;
> -> 2681	      if (EQ (font->driver->type, Qns))
>    2682	        s->right_overhang = ((struct nsfont_info *)font)->ital ?
>    2683	          FONT_HEIGHT (font) * 0.2 : 0;
>    2684	      else
> (lldb) bt all
> * thread #1: tid = 0x154600, 0x00000001002c0940 Emacs`ns_compute_glyph_string_overhangs(s=0x00007fff5fbfb6f0) + 224 at nsterm.m:2681, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0xd0)
>   * frame #0: 0x00000001002c0940 Emacs`ns_compute_glyph_string_overhangs(s=0x00007fff5fbfb6f0) + 224 at nsterm.m:2681
>     frame #1: 0x0000000100058e7c Emacs`draw_glyphs(w=0x000000010204f430, x=570, row=0x000000010240e100, area=TEXT_AREA, start=0, end=52, hl=DRAW_NORMAL_TEXT, overlaps=0) + 3324 at xdisp.c:25673

So the question now becomes: how did that glyph_string got a NULL
font?  The answer is somewhere in the code that generates glyph
strings as part of the call to BUILD_GLYPH_STRINGS.  Can you try
figuring out why does that happen, by stepping through the code in
BUILD_GLYPH_STRINGS?

> (lldb) frame variable
> (glyph_string *) s = 0x00007fff5fbfb6f0
> (font *) font = 0x0000000000000000
> 
> (lldb) frame variable *s
> (glyph_string) *s = {
>   x = 10
>   y = 16
>   ybase = 30
>   width = 11
>   background_width = 11
>   height = 20
>   left_overhang = 0
>   right_overhang = 0
>   f = 0x0000000102050430
>   w = 0x000000010204f430
>   display = 0x0000000000000000
>   window = 1
>   row = 0x000000010240e100
>   area = TEXT_AREA
>   char2b = 0x0000000000000000
>   nchars = 1
>   hl = DRAW_NORMAL_TEXT
>   face = 0x000000010153b400

What kind of face is s->face?

Thanks.




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#22818; Package emacs. Full text available.

Message received at 22818 <at> debbugs.gnu.org:


Received: (at 22818) by debbugs.gnu.org; 19 Nov 2016 10:07:14 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Nov 19 05:07:14 2016
Received: from localhost ([127.0.0.1]:34452 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1c82YE-0003Ie-K1
	for submit <at> debbugs.gnu.org; Sat, 19 Nov 2016 05:07:14 -0500
Received: from mail-wm0-f54.google.com ([74.125.82.54]:35634)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <athird@HIDDEN>) id 1c82YC-0003IP-Hf
 for 22818 <at> debbugs.gnu.org; Sat, 19 Nov 2016 05:07:13 -0500
Received: by mail-wm0-f54.google.com with SMTP id a197so72772123wmd.0
 for <22818 <at> debbugs.gnu.org>; Sat, 19 Nov 2016 02:07:12 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=googlemail.com; s=20120113;
 h=sender:date:from:to:cc:subject:message-id:references:mime-version
 :content-disposition:in-reply-to:user-agent;
 bh=ZfA72ChjWez6UhN/UnW718Q3Ozy99z4NQY9yHrJHN9w=;
 b=w1IVjSCiK2jXJuqorg4H9fKpg54t5t5XYUPX+MU46nqQ7COF5vu3vXL7cU//ML/lR6
 9Nt9ysNSwRM9o0wJbK0AHbeoxiQYrRGqHnVlZ1Hr0yE14jB5jqpBSRiv3TzMW6+0G4da
 PVwXwQ72AOGbpYHYrj7wFhHuSBU1ZlrgRf6zt6Kkk41c4LBMYE5tZqOk4xMuTPxVPJsW
 2904iP6iyWaiAZ8aCCBykGr9XPnhOwCcrJAQd9wzRCSeIJUOVE7l9/Gbi3utVgIfdQ6L
 mw9UZprI9SNXIqyDTAdaVejV3r2m4W5yXL/9qZTJOJ41pKHAcqOTMgnLbG/5U7y97/Wb
 ry6w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:sender:date:from:to:cc:subject:message-id
 :references:mime-version:content-disposition:in-reply-to:user-agent;
 bh=ZfA72ChjWez6UhN/UnW718Q3Ozy99z4NQY9yHrJHN9w=;
 b=kwMYSOs5LMoKeVyuhzVPVZUGaDkWux33Jf4PIlPOMdXpqocPyngFvoeY6M8pdAMGhd
 Wplms6DL/Gi38kw5Ku/qIQ+EoJ7Df4W6I5alOqm50kSG+DmRt7AevQi/XX0VJ9VOjx7W
 eZXxDnJ6KKIoRGdm+A2w2H5yYmAx0KvFpf0Bksmumx42ocactXYuPCPKZ1TdcJuqZor0
 row+80aGh/bf/Zw3KpYb7I9ViXeQqUGlSJ1zvxJ74Su4UqbyBdUkvhSIxOOAsbMlm2rI
 2Sv8UkKwft2eUuo3s4vU69wZkZz8r3nj7ISfPKtZkcSrH7DgylglZDUrNc3EQUPAt7Dv
 sGLQ==
X-Gm-Message-State: AKaTC01XLlCeIWSSovmdQztaFDXi6tajF3wkaQAk+fnF10AdTtvEQ6xXruTVE1JP14rgFA==
X-Received: by 10.28.16.70 with SMTP id 67mr2660177wmq.53.1479550026665;
 Sat, 19 Nov 2016 02:07:06 -0800 (PST)
Received: from breton.holly.idiocy.org
 (ip6-2001-08b0-03f8-8129-4145-2d31-d9b8-2802.holly.idiocy.org.
 [2001:8b0:3f8:8129:4145:2d31:d9b8:2802])
 by smtp.gmail.com with ESMTPSA id l67sm7922540wmf.20.2016.11.19.02.07.05
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Sat, 19 Nov 2016 02:07:06 -0800 (PST)
Date: Sat, 19 Nov 2016 10:07:03 +0000
From: Alan Third <alan@HIDDEN>
To: Eli Zaretskii <eliz@HIDDEN>
Subject: Re: bug#22818: 25.1.1 Emacs.app crash
 ns_compute_glyph_string_overhangs
Message-ID: <20161119100703.GA66661@HIDDEN>
References: <CAFw1JJ7Fbfognbq7uEhUgeN0B4pdxEtqkUo2sybf86FZBPYz+w@HIDDEN>
 <jk60igfumowk3e.fsf@HIDDEN> <83twb4aqwp.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <83twb4aqwp.fsf@HIDDEN>
User-Agent: Mutt/1.7.0 (2016-08-17)
X-Spam-Score: 0.5 (/)
X-Debbugs-Envelope-To: 22818
Cc: 22818 <at> debbugs.gnu.org, Josh Berdine <josh@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.5 (/)

On Sat, Nov 19, 2016 at 09:07:50AM +0200, Eli Zaretskii wrote:
> Can you convert the address in frame #0 into line numbers?  Judging by
> the faulting address, 0xd0, some pointer in
> ns_compute_glyph_string_overhangs is a null pointer, but it's hard to
> tell which one without the line number information.

I finally managed to replicate this on my own build:

(lldb) run -Q ~/test-file
Process 66588 launched: '/Users/alan/src/emacs/emacs-25/nextstep/Emacs.app/Contents/MacOS/Emacs' (x86_64)
Process 66588 stopped
* thread #1: tid = 0x154600, 0x00000001002c0940 Emacs`ns_compute_glyph_string_overhangs(s=0x00007fff5fbfb6f0) + 224 at nsterm.m:2681, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0xd0)
    frame #0: 0x00000001002c0940 Emacs`ns_compute_glyph_string_overhangs(s=0x00007fff5fbfb6f0) + 224 at nsterm.m:2681
   2678	  else
   2679	    {
   2680	      s->left_overhang = 0;
-> 2681	      if (EQ (font->driver->type, Qns))
   2682	        s->right_overhang = ((struct nsfont_info *)font)->ital ?
   2683	          FONT_HEIGHT (font) * 0.2 : 0;
   2684	      else
(lldb) bt all
* thread #1: tid = 0x154600, 0x00000001002c0940 Emacs`ns_compute_glyph_string_overhangs(s=0x00007fff5fbfb6f0) + 224 at nsterm.m:2681, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0xd0)
  * frame #0: 0x00000001002c0940 Emacs`ns_compute_glyph_string_overhangs(s=0x00007fff5fbfb6f0) + 224 at nsterm.m:2681
    frame #1: 0x0000000100058e7c Emacs`draw_glyphs(w=0x000000010204f430, x=570, row=0x000000010240e100, area=TEXT_AREA, start=0, end=52, hl=DRAW_NORMAL_TEXT, overlaps=0) + 3324 at xdisp.c:25673
    frame #2: 0x00000001000580cd Emacs`x_write_glyphs(w=0x000000010204f430, updated_row=0x000000010240e100, start=0x0000000102420000, updated_area=TEXT_AREA, len=52) + 269 at xdisp.c:27774
    frame #3: 0x000000010000ea34 Emacs`update_text_area(w=0x000000010204f430, updated_row=0x000000010240e100, vpos=1) + 452 at dispnew.c:3612
    frame #4: 0x000000010000ca32 Emacs`update_window_line(w=0x000000010204f430, vpos=1, mouse_face_overwritten_p=0x00007fff5fbfbdd2) + 274 at dispnew.c:3855
    frame #5: 0x0000000100006be1 Emacs`update_window(w=0x000000010204f430, force_p=true) + 865 at dispnew.c:3477
    frame #6: 0x0000000100005c88 Emacs`update_window_tree(w=0x000000010204f430, force_p=true) + 200 at dispnew.c:3219
    frame #7: 0x0000000100005996 Emacs`update_frame(f=0x0000000102050430, force_p=true, inhibit_hairy_id_p=false) + 182 at dispnew.c:3108
    frame #8: 0x000000010004151d Emacs`redisplay_internal + 6957 at xdisp.c:14085
    frame #9: 0x0000000100042a79 Emacs`redisplay + 9 at xdisp.c:13255
    frame #10: 0x000000010013a985 Emacs`read_char(commandflag=1, map=4362425571, prev_event=0, used_mouse_menu=0x00007fff5fbfefb7, end_time=0x0000000000000000) + 1829 at keyboard.c:2482
    frame #11: 0x0000000100136b09 Emacs`read_key_sequence(keybuf=0x00007fff5fbff2e0, bufsize=30, prompt=0, dont_downcase_last=false, can_return_switch_frame=true, fix_current_buffer=true, prevent_redisplay=false) + 1737 at keyboard.c:9068
    frame #12: 0x00000001001356bb Emacs`command_loop_1 + 1435 at keyboard.c:1370
    frame #13: 0x00000001001f8493 Emacs`internal_condition_case(bfun=(Emacs`command_loop_1 at keyboard.c:1261), handlers=16752, hfun=(Emacs`cmd_error at keyboard.c:940)) + 115 at eval.c:1314
    frame #14: 0x000000010014a8ec Emacs`command_loop_2(ignore=0) + 44 at keyboard.c:1112
    frame #15: 0x00000001001f7c68 Emacs`internal_catch(tag=42480, func=(Emacs`command_loop_2 at keyboard.c:1108), arg=0) + 72 at eval.c:1079
    frame #16: 0x0000000100134688 Emacs`command_loop + 280 at keyboard.c:1091
    frame #17: 0x00000001001344d0 Emacs`recursive_edit_1 + 192 at keyboard.c:697
    frame #18: 0x0000000100134821 Emacs`Frecursive_edit + 305 at keyboard.c:768
    frame #19: 0x0000000100132548 Emacs`main(argc=3, argv=0x00007fff5fbff8e8) + 5864 at emacs.c:1626
    frame #20: 0x00007fff8f1a6255 libdyld.dylib`start + 1
    frame #21: 0x00007fff8f1a6255 libdyld.dylib`start + 1

(lldb) frame variable
(glyph_string *) s = 0x00007fff5fbfb6f0
(font *) font = 0x0000000000000000

(lldb) frame variable *s
(glyph_string) *s = {
  x = 10
  y = 16
  ybase = 30
  width = 11
  background_width = 11
  height = 20
  left_overhang = 0
  right_overhang = 0
  f = 0x0000000102050430
  w = 0x000000010204f430
  display = 0x0000000000000000
  window = 1
  row = 0x000000010240e100
  area = TEXT_AREA
  char2b = 0x0000000000000000
  nchars = 1
  hl = DRAW_NORMAL_TEXT
  face = 0x000000010153b400
  font = 0x0000000000000000
  cmp = 0x0000000000000000
  cmp_id = 0
  cmp_from = 0
  cmp_to = 0
  extends_to_end_of_line_p = false
  background_filled_p = false
  font_not_found_p = false
  stippled_p = false
  for_overlaps = 0
  padding_p = false
  first_glyph = 0x0000000102420000
  img = 0x0000000000000000
  xwidget = 0x0000000000000000
  slice = (x = 0, y = 0, width = 0, height = 0)
  clip_head = 0x0000000000000000
  clip_tail = 0x0000000000000000
  clip = ([0] = (origin = (x = 0, y = 0), size = (width = 0, height = 0)), [1] = (origin = (x = 0, y = 0), size = (width = 0, height = 0)))
  num_clips = 0
  underline_position = 0
  underline_thickness = 0
  next = 0x00007fff5fbfb5d0
  prev = 0x0000000000000000
}

-- 
Alan Third




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#22818; Package emacs. Full text available.

Message received at 22818 <at> debbugs.gnu.org:


Received: (at 22818) by debbugs.gnu.org; 19 Nov 2016 07:07:56 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Nov 19 02:07:56 2016
Received: from localhost ([127.0.0.1]:34367 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1c7zki-0005PB-13
	for submit <at> debbugs.gnu.org; Sat, 19 Nov 2016 02:07:56 -0500
Received: from eggs.gnu.org ([208.118.235.92]:38390)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <eliz@HIDDEN>) id 1c7zkf-0005Ou-OQ
 for 22818 <at> debbugs.gnu.org; Sat, 19 Nov 2016 02:07:54 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <eliz@HIDDEN>) id 1c7zkX-00050D-9w
 for 22818 <at> debbugs.gnu.org; Sat, 19 Nov 2016 02:07:48 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_50,RP_MATCHES_RCVD
 autolearn=disabled version=3.3.2
Received: from fencepost.gnu.org ([2001:4830:134:3::e]:36720)
 by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from <eliz@HIDDEN>)
 id 1c7zkX-000503-6W; Sat, 19 Nov 2016 02:07:45 -0500
Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:3349
 helo=home-c4e4a596f7)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128)
 (Exim 4.82) (envelope-from <eliz@HIDDEN>)
 id 1c7zkV-0007SI-R3; Sat, 19 Nov 2016 02:07:44 -0500
Date: Sat, 19 Nov 2016 09:07:50 +0200
Message-Id: <83twb4aqwp.fsf@HIDDEN>
From: Eli Zaretskii <eliz@HIDDEN>
To: Josh Berdine <josh@HIDDEN>
In-reply-to: <jk60igfumowk3e.fsf@HIDDEN> (message from Josh Berdine on Fri, 18
 Nov 2016 21:31:49 +0000)
Subject: Re: bug#22818: 25.1.1 Emacs.app crash
 ns_compute_glyph_string_overhangs
References: <CAFw1JJ7Fbfognbq7uEhUgeN0B4pdxEtqkUo2sybf86FZBPYz+w@HIDDEN>
 <jk60igfumowk3e.fsf@HIDDEN>
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-Received-From: 2001:4830:134:3::e
X-Spam-Score: -7.9 (-------)
X-Debbugs-Envelope-To: 22818
Cc: 22818 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Reply-To: Eli Zaretskii <eliz@HIDDEN>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -7.9 (-------)

> From: Josh Berdine <josh@HIDDEN>
> Date: Fri, 18 Nov 2016 21:31:49 +0000
> 
> (lldb) c
> Process 42346 resuming
> Process 42346 stopped
> * thread #1: tid = 0x449aca, 0x00000001001b5767 Emacs-x86_64-10_9`ns_compute_glyph_string_overhangs + 119, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0xd0)
>     frame #0: 0x00000001001b5767 Emacs-x86_64-10_9`ns_compute_glyph_string_overhangs + 119
> Emacs-x86_64-10_9`ns_compute_glyph_string_overhangs:
> ->  0x1001b5767 <+119>: movq   0xd0(%rdi), %rax
>     0x1001b576e <+126>: cmpq   $0x7e00, (%rax)           ; imm = 0x7E00
>     0x1001b5775 <+133>: jne    0x1001b579b               ; <+171>
>     0x1001b5777 <+135>: xorl   %eax, %eax
> (lldb) bt
> * thread #1: tid = 0x449aca, 0x00000001001b5767 Emacs-x86_64-10_9`ns_compute_glyph_string_overhangs + 119, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0xd0)
>   * frame #0: 0x00000001001b5767 Emacs-x86_64-10_9`ns_compute_glyph_string_overhangs + 119
>     frame #1: 0x00000001000379d7 Emacs-x86_64-10_9`draw_glyphs + 3415
>     frame #2: 0x0000000100036c16 Emacs-x86_64-10_9`x_write_glyphs + 166
>     frame #3: 0x0000000100009e3e Emacs-x86_64-10_9`update_window_line + 670
>     frame #4: 0x0000000100005edc Emacs-x86_64-10_9`update_window + 4588
>     frame #5: 0x00000001000046a4 Emacs-x86_64-10_9`update_window_tree + 116
>     frame #6: 0x00000001000044e7 Emacs-x86_64-10_9`update_frame + 135

Can you convert the address in frame #0 into line numbers?  Judging by
the faulting address, 0xd0, some pointer in
ns_compute_glyph_string_overhangs is a null pointer, but it's hard to
tell which one without the line number information.




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#22818; Package emacs. Full text available.

Message received at 22818 <at> debbugs.gnu.org:


Received: (at 22818) by debbugs.gnu.org; 18 Nov 2016 21:31:53 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Fri Nov 18 16:31:53 2016
Received: from localhost ([127.0.0.1]:34257 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1c7qlF-0006jM-Ks
	for submit <at> debbugs.gnu.org; Fri, 18 Nov 2016 16:31:53 -0500
Received: from out2-smtp.messagingengine.com ([66.111.4.26]:47929)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <josh@HIDDEN>) id 1c7qlE-0006jE-1F
 for 22818 <at> debbugs.gnu.org; Fri, 18 Nov 2016 16:31:52 -0500
Received: from compute1.internal (compute1.nyi.internal [10.202.2.41])
 by mailout.nyi.internal (Postfix) with ESMTP id 856AB206E4;
 Fri, 18 Nov 2016 16:31:51 -0500 (EST)
Received: from frontend1 ([10.202.2.160])
 by compute1.internal (MEProxy); Fri, 18 Nov 2016 16:31:51 -0500
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=berdine.net; h=
 content-type:date:from:message-id:mime-version:subject:to
 :x-me-sender:x-me-sender:x-sasl-enc:x-sasl-enc; s=mesmtp; bh=3Cx
 G96Qvtfv6nnN3nbFzDBu8wck=; b=Azerk40vchA5+E0s6SohKi/yejripD0VW/l
 6FwoonmVBLs1Adw83MNiakBsZ5CTBds/aMnJhXZUiB8rMucQi6rC3Os4JsGnWMXk
 libt2B4v+ms5UA2X11SgZDGwp7E3hfmZmRHSnUCulIRT1VAHQyHTULUxPbxwqSg2
 U20JgkcI=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=
 messagingengine.com; h=content-type:date:from:message-id
 :mime-version:subject:to:x-me-sender:x-me-sender:x-sasl-enc
 :x-sasl-enc; s=smtpout; bh=3CxG96Qvtfv6nnN3nbFzDBu8wck=; b=CVCyZ
 AZANn8WnrajhNqVu+6r7xMYKQBAbcpzVScZH+RG3BX/3i0SNXOK1FqBZSlTCAEgB
 3VS1gcIEyDNAG3ZhMuVJYngGDTkPiek1RsZtNyB17EPFXAy9FSLDuIYOwUAC1XxS
 jIToQrPGIXwJ6DC9vr5mFcfee0422xd+Qb+RJo=
X-ME-Sender: <xms:R3MvWFOfRB5-R2E7tnNl-qPmA7VJMnovhUub6qTlas3a_3GqDkH1xw>
X-Sasl-enc: +0mKu4cvVRberxck9OxV/eMItsIRC1M2j7HuhVsGrIHI 1479504711
Received: from jjb-mbp.localdomain (unknown [199.201.66.3])
 by mail.messagingengine.com (Postfix) with ESMTPA id 37C937E7E6
 for <22818 <at> debbugs.gnu.org>; Fri, 18 Nov 2016 16:31:51 -0500 (EST)
Received: by jjb-mbp.localdomain (Postfix, from userid 994052071)
 id 0E0656DE792E; Fri, 18 Nov 2016 21:31:49 +0000 (GMT)
From: Josh Berdine <josh@HIDDEN>
To: 22818 <at> debbugs.gnu.org
Subject: 25.1.1 Emacs.app crash ns_compute_glyph_string_overhangs
Date: Fri, 18 Nov 2016 21:31:49 +0000
Message-ID: <jk60igfumowk3e.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 22818
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.7 (/)

I have encountered a crash in ns_compute_glyph_string_overhangs, seems likely to be the same issue.  I hit this when using the notmuch email client with a message with the following subject header:

Subject: =?UTF-8?B?W1JvYm90IEhvdXNlXSDwn42V?=
 =?UTF-8?B?8J+NlfCfjZXwn42V8J+NlfCfjZXwn42V8J+NlfCfjZXwn42V8J+NlfCfjZXwn42V8J+NlfCfjZXwn42V?=
 =?UTF-8?B?8J+NlfCfjZXwn42V8J+NlfCfjZXwn42V8J+NlfCfjZXwn42V8J+NlfCfjZXwn42V8J+NlfCfjZXwn42V?=

I am running GNU Emacs 25.1.1 (x86_64-apple-darwin13.4.0, NS appkit-1265.21 Version 10.9.5 (Build 13F1911)) of 2016-09-17

I attached lldb to a running emacs and then executed a `notmuch-search` that included the message with above subject.  Backtrace is:

(lldb) c
Process 42346 resuming
Process 42346 stopped
* thread #1: tid = 0x449aca, 0x00000001001b5767 Emacs-x86_64-10_9`ns_compute_glyph_string_overhangs + 119, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0xd0)
    frame #0: 0x00000001001b5767 Emacs-x86_64-10_9`ns_compute_glyph_string_overhangs + 119
Emacs-x86_64-10_9`ns_compute_glyph_string_overhangs:
->  0x1001b5767 <+119>: movq   0xd0(%rdi), %rax
    0x1001b576e <+126>: cmpq   $0x7e00, (%rax)           ; imm = 0x7E00
    0x1001b5775 <+133>: jne    0x1001b579b               ; <+171>
    0x1001b5777 <+135>: xorl   %eax, %eax
(lldb) bt
* thread #1: tid = 0x449aca, 0x00000001001b5767 Emacs-x86_64-10_9`ns_compute_glyph_string_overhangs + 119, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0xd0)
  * frame #0: 0x00000001001b5767 Emacs-x86_64-10_9`ns_compute_glyph_string_overhangs + 119
    frame #1: 0x00000001000379d7 Emacs-x86_64-10_9`draw_glyphs + 3415
    frame #2: 0x0000000100036c16 Emacs-x86_64-10_9`x_write_glyphs + 166
    frame #3: 0x0000000100009e3e Emacs-x86_64-10_9`update_window_line + 670
    frame #4: 0x0000000100005edc Emacs-x86_64-10_9`update_window + 4588
    frame #5: 0x00000001000046a4 Emacs-x86_64-10_9`update_window_tree + 116
    frame #6: 0x00000001000044e7 Emacs-x86_64-10_9`update_frame + 135
    frame #7: 0x00000001000275d2 Emacs-x86_64-10_9`redisplay_internal + 5666
    frame #8: 0x00000001000283fc Emacs-x86_64-10_9`redisplay_preserve_echo_area + 44
    frame #9: 0x000000010017a553 Emacs-x86_64-10_9`wait_reading_process_output + 1651
    frame #10: 0x00000001000076bd Emacs-x86_64-10_9`sit_for + 253
    frame #11: 0x00000001000c1996 Emacs-x86_64-10_9`read_char + 6006
    frame #12: 0x00000001000be2ec Emacs-x86_64-10_9`read_key_sequence + 2092
    frame #13: 0x00000001000bca02 Emacs-x86_64-10_9`command_loop_1 + 1154
    frame #14: 0x0000000100138196 Emacs-x86_64-10_9`internal_condition_case + 70
    frame #15: 0x00000001000cd620 Emacs-x86_64-10_9`command_loop_2 + 48
    frame #16: 0x0000000100137cf6 Emacs-x86_64-10_9`internal_catch + 54
    frame #17: 0x00000001000bbc4e Emacs-x86_64-10_9`command_loop + 158
    frame #18: 0x00000001000bbb65 Emacs-x86_64-10_9`recursive_edit_1 + 117
    frame #19: 0x00000001000bbd8c Emacs-x86_64-10_9`Frecursive_edit + 220
    frame #20: 0x00000001000baa5e Emacs-x86_64-10_9`main + 5854
    frame #21: 0x00007fff9b4225ad libdyld.dylib`start + 1
    frame #22: 0x00007fff9b4225ad libdyld.dylib`start + 1

Using Aaron's test-file, `/Applications/Emacs.app/Contents/MacOS/Emacs -Q test-file` crashes with the same backtrace.  If I leave out -Q, however, it does not crash.





Information forwarded to bug-gnu-emacs@HIDDEN:
bug#22818; Package emacs. Full text available.

Message received at 22818 <at> debbugs.gnu.org:


Received: (at 22818) by debbugs.gnu.org; 18 May 2016 21:10:03 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Wed May 18 17:10:03 2016
Received: from localhost ([127.0.0.1]:57362 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1b38jD-0005yZ-Mq
	for submit <at> debbugs.gnu.org; Wed, 18 May 2016 17:10:03 -0400
Received: from mail-io0-f182.google.com ([209.85.223.182]:33427)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <aaron.s.hawley@HIDDEN>) id 1b38jB-0005xt-73
 for 22818 <at> debbugs.gnu.org; Wed, 18 May 2016 17:10:01 -0400
Received: by mail-io0-f182.google.com with SMTP id f89so82207256ioi.0
 for <22818 <at> debbugs.gnu.org>; Wed, 18 May 2016 14:10:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:in-reply-to:references:date:message-id:subject:from:to
 :cc; bh=MgjV9/F8kOSHPq/9awr1pNr4ab/+5POVZNsQDGc+BLE=;
 b=ICKjIU8kSPuz3YDlcRRil6LK7HVCIIBpjh1fjUGyPWG/IQjO2t6PxegP9Mjw1VtTJO
 J0tnPeGcy+kU1oHKO6XwXNt9TrTwcZcHMVHIQwkLDfWjA/5Z4fMw5o5pdFSQOQ0hv0iD
 FgEnZ1N0o4nUyu4EYwHHTdrsPXWfQwHjDBlaIvqCDo0vsMudRf2w67sJrw2zgMgMcPWW
 onsv50fOQrIko8guOCFKXbyxmRdmBeM/G643QFUmBjfYydUkPoQSkyJXVvr3QyX7lA8n
 eR3125/6MkKsfnYokSSgDsCg0WTVgKCKCWOkjVP7Miu9F3Jtm0z3c+hf9a2uXXHnXFET
 8M/w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:mime-version:in-reply-to:references:date
 :message-id:subject:from:to:cc;
 bh=MgjV9/F8kOSHPq/9awr1pNr4ab/+5POVZNsQDGc+BLE=;
 b=FCdfLG3S66ZQDzvk5qtEIkb9dLVvgr82NZonib6BIFFlraLdAQyd3T/9ehgWfzIHZj
 Ws5Y8oFaAEuB4i+Df2tNrcrf2xcmrIF1A37ZsRN8jkzx5os20lile70p0Rq+eifYTpBf
 MAsPwv1PdsRQOUzFhPlEkkJQh1mpkO39pRK03jhiOScgtQOW63pXbzZ15ndMfFBjOOlt
 dZWhmSi3CdS5qs6kPc8pZw3axUFjY3Yd3blg4rB4oGgdME/sG7+EoCDK2ndrzkXCS/jC
 24kQQq8Q4JgS/lYL9lM9+K38PLYyigeUzWKZIrXH716OAj8O1/BjS3t8LFBUcIh5bISH
 jr5w==
X-Gm-Message-State: AOPr4FXAWraw+LMIVJO3CxzOdJG/8UZXOXS1tIer6/vr8rsXJYJZwhnx3GLvQbKsoT2MJqDKMGru+CZQq2L8fg==
MIME-Version: 1.0
X-Received: by 10.36.4.151 with SMTP id 145mr89249itb.43.1463605795747; Wed,
 18 May 2016 14:09:55 -0700 (PDT)
Received: by 10.107.6.155 with HTTP; Wed, 18 May 2016 14:09:55 -0700 (PDT)
In-Reply-To: <m2k2ir5dv4.fsf@HIDDEN>
References: <CAFw1JJ7Fbfognbq7uEhUgeN0B4pdxEtqkUo2sybf86FZBPYz+w@HIDDEN>
 <m2k2ir5dv4.fsf@HIDDEN>
Date: Wed, 18 May 2016 17:09:55 -0400
Message-ID: <CAFw1JJ6-3Ac4k6ywjfoe4YvVvTdUGOn=Sz7F8rt2o6wPsBcsWA@HIDDEN>
Subject: Re: bug#22818: 25.0.91;
 nextstep/Emacs.app Crash ns_compute_glyph_string_overhangs
From: "Aaron S. Hawley" <aaron.s.hawley@HIDDEN>
To: Alan Third <alan@HIDDEN>
Content-Type: text/plain; charset=UTF-8
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 22818
Cc: 22818 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.7 (/)

> Hi, I can't reproduce this on 25.1. Can you please check with the latest
> pretest and let us know if you're still getting the crash?

Same result with the latest Emacs on Mac OS X 10.10.5

M-x version RET
GNU Emacs 25.0.94.1 (x86_64-apple-darwin13.4.0, NS appkit-1265.21
Version 10.9.5 (Build 13F1603)) of 2016-05-17




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#22818; Package emacs. Full text available.
Added tag(s) unreproducible. Request was from Alan Third <alan@HIDDEN> to control <at> debbugs.gnu.org. Full text available.

Message received at 22818 <at> debbugs.gnu.org:


Received: (at 22818) by debbugs.gnu.org; 18 May 2016 20:07:51 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Wed May 18 16:07:50 2016
Received: from localhost ([127.0.0.1]:57313 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1b37l0-0001Av-Nc
	for submit <at> debbugs.gnu.org; Wed, 18 May 2016 16:07:50 -0400
Received: from mail-wm0-f52.google.com ([74.125.82.52]:35329)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <athird@HIDDEN>) id 1b37kz-0001Ag-C0
 for 22818 <at> debbugs.gnu.org; Wed, 18 May 2016 16:07:49 -0400
Received: by mail-wm0-f52.google.com with SMTP id r12so50908758wme.0
 for <22818 <at> debbugs.gnu.org>; Wed, 18 May 2016 13:07:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=googlemail.com; s=20120113;
 h=sender:from:to:cc:subject:references:date:in-reply-to:message-id
 :user-agent:mime-version;
 bh=8CPasdnrMjBxy+EyKGUHABKHgnXUbWljI2GO/5tqt1w=;
 b=jUQTBR8Mg3S6j9GE3xHsMSPhJyXm5TWMF8RNTpvaqmXw+5bgd7Czh91ZtaefwHiJeb
 EuNpCt5Llw5hWknGqNtwZC1DBPZAMMmkALeVFKZxQTDOuhq1W6uUQDzezXqz5ET/OVGn
 XTXPeV3Dpi3Tg2EbzztSyJ7kl0QGtM5mWiCejt/n3xhXtwgv96lJ1yeDA/sUohQn41iS
 DvIdpD1+9OfDaAq9HMDqx8DYEL+L+FLqDn/pb8OWF2lRh2+zXHaXAI8jR+NxvLSaE4px
 gDBtwqwmouWUsYhNyWZ5nxP0MdlQxgYiVHjeUyr4ohPHu1r+eeo/y3VtaLPpooQ/jKI9
 s78g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:sender:from:to:cc:subject:references:date
 :in-reply-to:message-id:user-agent:mime-version;
 bh=8CPasdnrMjBxy+EyKGUHABKHgnXUbWljI2GO/5tqt1w=;
 b=KLEQx1bzoF+SbveuN7WZP3ELBTSRQ6OF9Jlzx0zQXTMLc6BX5CJ0nm5sJ+6/2Svwlg
 vHcJwajTfDMWY7HaafO4334/4uDSSJZapf42MILTJwG4aStA+G0EXvArOKv4RVTnE0Xf
 TSzweR34+TpDuxv51ZkIA3/g2KooYRo0HrQ5g/rveO8IL3EI6HAK+LHd2W2zgJ5C7HER
 /zb8PVwLM/CAKDE1wm8PiUdXGIyYdAOnT1YXPANYkxubHXDJOSAHtKzRiPEiy1d9aAzM
 GWTa7h3wjup69eQPtcFdEwwGZREcdzHR7QJCuQWH1qyQWtvmDGxkzO98UuK73YmuXdqb
 gqFg==
X-Gm-Message-State: AOPr4FV2PSmgYU2au0os35W/9SyI7IqCClUkXxum8feLKY34TcmOCqRk8T9OEi38mwXhkA==
X-Received: by 10.28.16.17 with SMTP id 17mr30360212wmq.17.1463602063705;
 Wed, 18 May 2016 13:07:43 -0700 (PDT)
Received: from breton.holly.idiocy.org
 (ip6-2001-08b0-03f8-8129-2873-0d96-ee2f-d85f.holly.idiocy.org.
 [2001:8b0:3f8:8129:2873:d96:ee2f:d85f])
 by smtp.gmail.com with ESMTPSA id r75sm31263229wme.18.2016.05.18.13.07.42
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Wed, 18 May 2016 13:07:42 -0700 (PDT)
From: Alan Third <alan@HIDDEN>
To: "Aaron S. Hawley" <aaron.s.hawley@HIDDEN>
Subject: Re: bug#22818: 25.0.91;
 nextstep/Emacs.app Crash ns_compute_glyph_string_overhangs
References: <CAFw1JJ7Fbfognbq7uEhUgeN0B4pdxEtqkUo2sybf86FZBPYz+w@HIDDEN>
Date: Wed, 18 May 2016 21:07:43 +0100
In-Reply-To: <CAFw1JJ7Fbfognbq7uEhUgeN0B4pdxEtqkUo2sybf86FZBPYz+w@HIDDEN>
 (Aaron S. Hawley's message of "Fri, 26 Feb 2016 08:41:52 -0500")
Message-ID: <m2k2ir5dv4.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.0.93 (darwin)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: -0.5 (/)
X-Debbugs-Envelope-To: 22818
Cc: 22818 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.5 (/)

"Aaron S. Hawley" <aaron.s.hawley@HIDDEN> writes:

> To reproduce, unpack the attached zip file, and open the UTF-8 text
> file as follows:
>
> /Applications/Emacs.app/Contents/MacOS/Emacs -Q test-file
>
> A segmentation fault occurs, and Mac OS complains that "Emacs quit
> unexpectedly."

Hi, I can't reproduce this on 25.1. Can you please check with the latest
pretest and let us know if you're still getting the crash?
-- 
Alan Third




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#22818; Package emacs. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 26 Feb 2016 13:42:10 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Fri Feb 26 08:42:10 2016
Received: from localhost ([127.0.0.1]:47026 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1aZIen-0002A1-Nr
	for submit <at> debbugs.gnu.org; Fri, 26 Feb 2016 08:42:10 -0500
Received: from eggs.gnu.org ([208.118.235.92]:49496)
 by debbugs.gnu.org with esmtp (Exim 4.84)
 (envelope-from <aaron.s.hawley@HIDDEN>) id 1aZIel-00029m-UV
 for submit <at> debbugs.gnu.org; Fri, 26 Feb 2016 08:42:08 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <aaron.s.hawley@HIDDEN>) id 1aZIea-0003UO-Nh
 for submit <at> debbugs.gnu.org; Fri, 26 Feb 2016 08:42:02 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,FREEMAIL_FROM,
 T_DKIM_INVALID autolearn=disabled version=3.3.2
Received: from lists.gnu.org ([2001:4830:134:3::11]:59314)
 by eggs.gnu.org with esmtp (Exim 4.71)
 (envelope-from <aaron.s.hawley@HIDDEN>) id 1aZIea-0003UJ-KK
 for submit <at> debbugs.gnu.org; Fri, 26 Feb 2016 08:41:56 -0500
Received: from eggs.gnu.org ([2001:4830:134:3::10]:40441)
 by lists.gnu.org with esmtp (Exim 4.71)
 (envelope-from <aaron.s.hawley@HIDDEN>) id 1aZIeZ-0003g8-7V
 for bug-gnu-emacs@HIDDEN; Fri, 26 Feb 2016 08:41:56 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <aaron.s.hawley@HIDDEN>) id 1aZIeY-0003TW-1C
 for bug-gnu-emacs@HIDDEN; Fri, 26 Feb 2016 08:41:55 -0500
Received: from mail-ig0-x235.google.com ([2607:f8b0:4001:c05::235]:35383)
 by eggs.gnu.org with esmtp (Exim 4.71)
 (envelope-from <aaron.s.hawley@HIDDEN>) id 1aZIeX-0003TG-QU
 for bug-gnu-emacs@HIDDEN; Fri, 26 Feb 2016 08:41:53 -0500
Received: by mail-ig0-x235.google.com with SMTP id hb3so34592860igb.0
 for <bug-gnu-emacs@HIDDEN>; Fri, 26 Feb 2016 05:41:53 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:date:message-id:subject:from:to;
 bh=dbGeQP6QatRxqdsV4ALa57axjuUq5pve44t+US992As=;
 b=VmEQRX7bMoF5utZfMHfB8JSpOaBrxRjMVGyJsbjFmTF6H5vUFa7LFPwUqd07tS6eLf
 /xBAb16YztUqjQj3UCbMHFyLTTPWVogF/Fl9miijvV/9VENNBbZQbtSMbL51xuwG9sN2
 q/i3NoCd2ZhduU/CmEfv8yeYB/JZylb80swl3kxdE5HDdJjckPo2FTemBNAJEnl1RWmC
 0UGAPRxE18UToSyJe39QoBsJAnU1re3xv6YBwVos9p+JqAaS1bRjAlholydKvsCCWCgy
 fofZm+MvnVQgL56njGx2ySv5sndcxXaWFDmnGJluD8kyvqQ7KgYE2SOMBH5WazVGlO7Y
 1vDw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:mime-version:date:message-id:subject:from:to;
 bh=dbGeQP6QatRxqdsV4ALa57axjuUq5pve44t+US992As=;
 b=aBFB+1l4d43iJtsB9gXKiYQBOw6zOPAntWKPegyVfs7RVOF5n3UPUZHpqipHwB/8Jk
 NYO6hPBa7btMxkN04y9cGecALj0n2Lz+0w74gs3+wPpKIx9HZrX6Wg43Skf4+Zrpo7jx
 GW3n4F4FtvrlydMoxNWZjvJxGdOlJu53vMo2p6xz0PitdHxlS3/vIL7u+pwQATUZAIFY
 c9cJ5LpJpBtz2mjYIR+xc5ijqtFaAExh9ABpD1pzn2IXD8AXCmzETC8ecE5F3YdanSdd
 /lZq+ozYlWUovOeSLTgS6iD8r9vhoKLZNu+oeeYpeo7dYU2J2kMYfcn1IS2MR60e4Qkn
 I6IQ==
X-Gm-Message-State: AD7BkJJZF97QZyg8n/MiPyD9xaoNJ+yMmH6P05l6sLpUpO4mkJqOePcmg8hqS7ygtDPn1B0vmHlWbT1p0ewWWw==
MIME-Version: 1.0
X-Received: by 10.50.64.179 with SMTP id p19mr2719457igs.25.1456494113017;
 Fri, 26 Feb 2016 05:41:53 -0800 (PST)
Received: by 10.107.129.134 with HTTP; Fri, 26 Feb 2016 05:41:52 -0800 (PST)
Date: Fri, 26 Feb 2016 08:41:52 -0500
Message-ID: <CAFw1JJ7Fbfognbq7uEhUgeN0B4pdxEtqkUo2sybf86FZBPYz+w@HIDDEN>
Subject: 25.0.91; nextstep/Emacs.app Crash ns_compute_glyph_string_overhangs
From: "Aaron S. Hawley" <aaron.s.hawley@HIDDEN>
To: bug-gnu-emacs <bug-gnu-emacs@HIDDEN>
Content-Type: multipart/mixed; boundary=047d7bd75cec3a050b052cac7687
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x
X-Received-From: 2001:4830:134:3::11
X-Spam-Score: -4.0 (----)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -4.0 (----)

--047d7bd75cec3a050b052cac7687
Content-Type: text/plain; charset=UTF-8

Hello,

I'm using Emacs 25.0.91 pretest as built by David Caldwell at
emacsforosx.com, and it crashes after opening a 104 byte file with
UTF-8 characters that causes Emacs to crash.  Admittedly, the file
contains malformed data that I copied from elsewhere.  This will make
it hard to determine what it should do, but at least it shows a
problem with the existing code.  I was able to confirm the issue with
Emacs trunk, and have included a GDB backtrace below.

To reproduce, unpack the attached zip file, and open the UTF-8 text
file as follows:

/Applications/Emacs.app/Contents/MacOS/Emacs -Q test-file

A segmentation fault occurs, and Mac OS complains that "Emacs quit
unexpectedly."

This issues exists with Emacs 24.5, as well.  However, it doesn't
occur if you use the terminal/tty version of Emacs.

Also attached is patch that shows where the segfault occurs and avoids
triggering it because a font struct is NULL.  Although avoiding a
crash, it likely doesn't do the right thing -- it only treats the
symptoms and not the cause.  Perhaps opening on another platform
(GNU/Linux?) would help to learn what the right thing to do is.

Thanks for Emacs,
Aaron

$ gdb --args ./nextstep/Emacs.app/Contents/MacOS/Emacs -Q test-file
GNU gdb (GDB) 7.10.1
Copyright (C) 2015 Free Software Foundation, Inc.
Reading symbols from ./nextstep/Emacs.app/Contents/MacOS/Emacs...done.
(gdb) run
Starting program: .nextstep/Emacs.app/Contents/MacOS/Emacs -Q test-file
[New Thread 0x1713 of process 58247]
[New Thread 0x1803 of process 58247]
[New Thread 0x1903 of process 58247]
[New Thread 0x1a03 of process 58247]
[New Thread 0x1b03 of process 58247]
[New Thread 0x1c0b of process 58247]
[New Thread 0x1d13 of process 58247]
Error while mapping shared library sections:
cl_kernels: No such file or directory.
Error while mapping shared library sections:
cl_kernels: No such file or directory.
[New Thread 0x1e33 of process 58247]

Program received signal SIGSEGV, Segmentation fault.
ns_compute_glyph_string_overhangs (s=0x7fff5fbfd690) at nsterm.m:2551
2551      if (EQ (font->driver->type, Qns))
(gdb) backtrace
#0  ns_compute_glyph_string_overhangs (s=0x7fff5fbfd690) at nsterm.m:2551
#1  0x000000010003a6c7 in draw_glyphs (w=0x101036208, x=<optimized
out>, row=0x101992d00, area=TEXT_AREA, start=0, end=52,
    hl=<optimized out>, overlaps=<optimized out>) at xdisp.c:25534
#2  0x0000000100039916 in x_write_glyphs (w=0x23a, updated_row=0x0,
start=<optimized out>, updated_area=<optimized out>, len=52)
    at xdisp.c:27630
#3  0x000000010000ab96 in update_text_area (w=<optimized out>,
updated_row=0x23b, vpos=<optimized out>) at dispnew.c:3608
#4  update_window_line (w=0x43007877a76c9b44, vpos=26815744,
mouse_face_overwritten_p=0x7fff5fbfdb87) at dispnew.c:3851
#5  0x0000000100006bde in update_window (w=0x43007877a76c9b44,
    force_p=<error reading variable: Cannot access memory at address
0x1>) at dispnew.c:3473
#6  0x00000001000052d4 in update_window_tree (w=<optimized out>,
force_p=<optimized out>) at dispnew.c:3215
#7  0x000000010000511c in update_frame (f=0x43007877a76c9b44,
force_p=<optimized out>, inhibit_hairy_id_p=false)
    at dispnew.c:3104
#8  0x0000000100028ca6 in redisplay_internal () at xdisp.c:13963
#9  0x00000001000c44e4 in read_char (commandflag=1, map=4320568723,
prev_event=0, used_mouse_menu=0x7fff5fbff5ef, end_time=0x0)
    at keyboard.c:2466
#10 0x00000001000c1d1e in read_key_sequence (keybuf=<optimized out>,
bufsize=30, prompt=<optimized out>,
    dont_downcase_last=<optimized out>,
can_return_switch_frame=<optimized out>, fix_current_buffer=<optimized
out>,
    prevent_redisplay=<optimized out>) at keyboard.c:9045
#11 0x00000001000c054d in command_loop_1 () at keyboard.c:1347
#12 0x000000010013d886 in internal_condition_case
(bfun=0x7fff5fbfd690, handlers=<optimized out>, hfun=<optimized out>)
    at eval.c:1309
#13 0x00000001000d1560 in command_loop_2 (ignore=<optimized out>) at
keyboard.c:1089
#14 0x000000010013d3f6 in internal_catch (tag=<optimized out>,
func=0x7fff5fbfd690, arg=4827991255846525764) at eval.c:1074
#15 0x00000001000bf77e in command_loop () at keyboard.c:1068
#16 0x00000001000bf699 in recursive_edit_1 () at keyboard.c:674
#17 0x00000001000bf8bc in Frecursive_edit () at keyboard.c:745
#18 0x00000001000be3c0 in main (argc=<error reading variable: Cannot
access memory at address 0x0>, argv=<optimized out>)
    at emacs.c:1610

---
 src/nsterm.m | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/nsterm.m b/src/nsterm.m
index 43d1377..adce35e 100644
--- a/src/nsterm.m
+++ b/src/nsterm.m
@@ -2532,6 +2532,9 @@ ns_compute_glyph_string_overhangs (struct glyph_string *s)
 {
   struct font *font = s->font;

+  if (!font)
+    return;
+
   if (s->char2b)
     {
       struct font_metrics metrics;

--047d7bd75cec3a050b052cac7687
Content-Type: text/plain; charset=US-ASCII; 
	name="emacs-ns_compute_glyph_string_overhangs-crash.diff"
Content-Disposition: attachment; 
	filename="emacs-ns_compute_glyph_string_overhangs-crash.diff"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_il3qvjf11

RnJvbSBlMDc1MDg4NzgzNmI1ZDgwZmE2ODE1MjZmNWNkNDYzY2M3ZDAyNGE2IE1vbiBTZXAgMTcg
MDA6MDA6MDAgMjAwMQpGcm9tOiAiQWFyb24gUy4gSGF3bGV5IiA8YWFyb24ucy5oYXdsZXlAZ21h
aWwuY29tPgpEYXRlOiBUaHUsIDI1IEZlYiAyMDE2IDEzOjUzOjM5IC0wNTAwClN1YmplY3Q6IFtQ
QVRDSF0gbmV4dHN0ZXAvRW1hY3MuYXBwIENyYXNoIG5zX2NvbXB1dGVfZ2x5cGhfc3RyaW5nX292
ZXJoYW5ncwoKKiBuc3Rlcm0ubSAobnNfY29tcHV0ZV9nbHlwaF9zdHJpbmdfb3ZlcmhhbmdzKTog
QXZvaWQgY3Jhc2ggd2hlbgpnbHlwaF9zdHJpbmctPmZvbnQgaXMgTlVMTC4KLS0tCiBzcmMvbnN0
ZXJtLm0gfCAzICsrKwogMSBmaWxlIGNoYW5nZWQsIDMgaW5zZXJ0aW9ucygrKQoKZGlmZiAtLWdp
dCBhL3NyYy9uc3Rlcm0ubSBiL3NyYy9uc3Rlcm0ubQppbmRleCA0M2QxMzc3Li5hZGNlMzVlIDEw
MDY0NAotLS0gYS9zcmMvbnN0ZXJtLm0KKysrIGIvc3JjL25zdGVybS5tCkBAIC0yNTMyLDYgKzI1
MzIsOSBAQCBuc19jb21wdXRlX2dseXBoX3N0cmluZ19vdmVyaGFuZ3MgKHN0cnVjdCBnbHlwaF9z
dHJpbmcgKnMpCiB7CiAgIHN0cnVjdCBmb250ICpmb250ID0gcy0+Zm9udDsKIAorICBpZiAoIWZv
bnQpCisgICAgcmV0dXJuOworCiAgIGlmIChzLT5jaGFyMmIpCiAgICAgewogICAgICAgc3RydWN0
IGZvbnRfbWV0cmljcyBtZXRyaWNzOwotLSAKMi4zLjAgKEFwcGxlIEdpdC01NCkKCg==
--047d7bd75cec3a050b052cac7687
Content-Type: application/zip; name="test-file.zip"
Content-Disposition: attachment; filename="test-file.zip"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_il3qw1641

UEsDBBQACAAIAAJzWUgAAAAAAAAAAAAAAAAJABAAdGVzdC1maWxlVVgMAONXz1bTVM9W9gEUAEWM
MQqAMBRDd0/xj2oHRa2IFsQ7ONvBofyLJNCjGERwSEjCIw1XTgyvRzgXRs4oTEpaUXBbzX3Nh3EX
1bGVRm44TUBSEcSBAddHwDXoA27/3QNQSwcIpJd3tlIAAABoAAAAUEsBAhUDFAAIAAgAAnNZSKSX
d7ZSAAAAaAAAAAkADAAAAAAAAAAAQKSBAAAAAHRlc3QtZmlsZVVYCADjV89W01TPVlBLBQYAAAAA
AQABAEMAAACZAAAAAAA=
--047d7bd75cec3a050b052cac7687--




Acknowledgement sent to "Aaron S. Hawley" <aaron.s.hawley@HIDDEN>:
New bug report received and forwarded. Copy sent to bug-gnu-emacs@HIDDEN. Full text available.
Report forwarded to bug-gnu-emacs@HIDDEN:
bug#22818; Package emacs. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Sat, 15 Aug 2020 05:30:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.