GNU bug report logs - #71693
30.0.50, SIGSEGV in FRAME_TTY (sf) in redisplay_internal

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: emacs; Reported by: Daniel Clemente <n142857@HIDDEN>; merged with #71694; Done: Stefan Kangas <stefankangas@HIDDEN>; Maintainer for emacs is bug-gnu-emacs@HIDDEN.
Forcibly Merged 71693 71694. Request was from Stefan Kangas <stefankangas@HIDDEN> to control <at> debbugs.gnu.org. Full text available.

Message received at 71693 <at> debbugs.gnu.org:


Received: (at 71693) by debbugs.gnu.org; 26 Jun 2024 13:30:38 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Wed Jun 26 09:30:37 2024
Received: from localhost ([127.0.0.1]:38810 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1sMSjN-0000LV-LF
	for submit <at> debbugs.gnu.org; Wed, 26 Jun 2024 09:30:37 -0400
Received: from mail-ed1-f48.google.com ([209.85.208.48]:57809)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <n142857@HIDDEN>) id 1sMSjL-0000L6-JU
 for 71693 <at> debbugs.gnu.org; Wed, 26 Jun 2024 09:30:36 -0400
Received: by mail-ed1-f48.google.com with SMTP id
 4fb4d7f45d1cf-57d07f07a27so332376a12.3
 for <71693 <at> debbugs.gnu.org>; Wed, 26 Jun 2024 06:30:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=gmail.com; s=20230601; t=1719408567; x=1720013367; darn=debbugs.gnu.org;
 h=content-transfer-encoding:cc:to:subject:message-id:date:from
 :in-reply-to:references:mime-version:from:to:cc:subject:date
 :message-id:reply-to;
 bh=RhhbVLmlH2FYMHeLVMzKDCr5yK2YTMkRnEvm3lYUbqs=;
 b=MbkoeT2aYmlQQjp0NayUEnOcOoDqZl0dGaMtXFIYcS4VF44eHolwFKhHduSjBUTseK
 r3yHKdIWcX6hEApnR65V5fPeNWBufrtu+WifdJew0OVHKvHHQAyCAKiKtoK6BeW3q6Ow
 BvzxGmnlpRld+PciJojKxsZs6habXzrZzOCUO9pP7JfFCtIncz09fjQKvI+gwiXvhUT6
 fXYcLqYAvRCJMKcAyIGWLOgu+w5/4/ZSQX9cw94zqTkShLSY47Ru+z6/kl/jdORb8SMM
 qGT0FeYeKPpJZQzpDRk+C2+z8IY5vWvQhIZ4L8AzAYUZfqfhWbInE1NiDbFgOy5t/NPq
 Vovg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1719408567; x=1720013367;
 h=content-transfer-encoding:cc:to:subject:message-id:date:from
 :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc
 :subject:date:message-id:reply-to;
 bh=RhhbVLmlH2FYMHeLVMzKDCr5yK2YTMkRnEvm3lYUbqs=;
 b=FokZfu3gAnjjhXE3P0dIs5bRgkHvJtaDMK7ZVe3eEquUOAGYB88zukaC5alM80u7xv
 /yAr7UHmFVA02UPdLemSInWvkOBhu3ADaFAp89xWhkRG4+3KoPxFlzMMwz545/g8neYg
 9IRkdQKnFLhR54dtaa1Wsw4Hzs+y/1jHWZfxExCgNbUvNYmD6wb9Z3HGvvoCcipsq8Fh
 xZRgu2fwsRF6V69QZASA5H3taDug0XJXZNwHnZIHwHd0J3PmWU/vdyTCZx/sDVgzUNN4
 3w8qTGHaTiypmwSWMfybDjPC+SIoypIFFg9lI29KNmg/epm26VD/ZBL3NZ8Ds+l/Ms+7
 EQjw==
X-Gm-Message-State: AOJu0YzKv/Dk8WXRv9OWRQ/+DklFhvoMiYPBMxej9sN0dQyTuoYxpHJa
 xH/k0YdTRDmFX8wuth/T6JTlGdzUQ9YhqZ7JnyEZ3bsYhUNpiXdyHXw2gt5Il7pQVmFjIuF8MJA
 ONqMd7nOsYcJQZkf2d03SLoQGJvk=
X-Google-Smtp-Source: AGHT+IHYtLMk7QmjFi/2x5ph6N0P2cG1weMPka/7fC/syH50Dal9Bwwdr9RnW5uHodaE9x1zsr07Z36DxkLKCDXaXUY=
X-Received: by 2002:a50:c054:0:b0:57d:669:cafb with SMTP id
 4fb4d7f45d1cf-57d70075c73mr4755503a12.40.1719408567282; Wed, 26 Jun 2024
 06:29:27 -0700 (PDT)
MIME-Version: 1.0
References: <CAJKAhPBsP+AZoSykS5-bLZRxSyHdf3bJm6QxOtWbquwvSNJRyw@HIDDEN>
 <865xu2l6qo.fsf@HIDDEN>
In-Reply-To: <865xu2l6qo.fsf@HIDDEN>
From: Daniel Clemente <n142857@HIDDEN>
Date: Wed, 26 Jun 2024 13:28:58 +0000
Message-ID: <CAJKAhPDuOP9NpEexwqBMikU4=AFTNEngNv=5J7KKk-POzFt6=A@HIDDEN>
Subject: Re: bug#71693: 30.0.50,
 SIGSEGV in FRAME_TTY (sf) in redisplay_internal
To: Eli Zaretskii <eliz@HIDDEN>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: 0.2 (/)
X-Debbugs-Envelope-To: 71693
Cc: 71693 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.8 (/)

> >
> > I enabled -fsanitize. I'm using an X terminal to run TTY Emacs inside.
> > I opened the daemon inside gdb with emacs --fg-daemon -Q
>
> Did you follow the advice and notes in etc/DEBUG regarding runn ing
> Emacs compiled with this option?

I missed some things. For instance I used this:

  -fsanitize=3Dundefined,address,bounds-strict,float-cast-overflow ''

But I didn't notice this:

Address sanitization is incompatible with undefined-behavior
sanitization, unfortunately


If you want me to enable just one for next reports, please tell me
which one. For now I think I'll disable the whole -fsanitize, because
of the false positives.


>
> > [Detaching after fork from child process 5364]
> > xdisp.c:16932:10: runtime error: member access within null pointer of
> > type 'struct terminal'
> >
> > Program received signal SIGSEGV, Segmentation fault.
> > 0x0000555556610d93 in redisplay_internal () at xdisp.c:16932
> > 16932          && FRAME_TTY (sf)->previous_frame !=3D sf)
>
> If the claim is that sf->terminal is a NULL pointer, then how come we
> don't segfault when running a build without -fsanitize?

Even with -fsanitize, it didn't crash each time, just this particular time.

I have seen similar crashes in redisplay code even without -fsanitize,
but none at this particular line and none doing something as simple as
opening and closing 3 frames.

I also thought that maybe I had enabled so many debug options (-O0,
-fsanitize, =E2=80=A6) that my emacs become slower and therefore more prone=
 to
errors that depend on timing, like things happening at specific points
of the frame opening and closing code.

But this report may be bogus and you may close it if it seems so.




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#71693; Package emacs. Full text available.

Message received at 71693 <at> debbugs.gnu.org:


Received: (at 71693) by debbugs.gnu.org; 21 Jun 2024 16:25:01 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Fri Jun 21 12:25:01 2024
Received: from localhost ([127.0.0.1]:43123 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1sKh4O-0000Zu-SF
	for submit <at> debbugs.gnu.org; Fri, 21 Jun 2024 12:25:01 -0400
Received: from eggs.gnu.org ([209.51.188.92]:58460)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <eliz@HIDDEN>) id 1sKh4N-0000ZY-KL
 for 71693 <at> debbugs.gnu.org; Fri, 21 Jun 2024 12:24:59 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <eliz@HIDDEN>)
 id 1sKf5f-00030R-GN; Fri, 21 Jun 2024 10:18:11 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org;
 s=fencepost-gnu-org; h=References:Subject:In-Reply-To:To:From:Date:
 mime-version; bh=HMcQ2O+cvH56ojaL7KhevMvnzR3uJNRHmBEbEytlb5E=; b=ivw8meiI8DoQ
 ZfTsVdJYcn9Ljhn0ZVzSqrzY4FK0rirtxxSS/9ykkiM5esZ1Pa/X2FSPzZfGYYO34if/PdpBjIKdf
 Wx2t+fSk0xv0YaB8K9ZV0IIFGxFoBDr8xmugs0g9vuxFSh9JIlGgmoS1bn+7Ms/KwhY2J9VCq4QUZ
 slmh3APqIj5lp6B73kBteRJRAXOB4He20oCnemxUWMYeMCZ8hj0IHVhqAW6Ba7K8pPVLfTWUbKPl2
 4mE9G/01iIqC35nA3nHcWK+qiOCvdfRz9F27ZdSTxjyqucUHNX18yjy3hbQ6zKDdmX1Iqjq8NzoMd
 62bE+dVcGV+rUJ2Ti/2OSA==;
Date: Fri, 21 Jun 2024 17:18:07 +0300
Message-Id: <865xu2l6qo.fsf@HIDDEN>
From: Eli Zaretskii <eliz@HIDDEN>
To: Daniel Clemente <n142857@HIDDEN>
In-Reply-To: <CAJKAhPBsP+AZoSykS5-bLZRxSyHdf3bJm6QxOtWbquwvSNJRyw@HIDDEN>
 (message from Daniel Clemente on Fri, 21 Jun 2024 10:46:58 +0000)
Subject: Re: bug#71693: 30.0.50,
 SIGSEGV in FRAME_TTY (sf) in redisplay_internal
References: <CAJKAhPBsP+AZoSykS5-bLZRxSyHdf3bJm6QxOtWbquwvSNJRyw@HIDDEN>
X-Spam-Score: -2.3 (--)
X-Debbugs-Envelope-To: 71693
Cc: 71693 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -3.3 (---)

> From: Daniel Clemente <n142857@HIDDEN>
> Date: Fri, 21 Jun 2024 10:46:58 +0000
> 
> I enabled -fsanitize. I'm using an X terminal to run TTY Emacs inside.
> I opened the daemon inside gdb with emacs --fg-daemon -Q

Did you follow the advice and notes in etc/DEBUG regarding runn ing
Emacs compiled with this option?

> [Detaching after fork from child process 5364]
> xdisp.c:16932:10: runtime error: member access within null pointer of
> type 'struct terminal'
> 
> Program received signal SIGSEGV, Segmentation fault.
> 0x0000555556610d93 in redisplay_internal () at xdisp.c:16932
> 16932          && FRAME_TTY (sf)->previous_frame != sf)

If the claim is that sf->terminal is a NULL pointer, then how come we
don't segfault when running a build without -fsanitize?




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#71693; Package emacs. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Sat, 1 Mar 2025 02:15:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.