bug#57267: 28.1; emacs crashes when loading too many images

[james]

------------------------------------------------------------------------------
Unrelated to the crash but...
Not sure why this happens, but emacs 29 throws this error upon start up.
Any tips on debugging this?
Error (use-package): evil/:catch: Symbol’s value as variable is void: ‹\213 
(It’s one full letter, not actually “\213”)
Error (use-package): evil-surround/:catch: Symbol’s value as variable is void: 
‹\213
------------------------------------------------------------------------------

(gdb) r
Starting program: 
/Users/james/Code/emacs/nextstep/Emacs.app/Contents/MacOS/Emacs
[New Thread 0x4f0f of process 27639]
[New Thread 0x2e53 of process 27639]
[New Thread 0x2b0b of process 27639]
warning: unhandled dyld version (17)
[New Thread 0x200b of process 27639]
[New Thread 0x2a3f of process 27639]
[New Thread 0x4f1b of process 27639]
[New Thread 0x1f27 of process 27639]
[New Thread 0x21ab of process 27639]
[New Thread 0x2aa3 of process 27639]
[New Thread 0x2c4b of process 27639]
[New Thread 0x2e5f of process 27639]
[New Thread 0x510b of process 27639]
[New Thread 0x4f37 of process 27639]
[New Thread 0x2d4f of process 27639]
[New Thread 0x4f7f of process 27639]
[New Thread 0x2d47 of process 27639]
[New Thread 0x5127 of process 27639]
[New Thread 0x516b of process 27639]
[New Thread 0x2d4b of process 27639]
[New Thread 0x4fa3 of process 27639]
[New Thread 0x2e3f of process 27639]
[New Thread 0x2c7b of process 27639]
[New Thread 0x2e43 of process 27639]
[New Thread 0x4fa7 of process 27639]
[New Thread 0x5113 of process 27639]
[New Thread 0x2c7f of process 27639]
[New Thread 0x2da3 of process 27639]
[New Thread 0x2e47 of process 27639]
[New Thread 0x4fcb of process 27639]
[New Thread 0x2ae3 of process 27639]
[New Thread 0x2e1f of process 27639]
[New Thread 0x2d47 of process 27639]
[New Thread 0x22d7 of process 27639]
[New Thread 0x4b03 of process 27639]
[New Thread 0x4c03 of process 27639]
[New Thread 0x4fdf of process 27639]
[New Thread 0x22a7 of process 27639]
[New Thread 0x2e23 of process 27639]
[New Thread 0x516b of process 27639]
[New Thread 0x1c6f of process 27639]
[New Thread 0x2a6b of process 27639]
[New Thread 0x1c27 of process 27639]
[New Thread 0x2f33 of process 27639]
[New Thread 0x4c6b of process 27639]
[New Thread 0x22ab of process 27639]
[New Thread 0x2a6f of process 27639]
[New Thread 0x2d4b of process 27639]
[New Thread 0x4fd3 of process 27639]
[New Thread 0x519f of process 27639]
[New Thread 0x1ca7 of process 27639]
[New Thread 0x4fd7 of process 27639]
[New Thread 0x2d83 of process 27639]
[New Thread 0x4b33 of process 27639]
[New Thread 0x4fb3 of process 27639]
[New Thread 0x512f of process 27639]
[New Thread 0x510f of process 27639]
[New Thread 0x1c03 of process 27639]
[New Thread 0x2db7 of process 27639]
[New Thread 0x22af of process 27639]
[New Thread 0x2a73 of process 27639]
[New Thread 0x2f37 of process 27639]
[New Thread 0x4ba7 of process 27639]
[New Thread 0x4c0f of process 27639]
[New Thread 0x1c07 of process 27639]
[New Thread 0x2dbb of process 27639]
[New Thread 0x2f3b of process 27639]
[New Thread 0x4c83 of process 27639]
[New Thread 0x4f5f of process 27639]
[New Thread 0x22b3 of process 27639]
[New Thread 0x2f3f of process 27639]
[New Thread 0x4bfb of process 27639]
[New Thread 0x4c27 of process 27639]
[New Thread 0x511b of process 27639]
[New Thread 0x2e9f of process 27639]
[New Thread 0x4f07 of process 27639]

Thread 75 received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x4f07 of process 27639]
0x00007fff28412029 in ?? ()
(gdb) thread 1
Thread ID 1 has terminated.
(gdb) bt full
#0  0x00007fff28412029 in ?? ()
No symbol table info available.
#1  0x000070000f517eb0 in ?? ()
No symbol table info available.
#2  0x00007fff31a43806 in ?? ()
No symbol table info available.
#3  0x000070000f517eb0 in ?? ()
No symbol table info available.
#4  0x00007fff202c000e in ?? ()
No symbol table info available.
#5  0x000000022cf81d50 in ?? ()
No symbol table info available.
#6  0x000000023c3cfc00 in ?? ()
No symbol table info available.
#7  0x000070000f517f80 in ?? ()
No symbol table info available.
#8  0x0000000000000001 in ?? ()
No symbol table info available.
#9  0x00007ffeefbf5e50 in ?? ()
No symbol table info available.
#10 0x000000022cfb6a70 in ?? ()
No symbol table info available.
#11 0x000070000f517ee0 in ?? ()
No symbol table info available.
#12 0x00007fff31a4376a in ?? ()
No symbol table info available.
#13 0x000000022cf91130 in ?? ()
No symbol table info available.
#14 0x00000001629b3800 in ?? ()
No symbol table info available.
#15 0x0000000000000000 in ?? ()
No symbol table info available.

Thread 75 received signal SIGBUS, Bus error.
<function called from gdb>
The program being debugged was signaled while in a function called from GDB.
GDB remains in the frame where the signal was received.
To change this behavior use "set unwindonsignal on".
Evaluation of the expression containing the function
(backtrace_top) will be abandoned.
When the function is done executing, GDB will silently stop.

------------------------------------------------------------------------------

src/ $ lldb ../nextstep/Emacs.app/Contents/MacOS/Emacs
Emacs debugging support has been installed.
(lldb) target create "../nextstep/Emacs.app/Contents/MacOS/Emacs"
Current executable set to 
'/Users/james/Code/emacs/nextstep/Emacs.app/Contents/MacOS/Emacs' (x86_64).
(lldb) r
Process 35748 launched: 
'/Users/james/Code/emacs/nextstep/Emacs.app/Contents/MacOS/Emacs' (x86_64)
2022-08-18 15:52:02.166968-0400 Emacs[35748:16508700] SecTaskLoadEntitlements 
failed error=22 cs_flags=20, pid=35748
2022-08-18 15:52:02.167149-0400 Emacs[35748:16508700] 
SecTaskCopyDebugDescription: Emacs[35748]/0#-1 LF=0
2022-08-18 15:52:03.643896-0400 Emacs[35748:16508700] SecTaskLoadEntitlements 
failed error=22 cs_flags=20, pid=35748
2022-08-18 15:52:03.644124-0400 Emacs[35748:16508700] 
SecTaskCopyDebugDescription: Emacs[35748]/0#-1 LF=0
2022-08-18 15:52:04.193721-0400 Emacs[35748:16508700] SecTaskLoadEntitlements 
failed error=22 cs_flags=20, pid=35748
2022-08-18 15:52:04.193931-0400 Emacs[35748:16508700] 
SecTaskCopyDebugDescription: Emacs[35748]/0#-1 LF=0
2022-08-18 15:52:08.383398-0400 Emacs[35748:16508700] TSM 
AdjustCapsLockLEDForKeyTransitionHandling - _ISSetPhysicalKeyboardCapsLockLED 
Inhibit
2022-08-18 15:52:17.500613-0400 Emacs[35748:16508700] MTLIOAccelDevice bad 
MetalPluginClassName property (null)
2022-08-18 15:52:17.506912-0400 Emacs[35748:16508700] +[MTLIOAccelDevice 
registerDevices]: Zero Metal services found
2022-08-18 15:52:17.558383-0400 Emacs[35748:16508700] VPA info: plugin is 
INTEL, AVD_id = 1080080, AVD_api.Create:0x171657b3f
2022-08-18 15:52:17.597771-0400 Emacs[35748:16508700] VPA info: plugin is 
INTEL, AVD_id = 1080080, AVD_api.Create:0x171657b3f
2022-08-18 15:52:17.627444-0400 Emacs[35748:16508700] VPA info: plugin is 
INTEL, AVD_id = 1080080, AVD_api.Create:0x171657b3f
2022-08-18 15:52:17.750842-0400 Emacs[35748:16508700] flock failed to lock list 
file 
(/var/folders/wc/dtprc6t537s91rl6jj0m98040000gn/C//org.gnu.Emacs/com.apple.metal/31001/libraries.list):
 errno = 35
2022-08-18 15:52:17.751481-0400 Emacs[35748:16508700] flock failed to lock list 
file 
(/var/folders/wc/dtprc6t537s91rl6jj0m98040000gn/C//org.gnu.Emacs/com.apple.metal/31001/libraries1.list):
 errno = 35
2022-08-18 15:52:17.753735-0400 Emacs[35748:16508700] flock failed to lock list 
file 
(/var/folders/wc/dtprc6t537s91rl6jj0m98040000gn/C//org.gnu.Emacs/com.apple.metal/16777237_1116167/functions.list):
 errno = 35
2022-08-18 15:52:17.753803-0400 Emacs[35748:16508700] flock failed to lock list 
file 
(/var/folders/wc/dtprc6t537s91rl6jj0m98040000gn/C//org.gnu.Emacs/com.apple.metal/16777237_1116167/functions1.list):
 errno = 35
2022-08-18 15:52:23.495066-0400 Emacs[35748:16508700] VPA info: plugin is 
INTEL, AVD_id = 1080080, AVD_api.Create:0x171657b3f
2022-08-18 16:03:26.079022-0400 Emacs[35748:16508700] VPA info: plugin is 
INTEL, AVD_id = 1080080, AVD_api.Create:0x171657b3f
2022-08-18 16:03:26.845499-0400 Emacs[35748:16508700] VPA info: plugin is 
INTEL, AVD_id = 1080080, AVD_api.Create:0x171657b3f #### THIS REPEATS many 
times, cutting this off.
Process 35748 stopped
* thread #44, stop reason = EXC_BAD_ACCESS (code=2, address=0x718b828a0)
    frame #0: 0x0000000718b828a0
->  0x718b828a0: addb   %al, (%rax)
    0x718b828a2: addb   %al, (%rax)
    0x718b828a4: addb   %al, (%rax)
    0x718b828a6: addb   %al, (%rax)
Target 0: (Emacs) stopped.
(lldb)

------------------------------------------------------------------------------

(lldb) bt
* thread #44, stop reason = EXC_BAD_ACCESS (code=2, address=0x718b828a0)
  * frame #0: 0x0000000718b828a0
    frame #1: 0x00007fff31a448da AppleVPA`___lldb_unnamed_symbol479$$AppleVPA + 
336
    frame #2: 0x00007fff31a427ec AppleVPA`___lldb_unnamed_symbol455$$AppleVPA + 
254
    frame #3: 0x00007fff204a48fc libsystem_pthread.dylib`_pthread_start + 224
    frame #4: 0x00007fff204a0443 libsystem_pthread.dylib`thread_start + 15
(lldb)

------------------------------------------------------------------------------

(lldb) thread select 1
* thread #1, queue = 'com.apple.main-thread'
    frame #0: 0x00007fff204709de libsystem_kernel.dylib`__ulock_wait + 10
libsystem_kernel.dylib`__ulock_wait:
->  0x7fff204709de <+10>: jae    0x7fff204709e8            ; <+20>
    0x7fff204709e0 <+12>: movq   %rax, %rdi
    0x7fff204709e3 <+15>: jmp    0x7fff2046fac9            ; cerror_nocancel
    0x7fff204709e8 <+20>: retq
(lldb) bt
* thread #1, queue = 'com.apple.main-thread'
  * frame #0: 0x00007fff204709de libsystem_kernel.dylib`__ulock_wait + 10
    frame #1: 0x00007fff204a5f60 libsystem_pthread.dylib`_pthread_join + 362
    frame #2: 0x00007fff31a4287c AppleVPA`___lldb_unnamed_symbol456$$AppleVPA + 
132
    frame #3: 0x00007fff31a3abde AppleVPA`___lldb_unnamed_symbol279$$AppleVPA + 
72
    frame #4: 0x00007fff2066775a CoreFoundation`_CFRelease + 244
    frame #5: 0x00007fff2053e583 
CoreFoundation`__RELEASE_OBJECTS_IN_THE_ARRAY__ + 118
    frame #6: 0x00007fff2053e4c6 CoreFoundation`-[__NSArrayM dealloc] + 279
    frame #7: 0x00007fff2c082f12 
MediaToolbox`___lldb_unnamed_symbol186$$MediaToolbox + 270
    frame #8: 0x00007fff2066775a CoreFoundation`_CFRelease + 244
    frame #9: 0x00007fff28b7ce57 
ImageIO`AppleJPEGReadPlugin::copyIOSurfaceCallback(InfoRec*, CGImageProvider*, 
__CFDictionary const*) + 1229
    frame #10: 0x00007fff28b7d570 
ImageIO`AppleJPEGReadPlugin::createImageBlockSetWithHardwareDecode(InfoRec*, 
CGImageProvider*, CGSize, __CFDictionary const*) + 154
    frame #11: 0x00007fff28b0f679 
ImageIO`AppleJPEGReadPlugin::copyImageBlockSet(InfoRec*, CGImageProvider*, 
CGRect, CGSize, __CFDictionary const*) + 1955
    frame #12: 0x00007fff28b0e998 
ImageIO`IIO_Reader::CopyImageBlockSetProc(void*, CGImageProvider*, CGRect, 
CGSize, __CFDictionary const*) + 100
    frame #13: 0x00007fff28b2c527 
ImageIO`IIOImageProviderInfo::copyImageBlockSetWithOptions(CGImageProvider*, 
CGRect, CGSize, __CFDictionary const*) + 663
    frame #14: 0x00007fff28b0e8d0 
ImageIO`IIOImageProviderInfo::CopyImageBlockSetWithOptions(void*, 
CGImageProvider*, CGRect, CGSize, __CFDictionary const*) + 680
    frame #15: 0x00007fff250e82d0 CoreGraphics`imageProvider_retain_data + 77
    frame #16: 0x00007fff250e8246 CoreGraphics`CGDataProviderRetainData + 75
    frame #17: 0x00007fff250e826b 
CoreGraphics`provider_for_destination_retain_data + 17
    frame #18: 0x00007fff250e8246 CoreGraphics`CGDataProviderRetainData + 75
    frame #19: 0x00007fff250e80f6 CoreGraphics`CGAccessSessionCreate + 98
    frame #20: 0x00007fff250e9e57 CoreGraphics`get_access_session + 44
    frame #21: 0x00007fff250e954c CoreGraphics`img_raw_read + 1302
    frame #22: 0x00007fff251440f9 CoreGraphics`img_interpolate_read + 753
    frame #23: 0x00007fff250e75bc CoreGraphics`img_data_lock + 6164
    frame #24: 0x00007fff250e22f0 CoreGraphics`CGSImageDataLock + 1230
    frame #25: 0x00007fff250e1de9 CoreGraphics`RIPImageDataInitializeShared + 
164
    frame #26: 0x00007fff250e1aaa CoreGraphics`RIPImageCacheGetRetained + 750
    frame #27: 0x00007fff250e1574 CoreGraphics`ripc_AcquireRIPImageData + 384
    frame #28: 0x00007fff250e02a1 CoreGraphics`ripc_DrawImage + 1180
    frame #29: 0x00007fff250df4f7 CoreGraphics`CGContextDrawImageWithOptions + 
454
    frame #30: 0x00007fff22f119c5 AppKit`__74-[NSImageRep 
drawInRect:fromRect:operation:fraction:respectFlipped:hints:]_block_invoke + 902
    frame #31: 0x00007fff22f114fa AppKit`-[NSImageRep 
drawInRect:fromRect:operation:fraction:respectFlipped:hints:] + 936
    frame #32: 0x00007fff233b1dbc AppKit`__71-[NSImage 
drawInRect:fromRect:operation:fraction:respectFlipped:hints:]_block_invoke.1340 
+ 967
    frame #33: 0x00007fff22eea8b9 AppKit`-[NSImage 
_usingBestRepresentationForRect:context:hints:body:] + 129
    frame #34: 0x00007fff22f10ec1 AppKit`-[NSImage 
drawInRect:fromRect:operation:fraction:respectFlipped:hints:] + 1359
    frame #35: 0x000000010049358c 
Emacs`ns_dumpglyphs_image(s=0x00007ffeefbfa220, r=(origin = (x = 10, y = 222), 
size = (width = 700, height = 507))) at nsterm.m:3952:7
    frame #36: 0x000000010048f75e 
Emacs`ns_draw_glyph_string(s=0x00007ffeefbfa220) at nsterm.m:4349:7
    frame #37: 0x0000000100092b81 Emacs`draw_glyphs(w=0x0000000106152630, 
x=672, row=0x000000010424f700, area=TEXT_AREA, start=0, end=20, 
hl=DRAW_NORMAL_TEXT, overlaps=0) at xdisp.c:30449:5
    frame #38: 0x000000010008f72d Emacs`gui_write_glyphs(w=0x0000000106152630, 
updated_row=0x000000010424f700, start=0x0000000103cc9a00, 
updated_area=TEXT_AREA, len=20) at xdisp.c:32509:7
    frame #39: 0x0000000100019566 Emacs`update_text_area(w=0x0000000106152630, 
updated_row=0x000000010424f700, vpos=1, partial_p=0x00007ffeefbfaa4e) at 
dispnew.c:3981:2
    frame #40: 0x000000010001726d 
Emacs`update_window_line(w=0x0000000106152630, vpos=1, 
mouse_face_overwritten_p=0x00007ffeefbfab12) at dispnew.c:4239:11
    frame #41: 0x0000000100009bc6 Emacs`update_window(w=0x0000000106152630, 
force_p=true) at dispnew.c:3719:19
    frame #42: 0x000000010000a212 
Emacs`update_window_tree(w=0x0000000106152630, force_p=true) at 
dispnew.c:3444:14
    frame #43: 0x0000000100009278 Emacs`update_frame(f=0x0000000106153630, 
force_p=true, inhibit_hairy_id_p=false) at dispnew.c:3279:18
    frame #44: 0x000000010006dd0f Emacs`redisplay_internal at xdisp.c:17096:14
    frame #45: 0x00000001000763e9 Emacs`redisplay at xdisp.c:16103:3
    frame #46: 0x00000001001cf700 Emacs`read_char(commandflag=1, 
map=(EMACS_INT) $1 = 7654866048, prev_event=(struct Lisp_Symbol *) $4 = 
0x0000000100bb11e0, used_mouse_menu=0x00007ffeefbfe58f, 
end_time=0x0000000000000000) at keyboard.c:2643:6
    frame #47: 0x00000001001cae45 Emacs`read_key_sequence(keybuf=(EMACS_INT) $6 
= 110, prompt=(struct Lisp_Symbol *) $9 = 0x0000000100bb11e0, 
dont_downcase_last=false, can_return_switch_frame=true, 
fix_current_buffer=true, prevent_redisplay=false) at keyboard.c:10045:12
    frame #48: 0x00000001001c890e Emacs`command_loop_1 at keyboard.c:1384:15
    frame #49: 0x0000000100314451 
Emacs`internal_condition_case(bfun=(Emacs`command_loop_1 at keyboard.c:1277), 
handlers=(struct Lisp_Symbol *) $12 = 0x0000000100bb1270, hfun=(Emacs`cmd_error 
at keyboard.c:935)) at eval.c:1497:25
    frame #50: 0x00000001001c8203 Emacs`command_loop_2(handlers=(struct 
Lisp_Symbol *) $15 = 0x0000000100bb1270) at keyboard.c:1132:11
    frame #51: 0x00000001003134e6 Emacs`internal_catch(tag=(struct Lisp_Symbol 
*) $18 = 0x0000000100bbfbe0, func=(Emacs`command_loop_2 at keyboard.c:1128), 
arg=(struct Lisp_Symbol *) $21 = 0x0000000100bb1270) at eval.c:1220:25
    frame #52: 0x00000001001c7175 Emacs`command_loop at keyboard.c:1110:2
    frame #53: 0x00000001001c6f60 Emacs`recursive_edit_1 at keyboard.c:719:9
    frame #54: 0x00000001001c75a4 Emacs`Frecursive_edit at keyboard.c:802:3
    frame #55: 0x00000001001c3a2b Emacs`main(argc=1, argv=0x00007ffeefbff2e8) 
at emacs.c:2517:3
    frame #56: 0x00007fff204bff3d libdyld.dylib`start + 1
    frame #57: 0x00007fff204bff3d libdyld.dylib`start + 1
(lldb)

------------------------------------------------------------------------------


(lldb) bt all
* thread #1, queue = 'com.apple.main-thread'
  * frame #0: 0x00007fff204709de libsystem_kernel.dylib`__ulock_wait + 10
    frame #1: 0x00007fff204a5f60 libsystem_pthread.dylib`_pthread_join + 362
    frame #2: 0x00007fff31a4287c AppleVPA`___lldb_unnamed_symbol456$$AppleVPA + 
132
    frame #3: 0x00007fff31a3abde AppleVPA`___lldb_unnamed_symbol279$$AppleVPA + 
72
    frame #4: 0x00007fff2066775a CoreFoundation`_CFRelease + 244
    frame #5: 0x00007fff2053e583 
CoreFoundation`__RELEASE_OBJECTS_IN_THE_ARRAY__ + 118
    frame #6: 0x00007fff2053e4c6 CoreFoundation`-[__NSArrayM dealloc] + 279
    frame #7: 0x00007fff2c082f12 
MediaToolbox`___lldb_unnamed_symbol186$$MediaToolbox + 270
    frame #8: 0x00007fff2066775a CoreFoundation`_CFRelease + 244
    frame #9: 0x00007fff28b7ce57 
ImageIO`AppleJPEGReadPlugin::copyIOSurfaceCallback(InfoRec*, CGImageProvider*, 
__CFDictionary const*) + 1229
    frame #10: 0x00007fff28b7d570 
ImageIO`AppleJPEGReadPlugin::createImageBlockSetWithHardwareDecode(InfoRec*, 
CGImageProvider*, CGSize, __CFDictionary const*) + 154
    frame #11: 0x00007fff28b0f679 
ImageIO`AppleJPEGReadPlugin::copyImageBlockSet(InfoRec*, CGImageProvider*, 
CGRect, CGSize, __CFDictionary const*) + 1955
    frame #12: 0x00007fff28b0e998 
ImageIO`IIO_Reader::CopyImageBlockSetProc(void*, CGImageProvider*, CGRect, 
CGSize, __CFDictionary const*) + 100
    frame #13: 0x00007fff28b2c527 
ImageIO`IIOImageProviderInfo::copyImageBlockSetWithOptions(CGImageProvider*, 
CGRect, CGSize, __CFDictionary const*) + 663
    frame #14: 0x00007fff28b0e8d0 
ImageIO`IIOImageProviderInfo::CopyImageBlockSetWithOptions(void*, 
CGImageProvider*, CGRect, CGSize, __CFDictionary const*) + 680
    frame #15: 0x00007fff250e82d0 CoreGraphics`imageProvider_retain_data + 77
    frame #16: 0x00007fff250e8246 CoreGraphics`CGDataProviderRetainData + 75
    frame #17: 0x00007fff250e826b 
CoreGraphics`provider_for_destination_retain_data + 17
    frame #18: 0x00007fff250e8246 CoreGraphics`CGDataProviderRetainData + 75
    frame #19: 0x00007fff250e80f6 CoreGraphics`CGAccessSessionCreate + 98
    frame #20: 0x00007fff250e9e57 CoreGraphics`get_access_session + 44
    frame #21: 0x00007fff250e954c CoreGraphics`img_raw_read + 1302
    frame #22: 0x00007fff251440f9 CoreGraphics`img_interpolate_read + 753
    frame #23: 0x00007fff250e75bc CoreGraphics`img_data_lock + 6164
    frame #24: 0x00007fff250e22f0 CoreGraphics`CGSImageDataLock + 1230
    frame #25: 0x00007fff250e1de9 CoreGraphics`RIPImageDataInitializeShared + 
164
    frame #26: 0x00007fff250e1aaa CoreGraphics`RIPImageCacheGetRetained + 750
    frame #27: 0x00007fff250e1574 CoreGraphics`ripc_AcquireRIPImageData + 384
    frame #28: 0x00007fff250e02a1 CoreGraphics`ripc_DrawImage + 1180
    frame #29: 0x00007fff250df4f7 CoreGraphics`CGContextDrawImageWithOptions + 
454
    frame #30: 0x00007fff22f119c5 AppKit`__74-[NSImageRep 
drawInRect:fromRect:operation:fraction:respectFlipped:hints:]_block_invoke + 902
    frame #31: 0x00007fff22f114fa AppKit`-[NSImageRep 
drawInRect:fromRect:operation:fraction:respectFlipped:hints:] + 936
    frame #32: 0x00007fff233b1dbc AppKit`__71-[NSImage 
drawInRect:fromRect:operation:fraction:respectFlipped:hints:]_block_invoke.1340 
+ 967
    frame #33: 0x00007fff22eea8b9 AppKit`-[NSImage 
_usingBestRepresentationForRect:context:hints:body:] + 129
    frame #34: 0x00007fff22f10ec1 AppKit`-[NSImage 
drawInRect:fromRect:operation:fraction:respectFlipped:hints:] + 1359
    frame #35: 0x000000010049358c 
Emacs`ns_dumpglyphs_image(s=0x00007ffeefbfa220, r=(origin = (x = 10, y = 222), 
size = (width = 700, height = 507))) at nsterm.m:3952:7
    frame #36: 0x000000010048f75e 
Emacs`ns_draw_glyph_string(s=0x00007ffeefbfa220) at nsterm.m:4349:7
    frame #37: 0x0000000100092b81 Emacs`draw_glyphs(w=0x0000000106152630, 
x=672, row=0x000000010424f700, area=TEXT_AREA, start=0, end=20, 
hl=DRAW_NORMAL_TEXT, overlaps=0) at xdisp.c:30449:5
    frame #38: 0x000000010008f72d Emacs`gui_write_glyphs(w=0x0000000106152630, 
updated_row=0x000000010424f700, start=0x0000000103cc9a00, 
updated_area=TEXT_AREA, len=20) at xdisp.c:32509:7
    frame #39: 0x0000000100019566 Emacs`update_text_area(w=0x0000000106152630, 
updated_row=0x000000010424f700, vpos=1, partial_p=0x00007ffeefbfaa4e) at 
dispnew.c:3981:2
    frame #40: 0x000000010001726d 
Emacs`update_window_line(w=0x0000000106152630, vpos=1, 
mouse_face_overwritten_p=0x00007ffeefbfab12) at dispnew.c:4239:11
    frame #41: 0x0000000100009bc6 Emacs`update_window(w=0x0000000106152630, 
force_p=true) at dispnew.c:3719:19
    frame #42: 0x000000010000a212 
Emacs`update_window_tree(w=0x0000000106152630, force_p=true) at 
dispnew.c:3444:14
    frame #43: 0x0000000100009278 Emacs`update_frame(f=0x0000000106153630, 
force_p=true, inhibit_hairy_id_p=false) at dispnew.c:3279:18
    frame #44: 0x000000010006dd0f Emacs`redisplay_internal at xdisp.c:17096:14
    frame #45: 0x00000001000763e9 Emacs`redisplay at xdisp.c:16103:3
    frame #46: 0x00000001001cf700 Emacs`read_char(commandflag=1, 
map=(EMACS_INT) $23 = 7654866048, prev_event=(struct Lisp_Symbol *) $26 = 
0x0000000100bb11e0, used_mouse_menu=0x00007ffeefbfe58f, 
end_time=0x0000000000000000) at keyboard.c:2643:6
    frame #47: 0x00000001001cae45 Emacs`read_key_sequence(keybuf=(EMACS_INT) 
$28 = 110, prompt=(struct Lisp_Symbol *) $31 = 0x0000000100bb11e0, 
dont_downcase_last=false, can_return_switch_frame=true, 
fix_current_buffer=true, prevent_redisplay=false) at keyboard.c:10045:12
    frame #48: 0x00000001001c890e Emacs`command_loop_1 at keyboard.c:1384:15
    frame #49: 0x0000000100314451 
Emacs`internal_condition_case(bfun=(Emacs`command_loop_1 at keyboard.c:1277), 
handlers=(struct Lisp_Symbol *) $34 = 0x0000000100bb1270, hfun=(Emacs`cmd_error 
at keyboard.c:935)) at eval.c:1497:25
    frame #50: 0x00000001001c8203 Emacs`command_loop_2(handlers=(struct 
Lisp_Symbol *) $37 = 0x0000000100bb1270) at keyboard.c:1132:11
    frame #51: 0x00000001003134e6 Emacs`internal_catch(tag=(struct Lisp_Symbol 
*) $40 = 0x0000000100bbfbe0, func=(Emacs`command_loop_2 at keyboard.c:1128), 
arg=(struct Lisp_Symbol *) $43 = 0x0000000100bb1270) at eval.c:1220:25
    frame #52: 0x00000001001c7175 Emacs`command_loop at keyboard.c:1110:2
    frame #53: 0x00000001001c6f60 Emacs`recursive_edit_1 at keyboard.c:719:9
    frame #54: 0x00000001001c75a4 Emacs`Frecursive_edit at keyboard.c:802:3
    frame #55: 0x00000001001c3a2b Emacs`main(argc=1, argv=0x00007ffeefbff2e8) 
at emacs.c:2517:3
    frame #56: 0x00007fff204bff3d libdyld.dylib`start + 1
    frame #57: 0x00007fff204bff3d libdyld.dylib`start + 1
  thread #4, name = 'gmain'
    frame #0: 0x00007fff20477646 libsystem_kernel.dylib`__select + 10
    frame #1: 0x000000010211c56b libglib-2.0.0.dylib`g_poll + 505
    frame #2: 0x000000010210fc2a libglib-2.0.0.dylib`g_main_context_iterate + 
340
    frame #3: 0x000000010210fcd8 libglib-2.0.0.dylib`g_main_context_iteration + 
55
    frame #4: 0x0000000102110e35 libglib-2.0.0.dylib`glib_worker_main + 30
    frame #5: 0x0000000102132ff2 libglib-2.0.0.dylib`g_thread_proxy + 66
    frame #6: 0x00007fff204a48fc libsystem_pthread.dylib`_pthread_start + 224
    frame #7: 0x00007fff204a0443 libsystem_pthread.dylib`thread_start + 15
  thread #7
    frame #0: 0x00007fff20473d52 libsystem_kernel.dylib`__pselect + 10
    frame #1: 0x00007fff20473c6f libsystem_kernel.dylib`pselect$DARWIN_EXTSN + 
42
    frame #2: 0x0000000100472c7b Emacs`-[EmacsApp 
fd_handler:](self=0x000000010318e610, _cmd="fd_handler:", 
unused=0x0000000000000000) at nsterm.m:6303:20
    frame #3: 0x00007fff21325447 Foundation`__NSThread__start__ + 1068
    frame #4: 0x00007fff204a48fc libsystem_pthread.dylib`_pthread_start + 224
    frame #5: 0x00007fff204a0443 libsystem_pthread.dylib`thread_start + 15
  thread #9, name = 'com.apple.NSEventThread'
    frame #0: 0x00007fff2046f2aa libsystem_kernel.dylib`mach_msg_trap + 10
    frame #1: 0x00007fff2046f61c libsystem_kernel.dylib`mach_msg + 60
    frame #2: 0x00007fff2059cecf CoreFoundation`__CFRunLoopServiceMachPort + 316
    frame #3: 0x00007fff2059b5af CoreFoundation`__CFRunLoopRun + 1328
    frame #4: 0x00007fff2059a9bc CoreFoundation`CFRunLoopRunSpecific + 563
    frame #5: 0x00007fff22f29bba AppKit`_NSEventThread + 124
    frame #6: 0x00007fff204a48fc libsystem_pthread.dylib`_pthread_start + 224
    frame #7: 0x00007fff204a0443 libsystem_pthread.dylib`thread_start + 15
  thread #32
    frame #0: 0x00007fff204a0420 libsystem_pthread.dylib`start_wqthread
  thread #36
    frame #0: 0x00007fff204a0420 libsystem_pthread.dylib`start_wqthread
  thread #37
    frame #0: 0x00007fff204a0420 libsystem_pthread.dylib`start_wqthread
  thread #38
    frame #0: 0x00007fff204a0420 libsystem_pthread.dylib`start_wqthread
  thread #40
    frame #0: 0x00007fff2047094e libsystem_kernel.dylib`__workq_kernreturn + 10
    frame #1: 0x00007fff204a14c1 libsystem_pthread.dylib`_pthread_wqthread + 414
    frame #2: 0x00007fff204a042f libsystem_pthread.dylib`start_wqthread + 15
  thread #41
    frame #0: 0x00007fff204a0420 libsystem_pthread.dylib`start_wqthread
  thread #42
    frame #0: 0x00007fff2047094e libsystem_kernel.dylib`__workq_kernreturn + 10
    frame #1: 0x00007fff204a14c1 libsystem_pthread.dylib`_pthread_wqthread + 414
    frame #2: 0x00007fff204a042f libsystem_pthread.dylib`start_wqthread + 15
  thread #43
    frame #0: 0x00007fff204a0420 libsystem_pthread.dylib`start_wqthread
  thread #44
    frame #0: 0x0000000718b828a0
    frame #1: 0x00007fff31a448da AppleVPA`___lldb_unnamed_symbol479$$AppleVPA + 
336
    frame #2: 0x00007fff31a427ec AppleVPA`___lldb_unnamed_symbol455$$AppleVPA + 
254
    frame #3: 0x00007fff204a48fc libsystem_pthread.dylib`_pthread_start + 224
    frame #4: 0x00007fff204a0443 libsystem_pthread.dylib`thread_start + 15
(lldb)

------------------------------------------------------------------------------
(lldb) xbacktrace
(unsigned char *) data = 0x0000000100540c8e "redisplay_internal (C function)"
(lldb)
——————————————————————————————————————

It can take quite a while to reproduce this, I was scrolling for over 5 minutes 
with the build on master+lldb.

> Did the SIGBUS thing happen when you did the image-scrolling thing
> that causes crashes?

I believe so, but not sure.


> On Aug 18, 2022, at 3:03 PM, Eli Zaretskii <eliz@gnu.org> wrote:
> 
>> From: james@jojojames.com
>> Date: Thu, 18 Aug 2022 14:49:10 -0400
>> Cc: 57267@debbugs.gnu.org
>> 
>> ------------------------------------------------------------------------------
>> $ brew install gdb
> 
> Ouch, macOS!  You may need to use lldb, then, not GDB.  And that will
> make the job of finding the problem harder.
> 
>> Crash/hang takes a lot longer to reproduce (need to scroll thousands of 
>> images) in gdb.
>> 
>> Not sure if I correctly added the debug symbols to the build, doesn't seem 
>> like it from the trace.
> 
> No, there are no symbols (or at least GDB couldn't find them).  But I
> don't think you were in the right thread when you did that.  The Emacs
> main thread is always thread 1, not 42 or some other number.  So
> always say "thread 1" before "bt full".
> 
> Did the SIGBUS thing happen when you did the image-scrolling thing
> that causes crashes?