bug#47067: 28.0.50; [feature/native-comp] Crash while scrolling through dispnew.c

[Andrea Corallo]

Andrea Corallo via "Bug reports for GNU Emacs, the Swiss army knife of
text editors" <bug-gnu-emacs@gnu.org> writes:

> Eli Zaretskii <eliz@gnu.org> writes:
>
>>> From: Andrea Corallo <akrl@sdf.org>
>>> Cc: Eli Zaretskii <eliz@gnu.org>, 47067@debbugs.gnu.org
>>> Date: Sun, 14 Mar 2021 07:19:17 +0000
>>>
>>> Okay with a trunk gdb I'm able to debug...
>>
>> Yes, 8.2 is quite an old version.
>>
>>> Here is my backtrace for the suggested reproducer on my Emacs configured
>>> with --with-wide-int --enable-checking=yes,glyphs and compiled with the
>>> default `comp-debug' 0.
>>
>> Thanks.  However, your build is optimized, whereas mine isn't.  This
>> has a significant effect on the backtrace (static functions are
>> inlined and don't appear in the backtrace).  Please reconfigure with
>> CFLAGS='-O0 -g3' (and the rest of the switches as you used them for
>> this build), and show the backtrace after rebuilding.
>
> Okay will rebuild and report this evening (have to leave the PC now).

Not sure this is still relevant but anyway here it is adding the
suggested CFLAGS='-O0 -g3':

========
#0  Fskip_chars_backward (string=-9223372036709943776, lim=0) at syntax.c:1610
#1  0xb3f3224b in F632d6261636b776172642d737773_c_backward_sws_0 () from 
/home/andcor03/.emacs.d/eln-cache/28.0.50-f36e1a77/cc-engine-ccfcb170-1b345b21.eln
#2  0x0825114a in funcall_subr (subr=0x8af5b40, numargs=0, args=0xbfff94e0) at 
eval.c:3082
#3  0x08250c5b in Ffuncall (nargs=1, args=0xbfff94d8) at eval.c:3009
#4  0xb40f03f7 in F632d666c2d6465636c2d656e64_c_fl_decl_end_0 () from 
/home/andcor03/.emacs.d/eln-cache/28.0.50-f36e1a77/cc-mode-515a98a5-c7761ade.eln
#5  0x082520a2 in funcall_lambda (fun=-6917529027497101736, nargs=1, 
arg_vector=0x0) at eval.c:3292
#6  0x08250cbd in Ffuncall (nargs=2, args=0xbfff9680) at eval.c:3013
#7  0xb40f1353 in 
F632d636f6e746578742d657870616e642d666c2d726567696f6e_c_context_expand_fl_region_0
 ()
   from 
/home/andcor03/.emacs.d/eln-cache/28.0.50-f36e1a77/cc-mode-515a98a5-c7761ade.eln
#8  0x082520a2 in funcall_lambda (fun=-6917529027497101608, nargs=2, 
arg_vector=0x0) at eval.c:3292
#9  0x08250cbd in Ffuncall (nargs=3, args=0xbfff9818) at eval.c:3013
#10 0xb40f1534 in F616e6f6e796d6f75732d6c616d626461_anonymous_lambda_62 () from 
/home/andcor03/.emacs.d/eln-cache/28.0.50-f36e1a77/cc-mode-515a98a5-c7761ade.eln
#11 0x082520a2 in funcall_lambda (fun=-6917529027496760720, nargs=1, 
arg_vector=0x0) at eval.c:3292
#12 0x08250cbd in Ffuncall (nargs=2, args=0xbfff9990) at eval.c:3013
#13 0x0824ffa5 in call1 (fn=-6917529027496760720, arg1=2366592) at eval.c:2869
#14 0x082648c1 in mapcar1 (leni=1, vals=0x0, fn=-6917529027496760720, 
seq=-4611686018282341936) at fns.c:2793
#15 0x08264fa2 in Fmapc (function=-6917529027496760720, 
sequence=-4611686018282341936) at fns.c:2866
#16 0x0825118b in funcall_subr (subr=0x87042e0 <Smapc>, numargs=2, 
args=0xbfff9c20) at eval.c:3086
#17 0x08250c5b in Ffuncall (nargs=3, args=0xbfff9c18) at eval.c:3009
#18 0xb40f1709 in 
F632d6265666f72652d636f6e746578742d666c2d657870616e642d726567696f6e_c_before_context_fl_expand_region_0
 ()
   from 
/home/andcor03/.emacs.d/eln-cache/28.0.50-f36e1a77/cc-mode-515a98a5-c7761ade.eln
#19 0x082520a2 in funcall_lambda (fun=-6917529027497101544, nargs=2, 
arg_vector=0x0) at eval.c:3292
#20 0x08250cbd in Ffuncall (nargs=3, args=0xbfff9e38) at eval.c:3013
#21 0xb40f1a2f in 
F632d666f6e742d6c6f636b2d666f6e746966792d726567696f6e_c_font_lock_fontify_region_0
 ()
   from 
/home/andcor03/.emacs.d/eln-cache/28.0.50-f36e1a77/cc-mode-515a98a5-c7761ade.eln
#22 0x082520a2 in funcall_lambda (fun=-6917529027497101480, nargs=3, 
arg_vector=0x0) at eval.c:3292
#23 0x08250cbd in Ffuncall (nargs=4, args=0xbfffa010) at eval.c:3013
#24 0xb4a4807a in 
F666f6e742d6c6f636b2d666f6e746966792d726567696f6e_font_lock_fontify_region_0 ()
   from 
/home/andcor03/emacs2/src/../native-lisp/28.0.50-f36e1a77/font-lock-895216f6-4cc69ac6.eln
#25 0x082511c8 in funcall_subr (subr=0xb53b1f14, numargs=2, args=0xbfffa1c8) at 
eval.c:3089
#26 0x08250c5b in Ffuncall (nargs=3, args=0xbfffa1c0) at eval.c:3009
#27 0x082b4be2 in exec_byte_code (bytestr=-9223372033810787668, 
vector=-6917529027493170984, maxdepth=4611686018427387914, 
args_template=4611686018427388161, nargs=1,
    args=0xbfffa8d8) at bytecode.c:632
#28 0x082515c8 in fetch_and_exec_byte_code (fun=-6917529027493170912, 
syms_left=4611686018427388161, nargs=1, args=0xbfffa8d0) at eval.c:3133
#29 0x08251ade in funcall_lambda (fun=-6917529027493170912, nargs=1, 
arg_vector=0xbfffa8d0) at eval.c:3214
#30 0x08250cbd in Ffuncall (nargs=2, args=0xbfffa8c8) at eval.c:3013
#31 0x0824f8eb in run_hook_wrapped_funcall (nargs=2, args=0xbfffa8c8) at 
eval.c:2746
#32 0x0824fd80 in run_hook_with_args (nargs=2, args=0xbfffa8c8, 
funcall=0x824f8a7 <run_hook_wrapped_funcall>) at 
eval.c:2827-------------------------------------------------
#33 0x0824f936 in Frun_hook_wrapped (nargs=2, args=0xbfffa8c8) at eval.c:2761
#34 0xb4e83640 in 
F6a69742d6c6f636b2d2d72756e2d66756e6374696f6e73_jit_lock__run_functions_0 ()
   from 
/home/andcor03/emacs2/src/../native-lisp/28.0.50-f36e1a77/jit-lock-8a988e43-ae750d1b.eln
#35 0x0825118b in funcall_subr (subr=0xb54731e8, numargs=2, args=0xbfffab10) at 
eval.c:3086
#36 0x08250c5b in Ffuncall (nargs=3, args=0xbfffab08) at eval.c:3009
#37 0xb4e8440b in 
F6a69742d6c6f636b2d666f6e746966792d6e6f77_jit_lock_fontify_now_0 ()
   from 
/home/andcor03/emacs2/src/../native-lisp/28.0.50-f36e1a77/jit-lock-8a988e43-ae750d1b.eln
#38 0x0825118b in funcall_subr (subr=0xb548a2d4, numargs=2, args=0xbfffad60) at 
eval.c:3086
#39 0x08250c5b in Ffuncall (nargs=3, args=0xbfffad58) at eval.c:3009
#40 0xb4e83082 in F6a69742d6c6f636b2d66756e6374696f6e_jit_lock_function_0 () 
from 
/home/andcor03/emacs2/src/../native-lisp/28.0.50-f36e1a77/jit-lock-8a988e43-ae750d1b.eln
#41 0x08251164 in funcall_subr (subr=0xb565a248, numargs=1, args=0xbfffaf48) at 
eval.c:3084
#42 0x08250c5b in Ffuncall (nargs=2, args=0xbfffaf40) at eval.c:3009
#43 0x0824b6dc in internal_condition_case_n (bfun=0x8250a79 <Ffuncall>, 
nargs=2, args=0xbfffaf40, handlers=40, hfun=0x8077099 <safe_eval_handler>) at 
eval.c:1612
#44 0x080772a2 in safe__call (inhibit_quit=false, nargs=2, func=2901362656, 
ap=0xbfffb004 "") at xdisp.c:2981
#45 0x08077301 in safe_call (nargs=2, func=2901362656) at xdisp.c:2996
#46 0x08077346 in safe_call1 (fn=2901362656, arg=4611686018427419714) at 
xdisp.c:3007
#47 0x0807aa72 in handle_fontified_prop (it=0xbfffbf90) at xdisp.c:4313
#48 0x08079566 in handle_stop (it=0xbfffbf90) at xdisp.c:3841
#49 0x08082d45 in reseat (it=0xbfffbf90, pos=..., force_p=true) at xdisp.c:7087
#50 0x080789c7 in init_iterator (it=0xbfffbf90, w=0x88b8a68, charpos=31810, 
bytepos=31810, row=0x0, base_face_id=DEFAULT_FACE_ID) at xdisp.c:3442
#51 0x080a004b in redisplay_window (window=-6917529027497719192, 
just_this_one_p=false) at xdisp.c:18960
#52 0x08098233 in redisplay_window_0 (window=-6917529027497719192) at 
xdisp.c:16581
#53 0x0824b1d7 in internal_condition_case_1 (bfun=0x80981e5 
<redisplay_window_0>, arg=-6917529027497719192, handlers=-4611686015382928776,
    hfun=0x80981a1 <redisplay_window_error>) at eval.c:1472
#54 0x0809815f in redisplay_windows (window=-6917529027497719192) at 
xdisp.c:16561
#55 0x08096b75 in redisplay_internal () at xdisp.c:16029
#56 0x08097863 in redisplay_preserve_echo_area (from_where=2) at xdisp.c:16378
#57 0x0805e1de in Fredisplay (force=0) at dispnew.c:6157
#58 0xb50fcd59 in F7369742d666f72_sit_for_0 () from 
/home/andcor03/emacs2/src/../native-lisp/28.0.50-f36e1a77/subr-13adf6a6-656b9117.eln
#59 0x082511c8 in funcall_subr (subr=0xb53e6b88, numargs=1, args=0xbfffdde0) at 
eval.c:3089
#60 0x08250c5b in Ffuncall (nargs=2, args=0xbfffddd8) at eval.c:3009
#61 0xb4be1cab in 
F697365617263682d6c617a792d686967686c696768742d6e65772d6c6f6f70_isearch_lazy_highlight_new_loop_0
 ()
   from 
/home/andcor03/emacs2/src/../native-lisp/28.0.50-f36e1a77/isearch-693bdd75-2b63c98a.eln
#62 0x0825118b in funcall_subr (subr=0xb564b4fc, numargs=0, args=0xbfffe060) at 
eval.c:3086
#63 0x08250c5b in Ffuncall (nargs=1, args=0xbfffe058) at eval.c:3009
#64 0xb4bcad02 in F697365617263682d757064617465_isearch_update_0 () from 
/home/andcor03/emacs2/src/../native-lisp/28.0.50-f36e1a77/isearch-693bdd75-2b63c98a.eln
#65 0x0825114a in funcall_subr (subr=0xb53d26e0, numargs=0, args=0xbfffe300) at 
eval.c:3082
#66 0x08250c5b in Ffuncall (nargs=1, args=0xbfffe2f8) at eval.c:3009
#67 0xb4bd943e in 
F697365617263682d7365617263682d616e642d757064617465_isearch_search_and_update_0 
()
   from 
/home/andcor03/emacs2/src/../native-lisp/28.0.50-f36e1a77/isearch-693bdd75-2b63c98a.eln
#68 0x0825114a in funcall_subr (subr=0xb55d453c, numargs=0, args=0xbfffe4a0) at 
eval.c:3082
#69 0x08250c5b in Ffuncall (nargs=1, args=0xbfffe498) at eval.c:3009
#70 0xb4bdc01c in 
F697365617263682d70726f636573732d7365617263682d737472696e67_isearch_process_search_string_0
 ()
   from 
/home/andcor03/emacs2/src/../native-lisp/28.0.50-f36e1a77/isearch-693bdd75-2b63c98a.eln
#71 0x0825118b in funcall_subr (subr=0xb55cc904, numargs=2, args=0xbfffe688) at 
eval.c:3086
#72 0x08250c5b in Ffuncall (nargs=3, args=0xbfffe680) at eval.c:3009
#73 0xb4bdbe01 in 
F697365617263682d70726f636573732d7365617263682d63686172_isearch_process_search_char_0
 ()
   from 
/home/andcor03/emacs2/src/../native-lisp/28.0.50-f36e1a77/isearch-693bdd75-2b63c98a.eln
#74 0x0825118b in funcall_subr (subr=0xb55db120, numargs=2, args=0xbfffe870) at 
eval.c:3086
#75 0x08250c5b in Ffuncall (nargs=3, args=0xbfffe868) at eval.c:3009
#76 0xb4bdbb93 in 
F697365617263682d7072696e74696e672d63686172_isearch_printing_char_0 ()
   from 
/home/andcor03/emacs2/src/../native-lisp/28.0.50-f36e1a77/isearch-693bdd75-2b63c98a.eln
#77 0x0825118b in funcall_subr (subr=0xb5525e5c, numargs=2, args=0xbfffeb70) at 
eval.c:3086
#78 0x08250c5b in Ffuncall (nargs=3, args=0xbfffeb68) at eval.c:3009
#79 0x08241b04 in Ffuncall_interactively (nargs=3, args=0xbfffeb68) at 
callint.c:260
#80 0x08251090 in funcall_subr (subr=0x87021e0 <Sfuncall_interactively>, 
numargs=3, args=0xbfffeb68) at eval.c:3064
#81 0x08250c5b in Ffuncall (nargs=4, args=0xbfffeb60) at eval.c:3009
#82 0x0824f6fa in Fapply (nargs=3, args=0xbfffecb8) at eval.c:2639
#83 0x082421c0 in Fcall_interactively (function=2900100084, record_flag=0, 
keys=-6917529027494038576) at callint.c:353
#84 0xb4f50b3b in F636f6d6d616e642d65786563757465_command_execute_0 () from 
/home/andcor03/emacs2/src/../native-lisp/28.0.50-f36e1a77/simple-fab5b0cf-fa0c27ba.eln
#85 0x08251225 in funcall_subr (subr=0xb5376bd4, numargs=1, args=0xbffff058) at 
eval.c:3092
#86 0x08250c5b in Ffuncall (nargs=2, args=0xbffff050) at eval.c:3009
#87 0x0824ffa5 in call1 (fn=11520, arg1=2900100084) at eval.c:2869
#88 0x0816067a in command_loop_1 () at keyboard.c:1466
#89 0x0824b0fa in internal_condition_case (bfun=0x815faa0 <command_loop_1>, 
handlers=120, hfun=0x815edc2 <cmd_error>) at eval.c:1448
#90 0x0815f54e in command_loop_2 (ignore=0) at keyboard.c:1094
#91 0x0824a2fd in internal_catch (tag=42000, func=0x815f51b <command_loop_2>, 
arg=0) at eval.c:1198
#92 0x0815f4d2 in command_loop () at keyboard.c:1073
#93 0x0815e869 in recursive_edit_1 () at keyboard.c:720
#94 0x0815eace in Frecursive_edit () at keyboard.c:789
#95 0x0815a674 in main (argc=2, argv=0xbffff654) at emacs.c:2095
========

Thanks

  Andrea