Emacs segfaulting in FreeBSD (amd64)

[Ashish SHUKLA]

Hi,

I'm running FreeBSD 8.1-RELEASE (amd64), and built bzr revision 102600 of
GNU Emacs with following configure options:

 '--localstatedir=/var' '--with-x-toolkit=athena' 
'--x-libraries=/usr/local/lib' '--x-includes=/usr/local/include' 
'--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/info/' 
'--build=\
amd64-portbld-freebsd8.1' 'build_alias=amd64-portbld-freebsd8.1' 'CC=cc' 
'CFLAGS=-pipe -fstack-protector-all -pipe -mtune=native -march=native -g -g' 
'LDFLAGS= -L/usr/local/lib' 'CPPFLAGS=-I/usr/local/include' 'CPP=cpp'

Everytime I start it in X11, it segfaults. "emacs -nw" works fine. Emacs 23.2
works fine without any issues.

Following is the gdb backtrace:

#v+
chateau.d.if!abbe:~ % gdb $(which emacs)
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd"...
(gdb) source 
~/tinderbox/ports/editors/emacs-devel/work/emacs-24.0.50.102600/src/.gdbinit 
Warning: /usr/home/abbe/../lwlib: No such file or directory.
DISPLAY = :0.0
TERM = xterm-256color
Breakpoint 1 at 0x56f618: file emacs.c, line 425.
Breakpoint 2 at 0x59684f: file sysdep.c, line 836.
(gdb) cont
The program is not being run.
(gdb) run
Starting program: /usr/local/bin/emacs 
[New LWP 100531]
[New Thread 14b8400 (LWP 100531)]
[New Thread fb7000 (LWP 100331)]

Program received signal SIGBUS, Bus error.
[Switching to Thread fb7000 (LWP 100331)]
0x00000000006c7dc1 in _malloc_internal_nolock (size=0) at gmalloc.c:833
833               next->prev->next = next->next;
(gdb) xbacktrace 
"x-open-connection" (0xffffc748)
"x-initialize-window-system" (0xffffcc88)
"byte-code" (0xffffd1a0)
"command-line" (0xffffd888)
"normal-top-level" (0xffffdd00)
(gdb) bt
#0  0x00000000006c7dc1 in _malloc_internal_nolock (size=0) at gmalloc.c:833
#1  0x00000000006c9850 in _realloc_internal_nolock (ptr=0x0, size=4) at 
gmalloc.c:1516
#2  0x00000000006c9c0a in _realloc_internal (ptr=0x0, size=4) at gmalloc.c:1627
#3  0x00000000006c9c99 in realloc (ptr=0x0, size=4) at gmalloc.c:1644
#4  0x00000008028e0877 in g_realloc (mem=0x0, n_bytes=4) at gmem.c:233
#5  0x0000000802906f85 in g_string_maybe_expand (string=0xfb7ae0, len=2) at 
gstring.c:396
#6  0x0000000802907018 in g_string_sized_new (dfl_size=2) at gstring.c:421
#7  0x0000000802907078 in g_string_new (init=0x0) at gstring.c:441
#8  0x00000008057f89e6 in read_string (mis=0xfa1c00, dis=0xfb0f10, len=12, 
error=0x7fffffbfe338) at gdbusmessage.c:972
#9  0x00000008057f926d in parse_value_from_blob (mis=0xfa1c00, dis=0xfb0f10, 
type=0xfa3880, just_align=0, indent=8, error=0x7fffffbfe508) at 
gdbusmessage.c:1205
#10 0x00000008057f9baa in parse_value_from_blob (mis=0xfa1c00, dis=0xfb0f10, 
type=0x80584d613, just_align=0, indent=6, error=0x7fffffbfe6d8) at 
gdbusmessage.c:1479
#11 0x00000008057f98dd in parse_value_from_blob (mis=0xfa1c00, dis=0xfb0f10, 
type=0x80584d611, just_align=0, indent=4, error=0x7fffffbfe8a8) at 
gdbusmessage.c:1392
#12 0x00000008057f9741 in parse_value_from_blob (mis=0xfa1c00, dis=0xfb0f10, 
type=0x80584d610, just_align=0, indent=2, error=0x7fffffbfeb48) at 
gdbusmessage.c:1339
#13 0x00000008057fa2bd in g_dbus_message_new_from_blob (blob=0xfba000 
"l\004\001\001\n", blob_len=170, 
capabilities=G_DBUS_CAPABILITY_FLAGS_UNIX_FD_PASSING, error=0x7fffffbfeb48) at 
gdbusmessage.c:1717
#14 0x0000000805807608 in _g_dbus_worker_do_read_cb (input_stream=0xfa4ed0, 
res=0xfa1360, user_data=0xfad200) at gdbusprivate.c:737
#15 0x000000080579d34b in g_simple_async_result_complete (simple=0xfa1360) at 
gsimpleasyncresult.c:692
#16 0x000000080579d39d in complete_in_idle_cb (data=0xfa1360) at 
gsimpleasyncresult.c:702
#17 0x00000008028daa8b in g_idle_dispatch (source=0xfb5500, 
callback=0x80579d370 <complete_in_idle_cb>, user_data=0xfa1360) at gmain.c:4254
#18 0x00000008028d5c8d in g_main_dispatch (context=0xfb6f00) at gmain.c:2149
#19 0x00000008028d75f5 in g_main_context_dispatch (context=0xfb6f00) at 
gmain.c:2702
#20 0x00000008028d7be6 in g_main_context_iterate (context=0xfb6f00, block=1, 
dispatch=1, self=0xdce5c0) at gmain.c:2780
#21 0x00000008028d8568 in g_main_loop_run (loop=0xfa3930) at gmain.c:2988
#22 0x00000008058068ac in gdbus_shared_thread_func (data=0x0) at 
gdbusprivate.c:277
#23 0x000000080290fdea in g_thread_create_proxy (data=0xdce5c0) at 
gthread.c:1897
#24 0x00000008031cb511 in pthread_getprio () from /lib/libthr.so.3
#25 0x0000000000000000 in ?? ()
Error accessing memory address 0x7fffffbff000: Bad address.

Lisp Backtrace:
"x-open-connection" (0xffffc748)
"x-initialize-window-system" (0xffffcc88)
"byte-code" (0xffffd1a0)
"command-line" (0xffffd888)
"normal-top-level" (0xffffdd00)
(gdb) bt full
#0  0x00000000006c7dc1 in _malloc_internal_nolock (size=0) at gmalloc.c:833
        log = 4
        result = (void *) 0xfa37f0
        block = 2508201504089708978
        blocks = 4290764528
        lastblocks = 16455808
        start = 16446592
        i = 2508201504089708978
        next = (struct list *) 0xfa37f0
#1  0x00000000006c9850 in _realloc_internal_nolock (ptr=0x0, size=4) at 
gmalloc.c:1516
        result = (void *) 0x100000001
        type = 0
        block = 1
        blocks = 34359738369
        oldlimit = 140737484152640
#2  0x00000000006c9c0a in _realloc_internal (ptr=0x0, size=4) at gmalloc.c:1627
        result = (void *) 0x7fffffbfdf90
#3  0x00000000006c9c99 in realloc (ptr=0x0, size=4) at gmalloc.c:1644
        hook = (void *(*)(void *, size_t)) 0
#4  0x00000008028e0877 in g_realloc (mem=0x0, n_bytes=4) at gmem.c:233
        newmem = 0x4
#5  0x0000000802906f85 in g_string_maybe_expand (string=0xfb7ae0, len=2) at 
gstring.c:396
No locals.
#6  0x0000000802907018 in g_string_sized_new (dfl_size=2) at gstring.c:421
        string = (GString *) 0xfb7ae0
#7  0x0000000802907078 in g_string_new (init=0x0) at gstring.c:441
        string = (GString *) 0x22ceebfa9c5e19b2
#8  0x00000008057f89e6 in read_string (mis=0xfa1c00, dis=0xfb0f10, len=12, 
error=0x7fffffbfe338) at gdbusmessage.c:972
        s = (GString *) 0x7fffffbfe180
        buf = "\200\031\373\000\000\000\000\000\004", '\0' <repeats 23 times>, 
"\004\000\000\000\000\000\000\0004\342\277\377\377\177\000\000\020\017\373\000\000\000\000\000\200\364\372\000\000\000\000\000\020\017\373\000\000\000\000\000\004\000\000\000\000\000\000\000\000,\373\000\000\000\000\000\020\017\373\000\001\000\000\000\262\031^\234\372\353\316\"\000p\373\000\000\000\000\000\360\341\277\377\377\177\000\000\263ru\005\b\000\000\000\000\034\372\000\000\000\000\000\210l\227\005\001\000\000\0008\343\277\377\377\177\000\000\000\000\000\000\000\000\000\000\004\000\000\000\000\000\000\0004\342\277\377\377\177\000\000\020\017\373\000\000\000\000\000\200[\373\000\000\000\000\000\004\000\000\000\000\000\000\000\004\000\000\000\000\000\000\000\262\031^\234\372"...
        remaining = 2508201504089708978
        nul = 0 '\0'
        local_error = (GError *) 0x100fb0f10
        end_valid = (const gchar *) 0xfb0f10 ""
#9  0x00000008057f926d in parse_value_from_blob (mis=0xfa1c00, dis=0xfb0f10, 
type=0xfa3880, just_align=0, indent=8, error=0x7fffffbfe508) at 
gdbusmessage.c:1205
        len = 12
        v = (gchar *) 0x0
        ret = (GVariant *) 0x0
        local_error = (GError *) 0x0
        is_leaf = 1
        __PRETTY_FUNCTION__ = "parse_value_from_blob"
#10 0x00000008057f9baa in parse_value_from_blob (mis=0xfa1c00, dis=0xfb0f10, 
type=0x80584d613, just_align=0, indent=6, error=0x7fffffbfe6d8) at 
gdbusmessage.c:1479
        siglen = 1 '\001'
        sig = (gchar *) 0xfa38b0 "p8\372"
        variant_type = (GVariantType *) 0xfa3880
        value = (GVariant *) 0x7fffffbfe4c0
        ret = (GVariant *) 0x0
        local_error = (GError *) 0x0
        is_leaf = 0
        __PRETTY_FUNCTION__ = "parse_value_from_blob"
#11 0x00000008057f98dd in parse_value_from_blob (mis=0xfa1c00, dis=0xfb0f10, 
type=0x80584d611, just_align=0, indent=4, error=0x7fffffbfe8a8) at 
gdbusmessage.c:1392
        key_type = (const GVariantType *) 0x80584d612
        value_type = (const GVariantType *) 0x80584d613
        key = (GVariant *) 0xfbde60
        value = (GVariant *) 0xf94388
        ret = (GVariant *) 0x0
        local_error = (GError *) 0x0
        is_leaf = 0
        __PRETTY_FUNCTION__ = "parse_value_from_blob"
#12 0x00000008057f9741 in parse_value_from_blob (mis=0xfa1c00, dis=0xfb0f10, 
type=0x80584d610, just_align=0, indent=2, error=0x7fffffbfeb48) at 
gdbusmessage.c:1339
        item = (GVariant *) 0xfbde30
        array_len = 141
        builder = {
  x = {0, 16398224, 16398225, 16398496, 0, 18446744073709551615, 16130112, 8, 
2, 3, 1033660112, 0, 0, 0, 0, 0}
}
        offset = 77
        target = 157
        element_type = (const GVariantType *) 0x80584d611
        ret = (GVariant *) 0x0
        local_error = (GError *) 0x0
        is_leaf = 0
        __PRETTY_FUNCTION__ = "parse_value_from_blob"
#13 0x00000008057fa2bd in g_dbus_message_new_from_blob (blob=0xfba000 
"l\004\001\001\n", blob_len=170, 
capabilities=G_DBUS_CAPABILITY_FLAGS_UNIX_FD_PASSING, error=0x7fffffbfeb48) at 
gdbusmessage.c:1717
        ret = 0
        mis = (GMemoryInputStream *) 0xfa1c00
        dis = (GDataInputStream *) 0xfb0f10
        message = (GDBusMessage *) 0xfa1540
        endianness = 108 'l'
        major_protocol_version = 1 '\001'
        byte_order = G_DATA_STREAM_BYTE_ORDER_LITTLE_ENDIAN
        message_body_len = 10
        headers = (GVariant *) 0x7fffffbfea20
        item = (GVariant *) 0x22ceebfa9c5e19b2
        iter = {
  x = {140737484155472, 34452051524, 154, 16388960, 16473728, 
2508201504089708978, 140737484155504, 34452050477, 140737484155584, 
2508201504089708978, 140737484155584, 34452052613, 16388960, 16404176, 
16437760, 154}
}
        signature = (GVariant *) 0xf97f08
        __PRETTY_FUNCTION__ = "g_dbus_message_new_from_blob"
#14 0x0000000805807608 in _g_dbus_worker_do_read_cb (input_stream=0xfa4ed0, 
res=0xfa1360, user_data=0xfad200) at gdbusprivate.c:737
        message = (GDBusMessage *) 0x80290f391
        worker = (GDBusWorker *) 0xfad200
        error = (GError *) 0x0
        bytes_read = 154
#15 0x000000080579d34b in g_simple_async_result_complete (simple=0xfa1360) at 
gsimpleasyncresult.c:692
        current_source = (GSource *) 0xfb5500
        current_context = (GMainContext *) 0xfb6f00
        __PRETTY_FUNCTION__ = "g_simple_async_result_complete"
#16 0x000000080579d39d in complete_in_idle_cb (data=0xfa1360) at 
gsimpleasyncresult.c:702
        simple = (GSimpleAsyncResult *) 0xfa1360
#17 0x00000008028daa8b in g_idle_dispatch (source=0xfb5500, 
callback=0x80579d370 <complete_in_idle_cb>, user_data=0xfa1360) at gmain.c:4254
No locals.
#18 0x00000008028d5c8d in g_main_dispatch (context=0xfb6f00) at gmain.c:2149
        dispatch = (gboolean (*)(GSource *, GSourceFunc, gpointer)) 0x8028daa30 
<g_idle_dispatch>
        was_in_call = 0
        user_data = 0xfa1360
        callback = 0x80579d370 <complete_in_idle_cb>
        cb_funcs = (GSourceCallbackFuncs *) 0x802a85190
        cb_data = 0xead3e0
        need_destroy = 583986170
        current_source_link = {
  data = 0xfb5500, 
  next = 0x0
}
        source = (GSource *) 0xfb5500
        current = (GMainDispatch *) 0xfb6d00
        i = 0
        __PRETTY_FUNCTION__ = "g_main_dispatch"
#19 0x00000008028d75f5 in g_main_context_dispatch (context=0xfb6f00) at 
gmain.c:2702
No locals.
#20 0x00000008028d7be6 in g_main_context_iterate (context=0xfb6f00, block=1, 
dispatch=1, self=0xdce5c0) at gmain.c:2780
        max_priority = 0
        timeout = 0
        some_ready = 1
        nfds = 1
        allocated_nfds = 3
        fds = (GPollFD *) 0xead000
        __PRETTY_FUNCTION__ = "g_main_context_iterate"
#21 0x00000008028d8568 in g_main_loop_run (loop=0xfa3930) at gmain.c:2988
        self = (GThread *) 0xdce5c0
        __PRETTY_FUNCTION__ = "g_main_loop_run"
#22 0x00000008058068ac in gdbus_shared_thread_func (data=0x0) at 
gdbusprivate.c:277
No locals.
#23 0x000000080290fdea in g_thread_create_proxy (data=0xdce5c0) at 
gthread.c:1897
        thread = (GRealThread *) 0xdce5c0
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#24 0x00000008031cb511 in pthread_getprio () from /lib/libthr.so.3
No symbol table info available.
#25 0x0000000000000000 in ?? ()
No symbol table info available.
Error accessing memory address 0x7fffffbff000: Bad address.

Lisp Backtrace:
"x-open-connection" (0xffffc748)
"x-initialize-window-system" (0xffffcc88)
"byte-code" (0xffffd1a0)
"command-line" (0xffffd888)
"normal-top-level" (0xffffdd00)
#v-

Let me know if there is anything else I can provide to help with debugging
this issue.

Thanks
-- 
Ashish SHUKLA

“Age is not an accomplishment, and youth is not a sin.” (Robert
A. Heinlein, "Methuselah's Children", 1958)

pgpZojGRQiTrX.pgp
Description: PGP signature