Bug 1308518

Summary: Emacs crashes regularly since 7.2
Product: Red Hat Enterprise Linux 7 Reporter: Laurent Wandrebeck <l.wandrebeck>
Component: emacsAssignee: Jan Synacek <jsynacek>
Status: CLOSED CURRENTRELEASE QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: high Docs Contact:
Priority: high    
Version: 7.2CC: dbasant, fhirtz, hartsjc, jhunt, jsynacek, ksrot, l.wandrebeck, mkolaja, salmy, srandhaw, toneata
Target Milestone: rcKeywords: Patch, ZStream
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1410444 (view as bug list) Environment:
Last Closed: 2017-08-28 13:27:21 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On: 1336711    
Bug Blocks: 1298243, 1380361, 1410444    

Description Laurent Wandrebeck 2016-02-15 12:53:32 UTC 
Description of problem:
Emacs crashes regularly since 7.2. Classical use for an editor is enough.


Version-Release number of selected component (if applicable):

24.3-18-el7

How reproducible:

Open a couple files, modify some, save, scroll through files, it will crash quite quickly.


Steps to Reproduce:
1.
2.
3.

Haven’t found (yet ?) a stable way to get emacs to crash.

Actual results:

Emacs crashes (segfault)

Expected results:

Emacs should run properly.

Additional info:

Here is a complete backtrace with debug symbols. emacs crashes regularly since update to CentOS 7.2. Hope this helps.

[root@grisnez ccpp-2016-01-11-15:35:18-21376]# gdb /usr/bin/emacs-24.3 ./coredump 
GNU gdb (GDB) Red Hat Enterprise Linux 7.6.1-80.el7
Copyright (C) 2013 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-redhat-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/bin/emacs-24.3...Reading symbols from /usr/lib/debug/usr/bin/emacs-24.3.debug...done.
done.

warning: core file may not match specified executable file.
[New LWP 21376]
[New LWP 21388]
[New LWP 21387]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `emacs src/device.cu'.
Program terminated with signal 11, Segmentation fault.
#0  0x00007f71f64e5fcb in raise (sig=sig@entry=11) at ../nptl/sysdeps/unix/sysv/linux/pt-raise.c:37
37	  return INLINE_SYSCALL (tgkill, 3, pid, THREAD_GETMEM (THREAD_SELF, tid),
(gdb) bt
#0  0x00007f71f64e5fcb in raise (sig=sig@entry=11) at ../nptl/sysdeps/unix/sysv/linux/pt-raise.c:37
#1  0x00000000004deed9 in terminate_due_to_signal (sig=sig@entry=11, backtrace_limit=backtrace_limit@entry=40) at emacs.c:344
#2  0x00000000004f831e in handle_fatal_signal (sig=sig@entry=11) at sysdep.c:1638
#3  0x00000000004f84a3 in deliver_fatal_thread_signal (handler=0x4f8310 <handle_fatal_signal>, sig=11) at sysdep.c:1614
#4  0x00000000004f84a3 in deliver_fatal_thread_signal (sig=11) at sysdep.c:1650
#5  0x00007f71f64e6100 in <signal handler called> () at /lib64/libpthread.so.0
#6  0x00007f71f61474ed in __GI_getenv (name=0x7f71f54b914e "_SPI_CLIENT", name@entry=0x7f71f54b914c "AT_SPI_CLIENT") at getenv.c:89
#7  0x00007f71f9c7441a in g_getenv (variable=variable@entry=0x7f71f54b914c "AT_SPI_CLIENT") at genviron.c:242
#8  0x00007f71f54a4fbe in spi_atk_bridge_key_listener (message=0xc2b900, bus=0xc286f0) at event.c:104
#9  0x00007f71f54a4fbe in spi_atk_bridge_key_listener (key_event=0x7ffe863fa650) at event.c:155
#10 0x00007f71f54a4fbe in spi_atk_bridge_key_listener (event=<optimized out>, data=<optimized out>) at event.c:224
#11 0x00007f71fb63fbfc in _gtk_accessibility_key_snooper (widget=widget@entry=0x176a240 [GtkWindow], event=event@entry=0x259f8b0) at a11y/gtkaccessibilityutil.c:152
#12 0x00007f71fb7aca0d in gtk_main_do_event (event=0x259f8b0, grab_widget=0x176a240 [GtkWindow]) at gtkmain.c:2264
#13 0x00007f71fb7aca0d in gtk_main_do_event (event=0x259f8b0) at gtkmain.c:1700
#14 0x00007f71fb372652 in gdk_event_source_dispatch (source=<optimized out>, callback=<optimized out>, user_data=<optimized out>) at gdkeventsource.c:364
#15 0x00007f71f9c887aa in g_main_context_dispatch (context=0xc2b090) at gmain.c:3109
#16 0x00007f71f9c887aa in g_main_context_dispatch (context=context@entry=0xc2b090) at gmain.c:3708
#17 0x00007f71f9c88af8 in g_main_context_iterate (context=context@entry=0xc2b090, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3779
#18 0x00007f71f9c88bac in g_main_context_iteration (context=0xc2b090, context@entry=0x0, may_block=may_block@entry=1) at gmain.c:3840
#19 0x00007f71fb7ac0e5 in gtk_main_iteration () at gtkmain.c:1308
#20 0x00000000004b34e2 in XTread_socket (terminal=<optimized out>, hold_quit=<optimized out>) at xterm.c:7186
#21 0x00000000004e62d1 in gobble_input () at keyboard.c:6767
#22 0x00000000004e5c25 in process_pending_signals () at keyboard.c:7080
#23 0x00000000004e5c25 in process_pending_signals () at keyboard.c:7094
#24 0x0000000000598812 in Fcall_process (nargs=<optimized out>, args=<optimized out>) at callproc.c:634
#25 0x0000000000552e4f in Ffuncall (nargs=nargs@entry=12, args=args@entry=0x7ffe8640b430) at eval.c:2759
#26 0x0000000000553fec in Fapply (nargs=<optimized out>, args=0x7ffe8640b5b0) at eval.c:2312
#27 0x0000000000552e4f in Ffuncall (nargs=<optimized out>, args=<optimized out>) at eval.c:2759
#28 0x000000000058826b in exec_byte_code (bytestr=140127423402316, vector=0, maxdepth=13, args_template=4611686018430533632, nargs=4611686018695757824, args=0x7ffe8640b5c0) at bytecode.c:900
#29 0x000000000055294f in funcall_lambda (fun=9549053, nargs=nargs@entry=11, arg_vector=arg_vector@entry=0x7ffe8640b798) at eval.c:3010
#30 0x0000000000552c5b in Ffuncall (nargs=nargs@entry=12, args=args@entry=0x7ffe8640b790) at eval.c:2839
#31 0x0000000000553fec in Fapply (nargs=<optimized out>, args=0x7ffe8640b928) at eval.c:2312
#32 0x0000000000552e4f in Ffuncall (nargs=<optimized out>, args=<optimized out>) at eval.c:2759
#33 0x000000000058826b in exec_byte_code (bytestr=140127423402316, vector=0, maxdepth=13, args_template=4611686018430533632, nargs=4611686018695757824, args=0x7ffe8640b918) at bytecode.c:900
#34 0x000000000055272d in funcall_lambda (fun=37304389, nargs=nargs@entry=8, arg_vector=0xf02f71, arg_vector@entry=0x7ffe8640ba98) at eval.c:2944
#35 0x0000000000552c5b in Ffuncall (nargs=nargs@entry=9, args=args@entry=0x7ffe8640ba90) at eval.c:2839
#36 0x0000000000553fec in Fapply (nargs=<optimized out>, args=0x7ffe8640bc18) at eval.c:2312
#37 0x0000000000552e4f in Ffuncall (nargs=<optimized out>, args=<optimized out>) at eval.c:2759
#38 0x000000000058826b in exec_byte_code (bytestr=140127423402316, vector=0, maxdepth=13, args_template=4611686018430533632, nargs=4611686018695757824, args=0x7ffe8640bd80) at bytecode.c:900
#39 0x000000000055272d in funcall_lambda (fun=37304525, nargs=nargs@entry=7, arg_vector=0xf94101, arg_vector@entry=0x7ffe8640bd78) at eval.c:2944
#40 0x0000000000552c5b in Ffuncall (nargs=nargs@entry=8, args=args@entry=0x7ffe8640bd70) at eval.c:2839
#41 0x0000000000553fec in Fapply (nargs=<optimized out>, args=0x7ffe8640bee8) at eval.c:2312
#42 0x0000000000552e4f in Ffuncall (nargs=<optimized out>, args=<optimized out>) at eval.c:2759
#43 0x000000000058826b in exec_byte_code (bytestr=140127423402316, vector=0, maxdepth=13, args_template=4611686018430533632, nargs=4611686018695757824, args=0x7ffe8640bee8) at bytecode.c:900
#44 0x000000000055272d in funcall_lambda (fun=37304685, nargs=nargs@entry=7, arg_vector=0x1323ee1, arg_vector@entry=0x7ffe8640c058) at eval.c:2944
#45 0x0000000000552c5b in Ffuncall (nargs=8, args=0x7ffe8640c050) at eval.c:2839
#46 0x000000000058826b in exec_byte_code (bytestr=140127423402316, vector=0, maxdepth=13, args_template=4611686018430533632, nargs=4611686018695757824, args=0x1) at bytecode.c:900
#47 0x000000000055272d in funcall_lambda (fun=37305037, nargs=nargs@entry=1, arg_vector=0x23debf1, arg_vector@entry=0x7ffe8640c2e8) at eval.c:2944
#48 0x0000000000552c5b in Ffuncall (nargs=nargs@entry=2, args=args@entry=0x7ffe8640c2e0) at eval.c:2839
#49 0x000000000055419f in Fapply (nargs=2, args=0x7ffe8640c2e0) at eval.c:2259
#50 0x0000000000552e4f in Ffuncall (nargs=<optimized out>, args=<optimized out>) at eval.c:2759
#51 0x000000000058826b in exec_byte_code (bytestr=140127423402316, vector=0, maxdepth=13, args_template=4611686018430533632, nargs=4611686018695757824, args=0x7ffe8640c2d0) at bytecode.c:900
#52 0x000000000055294f in funcall_lambda (fun=10357621, nargs=nargs@entry=3, arg_vector=arg_vector@entry=0x7ffe8640c4c0) at eval.c:3010
#53 0x0000000000552c5b in Ffuncall (nargs=4, args=0x7ffe8640c4b8) at eval.c:2839
#54 0x000000000058826b in exec_byte_code (bytestr=140127423402316, vector=0, maxdepth=13, args_template=4611686018430533632, nargs=4611686018695757824, args=0x0) at bytecode.c:900
#55 0x000000000055294f in funcall_lambda (fun=10361381, nargs=nargs@entry=2, arg_vector=arg_vector@entry=0x7ffe8640c798) at eval.c:3010
#56 0x0000000000552c5b in Ffuncall (nargs=nargs@entry=3, args=args@entry=0x7ffe8640c790) at eval.c:2839
#57 0x000000000055419f in Fapply (nargs=3, args=0x7ffe8640c790) at eval.c:2259
---Type <return> to continue, or q <return> to quit---
#58 0x0000000000552e4f in Ffuncall (nargs=<optimized out>, args=<optimized out>) at eval.c:2759
#59 0x000000000058826b in exec_byte_code (bytestr=140127423402316, vector=0, maxdepth=13, args_template=4611686018430533632, nargs=4611686018695757824, args=0x7ffe8640c780) at bytecode.c:900
#60 0x000000000055294f in funcall_lambda (fun=10357621, nargs=nargs@entry=3, arg_vector=arg_vector@entry=0x7ffe8640c988) at eval.c:3010
#61 0x0000000000552c5b in Ffuncall (nargs=4, args=0x7ffe8640c980) at eval.c:2839
#62 0x000000000058826b in exec_byte_code (bytestr=140127423402316, vector=0, maxdepth=13, args_template=4611686018430533632, nargs=4611686018695757824, args=0x0) at bytecode.c:900
#63 0x000000000055294f in funcall_lambda (fun=10360989, nargs=nargs@entry=2, arg_vector=arg_vector@entry=0x7ffe8640cb50) at eval.c:3010
#64 0x0000000000552c5b in Ffuncall (nargs=3, args=0x7ffe8640cb48) at eval.c:2839
#65 0x000000000058826b in exec_byte_code (bytestr=140127423402316, vector=0, maxdepth=13, args_template=4611686018430533632, nargs=4611686018695757824, args=0x7ffe8640cb40) at bytecode.c:900
#66 0x000000000055294f in funcall_lambda (fun=10365773, nargs=nargs@entry=0, arg_vector=arg_vector@entry=0x7ffe8640cd20) at eval.c:3010
#67 0x0000000000552c5b in Ffuncall (nargs=1, args=0x7ffe8640cd18) at eval.c:2839
#68 0x000000000058826b in exec_byte_code (bytestr=140127423402316, vector=0, maxdepth=13, args_template=4611686018430533632, nargs=4611686018695757824, args=0x7ffe8640cd10) at bytecode.c:900
#69 0x000000000055294f in funcall_lambda (fun=9064093, nargs=nargs@entry=0, arg_vector=arg_vector@entry=0x7ffe8640cf00) at eval.c:3010
#70 0x0000000000552c5b in Ffuncall (nargs=1, args=0x7ffe8640cef8) at eval.c:2839
#71 0x000000000058826b in exec_byte_code (bytestr=140127423402316, vector=0, maxdepth=13, args_template=4611686018430533632, nargs=4611686018695757824, args=0x7ffe8640cef0) at bytecode.c:900
#72 0x000000000055294f in funcall_lambda (fun=9063197, nargs=nargs@entry=1, arg_vector=arg_vector@entry=0x7ffe8640d118) at eval.c:3010
#73 0x0000000000552c5b in Ffuncall (nargs=nargs@entry=2, args=args@entry=0x7ffe8640d110) at eval.c:2839
#74 0x000000000054f308 in Fcall_interactively (function=<optimized out>, record_flag=<optimized out>, keys=<optimized out>) at callint.c:852
#75 0x0000000000552dcc in Ffuncall (nargs=nargs@entry=4, args=args@entry=0x7ffe8640d2d0) at eval.c:2785
#76 0x00000000005547e4 in call3 (fn=<optimized out>, arg1=<optimized out>, arg2=<optimized out>, arg3=<optimized out>) at eval.c:2603
#77 0x00000000004e163d in Fcommand_execute (cmd=<optimized out>, record_flag=<optimized out>, keys=<optimized out>, special=<optimized out>) at keyboard.c:10241
#78 0x00000000004edef9 in command_loop_1 () at keyboard.c:1587
#79 0x000000000055125a in internal_condition_case (bfun=bfun@entry=0x4edb50 <command_loop_1>, handlers=12295794, hfun=hfun@entry=0x4e3fe0 <cmd_error>) at eval.c:1289
#80 0x00000000004df33e in command_loop_2 (ignore=ignore@entry=12244178) at keyboard.c:1168
#81 0x0000000000551101 in internal_catch (tag=<optimized out>, func=func@entry=0x4df320 <command_loop_2>, arg=12244178) at eval.c:1060
#82 0x00000000004e3a93 in recursive_edit_1 () at keyboard.c:1139
#83 0x00000000004e3a93 in recursive_edit_1 () at keyboard.c:779
#84 0x000000000050d907 in read_minibuf (map=map@entry=41818422, initial=initial@entry=38378721, prompt=<optimized out>, 
    prompt@entry=8889665, expflag=<optimized out>, histvar=histvar@entry=12305634, histpos=0, defalt=defalt@entry=38379057, allow_props=false, inherit_input_method=false) at minibuf.c:678
#85 0x000000000050df77 in Fread_from_minibuffer (prompt=8889665, initial_contents=38378721, keymap=41818422, read=12244178, hist=<optimized out>, default_value=38379057, inherit_input_method=12244178)
    at minibuf.c:980
#86 0x0000000000552d60 in Ffuncall (nargs=<optimized out>, args=<optimized out>) at eval.c:2804
#87 0x000000000058826b in exec_byte_code (bytestr=140127423402316, vector=0, maxdepth=13, args_template=4611686018430533632, nargs=4611686018695757824, args=0x7ffe8640d928) at bytecode.c:900
#88 0x000000000055272d in funcall_lambda (fun=9497285, nargs=nargs@entry=8, arg_vector=0x90eaa1 <pure+878497>, arg_vector@entry=0x7ffe8640dab8) at eval.c:2944
#89 0x0000000000552c5b in Ffuncall (nargs=nargs@entry=9, args=args@entry=0x7ffe8640dab0) at eval.c:2839
#90 0x000000000050b8a0 in Fcompleting_read (prompt=8889665, collection=12406450, predicate=12304594, require_match=15838514, initial_input=38378721, hist=12305634, def=38379057, inherit_input_method=12244178)
    at minibuf.c:1734
#91 0x0000000000552e27 in Ffuncall (nargs=<optimized out>, args=<optimized out>) at eval.c:2811
#92 0x000000000058826b in exec_byte_code (bytestr=140127423402316, vector=0, maxdepth=13, args_template=4611686018430533632, nargs=4611686018695757824, args=0x7ffe8640dc88) at bytecode.c:900
#93 0x000000000055272d in funcall_lambda (fun=9488973, nargs=nargs@entry=6, arg_vector=0x90ca29 <pure+870185>, arg_vector@entry=0x7ffe8640de60) at eval.c:2944
#94 0x0000000000552c5b in Ffuncall (nargs=7, args=0x7ffe8640de58) at eval.c:2839
#95 0x000000000058826b in exec_byte_code (bytestr=140127423402316, vector=0, maxdepth=13, args_template=4611686018430533632, nargs=4611686018695757824, args=0x0) at bytecode.c:900
#96 0x000000000055272d in funcall_lambda (fun=9488789, nargs=nargs@entry=4, arg_vector=0x90c971 <pure+870001>, arg_vector@entry=0x7ffe8640dfd0) at eval.c:2944
#97 0x0000000000552c5b in Ffuncall (nargs=5, args=0x7ffe8640dfc8) at eval.c:2839
#98 0x000000000058826b in exec_byte_code (bytestr=140127423402316, vector=0, maxdepth=13, args_template=4611686018430533632, nargs=4611686018695757824, args=0x0) at bytecode.c:900
#99 0x000000000055294f in funcall_lambda (fun=9015917, nargs=nargs@entry=2, arg_vector=arg_vector@entry=0x7ffe8640e1a0) at eval.c:3010
#100 0x0000000000552c5b in Ffuncall (nargs=3, args=0x7ffe8640e198) at eval.c:2839
#101 0x000000000058826b in exec_byte_code (bytestr=140127423402316, vector=0, maxdepth=13, args_template=4611686018430533632, nargs=4611686018695757824, args=0x0) at bytecode.c:900
#102 0x0000000000552305 in eval_sub (form=form@entry=9016358) at eval.c:2149
#103 0x00000000005556dd in Feval (form=form@entry=9016358, lexical=<optimized out>) at eval.c:2005
#104 0x000000000054eba8 in Fcall_interactively (function=15507234, record_flag=12244178, keys=12279333) at callint.c:344
#105 0x0000000000552dcc in Ffuncall (nargs=nargs@entry=4, args=args@entry=0x7ffe8640e500) at eval.c:2785
#106 0x00000000005547e4 in call3 (fn=<optimized out>, arg1=<optimized out>, arg2=<optimized out>, arg3=<optimized out>) at eval.c:2603
#107 0x00000000004e163d in Fcommand_execute (cmd=<optimized out>, record_flag=<optimized out>, keys=<optimized out>, special=<optimized out>) at keyboard.c:10241
#108 0x00000000004edef9 in command_loop_1 () at keyboard.c:1587
#109 0x000000000055125a in internal_condition_case (bfun=bfun@entry=0x4edb50 <command_loop_1>, handlers=12295794, hfun=hfun@entry=0x4e3fe0 <cmd_error>) at eval.c:1289
#110 0x00000000004df33e in command_loop_2 (ignore=ignore@entry=12244178) at keyboard.c:1168
#111 0x0000000000551101 in internal_catch (tag=<optimized out>, func=func@entry=0x4df320 <command_loop_2>, arg=12244178) at eval.c:1060
#112 0x00000000004e3b07 in recursive_edit_1 () at keyboard.c:1147
---Type <return> to continue, or q <return> to quit---
#113 0x00000000004e3b07 in recursive_edit_1 () at keyboard.c:779
#114 0x00000000004e3e04 in Frecursive_edit () at keyboard.c:843
#115 0x0000000000417115 in main (argc=<optimized out>, argv=0x7ffe8640eb48) at emacs.c:1528
(gdb)
Comment 2 Jan Synacek 2016-02-15 13:23:32 UTC 
I cannot reproduce this.

Can you reproduce this when running emacs as "emacs -Q" (without any user configuration)?
Comment 3 Laurent Wandrebeck 2016-02-16 14:25:52 UTC 
User can’t either reproduce when not using his configuration. He’s got two add-ons or whatever it’s called in emacs land, I’ve asked him to use one at a time so we now the real source of problems. I would bet on the python completion add-on but time will tell. Thanks for your quick reply !
Comment 9 Mike McCune 2016-03-28 22:49:28 UTC 
This bug was accidentally moved from POST to MODIFIED via an error in automation, please see mmccune with any questions