Bug 1400566

Description of problem:

I'm seeing frequent segfault on F25.  Never a problem on F24.  Here is what gdb says:

Thread 1 "emacs" received signal SIGSEGV, Segmentation fault.
0x0000000000539dcb in re_match_2_internal (bufp=bufp@entry=0x9af3e40, 
    string1=<optimized out>, 
    string1@entry=0x9af3e40 <error: Cannot access memory at address 0x9af3e40>, size1=<optimized out>, size1@entry=0, string2=<optimized out>, 
    string2@entry=0x9af3e40 <error: Cannot access memory at address 0x9af3e40>, size2=<optimized out>, size2@entry=7541, pos=pos@entry=759, 
    regs=<optimized out>, stop=<optimized out>) at ../../src/regex.c:5476
5476		    corig = c = RE_STRING_CHAR_AND_LENGTH (d, len, target_multibyte);
Missing separate debuginfos, use: dnf debuginfo-install GConf2-3.2.6-16.fc24.x86_64 ImageMagick-libs-6.9.3.0-3.fc25.x86_64 adwaita-gtk2-theme-3.22.2-1.fc25.x86_64 alsa-lib-1.1.1-2.fc25.x86_64 atk-2.22.0-1.fc25.x86_64 bzip2-libs-1.0.6-20.fc24.x86_64 cairo-1.14.6-2.fc25.x86_64 dbus-glib-0.108-1.fc25.x86_64 dbus-libs-1.11.6-1.fc25.x86_64 dconf-0.26.0-1.fc25.x86_64 expat-2.2.0-1.fc25.x86_64 fftw-libs-double-3.3.5-3.fc25.x86_64 fontconfig-2.12.1-1.fc25.x86_64 freetype-2.6.5-1.fc25.x86_64 gdk-pixbuf2-2.36.0-1.fc25.x86_64 giflib-4.1.6-15.fc24.x86_64 glib2-2.50.1-1.fc25.x86_64 gmp-6.1.1-1.fc25.x86_64 gnutls-3.5.5-2.fc25.x86_64 graphite2-1.3.6-1.fc25.x86_64 gtk2-2.24.31-2.fc25.x86_64 gvfs-client-1.30.1.1-1.fc25.x86_64 harfbuzz-1.3.2-1.fc25.x86_64 jbigkit-libs-2.1-5.fc24.x86_64 lcms2-2.8-2.fc25.x86_64 libICE-1.0.9-5.fc25.x86_64 libNX_Xinerama-3.5.0.32-4.fc24.x86_64 libSM-1.2.2-4.fc24.x86_64 libX11-1.6.4-1.fc25.x86_64 libXau-1.0.8-6.fc24.x86_64 libXcomposite-0.4.4-8.fc24.x86_64 libXcursor-1.1.14-6.fc24.x86_64 libXdamage-1.1.4-8.fc24.x86_64 libXext-1.3.3-4.fc24.x86_64 libXfixes-5.0.3-1.fc25.x86_64 libXft-2.3.2-4.fc24.x86_64 libXi-1.7.8-2.fc25.x86_64 libXpm-3.5.11-5.fc24.x86_64 libXrandr-1.5.1-1.fc25.x86_64 libXrender-0.9.10-1.fc25.x86_64 libXt-1.1.5-3.fc24.x86_64 libXxf86vm-1.1.4-3.fc24.x86_64 libacl-2.2.52-11.fc24.x86_64 libattr-2.4.47-16.fc24.x86_64 libblkid-2.28.2-1.fc25.x86_64 libcap-2.25-2.fc25.x86_64 libcroco-0.6.11-2.fc24.x86_64 libdatrie-0.2.9-3.fc25.x86_64 libdrm-2.4.73-1.fc25.x86_64 libffi-3.1-9.fc24.x86_64 libgcc-6.2.1-2.fc25.x86_64 libgcrypt-1.6.6-1.fc25.x86_64 libgomp-6.2.1-2.fc25.x86_64 libgpg-error-1.24-1.fc25.x86_64 libidn-1.33-1.fc25.x86_64 libjpeg-turbo-1.5.1-0.fc25.x86_64 libmount-2.28.2-1.fc25.x86_64 libotf-0.9.13-7.fc24.x86_64 libpng-1.6.26-1.fc25.x86_64 librsvg2-2.40.16-2.fc25.x86_64 libselinux-2.5-12.fc25.x86_64 libtasn1-4.9-1.fc25.x86_64 libthai-0.1.25-1.fc25.x86_64 libtiff-4.0.6-2.fc24.x86_64 libtool-ltdl-2.4.6-12.fc25.x86_64 libuuid-2.28.2-1.fc25.x86_64 libwayland-client-1.12.0-1.fc25.x86_64 libwayland-server-1.12.0-1.fc25.x86_64 libxcb-1.12-1.fc25.x86_64 libxml2-2.9.3-4.fc25.x86_64 libxshmfence-1.2-3.fc24.x86_64 lz4-1.7.3-1.fc25.x86_64 m17n-lib-1.7.0-5.fc24.x86_64 mesa-libEGL-12.0.3-3.fc25.x86_64 mesa-libGL-12.0.3-3.fc25.x86_64 mesa-libgbm-12.0.3-3.fc25.x86_64 mesa-libglapi-12.0.3-3.fc25.x86_64 ncurses-libs-6.0-6.20160709.fc25.x86_64 nettle-3.3-1.fc25.x86_64 p11-kit-0.23.2-2.fc24.x86_64 pango-1.40.3-1.fc25.x86_64 pcre-8.39-6.fc25.x86_64 pixman-0.34.0-2.fc24.x86_64 systemd-libs-231-10.fc25.x86_64 xz-libs-5.2.2-2.fc24.x86_64 zlib-1.2.8-10.fc24.x86_64
(gdb) where
#0  0x0000000000539dcb in re_match_2_internal (bufp=bufp@entry=0x9af3e40, string1=<optimized out>, 
    string1@entry=0x9af3e40 <error: Cannot access memory at address 0x9af3e40>, size1=<optimized out>, size1@entry=0, string2=<optimized out>, 
    string2@entry=0x9af3e40 <error: Cannot access memory at address 0x9af3e40>, size2=<optimized out>, 
    size2@entry=7541, pos=pos@entry=759, regs=<optimized out>, stop=<optimized out>) at ../../src/regex.c:5476
#1  0x0000000000541951 in re_match_2 (bufp=0x9af3e40, string1=string1@entry=0x9af3e40 <error: Cannot access memory at address 0x9af3e40>, size1=size1@entry=0, string2=string2@entry=0x9af3e40 <error: Cannot access memory at address 0x9af3e40>, size2=size2@entry=7541, pos=pos@entry=759, regs=<optimized out>, stop=<optimized out>) at ../../src/regex.c:4922
#2  0x0000000000537376 in fast_looking_at (regexp=<optimized out>, pos=pos@entry=760, pos_byte=759, 
    pos_byte@entry=760, limit=<optimized out>, limit_byte=7541, string=string@entry=0) at ../../src/search.c:564
#3  0x00000000004a8b2b in bidi_at_paragraph_end (charpos=760, bytepos=760)
    at ../../src/bidi.c:1462
#4  0x00000000004acd8f in bidi_move_to_visually_next (bidi_it=0x7fffffff9000)
    at ../../src/bidi.c:3499
#5  0x0000000000443e10 in set_iterator_to_next (it=0x7fffffff8660, reseat_p=<optimized out>) at ../../src/xdisp.c:7428
---Type <return> to continue, or q <return> to quit---
#6  0x000000000044e25e in display_line (it=it@entry=0x7fffffff8660)
    at ../../src/xdisp.c:21005
#7  0x00000000004509c8 in try_window (window=19561525, pos=..., flags=<optimized out>) at ../../src/xdisp.c:17206
#8  0x000000000046473e in redisplay_window (window=19561525, just_this_one_p=just_this_one_p@entry=false) at ../../src/xdisp.c:16655
#9  0x000000000046781b in redisplay_window_0 (window=window@entry=19561525)
    at ../../src/xdisp.c:14446
#10 0x000000000056331e in internal_condition_case_1 (bfun=0x4677f0 <redisplay_window_0>, arg=19561525, handlers=<optimized out>, hfun=0x42cc40 <redisplay_window_error>) at ../../src/eval.c:1333
#11 0x0000000000431b2d in redisplay_windows (window=19561525)
    at ../../src/xdisp.c:14426
#12 0x0000000000454539 in redisplay_internal () at ../../src/xdisp.c:13986
#13 0x00000000004563c5 in redisplay () at ../../src/xdisp.c:13214
#14 0x00000000004fa39b in read_char (commandflag=commandflag@entry=1, map=map@entry=159565763, prev_event=0, used_mouse_menu=used_mouse_menu@entry=0x7fffffffdacb, end_time=end_time@entry=0x0) at ../../src/keyboard.c:2477
#15 0x00000000004fce6d in read_key_sequence (keybuf=keybuf@entry=0x7fffffffdbc0, prompt=prompt@entry=0, dont_downcase_last=dont_downcase_last@entry=false, can_return_switch_frame=can_return_switch_frame@entry=true, fix_current_buffer=fix_current_buffer@entry=true, prevent_redisplay=prevent_redisplay@entry=false, bufsize=30) at ../../src/keyboard.c:9063
---Type <return> to continue, or q <return> to quit---
#16 0x00000000004feab4 in command_loop_1 () at ../../src/keyboard.c:1365
#17 0x0000000000563292 in internal_condition_case (bfun=bfun@entry=0x4fe890 <command_loop_1>, handlers=handlers@entry=19056, hfun=hfun@entry=0x4f5130 <cmd_error>) at ../../src/eval.c:1309
#18 0x00000000004f0584 in command_loop_2 (ignore=ignore@entry=0)
    at ../../src/keyboard.c:1107
#19 0x0000000000563233 in internal_catch (tag=tag@entry=45840, func=func@entry=0x4f0560 <command_loop_2>, arg=arg@entry=0) at ../../src/eval.c:1074
#20 0x00000000004f0540 in command_loop () at ../../src/keyboard.c:1086
#21 0x00000000004f4d27 in recursive_edit_1 () at ../../src/keyboard.c:692
#22 0x00000000004f5078 in Frecursive_edit () at ../../src/keyboard.c:763
#23 0x0000000000418952 in main (argc=1, argv=0x7fffffffdf48)
    at ../../src/emacs.c:1626
(gdb) 

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info: