[Date Prev][Date Next][Thread Prev][][Date Index][Thread Index]

W3M images causes segfault/crash in Emacs



This bug report will be sent to the emacs-w3m development team,
 not to your local site managers!!
Please write in simple English, because the emacs-w3m developers
aren't good at English reading. ;-)

Please describe as succinctly as possible:
- What happened.
- What you thought should have happened.
- Precisely what you were doing at the time.

Please also include any Lisp back-traces that you may have.
================================================================
Dear Bug Team!

Note: This is probably not an Emacs-W3M bug, as this is a segfault and
subsequent crash of the entire Emacs process.  I suspect that this is
something in Emacs proper.

If you feel that this is better reported to the main Emacs developers,
via report-emacs-bug, then please tell me to do that, or forward this as
you see fit.

Description:

When I ask W3M to display inline images on certain webpages, Emacs
crashes.  There is no Lisp backtrace at all, but I do get a backtrace
output from the console and when running under GDB.  This is included at
the end of this message.

I am using Ubuntu 14.04.2, 64bit running Emacs version 24.3.1, which is
the stable version 24 in the cassou PPA.

To reproduce:

1. Start Emacs and load W3M
2. Navigate to a Github project, for instance
https://github.com/doitian/emacs-w3m
3. Ask for W3M to display some images.  In particular, ask for it to
display the images.  You can simply show all images or select one of the
images at at the end of the "Graphs" link.
4. Watch Emacs segfault

What I expect:

I expect to see the images.

However, at the very least, Emacs should recover from whatever just
happened instead of getting shut down and dumping a core.


Debugging output:

I'm sorry to say that these probably won't be of much use as the
binaries in the cassou PPA are stripped of debugging information.
However, you can see that whatever Emacs is doing resulted in a double
free in this instance.

-----------------------------------------------------------------

Here is the console backtrace output of the process:

emacs[0x4f74cb]
emacs[0x4dcf3e]
emacs[0x4f611e]
emacs[0x4f6283]
/lib/x86_64-linux-gnu/libpthread.so.0(+0x10340)[0x7f6e50501340]
emacs[0x5bb693]
emacs[0x5c240b]
emacs[0x5c09e5]
emacs[0x5c0e71]
emacs[0x54fe9d]
emacs[0x58494b]
emacs[0x54fa0f]
emacs[0x54fd1b]
emacs[0x58494b]
emacs[0x54fa0f]
emacs[0x54fd1b]
emacs[0x55101c]
emacs[0x54ff0f]
emacs[0x58494b]
emacs[0x54f3c5]
emacs[0x552511]
emacs[0x5854f8]
emacs[0x54fa0f]
emacs[0x54fd1b]
emacs[0x55005a]
emacs[0x4e2af5]
emacs[0x4e2de1]
emacs[0x4e4428]
emacs[0x4e6c64]
emacs[0x58ee6b]
emacs[0x4e7a0e]
emacs[0x56c9fe]
emacs[0x54fe8c]
emacs[0x58494b]
emacs[0x54fa0f]
emacs[0x54fd1b]
emacs[0x58494b]
emacs[0x54fa0f]
emacs[0x54fd1b]
emacs[0x55103c]
emacs[0x54ff0f]

-----------------------------------------------------------

Here is the output from GDB:

Starting program: /usr/bin/emacs --no-desktop
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7fffe9cff700 (LWP 30885)]
[New Thread 0x7fffe8e81700 (LWP 30886)]
*** Error in `/usr/bin/emacs': double free or corruption (!prev): 0x00000000024efe40 ***

Program received signal SIGABRT, Aborted.
0x00007ffff19b4cc9 in __GI_raise (sig=sig@entry=6)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
56 ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) bt
#0  0x00007ffff19b4cc9 in __GI_raise (sig=sig@entry=6)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#1  0x00007ffff19b80d8 in __GI_abort () at abort.c:89
#2  0x00007ffff19f1394 in __libc_message (do_abort=do_abort@entry=1, 
    fmt=fmt@entry=0x7ffff1affb28 "*** Error in `%s': %s: 0x%s ***\n")
    at ../sysdeps/posix/libc_fatal.c:175
#3  0x00007ffff19fd66e in malloc_printerr (ptr=<optimized out>, 
    str=0x7ffff1affc10 "double free or corruption (!prev)", action="">
    at malloc.c:4996
#4  _int_free (av=<optimized out>, p=<optimized out>, have_lock=0)
    at malloc.c:3840
#5  0x00000000005bb652 in ?? ()
#6  0x00000000005c2758 in ?? ()
#7  0x00000000005c09e5 in ?? ()
#8  0x00000000005c0e71 in ?? ()
#9  0x000000000054fe9d in ?? ()
#10 0x000000000058494b in ?? ()
#11 0x000000000054fa0f in ?? ()
#12 0x000000000054fd1b in ?? ()
#13 0x000000000058494b in ?? ()
#14 0x000000000054fa0f in ?? ()
#15 0x000000000054fd1b in ?? ()
#16 0x000000000055101c in ?? ()
---Type <return> to continue, or q <return> to quit---
#17 0x000000000054ff0f in ?? ()
#18 0x000000000058494b in ?? ()
#19 0x000000000054f3c5 in ?? ()
#20 0x0000000000552511 in ?? ()
#21 0x00000000005854f8 in ?? ()
#22 0x000000000054fa0f in ?? ()
#23 0x000000000054fd1b in ?? ()
#24 0x000000000055005a in ?? ()
#25 0x00000000004e2af5 in ?? ()
#26 0x00000000004e2de1 in ?? ()
#27 0x00000000004e4428 in ?? ()
#28 0x00000000004e6c64 in ?? ()
#29 0x000000000058ee6b in ?? ()
#30 0x00000000004e7a0e in ?? ()
#31 0x000000000056c9fe in ?? ()
#32 0x000000000054fe8c in ?? ()
#33 0x000000000058494b in ?? ()
#34 0x000000000054fa0f in ?? ()
#35 0x000000000054fd1b in ?? ()
#36 0x000000000058494b in ?? ()
#37 0x000000000054fa0f in ?? ()
#38 0x000000000054fd1b in ?? ()
#39 0x000000000055103c in ?? ()
---Type <return> to continue, or q <return> to quit---q
Quit


I also tried it with a -Q and it has the same issue (though I did have
to do a M-x package-initialize to get emacs-w3m loaded).


Best,
Zach Kost-Smith

Note, I had to send this manually as report-bug via sendmail didn't work, which I'm sure is unrelated.  I hope it got there without any issues.

================================================================

System Info to help track down your bug:
---------------------------------------
emacs-w3m-version
 => "1.4.538"
emacs-version
 => "GNU Emacs 24.3.1 (x86_64-pc-linux-gnu, GTK+ Version 3.10.7)\n of 2014-03-07 on lamiak, modified by Debian"
mule-version
 => "6.0 (HANACHIRUSATO)"
system-type
 => gnu/linux
(featurep 'gtk)
 => t
w3m-version
 => "w3m/0.5.3+debian-15"
w3m-type
 => w3m-m17n
w3m-compile-options
 => ("lang=en" "m17n" "image" "color" "ansi-color" "mouse" "gpm" "menu" "cookie" "ssl" "ssl-verify" "external-uri-loader" "w3mmailer" "nntp" "gopher" "ipv6" "alarm" "mark" "migemo")
w3m-language
 => nil
w3m-command-arguments
 => nil
w3m-command-arguments-alist
 => nil
w3m-command-environment
 => nil
w3m-input-coding-system
 => utf-8
w3m-output-coding-system
 => utf-8
w3m-use-mule-ucs
 => nil