reproduced same kind of issue in emacs 25 using slightly more
complicated lisp code, plenty of ram left:

first file seqfile1:

(setq undo-outer-limit (expt 2 23))
(setq max-lisp-eval-depth (expt 2 17))
(setq max-specpdl-size (expt 2 17))
(setq message-log-max 40000)
(setq shell-command-default-error-buffer 'stderror-buffe)
(setq max-lisp-eval-depth (expt 2 16))
(defun insert (L)
          (message "insert into urls values ('%s',%i);" L counter)
          (setq counter (+ 1  counter))
)
(defun insertall (L)
          (map 'insert L))
(setq counter 28531843)
(insertall 
'(

seqfile2:
seq 11718 > seqfile1 

seqfile3:
))

cat seqfile1 seqfile2 seqfile3 > seqfile4

run each command in seqfile4 in order, same result: emacs segfault after
#77287 frames, plent of ram left

slightly different stack trace (but that could be because it's got
different lisp code leading to it)

virtual memory at segfault; 458mb 
resident memory: 75mb
shared memory 34.9mb


#0  0x00007fb13d43b53f in raise (sig=sig@entry=11)
    at ../sysdeps/unix/sysv/linux/raise.c:58
#1  0x00000000004f0f04 in terminate_due_to_signal (sig=sig@entry=11, 
backtrace_limit=backtrace_limit@entry=40) at emacs.c:381
#2  0x000000000050929e in handle_fatal_signal (sig=sig@entry=11)
    at sysdep.c:1601
#3  0x00000000005094c9 in deliver_thread_signal (sig=sig@entry=11, 
handler=0x509290 <handle_fatal_signal>) at sysdep.c:1575
#4  0x000000000050952f in deliver_fatal_thread_signal (sig=11) at sysdep.c:1613
#5  0x000000000050952f in handle_sigsegv (sig=11, siginfo=<optimized out>, 
arg=<optimized out>) at sysdep.c:1695
#6  0x00007fb13d43b670 in <signal handler called> ()
    at /lib/x86_64-linux-gnu/libpthread.so.0
#7  0x00000000004aa56c in bidi_resolve_weak 
(bidi_it=bidi_it@entry=0x7ffd69b29600) at bidi.c:2173
#8  0x00000000004ab31f in bidi_find_bracket_pairs 
(bidi_it=bidi_it@entry=0x7ffd69b29600) at bidi.c:2679
#9  0x00000000004ab9e5 in bidi_resolve_brackets 
(bidi_it=bidi_it@entry=0x7ffd69b29600) at bidi.c:2852
#10 0x00000000004abadc in bidi_resolve_neutral 
(bidi_it=bidi_it@entry=0x7ffd69b29600) at bidi.c:2953
#11 0x00000000004ac018 in bidi_type_of_next_char (bidi_it=0x7ffd69b29600)
    at bidi.c:3158
#12 0x00000000004ac018 in bidi_level_of_next_char 
(bidi_it=bidi_it@entry=0x7ffd69b29600) at bidi.c:3225
#13 0x00000000004acf1f in bidi_move_to_visually_next 
(bidi_it=bidi_it@entry=0x7ffd69b29600) at bidi.c:3418
#14 0x0000000000444350 in set_iterator_to_next (it=it@entry=0x7ffd69b28c60, 
reseat_p=reseat_p@entry=true) at xdisp.c:7428
#15 0x000000000044557f in move_it_in_display_line_to 
(it=it@entry=0x7ffd69b28c60, to_charpos=to_charpos@entry=105, 
to_x=to_x@entry=-1, op=op@entry=MOVE_TO_POS)
    at xdisp.c:9012
#16 0x0000000000446fd2 in move_it_to (it=it@entry=0x7ffd69b28c60, 
to_charpos=105, to_x=to_x@entry=-1, to_y=to_y@entry=-1, 
to_vpos=to_vpos@entry=-1, op=op@entry=8) at xdisp.c:9333
#17 0x00000000004513d8 in resize_mini_window (w=w@entry=0x112cc30, 
exact_p=exact_p@entry=false) at xdisp.c:10989
#18 0x000000000045158e in display_echo_area_1 (a1=18009136, a2=<optimized out>)
    at xdisp.c:10864
#19 0x0000000000431e1d in with_echo_area_buffer (w=w@entry=0x112cc30, 
which=which@entry=0, fn=fn@entry=
    0x451550 <display_echo_area_1>, a1=a1@entry=18009136, a2=a2@entry=0)
    at xdisp.c:10642
#20 0x0000000000455dae in display_echo_area (w=0x112cc30) at xdisp.c:10830
#21 0x0000000000455dae in echo_area_display 
(update_frame_p=update_frame_p@entry=true) at xdisp.c:11331
---Type <return> to continue, or q <return> to quit---
#22 0x00000000004560aa in message3_nolog (m=m@entry=65134084) at xdisp.c:10344
#23 0x00000000004561fc in message3 (m=m@entry=65134084) at xdisp.c:10273
#24 0x000000000055ecdc in Fmessage (nargs=<optimized out>, args=<optimized 
out>) at editfns.c:3698
#25 0x00000000005650a0 in eval_sub (form=<optimized out>) at eval.c:2137
#26 0x000000000056567d in Fprogn (body=31458307) at eval.c:426
#27 0x000000000056567d in funcall_lambda (fun=31458371, nargs=nargs@entry=1, 
arg_vector=arg_vector@entry=0x7ffd69b2a388) at eval.c:2914
#28 0x000000000056590b in Ffuncall (nargs=2, args=0x7ffd69b2a380)
    at eval.c:2754
#29 0x00000000005650a0 in eval_sub (form=<optimized out>) at eval.c:2137
#30 0x0000000000565265 in Fprogn (body=21179555) at eval.c:426
#31 0x0000000000565265 in Fif (args=<optimized out>) at eval.c:384
#32 0x0000000000564ed4 in eval_sub (form=<optimized out>) at eval.c:2119
#33 0x0000000000565265 in Fprogn (body=21179539) at eval.c:426
#34 0x0000000000565265 in Fif (args=<optimized out>) at eval.c:384
#35 0x0000000000564ed4 in eval_sub (form=<optimized out>) at eval.c:2119
#36 0x000000000056567d in Fprogn (body=21179491) at eval.c:426
#37 0x000000000056567d in funcall_lambda (fun=fun@entry=21179347, 
nargs=nargs@entry=2, arg_vector=arg_vector@entry=0x7ffd69b2a670) at eval.c:2914
#38 0x0000000000564988 in apply_lambda (fun=21179347, args=<optimized out>, 
count=count@entry=47536) at eval.c:2794
#39 0x0000000000564cea in eval_sub (form=<optimized out>) at eval.c:2241
---Type <return> to continue, or q <return> to quit---
#22 0x00000000004560aa in message3_nolog (m=m@entry=65134084) at xdisp.c:10344
#23 0x00000000004561fc in message3 (m=m@entry=65134084) at xdisp.c:10273
#24 0x000000000055ecdc in Fmessage (nargs=<optimized out>, args=<optimized 
out>) at editfns.c:3698
#25 0x00000000005650a0 in eval_sub (form=<optimized out>) at eval.c:2137
#26 0x000000000056567d in Fprogn (body=31458307) at eval.c:426
#27 0x000000000056567d in funcall_lambda (fun=31458371, nargs=nargs@entry=1, 
arg_vector=arg_vector@entry=0x7ffd69b2a388) at eval.c:2914
#28 0x000000000056590b in Ffuncall (nargs=2, args=0x7ffd69b2a380)
    at eval.c:2754
#29 0x00000000005650a0 in eval_sub (form=<optimized out>) at eval.c:2137
#30 0x0000000000565265 in Fprogn (body=21179555) at eval.c:426
#31 0x0000000000565265 in Fif (args=<optimized out>) at eval.c:384
#32 0x0000000000564ed4 in eval_sub (form=<optimized out>) at eval.c:2119
#33 0x0000000000565265 in Fprogn (body=21179539) at eval.c:426
#34 0x0000000000565265 in Fif (args=<optimized out>) at eval.c:384
#35 0x0000000000564ed4 in eval_sub (form=<optimized out>) at eval.c:2119
#36 0x000000000056567d in Fprogn (body=21179491) at eval.c:426
#37 0x000000000056567d in funcall_lambda (fun=fun@entry=21179347, 
nargs=nargs@entry=2, arg_vector=arg_vector@entry=0x7ffd69b2a670) at eval.c:2914
#38 0x0000000000564988 in apply_lambda (fun=21179347, args=<optimized out>, 
count=count@entry=47536) at eval.c:2794
#39 0x0000000000564cea in eval_sub (form=<optimized out>) at eval.c:2241
....

#77265 0x0000000000565b05 in Ffuncall (nargs=3, args=args@entry=0x7ffd6a36a238)
    at eval.c:2696
#77266 0x000000000059ac83 in exec_byte_code (bytestr=<optimized out>, 
vector=<optimized out>, maxdepth=<optimized out>, args_template=<optimized 
out>, nargs=nargs@entry=1, args=<optimized out>, args@entry=0x9dd714 
<pure+1592756>)
    at bytecode.c:880
#77267 0x0000000000565636 in funcall_lambda (fun=140726385419344, 
nargs=nargs@entry=1, arg_vector=0x9dd714 <pure+1592756>, 
arg_vector@entry=0x7ffd6a36a3d8)
    at eval.c:2855
#77268 0x000000000056590b in Ffuncall (nargs=2, args=args@entry=0x7ffd6a36a3d0)
    at eval.c:2754
#77269 0x000000000059ac83 in exec_byte_code (bytestr=<optimized out>, 
vector=<optimized out>, maxdepth=<optimized out>, args_template=<optimized 
out>, nargs=nargs@entry=1, args=<optimized out>, args@entry=0x9dd9f4 
<pure+1593492>)
    at bytecode.c:880
#77270 0x0000000000565636 in funcall_lambda (fun=140726385420576, 
nargs=nargs@entry=1, arg_vector=0x9dd9f4 <pure+1593492>, 
arg_vector@entry=0x7ffd6a36a630)
---Type <return> to continue, or q <return> to quit---
    at eval.c:2855
#77271 0x000000000056590b in Ffuncall (nargs=nargs@entry=2, 
args=args@entry=0x7ffd6a36a628) at eval.c:2754
#77272 0x000000000056162a in Ffuncall_interactively (nargs=2, 
args=0x7ffd6a36a628) at callint.c:252
#77273 0x0000000000565a19 in Ffuncall (nargs=nargs@entry=3, 
args=args@entry=0x7ffd6a36a620) at eval.c:2673
#77274 0x0000000000561fef in Fcall_interactively (function=<optimized out>, 
record_flag=<optimized out>, keys=<optimized out>) at callint.c:840
#77275 0x0000000000565af6 in Ffuncall (nargs=4, args=args@entry=0x7ffd6a36a888)
    at eval.c:2700
#77276 0x000000000059ac83 in exec_byte_code (bytestr=<optimized out>, 
vector=<optimized out>, maxdepth=<optimized out>, args_template=<optimized 
out>, nargs=nargs@entry=1, args=<optimized out>, args@entry=0x932c9c 
<pure+893756>)
    at bytecode.c:880
#77277 0x0000000000565636 in funcall_lambda (fun=0, nargs=nargs@entry=1, 
arg_vector=0x932c9c <pure+893756>, arg_vector@entry=0x7ffd6a36aa38) at 
eval.c:2855
#77278 0x000000000056590b in Ffuncall (nargs=nargs@entry=2, 
args=args@entry=0x7ffd6a36aa30) at eval.c:2754
#77279 0x0000000000565c0a in call1 (fn=fn@entry=14784, arg1=<optimized out>)
    at eval.c:2552
#77280 0x00000000004ffbd1 in command_loop_1 () at keyboard.c:1479
#77281 0x0000000000564222 in internal_condition_case (bfun=bfun@entry=0x4ff7b0 
<---Type <return> to continue, or q <return> to quit---
command_loop_1>, handlers=handlers@entry=19056, hfun=hfun@entry=0x4f5fa0 
<cmd_error>) at eval.c:1309
#77282 0x00000000004f13a4 in command_loop_2 (ignore=ignore@entry=0)
    at keyboard.c:1107
#77283 0x00000000005641c3 in internal_catch (tag=tag@entry=45840, 
func=func@entry=0x4f1380 <command_loop_2>, arg=arg@entry=0) at eval.c:1074
#77284 0x00000000004f1360 in command_loop () at keyboard.c:1086
#77285 0x00000000004f5b87 in recursive_edit_1 () at keyboard.c:692
#77286 0x00000000004f5ee8 in Frecursive_edit () at keyboard.c:763
#77287 0x0000000000418ea2 in main (argc=2, argv=0x7ffd6a36ae38) at emacs.c:1626
(g

** Also affects: emacs25 (Ubuntu)
   Importance: Undecided
       Status: New

** Tags added: zesty

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to emacs25 in Ubuntu.
https://bugs.launchpad.net/bugs/508618

Title:
  Setting max-specpdl-size of 34295 allows segfaults with 'simple' elisp

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/emacs23/+bug/508618/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

Reply via email to