On Thu, Jan 03, 2008 at 12:21:23PM +0100, Josip Rodin wrote:
> I've run into the bug again a few times, but most recently on a rather
> inconspicuous bit - just scrolling within one single message crashed rxvt.
>
> Because this message wasn't signed or anything, so not that many colors
> would be involved in the crash, I then also took a wild guess and reduced
> the .muttrc to just the ignore/unignore part, and that was the part that
> made the difference. With default etch mutt settings, it doesn't crash,
> with the attached muttrc, it does.
>
> I also obfuscated the text in the message to protect the guilty :)
> and to make it a bit more homogenous - and it still crashes on it.
>
> Steps to reproduce:
>
> * run rxvt
> * inside, run mutt -F rxvt-bug.muttrc -f rxvt-bug.mbox2
> * press enter (show message)
> * press space (scroll one screen down)
> * poof
>
> I'll try to whip up the debugger now...
Pretty much the same deal as the last time:
(gdb) r
Starting program: /home/joy/QA/rxvt/rxvt-2.6.4/src/rxvt-xterm
Program received signal SIGTSTP, Stopped (user).
0x00002ac494f33b35 in select () from /lib/libc.so.6
(gdb) p screen.text[TermWin.saveLines]
$1 = (
text_t *) 0x54dfa0 "i:Exit -:PrevPg <Space>:NextPg v:View Attachm. d:Del
r:Reply j:Next ?:Help "
(gdb) watch (void *)screen.text[TermWin.saveLines]
Hardware watchpoint 1: (void *) screen.text[TermWin.saveLines]
(gdb) c
Continuing.
Program received signal SIGTSTP, Stopped (user).
0x00002ac494f33b35 in select () from /lib/libc.so.6
(gdb) c
Continuing.
Hardware watchpoint 1: (void *) screen.text[TermWin.saveLines]
Old value = (void *) 0x54dfa0
New value = (void *) 0x543d40
scroll_text (row1=0, row2=520, count=11, spec=0) at screen.c:803
803 screen.tlen[j] = screen.tlen[j + count];
(gdb) c
Continuing.
Program received signal SIGTSTP, Stopped (user).
0x00000000004102e2 in scr_add_lines (
str=0x51cd3c "X xxxxxxxxx xx xxx, xx xxx:\r\n\nxxxxx1: Xxxxxx: Xxxxxx
xxxxxxx: xxxx xxx | xxxx -x
xxx-xxxxxx-xxxx\r\n\033[0;1m\033(B\033[31m\033[40m+\033[0m\033([EMAIL
PROTECTED] xxxx XXX xxx'x xxxxxxx xxxxx, x"..., nlines=-10, len=98) at
screen.c:1012
1012 stp[screen.cur.col] = c;
(gdb) bt full
#0 0x00000000004102e2 in scr_add_lines (
str=0x51cd3c "X xxxxxxxxx xx xxx, xx xxx:\r\n\nxxxxx1: Xxxxxx: Xxxxxx
xxxxxxx: xxxx xxx | xxxx -x
xxx-xxxxxx-xxxx\r\n\033[0;1m\033(B\033[31m\033[40m+\033[0m\033([EMAIL
PROTECTED] xxxx XXX xxx'x xxxxxxx xxxxx, x"..., nlines=-10, len=98) at
screen.c:1012
c = 88 'X'
i = 1
j = 0
row = 510
last_col = 80
checksel = 1
clearsel = 0
stp = (text_t *) 0x0
srp = (u_int16_t *) 0x0
#1 0x0000000000408d47 in main_loop () at command.c:3307
nlines = 3
ch = 27 '\033'
str = (
unsigned char *) 0x51cd3c "X xxxxxxxxx xx xxx, xx xxx:\r\n\nxxxxx1: Xxxxxx:
Xxxxxx xxxxxxx: xxxx xxx | xxxx -x
xxx-xxxxxx-xxxx\r\n\033[0;1m\033(B\033[31m\033[40m+\033[0m\033([EMAIL
PROTECTED] xxxx XXX xxx'x xxxxxxx xxxxx, x"...
#2 0x000000000040cd40 in main (argc=1, argv=0x7fff15f595a8) at main.c:1434
---Type <return> to continue, or q <return> to quit---
cmd_argv = (const char **) 0x0
(gdb)
--
2. That which causes joy or happiness.
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
