bug#17771: 24.3.91; SIGSEGV in cleanup_vector

[Stephen Berman]

0. emacs -Q
1. C-h h (on my machine, it takes ~30 seconds for the Hello file to
   appear; during that time, do the following:)
2. Type C-g repeatedly (I did it rapidly, for ~15 seconds).
3. Emacs crashes, full backtrace below.  (This is reliably reproducible.)



In GNU Emacs 24.3.91.9 (x86_64-suse-linux-gnu, GTK+ Version 3.10.4)
 of 2014-06-13 on rosalinde
Repository revision: 117234 eggert@cs.ucla.edu-20140611200346-2x9bn68tus2nlf37
Windowing system distributor `The X.Org Foundation', version 11.0.11403901
System Description:     openSUSE 13.1 (Bottle) (x86_64)

Configured using:
 `configure --without-toolkit-scroll-bars CFLAGS=-g3'

Important settings:
  value of $LANG: en_US.UTF-8
  value of $XMODIFIERS: @im=ibus
  locale-coding-system: utf-8-unix


Program received signal SIGSEGV, Segmentation fault.
0x00000000005aa564 in cleanup_vector (vector=0x43b4ea8)
    at ../../../../bzr/emacs/emacs-24/src/alloc.c:2929
2929          ((struct font *) vector)->driver->close ((struct font *) vector);
(gdb) bt full
#0  0x00000000005aa564 in cleanup_vector (vector=0x43b4ea8)
    at ../../../../bzr/emacs/emacs-24/src/alloc.c:2929
No locals.
#1  0x00000000005aa677 in sweep_vectors ()
    at ../../../../bzr/emacs/emacs-24/src/alloc.c:2967
        total_bytes = 120
        free_this_block = false
        nbytes = 120
        block = 0x43b4020
        bprev = 0x43b6418
        lv = 0x628297 <balance_intervals+31>
        lvprev = 0xbf2070
        vector = 0x43b4ea8
        next = 0x43b4ea8
#2  0x00000000005b0132 in gc_sweep () at 
../../../../bzr/emacs/emacs-24/src/alloc.c:6714
No locals.
#3  0x00000000005ae19d in Fgarbage_collect ()
    at ../../../../bzr/emacs/emacs-24/src/alloc.c:5643
        nextb = 0x0
        stack_top_variable = 0 '\000'
        i = 1619
        message_p = true
        count = 3
        start = {
          tv_sec = 1402649898, 
          tv_nsec = 231551682
        }
        retval = 12738738
        tot_before = 0
#4  0x00000000005374b1 in maybe_gc () at 
../../../../bzr/emacs/emacs-24/src/lisp.h:4564
No locals.
#5  0x00000000005cd9f4 in Ffuncall (nargs=4, args=0x7fffffffd970)
    at ../../../../bzr/emacs/emacs-24/src/eval.c:2766
        fun = 5936534
        original_fun = 140737488345376
        funcar = 12765552
        numargs = 3
---Type <return> to continue, or q <return> to quit---
        lisp_numargs = 9258817
        val = 140737488345424
        internal_args = 0xc260b2
        i = 9258817
#6  0x00000000005cd6e6 in call3 (fn=12786194, arg1=25124486, arg2=9258817, 
arg3=12738738)
    at ../../../../bzr/emacs/emacs-24/src/eval.c:2645
        ret_ungc_val = 140737488345600
        gcpro1 = {
          next = 0x7fffffffd9b0, 
          var = 0x53738f <build_string+42>, 
          nvars = 4
        }
        args = {12786194, 25124486, 9258817, 12738738}
#7  0x000000000053ccef in cmd_error_internal (data=25124486, 
context=0x7fffffffda00 "")
    at ../../../../bzr/emacs/emacs-24/src/keyboard.c:1085
No locals.
#8  0x000000000053cc13 in cmd_error (data=25124486)
    at ../../../../bzr/emacs/emacs-24/src/keyboard.c:1054
        old_level = 12738738
        old_length = 12738738
        macroerror = 
"\000`\302\000\000\000\000\000F\304|\001\000\000\000\000\002\000\000\000\000\000\000\000\262`\302\000\000\000\000\000\000\000\000\000\002",
 '\000' <repeats 11 times>, <incomplete sequence \332>
#9  0x00000000005cab95 in internal_condition_case (bfun=0x53d1ab 
<command_loop_1>, 
    handlers=12790306, hfun=0x53cabd <cmd_error>)
    at ../../../../bzr/emacs/emacs-24/src/eval.c:1351
        val = 25124486
        val = 5492514
        c = 0x13d5830
#10 0x000000000053cf05 in command_loop_2 (ignore=12738738)
    at ../../../../bzr/emacs/emacs-24/src/keyboard.c:1177
        val = 0
#11 0x00000000005ca3af in internal_catch (tag=12786242, func=0x53cedf 
<command_loop_2>, 
    arg=12738738) at ../../../../bzr/emacs/emacs-24/src/eval.c:1118
        val = 12738738
        c = 0x13d5630
#12 0x000000000053ceb3 in command_loop ()
---Type <return> to continue, or q <return> to quit---
    at ../../../../bzr/emacs/emacs-24/src/keyboard.c:1156
No locals.
#13 0x000000000053c6b8 in recursive_edit_1 ()
    at ../../../../bzr/emacs/emacs-24/src/keyboard.c:777
        count = 1
        val = 12738738
#14 0x000000000053c825 in Frecursive_edit ()
    at ../../../../bzr/emacs/emacs-24/src/keyboard.c:848
        count = 0
        buffer = 12738738
#15 0x000000000053a857 in main (argc=2, argv=0x7fffffffdd98)
    at ../../../../bzr/emacs/emacs-24/src/emacs.c:1646
        dummy = 140737354130592
        stack_bottom_variable = 0 '\000'
        do_initial_setlocale = true
        dumping = false
        skip_args = 0
        rlim = {
          rlim_cur = 8720000, 
          rlim_max = 18446744073709551615
        }
        no_loadup = false
        junk = 0x0
        dname_arg = 0x0
        ch_to_dir = 0x7ffff7ffe148 ""
        original_pwd = 0x0

Lisp Backtrace:
"Automatic GC" (0xc0bbe8)
"command-error-default-function" (0xffffd978)