Emacs crashes when visiting folders with mh-e

[Benjamin Pierce]

Symptoms:

I am seeing frequent (one per day or so), but not reliably repeatable emacs
crashes when I visit a new folder in mh-e.  The probability of crashing
seems to go up as the folders get bigger (e.g., I don't think I've seen a
crash on a folder smaller than a hundred messages).  The crash message and
gdb stack trace at the point of the crash look like this:

Program received signal EXC_BAD_ACCESS, Could not access memory.
0x0001c918 in move_it_vertically (it=0xbfffdb70, dy=52396157) at xdisp.c:6163
6163    in xdisp.c
(gdb) bt
#0  0x0001c918 in move_it_vertically (it=0xbfffdb70, dy=52396157) at 
xdisp.c:6163
#1  0x0004468c in Fwindow_end (window=1, update=0) at window.c:1038
#2  0x00113810 in Ffuncall (nargs=1, args=0xbfffdea8) at eval.c:2730
#3  0x0014136c in Fbyte_code (bytestr=-1073750356, vector=1563144, 
maxdepth=-1073
750360) at bytecode.c:689
#4  0x00113e44 in funcall_lambda (fun=-1073750360, nargs=3618112, 
arg_vector=0x37
09e4) at eval.c:2914
#5  0x00113960 in Ffuncall (nargs=1, args=0xbfffdea8) at eval.c:2784
#6  0x00113170 in run_hook_with_args (nargs=3552576, args=0xbfffdea8, 
cond=322121
6940) at eval.c:2395
#7  0x001132ec in run_hook_with_args_2 (hook=1, arg1=52396157, arg2=0) at 
eval.c:
2465
#8  0x00047e0c in set_window_buffer (window=2, buffer=-1073750360, 
run_hooks_p=36
11768, keep_margins_p=3618112) at window.c:3011
#9  0x00047fb8 in Fset_window_buffer (window=1563144, buffer=-1073750576, 
keep_ma
rgins=-1073750356) at window.c:3056
#10 0x000c3604 in switch_to_buffer_1 (buffer=111427331, norecord=58721281) at 
buf
fer.c:1657
#11 0x00113810 in Ffuncall (nargs=1, args=0x363528) at eval.c:2730
#12 0x0014136c in Fbyte_code (bytestr=3611324, vector=111427331, 
maxdepth=3552552
) at bytecode.c:689
#13 0x00113e44 in funcall_lambda (fun=3552552, nargs=3618112, 
arg_vector=0x3709e4
) at eval.c:2914
#14 0x00113960 in Ffuncall (nargs=1, args=0x363528) at eval.c:2784
#15 0x0014136c in Fbyte_code (bytestr=3611324, vector=111427331, 
maxdepth=3552552
) at bytecode.c:689
#16 0x00113e44 in funcall_lambda (fun=3552552, nargs=3618112, 
arg_vector=0x3709e4
) at eval.c:2914
#17 0x00113b04 in apply_lambda (fun=3618112, args=3611324, eval_flag=3552552) 
at 
eval.c:2836
#18 0x00112c50 in Feval (form=22568532) at eval.c:2137
#19 0x0010fbd4 in Fprogn (args=1) at eval.c:408
#20 0x00113e18 in funcall_lambda (fun=8285965, nargs=-1073747888, 
arg_vector=0x37
09e4) at eval.c:2907
#21 0x00113960 in Ffuncall (nargs=1, args=0x7e6f0d) at eval.c:2784
#22 0x00112f0c in Fapply (nargs=-1073747888, args=0x5) at eval.c:2232
#23 0x0011336c in apply1 (fn=42121057, arg=1142956578) at eval.c:2485
#24 0x0010e294 in Fcall_interactively (function=8285960, record_flag=58721281, 
ke
ys=3607012) at callint.c:406
#25 0x000b5474 in Fcommand_execute (cmd=42121057, record_flag=3614476, keys=5, 
sp
ecial=9) at keyboard.c:9684
#26 0x000a91cc in command_loop_1 () at keyboard.c:1746
#27 0x001115c4 in internal_condition_case (bfun=0xa7f1c <command_loop_1>, 
handler
s=58766377, hfun=0xa77e4 <cmd_error>) at eval.c:1334
#28 0x000a7c68 in command_loop_2 () at keyboard.c:1276
#29 0x00111020 in internal_catch (tag=1, func=0xa7c28 <command_loop_2>, 
arg=58721
281) at eval.c:1095
#30 0x000a7bc0 in command_loop () at keyboard.c:1255
#31 0x000a7464 in recursive_edit_1 () at keyboard.c:961
#32 0x000a7614 in Frecursive_edit () at keyboard.c:1022
#33 0x000a6094 in main (argc=-1073747952, argv=0x7e6f0d) at emacs.c:1695





In GNU Emacs 21.3.50.1 (powerpc-apple-darwin7.0.0, X toolkit)
 of 2004-08-31 on dsl-207-245-69-66.cust.oldcity.dca.net
configured using `configure '--prefix=/sw' '--without-carbon' '--with-x' 
'--without-gif' '--infodir=${prefix}/share/info' '--mandir=${prefix}/share/man' 
'--libexecdir=${prefix}/lib' '--with-x-toolkit=lucid' 
'--without-toolkit-scroll-bars' 'CPPFLAGS=-I/sw/include' 'LDFLAGS=-L/sw/lib''

Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: nil
  value of $LC_CTYPE: nil
  value of $LC_MESSAGES: nil
  value of $LC_MONETARY: nil
  value of $LC_NUMERIC: nil
  value of $LC_TIME: nil
  value of $LANG: nil
  locale-coding-system: nil
  default-enable-multibyte-characters: t

Major mode: Shell

Minor modes in effect:
  auto-compression-mode: t
  tool-bar-mode: t
  mouse-wheel-mode: t
  menu-bar-mode: t
  font-lock-mode: t
  unify-8859-on-encoding-mode: t
  utf-translate-cjk-mode: t
  line-number-mode: t
  transient-mark-mode: t

Recent input:
C-s C-s C-s C-s C-s C-a C-z C-s C-z C-h . d d p d d 
p ^ p e n n - f a c <return> ! ! ! ! ! ! d ^ p e n 
n - f a c <return> p ^ D r u SPC x <backspace> <f11> 
s SPC C-g C-z C-s <help-echo> <help-echo> <help-echo> 
<help-echo> <down-mouse-5> <mouse-5> <double-down-mouse-5> 
<double-mouse-5> <triple-down-mouse-5> <triple-mouse-5> 
<triple-down-mouse-5> <triple-mouse-5> M-x e m a SPC 
r e SPC <backspace> <backspace> <backspace> <backspace> 
<backspace> <backspace> <backspace> <backspace> r e 
SPC p SPC o SPC r SPC - e m SPC <return>

Recent messages:
Loading smiley-ems...done
No more undeleted messages
Loading flow-fill...done
Loading mail-extr...done
Loading mh-alias...done
Destination folder: +penn-fac [6 times]
Quit [2 times]
End of buffer [4 times]
Making completion list... [3 times]
Loading emacsbug...done