seg fault when reading binary group in gnus

[Maarten Vergauwen]

This bug report will be sent to the Free Software Foundation,
not to your local site managers!
Please write in English, because the Emacs maintainers do not have
translators to read other languages for them.

Your bug report will be posted to the bug-gnu-emacs@gnu.org mailing list,
and to the gnu.emacs.bug news group.

In GNU Emacs 21.1.1 (i686-pc-linux-gnu, X toolkit, Xaw3d scroll bars)
 of 2001-10-23 on vaire
configured using `configure  --prefix=/freeware/emacs 
--exec-prefix=/freeware/emacs/linux-i386'
Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: nil
  value of $LC_CTYPE: nil
  value of $LC_MESSAGES: nil
  value of $LC_MONETARY: nil
  value of $LC_NUMERIC: nil
  value of $LC_TIME: nil
  value of $LANG: en_US
  locale-coding-system: iso-latin-1
  default-enable-multibyte-characters: t

Please describe exactly what actions triggered the bug
and the precise symptoms of the bug:

When reading a newsgroup with binaries, using gnus, emacs systematically
crashes when retreiving a specific message. Backtrace of gdb:

(gdb) bt
#0  0x4 in ?? ()
#1  0x4032ef93 in _IO_vfprintf (s=0x40409420, format=0x401440b2 "%s\n", 
    ap=0xbfffd50c) at vfprintf.c:1272
#2  0x403389d1 in fprintf (stream=0x40409420, format=0x401440b2 "%s\n")
    at fprintf.c:32
#3  0x40141510 in jzero_far () from /freeware/gcc/linux-i386/lib/libjpeg.so
#4  0x4014153e in jzero_far () from /freeware/gcc/linux-i386/lib/libjpeg.so
#5  0x40138079 in jinit_input_controller ()
   from /freeware/gcc/linux-i386/lib/libjpeg.so
#6  0x40138186 in jinit_input_controller ()
   from /freeware/gcc/linux-i386/lib/libjpeg.so
#7  0x40136684 in jinit_master_decompress ()
   from /freeware/gcc/linux-i386/lib/libjpeg.so
#8  0x401350a6 in jpeg_consume_input ()
   from /freeware/gcc/linux-i386/lib/libjpeg.so
#9  0x40134fee in jpeg_read_header ()
   from /freeware/gcc/linux-i386/lib/libjpeg.so
#10 0x80c5bc7 in jpeg_load (f=0x845b610, img=0x8f882a0) at xfns.c:9205
#11 0x80c1b22 in lookup_image (f=0x845b610, spec=1479699684) at xfns.c:6099
#12 0x80c1153 in Fimage_size (spec=1479699684, pixels=405208988, 
    frame=405208988) at xfns.c:5600
#13 0x81275f7 in Ffuncall (nargs=2, args=0xbfffdb80) at eval.c:2662
#14 0x814e57c in Fbyte_code (bytestr=947456396, vector=1213166808, maxdepth=3)
---Type <return> to continue, or q <return> to quit---
    at bytecode.c:716
#15 0x8127bbb in funcall_lambda (fun=1213166976, nargs=1, 
    arg_vector=0xbfffdc94) at eval.c:2847
#16 0x8127721 in Ffuncall (nargs=2, args=0xbfffdc90) at eval.c:2712
#17 0x814e57c in Fbyte_code (bytestr=947456492, vector=1213167568, maxdepth=2)
    at bytecode.c:716
#18 0x8127bbb in funcall_lambda (fun=1213167696, nargs=2, 
    arg_vector=0xbfffdd50) at eval.c:2847
#19 0x8127895 in apply_lambda (fun=1213167696, args=1483633620, eval_flag=1)
    at eval.c:2766
#20 0x8126cd3 in Feval (form=1483633852) at eval.c:2055
#21 0x8124933 in Fprogn (args=1483633588) at eval.c:431
#22 0x8127b52 in funcall_lambda (fun=1483623364, nargs=1, 
    arg_vector=0xbfffdf54) at eval.c:2840
#23 0x8127721 in Ffuncall (nargs=2, args=0xbfffdf50) at eval.c:2712
#24 0x814e57c in Fbyte_code (bytestr=947130924, vector=1215567552, maxdepth=4)
    at bytecode.c:716
#25 0x8127bbb in funcall_lambda (fun=1215567696, nargs=1, 
    arg_vector=0xbfffe064) at eval.c:2847
#26 0x8127721 in Ffuncall (nargs=2, args=0xbfffe060) at eval.c:2712
#27 0x814e57c in Fbyte_code (bytestr=947130956, vector=1215567760, maxdepth=5)
    at bytecode.c:716
#28 0x8127bbb in funcall_lambda (fun=1215567912, nargs=1, 
---Type <return> to continue, or q <return> to quit---
    arg_vector=0xbfffe184) at eval.c:2847
#29 0x8127721 in Ffuncall (nargs=2, args=0xbfffe180) at eval.c:2712
#30 0x814e57c in Fbyte_code (bytestr=955294932, vector=1223733808, maxdepth=7)
    at bytecode.c:716
#31 0x8126bda in Feval (form=1492166508) at eval.c:2019
#32 0x8125631 in internal_catch (tag=405499972, func=0x812687c <Feval>, 
    arg=1492166508) at eval.c:1030
#33 0x814e9c9 in Fbyte_code (bytestr=955294900, vector=1223734024, maxdepth=7)
    at bytecode.c:879
#34 0x8127bbb in funcall_lambda (fun=1223734184, nargs=1, 
    arg_vector=0xbfffe4b4) at eval.c:2847
#35 0x8127721 in Ffuncall (nargs=2, args=0xbfffe4b0) at eval.c:2712
#36 0x814e57c in Fbyte_code (bytestr=955294772, vector=1223733200, maxdepth=6)
    at bytecode.c:716
#37 0x8127bbb in funcall_lambda (fun=1223733368, nargs=1, 
    arg_vector=0xbfffe5f4) at eval.c:2847
#38 0x8127721 in Ffuncall (nargs=2, args=0xbfffe5f0) at eval.c:2712
#39 0x812732f in call1 (fn=418414084, arg1=1492044532) at eval.c:2452
#40 0x812f526 in mapcar1 (leni=7, vals=0xbfffe670, fn=418414084, 
    seq=1489846140) at fns.c:2713
#41 0x812f61f in Fmapcar (function=418414084, sequence=1489846140)
    at fns.c:2773
#42 0x81275df in Ffuncall (nargs=3, args=0xbfffe710) at eval.c:2658
---Type <return> to continue, or q <return> to quit---
#43 0x814e57c in Fbyte_code (bytestr=955294884, vector=1223733624, maxdepth=3)
    at bytecode.c:716
#44 0x8127bbb in funcall_lambda (fun=1223733744, nargs=1, 
    arg_vector=0xbfffe824) at eval.c:2847
#45 0x8127721 in Ffuncall (nargs=2, args=0xbfffe820) at eval.c:2712
#46 0x814e57c in Fbyte_code (bytestr=955294772, vector=1223733200, maxdepth=6)
    at bytecode.c:716
#47 0x8127bbb in funcall_lambda (fun=1223733368, nargs=1, 
    arg_vector=0xbfffe944) at eval.c:2847
#48 0x8127721 in Ffuncall (nargs=2, args=0xbfffe940) at eval.c:2712
#49 0x814e57c in Fbyte_code (bytestr=955294708, vector=1223732832, maxdepth=5)
    at bytecode.c:716
#50 0x8127bbb in funcall_lambda (fun=1223733072, nargs=0, 
    arg_vector=0xbfffea64) at eval.c:2847
#51 0x8127721 in Ffuncall (nargs=1, args=0xbfffea60) at eval.c:2712
#52 0x814e57c in Fbyte_code (bytestr=955272228, vector=1223719464, maxdepth=2)
    at bytecode.c:716
#53 0x8127bbb in funcall_lambda (fun=1223719616, nargs=0, 
    arg_vector=0xbfffeb74) at eval.c:2847
#54 0x8127721 in Ffuncall (nargs=1, args=0xbfffeb70) at eval.c:2712
#55 0x814e57c in Fbyte_code (bytestr=955272164, vector=1223718968, maxdepth=3)
    at bytecode.c:716
#56 0x8127bbb in funcall_lambda (fun=1223719400, nargs=2, 
---Type <return> to continue, or q <return> to quit---
    arg_vector=0xbfffec84) at eval.c:2847
#57 0x8127721 in Ffuncall (nargs=3, args=0xbfffec80) at eval.c:2712
#58 0x814e57c in Fbyte_code (bytestr=952718028, vector=1221381072, maxdepth=5)
    at bytecode.c:716
#59 0x8127bbb in funcall_lambda (fun=1221272904, nargs=1, 
    arg_vector=0xbfffeda4) at eval.c:2847
#60 0x8127721 in Ffuncall (nargs=2, args=0xbfffeda0) at eval.c:2712
#61 0x814e57c in Fbyte_code (bytestr=952714372, vector=1221275888, maxdepth=7)
    at bytecode.c:716
#62 0x8127bbb in funcall_lambda (fun=1221205496, nargs=2, 
    arg_vector=0xbfffeec4) at eval.c:2847
#63 0x8127721 in Ffuncall (nargs=3, args=0xbfffeec0) at eval.c:2712
#64 0x814e57c in Fbyte_code (bytestr=952713796, vector=1221276304, maxdepth=7)
    at bytecode.c:716
#65 0x8127bbb in funcall_lambda (fun=1221203368, nargs=0, 
    arg_vector=0xbffff004) at eval.c:2847
#66 0x8127721 in Ffuncall (nargs=1, args=0xbffff000) at eval.c:2712
#67 0x81272f5 in apply1 (fn=416077636, arg=405208988) at eval.c:2408
#68 0x8123407 in Fcall_interactively (function=416077636, 
    record_flag=405208988, keys=1210574104) at callint.c:367
#69 0x80dcced in Fcommand_execute (cmd=416077636, record_flag=405208988, 
    keys=405208988, special=405208988) at keyboard.c:9221
#70 0x80d3c40 in command_loop_1 () at keyboard.c:1644
---Type <return> to continue, or q <return> to quit---
#71 0x8125aa5 in internal_condition_case (bfun=0x80d3100 <command_loop_1>, 
    handlers=405305308, hfun=0x80d2d38 <cmd_error>) at eval.c:1267
#72 0x80d2fd8 in command_loop_2 () at keyboard.c:1245
#73 0x8125631 in internal_catch (tag=405266916, 
    func=0x80d2fb4 <command_loop_2>, arg=405208988) at eval.c:1030
#74 0x80d2f82 in command_loop () at keyboard.c:1224
#75 0x80d2add in recursive_edit_1 () at keyboard.c:950
#76 0x80d2c10 in Frecursive_edit () at keyboard.c:1006
#77 0x80d1aa1 in main (argc=1, argv=0xbffff774, envp=0xbffff77c)
    at emacs.c:1547
#78 0x402f7306 in __libc_start_main (main=0x80d0dd8 <main>, argc=1, 
    ubp_av=0xbffff774, init=0x804d94c <_init>, fini=0x8169940 <_fini>, 
    rtld_fini=0x4000d2cc <_dl_fini>, stack_end=0xbffff76c)
    at ../sysdeps/generic/libc-start.c:129




Recent input:
<down-mouse-1> <mouse-1> <help-echo> M-x g n u s <return> 
y q y <help-echo> <help-echo> <help-echo> <help-echo> 
<help-echo> <help-echo> <help-echo> <help-echo> <help-echo> 
<help-echo> <help-echo> <help-echo> <help-echo> <help-echo> 
<help-echo> <help-echo> <help-echo> <help-echo> <help-echo> 
<help-echo> <help-echo> <help-echo> <help-echo> <help-echo> 
<help-echo> <help-echo> <help-echo> <help-echo> <help-echo> 
<help-echo> <help-echo> <help-echo> <help-echo> <help-echo> 
<menu-bar> <help-menu> <report-emacs-bug>

Recent messages:
Checking new news...done
Loading gnus-uu...done

Wrote /users/visics/vergauwe/.newsrc
Saving /users/visics/vergauwe/.newsrc.eld...
Saving file /users/visics/vergauwe/.newsrc.eld...
Wrote /users/visics/vergauwe/.newsrc.eld
Saving /users/visics/vergauwe/.newsrc.eld...done
Loading emacsbug...done
call-interactively: Text is read-only


-- 
MAARTEN VERGAUWEN
K.U.Leuven - ESAT-PSI   tel: +32-16-32.10.64  fax: +32-16-32.17.23
Kasteelpark Arenberg 10 e-mail:Maarten.Vergauwen@esat.kuleuven.ac.be
B-3001 Heverlee         http://www.esat.kuleuven.ac.be/~vergauwe
----
0651-"We don't negotiate with monsters, we kill them!"
 
>From "Canonical List of Famous Last Words in Roleplaying"