bug#16986: Fw: Re: Crash when idle

[Simon Carter]

Here we go:

Dump of assembler code for function directory_files_internal:  
0x00000001000ce9f1 <+0>: push %rbp
0x00000001000ce9f2 <+1>: mov %rsp,%rbp
0x00000001000ce9f5 <+4>: push %r15
0x00000001000ce9f7 <+6>: push %r14
0x00000001000ce9f9 <+8>: push %r13
0x00000001000ce9fb <+10>: push %r12
0x00000001000ce9fd <+12>: push %rbx
0x00000001000ce9fe <+13>: sub $0x78,%rsp
0x00000001000cea02 <+17>: mov %r9,-0x70(%rbp)
0x00000001000cea06 <+21>: mov %r8d,-0x64(%rbp)
0x00000001000cea0a <+25>: mov %rcx,-0xa0(%rbp)
0x00000001000cea11 <+32>: mov %rdx,%rbx
0x00000001000cea14 <+35>: mov %rsi,-0x80(%rbp)
0x00000001000cea18 <+39>: mov %rdi,%r13
0x00000001000cea1b <+42>: lea 0x493c8e(%rip),%rax # 0x1005626b0  
0x00000001000cea22 <+49>: mov (%rax),%rax
0x00000001000cea25 <+52>: lea 0x493c7c(%rip),%rcx # 0x1005626a8  
0x00000001000cea2c <+59>: sub (%rcx),%rax
0x00000001000cea2f <+62>: mov %rax,-0x98(%rbp)
0x00000001000cea36 <+69>: lea 0x493b03(%rip),%r15 # 0x100562540  
0x00000001000cea3d <+76>: mov (%r15),%r14
0x00000001000cea40 <+79>: callq 0x1000c678b  
0x00000001000cea45 <+84>: mov %rax,%r12
0x00000001000cea48 <+87>: mov (%r15),%rdx
0x00000001000cea4b <+90>: movq $0x0,-0x40(%rbp)
0x00000001000cea53 <+98>: cmp %rbx,%rdx
0x00000001000cea56 <+101>: je 0x1000cea7f  
0x00000001000cea58 <+103>: mov %rbx,%rax
0x00000001000cea5b <+106>: and $0x7,%rax
0x00000001000cea5f <+110>: cmp $0x1,%rax
0x00000001000cea63 <+114>: jne 0x1000cedfe  
0x00000001000cea69 <+120>: mov %rbx,%rdi
0x00000001000cea6c <+123>: xor %esi,%esi
0x00000001000cea6e <+125>: xor %ecx,%ecx
0x00000001000cea70 <+127>: mov $0x1,%r8d
0x00000001000cea76 <+133>: callq 0x1000d7617  
0x00000001000cea7b <+138>: mov %rax,-0x40(%rbp)
0x00000001000cea7f <+142>: cmpq $0x0,0x7(%r12)
---Type to continue, or q to quit---
0x00000001000cea85 <+148>: js 0x1000cea98  
0x00000001000cea87 <+150>: mov %rbx,-0x38(%rbp)
0x00000001000cea8b <+154>: mov %r12,%rdi
0x00000001000cea8e <+157>: callq 0x100073597  
0x00000001000cea93 <+162>: mov %rax,%r12
0x00000001000cea96 <+165>: jmp 0x1000cea9c  
0x00000001000cea98 <+167>: mov %rbx,-0x38(%rbp)
0x00000001000cea9c <+171>: cmpq $0x0,0x7(%r13)
0x00000001000ceaa1 <+176>: js 0x1000ceaab  
0x00000001000ceaa3 <+178>: mov %r13,%rdi
0x00000001000ceaa6 <+181>: callq 0x100073597  
0x00000001000ceaab <+186>: mov 0x17(%r12),%rdi
0x00000001000ceab0 <+191>: lea -0x2c(%rbp),%rsi
0x00000001000ceab4 <+195>: callq 0x1000cee24  
0x00000001000ceab9 <+200>: test %rax,%rax
0x00000001000ceabc <+203>: je 0x1000cee10  
0x00000001000ceac2 <+209>: dec %r13
0x00000001000ceac5 <+212>: mov %rax,%rsi
0x00000001000ceac8 <+215>: mov %rsi,-0x48(%rbp)
0x00000001000ceacc <+219>: lea 0x3c4(%rip),%rdi # 0x1000cee97  
0x00000001000cead3 <+226>: callq 0x100105f7f  
0x00000001000cead8 <+231>: mov 0x8(%r13),%rdx
0x00000001000ceadc <+235>: test %rdx,%rdx
0x00000001000ceadf <+238>: mov %r14,%rbx
0x00000001000ceae2 <+241>: jns 0x1000ceae8  
0x00000001000ceae4 <+243>: mov 0x0(%r13),%rdx
0x00000001000ceae8 <+247>: sarq $0x5,-0x98(%rbp)
0x00000001000ceaf0 <+255>: lea 0x493aa9(%rip),%rax # 0x1005625a0  
0x00000001000ceaf7 <+262>: mov (%rax),%rax
0x00000001000ceafa <+265>: lea 0x492baf(%rip),%rcx # 0x1005616b0  
0x00000001000ceb01 <+272>: mov %rax,(%rcx)
0x00000001000ceb04 <+275>: test %rdx,%rdx
0x00000001000ceb07 <+278>: mov %r15,%r14
0x00000001000ceb0a <+281>: je 0x1000ceb1f  
0x00000001000ceb0c <+283>: mov 0x18(%r13),%rax
0x00000001000ceb10 <+287>: add $0x18,%r13
0x00000001000ceb14 <+291>: xor %cl,%cl
0x00000001000ceb16 <+293>: cmpb $0x2f,-0x1(%rdx,%rax,1)
0x00000001000ceb1b <+298>: je 0x1000ceb25  
0x00000001000ceb1d <+300>: jmp 0x1000ceb23  
0x00000001000ceb1f <+302>: add $0x18,%r13
0x00000001000ceb23 <+306>: mov $0x1,%cl
0x00000001000ceb25 <+308>: mov %cl,-0x89(%rbp)
0x00000001000ceb2b <+314>: mov %r13,-0x78(%rbp)
0x00000001000ceb2f <+318>: movzbl %cl,%eax
0x00000001000ceb32 <+321>: add %rdx,%rax
0x00000001000ceb35 <+324>: mov %rax,-0x58(%rbp)
0x00000001000ceb39 <+328>: mov %rdx,-0x88(%rbp)
0x00000001000ceb40 <+335>: mov -0x2c(%rbp),%eax
0x00000001000ceb43 <+338>: mov %eax,-0x90(%rbp)
0x00000001000ceb49 <+344>: jmp 0x1000ceb55  
0x00000001000ceb4b <+346>: lea 0x491a06(%rip),%rax # 0x100560558  
0x00000001000ceb52 <+353>: movb $0x0,(%rax)
0x00000001000ceb55 <+356>: callq 0x100193f18
0x00000001000ceb5a <+361>: movl $0x0,(%rax)
0x00000001000ceb60 <+367>: mov -0x48(%rbp),%rdi
0x00000001000ceb64 <+371>: callq 0x1001942e4
0x00000001000ceb69 <+376>: mov %rax,%r15
0x00000001000ceb6c <+379>: test %r15,%r15
0x00000001000ceb6f <+382>: jne 0x1000cebbb  
0x00000001000ceb71 <+384>: callq 0x100193f18
0x00000001000ceb76 <+389>: cmpl $0x23,(%rax)
0x00000001000ceb79 <+392>: je 0x1000ceb89  
0x00000001000ceb7b <+394>: callq 0x100193f18
0x00000001000ceb80 <+399>: cmpl $0x4,(%rax)
0x00000001000ceb83 <+402>: jne 0x1000ced80  
0x00000001000ceb89 <+408>: mov (%r14),%rax
0x00000001000ceb8c <+411>: lea 0x492b75(%rip),%rcx # 0x100561708  
0x00000001000ceb93 <+418>: cmp 0x788(%rcx),%rax
0x00000001000ceb9a <+425>: je 0x1000cec78  
0x00000001000ceba0 <+431>: lea 0x492b61(%rip),%rcx # 0x100561708  
0x00000001000ceba7 <+438>: cmp 0x440(%rcx),%rax
0x00000001000cebae <+445>: jne 0x1000cec78  
0x00000001000cebb4 <+451>: callq 0x10010303a  
0x00000001000cebb9 <+456>: jmp 0x1000ceb55  
0x00000001000cebbb <+458>: add $0x15,%r15
0x00000001000cebbf <+462>: mov %r15,%rdi
0x00000001000cebc2 <+465>: callq 0x1001943b6
0x00000001000cebc7 <+470>: mov %r15,%rdi
0x00000001000cebca <+473>: mov %rax,%rsi
0x00000001000cebcd <+476>: callq 0x1000ea602  
0x00000001000cebd2 <+481>: mov %rax,%rdi
0x00000001000cebd5 <+484>: callq 0x10007353e  
0x00000001000cebda <+489>: mov %rax,%r13
0x00000001000cebdd <+492>: mov 0x7(%r13),%r12
0x00000001000cebe1 <+496>: test %r12,%r12
0x00000001000cebe4 <+499>: jns 0x1000cebea  
0x00000001000cebe6 <+501>: mov -0x1(%r13),%r12
0x00000001000cebea <+505>: lea 0x491967(%rip),%rax # 0x100560558  
0x00000001000cebf1 <+512>: movb $0x1,(%rax)
0x00000001000cebf4 <+515>: mov (%r14),%rax
0x00000001000cebf7 <+518>: lea 0x492b0a(%rip),%rcx # 0x100561708  
0x00000001000cebfe <+525>: cmp 0x788(%rcx),%rax
0x00000001000cec05 <+532>: je 0x1000cec1e  
0x00000001000cec07 <+534>: lea 0x492afa(%rip),%rcx # 0x100561708  
0x00000001000cec0e <+541>: cmp 0x440(%rcx),%rax
0x00000001000cec15 <+548>: jne 0x1000cec1e  
0x00000001000cec17 <+550>: callq 0x10010303a  
0x00000001000cec1c <+555>: jmp 0x1000cec2f  
0x00000001000cec1e <+557>: lea 0x4919cb(%rip),%rax # 0x1005605f0  
0x00000001000cec25 <+564>: cmpb $0x0,(%rax)
0x00000001000cec28 <+567>: je 0x1000cec2f  
0x00000001000cec2a <+569>: callq 0x10009fb8b  
0x00000001000cec2f <+574>: mov -0x38(%rbp),%rax
0x00000001000cec33 <+578>: cmp %rax,(%r14)
0x00000001000cec36 <+581>: je 0x1000cec5c  
0x00000001000cec38 <+583>: mov 0x17(%r13),%rsi
0x00000001000cec3c <+587>: mov -0x40(%rbp),%rdi
0x00000001000cec40 <+591>: mov %r12,%rdx
0x00000001000cec43 <+594>: xor %ecx,%ecx
0x00000001000cec45 <+596>: mov %r12,%r8
0x00000001000cec48 <+599>: xor %r9d,%r9d
0x00000001000cec4b <+602>: callq 0x1000ddce5  
0x00000001000cec50 <+607>: test %rax,%rax
0x00000001000cec53 <+610>: js 0x1000ceb4b  
0x00000001000cec59 <+616>: mov (%r14),%rax
0x00000001000cec5c <+619>: mov %rbx,-0x50(%rbp)
0x00000001000cec60 <+623>: lea 0x4918f1(%rip),%rcx # 0x100560558  
0x00000001000cec67 <+630>: movb $0x0,(%rcx)
0x00000001000cec6a <+633>: cmp -0x80(%rbp),%rax
0x00000001000cec6e <+637>: jne 0x1000cec92  
0x00000001000cec70 <+639>: mov %r13,%r12
0x00000001000cec73 <+642>: jmpq 0x1000ced43  
0x00000001000cec78 <+647>: lea 0x491971(%rip),%rax # 0x1005605f0  
0x00000001000cec7f <+654>: cmpb $0x0,(%rax)
0x00000001000cec82 <+657>: je 0x1000ceb55  
0x00000001000cec88 <+663>: callq 0x10009fb8b  
0x00000001000cec8d <+668>: jmpq 0x1000ceb55  
0x00000001000cec92 <+673>: mov -0x58(%rbp),%rax
0x00000001000cec96 <+677>: lea (%rax,%r12,1),%rdi
0x00000001000cec9a <+681>: mov %rdi,-0x60(%rbp)
0x00000001000cec9e <+685>: mov %rdi,%rsi
0x00000001000ceca1 <+688>: callq 0x1000ea305  
0x00000001000ceca6 <+693>: mov 0x17(%rax),%rdi
0x00000001000cecaa <+697>: mov %rax,%rbx
0x00000001000cecad <+700>: mov -0x78(%rbp),%rax
0x00000001000cecb1 <+704>: mov (%rax),%rsi
0x00000001000cecb4 <+707>: mov -0x88(%rbp),%r14
0x00000001000cecbb <+714>: mov %r14,%rdx
0x00000001000cecbe <+717>: callq 0x100194242
0x00000001000cecc3 <+722>: cmpb $0x0,-0x89(%rbp)
0x00000001000cecca <+729>: je 0x1000cecd5  
0x00000001000ceccc <+731>: mov 0x17(%rbx),%rax
0x00000001000cecd0 <+735>: movb $0x2f,(%rax,%r14,1)
0x00000001000cecd5 <+740>: mov %rbx,%r14
0x00000001000cecd8 <+743>: mov 0x17(%r14),%rdi
0x00000001000cecdc <+747>: add -0x58(%rbp),%rdi
0x00000001000cece0 <+751>: mov 0x17(%r13),%rsi
0x00000001000cece4 <+755>: mov %r12,%rdx
0x00000001000cece7 <+758>: callq 0x100194242
0x00000001000cecec <+763>: mov 0x17(%r14),%rdi
0x00000001000cecf0 <+767>: mov -0x60(%rbp),%rbx
0x00000001000cecf4 <+771>: mov %rbx,%rsi
0x00000001000cecf7 <+774>: callq 0x10007ebbb  
0x00000001000cecfc <+779>: cmp %rbx,%rax
0x00000001000cecff <+782>: mov %r14,%r12
0x00000001000ced02 <+785>: jg 0x1000cee1f  
0x00000001000ced08 <+791>: mov %rax,-0x1(%r12)
0x00000001000ced0d <+796>: cmp %rbx,%rax
0x00000001000ced10 <+799>: jne 0x1000ced31  
0x00000001000ced12 <+801>: lea 0x49173f(%rip),%rax # 0x100560458  
0x00000001000ced19 <+808>: cmp (%rax),%r12
0x00000001000ced1c <+811>: lea 0x49381d(%rip),%r14 # 0x100562540  
0x00000001000ced23 <+818>: jne 0x1000ced3a  
0x00000001000ced25 <+820>: lea 0x491734(%rip),%rax # 0x100560460  
0x00000001000ced2c <+827>: mov (%rax),%r12
0x00000001000ced2f <+830>: jmp 0x1000ced43  
0x00000001000ced31 <+832>: lea 0x493808(%rip),%r14 # 0x100562540  
0x00000001000ced38 <+839>: jmp 0x1000ced43  
0x00000001000ced3a <+841>: movq $0xffffffffffffffff,0x7(%r12)
0x00000001000ced43 <+850>: mov -0x64(%rbp),%eax
0x00000001000ced46 <+853>: test %al,%al
0x00000001000ced48 <+855>: je 0x1000ced6c  
0x00000001000ced4a <+857>: mov -0x90(%rbp),%edi
0x00000001000ced50 <+863>: mov %r15,%rsi
0x00000001000ced53 <+866>: mov -0x70(%rbp),%rdx
0x00000001000ced57 <+870>: callq 0x1000ceeaf  
0x00000001000ced5c <+875>: mov %r12,%rdi
0x00000001000ced5f <+878>: mov %rax,%rsi
0x00000001000ced62 <+881>: callq 0x1000eaa10  
0x00000001000ced67 <+886>: mov %rax,%rdi
0x00000001000ced6a <+889>: jmp 0x1000ced6f  
0x00000001000ced6c <+891>: mov %r12,%rdi
0x00000001000ced6f <+894>: mov -0x50(%rbp),%rsi
0x00000001000ced73 <+898>: callq 0x1000eaa10  
0x00000001000ced78 <+903>: mov %rax,%rbx
0x00000001000ced7b <+906>: jmpq 0x1000ceb55  
0x00000001000ced80 <+911>: lea 0x4917fd(%rip),%rax # 0x100560584  
0x00000001000ced87 <+918>: incl (%rax)
0x00000001000ced89 <+920>: mov -0x48(%rbp),%rdi
0x00000001000ced8d <+924>: callq 0x100193fea
0x00000001000ced92 <+929>: callq 0x1000a5bb6  
0x00000001000ced97 <+934>: mov -0x98(%rbp),%rcx
0x00000001000ced9e <+941>: shl $0x5,%rcx
0x00000001000ceda2 <+945>: lea 0x4938ff(%rip),%rax # 0x1005626a8  
0x00000001000ceda9 <+952>: add (%rax),%rcx
0x00000001000cedac <+955>: lea 0x4938fd(%rip),%rax # 0x1005626b0  
0x00000001000cedb3 <+962>: mov %rcx,(%rax)
0x00000001000cedb6 <+965>: mov -0xa0(%rbp),%rax
0x00000001000cedbd <+972>: cmp %rax,(%r14)
0x00000001000cedc0 <+975>: jne 0x1000cedec  
0x00000001000cedc2 <+977>: mov %rbx,%rdi
0x00000001000cedc5 <+980>: lea 0x472f5c(%rip),%rbx # 0x100541d28  
0x00000001000cedcc <+987>: mov -0x64(%rbp),%eax
0x00000001000cedcf <+990>: test %al,%al
0x00000001000cedd1 <+992>: cmove 0xf638f(%rip),%rbx # 0x1001c5168
0x00000001000cedd9 <+1000>: callq 0x10010b0f5  
0x00000001000cedde <+1005>: mov (%rbx),%rsi
0x00000001000cede1 <+1008>: mov %rax,%rdi
0x00000001000cede4 <+1011>: callq 0x10010b24f  
0x00000001000cede9 <+1016>: mov %rax,%rbx
0x00000001000cedec <+1019>: mov %rbx,%rax
0x00000001000cedef <+1022>: add $0x78,%rsp
0x00000001000cedf3 <+1026>: pop %rbx
0x00000001000cedf4 <+1027>: pop %r12
0x00000001000cedf6 <+1029>: pop %r13
0x00000001000cedf8 <+1031>: pop %r14
0x00000001000cedfa <+1033>: pop %r15
0x00000001000cedfc <+1035>: pop %rbp
0x00000001000cedfd <+1036>: retq  
0x00000001000cedfe <+1037>: lea 0x493783(%rip),%rax # 0x100562588  
0x00000001000cee05 <+1044>: mov (%rax),%rdi
0x00000001000cee08 <+1047>: mov %rbx,%rsi
0x00000001000cee0b <+1050>: callq 0x1000efbe4  
0x00000001000cee10 <+1055>: lea 0xe540a(%rip),%rdi # 0x1001b4221  
0x00000001000cee17 <+1062>: mov %r13,%rsi
0x00000001000cee1a <+1065>: callq 0x1000c61f7  
0x00000001000cee1f <+1070>: callq 0x1000b3382  
End of assembler dump.



Thread 0 Crashed:: Dispatch queue: com.apple.main-thread  
0 libsystem_kernel.dylib 0x00007fff95a6d292 __kill + 10
1 org.gnu.Emacs 0x000000010009a4ae terminate_due_to_signal + 145
2 org.gnu.Emacs 0x00000001000b3395 emacs_abort + 19
3 org.gnu.Emacs 0x0000000100165716 ns_term_shutdown + 123
4 org.gnu.Emacs 0x000000010009a69d shut_down_emacs + 288
5 org.gnu.Emacs 0x000000010009a474 terminate_due_to_signal + 87
6 org.gnu.Emacs 0x00000001000b5204 handle_fatal_signal + 14
7 org.gnu.Emacs 0x00000001000b4687 deliver_fatal_thread_signal + 114
8 libsystem_platform.dylib 0x00007fff918b15aa _sigtramp + 26
9 ??? 0x00007fff5fbfd5b0 0 + 140734799795632
10 org.gnu.Emacs 0x00000001000cecc3 directory_files_internal + 722
11 org.gnu.Emacs 0x00000001001053f5 Ffuncall + 956
12 org.gnu.Emacs 0x00000001001363d7 exec_byte_code + 2119
13 org.gnu.Emacs 0x0000000100105d78 funcall_lambda + 656
14 org.gnu.Emacs 0x000000010010526b Ffuncall + 562
15 org.gnu.Emacs 0x0000000100105818 call1 + 45
16 org.gnu.Emacs 0x000000010010c06b mapcar1 + 587
17 org.gnu.Emacs 0x000000010010c185 Fmapcar + 241
18 org.gnu.Emacs 0x00000001001052ed Ffuncall + 692
19 org.gnu.Emacs 0x00000001001363d7 exec_byte_code + 2119
20 org.gnu.Emacs 0x0000000100105d78 funcall_lambda + 656
21 org.gnu.Emacs 0x000000010010526b Ffuncall + 562
22 org.gnu.Emacs 0x00000001001363d7 exec_byte_code + 2119
23 org.gnu.Emacs 0x0000000100105d78 funcall_lambda + 656
24 org.gnu.Emacs 0x000000010010526b Ffuncall + 562
25 org.gnu.Emacs 0x0000000100105818 call1 + 45
26 org.gnu.Emacs 0x000000010010c06b mapcar1 + 587
27 org.gnu.Emacs 0x000000010010c185 Fmapcar + 241
28 org.gnu.Emacs 0x00000001001052ed Ffuncall + 692
29 org.gnu.Emacs 0x00000001001363d7 exec_byte_code + 2119
30 org.gnu.Emacs 0x0000000100105d78 funcall_lambda + 656
31 org.gnu.Emacs 0x000000010010526b Ffuncall + 562
32 org.gnu.Emacs 0x00000001001363d7 exec_byte_code + 2119
33 org.gnu.Emacs 0x0000000100105d78 funcall_lambda + 656
34 org.gnu.Emacs 0x000000010010526b Ffuncall + 562
35 org.gnu.Emacs 0x00000001001363d7 exec_byte_code + 2119
36 org.gnu.Emacs 0x0000000100105d78 funcall_lambda + 656
37 org.gnu.Emacs 0x0000000100104c89 apply_lambda + 289
38 org.gnu.Emacs 0x000000010010211a eval_sub + 787
39 org.gnu.Emacs 0x00000001001025f1 Fprogn + 31
40 org.gnu.Emacs 0x0000000100105d43 funcall_lambda + 603
41 org.gnu.Emacs 0x000000010010526b Ffuncall + 562
42 org.gnu.Emacs 0x0000000100104da4 Fapply + 153
43 org.gnu.Emacs 0x00000001001052ed Ffuncall + 692
44 org.gnu.Emacs 0x00000001001363d7 exec_byte_code + 2119
45 org.gnu.Emacs 0x000000010010245e eval_sub + 1623
46 org.gnu.Emacs 0x0000000100103c64 internal_lisp_condition_case + 626
47 org.gnu.Emacs 0x0000000100137207 exec_byte_code + 5751
48 org.gnu.Emacs 0x0000000100105d78 funcall_lambda + 656
49 org.gnu.Emacs 0x000000010010526b Ffuncall + 562
50 org.gnu.Emacs 0x0000000100105818 call1 + 45
51 org.gnu.Emacs 0x00000001000a4c40 timer_check + 914
52 org.gnu.Emacs 0x00000001000a27ff readable_events + 18
53 org.gnu.Emacs 0x00000001000a4852 get_input_pending + 47
54 org.gnu.Emacs 0x00000001000a24dc detect_input_pending_run_timers + 50
55 org.gnu.Emacs 0x000000010013e369 wait_reading_process_output + 2815
56 org.gnu.Emacs 0x00000001000a2b35 read_decoded_event_from_main_queue + 546
57 org.gnu.Emacs 0x00000001000a1b42 read_char + 6385
58 org.gnu.Emacs 0x000000010009e87c read_key_sequence + 1416
59 org.gnu.Emacs 0x000000010009e111 command_loop_1 + 3930
60 org.gnu.Emacs 0x0000000100103e17 internal_condition_case + 243
61 org.gnu.Emacs 0x00000001000ac4a8 command_loop_2 + 53
62 org.gnu.Emacs 0x0000000100103869 internal_catch + 240
63 org.gnu.Emacs 0x000000010009c9fb recursive_edit_1 + 327
64 org.gnu.Emacs 0x000000010009cb3f Frecursive_edit + 250
65 org.gnu.Emacs 0x000000010009baa6 main + 5040
66 libdyld.dylib 0x00007fff97ce45fd start + 1


>