frequent crashes, memory bug

[Xavier Franc]

Am I the only one to have frequent crashes (an average of once a day)
with Emacs 21.3 ?
This happens always on a mouse event.
A gdb trace is given hereafter:


This GDB was configured as "i586-mandrake-linux-gnu"...
(gdb) run
Starting program: /usr/local/bin/emacs-21.3

Program received signal SIGSEGV, Segmentation fault.
allocate_string () at alloc.c:1330
1330      string_free_list = NEXT_FREE_LISP_STRING (s);
(gdb) bt
#0  allocate_string () at alloc.c:1330
#1  0x0811f278 in make_uninit_multibyte_string (nchars=17, nbytes=17) at 
alloc.c:1871
#2  0x0811f1d4 in make_specified_string (contents=0x889a26e "yana/xquest/util/",
    nchars=17, nbytes=17, multibyte=0) at alloc.c:1825
#3  0x0813a507 in Fsubstring (string=948198052, from=143237742, to=22) at 
fns.c:1228
#4  0x0815fe24 in Fbyte_code (bytestr=948198052, vector=79, 
maxdepth=-1073753736)
    at bytecode.c:1091
#5  0x0813503b in funcall_lambda (fun=1210429228, nargs=1, 
arg_vector=0xbfffd298)
    at eval.c:2851
#6  0x08134a6b in Ffuncall (nargs=2, args=0xbfffd294) at eval.c:2716
#7  0x0816028b in Fbyte_code (bytestr=947397428, vector=1, maxdepth=-1073753452)
    at bytecode.c:716
#8  0x0813503b in funcall_lambda (fun=1210429948, nargs=0, 
arg_vector=0xbfffd42c)
    at eval.c:2851
#9  0x08134a6b in Ffuncall (nargs=1, args=0xbfffd428) at eval.c:2716
#10 0x081345c7 in run_hook_with_args (nargs=1, args=0xbfffd428, 
cond=to_completion)
    at eval.c:2330
#11 0x081344aa in Frun_hooks (nargs=1, args=0xbfffd4d4) at eval.c:2198
#12 0x08134c75 in Ffuncall (nargs=2, args=0xbfffd4d0) at eval.c:2640
#13 0x08134818 in call1 (fn=405413012, arg1=405513852) at eval.c:2456
#14 0x080da547 in safe_run_hooks_1 (hook=405293180) at keyboard.c:1803
#15 0x08132efa in internal_condition_case (bfun=0x80da530 <safe_run_hooks_1>,
    handlers=405293180, hfun=0x80da550 <safe_run_hooks_error>) at eval.c:1267
#16 0x080da5ae in safe_run_hooks (hook=405513852) at keyboard.c:1826
#17 0x08065c8d in update_menu_bar (f=0x84eea38, save_match_data=0) at 
xdisp.c:7464
#18 0x08065abd in prepare_menu_bars () at xdisp.c:7365
#19 0x080676ff in redisplay_internal (preserve_echo_area=1) at xdisp.c:8497
#20 0x080e42aa in detect_input_pending_run_timers (do_display=1) at 
keyboard.c:9477
#21 0x08163ae6 in wait_reading_process_input (time_limit=30, microsecs=0,
    read_kbd=268435455, do_display=1) at process.c:2687
#22 0x08056e77 in sit_for (sec=141662896, usec=0, reading=1, display=43167,
    initial_display=0) at dispnew.c:6240
#23 0x080dbccd in read_char (commandflag=1, nmaps=2, maps=0xbfffde90,
    prev_event=405293132, used_mouse_menu=0xbfffdec8) at keyboard.c:2518
#24 0x080e1e3d in read_key_sequence (keybuf=0xbfffdff0, bufsize=30, 
prompt=405293132,
    dont_downcase_last=0, can_return_switch_frame=1, fix_current_buffer=1)
    at keyboard.c:8209
#25 0x080d95b7 in command_loop_1 () at keyboard.c:1451
#26 0x08132efa in internal_condition_case (bfun=0x80d93d0 <command_loop_1>,
    handlers=405389476, hfun=0x80d8fd0 <cmd_error>) at eval.c:1267
#27 0x080d927b in command_loop_2 () at keyboard.c:1245
#28 0x08132a62 in internal_catch (tag=0, func=0x80d9260 <command_loop_2>, 
arg=405293132)
    at eval.c:1030
#29 0x080d9232 in command_loop () at keyboard.c:1224
#30 0x080d8d36 in recursive_edit_1 () at keyboard.c:950
#31 0x080d8e88 in Frecursive_edit () at keyboard.c:1006
#32 0x080d7740 in main (argc=1, argv=0xbfffe5c4, envp=0xbfffe5cc) at 
emacs.c:1547
#33 0x4031ec57 in __libc_start_main () from /lib/i686/libc.so.6