Hello,

On Monday, May 4, 2015 at 10:52:23 AM UTC-4, Bram Moolenaar wrote:
> Patch 7.4.721
> Problem:    When 'list' is set Visual mode does not highlight anything in
>             empty lines. (mgaleski)
> Solution:   Check the value of lcs_eol in another place. (Christian Brabandt)
> Files:      src/screen.c

Lately Vim has been randomly crashing for me.  After some bisecting I think 
this patch may be the culprit.

At the very least, this patch causes Vim to crash when I resize the underlying 
terminal very frequently while having a relatively large source file open (e.g. 
Vim's own src/edit.c).  If I revert the patch then I can no longer trigger this 
particular crash.

The crash message is:

*** Error in `vim': double free or corruption (!prev): 0x00000000019fc270 ***

And a backtrace at the time of the crash:

#0  0x00007fe989451107 in raise () from /lib/x86_64-linux-gnu/libc.so.6
#1  0x00007fe9894524e8 in abort () from /lib/x86_64-linux-gnu/libc.so.6
#2  0x00007fe98948f204 in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#3  0x00007fe9894949de in ?? () from /#0  0x00007fe989451107 in raise () from 
/lib/x86_64-linux-gnu/libc.so.6
lib/x86_64-linux-gnu/libc.so.6
#4  0x00007fe9894956e6 in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#5  0x00000000005684b5 in win_free_lsize (wp=0x431c, wp@entry=0x19d0780) at 
window.c:4926
#6  0x0000000000514b10 in screenalloc (doclear=doclear@entry#1  
0x00007fe9894524e8 in abort () from /lib/x86_64-linux-gnu/libc.so.6
=0) at screen.c:8512
#7  0x00000000005153c2 in screenclear () at screen.c:8783
#8  0x000000000055c1bb in set_shellsize (width=17180, height=17180, mustset=6) 
at term.c:3131
#9  0x00000000004e940f in handle_resize () at os_unix.c:487
#10 RealWaitFor#2  0x00007fe98948f204 in ?? () from 
/lib/x86_64-linux-gnu/libc.so.6
Char (fd=<optimized out>, msec=<optimized out>, check_for_gpm=<optimized out>) 
at os_unix.c:5511
#11 0x00000000004e969b in mch_inchar (buf=buf@entry=0x7f8640 <typebuf_init> "", 
maxlen=88, wtime=-1, tb_change_cnt=1) at os_unix.c#3  0x00007fe9894949de in ?? 
() from /lib/x86_64-linux-gnu/libc.so.6
#4  0x00007fe9894956e6 in ?? () from /lib/x86_64-linux-gnu/libc.so.6
:450
#12 0x00000000005605fb in ui_inchar (buf=buf@entry=0x7f8640 <typebuf_init> "", 
maxlen=maxlen@entry=88, wtime=wtime@entry=-1,
    tb_change_cnt=tb_change_cnt@entry=1) at ui.c:199
#13 0x0000000000487ccf in inchar (buf=0x7f8640 <typebuf_init> "", m#5  
0x00000000005684b5 in win_free_lsize (wp=0x431c, wp@entry=0x19d0780) at 
window.c:4926
axlen=264, wait_time=-1, tb_change_cnt=1) at getchar.c:3098
#14 0x0000000000489bb9 in vgetorpeek (advance=advance@entry=1) at getchar.c:2873
#15 0x000000000048a2ae in vgetc () at getchar.c:1638
#16 0x000000000048a6c9 in safe_vgetc () at getchar.c:1843#6  0x0000000000514b10 
in screenalloc (doclear=doclear@entry=0) at screen.c:8512

#17 0x00000000004d0427 in normal_cmd (oap=oap@entry=0x7ffdbb2a64f0, 
toplevel=toplevel@entry=1) at normal.c:638
#18 0x0000000000577197 in main_loop (cmdwin=0, noexmode=0) at main.c:1347
#19 0x0000000000407518 in main (argc=0, argv=0x1) at main.c:1047#7  
0x00000000005153c2 in screenclear () at screen.c:8783

#8  0x000000000055c1bb in set_shellsize (width=17180, height=17180, mustset=6) 
at term.c:3131
#9  0x00000000004e940f in handle_resize () at os_unix.c:487
#10 RealWaitForChar (fd=<optimized out>, msec=<optimized out>, 
check_for_gpm=<optimized out>) at os_unix.c:5511
#11 0x00000000004e969b in mch_inchar (buf=buf@entry=0x7f8640 <typebuf_init> "", 
maxlen=88, wtime=-1, tb_change_cnt=1) at os_unix.c:450
#12 0x00000000005605fb in ui_inchar (buf=buf@entry=0x7f8640 <typebuf_init> "", 
maxlen=maxlen@entry=88, wtime=wtime@entry=-1,
    tb_change_cnt=tb_change_cnt@entry=1) at ui.c:199
#13 0x0000000000487ccf in inchar (buf=0x7f8640 <typebuf_init> "", maxlen=264, 
wait_time=-1, tb_change_cnt=1) at getchar.c:3098
#14 0x0000000000489bb9 in vgetorpeek (advance=advance@entry=1) at getchar.c:2873
#15 0x000000000048a2ae in vgetc () at getchar.c:1638
#16 0x000000000048a6c9 in safe_vgetc () at getchar.c:1843
#17 0x00000000004d0427 in normal_cmd (oap=oap@entry=0x7ffdbb2a64f0, 
toplevel=toplevel@entry=1) at normal.c:638
#18 0x0000000000577197 in main_loop (cmdwin=0, noexmode=0) at main.c:1347
#19 0x0000000000407518 in main (argc=0, argv=0x1) at main.c:1047

-- 
-- 
You received this message from the "vim_dev" maillist.
Do not top-post! Type your reply below the text you are replying to.
For more information, visit http://www.vim.org/maillist.php

--- 
You received this message because you are subscribed to the Google Groups 
"vim_dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to vim_dev+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Raspunde prin e-mail lui