#2 crash in MULE resize_string()

[Gunnar Evermann]

crash recipe:

(let ((s "ab"))
(put-text-property 0 (length s) 'face 'bold s)
(aset s 0 128)
s)

analysis:
see http://www.xemacs.org/list-archives/xemacs-beta/200008/msg00179.html

backtrace:
#3 0x80c293e in assert_failed (file=0x8299ec0 "/home/gunnar/src/XEmacs/xemacs/src/insdel.c", line=1122, expr=0x829962f "VALID_BYTIND_P (buf, x)")
at /home/gunnar/src/XEmacs/xemacs/src/emacs.c:3192
#4 0x818c8f7 in bytind_to_bufpos (buf=0x83d2a80, x=289) at /home/gunnar/src/XEmacs/xemacs/src/insdel.c:1122
#5 0x813357a in run_extent_paste_function (e=0x840daf4, from=289, to=291, object=138226304) at /home/gunnar/src/XEmacs/xemacs/src/extents.c:5705
#6 0x8133b21 in splice_in_string_extents_mapper (extent=0x840daf4, arg=0xbfffee4c) at /home/gunnar/src/XEmacs/xemacs/src/extents.c:5900
#7 0x812b896 in map_extents_bytind (from=0, to=3, fn=0x8133a48 <splice_in_string_extents_mapper>, arg=0xbfffee4c, obj=138924684, after=0x0,
flags=15369) at /home/gunnar/src/XEmacs/xemacs/src/extents.c:2257
#8 0x8133bdf in splice_in_string_extents (string=138924684, buf=0x83d2a80, opoint=288, length=3, pos=0)
at /home/gunnar/src/XEmacs/xemacs/src/extents.c:5927
#9 0x819018e in buffer_insert_string_1 (buf=0x83d2a80, pos=288, nonreloc=0x8528c50 "\217 b", reloc=138924684, offset=0, length=3, flags=0)
at /home/gunnar/src/XEmacs/xemacs/src/insdel.c:2550
#10 0x81adf40 in output_string (function=138226304, nonreloc=0x0, reloc=138924684, offset=0, len=3) at /home/gunnar/src/XEmacs/xemacs/src/print.c:345
#11 0x81b004a in print_string (obj=138924684, printcharfun=138226304, escapeflag=1) at /home/gunnar/src/XEmacs/xemacs/src/print.c:1158
#12 0x81b05e6 in print_internal (obj=138924684, printcharfun=138226304, escapeflag=1) at /home/gunnar/src/XEmacs/xemacs/src/print.c:1340
#13 0x81ae946 in Fprin1 (object=138924684, stream=138226304) at /home/gunnar/src/XEmacs/xemacs/src/print.c:637
#14 0x80c9e97 in Ffuncall (nargs=2, args=0xbffff108) at /home/gunnar/src/XEmacs/xemacs/src/eval.c:3528
#15 0x8095b28 in execute_optimized_program (
program=0x853d488 "\bŤ\004pŞ\002Á`Â\e\034\035ĆÇČ \036\tĘ\216Ë\016\f!\210\212ÂfÍaŽ\006`SfÍa\023ÎĎ!\210\013Ť\nÂfĐaŤ\004Âu\210\214e\f}\210Ńp!\211\036\022˘ÓaŤ\rÔŐÖ\016\022×BBBDŞ\003\016\022-!!+\207", stack_depth=8, constants_data=0x404f768c) at /home/gunnar/src/XEmacs/xemacs/src/bytecode.c:746
#16 0x80955f1 in funcall_compiled_function (fun=1079120776, nargs=1, args=0xbffff27c) at /home/gunnar/src/XEmacs/xemacs/src/bytecode.c:515
#17 0x80ca146 in Ffuncall (nargs=2, args=0xbffff278) at /home/gunnar/src/XEmacs/xemacs/src/eval.c:3563
#18 0x8095b28 in execute_optimized_program (program=0x853d098 "p\030Á \210ÂĂ!\210Á )\207", stack_depth=2, constants_data=0x404ebe90)
at /home/gunnar/src/XEmacs/xemacs/src/bytecode.c:746
#19 0x80955f1 in funcall_compiled_function (fun=1079105096, nargs=0, args=0xbffff3f8) at /home/gunnar/src/XEmacs/xemacs/src/bytecode.c:515
#20 0x80ca146 in Ffuncall (nargs=1, args=0xbffff3f4) at /home/gunnar/src/XEmacs/xemacs/src/eval.c:3563
#21 0x80cb243 in apply1 (fn=1079105096, arg=1078223216) at /home/gunnar/src/XEmacs/xemacs/src/eval.c:4152
#22 0x809b0e0 in Fcall_interactively (function=1078084568, record_flag=1078223216, keys=1078223216) at /home/gunnar/src/XEmacs/xemacs/src/callint.c:397
#23 0x80c879c in Fcommand_execute (cmd=1078084568, record_flag=1078223216, keys=1078223216) at /home/gunnar/src/XEmacs/xemacs/src/eval.c:2970
#24 0x8126282 in execute_command_event (command_builder=0x847b620, event=139572996) at /home/gunnar/src/XEmacs/xemacs/src/event-stream.c:3833
#25 0x8126a72 in Fdispatch_event (event=139572996) at /home/gunnar/src/XEmacs/xemacs/src/event-stream.c:4116
#26 0x80a44a4 in Fcommand_loop_1 () at /home/gunnar/src/XEmacs/xemacs/src/cmdloop.c:583
#27 0x80a429f in command_loop_1 (dummy=1078223216) at /home/gunnar/src/XEmacs/xemacs/src/cmdloop.c:494
#28 0x80c60e2 in condition_case_1 (handlers=1078222856, bfun=0x80a4278 <command_loop_1>, barg=1078223216, hfun=0x80a3aa4 <cmd_error>, harg=1078223216)
at /home/gunnar/src/XEmacs/xemacs/src/eval.c:1651
#29 0x80a3bc7 in command_loop_3 () at /home/gunnar/src/XEmacs/xemacs/src/cmdloop.c:256
#30 0x80a3bef in command_loop_2 (dummy=1078223216) at /home/gunnar/src/XEmacs/xemacs/src/cmdloop.c:267
#31 0x80c5c52 in internal_catch (tag=1078032440, func=0x80a3be4 <command_loop_2>, arg=1078223216, threw=0x0)
at /home/gunnar/src/XEmacs/xemacs/src/eval.c:1317
#32 0x80a3e28 in initial_command_loop (load_me=1078223216) at /home/gunnar/src/XEmacs/xemacs/src/cmdloop.c:305
#33 0x80c109d in xemacs_21_2_b37_i686_pc_linux (argc=2, argv=0xbffff9c4, envp=0xbffff9d0, restart=0) at /home/gunnar/src/XEmacs/xemacs/src/emacs.c:2231
#34 0x80c1c98 in main (argc=2, argv=0xbffff9c4, envp=0xbffff9d0) at /home/gunnar/src/XEmacs/xemacs/src/emacs.c:2598
#35 0x402bca52 in __libc_start_main () from /lib/libc.so.6