Crash when moving floating clients back to stacked column

[GoogleCodeExporter]

What steps will reproduce the problem?
1. make 3 xterms or any client
2. switch to stack mode
3. take the last term you made and put it in float mode
4. try to immediately move it back to the stacked column

What is the expected output? What do you see instead?

expected: it moves back
wmii crashes

What version of the product are you using (wmii -v)? On what operating system?
wmii-hg2338, ©2008 Kris Maglione

Original issue reported on code.google.com by adkilgore on 25 Jun 2008 at 6:45

[GoogleCodeExporter]

(gdb) bt full
#0  0xb80c6424 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb7e51ef5 in raise () from /lib/i686/cmov/libc.so.6
No symbol table info available.
#2  0xb7e53871 in abort () from /lib/i686/cmov/libc.so.6
No symbol table info available.
#3  0xb7e4b0ee in __assert_fail () from /lib/i686/cmov/libc.so.6
No symbol table info available.
#4  0x08050d84 in column_scale (a=0x8d99248) at column.c:497
        f = (Frame *) 0x8d9ac58
        dy = 31
        ncol = 2
        nuncol = 1
        colh = 15
        surplus = 692
        __PRETTY_FUNCTION__ = "column_scale"
#5  0x08050f19 in column_arrange (a=0x8d99248, dirty=false) at column.c:531
        f = (Frame *) 0x0
        v = (View *) 0x8d990c0
#6  0x08064e71 in view_arrange (v=0x8d990c0) at view.c:468
        a = (Area *) 0x8d99248
#7  0x0806455a in view_update (v=0x8d990c0) at view.c:233
        c = (Client *) 0x0
        f = (Frame *) 0x2d3
        fnext = (Frame *) 0x8d99248
        a = (Area *) 0x8da1e30
        an = (Area *) 0x0
        fscrn = false
#8  0x0805133e in column_resizeframe (f=0x8d9ac58, r={min = {x = 0, y = 30}, 
max = {x
= 1024, y = 753}}) at column.c:638
        a = (Area *) 0x8d99248
        al = (Area *) 0x0
        ar = (Area *) 0x0
        v = (View *) 0x8d990c0
        minw = 64
#9  0x0805019c in column_attachrect (a=0x8d99248, f=0x8d9ac58, r={min = {x = 0, 
y =
30}, max = {x = 1024, y = 753}}) at column.c:213
        fp = (Frame *) 0x0
        pos = (Frame *) 0x0
        before = -30
        after = 738
#10 0x0804b942 in area_moveto (to=0x8d99248, f=0x8d9ac58) at area.c:181
        from = (Area *) 0x8d991f8
        fromfloating = true
        __PRETTY_FUNCTION__ = "area_moveto"
#11 0x0805e718 in msg_sendclient (v=0x8d990c0, m=0xbf8e1a78, swap=false) at 
message.c:969
        to = (Area *) 0x8d99248
        a = (Area *) 0x8d991f8
        f = (Frame *) 0x8d9ac58
        c = (Client *) 0x8dae180
        s = 0x8d9db11 "toggle"
        i = 134596989
        sym = 26
#12 0x0805d665 in message_view (v=0x8d990c0, m=0xbf8e1a78) at message.c:568
        a = (Area *) 0xf
        s = 0x8d9db08 "send"
#13 0x08056cac in message (r=0x8daf3d0, fn=0x805d505 <message_view>) at fs.c:306
        err = 0x0
        s = 0x8d9db08 "send"
        p = 0x8d9db17 ""
        c = 0 '\0'
        f = (FileId *) 0x8d9a634
        m = {data = 0x8d9db08 "send", pos = 0x8d9db17 "", end = 0x8d9db17 "", size =
15, mode = 0}
#14 0x080586b0 in fs_write (r=0x8daf3d0) at fs.c:921
        f = (FileId *) 0x8d9a634
        errstr = 0x8da07b8 ""
        p = 0x806a199
"�U\211��\211�203�004\213E\b;E\f}\b\213E\b\211E�\006\213E\f\211E�2
13E��\211�203�030��214\a\b\213P$\213E\b\005\f\002"
        i = 3213761240
#15 0x0806acfc in handlereq (r=0x8daf3d0) at request.c:311
        pc = (Ixp9Conn *) 0x8dae638
        srv = (Ixp9Srv *) 0x8077f60
#16 0x0806a52a in handlefcall (c=0x8da1df8) at request.c:137
        fcall = {hdr = {type = 118 'v', tag = 0, fid = 2}, version = {hdr = {type =
118 'v', tag = 0, fid = 2}, msize = 0, version = 0x0}, tversion = {hdr = {
      type = 118 'v', tag = 0, fid = 2}, msize = 0, version = 0x0}, rversion = {hdr =
{type = 118 'v', tag = 0, fid = 2}, msize = 0, version = 0x0}, tflush = {hdr = {
      type = 118 'v', tag = 0, fid = 2}, oldtag = 0}, ropen = {hdr = {type = 118 'v',
tag = 0, fid = 2}, qid = {type = 0 '\0', version = 0, path = 
637835972402216975, 
      dir_type = 0 '\0'}, iounit = 0}, rcreate = {hdr = {type = 118 'v', tag = 0, fid
= 2}, qid = {type = 0 '\0', version = 0, path = 637835972402216975, 
      dir_type = 0 '\0'}, iounit = 0}, rattach = {hdr = {type = 118 'v', tag = 0, fid
= 2}, qid = {type = 0 '\0', version = 0, path = 637835972402216975, 
      dir_type = 0 '\0'}, iounit = 0}, error = {hdr = {type = 118 'v', tag = 0, fid =
2}, ename = 0x0}, rauth = {hdr = {type = 118 'v', tag = 0, fid = 2}, aqid = {
      type = 0 '\0', version = 0, path = 637835972402216975, dir_type = 0 '\0'}},
tattach = {hdr = {type = 118 'v', tag = 0, fid = 2}, afid = 0, uname = 0x0, 
    aname = 0xf <Address 0xf out of bounds>}, tauth = {hdr = {type = 118 'v', tag =
0, fid = 2}, afid = 0, uname = 0x0, aname = 0xf <Address 0xf out of bounds>}, 
  tcreate = {hdr = {type = 118 'v', tag = 0, fid = 2}, perm = 0, name = 0x0, mode =
15 '\017'}, topen = {hdr = {type = 118 'v', tag = 0, fid = 2}, perm = 0, 
    name = 0x0, mode = 15 '\017'}, twalk = {hdr = {type = 118 'v', tag = 0, fid = 2},
newfid = 0, nwname = 0, wname = {0xf <Address 0xf out of bounds>, 
      0x8da0c70 "\030�\b sel toggle", 0x0 <repeats 14 times>}}, rwalk = {hdr = {type
= 118 'v', tag = 0, fid = 2}, nwqid = 0, wqid = {{type = 0 '\0', version = 15, 
        path = 148507760, dir_type = 0 '\0'}, {type = 0 '\0', version = 0, path = 0,
dir_type = 0 '\0'} <repeats 15 times>}}, twstat = {hdr = {type = 118 'v', tag = 
0, 
      fid = 2}, nstat = 0, stat = 0x0}, rstat = {hdr = {type = 118 'v', tag = 0, fid
= 2}, nstat = 0, stat = 0x0}, twrite = {hdr = {type = 118 'v', tag = 0, fid = 
2}, 
    offset = 0, count = 15, data = 0x8da0c70 "\030�\b sel toggle"}, rwrite = {hdr =
{type = 118 'v', tag = 0, fid = 2}, offset = 0, count = 15, 
    data = 0x8da0c70 "\030�\b sel toggle"}, tread = {hdr = {type = 118 'v', tag = 0,
fid = 2}, offset = 0, count = 15, data = 0x8da0c70 "\030�\b sel toggle"}, 
  rread = {hdr = {type = 118 'v', tag = 0, fid = 2}, offset = 0, count = 15, data =
0x8da0c70 "\030�\b sel toggle"}, io = {hdr = {type = 118 'v', tag = 0, fid = 
2}, 
    offset = 0, count = 15, data = 0x8da0c70 "\030�\b sel toggle"}}
        pc = (Ixp9Conn *) 0x8dae638
        req = (Ixp9Req *) 0x8daf3d0
#17 0x0806b70d in handle_conns (s=0x807d840) at server.c:113
        c = (IxpConn *) 0x8da1df8
        n = (IxpConn *) 0x8d98880
#18 0x0806b83e in ixp_serverloop (s=0x807d840) at server.c:161
        tvp = (timeval *) 0x0
        tv = {tv_sec = 1, tv_usec = 1}
        timeout = 0
        r = 1
#19 0x0805c49c in main (argc=0, argv=0xbf8e1eb8) at main.c:411
        oargv = (char **) 0xbf8e1eb4
        wmiirc = 0x8074735 "wmiistartrc"
        s = (WMScreen *) 0x8d98550
        wa = {background_pixmap = 0, background_pixel = 0, border_pixmap = 0,
border_pixel = 0, bit_gravity = 0, win_gravity = 0, backing_store = 0, 
  backing_planes = 0, backing_pixel = 0, save_under = 0, event_mask = 3670064,
do_not_propagate_mask = 1, override_redirect = -1081200949, colormap = 
3085500446, 
  cursor = 6291461}
        i = 1
        _argtmp = 0
        _inargv = 0
        _argv = 0x0

Original comment by adkilgore on 25 Jun 2008 at 6:55

[GoogleCodeExporter]

[deleted comment]

[GoogleCodeExporter]

I can confirm this bug as of version wmii-hg2338.
Full backtrace at: 
http://merumeru.mobi/files/pub/wmii/wmii_backtrace-2008_07_19.log
However in my case the crash seems to be client agnostic and crashes no matter 
what
client I move to the floating layer and back.

Original comment by kaori.hi...@gmail.com on 19 Jul 2008 at 5:05

[GoogleCodeExporter]

It actually doesn't crash, it aborts. This is 'fixed' in my local repo, in that 
it
doesn't abort any more.

Original comment by maglion...@gmail.com on 24 Aug 2008 at 9:54

• Changed state: Fixed