2 Copyright (c) 1985, 2000, 2001 Free Software Foundation, Inc.
4 Permission is granted to anyone to make or distribute verbatim copies
5 of this document as received, in any medium, provided that the
6 copyright notice and permission notice are preserved,
7 and that the distributor grants the recipient permission
8 for further redistribution as permitted by this notice.
10 Permission is granted to distribute modified versions
11 of this document, or of portions of it,
12 under the above conditions, provided also that they
13 carry prominent notices stating who last changed them.
15 [People who debug Emacs on Windows using native Windows debuggers
16 should read the Windows-specific section near the end of this
19 ** When you debug Emacs with GDB, you should start it in the directory
20 where you built Emacs. That directory has a .gdbinit file that defines
21 various "user-defined" commands for debugging Emacs.
23 ** It is a good idea to run Emacs under GDB (or some other suitable
24 debugger) *all the time*. Then, when Emacs crashes, you will be able
25 to debug the live process, not just a core dump. (This is especially
26 important on systems which don't support core files, and instead print
27 just the registers and some stack addresses.)
29 ** If Emacs hangs, or seems to be stuck in some infinite loop, typing
30 "kill -TSTP PID", where PID is the Emacs process ID, will cause GDB to
31 kick in, provided that you run under GDB.
33 ** Getting control to the debugger
35 `Fsignal' is a very useful place to put a breakpoint in.
36 All Lisp errors go through there.
38 It is useful, when debugging, to have a guaranteed way to return to
39 the debugger at any time. When using X, this is easy: type C-z at the
40 window where Emacs is running under GDB, and it will stop Emacs just
41 as it would stop any ordinary program. When Emacs is running in a
42 terminal, things are not so easy.
44 The src/.gdbinit file in the Emacs distribution arranges for SIGINT
45 (C-g in Emacs) to be passed to Emacs and not give control back to GDB.
46 On modern POSIX systems, you can override that with this command:
48 handle SIGINT stop nopass
50 After this `handle' command, SIGINT will return control to GDB. If
51 you want the C-g to cause a QUIT within Emacs as well, omit the
54 A technique that can work when `handle SIGINT' does not is to store
55 the code for some character into the variable stop_character. Thus,
57 set stop_character = 29
59 makes Control-] (decimal code 29) the stop character.
60 Typing Control-] will cause immediate stop. You cannot
61 use the set command until the inferior process has been started.
62 Put a breakpoint early in `main', or suspend the Emacs,
63 to get an opportunity to do the set command.
65 ** Examining Lisp object values.
67 When you have a live process to debug, and it has not encountered a
68 fatal error, you can use the GDB command `pr'. First print the value
69 in the ordinary way, with the `p' command. Then type `pr' with no
70 arguments. This calls a subroutine which uses the Lisp printer.
72 You can also use `pp value' to print the emacs value directly.
74 Note: It is not a good idea to try `pr' or `pp' if you know that Emacs
75 is in deep trouble: its stack smashed (e.g., if it encountered SIGSEGV
76 due to stack overflow), or crucial data structures, such as `obarray',
77 corrupted, etc. In such cases, the Emacs subroutine called by `pr'
78 might make more damage, like overwrite some data that is important for
79 debugging the original problem.
81 Also, on some systems it is impossible to use `pr' if you stopped
82 Emacs while it was inside `select'. This is in fact what happens if
83 you stop Emacs while it is waiting. In such a situation, don't try to
84 use `pr'. Instead, use `s' to step out of the system call. Then
85 Emacs will be between instructions and capable of handling `pr'.
87 If you can't use `pr' command, for whatever reason, you can fall back
88 on lower-level commands. Use the `xtype' command to print out the
89 data type of the last data value. Once you know the data type, use
90 the command that corresponds to that type. Here are these commands:
92 xint xptr xwindow xmarker xoverlay xmiscfree xintfwd xboolfwd xobjfwd
93 xbufobjfwd xkbobjfwd xbuflocal xbuffer xsymbol xstring xvector xframe
94 xwinconfig xcompiled xcons xcar xcdr xsubr xprocess xfloat xscrollbar
96 Each one of them applies to a certain type or class of types.
97 (Some of these types are not visible in Lisp, because they exist only
100 Each x... command prints some information about the value, and
101 produces a GDB value (subsequently available in $) through which you
102 can get at the rest of the contents.
104 In general, most of the rest of the contents will be additional Lisp
105 objects which you can examine in turn with the x... commands.
107 Even with a live process, these x... commands are useful for
108 examining the fields in a buffer, window, process, frame or marker.
109 Here's an example using concepts explained in the node "Value History"
110 of the GDB manual to print the variable frame from this line in
113 buf.frame_or_window = frame;
115 First, use these commands:
122 Then type C-x 5 2 to create a new frame, and it hits the breakpoint:
130 $2 = (struct frame *) 0x3f0800
141 Now we can use `pr' to print the name of the frame:
144 "emacs@steenrod.math.nwu.edu"
146 The Emacs C code heavily uses macros defined in lisp.h. So suppose
147 we want the address of the l-value expression near the bottom of
148 `add_command_key' from keyboard.c:
150 XVECTOR (this_command_keys)->contents[this_command_key_count++] = key;
152 XVECTOR is a macro, and therefore GDB does not know about it.
153 GDB cannot evaluate "p XVECTOR (this_command_keys)".
155 However, you can use the xvector command in GDB to get the same
158 (gdb) p this_command_keys
161 $2 = (struct Lisp_Vector *) 0x411000
163 (gdb) p $->contents[this_command_key_count]
166 $4 = (int *) 0x411008
168 Here's a related example of macros and the GDB `define' command.
169 There are many Lisp vectors such as `recent_keys', which contains the
170 last 100 keystrokes. We can print this Lisp vector
175 But this may be inconvenient, since `recent_keys' is much more verbose
176 than `C-h l'. We might want to print only the last 10 elements of
177 this vector. `recent_keys' is updated in keyboard.c by the command
179 XVECTOR (recent_keys)->contents[recent_keys_index] = c;
181 So we define a GDB command `xvector-elts', so the last 10 keystrokes
184 xvector-elts recent_keys recent_keys_index 10
186 where you can define xvector-elts as follows:
194 p $foo->contents[$arg1-($i++)]
197 document xvector-elts
198 Prints a range of elements of a Lisp vector.
200 prints `i' elements of the vector `v' ending at the index `n'.
203 ** Getting Lisp-level backtrace information within GDB
205 The most convenient way is to use the `xbacktrace' command. This
206 shows the names of the Lisp functions that are currently active.
208 If that doesn't work (e.g., because the `backtrace_list' structure is
209 corrupted), type "bt" at the GDB prompt, to produce the C-level
210 backtrace, and look for stack frames that call Ffuncall. Select them
211 one by one in GDB, by typing "up N", where N is the appropriate number
212 of frames to go up, and in each frame that calls Ffuncall type this:
217 This will print the name of the Lisp function called by that level
220 By printing the remaining elements of args, you can see the argument
221 values. Here's how to print the first argument:
226 If you do not have a live process, you can use xtype and the other
227 x... commands such as xsymbol to get such information, albeit less
228 conveniently. For example:
233 and, assuming that "xtype" says that args[0] is a symbol:
237 ** Debugging what happens while preloading and dumping Emacs
239 Type `gdb temacs' and start it with `r -batch -l loadup dump'.
241 If temacs actually succeeds when running under GDB in this way, do not
242 try to run the dumped Emacs, because it was dumped with the GDB
245 ** Debugging `temacs'
247 Debugging `temacs' is useful when you want to establish whether a
248 problem happens in an undumped Emacs. To run `temacs' under a
249 debugger, type "gdb temacs", then start it with `r -batch -l loadup'.
251 ** If you encounter X protocol errors
253 Try evaluating (x-synchronize t). That puts Emacs into synchronous
254 mode, where each Xlib call checks for errors before it returns. This
255 mode is much slower, but when you get an error, you will see exactly
256 which call really caused the error.
258 You can start Emacs in a synchronous mode by invoking it with the -xrm
261 emacs -xrm "emacs.synchronous: true"
263 Setting a breakpoint in the function `x_error_quitter' and looking at
264 the backtrace when Emacs stops inside that function will show what
265 code causes the X protocol errors.
267 Some bugs related to the X protocol disappear when Emacs runs in a
268 synchronous mode. To track down those bugs, we suggest the following
271 - Run Emacs under a debugger and put a breakpoint inside the
272 primitive function which, when called from Lisp, triggers the X
273 protocol errors. For example, if the errors happen when you
274 delete a frame, put a breakpoint inside `Fdelete_frame'.
276 - When the breakpoint breaks, step through the code, looking for
277 calls to X functions (the ones whose names begin with "X" or
280 - Insert calls to `XSync' before and after each call to the X
281 functions, like this:
283 XSync (f->output_data.x->display_info->display, 0);
285 where `f' is the pointer to the `struct frame' of the selected
286 frame, normally available via XFRAME (selected_frame). (Most
287 functions which call X already have some variable that holds the
288 pointer to the frame, perhaps called `f' or `sf', so you shouldn't
291 If your debugger can call functions in the program being debugged,
292 you should be able to issue the calls to `XSync' without recompiling
293 Emacs. For example, with GDB, just type:
295 call XSync (f->output_data.x->display_info->display, 0)
297 before and immediately after the suspect X calls. If your
298 debugger does not support this, you will need to add these pairs
299 of calls in the source and rebuild Emacs.
301 Either way, systematically step through the code and issue these
302 calls until you find the first X function called by Emacs after
303 which a call to `XSync' winds up in the function
304 `x_error_quitter'. The first X function call for which this
305 happens is the one that generated the X protocol error.
307 - You should now look around this offending X call and try to figure
308 out what is wrong with it.
310 ** If Emacs causes errors or memory leaks in your X server
312 You can trace the traffic between Emacs and your X server with a tool
313 like xmon, available at ftp://ftp.x.org/contrib/devel_tools/.
315 Xmon can be used to see exactly what Emacs sends when X protocol errors
316 happen. If Emacs causes the X server memory usage to increase you can
317 use xmon to see what items Emacs creates in the server (windows,
318 graphical contexts, pixmaps) and what items Emacs delete. If there
319 are consistently more creations than deletions, the type of item
320 and the activity you do when the items get created can give a hint where
323 ** If the symptom of the bug is that Emacs fails to respond
325 Don't assume Emacs is `hung'--it may instead be in an infinite loop.
326 To find out which, make the problem happen under GDB and stop Emacs
327 once it is not responding. (If Emacs is using X Windows directly, you
328 can stop Emacs by typing C-z at the GDB job.) Then try stepping with
329 `step'. If Emacs is hung, the `step' command won't return. If it is
330 looping, `step' will return.
332 If this shows Emacs is hung in a system call, stop it again and
333 examine the arguments of the call. If you report the bug, it is very
334 important to state exactly where in the source the system call is, and
335 what the arguments are.
337 If Emacs is in an infinite loop, try to determine where the loop
338 starts and ends. The easiest way to do this is to use the GDB command
339 `finish'. Each time you use it, Emacs resumes execution until it
340 exits one stack frame. Keep typing `finish' until it doesn't
341 return--that means the infinite loop is in the stack frame which you
342 just tried to finish.
344 Stop Emacs again, and use `finish' repeatedly again until you get back
345 to that frame. Then use `next' to step through that frame. By
346 stepping, you will see where the loop starts and ends. Also, examine
347 the data being used in the loop and try to determine why the loop does
348 not exit when it should.
350 ** If certain operations in Emacs are slower than they used to be, here
351 is some advice for how to find out why.
353 Stop Emacs repeatedly during the slow operation, and make a backtrace
354 each time. Compare the backtraces looking for a pattern--a specific
355 function that shows up more often than you'd expect.
357 If you don't see a pattern in the C backtraces, get some Lisp
358 backtrace information by typing "xbacktrace" or by looking at Ffuncall
359 frames (see above), and again look for a pattern.
361 When using X, you can stop Emacs at any time by typing C-z at GDB.
362 When not using X, you can do this with C-g. On non-Unix platforms,
363 such as MS-DOS, you might need to press C-BREAK instead.
365 ** If GDB does not run and your debuggers can't load Emacs.
367 On some systems, no debugger can load Emacs with a symbol table,
368 perhaps because they all have fixed limits on the number of symbols
369 and Emacs exceeds the limits. Here is a method that can be used
370 in such an extremity. Do
379 :r -l loadup (or whatever)
381 It is necessary to refer to the file `nmout' to convert
382 numeric addresses into symbols and vice versa.
384 It is useful to be running under a window system.
385 Then, if Emacs becomes hopelessly wedged, you can create
386 another window to do kill -9 in. kill -ILL is often
387 useful too, since that may make Emacs dump core or return
391 ** Debugging incorrect screen updating.
393 To debug Emacs problems that update the screen wrong, it is useful
394 to have a record of what input you typed and what Emacs sent to the
395 screen. To make these records, do
397 (open-dribble-file "~/.dribble")
398 (open-termscript "~/.termscript")
400 The dribble file contains all characters read by Emacs from the
401 terminal, and the termscript file contains all characters it sent to
402 the terminal. The use of the directory `~/' prevents interference
405 If you have irreproducible display problems, put those two expressions
406 in your ~/.emacs file. When the problem happens, exit the Emacs that
407 you were running, kill it, and rename the two files. Then you can start
408 another Emacs without clobbering those files, and use it to examine them.
410 An easy way to see if too much text is being redrawn on a terminal is to
411 evaluate `(setq inverse-video t)' before you try the operation you think
412 will cause too much redrawing. This doesn't refresh the screen, so only
413 newly drawn text is in inverse video.
415 The Emacs display code includes special debugging code, but it is
416 normally disabled. You can enable it by building Emacs with the
417 pre-processing symbol GLYPH_DEBUG defined. Here's one easy way,
418 suitable for Unix and GNU systems, to build such a debugging version:
420 MYCPPFLAGS='-DGLYPH_DEBUG=1' make
422 Building Emacs like that activates many assertions which scrutinize
423 display code operation more than Emacs does normally. (To see the
424 code which tests these assertions, look for calls to the `xassert'
425 macros.) Any assertion that is reported to fail should be
428 Building with GLYPH_DEBUG defined also defines several helper
429 functions which can help debugging display code. One such function is
430 `dump_glyph_matrix'. If you run Emacs under GDB, you can print the
431 contents of any glyph matrix by just calling that function with the
432 matrix as its argument. For example, the following command will print
433 the contents of the current matrix of the window whose pointer is in
436 (gdb) p dump_glyph_matrix (w->current_matrix, 2)
438 (The second argument 2 tells dump_glyph_matrix to print the glyphs in
439 a long form.) You can dump the selected window's current glyph matrix
440 interactively with "M-x dump-glyph-matrix RET"; see the documentation
441 of this function for more details.
443 Several more functions for debugging display code are available in
444 Emacs compiled with GLYPH_DEBUG defined; type "C-h f dump- TAB" and
445 "C-h f trace- TAB" to see the full list.
447 When you debug display problems running emacs under X, you can use
448 the `ff' command to flush all pending display updates to the screen.
453 If you encounter bugs whereby Emacs built with LessTif grabs all mouse
454 and keyboard events, or LessTif menus behave weirdly, it might be
455 helpful to set the `DEBUGSOURCES' and `DEBUG_FILE' environment
456 variables, so that one can see what LessTif was doing at this point.
459 export DEBUGSOURCES="RowColumn.c:MenuShell.c:MenuUtil.c"
460 export DEBUG_FILE=/usr/tmp/LESSTIF_TRACE
463 causes LessTif to print traces from the three named source files to a
464 file in `/usr/tmp' (that file can get pretty large). The above should
465 be typed at the shell prompt before invoking Emacs, as shown by the
468 Running GDB from another terminal could also help with such problems.
469 You can arrange for GDB to run on one machine, with the Emacs display
470 appearing on another. Then, when the bug happens, you can go back to
471 the machine where you started GDB and use the debugger from there.
474 ** Debugging problems which happen in GC
476 The array `last_marked' (defined on alloc.c) can be used to display up
477 to 500 last objects marked by the garbage collection process.
478 Whenever the garbage collector marks a Lisp object, it records the
479 pointer to that object in the `last_marked' array. The variable
480 `last_marked_index' holds the index into the `last_marked' array one
481 place beyond where the pointer to the very last marked object is
484 The single most important goal in debugging GC problems is to find the
485 Lisp data structure that got corrupted. This is not easy since GC
486 changes the tag bits and relocates strings which make it hard to look
487 at Lisp objects with commands such as `pr'. It is sometimes necessary
488 to convert Lisp_Object variables into pointers to C struct's manually.
489 Use the `last_marked' array and the source to reconstruct the sequence
490 that objects were marked.
492 Once you discover the corrupted Lisp object or data structure, it is
493 useful to look at it in a fresh Emacs session and compare its contents
494 with a session that you are debugging.
496 ** Debugging problems with non-ASCII characters
498 If you experience problems which seem to be related to non-ASCII
499 characters, such as \201 characters appearing in the buffer or in your
500 files, set the variable byte-debug-flag to t. This causes Emacs to do
501 some extra checks, such as look for broken relations between byte and
502 character positions in buffers and strings; the resulting diagnostics
503 might pinpoint the cause of the problem.
505 ** Debugging the TTY (non-windowed) version
507 The most convenient method of debugging the character-terminal display
508 is to do that on a window system such as X. Begin by starting an
509 xterm window, then type these commands inside that window:
514 Let's say these commands print "/dev/ttyp4" and "xterm", respectively.
516 Now start Emacs (the normal, windowed-display session, i.e. without
517 the `-nw' option), and invoke "M-x gdb RET emacs RET" from there. Now
518 type these commands at GDB's prompt:
520 (gdb) set args -nw -t /dev/ttyp4
521 (gdb) set environment TERM xterm
524 The debugged Emacs should now start in no-window mode with its display
525 directed to the xterm window you opened above.
527 Similar arrangement is possible on a character terminal by using the
530 ** Running Emacs built with malloc debugging packages
532 If Emacs exhibits bugs that seem to be related to use of memory
533 allocated off the heap, it might be useful to link Emacs with a
534 special debugging library, such as Electric Fence (a.k.a. efence) or
535 GNU Checker, which helps find such problems.
537 Emacs compiled with such packages might not run without some hacking,
538 because Emacs replaces the system's memory allocation functions with
539 its own versions, and because the dumping process might be
540 incompatible with the way these packages use to track allocated
541 memory. Here are some of the changes you might find necessary
542 (SYSTEM-NAME and MACHINE-NAME are the names of your OS- and
543 CPU-specific headers in the subdirectories of `src'):
545 - In src/s/SYSTEM-NAME.h add "#define SYSTEM_MALLOC".
547 - In src/m/MACHINE-NAME.h add "#define CANNOT_DUMP" and
548 "#define CANNOT_UNEXEC".
550 - Configure with a different --prefix= option. If you use GCC,
551 version 2.7.2 is preferred, as some malloc debugging packages
552 work a lot better with it than with 2.95 or later versions.
554 - Type "make" then "make -k install".
556 - If required, invoke the package-specific command to prepare
557 src/temacs for execution.
561 (Note that this runs `temacs' instead of the usual `emacs' executable.
562 This avoids problems with dumping Emacs mentioned above.)
564 Some malloc debugging libraries might print lots of false alarms for
565 bitfields used by Emacs in some data structures. If you want to get
566 rid of the false alarms, you will have to hack the definitions of
567 these data structures on the respective headers to remove the `:N'
568 bitfield definitions (which will cause each such field to use a full
571 ** Some suggestions for debugging on MS Windows:
573 (written by Marc Fleischeuers, Geoff Voelker and Andrew Innes)
575 To debug Emacs with Microsoft Visual C++, you either start emacs from
576 the debugger or attach the debugger to a running emacs process.
578 To start emacs from the debugger, you can use the file bin/debug.bat.
579 The Microsoft Developer studio will start and under Project, Settings,
580 Debug, General you can set the command-line arguments and Emacs's
581 startup directory. Set breakpoints (Edit, Breakpoints) at Fsignal and
582 other functions that you want to examine. Run the program (Build,
583 Start debug). Emacs will start and the debugger will take control as
584 soon as a breakpoint is hit.
586 You can also attach the debugger to an already running Emacs process.
587 To do this, start up the Microsoft Developer studio and select Build,
588 Start debug, Attach to process. Choose the Emacs process from the
589 list. Send a break to the running process (Debug, Break) and you will
590 find that execution is halted somewhere in user32.dll. Open the stack
591 trace window and go up the stack to w32_msg_pump. Now you can set
592 breakpoints in Emacs (Edit, Breakpoints). Continue the running Emacs
593 process (Debug, Step out) and control will return to Emacs, until a
596 To examine the contents of a Lisp variable, you can use the function
597 'debug_print'. Right-click on a variable, select QuickWatch (it has
598 an eyeglass symbol on its button in the toolbar), and in the text
599 field at the top of the window, place 'debug_print(' and ')' around
600 the expression. Press 'Recalculate' and the output is sent to stderr,
601 and to the debugger via the OutputDebugString routine. The output
602 sent to stderr should be displayed in the console window that was
603 opened when the emacs.exe executable was started. The output sent to
604 the debugger should be displayed in the 'Debug' pane in the Output
605 window. If Emacs was started from the debugger, a console window was
606 opened at Emacs' startup; this console window also shows the output of
609 For example, start and run Emacs in the debugger until it is waiting
610 for user input. Then click on the `Break' button in the debugger to
611 halt execution. Emacs should halt in `ZwUserGetMessage' waiting for
612 an input event. Use the `Call Stack' window to select the procedure
613 `w32_msp_pump' up the call stack (see below for why you have to do
614 this). Open the QuickWatch window and enter
615 "debug_print(Vexec_path)". Evaluating this expression will then print
616 out the contents of the Lisp variable `exec-path'.
618 If QuickWatch reports that the symbol is unknown, then check the call
619 stack in the `Call Stack' window. If the selected frame in the call
620 stack is not an Emacs procedure, then the debugger won't recognize
621 Emacs symbols. Instead, select a frame that is inside an Emacs
622 procedure and try using `debug_print' again.
624 If QuickWatch invokes debug_print but nothing happens, then check the
625 thread that is selected in the debugger. If the selected thread is
626 not the last thread to run (the "current" thread), then it cannot be
627 used to execute debug_print. Use the Debug menu to select the current
628 thread and try using debug_print again. Note that the debugger halts
629 execution (e.g., due to a breakpoint) in the context of the current
630 thread, so this should only be a problem if you've explicitly switched
633 It is also possible to keep appropriately masked and typecast Lisp
634 symbols in the Watch window, this is more convenient when steeping
635 though the code. For instance, on entering apply_lambda, you can
636 watch (struct Lisp_Symbol *) (0xfffffff & args[0]).
638 Optimizations often confuse the MS debugger. For example, the
639 debugger will sometimes report wrong line numbers, e.g., when it
640 prints the backtrace for a crash. It is usually best to look at the
641 disassembly to determine exactly what code is being run--the
642 disassembly will probably show several source lines followed by a
643 block of assembler for those lines. The actual point where Emacs
644 crashes will be one of those source lines, but not neccesarily the one
645 that the debugger reports.
647 Another problematic area with the MS debugger is with variables that
648 are stored in registers: it will sometimes display wrong values for
649 those variables. Usually you will not be able to see any value for a
650 register variable, but if it is only being stored in a register
651 temporarily, you will see an old value for it. Again, you need to
652 look at the disassembly to determine which registers are being used,
653 and look at those registers directly, to see the actual current values
656 ;;; arch-tag: fbf32980-e35d-481f-8e4c-a2eca2586e6b