Bug 528039 – Evolution crashed with SIGSEGV on g_slice_alloc

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 528039 - Evolution crashed with SIGSEGV on g_slice_alloc


Summary:	Evolution crashed with SIGSEGV on g_slice_alloc


Status:	RESOLVED DUPLICATE of bug 386157

Product:	evolution
Classification:	Applications
Component:	Importers
Version:	2.12.x (obsolete)
Hardware:	Other Linux

Importance:	Normal normal
Target Milestone:	---
Assigned To:	Evolution Shell Maintainers Team
QA Contact:	Evolution QA team

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2008-04-14 13:50 UTC by C de-Avillez
Modified:	2008-09-18 16:39 UTC

See Also:
GNOME target:	---
GNOME version:	2.19/2.20

Attachments
criminally mal-formed v-card (227 bytes, text/plain) 2008-04-14 13:56 UTC, C de-Avillez	Details

Description C de-Avillez 2008-04-14 13:50:09 UTC

While importing an extremely malformed v-card, Evolution crashes. Seems to be reproducible at will.

Ubuntu original bug: https://bugs.launchpad.net/ubuntu/+source/evolution/+bug/199408

I will attach the vcard. All that is needed, per the reporters, is to e-mail yourself with the v-card attached, and then try to import it. I cannot reproduce it on Evo 2.22.1.

+ Trace 195200

#0 IA__g_slice_alloc
at /build/buildd/glib2.0-2.14.1/glib/gslice.c line 474
#1 pango_font_description_new
at /build/buildd/pango1.0-1.18.3/pango/fonts.c line 92
#2 pango_fc_font_description_from_pattern
at /build/buildd/pango1.0-1.18.3/pango/pangofc-fontmap.c line 1604
#3 pango_fc_font_set_property
at /build/buildd/pango1.0-1.18.3/pango/pangofc-font.c line 212
#4 g_object_constructor
at /build/buildd/glib2.0-2.14.1/gobject/gobject.c line 697
#5 IA__g_object_newv
at /build/buildd/glib2.0-2.14.1/gobject/gobject.c line 937
#6 IA__g_object_new_valist
at /build/buildd/glib2.0-2.14.1/gobject/gobject.c line 1027
#7 IA__g_object_new
at /build/buildd/glib2.0-2.14.1/gobject/gobject.c line 795
#8 _pango_cairo_fc_font_new
at /build/buildd/pango1.0-1.18.3/pango/pangocairo-fcfont.c line 227
#9 pango_cairo_fc_font_map_create_font
at /build/buildd/pango1.0-1.18.3/pango/pangocairo-fcfontmap.c line 159
#10 pango_fc_font_map_load_fontset
at /build/buildd/pango1.0-1.18.3/pango/pangofc-fontmap.c line 893
#11 pango_font_map_load_fontset
at /build/buildd/pango1.0-1.18.3/pango/pango-fontmap.c line 107
#12 itemize_state_process_run
at /build/buildd/pango1.0-1.18.3/pango/pango-context.c line 1278
#13 pango_itemize_with_base_dir
at /build/buildd/pango1.0-1.18.3/pango/pango-context.c line 1427
#14 pango_itemize
at /build/buildd/pango1.0-1.18.3/pango/pango-context.c line 1497
#15 html_painter_text_itemize_and_prepare_glyphs
at htmlpainter.c line 996
#16 text_size
at htmlpainter.c line 168
#17 html_painter_alloc_font
at htmlpainter.c line 850
#18 manager_alloc_font
at htmlfontmanager.c line 272
#19 html_font_manager_get_font
at htmlfontmanager.c line 326
#20 html_painter_get_space_asc
at htmlpainter.c line 886
#21 html_text_calc_part_width
at htmltext.c line 957
#22 calc_preferred_width
at htmltext.c line 1020
#23 html_object_calc_preferred_width
at htmlobject.c line 1144
#24 calc_preferred_width
at htmlclueflow.c line 1089
#25 html_object_calc_preferred_width
at htmlobject.c line 1144
#26 calc_preferred_width
at htmlclue.c line 345
#27 calc_preferred_width
at htmlcluev.c line 332
#28 calc_preferred_width
at htmltablecell.c line 166
#29 html_object_calc_preferred_width
at htmlobject.c line 1144
#30 calc_column_width_template
at htmltable.c line 852
#31 calc_min_width
at htmltable.c line 1304
#32 html_object_calc_min_width
at htmlobject.c line 1133
#33 calc_preferred_width
at htmltable.c line 1321
#34 html_object_calc_preferred_width
at htmlobject.c line 1144
#35 calc_preferred_width
at htmlclueflow.c line 1089
#36 html_object_calc_preferred_width
at htmlobject.c line 1144
#37 calc_preferred_width
at htmlclue.c line 345
#38 calc_preferred_width
at htmlcluev.c line 332
#39 calc_preferred_width
at htmltablecell.c line 166
#40 html_object_calc_preferred_width
at htmlobject.c line 1144
#41 calc_column_width_template
at htmltable.c line 852
#42 calc_min_width
at htmltable.c line 1304
#43 html_object_calc_min_width
at htmlobject.c line 1133
#44 calc_preferred_width
at htmltable.c line 1321
#45 html_object_calc_preferred_width
at htmlobject.c line 1144
#46 calc_preferred_width
at htmlclueflow.c line 1089
#47 html_object_calc_preferred_width
at htmlobject.c line 1144
#48 calc_preferred_width
at htmlclue.c line 345
#49 calc_preferred_width
at htmlcluev.c line 332
#50 calc_preferred_width
at htmltablecell.c line 166
#51 html_object_calc_preferred_width
at htmlobject.c line 1144
#52 calc_column_width_template
at htmltable.c line 852
#53 calc_min_width
at htmltable.c line 1304
#54 html_object_calc_min_width
at htmlobject.c line 1133
#55 html_table_set_max_width
at htmltable.c line 1742
#56 html_object_set_max_width
at htmlobject.c line 1089
#57 set_max_width
at htmlclueflow.c line 654
#58 html_object_set_max_width
at htmlobject.c line 1089
#59 set_max_width
at htmlcluev.c line 344
#60 html_object_set_max_width
at htmlobject.c line 1089
#61 html_engine_calc_size
at htmlengine.c line 4966
#62 html_engine_update_event
at htmlengine.c line 4525
#63 html_engine_timer_event
at htmlengine.c line 4675
#64 html_engine_stream_end
at htmlengine.c line 4724
#65 gtk_html_stream_close
at gtkhtml-stream.c line 137
#66 gtk_html_end
at gtkhtml.c line 3736
#67 eab_contact_display_render_compact
at eab-contact-display.c line 823
#68 pstream_load
at eab-vcard-control.c line 137
#69 impl_load
at bonobo-persist-stream.c line 32
#70 _ORBIT_skel_small_Bonobo_PersistStream_load
at Bonobo-common.c line 268
#71 ORBit_c_stub_invoke
at poa.c line 2630
#72 Bonobo_PersistStream_load
at Bonobo-stubs.c line 443
#73 efhd_bonobo_object
at em-format-html-display.c line 2012
#74 efh_object_requested
at em-format-html.c line 618
#75 html_g_cclosure_marshal_BOOLEAN__OBJECT
at htmlmarshal.c line 83
#76 IA__g_closure_invoke
at /build/buildd/glib2.0-2.14.1/gobject/gclosure.c line 490
#77 signal_emit_unlocked_R
at /build/buildd/glib2.0-2.14.1/gobject/gsignal.c line 2440
#78 IA__g_signal_emit_valist
at /build/buildd/glib2.0-2.14.1/gobject/gsignal.c line 2209
#79 IA__g_signal_emit
at /build/buildd/glib2.0-2.14.1/gobject/gsignal.c line 2243
#80 html_engine_object_requested_cb
at gtkhtml.c line 521
#81 html_g_cclosure_marshal_BOOLEAN__OBJECT
at htmlmarshal.c line 83
#82 IA__g_closure_invoke
at /build/buildd/glib2.0-2.14.1/gobject/gclosure.c line 490
#83 signal_emit_unlocked_R
at /build/buildd/glib2.0-2.14.1/gobject/gsignal.c line 2440
#84 IA__g_signal_emit_valist
at /build/buildd/glib2.0-2.14.1/gobject/gsignal.c line 2209
#85 IA__g_signal_emit
at /build/buildd/glib2.0-2.14.1/gobject/gsignal.c line 2243
#86 element_parse_object
at htmlengine.c line 1531
#87 parse_one_token
at htmlengine.c line 3750
#88 html_engine_timer_event
at htmlengine.c line 1347
#89 html_engine_flush
at htmlengine.c line 6510
#90 gtk_html_flush
at gtkhtml.c line 6006
#91 emhs_sync_write
at em-html-stream.c line 105
#92 ??
at em-sync-stream.c line 168
#93 ??
#94 ??
#95 ??
#96 ??
#97 ??
#98 ??
#99 ??
#100 ??
from /usr/lib/libglib-2.0.so.0
#101 ??
#102 emcs_gui_received
at em-sync-stream.c line 135
#103 g_io_unix_dispatch
at /build/buildd/glib2.0-2.14.1/glib/giounix.c line 162
#104 IA__g_main_context_dispatch
at /build/buildd/glib2.0-2.14.1/glib/gmain.c line 2061
#105 g_main_context_iterate
at /build/buildd/glib2.0-2.14.1/glib/gmain.c line 2694
#106 IA__g_main_loop_run
at /build/buildd/glib2.0-2.14.1/glib/gmain.c line 2898
#107 bonobo_main
at bonobo-main.c line 311
#108 main
at main.c line 602
#109 __libc_start_main
from /lib/tls/i686/cmov/libc.so.6
#110 _start

Comment 1 C de-Avillez 2008-04-14 13:56:17 UTC

Created attachment 109239 [details]
criminally mal-formed v-card

This is the v-card...

Comment 2 Ilya Barygin 2008-04-14 17:17:20 UTC

Actually, the crash is caused by merely trying to view the message containing this vcard.

Comment 3 Milan Crha 2008-09-18 16:39:02 UTC

Thanks for the bug report, this has been fixed in 2.22.x. Please update to that or better version.

*** This bug has been marked as a duplicate of 386157 ***