After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 530323 - valgrind invalid read and write errors
valgrind invalid read and write errors
Status: RESOLVED FIXED
Product: evolution-data-server
Classification: Platform
Component: Contacts
2.22.x (obsolete)
Other Linux
: Normal critical
: ---
Assigned To: evolution-addressbook-maintainers
Evolution QA team
Depends on:
Blocks:
 
 
Reported: 2008-04-28 09:25 UTC by Sebastien Bacher
Modified: 2008-04-28 19:29 UTC
See Also:
GNOME target: ---
GNOME version: 2.21/2.22

Attachments
suggested patch for the issue (498 bytes, patch)
2008-04-28 13:44 UTC, Sebastien Bacher 		committed Details | Review

Description Sebastien Bacher 2008-04-28 09:25:35 UTC 
Using GNOME 2.22.1 on an amd64 installation, those errors are listed after starting evolution-alarm-notify, the calendar configuration is a stock one on a new hardy installation

"==6873== Invalid read of size 8
==6873==    at 0x8FB3141: g_slice_free_chain_with_offset (gslice.c:955)
==6873==    by 0xEC9AC05: add_source (e-cal-backend-contacts.c:108)
==6873==    by 0xEC9AD6A: source_group_added_cb (e-cal-backend-contacts.c:299)
==6873==    by 0xEC9AE9E: e_cal_backend_contacts_open (e-cal-backend-contacts.c:751)
==6873==    by 0x69D415A: e_cal_backend_sync_open (e-cal-backend-sync.c:186)
==6873==    by 0x69D425F: _e_cal_backend_open (e-cal-backend-sync.c:706)
==6873==    by 0x8292755: ORBit_small_invoke_adaptor (orbit-small.c:844)
==6873==    by 0x82A191D: ORBit_POAObject_handle_request (poa.c:1351)
==6873==    by 0x82A1ED9: ORBit_POAObject_invoke_incoming_request (poa.c:1421)
==6873==    by 0x828BAB4: giop_thread_queue_process (giop.c:771)
==6873==    by 0x828C24E: giop_request_handler_thread (giop.c:481)
==6873==    by 0x8FBEBF6: g_thread_pool_thread_proxy (gthreadpool.c:265)
==6873==    by 0x8FBD053: g_thread_create_proxy (gthread.c:635)
==6873==    by 0x9A6D3F6: start_thread (in /lib/libpthread-2.7.so)
==6873==    by 0x9D5AB2C: clone (in /lib/libc-2.7.so)
==6873==  Address 0xcf36610 is 8 bytes inside a block of size 24 free'd
==6873==    at 0x4C22B2E: free (vg_replace_malloc.c:323)
==6873==    by 0x8FB3165: g_slice_free_chain_with_offset (gslice.c:961)
==6873==    by 0xEC9ABEB: add_source (e-cal-backend-contacts.c:105)
==6873==    by 0xEC9AD6A: source_group_added_cb (e-cal-backend-contacts.c:299)
==6873==    by 0xEC9AE9E: e_cal_backend_contacts_open (e-cal-backend-contacts.c:751)
==6873==    by 0x69D415A: e_cal_backend_sync_open (e-cal-backend-sync.c:186)
==6873==    by 0x69D425F: _e_cal_backend_open (e-cal-backend-sync.c:706)
==6873==    by 0x8292755: ORBit_small_invoke_adaptor (orbit-small.c:844)
==6873==    by 0x82A191D: ORBit_POAObject_handle_request (poa.c:1351)
==6873==    by 0x82A1ED9: ORBit_POAObject_invoke_incoming_request (poa.c:1421)
==6873==    by 0x828BAB4: giop_thread_queue_process (giop.c:771)
==6873==    by 0x828C24E: giop_request_handler_thread (giop.c:481)
==6873==    by 0x8FBEBF6: g_thread_pool_thread_proxy (gthreadpool.c:265)
==6873==    by 0x8FBD053: g_thread_create_proxy (gthread.c:635)
==6873==    by 0x9A6D3F6: start_thread (in /lib/libpthread-2.7.so)
==6873==    by 0x9D5AB2C: clone (in /lib/libc-2.7.so)
==6873== 
==6873== Invalid write of size 1
==6873==    at 0x4C24214: memset (mc_replace_strmem.c:492)
==6873==    by 0x8FB3500: g_slice_free_chain_with_offset (gslice.c:960)
==6873==    by 0xEC9AC05: add_source (e-cal-backend-contacts.c:108)
==6873==    by 0xEC9AD6A: source_group_added_cb (e-cal-backend-contacts.c:299)
==6873==    by 0xEC9AE9E: e_cal_backend_contacts_open (e-cal-backend-contacts.c:751)
==6873==    by 0x69D415A: e_cal_backend_sync_open (e-cal-backend-sync.c:186)
==6873==    by 0x69D425F: _e_cal_backend_open (e-cal-backend-sync.c:706)
==6873==    by 0x8292755: ORBit_small_invoke_adaptor (orbit-small.c:844)
==6873==    by 0x82A191D: ORBit_POAObject_handle_request (poa.c:1351)
==6873==    by 0x82A1ED9: ORBit_POAObject_invoke_incoming_request (poa.c:1421)
==6873==    by 0x828BAB4: giop_thread_queue_process (giop.c:771)
==6873==    by 0x828C24E: giop_request_handler_thread (giop.c:481)
==6873==    by 0x8FBEBF6: g_thread_pool_thread_proxy (gthreadpool.c:265)
==6873==    by 0x8FBD053: g_thread_create_proxy (gthread.c:635)
==6873==    by 0x9A6D3F6: start_thread (in /lib/libpthread-2.7.so)
==6873==    by 0x9D5AB2C: clone (in /lib/libc-2.7.so)
==6873==  Address 0xcf36608 is 0 bytes inside a block of size 24 free'd
==6873==    at 0x4C22B2E: free (vg_replace_malloc.c:323)
==6873==    by 0x8FB3165: g_slice_free_chain_with_offset (gslice.c:961)
==6873==    by 0xEC9ABEB: add_source (e-cal-backend-contacts.c:105)
==6873==    by 0xEC9AD6A: source_group_added_cb (e-cal-backend-contacts.c:299)
==6873==    by 0xEC9AE9E: e_cal_backend_contacts_open (e-cal-backend-contacts.c:751)
==6873==    by 0x69D415A: e_cal_backend_sync_open (e-cal-backend-sync.c:186)
==6873==    by 0x69D425F: _e_cal_backend_open (e-cal-backend-sync.c:706)
==6873==    by 0x8292755: ORBit_small_invoke_adaptor (orbit-small.c:844)
==6873==    by 0x82A191D: ORBit_POAObject_handle_request (poa.c:1351)
==6873==    by 0x82A1ED9: ORBit_POAObject_invoke_incoming_request (poa.c:1421)
==6873==    by 0x828BAB4: giop_thread_queue_process (giop.c:771)
==6873==    by 0x828C24E: giop_request_handler_thread (giop.c:481)
==6873==    by 0x8FBEBF6: g_thread_pool_thread_proxy (gthreadpool.c:265)
==6873==    by 0x8FBD053: g_thread_create_proxy (gthread.c:635)
==6873==    by 0x9A6D3F6: start_thread (in /lib/libpthread-2.7.so)
==6873==    by 0x9D5AB2C: clone (in /lib/libc-2.7.so)"
Comment 1 Sebastien Bacher 2008-04-28 09:26:10 UTC 
other valgrind error

"==6873== Invalid free() / delete / delete[]
==6873==    at 0x4C22B2E: free (vg_replace_malloc.c:323)
==6873==    by 0x8FB3165: g_slice_free_chain_with_offset (gslice.c:961)
==6873==    by 0xEC9AC05: add_source (e-cal-backend-contacts.c:108)
==6873==    by 0xEC9AD6A: source_group_added_cb (e-cal-backend-contacts.c:299)
==6873==    by 0xEC9AE9E: e_cal_backend_contacts_open (e-cal-backend-contacts.c:751)
==6873==    by 0x69D415A: e_cal_backend_sync_open (e-cal-backend-sync.c:186)
==6873==    by 0x69D425F: _e_cal_backend_open (e-cal-backend-sync.c:706)
==6873==    by 0x8292755: ORBit_small_invoke_adaptor (orbit-small.c:844)
==6873==    by 0x82A191D: ORBit_POAObject_handle_request (poa.c:1351)
==6873==    by 0x82A1ED9: ORBit_POAObject_invoke_incoming_request (poa.c:1421)
==6873==    by 0x828BAB4: giop_thread_queue_process (giop.c:771)
==6873==    by 0x828C24E: giop_request_handler_thread (giop.c:481)
==6873==    by 0x8FBEBF6: g_thread_pool_thread_proxy (gthreadpool.c:265)
==6873==    by 0x8FBD053: g_thread_create_proxy (gthread.c:635)
==6873==    by 0x9A6D3F6: start_thread (in /lib/libpthread-2.7.so)
==6873==    by 0x9D5AB2C: clone (in /lib/libc-2.7.so)
==6873==  Address 0xcf36608 is 0 bytes inside a block of size 24 free'd
==6873==    at 0x4C22B2E: free (vg_replace_malloc.c:323)
==6873==    by 0x8FB3165: g_slice_free_chain_with_offset (gslice.c:961)
==6873==    by 0xEC9ABEB: add_source (e-cal-backend-contacts.c:105)
==6873==    by 0xEC9AD6A: source_group_added_cb (e-cal-backend-contacts.c:299)
==6873==    by 0xEC9AE9E: e_cal_backend_contacts_open (e-cal-backend-contacts.c:751)
==6873==    by 0x69D415A: e_cal_backend_sync_open (e-cal-backend-sync.c:186)
==6873==    by 0x69D425F: _e_cal_backend_open (e-cal-backend-sync.c:706)
==6873==    by 0x8292755: ORBit_small_invoke_adaptor (orbit-small.c:844)
==6873==    by 0x82A191D: ORBit_POAObject_handle_request (poa.c:1351)
==6873==    by 0x82A1ED9: ORBit_POAObject_invoke_incoming_request (poa.c:1421)
==6873==    by 0x828BAB4: giop_thread_queue_process (giop.c:771)
==6873==    by 0x828C24E: giop_request_handler_thread (giop.c:481)
==6873==    by 0x8FBEBF6: g_thread_pool_thread_proxy (gthreadpool.c:265)
==6873==    by 0x8FBD053: g_thread_create_proxy (gthread.c:635)
==6873==    by 0x9A6D3F6: start_thread (in /lib/libpthread-2.7.so)
==6873==    by 0x9D5AB2C: clone (in /lib/libc-2.7.so)"
Comment 2 Sebastien Bacher 2008-04-28 13:44:30 UTC 
Created attachment 110039 [details] [review]
suggested patch for the issue

the fields variable is freed twice there, removing the duplication
Comment 3 Chenthill P 2008-04-28 14:52:44 UTC 
Patch looks good to commit.
Comment 4 Sebastien Bacher 2008-04-28 19:29:54 UTC 
commited to trunk and gnome-2-22 now