Bug 239441 – evolution crashed when sorting imap mailbox by date

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 239441 - evolution crashed when sorting imap mailbox by date


Summary:	evolution crashed when sorting imap mailbox by date


Status:	RESOLVED FIXED

Product:	evolution
Classification:	Applications
Component:	Do Not Use
Version:	2.10.x (obsolete)
Hardware:	Other All

Importance:	Normal critical
Target Milestone:	---
Assigned To:	Harish Krishnaswamy
QA Contact:	Evolution QA team

URL:
Whiteboard:

Duplicates:	240546 356808 373777 374926 376289 379681 380137 380370 381146 381152 382031 382172 383322 384586 384702 385351 386073 386091 387143 392658 393038 395743 404871 405448 415863 423637 424394 430185 431874 433014 433477 438513 445264 452251 462768 474438 475522 475699 475834 477014 477029 477493 479248 485859 486882 487975 489824 489837 494540 496427 497786 500421 502810 502916 503282 504832 504947 505734 506050 507833 508414 (view as bug list)
Depends on:
Blocks:

Reported:	2003-03-10 22:31 UTC by Alex Duggan
Modified:	2013-09-13 12:24 UTC

See Also:
GNOME target:	---
GNOME version:	2.17/2.18

Attachments
backtrace of latest evo-1.3 crash (42.77 KB, text/plain) 2003-04-04 15:09 UTC, Alex Duggan		Details
proposed evo patch (2.09 KB, patch) 2007-08-24 08:11 UTC, Milan Crha	committed	Details \| Review

Description Alex Duggan 2003-03-10 22:31:29 UTC

Package: Evolution
Priority: Normal
Version: GNOME2.2.0 1.3.1.99
os_details: Gnome.Org
Synopsis: evolution crashed when sorting imap mailbox by date
Bugzilla-Product: Evolution
Bugzilla-Component: Mailer
BugBuddy-GnomeVersion: 2.0 (2.2.0.1)
Description:
Using cvs head from 3-9-2003.  Sorting mail by clicking the date column
crashed evolution.  See attached backtrace


Debugging Information:

Backtrace was generated from '/usr/local/gnome2/bin/evolution-1.3'

[New Thread 8192 (LWP 32309)]
[New Thread 16385 (LWP 469)]
[New Thread 8194 (LWP 470)]
[New Thread 16387 (LWP 471)]
[New Thread 24580 (LWP 484)]
[New Thread 32773 (LWP 485)]
[New Thread 49159 (LWP 640)]
0x420ae169 in wait4 () from /lib/i686/libc.so.6

+ Trace 34729

Thread 1 (Thread 8192 (LWP 32309))

#0 wait4
from /lib/i686/libc.so.6
#1 __DTOR_END__
from /lib/i686/libc.so.6
#2 waitpid
from /lib/i686/libpthread.so.0
#3 libgnomeui_segv_handle
at gnome-ui-init.c line 646
#4 segv_redirect
at main.c line 434
#5 segv_redirect
at component-factory.c line 1660
#6 __pthread_sighandler
from /lib/i686/libpthread.so.0
#7 <signal handler called>
#8 resort_node
at e-tree-table-adapter.c line 155
#9 etta_sort_info_changed
at e-tree-table-adapter.c line 768
#10 g_cclosure_marshal_VOID__VOID
at gmarshal.c line 77
#11 g_closure_invoke
at gclosure.c line 437
#12 signal_emit_unlocked_R
at gsignal.c line 2822
#13 g_signal_emit_valist
at gsignal.c line 2554
#14 g_signal_emit
at gsignal.c line 2612
#15 e_table_sort_info_sort_info_changed
at e-table-sort-info.c line 116
#16 ethi_change_sort_state
at e-table-header-item.c line 1584
#17 ethi_event
at e-table-header-item.c line 1704
#18 gnome_canvas_marshal_BOOLEAN__BOXED
at gnome-canvas-marshal.c line 125
#19 g_type_class_meta_marshal
at gclosure.c line 514
#20 g_closure_invoke
at gclosure.c line 437
#21 signal_emit_unlocked_R
at gsignal.c line 2860
#22 g_signal_emit_valist
at gsignal.c line 2564
#23 g_signal_emit_by_name
at gsignal.c line 2649
#24 emit_event
at e-canvas.c line 262
#25 e_canvas_button
at e-canvas.c line 537
#26 _gtk_marshal_BOOLEAN__BOXED
at gtkmarshalers.c line 82
#27 g_type_class_meta_marshal
at gclosure.c line 514
#28 g_closure_invoke
at gclosure.c line 437
#29 signal_emit_unlocked_R
at gsignal.c line 2860
#30 g_signal_emit_valist
at gsignal.c line 2564
#31 g_signal_emit
at gsignal.c line 2612
#32 gtk_widget_event_internal
at gtkwidget.c line 3143
#33 gtk_propagate_event
at gtkmain.c line 2267
#34 gtk_main_do_event
at gtkmain.c line 1502
#35 gdk_event_dispatch
at gdkevents-x11.c line 2018
#36 g_main_dispatch
at gmain.c line 1653
#37 g_main_context_dispatch
at gmain.c line 2197
#38 g_main_context_iterate
at gmain.c line 2278
#39 g_main_loop_run
at gmain.c line 2498
#40 bonobo_main
at bonobo-main.c line 293
#41 main
at main.c line 560
#42 __libc_start_main
from /lib/i686/libc.so.6
#0 wait4
from /lib/i686/libc.so.6




Setting qa contact to the default for this product.
   This bug either had no qa contact or an invalid one.

Comment 1 Mike Kestner 2003-03-27 20:40:18 UTC

unable to reproduce this with trunk.  several fixes could have fixed
this.  please reopen if it's still reproducable with current cvs.

Comment 2 Gerardo Marin 2003-03-31 20:47:52 UTC

Reopening since there is a report from 20030330

Comment 3 Gerardo Marin 2003-03-31 20:49:23 UTC

*** bug 240546 has been marked as a duplicate of this bug. ***

Comment 4 Mike Kestner 2003-04-01 05:07:20 UTC

The stack trace indicates sorting an apparently freed root gnode. 
Added check to kill_gnode to NULL etta->priv->root when killing it.
Alex, please verify from cvs trunk if you don't mind.  Thanks.

Comment 5 Alex Duggan 2003-04-01 06:18:45 UTC

Mike,
I just rebuilt gal from head and "make installed" it.  After
re-running evolution, I still see the crash.  Do I also need to
rebuild evolution against the new gal?

Comment 6 Mike Kestner 2003-04-01 06:39:03 UTC

Yes, possibly, depending on how old your evo is.  The soname of gal
jumped recently, so your evo may still be linking to the old gal.so.

Comment 7 Alex Duggan 2003-04-04 15:08:44 UTC

Mike, I just rebuild gal and evolution from head on 4/2/03 and I can
still reproduce the crash.  I'll attach the backtrace which may be the
same as before.

Comment 8 Alex Duggan 2003-04-04 15:09:34 UTC

Created attachment 42226 [details]
backtrace of latest evo-1.3 crash

Comment 9 Mike Kestner 2003-04-04 16:24:36 UTC

Since the "recurse" value in the trace is garbage, I'm assuming the
gnode value may be garbage in the trace too.  The only other case I
can think of is if it is actually NULL.  That would seem strange
though since I assume you are looking at a populated tree.  I added a
guard for root == NULL in the sort_info_changed handler. Please reopen
if the crash still occurs, but if it does, I question the sanity of
the trace you are seeing.  Maybe a rebuild with optimization turned
off would produce a better trace.

Comment 10 André Klapper 2006-09-25 13:30:59 UTC

*** Bug 356808 has been marked as a duplicate of this bug. ***

Comment 11 André Klapper 2006-09-25 13:32:44 UTC

it does still occur, see bug 356808 for an updated stacktrace.

Comment 12 Karsten Bräckelmann 2006-11-11 17:24:37 UTC

*** Bug 373777 has been marked as a duplicate of this bug. ***

Comment 13 André Klapper 2006-11-17 12:35:40 UTC

*** Bug 374926 has been marked as a duplicate of this bug. ***

Comment 14 André Klapper 2006-11-27 17:30:16 UTC

*** Bug 379681 has been marked as a duplicate of this bug. ***

Comment 15 André Klapper 2006-11-30 01:45:29 UTC

*** Bug 380370 has been marked as a duplicate of this bug. ***

Comment 16 André Klapper 2006-11-30 01:45:45 UTC

*** Bug 380137 has been marked as a duplicate of this bug. ***

Comment 17 André Klapper 2006-12-01 16:24:13 UTC

*** Bug 381146 has been marked as a duplicate of this bug. ***

Comment 18 André Klapper 2006-12-01 16:24:15 UTC

*** Bug 381152 has been marked as a duplicate of this bug. ***

Comment 19 André Klapper 2006-12-05 02:35:14 UTC

*** Bug 382172 has been marked as a duplicate of this bug. ***

Comment 20 André Klapper 2006-12-07 21:38:10 UTC

*** Bug 383322 has been marked as a duplicate of this bug. ***

Comment 21 André Klapper 2006-12-09 15:02:06 UTC

*** Bug 382031 has been marked as a duplicate of this bug. ***

Comment 22 palfrey 2006-12-13 18:25:13 UTC

*** Bug 385351 has been marked as a duplicate of this bug. ***

Comment 23 André Klapper 2006-12-14 03:22:41 UTC

*** Bug 384586 has been marked as a duplicate of this bug. ***

Comment 24 palfrey 2006-12-15 16:42:46 UTC

*** Bug 386073 has been marked as a duplicate of this bug. ***

Comment 25 palfrey 2006-12-15 16:57:18 UTC

*** Bug 386091 has been marked as a duplicate of this bug. ***

Comment 26 palfrey 2007-01-04 18:48:02 UTC

*** Bug 392658 has been marked as a duplicate of this bug. ***

Comment 27 palfrey 2007-01-05 15:23:52 UTC

*** Bug 393038 has been marked as a duplicate of this bug. ***

Comment 28 Kjartan Maraas 2007-01-14 15:43:09 UTC

*** Bug 395743 has been marked as a duplicate of this bug. ***

Comment 29 Kjartan Maraas 2007-02-07 19:21:04 UTC

*** Bug 405448 has been marked as a duplicate of this bug. ***

Comment 30 André Klapper 2007-04-12 20:25:50 UTC

*** Bug 424394 has been marked as a duplicate of this bug. ***

Comment 31 André Klapper 2007-04-12 20:26:19 UTC

*** Bug 423637 has been marked as a duplicate of this bug. ***

Comment 32 Akhil Laddha 2007-04-16 04:40:55 UTC

*** Bug 430185 has been marked as a duplicate of this bug. ***

Comment 33 Akhil Laddha 2007-04-26 04:32:34 UTC

*** Bug 433014 has been marked as a duplicate of this bug. ***

Comment 34 palfrey 2007-04-26 10:14:47 UTC

*** Bug 433477 has been marked as a duplicate of this bug. ***

Comment 35 palfrey 2007-05-15 13:31:09 UTC

*** Bug 438513 has been marked as a duplicate of this bug. ***

Comment 36 Sebastien Bacher 2007-05-30 17:50:01 UTC

Ubuntu crash with a similar backtrace using evolution 2.10 on https://bugs.launchpad.net/evolution/+bug/117735

".

+ Trace 136858

Thread 1 (process 8438)

#0 resort_node
at e-tree-table-adapter.c line 158
#1 etta_sort_info_changed
at e-tree-table-adapter.c line 824
#2 resort_model
at e-tree-table-adapter.c line 751
#3 IA__g_main_context_dispatch
at gmain.c line 2045
#4 g_main_context_iterate
at gmain.c line 2677
#5 IA__g_main_loop_run
at gmain.c line 2881
#6 bonobo_main
at bonobo-main.c line 311
#7 main
at main.c line 611

Comment 37 André Klapper 2007-06-15 23:36:30 UTC

*** Bug 431874 has been marked as a duplicate of this bug. ***

Comment 38 André Klapper 2007-06-15 23:37:28 UTC

folks, is bug 387143 a duplicate?

Comment 39 Karsten Bräckelmann 2007-06-30 22:22:54 UTC

*** Bug 452251 has been marked as a duplicate of this bug. ***

Comment 40 palfrey 2007-08-03 11:50:03 UTC

*** Bug 462768 has been marked as a duplicate of this bug. ***

Comment 41 Milan Crha 2007-08-24 08:06:56 UTC

(In reply to comment #38)
> folks, is bug 387143 a duplicate?
> 

Probably can.

Comment 42 Milan Crha 2007-08-24 08:11:46 UTC

Created attachment 94237 [details] [review]
proposed evo patch

for evolution;

I see here only one little weak point in the design, when the structure places function into idle "stack" and meanwhile is freed, then it didn't remove the function from idle "stack" and that function is called with already freed data. Based on latest stack traces, it seems to be the case here.
Probably this patch will help.

Comment 43 Srinivasa Ragavan 2007-08-24 08:40:35 UTC

Looks great to commit.

Comment 44 Milan Crha 2007-08-24 09:14:28 UTC

Committed to trunk. Committed revision 34090.

Comment 45 Milan Crha 2007-09-04 07:36:03 UTC

*** Bug 384702 has been marked as a duplicate of this bug. ***

Comment 46 Tobias Mueller 2007-09-25 01:47:10 UTC

(In reply to comment #41)
> (In reply to comment #38)
> > folks, is bug 387143 a duplicate?
> > 
> 
> Probably can.
> 

I'd say so as well.

Comment 47 Tobias Mueller 2007-09-25 01:47:51 UTC

*** Bug 387143 has been marked as a duplicate of this bug. ***

Comment 48 Tobias Mueller 2007-09-25 01:48:26 UTC

*** Bug 477029 has been marked as a duplicate of this bug. ***

Comment 49 Tobias Mueller 2007-09-25 01:48:41 UTC

*** Bug 477014 has been marked as a duplicate of this bug. ***

Comment 50 Tobias Mueller 2007-09-25 01:49:00 UTC

*** Bug 475834 has been marked as a duplicate of this bug. ***

Comment 51 Tobias Mueller 2007-09-25 01:51:50 UTC

*** Bug 376289 has been marked as a duplicate of this bug. ***

Comment 52 Tobias Mueller 2007-10-12 13:11:37 UTC

*** Bug 485859 has been marked as a duplicate of this bug. ***

Comment 53 Tobias Mueller 2007-10-12 13:12:07 UTC

*** Bug 474438 has been marked as a duplicate of this bug. ***

Comment 54 Tobias Mueller 2007-10-12 13:12:21 UTC

*** Bug 475522 has been marked as a duplicate of this bug. ***

Comment 55 Tobias Mueller 2007-10-12 13:12:37 UTC

*** Bug 475699 has been marked as a duplicate of this bug. ***

Comment 56 Tobias Mueller 2007-10-12 13:12:47 UTC

*** Bug 477493 has been marked as a duplicate of this bug. ***

Comment 57 Tobias Mueller 2007-10-12 13:15:35 UTC

*** Bug 479248 has been marked as a duplicate of this bug. ***

Comment 58 Tobias Mueller 2007-10-22 22:54:24 UTC

*** Bug 487975 has been marked as a duplicate of this bug. ***

Comment 59 Tobias Mueller 2007-10-22 22:56:19 UTC

*** Bug 404871 has been marked as a duplicate of this bug. ***

Comment 60 André Klapper 2007-10-28 14:07:57 UTC

*** Bug 486882 has been marked as a duplicate of this bug. ***

Comment 61 André Klapper 2007-10-28 14:08:04 UTC

*** Bug 489824 has been marked as a duplicate of this bug. ***

Comment 62 André Klapper 2007-10-28 14:08:08 UTC

*** Bug 489837 has been marked as a duplicate of this bug. ***

Comment 63 Susana 2007-11-18 13:24:08 UTC

*** Bug 494540 has been marked as a duplicate of this bug. ***

Comment 64 Susana 2007-11-18 13:24:16 UTC

*** Bug 496427 has been marked as a duplicate of this bug. ***

Comment 65 Susana 2007-11-18 13:24:33 UTC

*** Bug 497786 has been marked as a duplicate of this bug. ***

Comment 66 Susana 2007-12-02 12:40:06 UTC

*** Bug 500421 has been marked as a duplicate of this bug. ***

Comment 67 Tobias Mueller 2007-12-06 01:06:41 UTC

*** Bug 445264 has been marked as a duplicate of this bug. ***

Comment 68 Tobias Mueller 2007-12-06 01:07:14 UTC

*** Bug 415863 has been marked as a duplicate of this bug. ***

Comment 69 palfrey 2007-12-10 15:53:33 UTC

*** Bug 502810 has been marked as a duplicate of this bug. ***

Comment 70 André Klapper 2007-12-13 12:33:30 UTC

*** Bug 502916 has been marked as a duplicate of this bug. ***

Comment 71 André Klapper 2007-12-13 12:33:39 UTC

*** Bug 503282 has been marked as a duplicate of this bug. ***

Comment 72 Akhil Laddha 2008-02-05 08:38:03 UTC

*** Bug 507833 has been marked as a duplicate of this bug. ***

Comment 73 Akhil Laddha 2008-02-05 08:38:16 UTC

*** Bug 506050 has been marked as a duplicate of this bug. ***

Comment 74 Akhil Laddha 2008-02-05 08:38:38 UTC

*** Bug 504832 has been marked as a duplicate of this bug. ***

Comment 75 Akhil Laddha 2008-02-05 08:38:48 UTC

*** Bug 508414 has been marked as a duplicate of this bug. ***

Comment 76 Akhil Laddha 2008-02-11 05:22:22 UTC

*** Bug 504947 has been marked as a duplicate of this bug. ***

Comment 77 Tobias Mueller 2008-02-26 23:19:47 UTC

*** Bug 505734 has been marked as a duplicate of this bug. ***