Bug 268787 – Crash when migrating 1.4 data to 2.0.2

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 268787 - Crash when migrating 1.4 data to 2.0.2


Summary:	Crash when migrating 1.4 data to 2.0.2


Status:	RESOLVED FIXED

Product:	evolution
Classification:	Applications
Component:	Mailer
Version:	2.0.x (obsolete)
Hardware:	Other All

Importance:	Normal blocker
Target Milestone:	---
Assigned To:	Not Zed
QA Contact:	Evolution QA team

URL:
Whiteboard:	evolution[migration]

Duplicates:	267400 269454 269827 270515 270585 270655 270759 270819 270873 271526 271862 (view as bug list)
Depends on:
Blocks:

Reported:	2004-10-26 03:05 UTC by Caleb Groom
Modified:	2013-09-10 14:03 UTC

See Also:
GNOME target:	---
GNOME version:	---

Attachments
fix (3.17 KB, patch) 2004-11-01 08:57 UTC, Not Zed	none	Details \| Review

Description Caleb Groom 2004-10-26 03:05:03 UTC

From:  <caleb@calebgroom.com>
To: submit@bugzilla.ximian.com
X-Mailer: bug-buddy 2.8.0
Subject: Crash when migrating 1.4 data to 2.0.2

Distribution: Debian testing/unstable
Package: Evolution
Priority: Normal
Version: GNOME2.8.1 2.0.2
Gnome-Distributor: Ubuntu
Synopsis: Crash when migrating 1.4 data to 2.0.2
Bugzilla-Product: Evolution
Bugzilla-Component: Importers
Bugzilla-Version: 2.0.2
BugBuddy-GnomeVersion: 2.0 (2.8.0)
Description:
Description of the crash:

My 1.4 evolution data from FC2 was backed up and
restored to
/home/caleb/evolution after scrapping FC2 and
installing Ubuntu.  The
first time I ran evolution-2.0, and every time
since, the data migration
dialog will appear and almost immediatly crash. 
The stack trace is
included with this report.  I have compiled
evolution 2.0.2 and e-d-s
1.0.2 from source with debugging enabled.

Steps to reproduce the crash:
1. Restore the 1.4 data from previous FC2.
2. Run evolution-2.0
3. Crash.

Expected Results:
 Don't crash, convert my data to the new evolution
data layout.

How often does this happen?
 Everytime.

Additional Information:
 I'm aware that this type of crasher is typically
dependent on my data. 
If I need to provide more information, just ask. 
I promise I'll follow
this report in bugzilla.  :)

Debugging Information:

Backtrace was generated from '/usr/bin/evolution-2.0'

Using host libthread_db library
"/lib/tls/i686/cmov/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread 1091483936 (LWP 17214)]
0xffffe410 in __kernel_vsyscall ()

+ Trace 51328

Thread 1 (Thread 1091483936 (LWP 17214))

#0 __kernel_vsyscall
#1 __waitpid_nocancel
from /lib/tls/i686/cmov/libpthread.so.0
#2 libgnomeui_module_info_get
from /usr/lib/libgnomeui-2.so.0
#3 segv_redirect
at main.c line 420
#4 <signal handler called>
#5 strcmp
from /lib/tls/i686/cmov/libc.so.6
#6 xml_set_prop
at e-account.c line 237
#7 xml_set_identity
at e-account.c line 284
#8 e_account_set_from_xml
at e-account.c line 366
#9 gconf_accounts_changed
at e-account-list.c line 158
#10 gconf_client_change_set_from_current
from /usr/lib/libgconf-2.so.4
#11 gconf_listeners_remove_if
from /usr/lib/libgconf-2.so.4
#12 gconf_listeners_remove_if
from /usr/lib/libgconf-2.so.4
#13 gconf_client_change_set_from_current
from /usr/lib/libgconf-2.so.4
#14 gconf_client_change_set_from_current
from /usr/lib/libgconf-2.so.4
#15 gconf_client_change_set_from_current
from /usr/lib/libgconf-2.so.4
#16 g_child_watch_add
from /usr/lib/libglib-2.0.so.0
#17 g_main_depth
from /usr/lib/libglib-2.0.so.0
#18 g_main_context_dispatch
from /usr/lib/libglib-2.0.so.0
#19 g_main_context_dispatch
from /usr/lib/libglib-2.0.so.0
#20 g_main_context_iteration
from /usr/lib/libglib-2.0.so.0
#21 gtk_main_iteration
from /usr/lib/libgtk-x11-2.0.so.0
#22 em_migrate_set_folder_name
at em-migrate.c line 1208
#23 em_migrate_folder
at em-migrate.c line 1581
#24 em_migrate_dir
at em-migrate.c line 1762
#25 em_migrate_local_folders_1_4
at em-migrate.c line 1832
#26 em_migrate_1_4
at em-migrate.c line 2437
#27 em_migrate
at em-migrate.c line 2626
#28 impl_upgradeFromVersion
at mail-component.c line 802
#29 _ORBIT_skel_small_GNOME_Evolution_Component_upgradeFromVersion
at Evolution-common.c line 24
#30 ORBit_c_stub_invoke
from /usr/lib/libORBit-2.so.0
#31 GNOME_Evolution_Component_upgradeFromVersion
at Evolution-stubs.c line 21
#32 attempt_upgrade
at e-shell.c line 568
#33 e_shell_attempt_upgrade
at e-shell.c line 805
#34 e_shell_construct
at e-shell.c line 644
#35 e_shell_new
at e-shell.c line 696
#36 idle_cb
at main.c line 344
#37 g_child_watch_add
from /usr/lib/libglib-2.0.so.0
#38 g_main_depth
from /usr/lib/libglib-2.0.so.0
#39 g_main_context_dispatch
from /usr/lib/libglib-2.0.so.0
#40 g_main_context_dispatch
from /usr/lib/libglib-2.0.so.0
#41 g_main_loop_run
from /usr/lib/libglib-2.0.so.0
#42 bonobo_main
from /usr/lib/libbonobo-2.so.0
#43 main
at main.c line 585
#0 __kernel_vsyscall

Comment 1 Gerardo Marin 2004-10-27 06:44:24 UTC

*** bug 267400 has been marked as a duplicate of this bug. ***

Comment 2 Caleb Groom 2004-10-27 06:48:28 UTC

Providing valgrind output as requested:

==12280== Memcheck, a memory error detector for x86-linux.
==12280== Copyright (C) 2002-2004, and GNU GPL'd, by Julian Seward.
==12280== Using valgrind-2.1.1, a program supervision framework for
x86-linux.
==12280== Copyright (C) 2000-2004, and GNU GPL'd, by Julian Seward.
==12280== For more details, rerun with: -v
==12280== 
==12280== warning: Valgrind's pthread_getschedparam is incomplete
==12280==          your program may misbehave as a result
==12280== Syscall param sigaction(act) contains uninitialised or
unaddressable byte(s)
==12280==    at 0x3C000C02: (within /lib/ld-2.3.2.so)
==12280==  Address 0x4FFFE42C is on thread 1's stack
==12280== 
==12280== Syscall param write(buf) contains uninitialised or
unaddressable byte(s)
==12280==    at 0x3C000C02: (within /lib/ld-2.3.2.so)
==12280==    by 0x3C59E7DC: (within /usr/X11R6/lib/libX11.so.6.2)
==12280==    by 0x3C59F319: _X11TransWrite (in
/usr/X11R6/lib/libX11.so.6.2)
==12280==    by 0x3C5806DD: (within /usr/X11R6/lib/libX11.so.6.2)
==12280==  Address 0x3D1EAA40 is 128 bytes inside a block of size 2048
alloc'd
==12280==    at 0x3C01EB30: calloc (vg_replace_malloc.c:141)
==12280==    by 0x3C573043: XOpenDisplay (in /usr/X11R6/lib/libX11.so.6.2)
==12280==    by 0x3CE3382D: gdk_display_open (in
/usr/lib/libgdk-x11-2.0.so.0.400.10)
==12280==    by 0x3CE15B20: gdk_display_open_default_libgtk_only (in
/usr/lib/libgdk-x11-2.0.so.0.400.10)
==12280== 
==12280== Syscall param sigaction(act) contains uninitialised or
unaddressable byte(s)
==12280==    at 0x3C000C02: (within /lib/ld-2.3.2.so)
==12280==    by 0xFFF: ???
==12280==  Address 0x4FFFE36C is on thread 1's stack
==12280== 
==12280== Syscall param write(buf) contains uninitialised or
unaddressable byte(s)
==12280==    at 0x3C000C02: (within /lib/ld-2.3.2.so)
==12280==    by 0x3C5473D2: (within /usr/X11R6/lib/libICE.so.6.3)
==12280==    by 0x3C54808D: _IceTransWrite (in
/usr/X11R6/lib/libICE.so.6.3)
==12280==    by 0x3C53F1FE: _IceWrite (in /usr/X11R6/lib/libICE.so.6.3)
==12280==  Address 0x3D259A34 is 12 bytes inside a block of size 1024
alloc'd
==12280==    at 0x3C01EB30: calloc (vg_replace_malloc.c:141)
==12280==    by 0x3C53C404: IceOpenConnection (in
/usr/X11R6/lib/libICE.so.6.3)
==12280==    by 0x3C52E3EA: SmcOpenConnection (in
/usr/X11R6/lib/libSM.so.6.0)
==12280==    by 0x3C4323CC: gnome_client_connect (in
/usr/lib/libgnomeui-2.so.0.800.0)

(evolution:12280): Bonobo-Activation-WARNING **: Extremely strange,
strange object directories (0)registered with the activation context
==12280== 
==12280== Invalid read of size 1
==12280==    at 0x3C01DE8A: strcmp (mac_replace_strmem.c:251)
==12280==    by 0x3C870593: (within /usr/lib/libORBit-2.so.0.0.0)
==12280==    by 0x3C870D87: (within /usr/lib/libORBit-2.so.0.0.0)
==12280==    by 0x3C870FDA: ORBit_small_invoke_stub (in
/usr/lib/libORBit-2.so.0.0.0)
==12280==  Address 0x0 is not stack'd, malloc'd or free'd
==12280== 
==12280== Invalid read of size 4
==12280==    at 0x3CFE4EFC: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==12280==  Address 0x3D3DD404 is 68 bytes inside a block of size 120
free'd
==12280==    at 0x3C01E83B: free (vg_replace_malloc.c:127)
==12280==    by 0x3CFE5BB8: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==12280== 
==12280== Invalid write of size 4
==12280==    at 0x3CFE4F06: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==12280==  Address 0x3D3DD404 is 68 bytes inside a block of size 120
free'd
==12280==    at 0x3C01E83B: free (vg_replace_malloc.c:127)
==12280==    by 0x3CFE5BB8: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==12280== 
==12280== Invalid read of size 4
==12280==    at 0x3CFE4F0B: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==12280==  Address 0x3D3DD41C is 92 bytes inside a block of size 120
free'd
==12280==    at 0x3C01E83B: free (vg_replace_malloc.c:127)
==12280==    by 0x3CFE5BB8: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==12280== 
==12280== Invalid read of size 4
==12280==    at 0x3CFE4F12: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==12280==  Address 0x3D3DD3FC is 60 bytes inside a block of size 120
free'd
==12280==    at 0x3C01E83B: free (vg_replace_malloc.c:127)
==12280==    by 0x3CFE5BB8: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==12280== 
==12280== Invalid write of size 4
==12280==    at 0x3CFE4F29: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==12280==  Address 0x3D3DD3FC is 60 bytes inside a block of size 120
free'd
==12280==    at 0x3C01E83B: free (vg_replace_malloc.c:127)
==12280==    by 0x3CFE5BB8: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==12280== 
==12280== ERROR SUMMARY: 36 errors from 10 contexts (suppressed: 165
from 1)
==12280== malloc/free: in use at exit: 855110 bytes in 19503 blocks.
==12280== malloc/free: 55464 allocs, 35961 frees, 3768217 bytes allocated.
==12280== For a detailed leak analysis,  rerun with: --leak-check=yes
==12280== For counts of detected errors, rerun with: -v

Comment 3 Caleb Groom 2004-10-27 07:40:53 UTC

valgrind --num-callers=32:

==13485== Memcheck, a memory error detector for x86-linux.
==13485== Copyright (C) 2002-2004, and GNU GPL'd, by Julian Seward.
==13485== Using valgrind-2.1.1, a program supervision framework for
x86-linux.
==13485== Copyright (C) 2000-2004, and GNU GPL'd, by Julian Seward.
==13485== For more details, rerun with: -v
==13485== 
==13485== warning: Valgrind's pthread_getschedparam is incomplete
==13485==          your program may misbehave as a result
==13485== Syscall param sigaction(act) contains uninitialised or
unaddressable byte(s)
==13485==    at 0x3C000C02: (within /lib/ld-2.3.2.so)
==13485==  Address 0x4FFFE42C is on thread 1's stack
==13485== 
==13485== Syscall param write(buf) contains uninitialised or
unaddressable byte(s)
==13485==    at 0x3C000C02: (within /lib/ld-2.3.2.so)
==13485==    by 0x3C59E7DC: (within /usr/X11R6/lib/libX11.so.6.2)
==13485==    by 0x3C59F319: _X11TransWrite (in
/usr/X11R6/lib/libX11.so.6.2)
==13485==    by 0x3C5806DD: (within /usr/X11R6/lib/libX11.so.6.2)
==13485==    by 0x3C581C1C: _XReply (in /usr/X11R6/lib/libX11.so.6.2)
==13485==    by 0x3C56FDBF: XInternAtom (in /usr/X11R6/lib/libX11.so.6.2)
==13485==    by 0x3C58AD8C: XSetWMProperties (in
/usr/X11R6/lib/libX11.so.6.2)
==13485==    by 0x3CE4E9FE: (within /usr/lib/libgdk-x11-2.0.so.0.400.10)
==13485==    by 0x3CE4EF57: gdk_window_new (in
/usr/lib/libgdk-x11-2.0.so.0.400.10)
==13485==    by 0x3CE33927: gdk_display_open (in
/usr/lib/libgdk-x11-2.0.so.0.400.10)
==13485==    by 0x3CE15B20: gdk_display_open_default_libgtk_only (in
/usr/lib/libgdk-x11-2.0.so.0.400.10)
==13485==    by 0x3CB1E840: gtk_init_check (in
/usr/lib/libgtk-x11-2.0.so.0.400.10)
==13485==    by 0x3CB1E86F: gtk_init (in
/usr/lib/libgtk-x11-2.0.so.0.400.10)
==13485==    by 0x3C4ECA77: (within /usr/lib/libbonoboui-2.so.0.0.0)
==13485==    by 0x3C61F174: gnome_program_postinit (in
/usr/lib/libgnome-2.so.0.800.0)
==13485==    by 0x3C61F653: (within /usr/lib/libgnome-2.so.0.800.0)
==13485==    by 0x3C61F6AF: gnome_program_initv (in
/usr/lib/libgnome-2.so.0.800.0)
==13485==    by 0x3C61F1FB: gnome_program_init (in
/usr/lib/libgnome-2.so.0.800.0)
==13485==    by 0x8062894: main (main.c:500)
==13485==  Address 0x3D1EAA40 is 128 bytes inside a block of size 2048
alloc'd
==13485==    at 0x3C01EB30: calloc (vg_replace_malloc.c:141)
==13485==    by 0x3C573043: XOpenDisplay (in /usr/X11R6/lib/libX11.so.6.2)
==13485==    by 0x3CE3382D: gdk_display_open (in
/usr/lib/libgdk-x11-2.0.so.0.400.10)
==13485==    by 0x3CE15B20: gdk_display_open_default_libgtk_only (in
/usr/lib/libgdk-x11-2.0.so.0.400.10)
==13485==    by 0x3CB1E840: gtk_init_check (in
/usr/lib/libgtk-x11-2.0.so.0.400.10)
==13485==    by 0x3CB1E86F: gtk_init (in
/usr/lib/libgtk-x11-2.0.so.0.400.10)
==13485==    by 0x3C4ECA77: (within /usr/lib/libbonoboui-2.so.0.0.0)
==13485==    by 0x3C61F174: gnome_program_postinit (in
/usr/lib/libgnome-2.so.0.800.0)
==13485==    by 0x3C61F653: (within /usr/lib/libgnome-2.so.0.800.0)
==13485==    by 0x3C61F6AF: gnome_program_initv (in
/usr/lib/libgnome-2.so.0.800.0)
==13485==    by 0x3C61F1FB: gnome_program_init (in
/usr/lib/libgnome-2.so.0.800.0)
==13485==    by 0x8062894: main (main.c:500)
==13485== 
==13485== Syscall param sigaction(act) contains uninitialised or
unaddressable byte(s)
==13485==    at 0x3C000C02: (within /lib/ld-2.3.2.so)
==13485==    by 0xFFF: ???
==13485==  Address 0x4FFFE36C is on thread 1's stack
==13485== 
==13485== Syscall param write(buf) contains uninitialised or
unaddressable byte(s)
==13485==    at 0x3C000C02: (within /lib/ld-2.3.2.so)
==13485==    by 0x3C5473D2: (within /usr/X11R6/lib/libICE.so.6.3)
==13485==    by 0x3C54808D: _IceTransWrite (in
/usr/X11R6/lib/libICE.so.6.3)
==13485==    by 0x3C53F1FE: _IceWrite (in /usr/X11R6/lib/libICE.so.6.3)
==13485==    by 0x3C53EE74: IceFlush (in /usr/X11R6/lib/libICE.so.6.3)
==13485==    by 0x3C52EDD2: SmcSetProperties (in
/usr/X11R6/lib/libSM.so.6.0)
==13485==    by 0x3C42FADF: (within /usr/lib/libgnomeui-2.so.0.800.0)
==13485==    by 0x3C42FBAB: (within /usr/lib/libgnomeui-2.so.0.800.0)
==13485==    by 0x3C4349A7: (within /usr/lib/libgnomeui-2.so.0.800.0)
==13485==    by 0x3CF2E38E: g_cclosure_marshal_VOID__BOOLEAN (in
/usr/lib/libgobject-2.0.so.0.400.7)
==13485==    by 0x3CF1BB17: (within /usr/lib/libgobject-2.0.so.0.400.7)
==13485==    by 0x3CF1B7EA: g_closure_invoke (in
/usr/lib/libgobject-2.0.so.0.400.7)
==13485==    by 0x3CF2D668: (within /usr/lib/libgobject-2.0.so.0.400.7)
==13485==    by 0x3CF2CE5B: g_signal_emit_valist (in
/usr/lib/libgobject-2.0.so.0.400.7)
==13485==    by 0x3CF2D13F: g_signal_emit (in
/usr/lib/libgobject-2.0.so.0.400.7)
==13485==    by 0x3C4324DE: gnome_client_connect (in
/usr/lib/libgnomeui-2.so.0.800.0)
==13485==    by 0x3C4315D3: (within /usr/lib/libgnomeui-2.so.0.800.0)
==13485==    by 0x3C61F174: gnome_program_postinit (in
/usr/lib/libgnome-2.so.0.800.0)
==13485==    by 0x3C61F653: (within /usr/lib/libgnome-2.so.0.800.0)
==13485==    by 0x3C61F6AF: gnome_program_initv (in
/usr/lib/libgnome-2.so.0.800.0)
==13485==    by 0x3C61F1FB: gnome_program_init (in
/usr/lib/libgnome-2.so.0.800.0)
==13485==    by 0x8062894: main (main.c:500)
==13485==  Address 0x3D259A34 is 12 bytes inside a block of size 1024
alloc'd
==13485==    at 0x3C01EB30: calloc (vg_replace_malloc.c:141)
==13485==    by 0x3C53C404: IceOpenConnection (in
/usr/X11R6/lib/libICE.so.6.3)
==13485==    by 0x3C52E3EA: SmcOpenConnection (in
/usr/X11R6/lib/libSM.so.6.0)
==13485==    by 0x3C4323CC: gnome_client_connect (in
/usr/lib/libgnomeui-2.so.0.800.0)
==13485==    by 0x3C4315D3: (within /usr/lib/libgnomeui-2.so.0.800.0)
==13485==    by 0x3C61F174: gnome_program_postinit (in
/usr/lib/libgnome-2.so.0.800.0)
==13485==    by 0x3C61F653: (within /usr/lib/libgnome-2.so.0.800.0)
==13485==    by 0x3C61F6AF: gnome_program_initv (in
/usr/lib/libgnome-2.so.0.800.0)
==13485==    by 0x3C61F1FB: gnome_program_init (in
/usr/lib/libgnome-2.so.0.800.0)
==13485==    by 0x8062894: main (main.c:500)

(evolution:13485): Bonobo-Activation-WARNING **: Extremely strange,
strange object directories (0)registered with the activation context
==13485== 
==13485== Invalid read of size 1
==13485==    at 0x3C01DE8A: strcmp (mac_replace_strmem.c:251)
==13485==    by 0x3C870593: (within /usr/lib/libORBit-2.so.0.0.0)
==13485==    by 0x3C870D87: (within /usr/lib/libORBit-2.so.0.0.0)
==13485==    by 0x3C870FDA: ORBit_small_invoke_stub (in
/usr/lib/libORBit-2.so.0.0.0)
==13485==    by 0x3C870E7C: ORBit_small_invoke_stub_n (in
/usr/lib/libORBit-2.so.0.0.0)
==13485==    by 0x3C884075: ORBit_c_stub_invoke (in
/usr/lib/libORBit-2.so.0.0.0)
==13485==    by 0x3C029BD3: GNOME_Evolution_Shell_handleURI
(Evolution-stubs.c:343)
==13485==    by 0x8062314: open_uris (main.c:307)
==13485==    by 0x80624C1: idle_cb (main.c:383)
==13485==    by 0x3CF78AA8: (within /usr/lib/libglib-2.0.so.0.400.7)
==13485==    by 0x3CF75A7C: (within /usr/lib/libglib-2.0.so.0.400.7)
==13485==    by 0x3CF76AA7: g_main_context_dispatch (in
/usr/lib/libglib-2.0.so.0.400.7)
==13485==    by 0x3CF76DC9: (within /usr/lib/libglib-2.0.so.0.400.7)
==13485==    by 0x3CF773A2: g_main_loop_run (in
/usr/lib/libglib-2.0.so.0.400.7)
==13485==    by 0x3C70CD2E: bonobo_main (in /usr/lib/libbonobo-2.so.0.0.0)
==13485==    by 0x8062A0F: main (main.c:585)
==13485==  Address 0x0 is not stack'd, malloc'd or free'd
==13485== 
==13485== Invalid read of size 4
==13485==    at 0x3CFE4EFC: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==13485==  Address 0x3D3DD404 is 68 bytes inside a block of size 120
free'd
==13485==    at 0x3C01E83B: free (vg_replace_malloc.c:127)
==13485==    by 0x3CFE5BB8: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==13485== 
==13485== Invalid write of size 4
==13485==    at 0x3CFE4F06: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==13485==  Address 0x3D3DD404 is 68 bytes inside a block of size 120
free'd
==13485==    at 0x3C01E83B: free (vg_replace_malloc.c:127)
==13485==    by 0x3CFE5BB8: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==13485== 
==13485== Invalid read of size 4
==13485==    at 0x3CFE4F0B: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==13485==  Address 0x3D3DD41C is 92 bytes inside a block of size 120
free'd
==13485==    at 0x3C01E83B: free (vg_replace_malloc.c:127)
==13485==    by 0x3CFE5BB8: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==13485== 
==13485== Invalid read of size 4
==13485==    at 0x3CFE4F12: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==13485==  Address 0x3D3DD3FC is 60 bytes inside a block of size 120
free'd
==13485==    at 0x3C01E83B: free (vg_replace_malloc.c:127)
==13485==    by 0x3CFE5BB8: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==13485== 
==13485== Invalid write of size 4
==13485==    at 0x3CFE4F29: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==13485==  Address 0x3D3DD3FC is 60 bytes inside a block of size 120
free'd
==13485==    at 0x3C01E83B: free (vg_replace_malloc.c:127)
==13485==    by 0x3CFE5BB8: (within /lib/tls/i686/cmov/libc-2.3.2.so)
==13485== 
==13485== ERROR SUMMARY: 36 errors from 10 contexts (suppressed: 165
from 1)
==13485== malloc/free: in use at exit: 855113 bytes in 19503 blocks.
==13485== malloc/free: 55464 allocs, 35961 frees, 3768220 bytes allocated.
==13485== For a detailed leak analysis,  rerun with: --leak-check=yes
==13485== For counts of detected errors, rerun with: -v

Comment 4 André Klapper 2004-10-29 10:59:23 UTC

adding keyword.

Comment 5 Not Zed 2004-11-01 08:56:52 UTC

ok thanks for the test data, turns out it was easily found using gdb -
i just didn't look close enough at the crashing function to see that
it was testing one value and not another one before trying to strcmp it.

patch coming up.

Comment 6 Not Zed 2004-11-01 08:57:28 UTC

Created attachment 44371 [details] [review]
fix

Comment 7 Caleb Groom 2004-11-02 03:06:05 UTC

Works like a champ.  Can't thank you enough for your prompt feedback
to this bug.

Comment 8 Gerardo Marin 2004-11-15 18:16:13 UTC

*** bug 269454 has been marked as a duplicate of this bug. ***

Comment 9 Gerardo Marin 2004-12-13 18:54:14 UTC

*** bug 270515 has been marked as a duplicate of this bug. ***

Comment 10 Gerardo Marin 2004-12-20 18:06:31 UTC

*** bug 270655 has been marked as a duplicate of this bug. ***

Comment 11 Gerardo Marin 2004-12-20 18:06:52 UTC

*** bug 269827 has been marked as a duplicate of this bug. ***

Comment 12 Gerardo Marin 2004-12-27 20:26:21 UTC

*** bug 270819 has been marked as a duplicate of this bug. ***

Comment 13 Gerardo Marin 2004-12-29 21:27:10 UTC

*** bug 270873 has been marked as a duplicate of this bug. ***

Comment 14 Gerardo Marin 2005-01-31 09:58:05 UTC

*** bug 271526 has been marked as a duplicate of this bug. ***

Comment 15 Gerardo Marin 2005-01-31 09:58:28 UTC

*** bug 271862 has been marked as a duplicate of this bug. ***

Comment 16 Not Zed 2005-08-03 09:12:32 UTC

*** Bug 270759 has been marked as a duplicate of this bug. ***

Comment 17 Not Zed 2005-08-24 03:28:15 UTC

*** Bug 270585 has been marked as a duplicate of this bug. ***