After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 632212 - SEGV on imapx connection failure
SEGV on imapx connection failure
Status: RESOLVED DUPLICATE of bug 631290
Product: evolution-data-server
Classification: Platform
Component: Mailer
3.0.x (obsolete)
Other Linux
: Normal normal
: ---
Assigned To: evolution-mail-maintainers
Evolution QA team
Depends on:
Blocks:
 
 
Reported: 2010-10-15 12:17 UTC by David Woodhouse
Modified: 2013-09-14 16:53 UTC
See Also:
GNOME target: ---
GNOME version: ---


Description David Woodhouse 2010-10-15 12:17:56 UTC 
Although I don't see why it's happening in malloc(). Are we corrupting memory?

(evolution:2849): camel-WARNING **: Could not connect to linux.intel.com (port imaps): Connection reset by peer

(evolution:2849): camel-CRITICAL **: camel_tcp_stream_connect: assertion `error == NULL || *error == NULL' failed

(evolution:2849): camel-WARNING **: Could not connect to linux.intel.com (port imaps): \xc0\u000d
[New Thread 0x7fffa5134710 (LWP 2879)]
[New Thread 0x7fff93fff710 (LWP 2880)]
[New Thread 0x7fff935fe710 (LWP 2881)]
[Thread 0x7fff935fe710 (LWP 2881) exited]
[New Thread 0x7fff935fe710 (LWP 2885)]
[Thread 0x7fff935fe710 (LWP 2885) exited]
[New Thread 0x7fff935fe710 (LWP 2889)]
[Thread 0x7fff935fe710 (LWP 2889) exited]

Program received signal SIGSEGV, Segmentation fault.

+ Trace 224160

Thread 140735975511824 (LWP 2875)

  • #0 _int_malloc
    at malloc.c line 4298
  • #1 __libc_malloc
    at malloc.c line 3660
  • #2 g_malloc
    at gmem.c line 164
  • #3 g_strdup
    at gstrfuncs.c line 102
  • #4 copy_param
    at camel-url.c line 287
  • #5 g_datalist_foreach
    at gdataset.c line 838
  • #6 camel_url_copy
    at camel-url.c line 729
  • #7 camel_imapx_server_new
    at camel-imapx-server.c line 5027
  • #8 imapx_create_new_connection
    at camel-imapx-conn-manager.c line 258
  • #9 camel_imapx_conn_manager_get_connection
    at camel-imapx-conn-manager.c line 326
  • #10 camel_imapx_store_get_server
    at camel-imapx-store.c line 204
  • #11 imapx_synchronize_sync
    at camel-imapx-folder.c line 469
  • #12 camel_folder_synchronize_sync
    at camel-folder.c line 3408
  • #13 vee_folder_synchronize_sync
    at camel-vee-folder.c line 1316
  • #14 camel_folder_synchronize_sync
    at camel-folder.c line 3408
  • #15 refresh_folders_exec
    at mail-send-recv.c line 922
  • #16 mail_msg_proxy
    at mail-mt.c line 447
  • #17 g_thread_pool_thread_proxy
    at gthreadpool.c line 319
  • #18 g_thread_create_proxy
    at gthread.c line 1897
  • #19 start_thread
    at pthread_create.c line 301
  • #20 clone
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S line 115 






Comment 1


David Woodhouse





          2010-10-15 12:21:10 UTC
        



(evolution:25866): camel-WARNING **: Could not connect to linux.intel.com (port imaps): Connection reset by peer

(evolution:25866): camel-CRITICAL **: camel_tcp_stream_connect: assertion `error == NULL || *error == NULL' failed
==25866== Invalid read of size 8
==25866==    at 0x770CF51: g_error_add_prefix (gerror.c:317)
==25866==    by 0x770D4B9: g_prefix_error (gerror.c:352)
==25866==    by 0x1B779DAA: imapx_connect_to_server (camel-imapx-server.c:2844)
==25866==    by 0x1B77A0DF: camel_imapx_server_connect (camel-imapx-server.c:3019)
==25866==    by 0x1B77C033: camel_imapx_conn_manager_get_connection (camel-imapx-conn-manager.c:259)
==25866==    by 0x1B76E5FD: camel_imapx_store_get_server (camel-imapx-store.c:204)
==25866==    by 0x1B76FB8C: imapx_synchronize_sync (camel-imapx-folder.c:469)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x66D7145: vee_folder_synchronize_sync (camel-vee-folder.c:1316)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x103B0C6D: refresh_folders_exec (mail-send-recv.c:922)
==25866==    by 0x103AAFAB: mail_msg_proxy (mail-mt.c:447)
==25866==  Address 0x25ce5080 is 16 bytes inside a block of size 24 free'd
==25866==    at 0x4A05D72: free (vg_replace_malloc.c:325)
==25866==    by 0x770D531: g_propagate_prefixed_error (gerror.c:377)
==25866==    by 0x66D7127: vee_folder_synchronize_sync (camel-vee-folder.c:1322)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x103B0C6D: refresh_folders_exec (mail-send-recv.c:922)
==25866==    by 0x103AAFAB: mail_msg_proxy (mail-mt.c:447)
==25866==    by 0x7749BE3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==25866==    by 0x7747465: g_thread_create_proxy (gthread.c:1897)
==25866==    by 0x3198006D5A: start_thread (pthread_create.c:301)
==25866==    by 0x3197CE3E1C: clone (clone.S:115)
==25866== 
==25866== Invalid read of size 1
==25866==    at 0x4A07302: __GI_strlen (mc_replace_strmem.c:284)
==25866==    by 0x773F329: g_strconcat (gstrfuncs.c:322)
==25866==    by 0x770CF66: g_error_add_prefix (gerror.c:318)
==25866==    by 0x770D4B9: g_prefix_error (gerror.c:352)
==25866==    by 0x1B779DAA: imapx_connect_to_server (camel-imapx-server.c:2844)
==25866==    by 0x1B77A0DF: camel_imapx_server_connect (camel-imapx-server.c:3019)
==25866==    by 0x1B77C033: camel_imapx_conn_manager_get_connection (camel-imapx-conn-manager.c:259)
==25866==    by 0x1B76E5FD: camel_imapx_store_get_server (camel-imapx-store.c:204)
==25866==    by 0x1B76FB8C: imapx_synchronize_sync (camel-imapx-folder.c:469)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x66D7145: vee_folder_synchronize_sync (camel-vee-folder.c:1316)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==  Address 0x2542c330 is 0 bytes inside a block of size 76 free'd
==25866==    at 0x4A05D72: free (vg_replace_malloc.c:325)
==25866==    by 0x770D1B1: g_error_free (gerror.c:139)
==25866==    by 0x770D531: g_propagate_prefixed_error (gerror.c:377)
==25866==    by 0x66D7127: vee_folder_synchronize_sync (camel-vee-folder.c:1322)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x103B0C6D: refresh_folders_exec (mail-send-recv.c:922)
==25866==    by 0x103AAFAB: mail_msg_proxy (mail-mt.c:447)
==25866==    by 0x7749BE3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==25866==    by 0x7747465: g_thread_create_proxy (gthread.c:1897)
==25866==    by 0x3198006D5A: start_thread (pthread_create.c:301)
==25866==    by 0x3197CE3E1C: clone (clone.S:115)
==25866== 
==25866== Invalid read of size 1
==25866==    at 0x4A07314: __GI_strlen (mc_replace_strmem.c:284)
==25866==    by 0x773F329: g_strconcat (gstrfuncs.c:322)
==25866==    by 0x770CF66: g_error_add_prefix (gerror.c:318)
==25866==    by 0x770D4B9: g_prefix_error (gerror.c:352)
==25866==    by 0x1B779DAA: imapx_connect_to_server (camel-imapx-server.c:2844)
==25866==    by 0x1B77A0DF: camel_imapx_server_connect (camel-imapx-server.c:3019)
==25866==    by 0x1B77C033: camel_imapx_conn_manager_get_connection (camel-imapx-conn-manager.c:259)
==25866==    by 0x1B76E5FD: camel_imapx_store_get_server (camel-imapx-store.c:204)
==25866==    by 0x1B76FB8C: imapx_synchronize_sync (camel-imapx-folder.c:469)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x66D7145: vee_folder_synchronize_sync (camel-vee-folder.c:1316)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==  Address 0x2542c331 is 1 bytes inside a block of size 76 free'd
==25866==    at 0x4A05D72: free (vg_replace_malloc.c:325)
==25866==    by 0x770D1B1: g_error_free (gerror.c:139)
==25866==    by 0x770D531: g_propagate_prefixed_error (gerror.c:377)
==25866==    by 0x66D7127: vee_folder_synchronize_sync (camel-vee-folder.c:1322)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x103B0C6D: refresh_folders_exec (mail-send-recv.c:922)
==25866==    by 0x103AAFAB: mail_msg_proxy (mail-mt.c:447)
==25866==    by 0x7749BE3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==25866==    by 0x7747465: g_thread_create_proxy (gthread.c:1897)
==25866==    by 0x3198006D5A: start_thread (pthread_create.c:301)
==25866==    by 0x3197CE3E1C: clone (clone.S:115)
==25866== 
==25866== Invalid read of size 1
==25866==    at 0x4A08207: stpcpy (mc_replace_strmem.c:573)
==25866==    by 0x773F3AC: g_strconcat (gstrfuncs.c:335)
==25866==    by 0x770CF66: g_error_add_prefix (gerror.c:318)
==25866==    by 0x770D4B9: g_prefix_error (gerror.c:352)
==25866==    by 0x1B779DAA: imapx_connect_to_server (camel-imapx-server.c:2844)
==25866==    by 0x1B77A0DF: camel_imapx_server_connect (camel-imapx-server.c:3019)
==25866==    by 0x1B77C033: camel_imapx_conn_manager_get_connection (camel-imapx-conn-manager.c:259)
==25866==    by 0x1B76E5FD: camel_imapx_store_get_server (camel-imapx-store.c:204)
==25866==    by 0x1B76FB8C: imapx_synchronize_sync (camel-imapx-folder.c:469)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x66D7145: vee_folder_synchronize_sync (camel-vee-folder.c:1316)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==  Address 0x2542c330 is 0 bytes inside a block of size 76 free'd
==25866==    at 0x4A05D72: free (vg_replace_malloc.c:325)
==25866==    by 0x770D1B1: g_error_free (gerror.c:139)
==25866==    by 0x770D531: g_propagate_prefixed_error (gerror.c:377)
==25866==    by 0x66D7127: vee_folder_synchronize_sync (camel-vee-folder.c:1322)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x103B0C6D: refresh_folders_exec (mail-send-recv.c:922)
==25866==    by 0x103AAFAB: mail_msg_proxy (mail-mt.c:447)
==25866==    by 0x7749BE3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==25866==    by 0x7747465: g_thread_create_proxy (gthread.c:1897)
==25866==    by 0x3198006D5A: start_thread (pthread_create.c:301)
==25866==    by 0x3197CE3E1C: clone (clone.S:115)
==25866== 
==25866== Invalid read of size 1
==25866==    at 0x4A08222: stpcpy (mc_replace_strmem.c:573)
==25866==    by 0x773F3AC: g_strconcat (gstrfuncs.c:335)
==25866==    by 0x770CF66: g_error_add_prefix (gerror.c:318)
==25866==    by 0x770D4B9: g_prefix_error (gerror.c:352)
==25866==    by 0x1B779DAA: imapx_connect_to_server (camel-imapx-server.c:2844)
==25866==    by 0x1B77A0DF: camel_imapx_server_connect (camel-imapx-server.c:3019)
==25866==    by 0x1B77C033: camel_imapx_conn_manager_get_connection (camel-imapx-conn-manager.c:259)
==25866==    by 0x1B76E5FD: camel_imapx_store_get_server (camel-imapx-store.c:204)
==25866==    by 0x1B76FB8C: imapx_synchronize_sync (camel-imapx-folder.c:469)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x66D7145: vee_folder_synchronize_sync (camel-vee-folder.c:1316)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==  Address 0x2542c331 is 1 bytes inside a block of size 76 free'd
==25866==    at 0x4A05D72: free (vg_replace_malloc.c:325)
==25866==    by 0x770D1B1: g_error_free (gerror.c:139)
==25866==    by 0x770D531: g_propagate_prefixed_error (gerror.c:377)
==25866==    by 0x66D7127: vee_folder_synchronize_sync (camel-vee-folder.c:1322)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x103B0C6D: refresh_folders_exec (mail-send-recv.c:922)
==25866==    by 0x103AAFAB: mail_msg_proxy (mail-mt.c:447)
==25866==    by 0x7749BE3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==25866==    by 0x7747465: g_thread_create_proxy (gthread.c:1897)
==25866==    by 0x3198006D5A: start_thread (pthread_create.c:301)
==25866==    by 0x3197CE3E1C: clone (clone.S:115)
==25866== 
==25866== Invalid write of size 8
==25866==    at 0x770CF6A: g_error_add_prefix (gerror.c:318)
==25866==    by 0x770D4B9: g_prefix_error (gerror.c:352)
==25866==    by 0x1B779DAA: imapx_connect_to_server (camel-imapx-server.c:2844)
==25866==    by 0x1B77A0DF: camel_imapx_server_connect (camel-imapx-server.c:3019)
==25866==    by 0x1B77C033: camel_imapx_conn_manager_get_connection (camel-imapx-conn-manager.c:259)
==25866==    by 0x1B76E5FD: camel_imapx_store_get_server (camel-imapx-store.c:204)
==25866==    by 0x1B76FB8C: imapx_synchronize_sync (camel-imapx-folder.c:469)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x66D7145: vee_folder_synchronize_sync (camel-vee-folder.c:1316)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x103B0C6D: refresh_folders_exec (mail-send-recv.c:922)
==25866==    by 0x103AAFAB: mail_msg_proxy (mail-mt.c:447)
==25866==  Address 0x25ce5080 is 16 bytes inside a block of size 24 free'd
==25866==    at 0x4A05D72: free (vg_replace_malloc.c:325)
==25866==    by 0x770D531: g_propagate_prefixed_error (gerror.c:377)
==25866==    by 0x66D7127: vee_folder_synchronize_sync (camel-vee-folder.c:1322)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x103B0C6D: refresh_folders_exec (mail-send-recv.c:922)
==25866==    by 0x103AAFAB: mail_msg_proxy (mail-mt.c:447)
==25866==    by 0x7749BE3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==25866==    by 0x7747465: g_thread_create_proxy (gthread.c:1897)
==25866==    by 0x3198006D5A: start_thread (pthread_create.c:301)
==25866==    by 0x3197CE3E1C: clone (clone.S:115)
==25866== 
==25866== Invalid free() / delete / delete[]
==25866==    at 0x4A05D72: free (vg_replace_malloc.c:325)
==25866==    by 0x770CF72: g_error_add_prefix (gerror.c:319)
==25866==    by 0x770D4B9: g_prefix_error (gerror.c:352)
==25866==    by 0x1B779DAA: imapx_connect_to_server (camel-imapx-server.c:2844)
==25866==    by 0x1B77A0DF: camel_imapx_server_connect (camel-imapx-server.c:3019)
==25866==    by 0x1B77C033: camel_imapx_conn_manager_get_connection (camel-imapx-conn-manager.c:259)
==25866==    by 0x1B76E5FD: camel_imapx_store_get_server (camel-imapx-store.c:204)
==25866==    by 0x1B76FB8C: imapx_synchronize_sync (camel-imapx-folder.c:469)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x66D7145: vee_folder_synchronize_sync (camel-vee-folder.c:1316)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x103B0C6D: refresh_folders_exec (mail-send-recv.c:922)
==25866==  Address 0x2542c330 is 0 bytes inside a block of size 76 free'd
==25866==    at 0x4A05D72: free (vg_replace_malloc.c:325)
==25866==    by 0x770D1B1: g_error_free (gerror.c:139)
==25866==    by 0x770D531: g_propagate_prefixed_error (gerror.c:377)
==25866==    by 0x66D7127: vee_folder_synchronize_sync (camel-vee-folder.c:1322)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x103B0C6D: refresh_folders_exec (mail-send-recv.c:922)
==25866==    by 0x103AAFAB: mail_msg_proxy (mail-mt.c:447)
==25866==    by 0x7749BE3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==25866==    by 0x7747465: g_thread_create_proxy (gthread.c:1897)
==25866==    by 0x3198006D5A: start_thread (pthread_create.c:301)
==25866==    by 0x3197CE3E1C: clone (clone.S:115)
==25866== 
==25866== Invalid read of size 8
==25866==    at 0x66D715B: vee_folder_synchronize_sync (camel-vee-folder.c:1317)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x103B0C6D: refresh_folders_exec (mail-send-recv.c:922)
==25866==    by 0x103AAFAB: mail_msg_proxy (mail-mt.c:447)
==25866==    by 0x7749BE3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==25866==    by 0x7747465: g_thread_create_proxy (gthread.c:1897)
==25866==    by 0x3198006D5A: start_thread (pthread_create.c:301)
==25866==    by 0x3197CE3E1C: clone (clone.S:115)
==25866==  Address 0x25ce5080 is 16 bytes inside a block of size 24 free'd
==25866==    at 0x4A05D72: free (vg_replace_malloc.c:325)
==25866==    by 0x770D531: g_propagate_prefixed_error (gerror.c:377)
==25866==    by 0x66D7127: vee_folder_synchronize_sync (camel-vee-folder.c:1322)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x103B0C6D: refresh_folders_exec (mail-send-recv.c:922)
==25866==    by 0x103AAFAB: mail_msg_proxy (mail-mt.c:447)
==25866==    by 0x7749BE3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==25866==    by 0x7747465: g_thread_create_proxy (gthread.c:1897)
==25866==    by 0x3198006D5A: start_thread (pthread_create.c:301)
==25866==    by 0x3197CE3E1C: clone (clone.S:115)
==25866== 
==25866== Invalid read of size 8
==25866==    at 0x66D70F3: vee_folder_synchronize_sync (camel-vee-folder.c:1321)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x103B0C6D: refresh_folders_exec (mail-send-recv.c:922)
==25866==    by 0x103AAFAB: mail_msg_proxy (mail-mt.c:447)
==25866==    by 0x7749BE3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==25866==    by 0x7747465: g_thread_create_proxy (gthread.c:1897)
==25866==    by 0x3198006D5A: start_thread (pthread_create.c:301)
==25866==    by 0x3197CE3E1C: clone (clone.S:115)
==25866==  Address 0x25ce5080 is 16 bytes inside a block of size 24 free'd
==25866==    at 0x4A05D72: free (vg_replace_malloc.c:325)
==25866==    by 0x770D531: g_propagate_prefixed_error (gerror.c:377)
==25866==    by 0x66D7127: vee_folder_synchronize_sync (camel-vee-folder.c:1322)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x103B0C6D: refresh_folders_exec (mail-send-recv.c:922)
==25866==    by 0x103AAFAB: mail_msg_proxy (mail-mt.c:447)
==25866==    by 0x7749BE3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==25866==    by 0x7747465: g_thread_create_proxy (gthread.c:1897)
==25866==    by 0x3198006D5A: start_thread (pthread_create.c:301)
==25866==    by 0x3197CE3E1C: clone (clone.S:115)
==25866== 

(evolution:25866): camel-WARNING **: Could not connect to linux.intel.com (port imaps): Could not connect to linux.intel.com (port imaps): Connection reset by peer
==25866== Invalid read of size 8
==25866==    at 0x770D1A9: g_error_free (gerror.c:139)
==25866==    by 0x770D531: g_propagate_prefixed_error (gerror.c:377)
==25866==    by 0x66D7127: vee_folder_synchronize_sync (camel-vee-folder.c:1322)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x103B0C6D: refresh_folders_exec (mail-send-recv.c:922)
==25866==    by 0x103AAFAB: mail_msg_proxy (mail-mt.c:447)
==25866==    by 0x7749BE3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==25866==    by 0x7747465: g_thread_create_proxy (gthread.c:1897)
==25866==    by 0x3198006D5A: start_thread (pthread_create.c:301)
==25866==    by 0x3197CE3E1C: clone (clone.S:115)
==25866==  Address 0x25ce5080 is 16 bytes inside a block of size 24 free'd
==25866==    at 0x4A05D72: free (vg_replace_malloc.c:325)
==25866==    by 0x770D531: g_propagate_prefixed_error (gerror.c:377)
==25866==    by 0x66D7127: vee_folder_synchronize_sync (camel-vee-folder.c:1322)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x103B0C6D: refresh_folders_exec (mail-send-recv.c:922)
==25866==    by 0x103AAFAB: mail_msg_proxy (mail-mt.c:447)
==25866==    by 0x7749BE3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==25866==    by 0x7747465: g_thread_create_proxy (gthread.c:1897)
==25866==    by 0x3198006D5A: start_thread (pthread_create.c:301)
==25866==    by 0x3197CE3E1C: clone (clone.S:115)
==25866== 
==25866== Invalid free() / delete / delete[]
==25866==    at 0x4A05D72: free (vg_replace_malloc.c:325)
==25866==    by 0x770D531: g_propagate_prefixed_error (gerror.c:377)
==25866==    by 0x66D7127: vee_folder_synchronize_sync (camel-vee-folder.c:1322)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x103B0C6D: refresh_folders_exec (mail-send-recv.c:922)
==25866==    by 0x103AAFAB: mail_msg_proxy (mail-mt.c:447)
==25866==    by 0x7749BE3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==25866==    by 0x7747465: g_thread_create_proxy (gthread.c:1897)
==25866==    by 0x3198006D5A: start_thread (pthread_create.c:301)
==25866==    by 0x3197CE3E1C: clone (clone.S:115)
==25866==  Address 0x25ce5070 is 0 bytes inside a block of size 24 free'd
==25866==    at 0x4A05D72: free (vg_replace_malloc.c:325)
==25866==    by 0x770D531: g_propagate_prefixed_error (gerror.c:377)
==25866==    by 0x66D7127: vee_folder_synchronize_sync (camel-vee-folder.c:1322)
==25866==    by 0x66ABDE2: camel_folder_synchronize_sync (camel-folder.c:3408)
==25866==    by 0x103B0C6D: refresh_folders_exec (mail-send-recv.c:922)
==25866==    by 0x103AAFAB: mail_msg_proxy (mail-mt.c:447)
==25866==    by 0x7749BE3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==25866==    by 0x7747465: g_thread_create_proxy (gthread.c:1897)
==25866==    by 0x3198006D5A: start_thread (pthread_create.c:301)
==25866==    by 0x3197CE3E1C: clone (clone.S:115)
==25866== 

(evolution:25866): camel-CRITICAL **: camel_tcp_stream_connect: assertion `error == NULL || *error == NULL' failed

(evolution:25866): camel-WARNING **: Could not connect to linux.intel.com (port imaps): Could not connect to linux.intel.com (port imaps): Could not connect to linux.intel.com (port imaps): Connection reset by peer

(evolution:25866): camel-WARNING **: Could not connect to linux.intel.com (port imaps): Connection reset by peer

(evolution:25866): camel-CRITICAL **: camel_tcp_stream_connect: assertion `error == NULL || *error == NULL' failed

(evolution:25866): camel-WARNING **: Could not connect to linux.intel.com (port imaps): Could not connect to linux.intel.com (port imaps): Connection reset by peer

(evolution:25866): camel-CRITICAL **: camel_tcp_stream_connect: assertion `error == NULL || *error == NULL' failed

(evolution:25866): camel-WARNING **: Could not connect to linux.intel.com (port imaps): Could not connect to linux.intel.com (port imaps): Could not connect to linux.intel.com (port imaps): Connection reset by peer






Comment 2


David Woodhouse





          2010-10-16 22:49:07 UTC
        



I'm seeing this in 2.32 too (in the Fedora 14 packages):

(gdb) bt




+
Trace
    224178






    

  • 
#0
g_param_spec_get_redirect_target

    
                at gparam.c
                  line
                  565

    

    • 

  • 
#1
pspec_list_remove_overridden_and_redirected

    
                at gparam.c
                  line
                  1176

    

    • 

  • 
#2
g_param_spec_pool_list

    
                at gparam.c
                  line
                  1292

    

    • 

  • 
#3
g_object_class_list_properties

    
                at gobject.c
                  line
                  774

    

    • 

  • 
#4
object_state_write

    
                at camel-object.c
                  line
                  269

    

    • 

  • 
#5
camel_object_state_write

    
                at camel-object.c
                  line
                  453

    

    • 

  • 
#6
vee_folder_sync

    
                at camel-vee-folder.c
                  line
                  1087

    

    • 

  • 
#7
camel_folder_sync

    
                at camel-folder.c
                  line
                  1124

    

    • 

  • 
#8
refresh_folders_exec

    
                at mail-send-recv.c
                  line
                  911

    

    • 

  • 
#9
mail_msg_proxy

    
                at mail-mt.c
                  line
                  469

    

    • 

  • 
#10
g_thread_pool_thread_proxy

    
                at gthreadpool.c
                  line
                  319

    

    • 

  • 
#11
g_thread_create_proxy

    
                at gthread.c
                  line
                  1897

    

    • 

  • 
#12
start_thread

    
                at pthread_create.c
                  line
                  301

    

    • 

  • 
#13
clone

    
                at ../sysdeps/unix/sysv/linux/x86_64/clone.S
                  line
                  115

    

    • 













Comment 3


David Woodhouse





          2010-10-20 22:28:32 UTC
        



The documentation for g_propagate_prefixed_error() says that '*@dest must be %NULL'. But it looks like vee_folder_synchronize_sync() will call that function over and over again with the same @dest.






Comment 4


David Woodhouse





          2010-10-20 22:43:03 UTC
        




*** This bug has been marked as a duplicate of bug 631290 ***