GNOME Bugzilla – Bug 243328
invalid reads in backend_died code
Last modified: 2013-09-10 14:03:10 UTC
Please fill in this template when reporting a bug, unless you know what you are doing. Description of Problem: Running evo in valgrind, got invalid reads when I did --force-shutdown before the app was completely up. Steps to reproduce the problem: 1. Start evo under valgrind. 2. At *just the right moment* (left as an exercise to the reader, run evo --force-shutdown 3. Monitor the valgrind spewage for invalid reads Actual Results: Invalid reads Expected Results: Clean exit How often does this happen? Not sure. Almost certainly a race bug. Additional Information: I'm not sure how much of a problem this is, so I'm filing it minor. Feel free to upgrade if it proves a more serious problem. ==17219== Invalid read of size 4 ==17219== at 0x45E9F24C: backend_died (e-addressbook-view.c:1338) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF8B3: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x45E9B866: backend_died (e-addressbook-model.c:289) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF8B3: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x458A8909: backend_died_cb (e-book.c:416) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF8B3: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40270629: ping_component_callback (e-component-listener.c:148) ==17219== by 0x41037A4B: g_timeout_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41034F64: g_main_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41035F97: g_main_context_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x410362AC: g_main_context_iterate (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41036A1E: g_main_loop_run (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x805E268: sleep_with_g_main_loop (e-component-registry.c:85) ==17219== by 0x805E2BB: wait_for_corba_object_to_die (e-component-registry.c:103) ==17219== by 0x805E3AE: component_free (e-component-registry.c:150) ==17219== by 0x4102B1D5: g_hash_table_foreach (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x805E6EB: impl_dispose (e-component-registry.c:322) ==17219== by 0x40FDD5AE: g_object_last_unref (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x807E3A1: e_shell_unregister_all (e-shell.c:2057) ==17219== by 0x808B0E6: no_views_left_cb (main.c:156) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF8B3: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x807C6A7: notify_no_views_left_idle_cb (e-shell.c:970) ==17219== by 0x41037C82: g_idle_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41034F64: g_main_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41035F97: g_main_context_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x410362AC: g_main_context_iterate (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41036A1E: g_main_loop_run (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x405DC247: bonobo_main (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x808BC21: main (main.c:636) ==17219== by 0x420158F6: __libc_start_main (in /lib/i686/libc-2.3.2.so) ==17219== by 0x805C1DC: (within /usr/bin/evolution-1.3) ==17219== Address 0x46A07DB4 is 108 bytes inside a block of size 152 free'd ==17219== at 0x4015F5A5: free (vg_clientfuncs.c:185) ==17219== by 0x4103AEA3: g_free (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x40FF462E: g_type_free_instance (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDD5A4: g_object_last_unref (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDD70F: g_object_run_dispose (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40C99738: gtk_object_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D61837: gtk_widget_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C4DAC9: gtk_frame_forall (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C20F03: gtk_container_foreach (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C1FD75: gtk_container_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB466: g_type_class_meta_marshal (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF540: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40CC0FDE: gtk_signal_emit (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C99827: gtk_object_dispose (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D695CE: gtk_widget_dispose (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40FDD707: g_object_run_dispose (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40C99738: gtk_object_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D61837: gtk_widget_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40BF3A04: gtk_box_forall (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C20F03: gtk_container_foreach (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C1FD75: gtk_container_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB466: g_type_class_meta_marshal (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF540: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40CC0FDE: gtk_signal_emit (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C99827: gtk_object_dispose (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D695CE: gtk_widget_dispose (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40FDD707: g_object_run_dispose (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40C99738: gtk_object_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D61837: gtk_widget_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40571888: bonobo_control_destroy (in /usr/lib/libbonoboui-2.so.0.0.0) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB466: g_type_class_meta_marshal (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF368: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x405E0A5A: bonobo_object_destroy (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x405E0F91: bonobo_object_unref (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x405E1351: impl_Bonobo_Unknown_unref (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x4068F230: Bonobo_Unknown_unref (in /usr/lib/libbonobo-activation.so.4.0.0) ==17219== by 0x405E12E6: bonobo_object_release_unref (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x4056FB42: bonobo_control_frame_bind_to_control (in /usr/lib/libbonoboui-2.so.0.0.0) ==17219== by 0x4056EC11: bonobo_control_frame_dispose (in /usr/lib/libbonoboui-2.so.0.0.0) ==17219== by 0x40FDD5AE: g_object_last_unref (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== ==17219== Invalid read of size 4 ==17219== at 0x40FF84B2: g_type_check_instance_cast (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x45E9F28D: backend_died (e-addressbook-view.c:1342) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF8B3: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x45E9B866: backend_died (e-addressbook-model.c:289) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF8B3: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x458A8909: backend_died_cb (e-book.c:416) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF8B3: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40270629: ping_component_callback (e-component-listener.c:148) ==17219== by 0x41037A4B: g_timeout_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41034F64: g_main_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41035F97: g_main_context_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x410362AC: g_main_context_iterate (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41036A1E: g_main_loop_run (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x805E268: sleep_with_g_main_loop (e-component-registry.c:85) ==17219== by 0x805E2BB: wait_for_corba_object_to_die (e-component-registry.c:103) ==17219== by 0x805E3AE: component_free (e-component-registry.c:150) ==17219== by 0x4102B1D5: g_hash_table_foreach (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x805E6EB: impl_dispose (e-component-registry.c:322) ==17219== by 0x40FDD5AE: g_object_last_unref (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x807E3A1: e_shell_unregister_all (e-shell.c:2057) ==17219== by 0x808B0E6: no_views_left_cb (main.c:156) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF8B3: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x807C6A7: notify_no_views_left_idle_cb (e-shell.c:970) ==17219== by 0x41037C82: g_idle_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41034F64: g_main_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41035F97: g_main_context_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x410362AC: g_main_context_iterate (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41036A1E: g_main_loop_run (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x405DC247: bonobo_main (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x808BC21: main (main.c:636) ==17219== by 0x420158F6: __libc_start_main (in /lib/i686/libc-2.3.2.so) ==17219== by 0x805C1DC: (within /usr/bin/evolution-1.3) ==17219== Address 0x46A07D48 is 0 bytes inside a block of size 152 free'd ==17219== at 0x4015F5A5: free (vg_clientfuncs.c:185) ==17219== by 0x4103AEA3: g_free (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x40FF462E: g_type_free_instance (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDD5A4: g_object_last_unref (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDD70F: g_object_run_dispose (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40C99738: gtk_object_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D61837: gtk_widget_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C4DAC9: gtk_frame_forall (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C20F03: gtk_container_foreach (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C1FD75: gtk_container_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB466: g_type_class_meta_marshal (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF540: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40CC0FDE: gtk_signal_emit (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C99827: gtk_object_dispose (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D695CE: gtk_widget_dispose (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40FDD707: g_object_run_dispose (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40C99738: gtk_object_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D61837: gtk_widget_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40BF3A04: gtk_box_forall (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C20F03: gtk_container_foreach (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C1FD75: gtk_container_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB466: g_type_class_meta_marshal (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF540: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40CC0FDE: gtk_signal_emit (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C99827: gtk_object_dispose (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D695CE: gtk_widget_dispose (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40FDD707: g_object_run_dispose (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40C99738: gtk_object_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D61837: gtk_widget_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40571888: bonobo_control_destroy (in /usr/lib/libbonoboui-2.so.0.0.0) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB466: g_type_class_meta_marshal (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF368: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x405E0A5A: bonobo_object_destroy (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x405E0F91: bonobo_object_unref (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x405E1351: impl_Bonobo_Unknown_unref (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x4068F230: Bonobo_Unknown_unref (in /usr/lib/libbonobo-activation.so.4.0.0) ==17219== by 0x405E12E6: bonobo_object_release_unref (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x4056FB42: bonobo_control_frame_bind_to_control (in /usr/lib/libbonoboui-2.so.0.0.0) ==17219== by 0x4056EC11: bonobo_control_frame_dispose (in /usr/lib/libbonoboui-2.so.0.0.0) ==17219== by 0x40FDD5AE: g_object_last_unref (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== ==17219== Invalid read of size 4 ==17219== at 0x40D6840F: gtk_widget_get_toplevel (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x45E9F296: backend_died (e-addressbook-view.c:1342) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF8B3: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x45E9B866: backend_died (e-addressbook-model.c:289) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF8B3: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x458A8909: backend_died_cb (e-book.c:416) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF8B3: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40270629: ping_component_callback (e-component-listener.c:148) ==17219== by 0x41037A4B: g_timeout_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41034F64: g_main_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41035F97: g_main_context_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x410362AC: g_main_context_iterate (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41036A1E: g_main_loop_run (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x805E268: sleep_with_g_main_loop (e-component-registry.c:85) ==17219== by 0x805E2BB: wait_for_corba_object_to_die (e-component-registry.c:103) ==17219== by 0x805E3AE: component_free (e-component-registry.c:150) ==17219== by 0x4102B1D5: g_hash_table_foreach (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x805E6EB: impl_dispose (e-component-registry.c:322) ==17219== by 0x40FDD5AE: g_object_last_unref (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x807E3A1: e_shell_unregister_all (e-shell.c:2057) ==17219== by 0x808B0E6: no_views_left_cb (main.c:156) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF8B3: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x807C6A7: notify_no_views_left_idle_cb (e-shell.c:970) ==17219== by 0x41037C82: g_idle_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41034F64: g_main_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41035F97: g_main_context_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x410362AC: g_main_context_iterate (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41036A1E: g_main_loop_run (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x405DC247: bonobo_main (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x808BC21: main (main.c:636) ==17219== by 0x420158F6: __libc_start_main (in /lib/i686/libc-2.3.2.so) ==17219== by 0x805C1DC: (within /usr/bin/evolution-1.3) ==17219== Address 0x46A07D48 is 0 bytes inside a block of size 152 free'd ==17219== at 0x4015F5A5: free (vg_clientfuncs.c:185) ==17219== by 0x4103AEA3: g_free (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x40FF462E: g_type_free_instance (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDD5A4: g_object_last_unref (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDD70F: g_object_run_dispose (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40C99738: gtk_object_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D61837: gtk_widget_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C4DAC9: gtk_frame_forall (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C20F03: gtk_container_foreach (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C1FD75: gtk_container_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB466: g_type_class_meta_marshal (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF540: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40CC0FDE: gtk_signal_emit (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C99827: gtk_object_dispose (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D695CE: gtk_widget_dispose (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40FDD707: g_object_run_dispose (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40C99738: gtk_object_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D61837: gtk_widget_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40BF3A04: gtk_box_forall (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C20F03: gtk_container_foreach (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C1FD75: gtk_container_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB466: g_type_class_meta_marshal (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF540: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40CC0FDE: gtk_signal_emit (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C99827: gtk_object_dispose (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D695CE: gtk_widget_dispose (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40FDD707: g_object_run_dispose (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40C99738: gtk_object_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D61837: gtk_widget_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40571888: bonobo_control_destroy (in /usr/lib/libbonoboui-2.so.0.0.0) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB466: g_type_class_meta_marshal (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF368: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x405E0A5A: bonobo_object_destroy (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x405E0F91: bonobo_object_unref (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x405E1351: impl_Bonobo_Unknown_unref (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x4068F230: Bonobo_Unknown_unref (in /usr/lib/libbonobo-activation.so.4.0.0) ==17219== by 0x405E12E6: bonobo_object_release_unref (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x4056FB42: bonobo_control_frame_bind_to_control (in /usr/lib/libbonoboui-2.so.0.0.0) ==17219== by 0x4056EC11: bonobo_control_frame_dispose (in /usr/lib/libbonoboui-2.so.0.0.0) ==17219== by 0x40FDD5AE: g_object_last_unref (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== ==17219== Invalid read of size 4 ==17219== at 0x40FF8044: g_type_check_instance_is_a (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40D68424: gtk_widget_get_toplevel (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x45E9F296: backend_died (e-addressbook-view.c:1342) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF8B3: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x45E9B866: backend_died (e-addressbook-model.c:289) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF8B3: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x458A8909: backend_died_cb (e-book.c:416) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF8B3: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40270629: ping_component_callback (e-component-listener.c:148) ==17219== by 0x41037A4B: g_timeout_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41034F64: g_main_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41035F97: g_main_context_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x410362AC: g_main_context_iterate (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41036A1E: g_main_loop_run (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x805E268: sleep_with_g_main_loop (e-component-registry.c:85) ==17219== by 0x805E2BB: wait_for_corba_object_to_die (e-component-registry.c:103) ==17219== by 0x805E3AE: component_free (e-component-registry.c:150) ==17219== by 0x4102B1D5: g_hash_table_foreach (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x805E6EB: impl_dispose (e-component-registry.c:322) ==17219== by 0x40FDD5AE: g_object_last_unref (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x807E3A1: e_shell_unregister_all (e-shell.c:2057) ==17219== by 0x808B0E6: no_views_left_cb (main.c:156) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF8B3: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x807C6A7: notify_no_views_left_idle_cb (e-shell.c:970) ==17219== by 0x41037C82: g_idle_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41034F64: g_main_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41035F97: g_main_context_dispatch (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x410362AC: g_main_context_iterate (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x41036A1E: g_main_loop_run (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x405DC247: bonobo_main (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x808BC21: main (main.c:636) ==17219== by 0x420158F6: __libc_start_main (in /lib/i686/libc-2.3.2.so) ==17219== by 0x805C1DC: (within /usr/bin/evolution-1.3) ==17219== Address 0x46A07D48 is 0 bytes inside a block of size 152 free'd ==17219== at 0x4015F5A5: free (vg_clientfuncs.c:185) ==17219== by 0x4103AEA3: g_free (in /usr/lib/libglib-2.0.so.0.0.6) ==17219== by 0x40FF462E: g_type_free_instance (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDD5A4: g_object_last_unref (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDD70F: g_object_run_dispose (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40C99738: gtk_object_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D61837: gtk_widget_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C4DAC9: gtk_frame_forall (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C20F03: gtk_container_foreach (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C1FD75: gtk_container_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB466: g_type_class_meta_marshal (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF540: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40CC0FDE: gtk_signal_emit (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C99827: gtk_object_dispose (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D695CE: gtk_widget_dispose (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40FDD707: g_object_run_dispose (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40C99738: gtk_object_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D61837: gtk_widget_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40BF3A04: gtk_box_forall (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C20F03: gtk_container_foreach (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C1FD75: gtk_container_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB466: g_type_class_meta_marshal (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF540: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40CC0FDE: gtk_signal_emit (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40C99827: gtk_object_dispose (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D695CE: gtk_widget_dispose (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40FDD707: g_object_run_dispose (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40C99738: gtk_object_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40D61837: gtk_widget_destroy (in /usr/lib/libgtk-x11-2.0.so.0.0.6) ==17219== by 0x40571888: bonobo_control_destroy (in /usr/lib/libbonoboui-2.so.0.0.0) ==17219== by 0x40FEFD00: g_cclosure_marshal_VOID__VOID (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB466: g_type_class_meta_marshal (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FDB0BF: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEF368: signal_emit_unlocked_R (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEE887: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x40FEEAF3: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.0.6) ==17219== by 0x405E0A5A: bonobo_object_destroy (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x405E0F91: bonobo_object_unref (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x405E1351: impl_Bonobo_Unknown_unref (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x4068F230: Bonobo_Unknown_unref (in /usr/lib/libbonobo-activation.so.4.0.0) ==17219== by 0x405E12E6: bonobo_object_release_unref (in /usr/lib/libbonobo-2.so.0.0.0) ==17219== by 0x4056FB42: bonobo_control_frame_bind_to_control (in /usr/lib/libbonoboui-2.so.0.0.0) ==17219== by 0x4056EC11: bonobo_control_frame_dispose (in /usr/lib/libbonoboui-2.so.0.0.0) ==17219== by 0x40FDD5AE: g_object_last_unref (in /usr/lib/libgobject-2.0.so.0.0.6)
This was fixed a while back