After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 332729 - invalid write with outspring from e-config.c
invalid write with outspring from e-config.c
Status: RESOLVED FIXED
Product: evolution
Classification: Applications
Component: general
2.8.x (obsolete)
Other Linux
: Normal normal
: ---
Assigned To: Milan Crha
Evolution QA team
Depends on:
Blocks:
 
 
Reported: 2006-02-27 12:31 UTC by Kjartan Maraas
Modified: 2008-11-27 13:00 UTC
See Also:
GNOME target: ---
GNOME version: 2.15/2.16

Attachments
proposed evo patch (950 bytes, patch)
2008-11-26 15:57 UTC, Milan Crha 		committed Details | Review

Description Kjartan Maraas 2006-02-27 12:31:01 UTC 
Valgrind reports:

==2674== Invalid write of size 4
==2674==    at 0x4A999FA: gtk_widget_destroyed (gtkwidget.c:2021)
==2674==    by 0x4E376E8: g_cclosure_marshal_VOID__VOID (gmarshal.c:77)
==2674==    by 0x4E29EFC: g_closure_invoke (gclosure.c:490)
==2674==    by 0x4E3B90A: signal_emit_unlocked_R (gsignal.c:2438)
==2674==    by 0x4E3CD82: g_signal_emit_valist (gsignal.c:2197)
==2674==    by 0x4E3D028: g_signal_emit (gsignal.c:2241)
==2674==    by 0x49CBD10: gtk_object_dispose (gtkobject.c:403)
==2674==    by 0x4AA1CC0: gtk_widget_dispose (gtkwidget.c:6653)
==2674==    by 0x4E2C18A: g_object_unref (gobject.c:1734)
==2674==    by 0x4AA5E80: gtk_widget_unparent (gtkwidget.c:1967)
==2674==    by 0x49C4A0A: gtk_notebook_real_remove (gtknotebook.c:2676)
==2674==    by 0x49C4C30: gtk_notebook_destroy (gtknotebook.c:900)
==2674==    by 0x4E376E8: g_cclosure_marshal_VOID__VOID (gmarshal.c:77)
==2674==    by 0x4E28738: g_type_class_meta_marshal (gclosure.c:567)
==2674==    by 0x4E29FEB: g_closure_invoke (gclosure.c:490)
==2674==    by 0x4E3C0BE: signal_emit_unlocked_R (gsignal.c:2554)
==2674==    by 0x4E3CD82: g_signal_emit_valist (gsignal.c:2197)
==2674==    by 0x4E3D028: g_signal_emit (gsignal.c:2241)
==2674==    by 0x49CBD10: gtk_object_dispose (gtkobject.c:403)
==2674==    by 0x4AA1CC0: gtk_widget_dispose (gtkwidget.c:6653)
==2674==    by 0x4E2C65F: g_object_run_dispose (gobject.c:571)
==2674==    by 0x49CBB7D: gtk_object_destroy (gtkobject.c:388)
==2674==    by 0x4AA1EA4: gtk_widget_destroy (gtkwidget.c:1995)
==2674==    by 0x48E23AF: gtk_box_forall (gtkbox.c:703)
==2674==    by 0x491CB8A: gtk_container_foreach (gtkcontainer.c:1292)
==2674==    by 0x491D4CF: gtk_container_destroy (gtkcontainer.c:829)
==2674==    by 0x4E376E8: g_cclosure_marshal_VOID__VOID (gmarshal.c:77)
==2674==    by 0x4E28738: g_type_class_meta_marshal (gclosure.c:567)
==2674==    by 0x4E29FEB: g_closure_invoke (gclosure.c:490)
==2674==    by 0x4E3C0BE: signal_emit_unlocked_R (gsignal.c:2554)
==2674==  Address 0x7DCA50C is 20 bytes inside a block of size 32 free'd
==2674==    at 0x4004B6C: free (vg_replace_malloc.c:222)
==2674==    by 0x4E8C060: g_free (gmem.c:187)
==2674==    by 0x41E6DC7: ep_finalise (e-config.c:135)
==2674==    by 0x4E2C22B: g_object_unref (gobject.c:1762)
==2674==    by 0x41E6B7B: ec_widget_destroy (e-config.c:797)
==2674==    by 0x4E376E8: g_cclosure_marshal_VOID__VOID (gmarshal.c:77)
==2674==    by 0x4E29EFC: g_closure_invoke (gclosure.c:490)
==2674==    by 0x4E3B90A: signal_emit_unlocked_R (gsignal.c:2438)
==2674==    by 0x4E3CD82: g_signal_emit_valist (gsignal.c:2197)
==2674==    by 0x4E3D028: g_signal_emit (gsignal.c:2241)
==2674==    by 0x49CBD10: gtk_object_dispose (gtkobject.c:403)
==2674==    by 0x4AA1CC0: gtk_widget_dispose (gtkwidget.c:6653)
==2674==    by 0x4E2C65F: g_object_run_dispose (gobject.c:571)
==2674==    by 0x49CBB7D: gtk_object_destroy (gtkobject.c:388)
==2674==    by 0x4AA1EA4: gtk_widget_destroy (gtkwidget.c:1995)
==2674==    by 0x48E23AF: gtk_box_forall (gtkbox.c:703)
==2674==    by 0x491CB8A: gtk_container_foreach (gtkcontainer.c:1292)
==2674==    by 0x491D4CF: gtk_container_destroy (gtkcontainer.c:829)
==2674==    by 0x4E376E8: g_cclosure_marshal_VOID__VOID (gmarshal.c:77)
==2674==    by 0x4E28738: g_type_class_meta_marshal (gclosure.c:567)
==2674==    by 0x4E29FEB: g_closure_invoke (gclosure.c:490)
==2674==    by 0x4E3C0BE: signal_emit_unlocked_R (gsignal.c:2554)
==2674==    by 0x4E3CD82: g_signal_emit_valist (gsignal.c:2197)
==2674==    by 0x4E3D028: g_signal_emit (gsignal.c:2241)
==2674==    by 0x49CBD10: gtk_object_dispose (gtkobject.c:403)
==2674==    by 0x4AA1CC0: gtk_widget_dispose (gtkwidget.c:6653)
==2674==    by 0x4E2C65F: g_object_run_dispose (gobject.c:571)
==2674==    by 0x49CBB7D: gtk_object_destroy (gtkobject.c:388)
==2674==    by 0x4AA1EA4: gtk_widget_destroy (gtkwidget.c:1995)
==2674==    by 0x48DE85E: gtk_bin_forall (gtkbin.c:166)
Comment 1 Kjartan Maraas 2006-08-22 18:36:47 UTC 
Got this with 2.7.91 too
Comment 2 Matthew Barnes 2008-03-11 00:26:58 UTC 
Bumping version to a stable release.
Comment 3 Milan Crha 2008-11-26 15:57:01 UTC 
Created attachment 123450 [details] [review]
proposed evo patch

for evolution;

Patch is simple, but it took me unbelievable amount of time to find what's going wrong here.
Comment 4 Srinivasa Ragavan 2008-11-27 09:51:47 UTC 
to stable/trunk
Comment 5 Milan Crha 2008-11-27 13:00:46 UTC 
Committed to trunk. Committed revision 36816.
Committed to gnome-2-24. Committed revision 36817.