GNOME Bugzilla – Bug 379799
Frequent crashes (5-6 daily) on a variety of mail reading operations
Last modified: 2013-09-13 00:50:33 UTC
Steps to reproduce: The crash is non deterministic but triggers often. Typically - when marking emails as read by clicking on the little envelope in the message list view - when marking emails important by clicking the column with the red exclaimation and circle in the message list view - when deleting emails using the del key in the message list view etc. Stack trace: Distribution: Fedora Core release 6 (Rawhide) Gnome Release: 2.17.2 2006-11-07 (Red Hat, Inc) BugBuddy Version: 2.16.0 System: Linux 2.6.18-1.2798.fc6 #1 SMP Mon Oct 16 14:39:22 EDT 2006 x86_64 X Vendor: The X.Org Foundation X Vendor Release: 70101000 Selinux: No Accessibility: Enabled ----------- .xsession-errors --------------------- (evolution:20777): GLib-GObject-WARNING **: IA__g_object_weak_unref: couldn't find weak ref 0x2aaaae410010(0x226f8a0) end from FAM server connection GTK Accessibility Module initialized Bonobo accessibility support initialized (evolution:20777): e-table-CRITICAL **: ect_check: assertion `(gaec->cell_view->ecell != NULL)' failed (evolution:20777): e-table-CRITICAL **: ect_check: assertion `(gaec->cell_view->ecell != NULL)' failed GTK Accessibility Module initialized Bonobo accessibility support initialized GTK Accessibility Module initialized Bonobo accessibility support initialized ** (bug-buddy:20990): WARNING **: Couldn't load icon for Open Folder -------------------------------------------------- Memory status: size: 641826816 vsize: 641826816 resident: 99254272 share: 22851584 rss: 99254272 rss_rlim: -1 CPU usage: start_time: 1164639517 rtime: 1456 utime: 1323 stime: 133 cutime:1 cstime: 2 timeout: 0 it_real_value: 0 frequency: 100 Backtrace was generated from '/usr/bin/evolution' Using host libthread_db library "/lib64/libthread_db.so.1". [Thread debugging using libthread_db enabled] [New Thread 46912496364784 (LWP 20777)] [New Thread 1115699520 (LWP 20956)] [New Thread 1074006336 (LWP 20910)] [New Thread 1094719808 (LWP 20796)] 0x0000003ad0e0d7ff in waitpid () from /lib64/libpthread.so.0
+ Trace 89754
Thread 1 (Thread 46912496364784 (LWP 20777))
Other information: While non deterministic, I am averaging 5-6 crashes a day on a mailbox with typically hundreds of new messages a day where each one needs to me marked read/important/deleted. This is an x86_64 box. ldd $(which evolution) libeshell.so.0 => /usr/lib64/evolution/2.10/libeshell.so.0 (0x0000003bdd000000) libemiscwidgets.so.0 => /usr/lib64/evolution/2.10/libemiscwidgets.so.0 (0x0000003bdbc00000) libetimezonedialog.so.0 => /usr/lib64/evolution/2.10/libetimezonedialog.so.0 (0x0000003bdd400000) libhal.so.1 => /usr/lib64/libhal.so.1 (0x0000003ae2000000) libnotify.so.1 => /usr/lib64/libnotify.so.1 (0x0000003bda400000) libetext.so.0 => /usr/lib64/evolution/2.10/libetext.so.0 (0x0000003bdc000000) libetable.so.0 => /usr/lib64/evolution/2.10/libetable.so.0 (0x0000003bdc400000) libevolution-widgets-a11y.so.0 => /usr/lib64/evolution/2.10/libevolution-widgets-a11y.so.0 (0x0000003bda800000) libevolution-a11y.so.0 => /usr/lib64/evolution/2.10/libevolution-a11y.so.0 (0x0000003bdcc00000) libeutil.so.0 => /usr/lib64/evolution/2.10/libeutil.so.0 (0x0000003bdb800000) libcamel-1.2.so.0 => /usr/lib64/libcamel-1.2.so.0 (0x000000353a600000) libcamel-provider-1.2.so.8 => /usr/lib64/libcamel-provider-1.2.so.8 (0x000000353be00000) libedataserverui-1.2.so.8 => /usr/lib64/libedataserverui-1.2.so.8 (0x0000003bdb400000) libebook-1.2.so.9 => /usr/lib64/libebook-1.2.so.9 (0x000000353a200000) libplds4.so => /usr/lib64/libplds4.so (0x0000003ae2800000) libplc4.so => /usr/lib64/libplc4.so (0x0000003ae2400000) libnspr4.so => /usr/lib64/libnspr4.so (0x0000003ae2c00000) libpthread.so.0 => /lib64/libpthread.so.0 (0x0000003ad0e00000) libecal-1.2.so.7 => /usr/lib64/libecal-1.2.so.7 (0x0000003538a00000) libedataserver-1.2.so.9 => /usr/lib64/libedataserver-1.2.so.9 (0x0000003539a00000) libgtkhtml-3.8.so.15 => /usr/lib64/libgtkhtml-3.8.so.15 (0x0000003bdc800000) libgnomeui-2.so.0 => /usr/lib64/libgnomeui-2.so.0 (0x0000003bd9400000) libSM.so.6 => /usr/lib64/libSM.so.6 (0x0000003ada000000) libICE.so.6 => /usr/lib64/libICE.so.6 (0x0000003ad9c00000) libgnomeprintui-2-2.so.0 => /usr/lib64/libgnomeprintui-2-2.so.0 (0x0000003bdac00000) libglade-2.0.so.0 => /usr/lib64/libglade-2.0.so.0 (0x0000003bda000000) libbonoboui-2.so.0 => /usr/lib64/libbonoboui-2.so.0 (0x0000003bd9c00000) libgnome-keyring.so.0 => /usr/lib64/libgnome-keyring.so.0 (0x0000003537600000) libgnome-2.so.0 => /usr/lib64/libgnome-2.so.0 (0x0000003537e00000) libpopt.so.0 => /usr/lib64/libpopt.so.0 (0x0000003adc000000) libbonobo-2.so.0 => /usr/lib64/libbonobo-2.so.0 (0x0000003536a00000) libgnomevfs-2.so.0 => /usr/lib64/libgnomevfs-2.so.0 (0x0000003535e00000) libbonobo-activation.so.4 => /usr/lib64/libbonobo-activation.so.4 (0x0000003536e00000) libgconf-2.so.4 => /usr/lib64/libgconf-2.so.4 (0x0000003535a00000) libORBit-2.so.0 => /usr/lib64/libORBit-2.so.0 (0x0000003535600000) libgthread-2.0.so.0 => /lib64/libgthread-2.0.so.0 (0x0000003534e00000) libgnomeprint-2-2.so.0 => /usr/lib64/libgnomeprint-2-2.so.0 (0x0000003539600000) libz.so.1 => /usr/lib64/libz.so.1 (0x0000003ad1200000) libgnomecanvas-2.so.0 => /usr/lib64/libgnomecanvas-2.so.0 (0x0000003bd9800000) libart_lgpl_2.so.2 => /usr/lib64/libart_lgpl_2.so.2 (0x0000003ae0400000) libpangoft2-1.0.so.0 => /usr/lib64/libpangoft2-1.0.so.0 (0x0000003533600000) libgtk-x11-2.0.so.0 => /usr/lib64/libgtk-x11-2.0.so.0 (0x0000003bd8600000) libxml2.so.2 => /usr/lib64/libxml2.so.2 (0x0000003ada400000) libgdk-x11-2.0.so.0 => /usr/lib64/libgdk-x11-2.0.so.0 (0x0000003bd9000000) libatk-1.0.so.0 => /usr/lib64/libatk-1.0.so.0 (0x0000003534600000) libgdk_pixbuf-2.0.so.0 => /usr/lib64/libgdk_pixbuf-2.0.so.0 (0x0000003bd8c00000) libm.so.6 => /lib64/libm.so.6 (0x0000003ad0600000) libpangocairo-1.0.so.0 => /usr/lib64/libpangocairo-1.0.so.0 (0x0000003533e00000) libpango-1.0.so.0 => /usr/lib64/libpango-1.0.so.0 (0x0000003534a00000) libcairo.so.2 => /usr/lib64/libcairo.so.2 (0x0000003532c00000) libgobject-2.0.so.0 => /lib64/libgobject-2.0.so.0 (0x0000003532400000) libgmodule-2.0.so.0 => /lib64/libgmodule-2.0.so.0 (0x0000003532800000) libdl.so.2 => /lib64/libdl.so.2 (0x0000003ad0a00000) libnm_glib.so.0 => /usr/lib64/libnm_glib.so.0 (0x0000003539200000) libdbus-glib-1.so.2 => /usr/lib64/libdbus-glib-1.so.2 (0x0000003535200000) libdbus-1.so.3 => /lib64/libdbus-1.so.3 (0x0000003adb000000) libglib-2.0.so.0 => /lib64/libglib-2.0.so.0 (0x0000003532000000) libc.so.6 => /lib64/libc.so.6 (0x0000003ad0200000) libssl3.so => /usr/lib64/libssl3.so (0x0000003ae3c00000) libsmime3.so => /usr/lib64/libsmime3.so (0x0000003ae4800000) libnss3.so => /usr/lib64/libnss3.so (0x0000003ae3800000) libkrb5.so.3 => /usr/lib64/libkrb5.so.3 (0x0000003ad9400000) libk5crypto.so.3 => /usr/lib64/libk5crypto.so.3 (0x0000003ad8c00000) libcom_err.so.2 => /lib64/libcom_err.so.2 (0x0000003ad8400000) libgssapi_krb5.so.2 => /usr/lib64/libgssapi_krb5.so.2 (0x0000003ad9800000) /lib64/ld-linux-x86-64.so.2 (0x0000003acf200000) libdb-4.3.so => /lib64/libdb-4.3.so (0x0000003ae4400000) libgailutil.so.18 => /usr/lib64/libgailutil.so.18 (0x0000003bdb000000) libjpeg.so.62 => /usr/lib64/libjpeg.so.62 (0x0000003adbc00000) libX11.so.6 => /usr/lib64/libX11.so.6 (0x0000003ad2200000) libesd.so.0 => /usr/lib64/libesd.so.0 (0x0000003adfc00000) libaudiofile.so.0 => /usr/lib64/libaudiofile.so.0 (0x0000003addc00000) libORBitCosNaming-2.so.0 => /usr/lib64/libORBitCosNaming-2.so.0 (0x0000003536600000) libssl.so.6 => /lib64/libssl.so.6 (0x0000003ada800000) libcrypto.so.6 => /lib64/libcrypto.so.6 (0x0000003acf600000) libavahi-glib.so.1 => /usr/lib64/libavahi-glib.so.1 (0x0000003536200000) libavahi-common.so.3 => /usr/lib64/libavahi-common.so.3 (0x0000003adec00000) libavahi-client.so.3 => /usr/lib64/libavahi-client.so.3 (0x0000003ade000000) libresolv.so.2 => /lib64/libresolv.so.2 (0x0000003ad8800000) libselinux.so.1 => /lib64/libselinux.so.1 (0x0000003acfa00000) libutil.so.1 => /lib64/libutil.so.1 (0x0000003add800000) librt.so.1 => /lib64/librt.so.1 (0x0000003ad1600000) libfontconfig.so.1 => /usr/lib64/libfontconfig.so.1 (0x0000003ad3e00000) libfreetype.so.6 => /usr/lib64/libfreetype.so.6 (0x0000003ad3a00000) libXext.so.6 => /usr/lib64/libXext.so.6 (0x0000003ad2e00000) libXrender.so.1 => /usr/lib64/libXrender.so.1 (0x0000003ad4600000) libXinerama.so.1 => /usr/lib64/libXinerama.so.1 (0x0000003ad7c00000) libXi.so.6 => /usr/lib64/libXi.so.6 (0x0000003ad7800000) libXrandr.so.2 => /usr/lib64/libXrandr.so.2 (0x0000003ad7400000) libXcursor.so.1 => /usr/lib64/libXcursor.so.1 (0x0000003ad6c00000) libXfixes.so.3 => /usr/lib64/libXfixes.so.3 (0x0000003ad4e00000) libpng12.so.0 => /usr/lib64/libpng12.so.0 (0x0000003ad4200000) libnsl.so.1 => /lib64/libnsl.so.1 (0x0000003ad8000000) libcap.so.1 => /lib64/libcap.so.1 (0x0000003adb800000) libsoftokn3.so => /usr/lib64/libsoftokn3.so (0x0000003ae4000000) libkrb5support.so.0 => /usr/lib64/libkrb5support.so.0 (0x0000003ad9000000) libXau.so.6 => /usr/lib64/libXau.so.6 (0x0000003ad2600000) libXdmcp.so.6 => /usr/lib64/libXdmcp.so.6 (0x0000003ad1a00000) libasound.so.2 => /lib64/libasound.so.2 (0x0000003add400000) libsepol.so.1 => /lib64/libsepol.so.1 (0x0000003acfe00000) libexpat.so.0 => /lib64/libexpat.so.0 (0x0000003ad3600000) gail-1.9.3-1.fc7 at-spi-1.7.13-1.fc7 gtk2-2.10.6-5.fc7
Can not reproduce this. Can you use gdb when evolution crash and tell me the value of gaec->cell_view->ecell?
Sure, will do the next time it crashes. Which frame/function will that be in?
It is in ect_check at gal-a11y-e-cell-text.c:69
From my latest crash:
+ Trace 90012
Cannot access memory at address 0x50 (gdb) p gaec->cell_view Cannot access memory at address 0x50 (gdb) p gaec $1 = <value optimized out> (gdb) p *gaec Cannot access memory at address 0x0 Was this helpful or should I recompile with -O0?
Yes, that would be helpful:) I guess gaec is a right pointer, but cell_view is not right.
stack tract with -O0 and gdb inspection of gaec->cell_view->ecell below: (gdb) fr 4
+ Trace 90490
Thread 1 (Thread 46912496364448 (LWP 21947))
Thank you very much. gaec->cell_view link to a wrong address(or maybe cell_view has gone). I will make patch.
*** Bug 375064 has been marked as a duplicate of this bug. ***
Update (Evolution 2.9.4): This crash is still present and just as frequent. The stack trace is the same.
*** This bug has been marked as a duplicate of 330728 ***