Bug 596896 – gtkhtml causes evolution segfault when pressing backspace/delete in email composer

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 596896 - gtkhtml causes evolution segfault when pressing backspace/delete in email composer


Summary:	gtkhtml causes evolution segfault when pressing backspace/delete in email com...


Status:	RESOLVED DUPLICATE of bug 596282

Product:	GtkHtml
Classification:	Other
Component:	Editing
Version:	3.28.x
Hardware:	Other Linux

Importance:	Normal critical
Target Milestone:	---
Assigned To:	Srinivasa Ragavan
QA Contact:	Srinivasa Ragavan

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2009-09-30 17:03 UTC by kyle
Modified:	2009-10-05 11:35 UTC

See Also:
GNOME target:	---
GNOME version:	---

Attachments
BT (13.94 KB, text/plain) 2009-10-01 18:44 UTC, kyle	Details

Description kyle 2009-09-30 17:03:42 UTC

Evolution 2.28
gtkhtml 3.28
libgtkhtml 2.11.1
gtk+ 2.18.0
glib 2.18.1



Program received signal SIGSEGV, Segmentation fault.

+ Trace 217976

Thread 3057817392 (LWP 3855)

#0 editor_method_event
from /opt/gnome/lib/libgtkhtml-editor.so.0
#1 gtk_html_editor_event
from /opt/gnome/lib/libgtkhtml-3.14.so.19
#2 delete_object
from /opt/gnome/lib/libgtkhtml-3.14.so.19
#3 html_engine_delete
from /opt/gnome/lib/libgtkhtml-3.14.so.19
#4 html_text_backspace
from /opt/gnome/lib/libgtkhtml-3.14.so.19
#5 html_object_backspace
from /opt/gnome/lib/libgtkhtml-3.14.so.19
#6 html_engine_delete_n
from /opt/gnome/lib/libgtkhtml-3.14.so.19
#7 delete_one
from /opt/gnome/lib/libgtkhtml-3.14.so.19
#8 command
from /opt/gnome/lib/libgtkhtml-3.14.so.19
#9 html_g_cclosure_marshal_BOOLEAN__ENUM
from /opt/gnome/lib/libgtkhtml-3.14.so.19
#10 g_type_class_meta_marshal
from /opt/gnome/lib/libgobject-2.0.so.0
#11 g_closure_invoke
from /opt/gnome/lib/libgobject-2.0.so.0
#12 signal_emit_unlocked_R
from /opt/gnome/lib/libgobject-2.0.so.0
#13 gtk_binding_entry_activate
from /opt/gnome/lib/libgtk-x11-2.0.so.0
#14 binding_match_activate
from /opt/gnome/lib/libgtk-x11-2.0.so.0
#15 gtk_bindings_activate_list
from /opt/gnome/lib/libgtk-x11-2.0.so.0
#16 gtk_bindings_activate_event
from /opt/gnome/lib/libgtk-x11-2.0.so.0
#17 key_press_event
from /opt/gnome/lib/libgtkhtml-3.14.so.19
#18 _gtk_marshal_BOOLEAN__BOXED
from /opt/gnome/lib/libgtk-x11-2.0.so.0
#19 g_type_class_meta_marshal
from /opt/gnome/lib/libgobject-2.0.so.0
#20 g_closure_invoke
from /opt/gnome/lib/libgobject-2.0.so.0
#21 signal_emit_unlocked_R
from /opt/gnome/lib/libgobject-2.0.so.0
#22 g_signal_emit_valist
from /opt/gnome/lib/libgobject-2.0.so.0
#23 g_signal_emit
from /opt/gnome/lib/libgobject-2.0.so.0
#24 gtk_widget_event_internal
from /opt/gnome/lib/libgtk-x11-2.0.so.0
#25 gtk_window_propagate_key_event
from /opt/gnome/lib/libgtk-x11-2.0.so.0
#26 gtk_window_key_press_event
from /opt/gnome/lib/libgtk-x11-2.0.so.0
#27 msg_composer_key_press_event
from /opt/gnome/lib/evolution/2.28/libevolution-mail-shared.so.0
#28 _gtk_marshal_BOOLEAN__BOXED
from /opt/gnome/lib/libgtk-x11-2.0.so.0
#29 g_type_class_meta_marshal
from /opt/gnome/lib/libgobject-2.0.so.0
#30 g_closure_invoke
from /opt/gnome/lib/libgobject-2.0.so.0
#31 signal_emit_unlocked_R
from /opt/gnome/lib/libgobject-2.0.so.0
#32 g_signal_emit_valist
from /opt/gnome/lib/libgobject-2.0.so.0
#33 g_signal_emit
from /opt/gnome/lib/libgobject-2.0.so.0
#34 gtk_widget_event_internal
from /opt/gnome/lib/libgtk-x11-2.0.so.0
#35 gtk_propagate_event
from /opt/gnome/lib/libgtk-x11-2.0.so.0
#36 gtk_main_do_event
from /opt/gnome/lib/libgtk-x11-2.0.so.0
#37 gdk_event_dispatch
from /opt/gnome/lib/libgdk-x11-2.0.so.0
#38 g_main_context_dispatch
from /opt/gnome/lib/libglib-2.0.so.0
#39 g_main_context_iterate
from /opt/gnome/lib/libglib-2.0.so.0
#40 g_main_loop_run
from /opt/gnome/lib/libglib-2.0.so.0
#41 bonobo_main
from /opt/gnome/lib/libbonobo-2.so.0
#42 main

Comment 1 kyle 2009-10-01 18:44:57 UTC

Created attachment 144527 [details]
BT

Comment 2 kyle 2009-10-01 18:46:30 UTC

See full backtrace above:

Evolution 2.28
gtkhtml 3.28
gtk+ 2.18.0
glib 2.22.0

Test case:
Open Evolution, compose new message.  Enter some text in message body, then backspace or delete some text.

Expected behavior:
Some text disappears

Actual behavior:
Segfault.  Backtrace attached.

Comment 3 Fryderyk Dziarmagowski 2009-10-02 15:28:21 UTC

I can confirm it, 2.28.0 crashes same way when I press backspace.
Steps to reproduce: create new mail, write something, press backspace,
voila segmentation fault!

Comment 4 Fryderyk Dziarmagowski 2009-10-03 10:53:23 UTC

After downgrading to 2.26.3 (evolutinon/gtkhtml) the issue is still present.
Smells like gtk+ 2.18 breakage.

Comment 5 Fryderyk Dziarmagowski 2009-10-03 17:27:23 UTC

gtkhtml-editor-test backtrace:

Program received signal SIGSEGV, Segmentation fault.
editor_method_event (html=0x8068b48, event=GTK_HTML_EDITOR_EVENT_DELETE, args=0x0, user_data=0x8074098)
    at gtkhtml-editor.c:383
383	gtkhtml-editor.c: No such file or directory.
	in gtkhtml-editor.c
(gdb) thread apply all bt

+ Trace 218025

Thread 1 (Thread 0xb71c7b40 (LWP 2631))

#0 editor_method_event
at gtkhtml-editor.c line 383
#1 gtk_html_editor_event
at gtkhtml.c line 5952
#2 delete_object
at htmlengine-edit-cut-and-paste.c line 798
#3 html_engine_delete
at htmlengine-edit-cut-and-paste.c line 1880
#4 html_text_backspace
at htmltext.c line 2789
#5 html_object_backspace
at htmlobject.c line 1602
#6 html_engine_delete_n
at htmlengine-edit-cut-and-paste.c line 1551
#7 delete_one
at gtkhtml.c line 5003
#8 command
at gtkhtml.c line 5205
#9 html_g_cclosure_marshal_BOOLEAN__ENUM
at htmlmarshal.c line 122
#10 g_type_class_meta_marshal
at gclosure.c line 878
#11 IA__g_closure_invoke
at gclosure.c line 767
#12 signal_emit_unlocked_R
at gsignal.c line 3285
#13 gtk_binding_entry_activate
at gtkbindings.c line 537
#14 binding_match_activate
at gtkbindings.c line 1123
#15 gtk_bindings_activate_list
at gtkbindings.c line 1268
#16 IA__gtk_bindings_activate_event
at gtkbindings.c line 1361
#17 key_press_event
at gtkhtml.c line 1052
#18 _gtk_marshal_BOOLEAN__BOXED
at gtkmarshalers.c line 84
#19 g_type_class_meta_marshal
at gclosure.c line 878
#20 IA__g_closure_invoke
at gclosure.c line 767
#21 signal_emit_unlocked_R
at gsignal.c line 3285
#22 IA__g_signal_emit_valist
at gsignal.c line 2990
#23 IA__g_signal_emit
at gsignal.c line 3037
#24 gtk_widget_event_internal
at gtkwidget.c line 4767
#25 IA__gtk_window_propagate_key_event
at gtkwindow.c line 5144
#26 gtk_window_key_press_event
at gtkwindow.c line 5174
#27 _gtk_marshal_BOOLEAN__BOXED
at gtkmarshalers.c line 84
#28 g_type_class_meta_marshal
at gclosure.c line 878
#29 IA__g_closure_invoke
at gclosure.c line 767
#30 signal_emit_unlocked_R
at gsignal.c line 3285
#31 IA__g_signal_emit_valist
at gsignal.c line 2990
#32 IA__g_signal_emit
at gsignal.c line 3037
#33 gtk_widget_event_internal
at gtkwidget.c line 4767
#34 IA__gtk_propagate_event
at gtkmain.c line 2378
#35 IA__gtk_main_do_event
at gtkmain.c line 1609
#36 gdk_event_dispatch
at gdkevents-x11.c line 2369
#37 g_main_dispatch
at gmain.c line 1960
#38 IA__g_main_context_dispatch
at gmain.c line 2513
#39 g_main_context_iterate
at gmain.c line 2591
#40 IA__g_main_loop_run
at gmain.c line 2799
#41 IA__gtk_main
at gtkmain.c line 1205
#42 main
at main.c line 413

Comment 6 Akhil Laddha 2009-10-05 11:35:53 UTC

Thanks for the bug report. This particular bug has already been reported into our bug tracking system, but please feel free to report any further bugs you find.

*** This bug has been marked as a duplicate of bug 596282 ***