After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 603199 - Crash in html_object_split()
Crash in html_object_split()
Status: RESOLVED WONTFIX
Product: GtkHtml
Classification: Other
Component: Rendering
4.2.x
Other All
: Normal critical
: ---
Assigned To: gtkhtml-maintainers
gtkhtml-maintainers
gnome[unmaintained]
Depends on:
Blocks:
 
 
Reported: 2009-11-28 03:55 UTC by kiran
Modified: 2014-12-02 01:05 UTC
See Also:
GNOME target: ---
GNOME version: 2.27/2.28



Description kiran 2009-11-28 03:55:41 UTC
What were you doing when the application crashed?



Distribution: Debian squeeze/sid
Gnome Release: 2.28.0 2009-10-27 (Debian)
BugBuddy Version: 2.28.0

System: Linux 2.6.31-1-686 #1 SMP Sun Nov 15 20:39:33 UTC 2009 i686
X Vendor: The X.Org Foundation
X Vendor Release: 10605000
Selinux: No
Accessibility: Disabled
GTK+ Theme: Clearlooks
Icon Theme: Amaranth
GTK+ Modules: gnomebreakpad, canberra-gtk-module

Memory status: size: 241369088 vsize: 241369088 resident: 85135360 share: 26853376 rss: 85135360 rss_rlim: 18446744073709551615
CPU usage: start_time: 1259333112 rtime: 15208 utime: 10413 stime: 4795 cutime:29 cstime: 29 timeout: 0 it_real_value: 0 frequency: 100

Backtrace was generated from '/usr/bin/evolution'

[Thread debugging using libthread_db enabled]
[New Thread 0xb3daeb70 (LWP 4263)]
[New Thread 0xad92cb70 (LWP 4262)]
[New Thread 0xae1fab70 (LWP 3955)]
[New Thread 0xb01feb70 (LWP 3954)]
[New Thread 0xb1efbb70 (LWP 3945)]
[New Thread 0xb36feb70 (LWP 3941)]
[New Thread 0xb4850b70 (LWP 3937)]
[New Thread 0xb5051b70 (LWP 3936)]
0xb77e3424 in __kernel_vsyscall ()

Thread 1 (Thread 0xb5a4c760 (LWP 3926))

  • #0 __kernel_vsyscall
  • #1 waitpid
    from /lib/i686/cmov/libpthread.so.0
  • #2 IA__g_spawn_sync
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/glib/gspawn.c line 386
  • #3 IA__g_spawn_command_line_sync
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/glib/gspawn.c line 700
  • #4 ??
    from /usr/lib/gtk-2.0/modules/libgnomebreakpad.so
  • #5 <signal handler called>
  • #6 __kernel_vsyscall
  • #7 raise
    from /lib/i686/cmov/libc.so.6
  • #8 abort
    from /lib/i686/cmov/libc.so.6
  • #9 IA__g_assertion_message
  • #10 IA__g_assertion_message_expr
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/glib/gtestutils.c line 1313
  • #11 html_object_split
    at htmlobject.c line 939
  • #12 split
    at htmlclue.c line 247
  • #13 html_object_split
    at htmlobject.c line 941
  • #14 split
    at htmlclue.c line 247
  • #15 split
    at htmlclueflow.c line 345
  • #16 html_object_split
    at htmlobject.c line 941
  • #17 split
    at htmltable.c line 534
  • #18 html_object_split
    at htmlobject.c line 941
  • #19 split
    at htmlclue.c line 247
  • #20 html_object_split
    at htmlobject.c line 941
  • #21 split
    at htmlclue.c line 247
  • #22 split
    at htmlclueflow.c line 345
  • #23 html_object_split
    at htmlobject.c line 941
  • #24 split
    at htmlobject.c line 201
  • #25 split
    at htmltable.c line 440
  • #26 html_object_split
    at htmlobject.c line 941
  • #27 split_and_add_empty_texts
    at htmlengine-edit-cut-and-paste.c line 369
  • #28 insert_object_do
    at htmlengine-edit-cut-and-paste.c line 897
  • #29 insert_object_for_undo
    at htmlengine-edit-cut-and-paste.c line 1128
  • #30 delete_undo_action
    at htmlengine-edit-cut-and-paste.c line 442
  • #31 action_do_and_destroy_undo
    at htmlundo.c line 160
  • #32 html_undo_do_undo
    at htmlundo.c line 188
  • #33 undo_step_action
    at htmlundo.c line 531
  • #34 action_do_and_destroy_undo
    at htmlundo.c line 160
  • #35 html_undo_do_undo
    at htmlundo.c line 188
  • #36 html_engine_undo
    at htmlengine-edit.c line 71
  • #37 gtk_html_undo
    at gtkhtml.c line 4627
  • #38 command
    at gtkhtml.c line 5187
  • #39 gtk_html_command
    at gtkhtml.c line 6009
  • #40 action_undo_cb
    at gtkhtml-editor-actions.c line 1150
  • #41 IA__g_cclosure_marshal_VOID__VOID
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/gobject/gmarshal.c line 77
  • #42 IA__g_closure_invoke
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/gobject/gclosure.c line 767
  • #43 signal_emit_unlocked_R
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/gobject/gsignal.c line 3247
  • #44 IA__g_signal_emit_valist
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/gobject/gsignal.c line 2980
  • #45 IA__g_signal_emit
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/gobject/gsignal.c line 3037
  • #46 _gtk_action_emit_activate
    at /build/buildd-gtk+2.0_2.18.3-1-i386-YrT8XN/gtk+2.0-2.18.3/gtk/gtkaction.c line 727
  • #47 closure_accel_activate
    at /build/buildd-gtk+2.0_2.18.3-1-i386-YrT8XN/gtk+2.0-2.18.3/gtk/gtkaction.c line 1647
  • #48 IA__g_closure_invoke
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/gobject/gclosure.c line 767
  • #49 signal_emit_unlocked_R
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/gobject/gsignal.c line 3247
  • #50 IA__g_signal_emit_valist
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/gobject/gsignal.c line 2990
  • #51 IA__g_signal_emit
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/gobject/gsignal.c line 3037
  • #52 IA__gtk_accel_group_activate
    at /build/buildd-gtk+2.0_2.18.3-1-i386-YrT8XN/gtk+2.0-2.18.3/gtk/gtkaccelgroup.c line 860
  • #53 IA__gtk_accel_groups_activate
    at /build/buildd-gtk+2.0_2.18.3-1-i386-YrT8XN/gtk+2.0-2.18.3/gtk/gtkaccelgroup.c line 897
  • #54 IA__gtk_window_activate_key
    at /build/buildd-gtk+2.0_2.18.3-1-i386-YrT8XN/gtk+2.0-2.18.3/gtk/gtkwindow.c line 8269
  • #55 gtk_window_key_press_event
    at /build/buildd-gtk+2.0_2.18.3-1-i386-YrT8XN/gtk+2.0-2.18.3/gtk/gtkwindow.c line 5170
  • #56 ??
    from /usr/lib/evolution/2.28/libevolution-mail-shared.so.0
  • #57 _gtk_marshal_BOOLEAN__BOXED
    at /build/buildd-gtk+2.0_2.18.3-1-i386-YrT8XN/gtk+2.0-2.18.3/gtk/gtkmarshalers.c line 84
  • #58 g_type_class_meta_marshal
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/gobject/gclosure.c line 878
  • #59 IA__g_closure_invoke
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/gobject/gclosure.c line 767
  • #60 signal_emit_unlocked_R
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/gobject/gsignal.c line 3285
  • #61 IA__g_signal_emit_valist
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/gobject/gsignal.c line 2990
  • #62 IA__g_signal_emit
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/gobject/gsignal.c line 3037
  • #63 gtk_widget_event_internal
    at /build/buildd-gtk+2.0_2.18.3-1-i386-YrT8XN/gtk+2.0-2.18.3/gtk/gtkwidget.c line 4767
  • #64 IA__gtk_propagate_event
    at /build/buildd-gtk+2.0_2.18.3-1-i386-YrT8XN/gtk+2.0-2.18.3/gtk/gtkmain.c line 2391
  • #65 IA__gtk_main_do_event
    at /build/buildd-gtk+2.0_2.18.3-1-i386-YrT8XN/gtk+2.0-2.18.3/gtk/gtkmain.c line 1622
  • #66 gdk_event_dispatch
    at /build/buildd-gtk+2.0_2.18.3-1-i386-YrT8XN/gtk+2.0-2.18.3/gdk/x11/gdkevents-x11.c line 2369
  • #67 g_main_dispatch
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/glib/gmain.c line 1960
  • #68 IA__g_main_context_dispatch
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/glib/gmain.c line 2513
  • #69 g_main_context_iterate
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/glib/gmain.c line 2591
  • #70 IA__g_main_loop_run
    at /build/buildd-glib2.0_2.22.2-2-i386-R8GTDn/glib2.0-2.22.2/glib/gmain.c line 2799
  • #71 bonobo_main
    from /usr/lib/libbonobo-2.so.0
  • #72 ??
  • #73 __libc_start_main
    from /lib/i686/cmov/libc.so.6
  • #74 ??
A debugging session is active.

	Inferior 1 [process 3926] will be detached.

Quit anyway? (y or n) [answered Y; input not from terminal]


---- Critical and fatal warnings logged during execution ----

** evolution **: atk_object_set_name: assertion `name != NULL' failed 
** evolution **: atk_object_set_name: assertion `name != NULL' failed 
** evolution **: atk_object_set_name: assertion `name != NULL' failed 
** evolution **: atk_object_set_name: assertion `name != NULL' failed 
** evolution **: atk_object_set_name: assertion `name != NULL' failed 
** evolution **: atk_object_set_name: assertion `name != NULL' failed 
** evolution **: atk_object_set_name: assertion `name != NULL' failed 
** evolution **: atk_object_set_name: assertion `name != NULL' failed 
** evolution **: atk_object_set_name: assertion `name != NULL' failed 
** evolution **: atk_object_set_name: assertion `name != NULL' failed 
** evolution **: atk_object_set_name: assertion `name != NULL' failed 
** evolution **: atk_object_set_name: assertion `name != NULL' failed 
** evolution **: atk_object_set_name: assertion `name != NULL' failed 
** evolution **: atk_object_set_name: assertion `name != NULL' failed 
** evolution **: atk_object_set_name: assertion `name != NULL' failed 


----------- .xsession-errors ---------------------
(firefox-bin:7554): Gdk-WARNING **: XID collision, trouble ahead
(firefox-bin:7554): Gdk-WARNING **: XID collision, trouble ahead
(firefox-bin:7554): Gdk-WARNING **: XID collision, trouble ahead
(firefox-bin:7554): Gdk-WARNING **: XID collision, trouble ahead
(firefox-bin:7554): Gdk-WARNING **: XID collision, trouble ahead
(firefox-bin:7554): Gdk-WARNING **: XID collision, trouble ahead
**
gtkhtml:ERROR:htmlobject.c:939:html_object_split: assertion failed: (self)
restoring draft flag 'text/plain'
--------------------------------------------------
Comment 1 Matthew Barnes 2010-03-24 12:51:26 UTC
Good stack trace but no reproducer.  GtkHTML issue.
Comment 2 Milan Crha 2011-10-27 06:21:56 UTC
Similar downstream bug report from evolution 3.2.1 (gtkhtml 4.2.1):
https://bugzilla.redhat.com/show_bug.cgi?id=749339

libreport version: 2.0.6
abrt_version:   2.0.4.981
backtrace_rating: 4
cmdline:        evolution
comment:        It was receiving emails from an imap server. Nothing fancy just
downloading and checking for new email once in a while.
crash_function: split
executable:     /usr/bin/evolution
kernel:         3.1.0-0.rc10.git0.1.fc16.x86_64
reason:         Process /usr/bin/evolution was killed by signal 11 (SIGSEGV)
time:           Wed Oct 26 20:17:23 2011

Thread 1 (Thread 0x7fdd6f2d1980 (LWP 7900))

  • #0 split
    at htmlclue.c line 259
  • #1 split_and_add_empty_texts
    at htmlengine-edit-cut-and-paste.c line 390
  • #2 insert_object_do
    at htmlengine-edit-cut-and-paste.c line 962
  • #3 insert_object_for_undo
    at htmlengine-edit-cut-and-paste.c line 1215
  • #4 insert_object
    at htmlengine-edit-cut-and-paste.c line 1233
  • #5 html_engine_insert_text_with_extra_attributes
    at htmlengine-edit-cut-and-paste.c line 1545
  • #6 html_engine_paste_text_with_extra_attributes
    at htmlengine-edit-cut-and-paste.c line 1583
  • #7 gtk_html_im_commit_cb
    at gtkhtml.c line 3338
  • #8 g_closure_invoke
    at gclosure.c line 774
  • #9 signal_emit_unlocked_R
    at gsignal.c line 3272
  • #10 g_signal_emit_valist
    at gsignal.c line 3003
  • #11 g_signal_emit_by_name
    at gsignal.c line 3097
  • #12 g_closure_invoke
    at gclosure.c line 774
  • #13 signal_emit_unlocked_R
    at gsignal.c line 3272
  • #14 g_signal_emit_valist
    at gsignal.c line 3003
  • #15 g_signal_emit
    at gsignal.c line 3060
  • #16 _ibus_context_commit_text_cb
    at ibusimcontext.c line 1076
  • #17 g_closure_invoke
    at gclosure.c line 774
  • #18 signal_emit_unlocked_R
    at gsignal.c line 3272
  • #19 g_signal_emit_valist
    at gsignal.c line 3003
  • #20 g_signal_emit
    at gsignal.c line 3060
  • #21 ibus_input_context_g_signal
    at ibusinputcontext.c line 614
  • #22 ffi_call_unix64
    at ../src/x86/unix64.S line 75
  • #23 ffi_call
    at ../src/x86/ffi64.c line 486
  • #24 g_cclosure_marshal_generic
    at gclosure.c line 1189
  • #25 g_closure_invoke
    at gclosure.c line 774
  • #26 signal_emit_unlocked_R
    at gsignal.c line 3310
  • #27 g_signal_emit_valist
    at gsignal.c line 3003
  • #28 g_signal_emit
    at gsignal.c line 3060
  • #29 on_signal_received
    at gdbusproxy.c line 922
  • #30 emit_signal_instance_in_idle_cb
    at gdbusconnection.c line 3452
  • #31 g_main_dispatch
    at gmain.c line 2425
  • #32 g_main_context_dispatch
    at gmain.c line 2995
  • #33 g_main_context_iterate
    at gmain.c line 3073
  • #34 g_main_loop_run
    at gmain.c line 3281
  • #35 gtk_main
    at gtkmain.c line 1362
  • #36 main
    at main.c line 696

Comment 3 Pierre-Yves C. 2011-10-27 07:14:33 UTC
I'll have to check but I believe I was able to reproduce it on my machine yesterday.
Comment 4 André Klapper 2014-12-02 01:05:44 UTC
Since version 3.6, Evolution uses WebKit instead of GtkHtml for displaying messages. (And for completeness, Evolution 3.14 is planned to use WebKit also for composing and editing messages so GtkHtml will not receive any fixes anymore.)

Hence I am closing this GtkHtml rendering bug report.
We are sorry that your request was not handled in time when it was reported but unfortunately manpower is very limited (and does not allow testing every single reported issue separately again either).

Please feel free to reopen this report (and move it to the "Evolution" product and the "Mail" component) if the problem described in this bug report still happens in a recent supported Evolution version which uses WebKit (the current stable Evolution version is 3.12).