Bug 621169 – Crash in icalvalue_get_datetime at icalderivedvalue.c:762

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 621169 - Crash in icalvalue_get_datetime at icalderivedvalue.c:762


Summary:	Crash in icalvalue_get_datetime at icalderivedvalue.c:762


Status:	RESOLVED DUPLICATE of bug 628139

Product:	evolution
Classification:	Applications
Component:	Tasks
Version:	3.0.x (obsolete)
Hardware:	Other Linux

Importance:	High critical
Target Milestone:	---
Assigned To:	evolution-calendar-maintainers
QA Contact:	Evolution QA team

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2010-06-10 06:10 UTC by Akhil Laddha
Modified:	2013-09-13 01:10 UTC

See Also:
GNOME target:	---
GNOME version:	2.29/2.30

Description Akhil Laddha 2010-06-10 06:10:16 UTC

evolution 2.31.3

Started evolution in calendar view and it crashed. Before restarting, i was playing with junk mail preferences but closed evolution in calendar view only.

Program received signal SIGSEGV, Segmentation fault.
icalvalue_get_datetime (value=0x0) at icalderivedvalue.c:762
762	icalderivedvalue.c: No such file or directory.
	in icalderivedvalue.c
(gdb) t a a bt

+ Trace 222331

Thread 1 (Thread 0xb62cc860 (LWP 7269))

#0 icalvalue_get_datetime
at icalderivedvalue.c line 762
#1 icalproperty_get_due
at icalderivedproperty.c line 1184
#2 get_due_status
at e-cal-model-tasks.c line 510
#3 ecmt_get_color_for_component
at e-cal-model-tasks.c line 1088
#4 e_cal_model_get_color_for_component
at e-cal-model.c line 2528
#5 get_color
at e-cal-model.c line 521
#6 ecm_value_at
at e-cal-model.c line 675
#7 ecmt_value_at
at e-cal-model-tasks.c line 576
#8 e_table_model_value_at
at e-table-model.c line 127
#9 etss_value_at
at e-table-subset.c line 159
#10 e_table_model_value_at
at e-table-model.c line 127
#11 ect_get_bg_color
at e-cell-text.c line 884
#12 e_cell_get_bg_color
at e-cell.c line 473
#13 eti_get_cell_background_color
at e-table-item.c line 266
#14 eti_draw
at e-table-item.c line 1894
#15 gnome_canvas_group_draw
at gnome-canvas.c line 1676
#16 gnome_canvas_group_draw
at gnome-canvas.c line 1676
#17 gnome_canvas_group_draw
at gnome-canvas.c line 1676
#18 gnome_canvas_paint_rect
at gnome-canvas.c line 2998
#19 gnome_canvas_expose
at gnome-canvas.c line 3053
#20 _gtk_marshal_BOOLEAN__BOXED
at gtkmarshalers.c line 84
#21 g_type_class_meta_marshal
at gclosure.c line 878
#22 IA__g_closure_invoke
at gclosure.c line 767
#23 signal_emit_unlocked_R
at gsignal.c line 3286
#24 IA__g_signal_emit_valist
at gsignal.c line 2991
#25 IA__g_signal_emit
at gsignal.c line 3038
#26 gtk_widget_event_internal
at gtkwidget.c line 4943
#27 IA__gtk_main_do_event
at gtkmain.c line 1583
#28 _gdk_window_process_updates_recurse
at gdkwindow.c line 5181
#29 _gdk_window_process_updates_recurse
at gdkwindow.c line 5154
#30 _gdk_window_process_updates_recurse
at gdkwindow.c line 5154
#31 _gdk_windowing_window_process_updates_recurse
at gdkwindow-x11.c line 5569
#32 gdk_window_process_updates_internal
at gdkwindow.c line 5340
#33 IA__gdk_window_process_all_updates
at gdkwindow.c line 5448
#34 gtk_container_idle_sizer
at gtkcontainer.c line 1353
#35 gdk_threads_dispatch
at gdk.c line 512
#36 g_idle_dispatch
at gmain.c line 4065
#37 g_main_dispatch
at gmain.c line 1960
#38 IA__g_main_context_dispatch
at gmain.c line 2513
#39 g_main_context_iterate
at gmain.c line 2591
#40 IA__g_main_loop_run
at gmain.c line 2799
#41 IA__gtk_main
at gtkmain.c line 1219
#42 main
at main.c line 609
#0 icalvalue_get_datetime
at icalderivedvalue.c line 762
#1 icalproperty_get_due
at icalderivedproperty.c line 1184
#2 get_due_status
at e-cal-model-tasks.c line 510
#3 ecmt_get_color_for_component
at e-cal-model-tasks.c line 1088
#4 e_cal_model_get_color_for_component
at e-cal-model.c line 2528
#5 get_color
at e-cal-model.c line 521
#6 ecm_value_at
at e-cal-model.c line 675
#7 ecmt_value_at
at e-cal-model-tasks.c line 576
#8 e_table_model_value_at
at e-table-model.c line 127
#9 etss_value_at
at e-table-subset.c line 159
#10 e_table_model_value_at
at e-table-model.c line 127
#11 ect_get_bg_color
at e-cell-text.c line 884
#12 e_cell_get_bg_color
at e-cell.c line 473
#13 eti_get_cell_background_color
at e-table-item.c line 266
#14 eti_draw
at e-table-item.c line 1894
#15 gnome_canvas_group_draw
at gnome-canvas.c line 1676
#16 gnome_canvas_group_draw
at gnome-canvas.c line 1676
#17 gnome_canvas_group_draw
at gnome-canvas.c line 1676
#18 gnome_canvas_paint_rect
at gnome-canvas.c line 2998
#19 gnome_canvas_expose
at gnome-canvas.c line 3053
#20 _gtk_marshal_BOOLEAN__BOXED
at gtkmarshalers.c line 84
#21 g_type_class_meta_marshal
at gclosure.c line 878
#22 IA__g_closure_invoke
at gclosure.c line 767
#23 signal_emit_unlocked_R
at gsignal.c line 3286
#24 IA__g_signal_emit_valist
at gsignal.c line 2991
#25 IA__g_signal_emit
at gsignal.c line 3038
#26 gtk_widget_event_internal
at gtkwidget.c line 4943
#27 IA__gtk_main_do_event
at gtkmain.c line 1583
#28 _gdk_window_process_updates_recurse
at gdkwindow.c line 5181
#29 _gdk_window_process_updates_recurse
at gdkwindow.c line 5154
#30 _gdk_window_process_updates_recurse
at gdkwindow.c line 5154
#31 _gdk_windowing_window_process_updates_recurse
at gdkwindow-x11.c line 5569
#32 gdk_window_process_updates_internal
at gdkwindow.c line 5340
#33 IA__gdk_window_process_all_updates
at gdkwindow.c line 5448
#34 gtk_container_idle_sizer
at gtkcontainer.c line 1353
#35 gdk_threads_dispatch
at gdk.c line 512
#36 g_idle_dispatch
at gmain.c line 4065
#37 g_main_dispatch
at gmain.c line 1960
#38 IA__g_main_context_dispatch
at gmain.c line 2513
#39 g_main_context_iterate
at gmain.c line 2591
#40 IA__g_main_loop_run
at gmain.c line 2799
#41 IA__gtk_main
at gtkmain.c line 1219
#42 main
at main.c line 609

Comment 1 Akhil Laddha 2010-09-24 08:00:17 UTC

Valgrind traces with evolution 2.33.1 (Build Dated Sept 24, 2010). Just restarted evolution in calendar view as evolution crashed last time.

==23073== Invalid read of size 1
==23073==    at 0x4028C68: strlen (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==23073==    by 0x457596E: icaltzutil_fetch_timezone (icaltz-util.c:404)
==23073==    by 0x4576F17: icaltimezone_load_builtin_timezone (icaltimezone.c:1819)
==23073==    by 0x4578A16: icaltimezone_get_component (icaltimezone.c:1243)
==23073==    by 0x450DED5: e_cal_set_default_timezone (e-cal.c:4018)
==23073==    by 0x6617C74: e_memo_shell_sidebar_add_source (e-memo-shell-sidebar.c:937)
==23073==    by 0x6616857: memo_shell_sidebar_row_changed_cb (e-memo-shell-sidebar.c:370)
==23073==    by 0x512875E: _gtk_marshal_VOID__BOXED_BOXED (gtkmarshalers.c:1309)
==23073==    by 0x588B5B5: g_closure_invoke (gclosure.c:766)
==23073==    by 0x58A3A43: signal_emit_unlocked_R (gsignal.c:3252)
==23073==    by 0x58A2D92: g_signal_emit_valist (gsignal.c:2983)
==23073==    by 0x58A307E: g_signal_emit (gsignal.c:3040)
==23073==  Address 0x711ebe0 is 0 bytes inside a block of size 13 free'd
==23073==    at 0x4027996: free (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==23073==    by 0x4576E12: icaltimezone_get_vtimezone_properties (icaltimezone.c:321)
==23073==    by 0x4578A16: icaltimezone_get_component (icaltimezone.c:1243)
==23073==    by 0x450DED5: e_cal_set_default_timezone (e-cal.c:4018)
==23073==    by 0x66F13A3: load_cal_source_thread (authentication.c:229)
==23073==    by 0x55D78E0: run_in_thread (gsimpleasyncresult.c:783)
==23073==    by 0x55C6718: io_job_thread (gioscheduler.c:181)
==23073==    by 0x596C53E: g_thread_pool_thread_proxy (gthreadpool.c:319)
==23073==    by 0x596AF10: g_thread_create_proxy (gthread.c:1897)
==23073==    by 0x58D7B24: start_thread (in /lib/libpthread-2.11.2.so)
==23073==    by 0x5ACF46D: clone (in /lib/libc-2.11.2.so)

==23073== Invalid read of size 1
==23073==    at 0x5A3D96A: vfprintf (in /lib/libc-2.11.2.so)
==23073==    by 0x5AE3BDB: __vsprintf_chk (in /lib/libc-2.11.2.so)
==23073==    by 0x5AE3AEE: __sprintf_chk (in /lib/libc-2.11.2.so)
==23073==    by 0x45759B4: icaltzutil_fetch_timezone (stdio2.h:34)
==23073==    by 0x4576F17: icaltimezone_load_builtin_timezone (icaltimezone.c:1819)
==23073==    by 0x4578A16: icaltimezone_get_component (icaltimezone.c:1243)
==23073==    by 0x450DED5: e_cal_set_default_timezone (e-cal.c:4018)
==23073==    by 0x6617C74: e_memo_shell_sidebar_add_source (e-memo-shell-sidebar.c:937)
==23073==    by 0x6616857: memo_shell_sidebar_row_changed_cb (e-memo-shell-sidebar.c:370)
==23073==    by 0x512875E: _gtk_marshal_VOID__BOXED_BOXED (gtkmarshalers.c:1309)
==23073==    by 0x588B5B5: g_closure_invoke (gclosure.c:766)
==23073==    by 0x58A3A43: signal_emit_unlocked_R (gsignal.c:3252)
==23073==  Address 0x711ebe0 is 0 bytes inside a block of size 13 free'd
==23073==    at 0x4027996: free (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==23073==    by 0x4576E12: icaltimezone_get_vtimezone_properties (icaltimezone.c:321)
==23073==    by 0x4578A16: icaltimezone_get_component (icaltimezone.c:1243)
==23073==    by 0x450DED5: e_cal_set_default_timezone (e-cal.c:4018)
==23073==    by 0x66F13A3: load_cal_source_thread (authentication.c:229)
==23073==    by 0x55D78E0: run_in_thread (gsimpleasyncresult.c:783)
==23073==    by 0x55C6718: io_job_thread (gioscheduler.c:181)
==23073==    by 0x596C53E: g_thread_pool_thread_proxy (gthreadpool.c:319)
==23073==    by 0x596AF10: g_thread_create_proxy (gthread.c:1897)
==23073==    by 0x58D7B24: start_thread (in /lib/libpthread-2.11.2.so)
==23073==    by 0x5ACF46D: clone (in /lib/libc-2.11.2.so)

==23073== Invalid read of size 1
==23073==    at 0x4029164: memcpy (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==23073==    by 0x5A721C8: strdup (in /lib/libc-2.11.2.so)
==23073==    by 0x456A33A: icalmemory_strdup (icalmemory.c:244)
==23073==    by 0x4562E10: icalvalue_set_x (icalderivedvalue.c:814)
==23073==    by 0x4562E9B: icalvalue_new_x (icalderivedvalue.c:805)
==23073==    by 0x455FABD: icalproperty_set_x (icalderivedproperty.c:3137)
==23073==    by 0x455FB2B: icalproperty_new_x (icalderivedproperty.c:3129)
==23073==    by 0x45759DF: icaltzutil_fetch_timezone (icaltz-util.c:410)
==23073==    by 0x4576F17: icaltimezone_load_builtin_timezone (icaltimezone.c:1819)
==23073==    by 0x4578A16: icaltimezone_get_component (icaltimezone.c:1243)
==23073==    by 0x450DED5: e_cal_set_default_timezone (e-cal.c:4018)
==23073==    by 0x6617C74: e_memo_shell_sidebar_add_source (e-memo-shell-sidebar.c:937)
==23073==  Address 0x711ebe9 is 9 bytes inside a block of size 13 free'd
==23073==    at 0x4027996: free (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==23073==    by 0x4576E12: icaltimezone_get_vtimezone_properties (icaltimezone.c:321)
==23073==    by 0x4578A16: icaltimezone_get_component (icaltimezone.c:1243)
==23073==    by 0x450DED5: e_cal_set_default_timezone (e-cal.c:4018)
==23073==    by 0x66F13A3: load_cal_source_thread (authentication.c:229)
==23073==    by 0x55D78E0: run_in_thread (gsimpleasyncresult.c:783)
==23073==    by 0x55C6718: io_job_thread (gioscheduler.c:181)
==23073==    by 0x596C53E: g_thread_pool_thread_proxy (gthreadpool.c:319)
==23073==    by 0x596AF10: g_thread_create_proxy (gthread.c:1897)
==23073==    by 0x58D7B24: start_thread (in /lib/libpthread-2.11.2.so)
==23073==    by 0x5ACF46D: clone (in /lib/libc-2.11.2.so)
==23073== 
==23073== Invalid read of size 1
==23073==    at 0x40291A8: memcpy (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==23073==    by 0x5A721C8: strdup (in /lib/libc-2.11.2.so)
==23073==    by 0x456A33A: icalmemory_strdup (icalmemory.c:244)
==23073==    by 0x4562E10: icalvalue_set_x (icalderivedvalue.c:814)
==23073==    by 0x4562E9B: icalvalue_new_x (icalderivedvalue.c:805)
==23073==    by 0x455FABD: icalproperty_set_x (icalderivedproperty.c:3137)
==23073==    by 0x455FB2B: icalproperty_new_x (icalderivedproperty.c:3129)
==23073==    by 0x45759DF: icaltzutil_fetch_timezone (icaltz-util.c:410)
==23073==    by 0x4576F17: icaltimezone_load_builtin_timezone (icaltimezone.c:1819)
==23073==    by 0x4578A16: icaltimezone_get_component (icaltimezone.c:1243)
==23073==    by 0x450DED5: e_cal_set_default_timezone (e-cal.c:4018)
==23073==    by 0x6617C74: e_memo_shell_sidebar_add_source (e-memo-shell-sidebar.c:937)
==23073==  Address 0x711ebe0 is 0 bytes inside a block of size 13 free'd
==23073==    at 0x4027996: free (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==23073==    by 0x4576E12: icaltimezone_get_vtimezone_properties (icaltimezone.c:321)
==23073==    by 0x4578A16: icaltimezone_get_component (icaltimezone.c:1243)
==23073==    by 0x450DED5: e_cal_set_default_timezone (e-cal.c:4018)
==23073==    by 0x66F13A3: load_cal_source_thread (authentication.c:229)
==23073==    by 0x55D78E0: run_in_thread (gsimpleasyncresult.c:783)
==23073==    by 0x55C6718: io_job_thread (gioscheduler.c:181)
==23073==    by 0x596C53E: g_thread_pool_thread_proxy (gthreadpool.c:319)
==23073==    by 0x596AF10: g_thread_create_proxy (gthread.c:1897)
==23073==    by 0x58D7B24: start_thread (in /lib/libpthread-2.11.2.so)
==23073==    by 0x5ACF46D: clone (in /lib/libc-2.11.2.so)
==23073== 

(evolution:23073): e-table-CRITICAL **: etss_value_at: assertion `VALID_ROW (etss, row)' failed
==23073== Invalid write of size 4
==23073==    at 0x65452DD: ??? (in /usr/lib/gtk-2.0/modules/libgnomebreakpad.so)
==23073==    by 0x594772F: g_logv (gmessages.c:527)
==23073==    by 0x5947843: g_log (gmessages.c:577)
==23073==    by 0x5947886: g_return_if_fail_warning (gmessages.c:586)
==23073==    by 0x42A0126: etss_value_at (e-table-subset.c:155)
==23073==    by 0x429616A: e_table_model_value_at (e-table-model.c:127)
==23073==    by 0x4265236: ect_real_get_text (e-cell-text.c:222)
==23073==    by 0x4269226: e_cell_text_get_text (e-cell-text.c:1924)
==23073==    by 0x4265F18: generate_layout (e-cell-text.c:628)
==23073==    by 0x42663AA: ect_draw (e-cell-text.c:764)
==23073==    by 0x425E812: e_cell_draw (e-cell.c:268)
==23073==    by 0x428EB20: eti_draw (e-table-item.c:1975)
==23073==  Address 0x12e9d830 is 0 bytes after a block of size 64 alloc'd
==23073==    at 0x40270BB: calloc (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==23073==    by 0x59459D1: g_malloc0 (gmem.c:196)
==23073==    by 0x65452D9: ??? (in /usr/lib/gtk-2.0/modules/libgnomebreakpad.so)
==23073==    by 0x594772F: g_logv (gmessages.c:527)
==23073==    by 0x5947843: g_log (gmessages.c:577)
==23073==    by 0x5947886: g_return_if_fail_warning (gmessages.c:586)
==23073==    by 0x42A0126: etss_value_at (e-table-subset.c:155)
==23073==    by 0x429616A: e_table_model_value_at (e-table-model.c:127)
==23073==    by 0x4265236: ect_real_get_text (e-cell-text.c:222)
==23073==    by 0x4269226: e_cell_text_get_text (e-cell-text.c:1924)
==23073==    by 0x4265F18: generate_layout (e-cell-text.c:628)
==23073==    by 0x42663AA: ect_draw (e-cell-text.c:764)
==23073==

Comment 2 Akhil Laddha 2010-09-24 09:41:03 UTC


*** This bug has been marked as a duplicate of bug 628139 ***

Comment 3 David Woodhouse 2010-09-24 09:51:22 UTC

The valgrind traces in icaltimezone_get_component() are bug 628139. It's not clear how that would cause crash in the original report of this bug though -- although I wouldn't say that it's impossible.

The *last* valgrind trace in comment 1 looks like something entirely different.