After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 634294 - [abrt] Calendar factory crash under e-cal-recur
[abrt] Calendar factory crash under e-cal-recur
Status: RESOLVED FIXED
Product: evolution-data-server
Classification: Platform
Component: Calendar
3.8.x (obsolete)
Other Linux
: Normal critical
: ---
Assigned To: evolution-calendar-maintainers
Evolution QA team
Depends on:
Blocks:
 
 
Reported: 2010-11-08 09:03 UTC by Milan Crha
Modified: 2016-06-17 12:07 UTC
See Also:
GNOME target: ---
GNOME version: ---


Description Milan Crha 2010-11-08 09:03:45 UTC 
Moving this from a downstream bug report:
https://bugzilla.redhat.com/show_bug.cgi?id=650538

abrt version: 1.1.13
architecture: i686
Attached file: backtrace
cmdline: /usr/libexec/e-calendar-factory
component: evolution-data-server
crash_function: icalarray_free
executable: /usr/libexec/e-calendar-factory
kernel: 2.6.35.6-48.fc14.i686.PAE
package: evolution-data-server-2.32.0-3.fc14
rating: 4
reason: Process /usr/libexec/e-calendar-factory was killed by signal 11
(SIGSEGV)
release: Fedora release 14 (Laughlin)
time: 1289081712
uid: 500

How to reproduce
-----
1.  Booted into Fedora 14 for the first time after upgrading from Fedora 13

ore was generated by `/usr/libexec/e-calendar-factory'.
Program terminated with signal 11, Segmentation fault.

+ Trace 224564

Thread 1 (Thread 2735)

  • #0 icalarray_free
    at icalarray.c line 75
  • #1 icaltimezone_expand_changes
    at icaltimezone.c line 536
  • #2 icaltimezone_ensure_coverage
    at icaltimezone.c line 503
  • #3 icaltimezone_get_utc_offset
    at icaltimezone.c line 834
  • #4 icaltimezone_convert_time
    at icaltimezone.c line 789
  • #5 icaltime_as_timet_with_zone
    at icaltime.c line 408
  • #6 e_cal_recur_generate_instances_of_rule
    at e-cal-recur.c line 715
  • #7 e_cal_util_generate_alarms_for_comp
    at ../../calendar/libecal/e-cal-util.c line 589
  • #8 func_has_alarms_in_range
    at e-cal-backend-sexp.c line 890
  • #9 e_sexp_term_eval
    at e-sexp.c line 731
  • #10 e_sexp_eval
    at e-sexp.c line 1545
  • #11 e_cal_backend_sexp_match_comp
    at e-cal-backend-sexp.c line 1323
  • #12 caldav_start_query
    at e-cal-backend-caldav.c line 4097
  • #13 e_cal_backend_start_query
    at e-cal-backend.c line 826
  • #14 impl_DataCalView_start
    at e-data-cal-view.c line 309
  • #15 _e_gdbus_gdbus_cclosure_marshaller_BOOLEAN__OBJECT
    at e-gdbus-marshallers.c line 202
  • #16 g_closure_invoke
    at gclosure.c line 766
  • #17 signal_emit_unlocked_R
    at gsignal.c line 3252
  • #18 g_signal_emit_valist
    at gsignal.c line 2993
  • #19 g_signal_emit
    at gsignal.c line 3040
  • #20 handle_method_call
    at e-gdbus-egdbuscalview.c line 1078
  • #21 call_in_idle_cb
    at gdbusconnection.c line 4397
  • #22 g_idle_dispatch
    at gmain.c line 4254
  • #23 g_main_dispatch
    at gmain.c line 2149
  • #24 g_main_context_dispatch
    at gmain.c line 2702
  • #25 g_main_context_iterate
    at gmain.c line 2780
  • #26 g_main_loop_run
    at gmain.c line 2988
  • #27 main
    at e-data-cal-factory.c line 922 






Comment 1


Akhil Laddha





          2010-11-08 10:27:31 UTC
        



can be related to bug 588487






Comment 2


Milan Crha





          2011-05-31 04:22:05 UTC
        



Similar downstream bug report from 3.0.1:
https://bugzilla.redhat.com/show_bug.cgi?id=708199





+
Trace
    227328






Thread 1
          (Thread 0xb77ca740 (LWP 1389))


    

  • 
#0
icaltimezone_get_utc_offset

    
                at icaltimezone.c
                  line
                  811

    

    • 

  • 
#1
icaltimezone_convert_time

    
                at icaltimezone.c
                  line
                  764

    

    • 

  • 
#2
icaltime_as_timet_with_zone

    
                at icaltime.c
                  line
                  409

    

    • 

  • 
#3
generate_instances_for_chunk

    
                at e-cal-recur.c
                  line
                  1329

    

    • 

  • 
#4
e_cal_recur_generate_instances_of_rule

    
                at e-cal-recur.c
                  line
                  865

    

    • 

  • 
#5
func_occur_in_time_range

    
                at e-cal-backend-sexp.c
                  line
                  390

    

    • 

  • 
#6
e_sexp_term_eval

    
                at e-sexp.c
                  line
                  731

    

    • 

  • 
#7
term_eval_and

    
                at e-sexp.c
                  line
                  271

    

    • 

  • 
#8
e_sexp_term_eval

    
                at e-sexp.c
                  line
                  721

    

    • 

  • 
#9
e_sexp_eval

    
                at e-sexp.c
                  line
                  1568

    

    • 

  • 
#10
e_cal_backend_sexp_match_comp

    
                at e-cal-backend-sexp.c
                  line
                  1323

    

    • 

  • 
#11
caldav_start_query

    
                at e-cal-backend-caldav.c
                  line
                  4202

    

    • 

  • 
#12
e_cal_backend_start_query

    
                at e-cal-backend.c
                  line
                  863

    

    • 

  • 
#13
impl_DataCalView_start

    
                at e-data-cal-view.c
                  line
                  313

    

    • 

  • 
#14
_e_gdbus_gdbus_cclosure_marshaller_BOOLEAN__OBJECT

    
                at e-gdbus-marshallers.c
                  line
                  202

    

    • 

  • 
#15
g_closure_invoke

    
                at gclosure.c
                  line
                  767

    

    • 

  • 
#16
signal_emit_unlocked_R

    
                at gsignal.c
                  line
                  3252

    

    • 

  • 
#17
g_signal_emit_valist

    
                at gsignal.c
                  line
                  2993

    

    • 

  • 
#18
g_signal_emit

    
                at gsignal.c
                  line
                  3040

    

    • 

  • 
#19
handle_method_call

    
                at e-gdbus-egdbuscalview.c
                  line
                  1249

    

    • 

  • 
#20
call_in_idle_cb

    
                at gdbusconnection.c
                  line
                  4434

    

    • 

  • 
#21
g_idle_dispatch

    
                at gmain.c
                  line
                  4545

    

    • 

  • 
#22
g_main_dispatch

    
                at gmain.c
                  line
                  2440

    

    • 

  • 
#23
g_main_context_dispatch

    
                at gmain.c
                  line
                  3013

    

    • 

  • 
#24
g_main_context_iterate

    
                at gmain.c
                  line
                  3091

    

    • 

  • 
#25
g_main_loop_run

    
                at gmain.c
                  line
                  3299

    

    • 

  • 
#26
main

    
                at e-data-cal-factory.c
                  line
                  1011

    

    • 













Comment 3


Milan Crha





          2012-09-04 19:05:25 UTC
        



Thanks for taking the time to report this bug.
However, you are using a version that is too old and not supported anymore. GNOME developers are no longer working on that version, so unfortunately there will not be any bug fixes for the version that you use.

By upgrading to a newer version of GNOME you could receive bug fixes and new functionality. You may need to upgrade your Linux distribution to obtain a newer version of GNOME.
Please feel free to reopen this bug if the problem still occurs with a newer version of GNOME.






Comment 4


Brian J. Murrell





          2013-01-07 15:39:28 UTC
        



I have an abrt report from FC18, which is evolution 3.6.2 for this bug.  Can we get this re-opened please?

Unfortunately due to RH's abrt silliness, the data from my report was not uploaded as it found an existing upstream bug report https://bugzilla.redhat.com/show_bug.cgi?id=650538.






Comment 5


Milan Crha





          2013-01-07 18:06:13 UTC
        



Thanks for the update. Can you reproduce it reliably, please? I agree that things can happen, but its reproducibility usually means its fixability, in other words, if one thing cannot be reproduced, then it's much harder to properly fix it.

Does the ABRT offer you to view the backtrace from your report? I'd get it and paste it here, thus it'll show more recent sources, and maybe give a hint what could happen too (in case of harder reproducibility).






Comment 6


Brian J. Murrell





          2013-01-07 18:23:33 UTC
        



Like most evolution problems, this just happened "spontaneously".  I wasn't doing anything out of the norm.

Unfortunately, once ABRT has identified the problem as a duplicate of an existing problem, you get no options to see any of the bits and pieces it normally puts together for reporting, including the stack-trace.  It's a bit anti-social in that respect.






Comment 7


Milan Crha





          2013-01-08 11:39:52 UTC
        



Pity. The ABRT saves its files to /var/spool/abrt/<appname>-date-time/, which, I hope, will contain a 'backtrace' file, which should have the valuable data. Either that, or at least the core_backtrace file.






Comment 8


Brian J. Murrell





          2013-01-08 12:09:49 UTC
        



Indeed, it is a pity.  Also, the abrt files are [re]moved from /var/spool/abrt/<appname>-date-time/ once it has been processed by abrt-gui.  There is an abrt/spool/ in ~/.cache but one has to rummage around in each of the (similarly named) subdirs there for the report one is looking for.  The cmdline file in each of the similarly named dirs is useful.

Here's the backtrace:

warning: core file may not match specified executable file.
[New LWP 13744]
[New LWP 13737]
[New LWP 12778]
[New LWP 12663]
[New LWP 13731]
[New LWP 13710]
[New LWP 12638]
[New LWP 12641]
[New LWP 13733]
[New LWP 13732]
[New LWP 13734]
[New LWP 13724]
[New LWP 13711]
[New LWP 12640]
[New LWP 13739]
[New LWP 12669]
[New LWP 12642]
[New LWP 12639]
[New LWP 13745]
[New LWP 13743]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
warning: "/var/cache/abrt-di/usr/lib/debug/usr/lib64/libcairo-gobject.so.2.11200.8.debug": separate debug info file has no debug info
warning: "/var/cache/abrt-di/usr/lib/debug/usr/lib64/libicudata.so.49.1.1.debug": separate debug info file has no debug info
warning: the debug information found in "/usr/lib/debug//usr/lib64/evolution/3.6/libeutil.so.debug" does not match "/usr/lib64/evolution/3.6/libeutil.so" (CRC mismatch).

warning: the debug information found in "/usr/lib/debug/usr/lib64/evolution/3.6/libeutil.so.debug" does not match "/usr/lib64/evolution/3.6/libeutil.so" (CRC mismatch).

warning: the debug information found in "/var/cache/abrt-di/usr/lib/debug//usr/lib64/evolution/3.6/libeutil.so.debug" does not match "/usr/lib64/evolution/3.6/libeutil.so" (CRC mismatch).

warning: the debug information found in "/var/cache/abrt-di/usr/lib/debug/usr/lib64/evolution/3.6/libeutil.so.debug" does not match "/usr/lib64/evolution/3.6/libeutil.so" (CRC mismatch).

warning: the debug information found in "/usr/lib/debug//usr/lib64/evolution/3.6/libevolution-utils.so.debug" does not match "/usr/lib64/evolution/3.6/libevolution-utils.so" (CRC mismatch).

warning: the debug information found in "/usr/lib/debug/usr/lib64/evolution/3.6/libevolution-utils.so.debug" does not match "/usr/lib64/evolution/3.6/libevolution-utils.so" (CRC mismatch).

warning: the debug information found in "/var/cache/abrt-di/usr/lib/debug//usr/lib64/evolution/3.6/libevolution-utils.so.debug" does not match "/usr/lib64/evolution/3.6/libevolution-utils.so" (CRC mismatch).

warning: the debug information found in "/var/cache/abrt-di/usr/lib/debug/usr/lib64/evolution/3.6/libevolution-utils.so.debug" does not match "/usr/lib64/evolution/3.6/libevolution-utils.so" (CRC mismatch).

Core was generated by `/usr/libexec/evolution-calendar-factory'.
Program terminated with signal 11, Segmentation fault.




+
Trace
    231350






Thread 7
          (Thread 0x7f35f53a1800 (LWP 12638))


    

  • 
#0
poll

    
                at ../sysdeps/unix/syscall-template.S
                  line
                  81

    

    • 

  • 
#1
g_main_context_poll

    
                at gmain.c
                  line
                  3584

    

    • 

  • 
#2
g_main_context_iterate

    
                at gmain.c
                  line
                  3285

    

    • 

  • 
#3
g_main_loop_run

    
                at gmain.c
                  line
                  3484

    

    • 

  • 
#4
dbus_server_run_server

    
                at e-dbus-server.c
                  line
                  222

    

    • 

  • 
#5
ffi_call_unix64

    
                at ../src/x86/unix64.S
                  line
                  75

    

    • 

  • 
#6
ffi_call

    
                at ../src/x86/ffi64.c
                  line
                  486

    

    • 

  • 
#7
g_cclosure_marshal_generic_va

    
                at gclosure.c
                  line
                  1550

    

    • 

  • 
#8
_g_closure_invoke_va

    
                at gclosure.c
                  line
                  840

    

    • 

  • 
#9
g_signal_emit_valist

    
                at gsignal.c
                  line
                  3211

    

    • 

  • 
#10
g_signal_emit

    
                at gsignal.c
                  line
                  3356

    

    • 

  • 
#11
e_dbus_server_run

    
                at e-dbus-server.c
                  line
                  396

    

    • 

  • 
#12
main

    
                at evolution-calendar-factory.c
                  line
                  137

    

    • 







From                To                  Syms Read   Shared Object Library
0x00000035210147a0  0x0000003521031318  Yes         /lib64/libedata-cal-1.2.so.18
0x0000003520c1b300  0x0000003520c4c4f8  Yes         /lib64/libecal-1.2.so.15
0x0000003521411820  0x00000035214304e8  Yes         /lib64/libebackend-1.2.so.5
0x000000352081e650  0x000000352085eb58  Yes         /lib64/libedataserver-1.2.so.17
0x000000308a22f2c0  0x000000308a36e968  Yes         /lib64/libdb-5.3.so
0x0000003520439bc0  0x00000035204ea8b4  Yes         /lib64/libcamel-1.2.so.40
0x000000308aa0a4e0  0x000000308aa8a560  Yes         /lib64/libsqlite3.so.0
0x0000003072e02190  0x0000003072e0e640  Yes         /lib64/libz.so.1
0x0000003088e1b690  0x0000003088e93410  Yes         /lib64/libkrb5.so.3
0x00000030882044d0  0x000000308821c938  Yes         /lib64/libk5crypto.so.3
0x0000003087601560  0x0000003087602144  Yes         /lib64/libcom_err.so.2
0x0000003089a0ad90  0x0000003089a38264  Yes         /lib64/libgssapi_krb5.so.2
0x0000003076601130  0x0000003076601ff8  Yes         /lib64/libgmodule-2.0.so.0
0x0000003073e022a0  0x0000003073e0557c  Yes         /lib64/librt.so.1
0x000000309501e550  0x0000003095063314  Yes         /lib64/libgcr-base-3.so.1
0x000000309440abf0  0x00000030944291c8  Yes         /lib64/libgck-1.so.0
0x000000308ba02ed0  0x000000308ba0cb7c  Yes         /lib64/libp11-kit.so.0
0x0000003090219be0  0x00000030902432f0  Yes         /lib64/libical.so.0
0x000000308e207fc0  0x000000308e210e80  Yes         /lib64/libicalss.so.0
0x000000308c2068f0  0x000000308c20cec4  Yes         /lib64/libicalvcal.so.0
0x000000307b22e870  0x000000307b317470  Yes         /lib64/libxml2.so.2
0x000000308fa07a30  0x000000308fa19574  Yes         /lib64/libgnome-keyring.so.0
0x000000308f23e1c0  0x000000308f27ac24  Yes         /lib64/libsoup-2.4.so.1
0x0000003076a30100  0x0000003076aeecd4  Yes         /lib64/libgio-2.0.so.0
0x0000003075e0aba0  0x0000003075e3831c  Yes         /lib64/libgobject-2.0.so.0
0x000000307561a050  0x00000030756af21c  Yes         /lib64/libglib-2.0.so.0
0x000000308ae04870  0x000000308ae14514  Yes         /lib64/libsasl2.so.2
0x000000308d616f30  0x000000308d64d074  Yes         /lib64/libssl.so.10
0x0000003089e61fc0  0x0000003089f44af8  Yes         /lib64/libcrypto.so.10
0x0000003087e0a140  0x0000003087e2b6d8  Yes         /lib64/libssl3.so
0x0000003088609d40  0x0000003088622400  Yes         /lib64/libsmime3.so
0x0000003086219100  0x00000030862fbb24  Yes         /lib64/libnss3.so
0x000000308660bbd0  0x0000003086619a38  Yes         /lib64/libnssutil3.so
0x0000003085e00ff0  0x0000003085e01f18  Yes         /lib64/libplds4.so
0x0000003086e01510  0x0000003086e02bf4  Yes         /lib64/libplc4.so
0x0000003086a0d280  0x0000003086a2cc10  Yes         /lib64/libnspr4.so
0x0000003073605790  0x00000030736104b4  Yes         /lib64/libpthread.so.0
0x0000003073a00ed0  0x0000003073a019f0  Yes         /lib64/libdl.so.2
0x000000307321f1a0  0x00000030733607a0  Yes         /lib64/libc.so.6
0x0000003087a02b50  0x0000003087a080cc  Yes         /lib64/libkrb5support.so.0
0x0000003089201190  0x0000003089201b44  Yes         /lib64/libkeyutils.so.1
0x0000003075203a30  0x000000307521201c  Yes         /lib64/libresolv.so.2
0x0000003074e02a40  0x0000003074e12168  Yes         /lib64/libgcc_s.so.1
0x0000003072a00b20  0x0000003072a1a3f9  Yes         /lib64/ld-linux-x86-64.so.2
0x0000003075a006b0  0x0000003075a0080c  Yes         /lib64/libgthread-2.0.so.0
0x0000003088a07200  0x0000003088a52e48  Yes         /lib64/libgcrypt.so.11
0x0000003087200990  0x0000003087200ee8  Yes         /lib64/libgpg-error.so.0
0x00000030796030f0  0x0000003079619340  Yes         /lib64/liblzma.so.5
0x00000030742055b0  0x000000307426fd68  Yes         /lib64/libm.so.6
0x0000003077e07ab0  0x0000003077e312e4  Yes         /lib64/libdbus-1.so.3
0x0000003076201990  0x0000003076206134  Yes         /lib64/libffi.so.5
0x0000003074a06170  0x0000003074a175d4  Yes         /lib64/libselinux.so.1
0x0000003084e00e00  0x0000003084e05ccc  Yes         /lib64/libcrypt.so.1
0x0000003074601db0  0x0000003074645b28  Yes         /lib64/libpcre.so.1
0x0000003085603660  0x0000003085647570  Yes         /lib64/libfreebl3.so
0x00007f35ee5a9940  0x00007f35ee5accb0  Yes         /usr/lib64/evolution-data-server/calendar-backends/libecalbackendhttp.so
0x00007f35ee396670  0x00007f35ee3a063c  Yes         /usr/lib64/evolution-data-server/calendar-backends/libecalbackendcaldav.so
0x00007f35ee189460  0x00007f35ee18c318  Yes         /usr/lib64/evolution-data-server/calendar-backends/libecalbackendcontacts.so
0x00007f35edf2efe0  0x00007f35edf4feb8  Yes         /lib64/libebook-1.2.so.14
0x00007f35edd13740  0x00007f35edd15f60  Yes         /usr/lib64/evolution-data-server/calendar-backends/libecalbackendweather.so
0x00000030cca08f00  0x00000030cca15360  Yes         /lib64/libgweather-3.so.1
0x00000030cb6728a0  0x00000030cb91bcd0  Yes         /lib64/libgtk-3.so.0
0x00000030cb21a540  0x00000030cb25d664  Yes         /lib64/libgdk-3.so.0
0x0000003080e09ef0  0x0000003080e16314  Yes         /lib64/libatk-1.0.so.0
0x00000030caa049b0  0x00000030caa094d8  Yes         /lib64/libpangocairo-1.0.so.0
0x0000003080606780  0x0000003080619b90  Yes         /lib64/libgdk_pixbuf-2.0.so.0
0x00000030cbe03520  0x00000030cbe044bc  Yes (*)     /lib64/libcairo-gobject.so.2
0x000000308120f1c0  0x000000308122d9a8  Yes         /lib64/libpango-1.0.so.0
0x00000030cae13000  0x00000030caed553c  Yes         /lib64/libcairo.so.2
0x0000003097001bb0  0x0000003097002cd4  Yes         /lib64/libsoup-gnome-2.4.so.1
0x000000307761dee0  0x00000030776a4280  Yes         /lib64/libX11.so.6
0x000000307ae02160  0x000000307ae0bfc4  Yes         /lib64/libXi.so.6
0x000000307ce01530  0x000000307ce03da8  Yes         /lib64/libXfixes.so.3
0x0000003084a09c80  0x0000003084a1b704  Yes         /lib64/libatk-bridge-2.0.so.0
0x0000003082e076b0  0x0000003082e0fa0c  Yes         /lib64/libpangoft2-1.0.so.0
0x000000307aa06220  0x000000307aa2260c  Yes         /lib64/libfontconfig.so.1
0x000000307a600b40  0x000000307a601458  Yes         /lib64/libXinerama.so.1
0x0000003079a01b70  0x0000003079a07768  Yes         /lib64/libXrandr.so.2
0x0000003082a02ab0  0x0000003082a076ec  Yes         /lib64/libXcursor.so.1
0x0000003083600c60  0x0000003083601794  Yes         /lib64/libXcomposite.so.1
0x0000003082200bd0  0x00000030822015ec  Yes         /lib64/libXdamage.so.1
0x0000003078203740  0x000000307820d810  Yes         /lib64/libXext.so.6
0x000000307f607f60  0x000000307f65a65c  Yes         /lib64/libharfbuzz.so.0
0x000000307a20cc80  0x000000307a276f30  Yes         /lib64/libfreetype.so.6
0x0000003079e04fe0  0x0000003079e20b50  Yes         /lib64/libpng15.so.15
0x000000307e209030  0x000000307e272aac  Yes         /lib64/libpixman-1.so.0
0x00000030ca606ff0  0x00000030ca61851c  Yes         /lib64/libEGL.so.1
0x000000307ea00b10  0x000000307ea01204  Yes         /lib64/libxcb-shm.so.0
0x000000307fa03590  0x000000307fa06274  Yes         /lib64/libxcb-render.so.0
0x0000003077a09a00  0x0000003077a158f8  Yes         /lib64/libxcb.so.1
0x0000003078e01ab0  0x0000003078e07a00  Yes         /lib64/libXrender.so.1
0x000000307de1bc20  0x000000307de65ca0  Yes         /lib64/libGL.so.1
0x0000003085a0b940  0x0000003085a19e64  Yes         /lib64/libatspi.so.0
0x0000003078a03e00  0x0000003078a1ccdc  Yes         /lib64/libexpat.so.1
0x0000003081e129a0  0x0000003081e25fc7  Yes         /lib64/libicule.so.49
0x000000307d2540d0  0x000000307d307bfc  Yes         /lib64/libicuuc.so.49
0x000000307ba00570  0x000000307ba00650  Yes (*)     /lib64/libicudata.so.49
0x000000307b600600  0x000000307b6006fc  Yes         /lib64/libX11-xcb.so.1
0x000000307da018b0  0x000000307da02638  Yes         /lib64/libxcb-dri2.so.0
0x0000003081a025a0  0x0000003081a03ec4  Yes         /lib64/libxcb-xfixes.so.0
0x000000307d600fb0  0x000000307d6018b8  Yes         /lib64/libxcb-shape.so.0
0x0000003081604470  0x0000003081607c68  Yes         /lib64/libwayland-client.so.0
0x000000307fe059b0  0x000000307fe0bd48  Yes         /lib64/libwayland-server.so.0
0x00000030ca201a50  0x00000030ca202fa8  Yes         /lib64/libgbm.so.1
0x000000307f21deb0  0x000000307f23175c  Yes         /lib64/libglapi.so.0
0x00000030c9e030d0  0x00000030c9e0a990  Yes         /lib64/libudev.so.1
0x000000307e6031d0  0x000000307e607ff4  Yes         /lib64/libdrm.so.2
0x0000003077200eb0  0x0000003077201bcc  Yes         /lib64/libXau.so.6
0x0000003080209fb0  0x00000030802101d8  Yes         /lib64/libxcb-glx.so.0
0x0000003079200f90  0x00000030792039bc  Yes         /lib64/libXxf86vm.so.1
0x0000003076e5bb80  0x0000003076ec10bb  Yes         /lib64/libstdc++.so.6
0x00007f35edb033b0  0x00007f35edb0adcc  Yes         /usr/lib64/evolution-data-server/calendar-backends/libecalbackendfile.so
0x00007f35ed8ee090  0x00007f35ed8f889c  Yes         /usr/lib64/evolution-data-server/calendar-backends/libecalbackendews.so
0x00007f35ed6b3eb0  0x00007f35ed6d115c  Yes         /usr/lib64/evolution-data-server-3.6/libeews-1.2.so.0
0x00007f35ed49bb70  0x00007f35ed49f1fc  Yes         /usr/lib64/evolution-data-server-3.6/libewsutils.so.0
0x00007f35ed260750  0x00007f35ed2649ac  Yes         /usr/lib64/gio/modules/libdconfsettings.so
0x00007f35ed0521e0  0x00007f35ed05969c  Yes         /lib64/libnss_files.so.2
0x00007f35df5fc7d0  0x00007f35df5fcfc0  Yes         /usr/lib64/evolution-data-server/camel-providers/libcamelsendmail.so
0x00007f35df3dfc20  0x00007f35df3f2e18  Yes         /usr/lib64/evolution-data-server/camel-providers/libcamellocal.so
0x00007f35df1d4e60  0x00007f35df1d50c8  Yes         /usr/lib64/evolution-data-server/camel-providers/libcamelimapx.so
0x00007f35defce2f0  0x00007f35defd14c0  Yes         /usr/lib64/evolution-data-server/camel-providers/libcamelsmtp.so
0x00007f35dedbed40  0x00007f35dedc6af4  Yes         /usr/lib64/evolution-data-server/camel-providers/libcamelnntp.so
0x00007f35deb941e0  0x00007f35debae4a8  Yes         /usr/lib64/evolution-data-server/camel-providers/libcamelimap.so
0x00007f35de977bf0  0x00007f35de982160  Yes         /usr/lib64/evolution-data-server/camel-providers/libcamelews.so
0x00000030cd2113d0  0x00000030cd22829c  Yes (*)     /usr/lib64/evolution/3.6/libeutil.so
0x00000030cce14e30  0x00000030cce2b0c8  Yes         /lib64/libgtkhtml-editor-4.0.so.0
0x00000030ce5eac70  0x00000030cf7e1c4c  Yes         /lib64/libwebkitgtk-3.0.so.0
0x00000030cda2fcf0  0x00000030cda9fe34  Yes         /lib64/libgtkhtml-4.0.so.0
0x0000003097802ed0  0x0000003097808138  Yes         /lib64/libenchant.so.1
0x0000003098afe970  0x0000003098e05ea4  Yes         /lib64/libjavascriptcoregtk-3.0.so.0
0x00000030cde04cf0  0x00000030cde08df8  Yes (*)     /usr/lib64/evolution/3.6/libevolution-utils.so
0x00000030cc212870  0x00000030cc232d0c  Yes         /lib64/libedataserverui-3.0.so.4
0x00000030cc602b20  0x00000030cc606590  Yes         /lib64/libgailutil-3.so.0
0x00000030cd60cdd0  0x00000030cd622094  Yes         /lib64/libgnome-desktop-3.so.4
0x0000003094807fa0  0x000000309480f27c  Yes         /lib64/libgeoclue.so.0
0x000000308960a560  0x000000308961c6c4  Yes         /lib64/libdbus-glib-1.so.2
0x0000003099203000  0x000000309920854c  Yes         /lib64/libgstapp-1.0.so.0
0x0000003096c0c2a0  0x0000003096c35a04  Yes         /lib64/libgstaudio-1.0.so.0
0x0000003099e00d20  0x0000003099e073c8  Yes         /lib64/libgstfft-1.0.so.0
0x000000309600a910  0x0000003096018e24  Yes         /lib64/libgstpbutils-1.0.so.0
0x000000309680c9c0  0x000000309682f644  Yes         /lib64/libgstvideo-1.0.so.0
0x000000309580b7d0  0x000000309583d314  Yes         /lib64/libgstbase-1.0.so.0
0x0000003093c259a0  0x0000003093cabcac  Yes         /lib64/libgstreamer-1.0.so.0
0x000000308a603e70  0x000000308a636210  Yes         /lib64/libjpeg.so.62
0x000000308e60ac50  0x000000308e62f7d4  Yes         /lib64/libxslt.so.1
0x000000309229bad0  0x00000030923a0ec8  Yes         /lib64/libicui18n.so.49
0x00000030964131b0  0x000000309644f2bc  Yes         /lib64/libXt.so.6
0x000000308d204da0  0x000000308d21c9d0  Yes         /lib64/libxkbfile.so.1
0x0000003095c099d0  0x0000003095c25884  Yes         /lib64/libgsttag-1.0.so.0
0x000000309060bf00  0x0000003090658680  Yes         /lib64/liborc-0.4.so.0
0x000000308b601c20  0x000000308b605d38  Yes         /lib64/libSM.so.6
0x000000308b204f30  0x000000308b21259c  Yes         /lib64/libICE.so.6
0x0000003082601510  0x0000003082602a8c  Yes         /lib64/libuuid.so.1
0x00007f35de7631d0  0x00007f35de7696c8  Yes         /usr/lib64/evolution-data-server/camel-providers/libcamelpop3.so
0x00007f35dd549c60  0x00007f35dd55577c  Yes         /usr/lib64/gio/modules/libgiognutls.so
0x000000308de18a70  0x000000308de9311c  Yes         /lib64/libgnutls.so.26
0x00007f35dd333d00  0x00007f35dd33ea28  Yes         /lib64/libtasn1.so.3
0x00007f35dd121d50  0x00007f35dd12bd0c  Yes         /usr/lib64/pkcs11/gnome-keyring-pkcs11.so
0x00007f35c45f6c40  0x00007f35c45f7860  Yes         /lib64/libnss_mdns4_minimal.so.2
0x00007f35c43f0100  0x00007f35c43f38b4  Yes         /lib64/libnss_dns.so.2
0x00007f35c5df9570  0x00007f35c5df9f60  Yes         /usr/lib64/gconv/ISO8859-1.so
(*): Shared library is missing debugging information.
$1 = 0x0
$2 = 0x0
rax            0x0	0
rbx            0x50	80
rcx            0x0	0
rdx            0x24	36
rsi            0x7f35adffa5c0	139868529206720
rdi            0x50	80
rbp            0x7f358c001790	0x7f358c001790
rsp            0x7f35adffa690	0x7f35adffa690
r8             0x0	0
r9             0x0	0
r10            0x18	24
r11            0x0	0
r12            0x7e1	2017
r13            0x7e1	2017
r14            0x7f35adffa7cc	139868529207244
r15            0x7f35a8018870	139868428666992
rip            0x30902293d4	0x30902293d4 <icalarray_free+4>
eflags         0x10206	[ PF IF RF ]
cs             0x33	51
ss             0x2b	43
ds             0x0	0
es             0x0	0
fs             0x0	0
gs             0x0	0
Dump of assembler code for function icalarray_free:
   0x00000030902293d0 <+0>:	push   %rbx
   0x00000030902293d1 <+1>:	mov    %rdi,%rbx
=> 0x00000030902293d4 <+4>:	mov    0x10(%rdi),%rdi
   0x00000030902293d8 <+8>:	test   %rdi,%rdi
   0x00000030902293db <+11>:	je     0x30902293ea <icalarray_free+26>
   0x00000030902293dd <+13>:	callq  0x30902174d0 <free@plt>
   0x00000030902293e2 <+18>:	movq   $0x0,0x10(%rbx)
   0x00000030902293ea <+26>:	mov    %rbx,%rdi
   0x00000030902293ed <+29>:	pop    %rbx
   0x00000030902293ee <+30>:	jmpq   0x30902174d0 <free@plt>
End of assembler dump.






Comment 9


Milan Crha





          2013-01-08 13:41:10 UTC
        



Thanks for the update. I'm reopening this bug report.






Comment 10


Milan Crha





          2013-01-14 14:30:16 UTC
        



Moving to 3.6, as a downstream bug report from it too:
https://bugzilla.redhat.com/show_bug.cgi?id=894400






Comment 11


Milan Crha





          2013-07-30 05:18:07 UTC
        



Similar downstream bug report about the same from 3.8.4:
https://bugzilla.redhat.com/show_bug.cgi?id=989693

Still, this is more a libical issue. I was told that it's fixed with libical-1.0, but I didn't test it, I was not able to reproduce it myself too.






Comment 12


Milan Crha





          2014-07-15 05:46:43 UTC
        



Yet another similar crash from 3.10.4:
https://bugzilla.redhat.com/show_bug.cgi?id=1119355





+
Trace
    233821






Thread 1
          (Thread 0x7f327a7fc700 (LWP 2860))


    

  • 
#0
icalarray_element_at

    
                at /usr/src/debug/libical-1.0/src/libical/icalarray.c
                  line
                  147

    

    • 

  • 
#1
icaltimezone_find_nearby_change

    
                at /usr/src/debug/libical-1.0/src/libical/icaltimezone.c
                  line
                  1090

    

    • 

  • 
#2
icaltimezone_get_utc_offset_of_utc_time

    
                at /usr/src/debug/libical-1.0/src/libical/icaltimezone.c
                  line
                  1012

    

    • 

  • 
#3
icaltimezone_convert_time

    
                at /usr/src/debug/libical-1.0/src/libical/icaltimezone.c
                  line
                  802

    

    • 

  • 
#4
icaltime_from_timet_with_zone

    
                at /usr/src/debug/libical-1.0/src/libical/icaltime.c
                  line
                  226

    

    • 

  • 
#5
cal_object_time_from_time

    
                at e-cal-recur.c
                  line
                  3787

    

    • 

  • 
#6
e_cal_recur_generate_instances_of_rule

    
                at e-cal-recur.c
                  line
                  811

    

    • 

  • 
#7
e_cal_recur_generate_instances

    
                at e-cal-recur.c
                  line
                  640

    

    • 

  • 
#8
e_cal_util_generate_alarms_for_comp

    
                at e-cal-util.c
                  line
                  612

    

    • 

  • 
#9
func_has_alarms_in_range

    
                at e-cal-backend-sexp.c
                  line
                  836

    

    • 

  • 
#10
e_sexp_term_eval

    
                at e-sexp.c
                  line
                  784

    

    • 

  • 
#11
e_sexp_eval

    
                at e-sexp.c
                  line
                  1698

    

    • 

  • 
#12
e_cal_backend_sexp_match_comp

    
                at e-cal-backend-sexp.c
                  line
                  1254

    

    • 

  • 
#13
caldav_start_view

    
                at e-cal-backend-caldav.c
                  line
                  4900

    

    • 

  • 
#14
calview_start_thread

    
                at e-data-cal-view.c
                  line
                  174

    

    • 

  • 
#15
g_thread_proxy

    
                at gthread.c
                  line
                  798

    

    • 

  • 
#16
start_thread

    
                at pthread_create.c
                  line
                  309

    

    • 

  • 
#17
clone

    
                at ../sysdeps/unix/sysv/linux/x86_64/clone.S
                  line
                  111

    

    • 













Comment 13


David Dreggors





          2014-12-21 06:17:18 UTC
        



And another one on Fedora 21:

Kernel: kernel-3.17.4-302.fc21.x86_64
Gnome: gnome-desktop3-3.14.2-2.fc21.x86_64
Evolution-data-server: evolution-data-server-3.12.8-2.fc21.x86_64


https://bugzilla.redhat.com/show_bug.cgi?id=1176375






Comment 14


Milan Crha





          2015-02-10 07:21:09 UTC
        



The evolution-data-server 3.12.9 contains a fix from bug #701138. I guess it finally fixes this crash as well.






Comment 15


Milan Crha





          2016-05-03 10:13:00 UTC
        



There had been just filled a similar bug report downstream from 3.20.0 of the evolution-data-server:
https://bugzilla.redhat.com/show_bug.cgi?id=1332151

Version-Release number of selected component:
evolution-data-server-3.20.0-1.fc24

Additional info:
reporter:       libreport-2.7.0
backtrace_rating: 4
cmdline:        /usr/libexec/evolution-calendar-factory-subprocess --factory ews --bus-name org.gnome.evolution.dataserver.Subprocess.Backend.Calendarx5518x4 --own-path /org/gnome/evolution/dataserver/Subprocess/Backend/Calendar/5518/4
crash_function: icaltimezone_load_builtin_timezone
executable:     /usr/libexec/evolution-calendar-factory-subprocess
global_pid:     6545
kernel:         4.5.0-0.rc7.git0.2.fc24.x86_64
reproducible:   The problem occurs regularly

Core was generated by `/usr/libexec/evolution-calendar-factory-subprocess --factory ews --bus-name org'.
Program terminated with signal SIGSEGV, Segmentation fault.




+
Trace
    236221






Thread 1
          (Thread 0x7f545f1ef700 (LWP 6558))


    

  • 
#0
icaltimezone_load_builtin_timezone

    
                at /usr/src/debug/libical-2.0.0/src/libical/icaltimezone.c
                  line
                  1735

    

    • 

  • 
#1
icaltimezone_ensure_coverage

    
                at /usr/src/debug/libical-2.0.0/src/libical/icaltimezone.c
                  line
                  432

    

    • 

  • 
#2
icaltimezone_get_utc_offset

    
                at /usr/src/debug/libical-2.0.0/src/libical/icaltimezone.c
                  line
                  782

    

    • 

  • 
#3
icaltimezone_convert_time

    
                at /usr/src/debug/libical-2.0.0/src/libical/icaltimezone.c
                  line
                  743

    

    • 

  • 
#4
icaltime_as_timet_with_zone

    
                at /usr/src/debug/libical-2.0.0/src/libical/icaltime.c
                  line
                  352

    

    • 

  • 
#5
e_cal_recur_generate_instances_sync

    
                at e-cal-recur.c
                  line
                  394

    

    • 

  • 
#6
e_cal_recur_generate_instances

    
                at e-cal-recur.c
                  line
                  1331

    

    • 

  • 
#7
func_occur_in_time_range

    
                at e-cal-backend-sexp.c
                  line
                  207

    

    • 

  • 
#8
e_sexp_term_eval

    
                at e-sexp.c
                  line
                  781

    

    • 

  • 
#9
e_sexp_eval

    
                at e-sexp.c
                  line
                  1693

    

    • 

  • 
#10
e_cal_backend_sexp_match_comp

    
                at e-cal-backend-sexp.c
                  line
                  1266

    

    • 

  • 
#11
cal_backend_ews_get_object_list

    
                at e-cal-backend-ews.c
                  line
                  963

    

    • 

  • 
#12
e_cal_backend_ews_get_object_list

    
                at e-cal-backend-ews.c
                  line
                  983

    

    • 

  • 
#13
cal_backend_get_object_list_thread

    
                at e-cal-backend.c
                  line
                  2090

    

    • 

  • 
#14
cal_backend_dispatch_thread

    
                at e-cal-backend.c
                  line
                  241

    

    • 

  • 
#15
g_thread_pool_thread_proxy

    
                at gthreadpool.c
                  line
                  307

    

    • 

  • 
#16
g_thread_proxy

    
                at gthread.c
                  line
                  780

    

    • 

  • 
#17
start_thread

    
                at pthread_create.c
                  line
                  333

    

    • 

  • 
#18
clone

    
                at ../sysdeps/unix/sysv/linux/x86_64/clone.S
                  line
                  109

    

    • 













Comment 16


Milan Crha





          2016-06-14 15:40:26 UTC
        



I get a similar crash here, using evolution-ews with the steps:
a) stop all evolution related processes 
b) cleanup ~/.cache/evolution/calendar/<ews-source-id>/
c) run evolution
d) wait a bit, give a chance to the ews calendar to load something from my server
e) close evolution
f) run evolution

If I manage to run the evolution while the previous view is still running, it seems, then I get the crash quite close to the one at the previous comment.






Comment 17


Milan Crha





          2016-06-17 12:07:13 UTC
        



The problem was that the evolution-ews assigned a timezone which was assigned to a component which had been freed early, thus this was some sort of use-after-free. I changed both evolution-data-server and evolution-ews, the former to not use set timezone on an icaltimetype structure, but always either unset it or set it a timezone which comes from an ETimezoneCache. The change in the evolution-ews was about not adding timezone components into a component which is going to be freed shortly afterwards.

Created commit f5b6da9 in eds master (3.21.3+)
Created commit 3ada780 in eds gnome-3-20 (3.20.4+)

Created commit_2c2a231 in ews master (3.21.3+) [1]
Created commit_42bcde0 in ews gnome-3-20 (3.20.4+)

[1] https://git.gnome.org/browse/evolution-ews/commit/?id=2c2a231