Bug 662742 – Double free when expunging completed tasks

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 662742 - Double free when expunging completed tasks


Summary:	Double free when expunging completed tasks


Status:	RESOLVED FIXED

Product:	evolution
Classification:	Applications
Component:	Tasks
Version:	3.2.x (obsolete)
Hardware:	Other Linux

Importance:	Normal critical
Target Milestone:	---
Assigned To:	evolution-calendar-maintainers
QA Contact:	Evolution QA team

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2011-10-26 07:46 UTC by Milan Crha
Modified:	2011-10-26 09:23 UTC

See Also:
GNOME target:	---
GNOME version:	---

Attachments
evo patch (487 bytes, patch) 2011-10-26 09:21 UTC, Milan Crha	committed	Details \| Review

Description Milan Crha 2011-10-26 07:46:16 UTC

Moving this from a downstream bug report:
https://bugzilla.redhat.com/show_bug.cgi?id=748788

libreport version: 2.0.6
abrt_version:   2.0.4.981
backtrace_rating: 4
cmdline:        evolution
comment:        Hit Ctrl E in the task window
crash_function: pvl_head
executable:     /usr/bin/evolution
kernel:         3.1.0-0.rc10.git0.1.fc16.x86_64
reason:         Process /usr/bin/evolution was killed by signal 11 (SIGSEGV)
time:           Tue Oct 25 16:54:28 2011

Core was generated by `evolution'.
Program terminated with signal 11, Segmentation fault.

+ Trace 228911

Thread 2 (Thread 0x7fe942057700 (LWP 2024))

#0 read
at ../sysdeps/unix/syscall-template.S line 82
#1 read
at /usr/include/bits/unistd.h line 45
#2 unix_signal_helper_thread
at gmain.c line 4551
#3 g_thread_create_proxy
at gthread.c line 1962
#4 start_thread
at pthread_create.c line 309
#5 clone
at ../sysdeps/unix/sysv/linux/x86_64/clone.S line 115

Thread 1 (Thread 0x7fe94a3ce980 (LWP 2022))

#0 pvl_head
at pvl.c line 554
#1 icalcomponent_free
at icalcomponent.c line 268
#2 g_slist_foreach
at gslist.c line 880
#3 e_cal_client_free_icalcomp_slist
at e-cal-client.c line 1181
#4 e_task_shell_view_delete_completed
at e-task-shell-view-private.c line 513
#5 g_closure_invoke
at gclosure.c line 774
#6 signal_emit_unlocked_R
at gsignal.c line 3272
#7 g_signal_emit_valist
at gsignal.c line 3003
#8 g_signal_emit
at gsignal.c line 3060
#9 _gtk_action_emit_activate
at gtkaction.c line 799
#10 closure_accel_activate
at gtkaction.c line 1635
#11 closure_accel_activate
at gtkaction.c line 1626
#12 g_closure_invoke
at gclosure.c line 774
#13 signal_emit_unlocked_R
at gsignal.c line 3272
#14 g_signal_emit_valist
at gsignal.c line 3013
#15 g_signal_emit
at gsignal.c line 3060
#16 gtk_accel_group_activate
at gtkaccelgroup.c line 917
#17 gtk_accel_groups_activate
at gtkaccelgroup.c line 955
#18 gtk_window_activate_key
at gtkwindow.c line 9286
#19 gtk_window_key_press_event
at gtkwindow.c line 5858
#20 _gtk_marshal_BOOLEAN__BOXED
at gtkmarshalers.c line 85
#21 g_closure_invoke
at gclosure.c line 774
#22 signal_emit_unlocked_R
at gsignal.c line 3310
#23 g_signal_emit_valist
at gsignal.c line 3013
#24 g_signal_emit
at gsignal.c line 3060
#25 gtk_widget_event_internal
at gtkwidget.c line 6132
#26 gtk_propagate_event
at gtkmain.c line 2588
#27 gtk_main_do_event
at gtkmain.c line 1889
#28 gdk_event_source_dispatch
at gdkeventsource.c line 360
#29 g_main_dispatch
at gmain.c line 2425
#30 g_main_context_dispatch
at gmain.c line 2995
#31 g_main_context_iterate
at gmain.c line 3073
#32 g_main_loop_run
at gmain.c line 3281
#33 gtk_main
at gtkmain.c line 1362
#34 main
at main.c line 696

Comment 1 Milan Crha 2011-10-26 09:18:39 UTC

Confirming, I can reproduce it too.

Comment 2 Milan Crha 2011-10-26 09:21:05 UTC

Created attachment 200008 [details] [review]
evo patch

for evolution;

The icalcomponent had been freed twice, unfortunately.

Comment 3 Milan Crha 2011-10-26 09:23:49 UTC

Created commit 251b734 in evo master (3.3.2+)
Created commit 682883d in evo gnome-3-2 (3.2.2+)