Bug 672135 – Double free on quit

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 672135 - Double free on quit


Summary:	Double free on quit


Status:	RESOLVED OBSOLETE

Product:	evolution
Classification:	Applications
Component:	Mailer
Version:	3.4.x (obsolete)
Hardware:	Other Linux

Importance:	Normal critical
Target Milestone:	---
Assigned To:	evolution-mail-maintainers
QA Contact:	Evolution QA team

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2012-03-15 13:27 UTC by Milan Crha
Modified:	2015-04-30 06:45 UTC

See Also:
GNOME target:	---
GNOME version:	---

Description Milan Crha 2012-03-15 13:27:42 UTC

Moving this from a downstream bug report:
https://bugzilla.redhat.com/show_bug.cgi?id=803537

[abrt] evolution-3.2.3-1.fc16: Process /usr/bin/evolution was killed by signal 6 (SIGABRT)

libreport version: 2.0.8
abrt_version:   2.0.7
backtrace_rating: 4
cmdline:        evolution
executable:     /usr/bin/evolution
kernel:         3.2.6-3.fc16.i686
reason:         Process /usr/bin/evolution was killed by signal 6 (SIGABRT)
time:           Wed 14 Mar 2012 03:12:30 PM GMT

Last few lines from xsession_errors:
evolution-shell-Message: Network disconnected.  Forced offline.
evolution-shell-Message: Connection established.  Going online.
** (evolution:15596): CRITICAL **: send_dbus_message: assertion `display_name != NULL' failed
(evolution:15596): GLib-GObject-CRITICAL **: g_object_unref: assertion `G_IS_OBJECT (object)' failed
(evolution:15596): GLib-GObject-CRITICAL **: g_object_unref: assertion `G_IS_OBJECT (object)' failed
(evolution:15596): e-utils-CRITICAL **: ec_assistant_forward: assertion `link != NULL' failed
(evolution:15596): e-utils-CRITICAL **: ec_assistant_forward: assertion `link != NULL' failed
(evolution:15596): e-utils-CRITICAL **: ec_assistant_forward: assertion `link != NULL' failed
(evolution:15596): e-utils-CRITICAL **: ec_assistant_forward: assertion `link != NULL' failed
(evolution:15596): e-utils-CRITICAL **: ec_assistant_forward: assertion `link != NULL' failed
(evolution:15596): e-utils-CRITICAL **: ec_assistant_forward: assertion `link != NULL' failed
(evolution:15596): e-utils-CRITICAL **: ec_assistant_forward: assertion `link != NULL' failed
(evolution:15596): e-utils-CRITICAL **: ec_assistant_forward: assertion `link != NULL' failed
(evolution:15596): GLib-GObject-CRITICAL **: g_object_unref: assertion `G_IS_OBJECT (object)' failed
(evolution:15596): GLib-GObject-CRITICAL **: g_object_unref: assertion `G_IS_OBJECT (object)' failed
(evolution:15596): composer-CRITICAL **: e_composer_paste_text: assertion `text != NULL' failed
(evolution:15596): composer-CRITICAL **: e_composer_paste_text: assertion `text != NULL' failed
(evolution:15596): composer-CRITICAL **: e_composer_paste_text: assertion `text != NULL' failed
(evolution:15596): GLib-GObject-CRITICAL **: g_object_unref: assertion `G_IS_OBJECT (object)' failed
(evolution:15596): GLib-GObject-CRITICAL **: g_object_unref: assertion `G_IS_OBJECT (object)' failed
*** glibc detected *** evolution: double free or corruption (!prev): 0x093a9330 ***

+ Trace 229883

Thread 1 (Thread 0xb76ebb00 (LWP 15596))

#0 __kernel_vsyscall
#1 __GI_raise
at ../nptl/sysdeps/unix/sysv/linux/raise.c line 64
#2 __GI_abort
at abort.c line 91
#3 __libc_message
at ../sysdeps/unix/sysv/linux/libc_fatal.c line 198
#4 malloc_printerr
at malloc.c line 5021
#5 _int_free
at malloc.c line 3942
#6 standard_free
at gmem.c line 101
#7 g_free
at gmem.c line 263
#8 g_hash_table_remove_all_nodes
at ghash.c line 492
#9 g_hash_table_remove_all
at ghash.c line 1253
#10 g_hash_table_destroy
at ghash.c line 1004
#11 ??
from /usr/lib/libgtk-3.so.0
#12 g_object_unref
at gobject.c line 2746
#13 ??
from /usr/lib/libgtk-3.so.0
#14 g_hash_table_remove_all_nodes
at ghash.c line 495
#15 g_hash_table_remove_all
at ghash.c line 1253
#16 gtk_style_context_invalidate
from /usr/lib/libgtk-3.so.0
#17 gtk_style_context_set_path
from /usr/lib/libgtk-3.so.0
#18 gtk_widget_get_path
from /usr/lib/libgtk-3.so.0
#19 ??
from /usr/lib/libgtk-3.so.0
#20 gtk_widget_reset_style
from /usr/lib/libgtk-3.so.0
#21 ??
from /usr/lib/libgtk-3.so.0
#22 gtk_container_foreach
from /usr/lib/libgtk-3.so.0
#23 ??
from /usr/lib/libgtk-3.so.0
#24 ??
from /usr/lib/libgtk-3.so.0
#25 ??
from /usr/lib/libgtk-3.so.0
#26 g_cclosure_marshal_VOID__OBJECT
at gmarshal.c line 644
#27 g_type_class_meta_marshal
at gclosure.c line 885
#28 g_closure_invoke
at gclosure.c line 774
#29 signal_emit_unlocked_R
at gsignal.c line 3202
#30 g_signal_emit_valist
at gsignal.c line 3003
#31 g_signal_emit
at gsignal.c line 3060
#32 gtk_container_add
from /usr/lib/libgtk-3.so.0
#33 ??
from /usr/lib/libgtk-3.so.0
#34 g_cclosure_marshal_VOID__VOID
at gmarshal.c line 85
#35 g_type_class_meta_marshal
at gclosure.c line 885
#36 g_closure_invoke
at gclosure.c line 774
#37 signal_emit_unlocked_R
at gsignal.c line 3310
#38 g_signal_emit_valist
at gsignal.c line 3003
#39 g_signal_emit
at gsignal.c line 3060
#40 gtk_tool_item_toolbar_reconfigured
from /usr/lib/libgtk-3.so.0
#41 ??
from /usr/lib/libgtk-3.so.0
#42 ??
from /usr/lib/libgtk-3.so.0
#43 g_cclosure_marshal_VOID__ENUM
at gmarshal.c line 364
#44 g_type_class_meta_marshal
at gclosure.c line 885
#45 g_closure_invoke
at gclosure.c line 774
#46 signal_emit_unlocked_R
at gsignal.c line 3202
#47 g_signal_emit_valist
at gsignal.c line 3003
#48 g_signal_emit
at gsignal.c line 3060
#49 gtk_toolbar_unset_style
from /usr/lib/libgtk-3.so.0
#50 ??
from /usr/lib/libgtk-3.so.0
#51 g_cclosure_marshal_VOID__OBJECT
at gmarshal.c line 644
#52 g_type_class_meta_marshal
at gclosure.c line 885
#53 g_closure_invoke
at gclosure.c line 774
#54 signal_emit_unlocked_R
at gsignal.c line 3310
#55 g_signal_emit_valist
at gsignal.c line 3003
#56 g_signal_emit
at gsignal.c line 3060
#57 ??
from /usr/lib/libgtk-3.so.0
#58 ??
from /usr/lib/libgtk-3.so.0
#59 ??
from /usr/lib/libgtk-3.so.0
#60 gtk_container_forall
from /usr/lib/libgtk-3.so.0
#61 ??
from /usr/lib/libgtk-3.so.0
#62 ??
from /usr/lib/libgtk-3.so.0
#63 gtk_container_forall
from /usr/lib/libgtk-3.so.0
#64 ??
from /usr/lib/libgtk-3.so.0
#65 ??
from /usr/lib/libgtk-3.so.0
#66 gtk_widget_unparent
from /usr/lib/libgtk-3.so.0
#67 ??
from /usr/lib/libgtk-3.so.0
#68 g_cclosure_marshal_VOID__OBJECT
at gmarshal.c line 644
#69 g_type_class_meta_marshal
at gclosure.c line 885
#70 g_closure_invoke
at gclosure.c line 774
#71 signal_emit_unlocked_R
at gsignal.c line 3202
#72 g_signal_emit_valist
at gsignal.c line 3003
#73 g_signal_emit
at gsignal.c line 3060
#74 gtk_container_remove
from /usr/lib/libgtk-3.so.0
#75 ??
from /usr/lib/libgtk-3.so.0
#76 g_object_run_dispose
at gobject.c line 945
#77 gtk_widget_destroy
from /usr/lib/libgtk-3.so.0
#78 ??
from /usr/lib/libgtk-3.so.0
#79 gtk_container_foreach
from /usr/lib/libgtk-3.so.0
#80 ??
from /usr/lib/libgtk-3.so.0
#81 ??
from /usr/lib/libgtk-3.so.0
#82 g_cclosure_marshal_VOID__VOID
at gmarshal.c line 85
#83 g_type_class_meta_marshal
at gclosure.c line 885
#84 g_closure_invoke
at gclosure.c line 774
#85 signal_emit_unlocked_R
at gsignal.c line 3388
#86 g_signal_emit_valist
at gsignal.c line 3003
#87 g_signal_emit
at gsignal.c line 3060
#88 ??
from /usr/lib/libgtk-3.so.0
#89 ??
from /usr/lib/libgtk-3.so.0
#90 shell_window_dispose
at e-shell-window.c line 326
#91 g_object_run_dispose
at gobject.c line 945
#92 gtk_widget_destroy
from /usr/lib/libgtk-3.so.0
#93 g_list_foreach
at glist.c line 938
#94 shell_ready_for_quit
at e-shell.c line 459
#95 shell_ready_for_quit
at e-shell.c line 432
#96 toggle_refs_notify
at gobject.c line 2497
#97 mail_backend_store_operation_done_cb
at e-mail-backend.c line 128
#98 g_simple_async_result_complete
at gsimpleasyncresult.c line 749
#99 complete_in_idle_cb_for_thread
at gsimpleasyncresult.c line 817
#100 g_idle_dispatch
at gmain.c line 4801
#101 g_main_dispatch
at gmain.c line 2441
#102 g_main_context_dispatch
at gmain.c line 3011
#103 g_main_context_iterate
at gmain.c line 3089
#104 g_main_loop_run
at gmain.c line 3297
#105 gtk_main
from /usr/lib/libgtk-3.so.0
#106 main
at main.c line 709

Comment 1 Milan Crha 2012-10-17 06:28:36 UTC

A similar downstream bug report from 3.4.4:
https://bugzilla.redhat.com/show_bug.cgi?id=865934

Maybe it's related to bug #641708.

+ Trace 231047

Thread 1 (Thread 0xb77a48c0 (LWP 1435))

#0 g_object_unref
at gobject.c line 2910
#1 gtk_widget_real_destroy
at gtkwidget.c line 10373
#2 gtk_label_destroy
at gtklabel.c line 3100
#3 g_cclosure_marshal_VOID__VOID
at gmarshal.c line 85
#4 g_type_class_meta_marshal
at gclosure.c line 970
#5 g_closure_invoke
at gclosure.c line 777
#6 signal_emit_unlocked_R
at gsignal.c line 3667
#7 g_signal_emit_valist
at gsignal.c line 3300
#8 g_signal_emit
at gsignal.c line 3356
#9 gtk_widget_dispose
at gtkwidget.c line 10338
#10 g_object_run_dispose
at gobject.c line 1061
#11 gtk_widget_destroy
at gtkwidget.c line 3943
#12 gtk_box_forall
at gtkbox.c line 1858
#13 gtk_container_foreach
at gtkcontainer.c line 2041
#14 gtk_container_destroy
at gtkcontainer.c line 1370
#15 g_cclosure_marshal_VOID__VOID
at gmarshal.c line 85
#16 g_type_class_meta_marshal
at gclosure.c line 970
#17 g_closure_invoke
at gclosure.c line 777
#18 signal_emit_unlocked_R
at gsignal.c line 3667
#19 g_signal_emit_valist
at gsignal.c line 3300
#20 g_signal_emit
at gsignal.c line 3356
#21 gtk_widget_dispose
at gtkwidget.c line 10338
#22 g_object_run_dispose
at gobject.c line 1061
#23 gtk_widget_destroy
at gtkwidget.c line 3943
#24 gtk_box_forall
at gtkbox.c line 1858
#25 gtk_container_foreach
at gtkcontainer.c line 2041
#26 gtk_container_destroy
at gtkcontainer.c line 1370
#27 g_cclosure_marshal_VOID__VOID
at gmarshal.c line 85
#28 g_type_class_meta_marshal
at gclosure.c line 970
#29 g_closure_invoke
at gclosure.c line 777
#30 signal_emit_unlocked_R
at gsignal.c line 3667
#31 g_signal_emit_valist
at gsignal.c line 3300
#32 g_signal_emit
at gsignal.c line 3356
#33 gtk_widget_dispose
at gtkwidget.c line 10338
#34 g_object_run_dispose
at gobject.c line 1061
#35 gtk_widget_destroy
at gtkwidget.c line 3943
#36 gtk_box_forall
at gtkbox.c line 1858
#37 gtk_container_foreach
at gtkcontainer.c line 2041
#38 gtk_container_destroy
at gtkcontainer.c line 1370
#39 g_cclosure_marshal_VOID__VOID
at gmarshal.c line 85
#40 g_type_class_meta_marshal
at gclosure.c line 970
#41 g_closure_invoke
at gclosure.c line 777
#42 signal_emit_unlocked_R
at gsignal.c line 3667
#43 g_signal_emit_valist
at gsignal.c line 3300
#44 g_signal_emit
at gsignal.c line 3356
#45 gtk_widget_dispose
at gtkwidget.c line 10338
#46 alert_bar_dispose
at e-alert-bar.c line 231
#47 g_object_run_dispose
at gobject.c line 1061
#48 gtk_widget_destroy
at gtkwidget.c line 3943
#49 gtk_box_forall
at gtkbox.c line 1858
#50 gtk_container_foreach
at gtkcontainer.c line 2041
#51 gtk_container_destroy
at gtkcontainer.c line 1370
#52 g_cclosure_marshal_VOID__VOID
at gmarshal.c line 85
#53 g_type_class_meta_marshal
at gclosure.c line 970
#54 g_closure_invoke
at gclosure.c line 777
#55 signal_emit_unlocked_R
at gsignal.c line 3667
#56 g_signal_emit_valist
at gsignal.c line 3300
#57 g_signal_emit
at gsignal.c line 3356
#58 gtk_widget_dispose
at gtkwidget.c line 10338
#59 g_object_run_dispose
at gobject.c line 1061
#60 gtk_widget_destroy
at gtkwidget.c line 3943
#61 gtk_paned_forall
at gtkpaned.c line 1958
#62 gtk_container_foreach
at gtkcontainer.c line 2041
#63 gtk_container_destroy
at gtkcontainer.c line 1370
#64 g_cclosure_marshal_VOID__VOID
at gmarshal.c line 85
#65 g_type_class_meta_marshal
at gclosure.c line 970
#66 g_closure_invoke
at gclosure.c line 777
#67 signal_emit_unlocked_R
at gsignal.c line 3667
#68 g_signal_emit_valist
at gsignal.c line 3300
#69 g_signal_emit
at gsignal.c line 3356
#70 gtk_widget_dispose
at gtkwidget.c line 10338
#71 g_object_run_dispose
at gobject.c line 1061
#72 gtk_widget_destroy
at gtkwidget.c line 3943
#73 gtk_box_forall
at gtkbox.c line 1858
#74 gtk_container_foreach
at gtkcontainer.c line 2041
#75 gtk_container_destroy
at gtkcontainer.c line 1370
#76 g_cclosure_marshal_VOID__VOID
at gmarshal.c line 85
#77 g_type_class_meta_marshal
at gclosure.c line 970
#78 g_closure_invoke
at gclosure.c line 777
#79 signal_emit_unlocked_R
at gsignal.c line 3667
#80 g_signal_emit_valist
at gsignal.c line 3300
#81 g_signal_emit
at gsignal.c line 3356
#82 gtk_widget_dispose
at gtkwidget.c line 10338
#83 g_object_run_dispose
at gobject.c line 1061
#84 gtk_widget_destroy
at gtkwidget.c line 3943
#85 gtk_bin_forall
at gtkbin.c line 170
#86 gtk_container_foreach
at gtkcontainer.c line 2041
#87 gtk_container_destroy
at gtkcontainer.c line 1370
#88 gtk_window_destroy
at gtkwindow.c line 4736
#89 g_cclosure_marshal_VOID__VOID
at gmarshal.c line 85
#90 g_type_class_meta_marshal
at gclosure.c line 970
#91 g_closure_invoke
at gclosure.c line 777
#92 signal_emit_unlocked_R
at gsignal.c line 3667
#93 g_signal_emit_valist
at gsignal.c line 3300
#94 g_signal_emit
at gsignal.c line 3356
#95 gtk_widget_dispose
at gtkwidget.c line 10338
#96 gtk_window_dispose
at gtkwindow.c line 2429
#97 shell_window_dispose
at e-shell-window.c line 378
#98 g_object_run_dispose
at gobject.c line 1061
#99 gtk_widget_destroy
at gtkwidget.c line 3943
#100 g_list_insert
at glist.c line 308
#101 shell_ready_for_quit
at e-shell.c line 413
#102 shell_ready_for_quit
at e-shell.c line 383
#103 toggle_refs_notify
at gobject.c line 2727
#104 mail_backend_store_operation_done_cb
at e-mail-backend.c line 134
#105 g_simple_async_result_complete
at gsimpleasyncresult.c line 767
#106 complete_in_idle_cb_for_thread
at gsimpleasyncresult.c line 835
#107 g_source_set_priority_unlocked
at gmain.c line 1390
#108 ??

Comment 2 Milan Crha 2015-04-30 06:45:59 UTC

No duplicates for a long time, I'm closing this.