After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 240627 - crash selecting message text
crash selecting message text
Status: RESOLVED FIXED
Product: GtkHtml
Classification: Other
Component: Editing
unspecified
Other All
: Normal normal
: 1.4.x
Assigned To: gtkhtml-maintainers
Evolution QA team
: 235745 251391 252405 (view as bug list)
Depends on:
Blocks:
 
 
Reported: 2003-04-01 17:41 UTC by Larry Ewing
Modified: 2003-12-23 19:46 UTC
See Also:
GNOME target: ---
GNOME version: ---


Description Larry Ewing 2003-04-01 17:41:58 UTC 
Package: GtkHtml
Priority: Normal
Version: GNOME2.2.0 1.3.1.99
os_details: Gnome.Org
Synopsis: crash selecting message text
Bugzilla-Product: GtkHtml
Bugzilla-Component: Editing
BugBuddy-GnomeVersion: 2.0 (2.2.0.1)
Description:
selected text in a message.. boom

I think this is iframe related (it was an html message)


Debugging Information:

Backtrace was generated from '/usr/bin/evolution-1.3'

[New Thread 1024 (LWP 20696)]
[New Thread 2049 (LWP 20699)]
[New Thread 1026 (LWP 20700)]
[New Thread 2051 (LWP 20701)]
[New Thread 3076 (LWP 20702)]
[New Thread 4101 (LWP 20703)]
[New Thread 7174 (LWP 20710)]
0x4105b4d9 in wait4 () from /lib/libc.so.6

+ Trace 35457

Thread 1 (Thread 1024 (LWP 20696))

  • #0 wait4
    from /lib/libc.so.6
  • #1 __DTOR_END__
    from /lib/libc.so.6
  • #2 waitpid
    from /lib/libpthread.so.0
  • #3 libgnomeui_segv_handle
    at gnome-ui-init.c line 646
  • #4 segv_redirect
    at main.c line 484
  • #5 segv_redirect
    at component-factory.c line 1622
  • #6 pthread_sighandler
    from /lib/libpthread.so.0
  • #7 <signal handler called>
  • #8 ??
  • #9 html_image_factory_unregister
    at htmlimage.c line 1341
  • #10 destroy
    at htmlimage.c line 150
  • #11 html_object_destroy
    at htmlobject.c line 834
  • #12 destroy
    at htmlclue.c line 50
  • #13 html_object_destroy
    at htmlobject.c line 834
  • #14 destroy
    at htmlclue.c line 50
  • #15 destroy
    at htmlclueflow.c line 108
  • #16 html_object_destroy
    at htmlobject.c line 834
  • #17 destroy
    at htmlclue.c line 50
  • #18 html_object_destroy
    at htmlobject.c line 834
  • #19 destroy
    at htmltable.c line 93
  • #20 html_object_destroy
    at htmlobject.c line 834
  • #21 destroy
    at htmlclue.c line 50
  • #22 destroy
    at htmlclueflow.c line 108
  • #23 html_object_destroy
    at htmlobject.c line 834
  • #24 destroy
    at htmlclue.c line 50
  • #25 html_object_destroy
    at htmlobject.c line 834
  • #26 clear_primary
    at htmlselection.c line 133
  • #27 html_engine_activate_selection
    at htmlselection.c line 396
  • #28 html_engine_update_selection_active_state
    at htmlselection.c line 417
  • #29 button_release_event
    at gtkhtml.c line 1516
  • #30 _gtk_marshal_BOOLEAN__BOXED
    at gtkmarshalers.c line 82
  • #31 g_cclosure_new_swap
    from /usr/lib/libgobject-2.0.so.0
  • #32 g_closure_invoke
    from /usr/lib/libgobject-2.0.so.0
  • #33 g_signal_emit_by_name
    from /usr/lib/libgobject-2.0.so.0
  • #34 g_signal_emit_valist
    from /usr/lib/libgobject-2.0.so.0
  • #35 g_signal_emit
    from /usr/lib/libgobject-2.0.so.0
  • #36 gtk_widget_event_internal
    at gtkwidget.c line 3143
  • #37 gtk_propagate_event
    at gtkmain.c line 2253
  • #38 gtk_main_do_event
    at gtkmain.c line 1502
  • #39 gdk_event_dispatch
    at gdkevents-x11.c line 2018
  • #40 g_get_current_time
    from /usr/lib/libglib-2.0.so.0
  • #41 g_main_context_dispatch
    from /usr/lib/libglib-2.0.so.0
  • #42 g_main_context_dispatch
    from /usr/lib/libglib-2.0.so.0
  • #43 g_main_loop_run
    from /usr/lib/libglib-2.0.so.0
  • #44 bonobo_main
    at bonobo-main.c line 293
  • #45 main
    at main.c line 610
  • #46 __libc_start_main
    from /lib/libc.so.6
  • #0 wait4
    from /lib/libc.so.6 



Setting qa contact to the default for this product.
   This bug either had no qa contact or an invalid one.
Comment 1 Gerardo Marin 2003-04-02 00:16:19 UTC 
This looks a lot like bug 236166
Rodo or Lewing: is it?
Comment 2 Larry Ewing 2003-04-03 21:23:09 UTC 
it appears that the copy in the cut buffer has a refernce to the
engine of an iframe.  When the iframe is destroyed the clipboard holds
a refernce to a stale image factory and with the clipboard is cleared
it hits the stale pointer when trying to remove it from the engine.
Comment 3 Larry Ewing 2003-04-05 00:08:55 UTC 
fixed in CVS
Comment 4 Gerardo Marin 2003-11-12 04:27:50 UTC 
*** http://bugzilla.ximian.com/show_bug.cgi?id=50818 has been marked as a duplicate of this bug. ***
Comment 5 Gerardo Marin 2003-11-28 23:26:26 UTC 
*** bug 251391 has been marked as a duplicate of this bug. ***
Comment 6 Gerardo Marin 2003-11-28 23:26:57 UTC 
*** bug 235745 has been marked as a duplicate of this bug. ***
Comment 7 Gerardo Marin 2003-12-23 19:46:34 UTC 
*** bug 252405 has been marked as a duplicate of this bug. ***