GNOME Bugzilla – Bug 349310
crash on Evolution
Last modified: 2013-09-13 00:52:41 UTC
What were you doing when the application crashed? Distribution: Gentoo Base System version 1.12.1 Gnome Release: 2.15.90 2006-07-26 (Gentoo) BugBuddy Version: 2.15.90 Memory status: size: 397561856 vsize: 397561856 resident: 32419840 share: 19607552 rss: 32419840 rss_rlim: -1 CPU usage: start_time: 1154264525 rtime: 60 utime: 56 stime: 4 cutime:0 cstime: 0 timeout: 0 it_real_value: 0 frequency: 100 Backtrace was generated from '/usr/bin/evolution-2.8' (no debugging symbols found) Using host libthread_db library "/lib/libthread_db.so.1". (no debugging symbols found) [Thread debugging using libthread_db enabled] [New Thread 47569220670720 (LWP 25017)] [New Thread 1126345040 (LWP 25031)] [New Thread 1117952336 (LWP 25030)] [New Thread 1109559632 (LWP 25028)] [New Thread 1092774224 (LWP 25027)] [New Thread 1101166928 (LWP 25026)] [New Thread 1084381520 (LWP 25024)] [New Thread 1075988816 (LWP 25019)] [New Thread 1073822032 (LWP 25018)] 0x00002b43918528cf in waitpid () from /lib/libpthread.so.0
+ Trace 69795
Thread 1 (Thread 47569220670720 (LWP 25017))
*** Bug 349414 has been marked as a duplicate of this bug. ***
confirming as per duplicate. also see bug 349161. ETable?
also see bug 350607
*** Bug 350607 has been marked as a duplicate of this bug. ***
*** Bug 350718 has been marked as a duplicate of this bug. ***
also see the stacktrace at bug 350746
*** Bug 350756 has been marked as a duplicate of this bug. ***
targetting to 2.8 - too many duplicates in too little time
crashes in cairo. NOTGNOME?
This is my cairo version: ii libcairo2 1.2.2-1ubuntu1 The Cairo 2D vector graphics library
*** Bug 351153 has been marked as a duplicate of this bug. ***
*** Bug 351154 has been marked as a duplicate of this bug. ***
Still getting this one about 20 times a day...
*** Bug 351854 has been marked as a duplicate of this bug. ***
I'm currently debugging evolution to get rid of this bug. Currently it seems problem lies when returning from the get_font_options function. Normally the caller should have a valid (const cairo_font_options_t *) value and into the get_font_options, the value is correct. But just after returning the value is mangled. Looking into the machine code, I see something nasty: <build_layout+186>: xor %eax,%eax <build_layout+188>: callq 0x2b7e7d2b1340 <get_font_options@plt> <build_layout+193>: movslq %eax,%r12 <build_layout+196>: mov %rbx,%rdi <build_layout+199>: mov %r12,%rsi <build_layout+202>: callq 0x2b7e7d2b2540 <pango_cairo_context_set_font_options@plt> The return value is stored into %rax (64bit register) but it is %eax (32bit register) which is stored into %r12 so there's a big risk that the return value is mangled I suppose this bug only concern AMD64 platform (or perhaps 64bits platforms) but architecture is not reported by bug buddy
I think I just found the cause Extract from build log: e-cell-text.c: In function 'build_layout': e-cell-text.c:588: warning: implicit declaration of function 'get_font_options' e-cell-text.c:588: warning: assignment makes pointer from integer without a cast e-cell-text.c:601: warning: assignment discards qualifiers from pointer target type
The get_font_options function definition is missing. Adding it solved the machine code problem and crashes disappeared
Created attachment 71188 [details] [review] Patch to add missing declaration
*** Bug 349161 has been marked as a duplicate of this bug. ***
*** Bug 352015 has been marked as a duplicate of this bug. ***
fixed to HEAD.
Thanks for committing the patch but so far I don't see in CVS any modification to e-util.h (although ChangeLog was modified). I want to be sure it is fixed for Gnome 2.16 RC1 ;-)
looks like srini committed the changelog entry, but not the patch itself. :-)
fixed to HEAD - this time for real. ;-) http://cvs.gnome.org/viewcvs/evolution/e-util/e-util.h?r1=1.61&r2=1.62
*** Bug 352302 has been marked as a duplicate of this bug. ***
*** Bug 352319 has been marked as a duplicate of this bug. ***
*** Bug 352462 has been marked as a duplicate of this bug. ***
*** Bug 352813 has been marked as a duplicate of this bug. ***
*** Bug 352954 has been marked as a duplicate of this bug. ***
*** Bug 353392 has been marked as a duplicate of this bug. ***
*** Bug 353469 has been marked as a duplicate of this bug. ***
*** Bug 353564 has been marked as a duplicate of this bug. ***
*** Bug 353897 has been marked as a duplicate of this bug. ***
*** Bug 353945 has been marked as a duplicate of this bug. ***
*** Bug 354179 has been marked as a duplicate of this bug. ***
*** Bug 354227 has been marked as a duplicate of this bug. ***
*** Bug 354309 has been marked as a duplicate of this bug. ***
*** Bug 354525 has been marked as a duplicate of this bug. ***
*** Bug 354740 has been marked as a duplicate of this bug. ***