Bug 371011 – crash in undo_or_redo at htmlengine-edit-clueflowstyle.c:176

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 371011 - crash in undo_or_redo at htmlengine-edit-clueflowstyle.c:176


Summary:	crash in undo_or_redo at htmlengine-edit-clueflowstyle.c:176


Status:	RESOLVED WONTFIX

Product:	GtkHtml
Classification:	Other
Component:	Editing
Version:	3.16.x
Hardware:	Other All

Importance:	High critical
Target Milestone:	---
Assigned To:	Johnny Jacob
QA Contact:	Evolution QA team

URL:
Whiteboard:	gnome[unmaintained]

Duplicates:	369979 487605 504790 508462 (view as bug list)
Depends on:
Blocks:

Reported:	2006-11-05 13:09 UTC by nowak2000
Modified:	2017-07-30 16:00 UTC

See Also:
GNOME target:	---
GNOME version:	2.15/2.16

Attachments
Proposed Patch (2.06 KB, patch) 2008-01-22 12:53 UTC, Johnny Jacob	committed	Details \| Review
Supplemental patch (538 bytes, patch) 2008-01-22 14:24 UTC, Matthew Barnes	committed	Details \| Review

Description nowak2000 2006-11-05 13:09:42 UTC

What were you doing when the application crashed?
1. Create a new e-mail. You should get a default signature in the letter.
2. Click in the letter and press CTRL+A, then apply a style "Ordered List".
3. Press CTRL+Z.

This bug is always reproducible, no matter how many times I recompile (remerge) the Evolution.


Distribution: Gentoo Base System version 1.12.6
Gnome Release: 2.16.1 2006-10-13 (Gentoo)
BugBuddy Version: 2.16.0

Memory status: size: 143286272 vsize: 0 resident: 143286272 share: 0 rss: 28176384 rss_rlim: 0
CPU usage: start_time: 1162731840 rtime: 0 utime: 596 stime: 0 cutime:542 cstime: 0 timeout: 54 it_real_value: 0 frequency: 298

Backtrace was generated from '/usr/bin/evolution-2.8'

Using host libthread_db library "/lib/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread -1229691200 (LWP 19902)]
[New Thread -1312474224 (LWP 19930)]
[New Thread -1304020080 (LWP 19920)]
[New Thread -1303753840 (LWP 19919)]
[New Thread -1295004784 (LWP 19918)]
[New Thread -1286612080 (LWP 19917)]
[New Thread -1256735856 (LWP 19916)]
[New Thread -1265128560 (LWP 19912)]
[New Thread -1248306288 (LWP 19909)]
0xb7fd1410 in ?? ()

+ Trace 83185

Comment 1 nowak2000 2006-11-05 13:16:32 UTC

*** Bug 369979 has been marked as a duplicate of this bug. ***

Comment 2 André Klapper 2006-11-05 13:25:28 UTC

reproducible with evolution 2.9.1:



Backtrace was generated from '/opt/gnome/libexec/evolution-2.10'

Using host libthread_db library "/lib/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread -1235244864 (LWP 3544)]
[New Thread -1609933920 (LWP 3674)]
[New Thread -1595917408 (LWP 3673)]
[New Thread -1663059040 (LWP 3644)]
[New Thread -1646273632 (LWP 3641)]
[New Thread -1637880928 (LWP 3640)]
[New Thread -1629488224 (LWP 3639)]
[New Thread -1612702816 (LWP 3637)]
[New Thread -1586496608 (LWP 3594)]
[New Thread -1418306656 (LWP 3551)]
[New Thread -1409913952 (LWP 3550)]
[New Thread -1401521248 (LWP 3549)]
0xffffe410 in __kernel_vsyscall ()

+ Trace 83190

Thread 1 (Thread -1235244864 (LWP 3544))

#0 __kernel_vsyscall
#1 __waitpid_nocancel
from /lib/libpthread.so.0
#2 libgnomeui_segv_handle
at gnome-ui-init.c line 870
#3 segv_redirect
at main.c line 426
#4 <signal handler called>
#5 undo_or_redo
at htmlengine-edit-clueflowstyle.c line 176
#6 action_do_and_destroy_undo
at htmlundo.c line 160
#7 html_undo_do_undo
at htmlundo.c line 188
#8 html_engine_undo
at htmlengine-edit.c line 71
#9 gtk_html_undo
at gtkhtml.c line 4382
#10 command
at gtkhtml.c line 4799
#11 gtk_html_command
at gtkhtml.c line 5605
#12 command_cb
at menubar.c line 578
#13 marshal_VOID__USER_DATA_STRING
at bonobo-ui-component.c line 221
#14 IA__g_closure_invoke
at gclosure.c line 490
#15 bonobo_closure_invoke_va_list
at bonobo-types.c line 404
#16 bonobo_closure_invoke
at bonobo-types.c line 467
#17 impl_Bonobo_UIComponent_execVerb
at bonobo-ui-component.c line 158
#18 _ORBIT_skel_small_Bonobo_UIComponent_execVerb
at Bonobo-common.c line 332
#19 ORBit_c_stub_invoke
at poa.c line 2630
#20 Bonobo_UIComponent_execVerb
at Bonobo-stubs.c line 544
#21 real_exec_verb
at bonobo-ui-engine.c line 1533
#22 impl_emit_verb_on
at bonobo-ui-engine.c line 1591
#23 IA__g_cclosure_marshal_VOID__POINTER
at gmarshal.c line 601
#24 g_type_class_meta_marshal
at gclosure.c line 567
#25 IA__g_closure_invoke
at gclosure.c line 490
#26 signal_emit_unlocked_R
at gsignal.c line 2478
#27 IA__g_signal_emit_valist
at gsignal.c line 2199
#28 IA__g_signal_emit
at gsignal.c line 2243
#29 bonobo_ui_engine_emit_verb_on_w
at bonobo-ui-engine.c line 3040
#30 exec_verb_cb
at bonobo-ui-sync-menu.c line 472
#31 IA__g_cclosure_marshal_VOID__VOID
at gmarshal.c line 77
#32 IA__g_closure_invoke
at gclosure.c line 490
#33 signal_emit_unlocked_R
at gsignal.c line 2440
#34 IA__g_signal_emit_valist
at gsignal.c line 2199
#35 IA__g_signal_emit
at gsignal.c line 2243
#36 closure_accel_activate
at gtkwidget.c line 3331
#37 IA__g_closure_invoke
at gclosure.c line 490
#38 signal_emit_unlocked_R
at gsignal.c line 2440
#39 IA__g_signal_emit_valist
#40 IA__g_signal_emit
at gsignal.c line 2243
#41 IA__gtk_accel_group_activate
at gtkaccelgroup.c line 736
#42 IA__gtk_accel_groups_activate
at gtkaccelgroup.c line 774
#43 IA__gtk_window_activate_key
at gtkwindow.c line 7704
#44 gtk_window_key_press_event
at gtkwindow.c line 4697
#45 bonobo_window_key_press_event
at bonobo-window.c line 267
#46 _gtk_marshal_BOOLEAN__BOXED
at gtkmarshalers.c line 84
#47 g_type_class_meta_marshal
at gclosure.c line 567
#48 IA__g_closure_invoke
at gclosure.c line 490
#49 signal_emit_unlocked_R
at gsignal.c line 2478
#50 IA__g_signal_emit_valist
at gsignal.c line 2209
#51 IA__g_signal_emit
at gsignal.c line 2243
#52 gtk_widget_event_internal
at gtkwidget.c line 3910
#53 IA__gtk_widget_event
at gtkwidget.c line 3716
#54 IA__gtk_propagate_event
at gtkmain.c line 2309
#55 IA__gtk_main_do_event
at gtkmain.c line 1569
#56 gdk_event_dispatch
at gdkevents-x11.c line 2321
#57 g_main_dispatch
at gmain.c line 2049
#58 IA__g_main_context_dispatch
at gmain.c line 2600
#59 g_main_context_iterate
at gmain.c line 2681
#60 IA__g_main_loop_run
at gmain.c line 2885
#61 bonobo_main
at bonobo-main.c line 311
#62 main
at main.c line 615
#0 __kernel_vsyscall

Comment 3 André Klapper 2007-12-21 17:39:14 UTC

*** Bug 487605 has been marked as a duplicate of this bug. ***

Comment 4 André Klapper 2007-12-21 17:39:17 UTC

*** Bug 504790 has been marked as a duplicate of this bug. ***

Comment 5 Johnny Jacob 2008-01-22 12:53:03 UTC

Created attachment 103426 [details] [review]
Proposed Patch

Comment 6 Matthew Barnes 2008-01-22 14:21:40 UTC

*** Bug 508462 has been marked as a duplicate of this bug. ***

Comment 7 Matthew Barnes 2008-01-22 14:24:54 UTC

Created attachment 103441 [details] [review]
Supplemental patch

I also found a flaw in the immediate vicinity of the crash.  I think this is what caused the actual crash to occur.  See [1] for details.

[1] http://bugzilla.gnome.org/show_bug.cgi?id=508462#c1

Comment 8 Milan Crha 2008-01-24 12:14:42 UTC

So, both patches does its work, even Johnny's patch works better, it removes the style paragraph even inside the signature table, but Matt's patch doesn't.
Anyway, I think we can commit both patches.

Comment 9 Suman Manjunath 2008-01-28 04:28:11 UTC

@jony: please change the status of patches you commit when you commit them.. :-/

Comment 10 Milan Crha 2008-01-28 12:02:29 UTC

Closing because it's in the trunk.

Comment 11 Johnny Jacob 2008-02-25 04:03:07 UTC

Patch reverted because of #514551. re-opening.

Comment 12 André Klapper 2014-08-30 15:18:12 UTC

This ticket has not seen any updates or duplicates since 2008.
Is this still a problem in a recently released version?
If not, this ticket might get closed soon as obsolete.

Comment 13 André Klapper 2017-07-30 16:00:47 UTC

GtkHtml is not under active development anymore. 
Evolution (its main consumer) switched to a WebKit backend a while ago. 
It is currently unlikely that there will be any further GtkHtml development.

Closing this report as WONTFIX as part of Bugzilla Housekeeping (bug 778387) to reflect reality. Please feel free to reopen this bug report in the future if anyone takes the responsibility for active development again.