After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 460204 - crash in Evolution Mail: I've alredy open a few a...
crash in Evolution Mail: I've alredy open a few a...
Status: RESOLVED FIXED
Product: evolution-data-server
Classification: Platform
Component: Mailer
2.22.x (obsolete)
Other All
: High critical
: ---
Assigned To: Milan Crha
Evolution QA team
: 487368 489809 491533 523046 525855 526693 533298 534082 543336 (view as bug list)
Depends on:
Blocks:
 
 
Reported: 2007-07-25 11:51 UTC by Enrico La Cava
Modified: 2008-10-01 15:49 UTC
See Also:
GNOME target: ---
GNOME version: 2.21/2.22


Attachments
The file that i've try to attach (3.33 KB, application/x-compressed-tar)
2007-08-02 15:25 UTC, Enrico La Cava
  Details
proposed evo patch (1.08 KB, patch)
2008-03-04 18:50 UTC, Milan Crha
committed Details | Review

Description Enrico La Cava 2007-07-25 11:51:49 UTC
What were you doing when the application crashed?
I've alredy open a few application like iceweasel, nautilus, konsole, KFTPgrabber, amarok, amsn and Kregator. I've try to add a tar.gz file to a new email. The file wasn't so big, only 3,3Kb.


Distribution: Debian lenny/sid
Gnome Release: 2.18.3 2007-07-03 (Debian)
BugBuddy Version: 2.18.1

System: Linux 2.6.21 #1 SMP PREEMPT Mon Jun 25 11:43:48 CEST 2007 i686
X Vendor: The X.Org Foundation
X Vendor Release: 10300000
Selinux: No
Accessibility: Disabled
GTK+ Theme: MurrinaFancyCandy
Icon Theme: Gion

Memory status: size: 146403328 vsize: 146403328 resident: 39501824 share: 22781952 rss: 39501824 rss_rlim: 4294967295
CPU usage: start_time: 1185357037 rtime: 1628 utime: 1378 stime: 250 cutime:28 cstime: 11 timeout: 0 it_real_value: 0 frequency: 100

Backtrace was generated from '/usr/bin/evolution'

Using host libthread_db library "/lib/i686/cmov/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread -1210370384 (LWP 4296)]
[New Thread -1296155760 (LWP 6559)]
[New Thread -1270801520 (LWP 4660)]
[New Thread -1250976880 (LWP 4658)]
[New Thread -1270535280 (LWP 4648)]
[New Thread -1242584176 (LWP 4611)]
[New Thread -1234191472 (LWP 4601)]
[New Thread -1225798768 (LWP 4600)]
[New Thread -1217406064 (LWP 4599)]
0xffffe410 in __kernel_vsyscall ()

Thread 1 (Thread -1210370384 (LWP 4296))

  • #0 __kernel_vsyscall
  • #1 __waitpid_nocancel
    from /lib/i686/cmov/libpthread.so.0
  • #2 libgnomeui_segv_handle
    at gnome-ui-init.c line 872
  • #3 segv_redirect
    at main.c line 427
  • #4 <signal handler called>
  • #5 camel_header_set_param
    at camel-mime-utils.c line 2084
  • #6 camel_content_type_set_param
    at camel-mime-utils.c line 2144
  • #7 camel_mime_part_set_filename
    at camel-mime-part.c line 450
  • #8 e_attachment_new
    at e-attachment.c line 285
  • #9 e_attachment_bar_attach
    at e-attachment-bar.c line 154
  • #10 add_to_bar
    at e-msg-composer.c line 1811
  • #11 select_attach_response
    at e-msg-composer-select-file.c line 224
  • #12 g_cclosure_marshal_VOID
    from /usr/lib/libgobject-2.0.so.0
  • #13 g_closure_invoke
    from /usr/lib/libgobject-2.0.so.0
  • #14 g_signal_override_class_closure
    from /usr/lib/libgobject-2.0.so.0
  • #15 g_signal_emit_valist
    from /usr/lib/libgobject-2.0.so.0
  • #16 g_signal_emit
    from /usr/lib/libgobject-2.0.so.0
  • #17 IA__gtk_dialog_response
    at /tmp/buildd/gtk+2.0-2.10.13/gtk/gtkdialog.c line 835
  • #18 action_widget_activated
    at /tmp/buildd/gtk+2.0-2.10.13/gtk/gtkdialog.c line 534
  • #19 g_cclosure_marshal_VOID__VOID
    from /usr/lib/libgobject-2.0.so.0
  • #20 g_closure_invoke
    from /usr/lib/libgobject-2.0.so.0
  • #21 g_signal_override_class_closure
    from /usr/lib/libgobject-2.0.so.0
  • #22 g_signal_emit_valist
    from /usr/lib/libgobject-2.0.so.0
  • #23 g_signal_emit
    from /usr/lib/libgobject-2.0.so.0
  • #24 IA__gtk_button_clicked
    at /tmp/buildd/gtk+2.0-2.10.13/gtk/gtkbutton.c line 889
  • #25 gtk_real_button_released
    at /tmp/buildd/gtk+2.0-2.10.13/gtk/gtkbutton.c line 1484
  • #26 g_cclosure_marshal_VOID__VOID
    from /usr/lib/libgobject-2.0.so.0
  • #27 g_value_set_boxed
    from /usr/lib/libgobject-2.0.so.0
  • #28 g_closure_invoke
    from /usr/lib/libgobject-2.0.so.0
  • #29 g_signal_override_class_closure
    from /usr/lib/libgobject-2.0.so.0
  • #30 g_signal_emit_valist
    from /usr/lib/libgobject-2.0.so.0
  • #31 g_signal_emit
    from /usr/lib/libgobject-2.0.so.0
  • #32 IA__gtk_button_released
    at /tmp/buildd/gtk+2.0-2.10.13/gtk/gtkbutton.c line 881
  • #33 gtk_button_button_release
    at /tmp/buildd/gtk+2.0-2.10.13/gtk/gtkbutton.c line 1377
  • #34 _gtk_marshal_BOOLEAN__BOXED
    at /tmp/buildd/gtk+2.0-2.10.13/gtk/gtkmarshalers.c line 84
  • #35 g_value_set_boxed
    from /usr/lib/libgobject-2.0.so.0
  • #36 g_closure_invoke
    from /usr/lib/libgobject-2.0.so.0
  • #37 g_signal_override_class_closure
    from /usr/lib/libgobject-2.0.so.0
  • #38 g_signal_emit_valist
    from /usr/lib/libgobject-2.0.so.0
  • #39 g_signal_emit
    from /usr/lib/libgobject-2.0.so.0
  • #40 gtk_widget_event_internal
    at /tmp/buildd/gtk+2.0-2.10.13/gtk/gtkwidget.c line 3915
  • #41 IA__gtk_propagate_event
    at /tmp/buildd/gtk+2.0-2.10.13/gtk/gtkmain.c line 2341
  • #42 IA__gtk_main_do_event
    at /tmp/buildd/gtk+2.0-2.10.13/gtk/gtkmain.c line 1575
  • #43 gdk_event_dispatch
    at /tmp/buildd/gtk+2.0-2.10.13/gdk/x11/gdkevents-x11.c line 2318
  • #44 g_main_context_dispatch
    from /usr/lib/libglib-2.0.so.0
  • #45 g_main_context_check
    from /usr/lib/libglib-2.0.so.0
  • #46 g_main_loop_run
    from /usr/lib/libglib-2.0.so.0
  • #47 bonobo_main
    from /usr/lib/libbonobo-2.so.0
  • #48 main
    at main.c line 611
  • #0 __kernel_vsyscall


----------- .xsession-errors (5768 sec old) ---------------------
** (nm-applet:4185): WARNING **: <WARNING>	 nma_dbus_init (): nma_dbus_init() could not acquire its service.  dbus_bus_acquire_service() says: 'Connection ":1.14" is not allowed to own the service "or
** (nm-applet:4185): WARNING **: <WARNING>	 nma_dbus_init (): nma_dbus_init() could not acquire its service.  dbus_bus_acquire_service() says: 'Connection ":1.14" is not allowed to own the service "or
** (nm-applet:4185): WARNING **: <WARNING>	 nma_dbus_init (): nma_dbus_init() could not acquire its service.  dbus_bus_acquire_service() says: 'Connection ":1.14" is not allowed to own the service "or
** (nm-applet:4185): WARNING **: <WARNING>	 nma_dbus_init (): nma_dbus_init() could not acquire its service.  dbus_bus_acquire_service() says: 'Connection ":1.14" is not allowed to own the service "or
** (nm-applet:4185): WARNING **: <WARNING>	 nma_dbus_init (): nma_dbus_init() could not acquire its service.  dbus_bus_acquire_service() says: 'Connection ":1.14" is not allowed to own the service "or
...Too much output, ignoring rest...
--------------------------------------------------
Comment 1 André Klapper 2007-08-01 13:59:06 UTC
can you add that man page tar.gz file here, for testing? (only if it does not contain any confidential data)

thanks in advance!
Comment 2 Enrico La Cava 2007-08-02 15:25:52 UTC
Created attachment 92926 [details]
The file that i've try to attach
Comment 3 Srinivasa Ragavan 2007-08-06 05:58:46 UTC
Hmm, I dont seem to reproduce this at all. I traversed through the entire code and  I dont see a way this can happen. When a mime_part is created it is set a default mime type and looks like it is null for you?

Does the crash happens when you attach any file or just this? Is it reproducible always?
Comment 4 Lucky Wankhede 2007-08-06 06:15:11 UTC
Unable to reproduce on my side also ... 
Any clues on how to reproduce it.. ?
Comment 5 Enrico La Cava 2007-08-06 09:16:50 UTC
Mmm... I remember that evolution have crashed when it have tried to attach the file, after I've click ok.
I've too many application open and i use Debian Testing, perhaps the bug is in the Debian package...
Comment 6 Lucky Wankhede 2007-08-06 09:28:11 UTC
What kind of a attachment it was ? 
just attach it here in for the testing purpose if dont have any confidential data.. 
Comment 7 Enrico La Cava 2007-08-06 09:33:22 UTC
I've already attach the file... Is a tar.gz with translated man pages.
Comment 8 Akhil Laddha 2007-10-18 04:13:25 UTC
*** Bug 487368 has been marked as a duplicate of this bug. ***
Comment 9 Akhil Laddha 2007-10-30 04:54:38 UTC
*** Bug 491533 has been marked as a duplicate of this bug. ***
Comment 10 Akhil Laddha 2007-10-30 04:55:29 UTC
*** Bug 489809 has been marked as a duplicate of this bug. ***
Comment 11 Sankar P 2008-01-09 06:57:03 UTC
I suspect there should be some duplicates for this.

I have fixed this problem and committed to:

Trunk: 
http://svn.gnome.org/viewvc/evolution-data-server?view=revision&revision=8344 

Evo 2.12 branch:
http://svn.gnome.org/viewvc/evolution-data-server?view=revision&revision=8345
Comment 12 Milan Crha 2008-01-09 12:25:03 UTC
I reverted this in both trunk (Committed revision 8349) and stable (Committed revision 8350) because it doesn't play well with prefer plain plugin and HTML mails. Hence reopening.
Comment 13 Milan Crha 2008-01-09 13:57:46 UTC
Sankar, I looked at it a bit and you used bad function there, you used
camel_data_wrapper_get_mime_type
which returns char *, but the function expects CamelContentType *, thus you should use camel_data_wrapper_get_mime_type_field. It was the reason of compiler warning I told you. Compiler was right this time. It was serious warning. :)
Comment 14 Milan Crha 2008-02-22 17:53:20 UTC
Sankar ping.

Btw, if you believe it will fix it, then you should fix all accesses to mime_type member in that file, because the direct access to that private property is used there so many times. I believe your fix is correct, but I'm not sure if it will fix this particular bug :)
Comment 15 Sankar P 2008-02-25 11:16:36 UTC
I guess using that function will not fix the problem. Direct access is fine I guess.
Comment 16 C de-Avillez 2008-03-02 10:43:50 UTC
Ubuntu bug on this: https://bugs.launchpad.net/ubuntu/+source/evolution/+bug/195788. 

This is 2.21.92, and reporter states he can always reproduce it.
Comment 17 André Klapper 2008-03-02 12:56:49 UTC
hggdh, feel free to adjust the version info of the report, then :)
Comment 18 Milan Crha 2008-03-04 18:50:09 UTC
Created attachment 106571 [details] [review]
proposed evo patch

for evolution;

We debugged it with hggdh and Effenberg remotely (my apologize I disappeared so quickly, my connection got lost suddenly and I didn't know the reason until now) and we found the gnome_vfs can return invalid mime_types, like empty strings, and in that case the mime_type member is finally set to NULL in camel-mime-part.c:process_header with HEADER_CONTENT_TYPE as the part of call to camel_medium_set_content_object from e-attachment.c.

The attached patch tries to parse returned mime type and if that fails it returns NULL.
Comment 19 André Klapper 2008-03-04 19:47:38 UTC
i wonder if gvfs/gio suffer under the same issue like gnome-vfs.
Comment 20 Srinivasa Ragavan 2008-03-05 04:55:42 UTC
Milan, go for it in trunk after freeze. Great work guys.
Comment 21 Matthew Barnes 2008-03-11 01:01:44 UTC
Bumping version to a stable release.
Comment 22 Srinivasa Ragavan 2008-03-13 09:43:06 UTC
for 2.22.x  and 2.23.1
Comment 23 Milan Crha 2008-03-13 12:59:35 UTC
Committed to trunk. Committed revision 35184.
Committed to gnome-2-22. Committed revision 35185.
Comment 24 Matthew Barnes 2008-03-20 18:46:45 UTC
*** Bug 523046 has been marked as a duplicate of this bug. ***
Comment 25 Akhil Laddha 2008-04-03 11:53:36 UTC
*** Bug 525855 has been marked as a duplicate of this bug. ***
Comment 26 Tobias Mueller 2008-04-08 15:24:22 UTC
*** Bug 526693 has been marked as a duplicate of this bug. ***
Comment 27 Akhil Laddha 2008-05-16 05:00:21 UTC
*** Bug 533298 has been marked as a duplicate of this bug. ***
Comment 28 Milan Crha 2008-10-01 15:48:27 UTC
*** Bug 543336 has been marked as a duplicate of this bug. ***
Comment 29 Milan Crha 2008-10-01 15:49:11 UTC
*** Bug 534082 has been marked as a duplicate of this bug. ***