Bug 497378 – Evo dumping core consistently when I try to read my mail

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 497378 - Evo dumping core consistently when I try to read my mail


Summary:	Evo dumping core consistently when I try to read my mail


Status:	RESOLVED DUPLICATE of bug 497295

Product:	evolution
Classification:	Applications
Component:	Mailer
Version:	2.22.x (obsolete)
Hardware:	Other Linux

Importance:	Normal critical
Target Milestone:	---
Assigned To:	evolution-mail-maintainers
QA Contact:	Evolution QA team

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2007-11-16 13:54 UTC by Paul Smith
Modified:	2013-09-13 00:56 UTC

See Also:
GNOME target:	---
GNOME version:	2.19/2.20

Description Paul Smith 2007-11-16 13:54:18 UTC

I was gone last week, so this morning I rebuilt all the latest SVN code for libsoup, libgtkhtml, e-d-s, evolution, evolution-exchange, and evolution-webcal.   Now I get a core dump with almost every email I try to display (using my Exchange account).

All I have to do to reproduce it is look at a few messages, and within seconds Evo will dump core.  As far as I can tell it doesn't have to be the same message either.

I started it in GDB and with debugging enabled; this is the trace info:

Thread b68016b0 >
CamelStore('exchange://psmith;auth=Basic@msmail.corp.com/;owa_url=https://msmail.corp.com/exchange;save-passwd=true;mailbox=psmith;owa_path=/exchange'):get_folder('personal/Deleted Items', 0) = 0x86c55a8
< b68016b0 >
*** glibc detected *** /opt/evo/bin/evolution: free(): invalid pointer: 0x085cb790 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb6f7fd65]
/lib/tls/i686/cmov/libc.so.6(cfree+0x90)[0xb6f83800]
/usr/lib/libglib-2.0.so.0(g_free+0x31)[0xb70ae961]
/opt/evo/lib/evolution/2.22/libetable.so.0[0xb6e55da2]
/opt/evo/lib/evolution/2.22/libetable.so.0[0xb6e55d82]
/opt/evo/lib/evolution/2.22/libetable.so.0[0xb6e562f2]
/opt/evo/lib/evolution/2.22/libetable.so.0[0xb6e568bd]
/opt/evo/lib/evolution/2.22/libetable.so.0[0xb6e572bb]
/usr/lib/libgobject-2.0.so.0(g_cclosure_marshal_VOID__POINTER+0x59)[0xb71541c9]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x122)[0xb7147772]
/usr/lib/libgobject-2.0.so.0[0xb7158323]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x8c7)[0xb7159847]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x29)[0xb7159a09]
/opt/evo/lib/evolution/2.22/libetable.so.0(e_tree_model_node_changed+0xe8)[0xb6e4d5b3]
/opt/evo/lib/evolution/2.22/libetable.so.0(e_tree_memory_thaw+0x64)[0xb6e4bf9c]
/opt/evo/lib/evolution/2.12/components/libevolution-mail.so[0xb65b70fd]
/opt/evo/lib/evolution/2.12/components/libevolution-mail.so[0xb65b9976]
/opt/evo/lib/evolution/2.12/components/libevolution-mail.so[0xb65a2e69]
/usr/lib/libglib-2.0.so.0[0xb70d66ed]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x17c)[0xb70a711c]
/usr/lib/libglib-2.0.so.0[0xb70aa55f]
/usr/lib/libglib-2.0.so.0(g_main_loop_run+0x1a9)[0xb70aa909]
/usr/lib/libbonobo-2.so.0(bonobo_main+0x63)[0xb79f1d13]
/opt/evo/bin/evolution[0x805fc67]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe0)[0xb6f2c050]
/opt/evo/bin/evolution[0x804fe31]
======= Memory map: ========
08048000-08066000 r-xp 00000000 03:06 3025202    /opt/evo/bin/evolution
08066000-08068000 rw-p 0001d000 03:06 3025202    /opt/evo/bin/evolution
08068000-087e8000 rw-p 08068000 00:00 0          [heap]
b0ab3000-b0cb4000 rw-p b0cff000 00:00 0 
b0cb4000-b0cff000 r--p 00000000 03:02 701952     /usr/share/fonts/truetype/ttf-dejavu/DejaVuSansMono.ttf
b0de2000-b0dec000 r-xp 00000000 03:02 98035      /lib/libgcc_s.so.1
b0dec000-b0ded000 rw-p 0000a000 03:02 98035      /lib/libgcc_s.so.1
b0e00000-b0e21000 rw-p b0e00000 00:00 0 
b0e21000-b0f00000 ---p b0e21000 00:00 0 
b0f1d000-b0f33000 r-xp 00000000 03:06 3025471    /opt/evo/lib/evolution/2.12/plugins/liborg-gnome-groupwise-features.so
b0f33000-b0f34000 rw-p 00016000 03:06 3025471    /opt/evo/lib/evolution/2.12/plugins/liborg-gnome-groupwise-features.so
b0f34000-b0f44000 r-xp 00000000 03:02 837999     /usr/lib/gconv/libGB.so
b0f44000-b0f46000 rw-p 0000f000 03:02 837999     /usr/lib/gconv/libGB.so
b0f46000-b0fa6000 rw-s 00000000 00:09 1343509    /SYSV00000000 (deleted)
b0fa6000-b102a000 r--p 00000000 03:02 701817     /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans-Bold.ttf
b102a000-b1039000 r-xp 00000000 03:02 100585     /lib/libbz2.so.1.0.4
b1039000-b103a000 rw-p 0000f000 03:02 100585     /lib/libbz2.so.1.0.4
b103a000-b106c000 r-xp 00000000 03:02 834602     /usr/lib/libcroco-0.6.so.3.0.1
b106c000-b106f000 rw-p 00031000 03:02 834602     /usr/lib/libcroco-0.6.so.3.0.1
b106f000-b109f000 r-xp 00000000 03:02 833821     /usr/lib/libgsf-1.so.114.0.7
b109f000-b10a2000 rw-p 0002f000 03:02 833821     /usr/lib/libgsf-1.so.114.0.7
b10a2000-b10a3000 rw-p b10a2000 00:00 0 
b10a3000-b10d3000 r-xp 00000000 03:02 834609     /usr/lib/librsvg-2.so.2.18.2
b10d3000-b10d4000 rw-p 00030000 03:02 834609     /usr/lib/librsvg-2.so.2.18.2
b10dd000-b10de000 r-xp 00000000 03:06 3270895    /opt/evo/lib/evolution/2.22/plugins/liborg-gnome-new-mail-notify.so
b10de000-b10df000 rw-p 00000000 03:06 3270895    /opt/evo/lib/evolution/2.22/plugins/liborg-gnome-new-mail-notify.so
b10df000-b10e1000 r-xp 00000000 03:06 3025250    /opt/evo/lib/evolution/2.12/plugins/liborg-gnome-mail-notification.so
b10e1000-b10e2000 rw-p 00001000 03:06 3025250    /opt/evo/lib/evolution/2.12/plugins/liborg-gnome-mail-notification.so
b10e2000-b10e5000 r-xp 00000000 03:02 836307     /usr/lib/gconv/EUC-CN.so
b10e5000-b10e7000 rw-p 00002000 03:02 836307     /usr/lib/gconv/EUC-CN.so
b10e7000-b10e8000 r-xp 00000000 03:02 930904     /usr/lib/gtk-2
Program received signal SIGABRT, Aborted.

+ Trace 178126

Thread NaN (LWP 6465)

#0 __kernel_vsyscall
#1 raise
from /lib/tls/i686/cmov/libc.so.6
#2 abort
from /lib/tls/i686/cmov/libc.so.6
#3 ??
from /lib/tls/i686/cmov/libc.so.6
#4 ??
#5 ??
#6 ??
#7 ??
from /lib/tls/i686/cmov/libc.so.6
#8 ??
#9 ??
#10 ??
#11 ??
from /lib/tls/i686/cmov/libc.so.6
#12 ??
#13 ??
from /lib/tls/i686/cmov/libc.so.6
#14 ??
#15 ??
from /lib/tls/i686/cmov/libc.so.6
#16 ??
#17 ??
#18 ??
#19 ??
from /lib/tls/i686/cmov/libc.so.6
#20 ??
#21 ??
#22 ??
#23 ??
from /lib/tls/i686/cmov/libc.so.6
#24 ??
#25 ??
from /lib/tls/i686/cmov/libc.so.6
#26 pango_context_get_base_dir
from /usr/lib/libpango-1.0.so.0
#27 ??
from /lib/tls/i686/cmov/libc.so.6
#28 ??
#29 ??
from /lib/tls/i686/cmov/libc.so.6
#30 ??
#31 ??
from /lib/tls/i686/cmov/libc.so.6
#32 ??
#33 ??
#34 ??
#35 ??
#36 ??
from /usr/lib/libgthread-2.0.so.0
#37 ??
#38 ??
from /lib/tls/i686/cmov/libc.so.6
#39 ??
from /usr/lib/libgthread-2.0.so.0
#40 ??
#41 ??
from /usr/lib/libglib-2.0.so.0
#42 ??
#43 g_slice_free1
from /usr/lib/libglib-2.0.so.0
#44 free
from /lib/tls/i686/cmov/libc.so.6
#45 g_free
from /usr/lib/libglib-2.0.so.0
#46 kill_gnode
at e-tree-table-adapter.c line 243
#47 kill_gnode
at e-tree-table-adapter.c line 239
#48 generate_tree
at e-tree-table-adapter.c line 368
#49 update_node
at e-tree-table-adapter.c line 485
#50 etta_proxy_node_changed
at e-tree-table-adapter.c line 765
#51 g_cclosure_marshal_VOID__POINTER
from /usr/lib/libgobject-2.0.so.0
#52 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#53 ??
from /usr/lib/libgobject-2.0.so.0
#54 ??
#55 ??
#46 kill_gnode
at e-tree-table-adapter.c line 243

$1 = (GNode *) 0x83eeaa8
(gdb) p node->data
$2 = (gpointer) 0x85cb790

Comment 1 Paul Smith 2007-11-16 14:01:56 UTC

If I restart Evo directly after having it fail as above, it dumps core immediately while trying to display the summary, without my ever having a chance to do anything.  The core/backtrace is different though; here:

CamelStore('exchange://psmith;auth=Basic@msmail.corp.com/;owa_url=https://msmail.corp.com/exchange;save-passwd=true;mailbox=psmith;owa_path=/exchange'):get_folder('personal/Inbox', 0) = 0x85ba158
< b28feb90 >
Thread b28feb90 >
CamelStore('exchange://psmith;auth=Basic@msmail.corp.com/;owa_url=https://msmail.corp.com/exchange;save-passwd=true;mailbox=psmith;owa_path=/exchange'):get_folder('personal/Inbox', 0) = 0x85ba158
< b28feb90 >
[New Thread -1290228848 (LWP 6589)]
*** glibc detected *** /opt/evo/bin/evolution: corrupted double-linked list: 0x08601d78 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb6f903f9]
/lib/tls/i686/cmov/libc.so.6[0xb6f921bd]
/lib/tls/i686/cmov/libc.so.6(__libc_malloc+0x90)[0xb6f93fc0]
/usr/lib/libcairo.so.2(cairo_create+0x3f)[0xb728a6cf]
/usr/lib/libgdk-x11-2.0.so.0[0xb742893d]
/usr/lib/libgdk-x11-2.0.so.0[0xb7428a69]
/usr/lib/libgdk-x11-2.0.so.0(gdk_window_begin_paint_region+0x1c2)[0xb7429cd2]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main_do_event+0x4f8)[0xb76f3778]
/usr/lib/libgdk-x11-2.0.so.0[0xb742a06f]
/usr/lib/libgdk-x11-2.0.so.0(gdk_window_process_all_updates+0xba)[0xb742a73a]
/usr/lib/libgtk-x11-2.0.so.0[0xb765bd8f]
/usr/lib/libgdk-x11-2.0.so.0[0xb74105e8]
/usr/lib/libglib-2.0.so.0[0xb70b7551]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x17c)[0xb70b911c]
/usr/lib/libglib-2.0.so.0[0xb70bc55f]
/usr/lib/libglib-2.0.so.0(g_main_loop_run+0x1a9)[0xb70bc909]
/usr/lib/libbonobo-2.so.0(bonobo_main+0x63)[0xb7a03d13]
/opt/evo/bin/evolution[0x805fc67]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe0)[0xb6f3e050]
/opt/evo/bin/evolution[0x804fe31]
======= Memory map: ========
08048000-08066000 r-xp 00000000 03:06 3025202    /opt/evo/bin/evolution
08066000-08068000 rw-p 0001d000 03:06 3025202    /opt/evo/bin/evolution
08068000-08684000 rw-p 08068000 00:00 0          [heap]
b14ff000-b1621000 rw-p b14ff000 00:00 0 
b1621000-b1700000 ---p b1621000 00:00 0 
b1729000-b1733000 r-xp 00000000 03:02 98035      /lib/libgcc_s.so.1
b1733000-b1734000 rw-p 0000a000 03:02 98035      /lib/libgcc_s.so.1
b1747000-b1757000 r-xp 00000000 03:02 837999     /usr/lib/gconv/libGB.so
b1757000-b1759000 rw-p 0000f000 03:02 837999     /usr/lib/gconv/libGB.so
b1759000-b17b9000 rw-s 00000000 00:09 1409045    /SYSV00000000 (deleted)
b17b9000-b17ba000 ---p b17b9000 00:00 0 
b17ba000-b1fba000 rw-p b17ba000 00:00 0 
b1fba000-b203e000 r--p 00000000 03:02 701817     /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans-Bold.ttf
b203e000-b204d000 r-xp 00000000 03:02 100585     /lib/libbz2.so.1.0.4
b204d000-b204e000 rw-p 0000f000 03:02 100585     /lib/libbz2.so.1.0.4
b204e000-b2080000 r-xp 00000000 03:02 834602     /usr/lib/libcroco-0.6.so.3.0.1
b2080000-b2083000 rw-p 00031000 03:02 834602     /usr/lib/libcroco-0.6.so.3.0.1
b2083000-b20b3000 r-xp 00000000 03:02 833821     /usr/lib/libgsf-1.so.114.0.7
b20b3000-b20b6000 rw-p 0002f000 03:02 833821     /usr/lib/libgsf-1.so.114.0.7
b20b6000-b20b7000 rw-p b20b6000 00:00 0 
b20b7000-b20e7000 r-xp 00000000 03:02 834609     /usr/lib/librsvg-2.so.2.18.2
b20e7000-b20e8000 rw-p 00030000 03:02 834609     /usr/lib/librsvg-2.so.2.18.2
b20f6000-b20f9000 r-xp 00000000 03:02 836307     /usr/lib/gconv/EUC-CN.so
b20f9000-b20fb000 rw-p 00002000 03:02 836307     /usr/lib/gconv/EUC-CN.so
b20fb000-b20fc000 r-xp 00000000 03:02 930904     /usr/lib/gtk-2.0/2.10.0/loaders/svg_loader.so
b20fc000-b20fd000 rw-p 00000000 03:02 930904     /usr/lib/gtk-2.0/2.10.0/loaders/svg_loader.so
b20fe000-b20ff000 ---p b20fe000 00:00 0 
b20ff000-b28ff000 rw-p b20ff000 00:00 0 
b28ff000-b298a000 r--p 00000000 03:02 1044628    /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans.ttf
b298a000-b298b000 ---p b298a000 00:00 0 
b298b000-b318b000 rw-p b298b000 00:00 0 
b318b000-b318d000 r-xp 00000000 03:02 1142677    /usr/lib/pango/1.6.0/modules/pango-basic-fc.so
b318d000-b318e000 rw-p 00001000 03:02 1142677    /usr/lib/pango/1.6.0/modules/pango-basic-fc.so
b318e000-b318f000 ---p b318e000 00:00 0 
b318f000-b398f000 rw-p b318f000 00:00 0 
b398f000-b3995000 r--s 00000000 03:02 702171     /var/cache/fontconfig/945677eb7aeaf62f1d50efc3fb3ec7d8-x86.cache-2
b3995000-b3998000 r--s 00000000 03:02 702169     /var/cache/fontconfig/e383d7ea5fbe662a33d9b44caf393297-x86.cache-2
b3998000-b3999000 r--s 00000000 03:02 703118     /var/cache/fontconfig/fd9505950c048a77dc4b710eb6a628ed-x86.cache-2
b3999000-b399b000 r--s 00000000 03:02 703117     /var/cache/fontconfig/ddc79d3ea06a7c6ffa86ede85f3bb5df-x86.cache-2
b399b000-b399c000 r--s 00000000 03:02 703116     /var/cache/fontconfig/e7071f4a29fa870f4323321c154eba04-x86.cache-2
b399c000-b399d000 r--
Program received signal SIGABRT, Aborted.

+ Trace 178128

Thread NaN (LWP 6557)

#0 __kernel_vsyscall
#1 raise
from /lib/tls/i686/cmov/libc.so.6
#2 abort
from /lib/tls/i686/cmov/libc.so.6
#3 ??
from /lib/tls/i686/cmov/libc.so.6
#4 ??
#5 ??
#6 ??
#7 ??
#8 ??
from /lib/tls/i686/cmov/libc.so.6
#9 ??
#10 ??
#11 ??
#12 ??
from /lib/tls/i686/cmov/libc.so.6
#13 ??
#14 ??
from /lib/tls/i686/cmov/libc.so.6
#15 ??
#16 ??
from /lib/tls/i686/cmov/libc.so.6
#17 ??
#18 ??
#19 ??
#20 ??
from /lib/tls/i686/cmov/libc.so.6
#21 ??
#22 ??
#23 ??
from /usr/lib/libgobject-2.0.so.0
#24 ??
#25 ??
#26 ??
#27 ??
from /lib/tls/i686/cmov/libc.so.6
#28 ??
from /lib/tls/i686/cmov/libc.so.6
#29 ??
#30 ??
#31 g_type_value_table_peek
from /usr/lib/libgobject-2.0.so.0
#32 ??
from /lib/tls/i686/cmov/libc.so.6
#33 ??
#34 ??
from /lib/tls/i686/cmov/libc.so.6
#35 ??
#36 ??
from /lib/tls/i686/cmov/libc.so.6
#37 ??
#38 ??
from /lib/tls/i686/cmov/libc.so.6
#39 ??
#40 ??
from /lib/tls/i686/cmov/libc.so.6
#41 ??
#42 ??
from /lib/tls/i686/cmov/libc.so.6
#43 ??
from /lib/tls/i686/cmov/libc.so.6
#44 ??
#45 ??
from /lib/tls/i686/cmov/libc.so.6
#46 ??
#47 ??
#48 ??
#49 ??
#50 ??
#51 ??
#52 ??
from /lib/tls/i686/cmov/libc.so.6
#53 ??



This makes evolution all but useless for me!

Comment 2 Reid Thompson 2007-11-16 16:56:14 UTC

Starting clean ( after --force-shutdown ), the first error I get is:
*** glibc detected *** /opt/evo/bin/evolution: malloc(): memory corruption: 0x08421668 ***

subsequent starts w/o force-shutdown results in the same double-linked list error

intial start:
(gdb) bt

+ Trace 178164

Thread NaN (LWP 14084)

#0 __kernel_vsyscall
#1 *__GI_raise
at ../nptl/sysdeps/unix/sysv/linux/raise.c line 64
#2 *__GI_abort
at abort.c line 88
#3 __libc_message
at ../sysdeps/unix/sysv/linux/libc_fatal.c line 170
#4 malloc_printerr
at malloc.c line 5887
#5 malloc_consolidate
at malloc.c line 4838
#6 _int_malloc
at malloc.c line 4162
#7 _int_realloc
at malloc.c line 4968
#8 *__GI___libc_realloc
at malloc.c line 3705
#9 IA__g_realloc
at gmem.c line 168
#10 g_array_maybe_expand
at garray.c line 339
#11 IA__g_array_set_size
at garray.c line 195
#12 IA__g_byte_array_set_size
at garray.c line 670
#13 marshal_read
at camel-stub-marshal.c line 126
#14 marshal_getc
at camel-stub-marshal.c line 155
#15 decode_uint32
at camel-stub-marshal.c line 183
#16 camel_stub_marshal_decode_uint32
at camel-stub-marshal.c line 268
#17 status_main
at camel-stub.c line 126
#18 start_thread
at pthread_create.c line 296
#19 clone
from /lib/libc.so.6

Comment 3 Matthew Barnes 2007-11-17 01:50:52 UTC


*** This bug has been marked as a duplicate of 497295 ***