After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 543427 - crash in Evolution Mail and Calendar: restarted after svn head...
crash in Evolution Mail and Calendar: restarted after svn head...
Status: RESOLVED FIXED
Product: evolution
Classification: Applications
Component: BugBuddyBugs
2.22.x (obsolete)
Other All
: Urgent critical
: ---
Assigned To: Evolution Triage Team
Evolution QA team
evolution[disk-summary]
: 545447 (view as bug list)
Depends on:
Blocks: 543389
 
 
Reported: 2008-07-17 12:55 UTC by Reid Thompson
Modified: 2008-08-22 05:32 UTC
See Also:
GNOME target: ---
GNOME version: 2.21/2.22

Attachments
Exchange patch (2.77 KB, patch)
2008-07-31 07:44 UTC, Bharath Acharya 		committed Details | Review
stacktrace, (39.78 KB, text/plain)
2008-08-01 13:04 UTC, Reid Thompson 		  Details

Description Reid Thompson 2008-07-17 12:55:50 UTC 
What were you doing when the application crashed?
restarted after svn head build


Distribution: Gentoo Base System release 1.12.11.1
Gnome Release: 2.22.3 2008-07-02 (Gentoo)
BugBuddy Version: 2.22.0

System: Linux 2.6.24-gentoo-r8 #1 SMP PREEMPT Tue May 13 08:35:55 EDT 2008 i686
X Vendor: The X.Org Foundation
X Vendor Release: 10300000
Selinux: No
Accessibility: Disabled
GTK+ Theme: marble-look
Icon Theme: gnome

Memory status: size: 126984192 vsize: 126984192 resident: 38158336 share: 18620416 rss: 38158336 rss_rlim: 4294967295
CPU usage: start_time: 1216299104 rtime: 950 utime: 857 stime: 93 cutime:0 cstime: 0 timeout: 0 it_real_value: 0 frequency: 100

Backtrace was generated from '/opt/evo/bin/evolution'

Using host libthread_db library "/lib/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread 0xb67b16c0 (LWP 30582)]
[New Thread 0xb1909b90 (LWP 30694)]
[New Thread 0xb392db90 (LWP 30601)]
[New Thread 0xb412eb90 (LWP 30600)]
[New Thread 0xb5476b90 (LWP 30599)]
0xb7f96410 in __kernel_vsyscall ()

+ Trace 203070

Thread 1 (Thread 0xb67b16c0 (LWP 30582))

  • #0 __kernel_vsyscall
  • #1 waitpid
    from /lib/libpthread.so.0
  • #2 IA__g_spawn_sync
    at ../../../glib/glib/gspawn.c line 382
  • #3 IA__g_spawn_command_line_sync
    at ../../../glib/glib/gspawn.c line 694
  • #4 run_bug_buddy
    at gnome-breakpad.cc line 213
  • #5 check_if_gdb
    at gnome-breakpad.cc line 283
  • #6 google_breakpad::ExceptionHandler::InternalWriteMinidump
    at ../google-breakpad/src/client/linux/handler/exception_handler.cc line 226
  • #7 google_breakpad::ExceptionHandler::HandleException
    at ../google-breakpad/src/client/linux/handler/exception_handler.cc line 197
  • #8 <signal handler called>
  • #9 __kernel_vsyscall
  • #10 *__GI_raise
    at ../nptl/sysdeps/unix/sysv/linux/raise.c line 64
  • #11 *__GI_abort
    at abort.c line 88
  • #12 IA__g_assertion_message
  • #13 IA__g_assertion_message_expr
    at ../../../glib/glib/gtestutils.c line 1287
  • #14 camel_pstring_free
    at ../../../evolution-data-server/camel/camel-string-utils.c line 244
  • #15 message_info_free
    at ../../../evolution-data-server/camel/camel-folder-summary.c line 2899
  • #16 message_info_free
    at ../../../evolution-exchange/camel/camel-exchange-summary.c line 369
  • #17 camel_message_info_free
    at ../../../evolution-data-server/camel/camel-folder-summary.c line 3905
  • #18 remove_item
    at ../../../evolution-data-server/camel/camel-folder-summary.c line 705
  • #19 g_hash_table_foreach_remove_or_steal
    at ../../../glib/glib/ghash.c line 975
  • #20 remove_cache
    at ../../../evolution-data-server/camel/camel-folder-summary.c line 724
  • #21 g_timeout_dispatch
    at ../../../glib/glib/gmain.c line 3527
  • #22 IA__g_main_context_dispatch
    at ../../../glib/glib/gmain.c line 2068
  • #23 g_main_context_iterate
    at ../../../glib/glib/gmain.c line 2701
  • #24 IA__g_main_loop_run
    at ../../../glib/glib/gmain.c line 2924
  • #25 bonobo_main
    at bonobo-main.c line 311
  • #26 main
    at ../../../evolution/shell/main.c line 783
  • #0 __kernel_vsyscall 






Comment 1


Akhil Laddha





          2008-07-30 09:18:21 UTC
        



I removed my cache and restarted evolution.

Gdb traces of evolution process

**
** camel:ERROR:(camel-string-utils.c:245):camel_pstring_free: assertion failed: (0)

Program received signal SIGABRT, Aborted.
[Switching to Thread 0xb13feb90 (LWP 17869)]
0xffffe430 in __kernel_vsyscall ()
(gdb) t a a bt





+
Trace
    204158










(gdb) 
 






Comment 2


Akhil Laddha





          2008-07-30 11:30:33 UTC
        



I got the crash 4 times today so confirming 






Comment 3


Srinivasa Ragavan





          2008-07-30 15:16:25 UTC
        



Exchange code is vulnerable to this, I have fixed rest of Evolution.
Bharath ?






Comment 4


Bharath Acharya





          2008-07-31 07:44:01 UTC
        



Created attachment 115608 [details] [review]
Exchange patch

The free'ing is handled by message_info_free






Comment 5


Srinivasa Ragavan





          2008-08-01 11:12:30 UTC
        



This should be committed. But sure, you dont g_free/free it anywhere? if so you gonna corrupt memory.






Comment 6


Reid Thompson





          2008-08-01 12:58:18 UTC
        



Still crashing:
Distribution: Gentoo Base System release 1.12.11.1
Gnome Release: 2.22.3 2008-07-02 (Gentoo)
BugBuddy Version: 2.22.0

System: Linux 2.6.24-gentoo-r8 #1 SMP PREEMPT Tue May 13 08:35:55 EDT 2008 i686
X Vendor: The X.Org Foundation
X Vendor Release: 10300000
Selinux: No
Accessibility: Disabled
GTK+ Theme: marble-look
Icon Theme: gnome

Memory status: size: 134397952 vsize: 134397952 resident: 45273088 share: 18305024 rss: 45273088 rss_rlim: 4294967295
CPU usage: start_time: 1217595343 rtime: 293 utime: 248 stime: 45 cutime:2 cstime: 1 timeout: 0 it_real_value: 0 frequency: 100

Backtrace was generated from '/opt/evo/bin/evolution'

Using host libthread_db library "/lib/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread 0xb67386c0 (LWP 9157)]
[New Thread 0xb14ffb90 (LWP 9308)]
[New Thread 0xb2cffb90 (LWP 9305)]
[New Thread 0xb5e78b90 (LWP 9293)]
[New Thread 0xb4a6ab90 (LWP 9281)]
[New Thread 0xb36ffb90 (LWP 9270)]
[New Thread 0xb4174b90 (LWP 9268)]
0xb7f2e410 in __kernel_vsyscall ()




+
Trace
    204361






Thread 6
          (Thread 0xb36ffb90 (LWP 9270))


    

  • 
#0
__kernel_vsyscall

    • 

  • 
#1
waitpid

    
                from
                /lib/libpthread.so.0

    

    • 

  • 
#2
IA__g_spawn_sync

    
                at ../../../glib/glib/gspawn.c
                  line
                  382

    

    • 

  • 
#3
IA__g_spawn_command_line_sync

    
                at ../../../glib/glib/gspawn.c
                  line
                  694

    

    • 

  • 
#4
run_bug_buddy

    
                at gnome-breakpad.cc
                  line
                  213

    

    • 

  • 
#5
check_if_gdb

    
                at gnome-breakpad.cc
                  line
                  283

    

    • 

  • 
#6
google_breakpad::ExceptionHandler::InternalWriteMinidump

    
                at ../google-breakpad/src/client/linux/handler/exception_handler.cc
                  line
                  226

    

    • 

  • 
#7
google_breakpad::ExceptionHandler::HandleException

    
                at ../google-breakpad/src/client/linux/handler/exception_handler.cc
                  line
                  197

    

    • 

  • 
#8
<signal handler called>

    • 

  • 
#9
__kernel_vsyscall

    • 

  • 
#10
*__GI_raise

    
                at ../nptl/sysdeps/unix/sysv/linux/raise.c
                  line
                  64

    

    • 

  • 
#11
*__GI_abort

    
                at abort.c
                  line
                  88

    

    • 

  • 
#12
IA__g_assertion_message

    • 

  • 
#13
IA__g_assertion_message_expr

    
                at ../../../glib/glib/gtestutils.c
                  line
                  1287

    

    • 

  • 
#14
camel_pstring_free

    
                at ../../../evolution-data-server/camel/camel-string-utils.c
                  line
                  281

    

    • 

  • 
#15
summary_remove_uid

    
                at ../../../evolution-data-server/camel/camel-folder-summary.c
                  line
                  2001

    

    • 

  • 
#16
camel_folder_summary_remove

    
                at ../../../evolution-data-server/camel/camel-folder-summary.c
                  line
                  2023

    

    • 

  • 
#17
camel_exchange_folder_remove_message

    
                at ../../../evolution-exchange/camel/camel-exchange-folder.c
                  line
                  812

    

    • 

  • 
#18
stub_notification

    
                at ../../../evolution-exchange/camel/camel-exchange-store.c
                  line
                  905

    

    • 

  • 
#19
camel_object_trigger_event

    
                at ../../../evolution-data-server/camel/camel-object.c
                  line
                  1495

    

    • 

  • 
#20
status_main

    
                at ../../../evolution-exchange/camel/camel-stub.c
                  line
                  143

    

    • 

  • 
#21
start_thread

    
                at pthread_create.c
                  line
                  296

    

    • 

  • 
#22
clone

    
                from
                /lib/libc.so.6

    

    • 









----------- .xsession-errors (52019 sec old) ---------------------
application/pdf
application/pdf
application/pdf
application/pdf
application/pdf
application/pdf
application/pdf
application/pdf
application/pdf
application/pdf
application/pdf
application/pdf
application/pdf
...Too much output, ignoring rest...
--------------------------------------------------








Comment 7


Reid Thompson





          2008-08-01 13:02:25 UTC
        



started in debugger, will attach trace after this.






Comment 8


Reid Thompson





          2008-08-01 13:04:20 UTC
        



Created attachment 115679 [details]
stacktrace,






Comment 9


Bharath Acharya





          2008-08-04 04:10:59 UTC
        



Committed to trunk as r1716
http://svn.gnome.org/viewvc/evolution-exchange?view=revision&revision=1716

This patch is needed. Will look into the issue mentioned at comment #6. 






Comment 10


Bharath Acharya





          2008-08-04 04:32:16 UTC
        



Committed another related hunk as r1717






Comment 11


Bharath Acharya





          2008-08-06 05:17:55 UTC
        



*** Bug 545447 has been marked as a duplicate of this bug. ***






Comment 12


Srinivasa Ragavan





          2008-08-18 09:32:00 UTC
        



I think except Exchange, rest of the code should be stable for this. Bharath?






Comment 13


Bharath Acharya





          2008-08-19 03:42:10 UTC
        



Reid seeing this even after the commits? I was never able to reproduce this after the commits. Sorry if I'm missing something. Currently only the counts are messed up with Exchange. Rest is fine I suppose.






Comment 14


Reid Thompson





          2008-08-20 12:37:29 UTC
        



i don't recall seeing this any recently.  






Comment 15


Bharath Acharya





          2008-08-22 05:32:42 UTC
        



Great. Closing for now. Reopen if you see it happen anytime. Thanks