Bug 544501 – Evolution crashed :doing some opearations on draft

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 544501 - Evolution crashed :doing some opearations on draft


Summary:	Evolution crashed :doing some opearations on draft


Status:	RESOLVED FIXED

Product:	evolution
Classification:	Applications
Component:	Mailer
Version:	2.24.x (obsolete)
Hardware:	Other Linux

Importance:	Normal critical
Target Milestone:	---
Assigned To:	evolution-mail-maintainers
QA Contact:	Evolution QA team

URL:
Whiteboard:	evolution[disk-summary]

Duplicates:	544544 (view as bug list)
Depends on:
Blocks:	543389

Reported:	2008-07-24 08:28 UTC by Akhil Laddha
Modified:	2013-09-13 00:59 UTC

See Also:
GNOME target:	---
GNOME version:	2.21/2.22

Description Akhil Laddha 2008-07-24 08:28:37 UTC

Evolution 2.23.5 

sexp is : [(match-all (not (system-flag "deleted")))]
Something is returned in the top-level caller : [SELECT uid FROM 'Inbox' ]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb0892b90 (LWP 21432)]
0xb7ceaf7b in camel_sexp_to_sql (txt=0xb60a7f9c "(match-all (not (system-flag \"deleted\")))") at camel-search-sql.c:752
752		n1 = res->data;
(gdb) t a a bt

+ Trace 203656

Thread 1 (Thread 0xb63806e0 (LWP 21390))

#0 toolbar_content_size_request
at gtktoolbar.c line 4132
#1 toolbar_content_is_homogeneous
at gtktoolbar.c line 4180
#2 get_item_size
at gtktoolbar.c line 1113
#3 gtk_toolbar_size_allocate
at gtktoolbar.c line 1571
#4 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#5 g_type_class_meta_marshal
at gclosure.c line 878
#6 IA__g_closure_invoke
at gclosure.c line 767
#7 signal_emit_unlocked_R
at gsignal.c line 3174
#8 IA__g_signal_emit_valist
at gsignal.c line 2977
#9 IA__g_signal_emit
at gsignal.c line 3034
#10 IA__gtk_widget_size_allocate
at gtkwidget.c line 3876
#11 bonobo_dock_item_size_allocate
at bonobo-dock-item.c line 846
#12 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#13 g_type_class_meta_marshal
at gclosure.c line 878
#14 IA__g_closure_invoke
at gclosure.c line 767
#15 signal_emit_unlocked_R
at gsignal.c line 3174
#16 IA__g_signal_emit_valist
at gsignal.c line 2977
#17 IA__g_signal_emit
at gsignal.c line 3034
#18 IA__gtk_widget_size_allocate
at gtkwidget.c line 3876
#19 bonobo_dock_band_size_allocate
at bonobo-dock-band.c line 503
#20 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#21 g_type_class_meta_marshal
at gclosure.c line 878
#22 IA__g_closure_invoke
at gclosure.c line 767
#23 signal_emit_unlocked_R
at gsignal.c line 3174
#24 IA__g_signal_emit_valist
at gsignal.c line 2977
#25 IA__g_signal_emit
at gsignal.c line 3034
#26 IA__gtk_widget_size_allocate
at gtkwidget.c line 3876
#27 size_allocate_h
at bonobo-dock.c line 302
#28 bonobo_dock_size_allocate
at bonobo-dock.c line 367
#29 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#30 g_type_class_meta_marshal
at gclosure.c line 878
#31 IA__g_closure_invoke
at gclosure.c line 767
#32 signal_emit_unlocked_R
at gsignal.c line 3174
#33 IA__g_signal_emit_valist
at gsignal.c line 2977
#34 IA__g_signal_emit
at gsignal.c line 3034
#35 IA__gtk_widget_size_allocate
at gtkwidget.c line 3876
#36 gtk_vbox_size_allocate
at gtkvbox.c line 234
#37 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#38 g_type_class_meta_marshal
at gclosure.c line 878
#39 IA__g_closure_invoke
at gclosure.c line 767
#40 signal_emit_unlocked_R
at gsignal.c line 3174
#41 IA__g_signal_emit_valist
at gsignal.c line 2977
#42 IA__g_signal_emit
at gsignal.c line 3034
#43 IA__gtk_widget_size_allocate
at gtkwidget.c line 3876
#44 gtk_window_size_allocate
at gtkwindow.c line 4755
#45 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#46 g_type_class_meta_marshal
at gclosure.c line 878
#47 IA__g_closure_invoke
at gclosure.c line 767
#48 signal_emit_unlocked_R
at gsignal.c line 3174
#49 IA__g_signal_emit_valist
at gsignal.c line 2977
#50 IA__g_signal_emit
at gsignal.c line 3034
#51 IA__gtk_widget_size_allocate
at gtkwidget.c line 3876
#52 IA__gtk_container_resize_children
at gtkcontainer.c line 1425
#53 gtk_window_check_resize
at gtkwindow.c line 6159
#54 IA__g_cclosure_marshal_VOID__VOID
at gmarshal.c line 77
#55 g_type_class_meta_marshal
at gclosure.c line 878
#56 IA__g_closure_invoke
at gclosure.c line 767
#57 signal_emit_unlocked_R
at gsignal.c line 3282
#58 IA__g_signal_emit_valist
at gsignal.c line 2977
#59 IA__g_signal_emit
at gsignal.c line 3034
#60 IA__gtk_container_check_resize
at gtkcontainer.c line 1379
#61 gtk_container_idle_sizer
at gtkcontainer.c line 1305
#62 gdk_threads_dispatch
at gdk.c line 470
#63 g_idle_dispatch
at gmain.c line 4173
#64 IA__g_main_context_dispatch
at gmain.c line 2068
#65 g_main_context_iterate
at gmain.c line 2701
#66 IA__g_main_loop_run
at gmain.c line 2924
#67 bonobo_main
at bonobo-main.c line 311
#68 main
at main.c line 783
#0 camel_sexp_to_sql
#1 camel_folder_search_search
#2 local_search_by_uids
#3 camel_folder_search_by_uids
#4 vtrash_search_by_expression
#5 camel_folder_search_by_expression
#6 regen_list_exec
at message-list.c line 3939
#7 mail_msg_proxy
at mail-mt.c line 523
#8 g_thread_pool_thread_proxy
at gthreadpool.c line 265
#9 g_thread_create_proxy
at gthread.c line 635
#10 start_thread
from /lib/libpthread.so.0
#11 clone
from /lib/libc.so.6

(gdb)

Comment 1 Akhil Laddha 2008-07-24 08:29:02 UTC

sexp is : [(match-all (not (system-flag "deleted")))]
Something is returned in the top-level caller : [SELECT uid FROM 'Inbox' ]
==21571== 
==21571== Thread 4:
==21571== Invalid read of size 4
==21571==    at 0x42A2F7B: camel_sexp_to_sql (camel-search-sql.c:752)
==21571==    by 0x42854BB: camel_folder_search_search (camel-folder-search.c:508)
==21571==    by 0xAD2B872: local_search_by_uids (camel-local-folder.c:600)
==21571==    by 0x4292277: camel_folder_search_by_uids (camel-folder.c:1426)
==21571==    by 0x42B70D5: vtrash_search_by_expression (camel-vtrash-folder.c:326)
==21571==    by 0x4292300: camel_folder_search_by_expression (camel-folder.c:1385)
==21571==    by 0x6762AE6: regen_list_exec (message-list.c:3939)
==21571==    by 0x6753BD8: mail_msg_proxy (mail-mt.c:523)
==21571==    by 0x5A12E35: g_thread_pool_thread_proxy (gthreadpool.c:265)
==21571==    by 0x5A1179E: g_thread_create_proxy (gthread.c:635)
==21571==    by 0x4F97174: start_thread (in /lib/libpthread-2.8.so)
==21571==    by 0x5B52DCD: clone (in /lib/libc-2.8.so)
==21571==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
==21571== 
==21571== Process terminating with default action of signal 11 (SIGSEGV)
==21571==  Access not within mapped region at address 0x0
==21571==    at 0x42A2F7B: camel_sexp_to_sql (camel-search-sql.c:752)
==21571==    by 0x42854BB: camel_folder_search_search (camel-folder-search.c:508)
==21571==    by 0xAD2B872: local_search_by_uids (camel-local-folder.c:600)
==21571==    by 0x4292277: camel_folder_search_by_uids (camel-folder.c:1426)
==21571==    by 0x42B70D5: vtrash_search_by_expression (camel-vtrash-folder.c:326)
==21571==    by 0x4292300: camel_folder_search_by_expression (camel-folder.c:1385)
==21571==    by 0x6762AE6: regen_list_exec (message-list.c:3939)
==21571==    by 0x6753BD8: mail_msg_proxy (mail-mt.c:523)
==21571==    by 0x5A12E35: g_thread_pool_thread_proxy (gthreadpool.c:265)
==21571==    by 0x5A1179E: g_thread_create_proxy (gthread.c:635)
==21571==    by 0x4F97174: start_thread (in /lib/libpthread-2.8.so)
==21571==    by 0x5B52DCD: clone (in /lib/libc-2.8.so)

Comment 2 Srinivasa Ragavan 2008-07-24 13:43:53 UTC

Thx. So fixed in trunk.

Comment 3 Bharath Acharya 2008-07-25 03:14:57 UTC

*** Bug 544544 has been marked as a duplicate of this bug. ***