After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 558337 - Evolution crashes while managing IMAP folder subscriptions
Evolution crashes while managing IMAP folder subscriptions
Status: RESOLVED FIXED
Product: evolution
Classification: Applications
Component: Mailer
2.24.x (obsolete)
Other All
: High critical
: ---
Assigned To: evolution-mail-maintainers
Evolution QA team
: 533743 562279 563192 (view as bug list)
Depends on:
Blocks:
 
 
Reported: 2008-10-29 04:23 UTC by Jeff Cai
Modified: 2009-11-23 16:13 UTC
See Also:
GNOME target: ---
GNOME version: 2.23/2.24


Attachments
The patch of Bug 558337 (3.12 KB, patch)
2008-12-18 03:22 UTC, Norman
committed Details | Review

Description Jeff Cai 2008-10-29 04:23:44 UTC
f I click on Folder -> Subscriptions, and select my IMAP mail account, I cannot manage my subscriptions without Evolution crashing with a NULL pointer dereference.  After the folder list comes up, clicking on a few folders results in a crash.  This is always reproducible.  

Distribution:                   Solaris Express Community Edition snv_101 X86
Gnome Release: 2.24.0 2008-10-06 (Sun Microsystems, Inc.)
BugBuddy Version: 2.24.0

X Vendor: Sun Microsystems, Inc.
X Vendor Release: 10300000
Selinux: No
Accessibility: Disabled
GTK+ Theme: Clearlooks
Icon Theme: gnome

Memory status: size: 162181120 vsize: 162181120 resident: 46587904 share: 1953792 rss: 46587904 rss_rlim: 0
CPU usage: start_time: 1225253851 rtime: 181 utime: 1686478 stime: 124727 cutime:0 cstime: 0 timeout: 0 it_real_value: 0 frequency: 0

Backtrace was generated from '/usr/bin/evolution'

12007:	evolution
-----------------  lwp# 1 / thread# 1  --------------------
 fbea1177 waitid   (0, 2ee8, 80464a8, 3)
 fbe52a05 waitpid  (2ee8, 80465f4, 0) + 65
 fbfb194e g_spawn_sync (0, 8a9c990, 0, 4, 0, 0) + 346
 fbfb1d02 g_spawn_command_line_sync (8aa1700, 0, 0, 0, 804667c) + 5a
 f91915b3 __1cNrun_bug_buddy6Fpkclp0_b_ (8098a80, 2ee7, 0) + 6b
 f91917f7 __1cMcheck_if_gdb6F_v_ (fbf2f000, 80467d4, 807538e, b, fbe77bd5, b) + 117
 f91912fa __1cUbugbuddy_segv_handle6Fi_v_ (b) + 5e
 0807538e segv_redirect (b, 0, 804689c) + 1e
 fbe9c5ef __sighndlr (b, 0, 804689c, 8075370) + f
 fbe8fb9f call_user_handler (b) + 2af
 fbe8fdcf sigacthandler (b, 0, 804689c) + df
 --- called from signal handler with signal 11 (SIGSEGV) ---
 fdc3cd81 gtk_tree_view_adjustment_changed (8617110, 86200f8) + e1
 fc074231 g_cclosure_marshal_VOID__VOID (8617ff0, 0, 1, 891b080, 8046bac, 0) + 55
 fc05f1a7 g_closure_invoke (8617ff0, 0, 1, 891b080, 8046bac) + 107
 fc073ab6 signal_emit_unlocked_R (82148d0, 0, 8617110, 0, 891b080) + 746
 fc072e23 g_signal_emit_valist (8617110, 102, 0, 8046d78) + 873
 fc072f5d g_signal_emit (8617110, 102, 0) + 25
 fdab805c gtk_adjustment_value_changed (8617110) + 38
 fdab790a gtk_adjustment_set_value (8617110, 0, 408f5000) + 66
 fdc370b4 gtk_tree_view_top_row_to_dy (86200f8) + 160
 fdc36577 validate_visible_area (86200f8) + bcb
 fdc36cc7 do_presize_handler (86200f8) + 4b
 fdc36d76 presize_handler_callback (86200f8) + e
 fd97ff17 gdk_threads_dispatch (8a962b0) + 43
 fbf81c47 g_idle_dispatch (8a90728, fd97fed4, 8a962b0) + 1f
 fbf7e9dc g_main_dispatch (80c0bd8) + 1e0
 fbf7fadd g_main_context_dispatch (80c0bd8) + 85
 fbf7fefa g_main_context_iterate (80c0bd8, 1, 1, 8092500) + 3ce
 fbf804fc g_main_loop_run (813fd50) + 1b8
 fe0d3671 bonobo_main (feffb7e4, fbe10c32, 29, 8091300, 809bc38, 8099838) + 5d
 08075917 main     (1, 80470e4, 80470ec) + 377
 0806562a _start   (1, 8047228, 0, 8047232, 8047257, 80472b8) + 7a
-----------------  lwp# 2 / thread# 2  --------------------
 fbe9c55b lwp_park (0, 0, 0)
 fbe94783 mutex_lock_impl (8119804, 0, a, fc017bb0, 1000000, f7bcee98) + 132
 fbe94859 mutex_lock (8119804) + 10
 fbfa402b g_static_rec_mutex_lock (8119800) + a7
 f7c2c576 imap_refresh_info (8926da0, f7bcef28) + 7a
 fea0ba81 camel_folder_refresh_info (8926da0, f7bcef28) + 35
 f86e4913 refresh_folders_exec (82cc800) + c3
 f86db641 mail_msg_proxy (82cc800, 0) + a1
 fbfa5f7b g_thread_pool_thread_proxy (80fe6c8) + b3
 fbfa4b00 g_thread_create_proxy (80f92f8, fbf2f000, f7bcefec, fbe9c25e) + 118
 fbe9c296 _thrp_setup (fb830a00) + 7e
 fbe9c520 _lwp_start (fb830a00, 0, 0, fbe9c25e, 0, 0)
-----------------  lwp# 11 / thread# 11  --------------------
 fbe9c55b lwp_park (0, 0, 0)
 fbe94783 mutex_lock_impl (808fbd0, 0, fbe99f2a, f71fec74, fbf2f000, f71fec74) + 132
 fbe94859 mutex_lock (808fbd0) + 10
 08075405 segv_redirect (b, 0, f71fed3c) + 95
 fbe9c5ef __sighndlr (b, 0, f71fed3c, 8075370) + f
 fbe8fb9f call_user_handler (b) + 2af
 fbe8fdcf sigacthandler (b, 0, f71fed3c) + df
 --- called from signal handler with signal 11 (SIGSEGV) ---
 08a7c78a ???????? (862cc90, 0)
 fbfa5f7b g_thread_pool_thread_proxy (80fe6c8) + b3
 fbfa4b00 g_thread_create_proxy (8a92b08, fbf2f000, f71fefec, fbe9c25e) + 118
 fbe9c296 _thrp_setup (fb831a00) + 7e
 fbe9c520 _lwp_start (fb831a00, 0, 0, fbe9c25e, 0, 0)
-----------------  lwp# 10 / thread# 10  --------------------
 fbea0bb7 pollsys  (f6572570, 2, f6572530, 0)
 fbe46cd4 poll     (f6572570, 2, 3a980) + 4c
 fe7697e5 _pr_poll_with_poll (f65728c0, 2, 16e3600) + 3c1
 fe76998a PR_Poll  (f65728c0, 2, 16e3600) + 16
 fea260e2 stream_read (82dc780, 8531c00, 400) + f2
 fe8d04fb camel_stream_read (82dc780, 8531c00, 400) + 9b
 fe8ce7b0 camel_stream_buffer_gets (8331548, f6572960, 400) + 6c
 f7c39b75 camel_imap_store_readline (8119038, f6572d9c, 862cd64) + a5
 f7c2a64d camel_imap_command_response (8119038, f6572dd0, 862cd64) + 29
 f7c2a883 imap_read_response (8119038, 862cd64) + 4b
 f7c2a209 camel_imap_command (8119038, 0, 862cd64, f7c3fea0, f7c400b8, f6572e90) + 9d
 f7c38d51 get_folders_sync (8119038, f6572e90, 862cd64) + 89
 f7c392a7 get_folder_info (8119038, 8a56238, 9, 862cd64) + 16f
 fea243aa camel_store_get_folder_info (8119038, 8a56238, 9, 862cd64) + 4e
 f86c3086 sub_folderinfo_exec (862cd50) + 86
 f86db641 mail_msg_proxy (862cd50, 0) + a1
 fbfa5f7b g_thread_pool_thread_proxy (80fe6c8) + b3
 fbfa4b00 g_thread_create_proxy (8a1bf48, fbf2f000, f6572fec, fbe9c25e) + 118
 fbe9c296 _thrp_setup (fb832200) + 7e
 fbe9c520 _lwp_start (fb832200, 0, 0, fbe9c25e, 0, 0)
-----------------  lwp# 9 / thread# 9  --------------------
 fbe9c55b lwp_park (0, 0, 0)
 fbe94783 mutex_lock_impl (8119804, 0, 4, fc017bb0, 80f67e8, f6473eb8) + 132
 fbe94859 mutex_lock (8119804) + 10
 fbfa402b g_static_rec_mutex_lock (8119800) + a7
 f7c2c576 imap_refresh_info (82e6468, 88fdd64) + 7a
 fea0ba81 camel_folder_refresh_info (82e6468, 88fdd64) + 35
 f86e0a84 refresh_folder_exec (88fdd50) + 34
 f86db641 mail_msg_proxy (88fdd50, 0) + a1
 fbfa5f7b g_thread_pool_thread_proxy (8629878) + b3
 fbfa4b00 g_thread_create_proxy (86e2b80, fbf2f000, f6473fec, fbe9c25e) + 118
 fbe9c296 _thrp_setup (fb832a00) + 7e
 fbe9c520 _lwp_start (fb832a00, 0, 0, fbe9c25e, 0, 0)
Comment 1 André Klapper 2008-10-29 15:27:41 UTC
Please file crashers as critical always
Comment 2 Luca Foppiano 2008-11-25 13:00:52 UTC
I tried to reproduce it and after a while I enable and disable remote imap folders, evolution crashes:


Distribution: Fedora release 10 (Cambridge)
Gnome Release: 2.24.1 2008-11-06 (Red Hat, Inc)
BugBuddy Version: 2.24.1

System: Linux 2.6.27.5-117.fc10.x86_64 #1 SMP Tue Nov 18 11:58:53 EST 2008 x86_64
X Vendor: The X.Org Foundation
X Vendor Release: 10503000
Selinux: Enforcing
Accessibility: Disabled
GTK+ Theme: Nodoka
Icon Theme: Fedora

Memory status: size: 767275008 vsize: 767275008 resident: 49651712 share: 20967424 rss: 49651712 rss_rlim: 18446744073709551615
CPU usage: start_time: 1227617979 rtime: 277 utime: 236 stime: 41 cutime:2 cstime: 8 timeout: 0 it_real_value: 0 frequency: 100

Backtrace was generated from '/usr/bin/evolution'

[?1034h[Thread debugging using libthread_db enabled]
[New Thread 0x7fe64c1fb7e0 (LWP 7528)]
[New Thread 0x7fe6371d0950 (LWP 7589)]
[New Thread 0x7fe63e198950 (LWP 7558)]
[New Thread 0x7fe63f921950 (LWP 7557)]
[New Thread 0x7fe641b31950 (LWP 7553)]
0x0000003dd54dc846 in poll () from /lib64/libc.so.6

Thread 3 (Thread 0x7fe63e198950 (LWP 7558))

  • #0 __lll_lock_wait
    from /lib64/libpthread.so.0
  • #1 _L_lock_102
    from /lib64/libpthread.so.0
  • #2 pthread_mutex_lock
    from /lib64/libpthread.so.0
  • #3 g_static_rec_mutex_lock
    from /lib64/libglib-2.0.so.0
  • #4 ??
    from /usr/lib64/evolution-data-server-1.2/camel-providers/libcamelimap.so
  • #5 ??
    from /usr/lib64/libcamel-provider-1.2.so.14
  • #6 ??
    from /lib64/libglib-2.0.so.0
  • #7 ??
    from /lib64/libglib-2.0.so.0
  • #8 start_thread
    from /lib64/libpthread.so.0
  • #9 clone
    from /lib64/libc.so.6


----------- .xsession-errors (12 sec old) ---------------------
(evolution:7380): e-data-server-WARNING **: Error in execution: Failed to retrieve message
(evolution:7380): e-data-server-WARNING **: Error in execution: Failed to retrieve message
evolution-shell-Message: Killing old version of evolution-data-server...
** (evolution:7528): DEBUG: mailto URL command: evolution --component=mail %s
** (evolution:7528): DEBUG: mailto URL program: evolution
(evolution:7528): camel-imap-provider-WARNING **: Unable to load summary no such table: INBOX
(evolution:7528): camel-imap-provider-WARNING **: Unable to load summary no such table: INBOX
(evolution:7528): camel-imap-provider-WARNING **: Unable to load summary no such table: INBOX
--------------------------------------------------
Comment 3 Akhil Laddha 2008-11-27 03:21:17 UTC
*** Bug 562279 has been marked as a duplicate of this bug. ***
Comment 4 Luca Foppiano 2008-11-30 19:12:12 UTC
sorry, why this but is still unconfirmed?
Comment 5 Matthew Barnes 2008-12-04 05:16:58 UTC
*** Bug 563192 has been marked as a duplicate of this bug. ***
Comment 6 Norman 2008-12-18 03:22:00 UTC
Created attachment 124904 [details] [review]
The patch of Bug 558337

Cause of the Bug:
In mail/em-subscribe-editor.c, the struct _zsubscribe_msg is cast to EDListNode type, however, it is not subclass of EDListNode class.

Fix approach:
Create a wrapper class MailMsgListNode of _zsubscribe_msg message.
The MailMsgListNode class is the subclass of EDList. So the _zsubscribe_msg can be added into the EDList.
Comment 7 Milan Crha 2008-12-18 12:06:32 UTC
Good catch, commit to trunk and stable please.
Comment 8 Jeff Cai 2008-12-22 05:43:40 UTC
committed to the trunk and 2.24 branch.
Comment 9 Milan Crha 2009-11-23 16:13:09 UTC
*** Bug 533743 has been marked as a duplicate of this bug. ***