GNOME Bugzilla – Bug 558337
Evolution crashes while managing IMAP folder subscriptions
Last modified: 2009-11-23 16:13:09 UTC
f I click on Folder -> Subscriptions, and select my IMAP mail account, I cannot manage my subscriptions without Evolution crashing with a NULL pointer dereference. After the folder list comes up, clicking on a few folders results in a crash. This is always reproducible. Distribution: Solaris Express Community Edition snv_101 X86 Gnome Release: 2.24.0 2008-10-06 (Sun Microsystems, Inc.) BugBuddy Version: 2.24.0 X Vendor: Sun Microsystems, Inc. X Vendor Release: 10300000 Selinux: No Accessibility: Disabled GTK+ Theme: Clearlooks Icon Theme: gnome Memory status: size: 162181120 vsize: 162181120 resident: 46587904 share: 1953792 rss: 46587904 rss_rlim: 0 CPU usage: start_time: 1225253851 rtime: 181 utime: 1686478 stime: 124727 cutime:0 cstime: 0 timeout: 0 it_real_value: 0 frequency: 0 Backtrace was generated from '/usr/bin/evolution' 12007: evolution ----------------- lwp# 1 / thread# 1 -------------------- fbea1177 waitid (0, 2ee8, 80464a8, 3) fbe52a05 waitpid (2ee8, 80465f4, 0) + 65 fbfb194e g_spawn_sync (0, 8a9c990, 0, 4, 0, 0) + 346 fbfb1d02 g_spawn_command_line_sync (8aa1700, 0, 0, 0, 804667c) + 5a f91915b3 __1cNrun_bug_buddy6Fpkclp0_b_ (8098a80, 2ee7, 0) + 6b f91917f7 __1cMcheck_if_gdb6F_v_ (fbf2f000, 80467d4, 807538e, b, fbe77bd5, b) + 117 f91912fa __1cUbugbuddy_segv_handle6Fi_v_ (b) + 5e 0807538e segv_redirect (b, 0, 804689c) + 1e fbe9c5ef __sighndlr (b, 0, 804689c, 8075370) + f fbe8fb9f call_user_handler (b) + 2af fbe8fdcf sigacthandler (b, 0, 804689c) + df --- called from signal handler with signal 11 (SIGSEGV) --- fdc3cd81 gtk_tree_view_adjustment_changed (8617110, 86200f8) + e1 fc074231 g_cclosure_marshal_VOID__VOID (8617ff0, 0, 1, 891b080, 8046bac, 0) + 55 fc05f1a7 g_closure_invoke (8617ff0, 0, 1, 891b080, 8046bac) + 107 fc073ab6 signal_emit_unlocked_R (82148d0, 0, 8617110, 0, 891b080) + 746 fc072e23 g_signal_emit_valist (8617110, 102, 0, 8046d78) + 873 fc072f5d g_signal_emit (8617110, 102, 0) + 25 fdab805c gtk_adjustment_value_changed (8617110) + 38 fdab790a gtk_adjustment_set_value (8617110, 0, 408f5000) + 66 fdc370b4 gtk_tree_view_top_row_to_dy (86200f8) + 160 fdc36577 validate_visible_area (86200f8) + bcb fdc36cc7 do_presize_handler (86200f8) + 4b fdc36d76 presize_handler_callback (86200f8) + e fd97ff17 gdk_threads_dispatch (8a962b0) + 43 fbf81c47 g_idle_dispatch (8a90728, fd97fed4, 8a962b0) + 1f fbf7e9dc g_main_dispatch (80c0bd8) + 1e0 fbf7fadd g_main_context_dispatch (80c0bd8) + 85 fbf7fefa g_main_context_iterate (80c0bd8, 1, 1, 8092500) + 3ce fbf804fc g_main_loop_run (813fd50) + 1b8 fe0d3671 bonobo_main (feffb7e4, fbe10c32, 29, 8091300, 809bc38, 8099838) + 5d 08075917 main (1, 80470e4, 80470ec) + 377 0806562a _start (1, 8047228, 0, 8047232, 8047257, 80472b8) + 7a ----------------- lwp# 2 / thread# 2 -------------------- fbe9c55b lwp_park (0, 0, 0) fbe94783 mutex_lock_impl (8119804, 0, a, fc017bb0, 1000000, f7bcee98) + 132 fbe94859 mutex_lock (8119804) + 10 fbfa402b g_static_rec_mutex_lock (8119800) + a7 f7c2c576 imap_refresh_info (8926da0, f7bcef28) + 7a fea0ba81 camel_folder_refresh_info (8926da0, f7bcef28) + 35 f86e4913 refresh_folders_exec (82cc800) + c3 f86db641 mail_msg_proxy (82cc800, 0) + a1 fbfa5f7b g_thread_pool_thread_proxy (80fe6c8) + b3 fbfa4b00 g_thread_create_proxy (80f92f8, fbf2f000, f7bcefec, fbe9c25e) + 118 fbe9c296 _thrp_setup (fb830a00) + 7e fbe9c520 _lwp_start (fb830a00, 0, 0, fbe9c25e, 0, 0) ----------------- lwp# 11 / thread# 11 -------------------- fbe9c55b lwp_park (0, 0, 0) fbe94783 mutex_lock_impl (808fbd0, 0, fbe99f2a, f71fec74, fbf2f000, f71fec74) + 132 fbe94859 mutex_lock (808fbd0) + 10 08075405 segv_redirect (b, 0, f71fed3c) + 95 fbe9c5ef __sighndlr (b, 0, f71fed3c, 8075370) + f fbe8fb9f call_user_handler (b) + 2af fbe8fdcf sigacthandler (b, 0, f71fed3c) + df --- called from signal handler with signal 11 (SIGSEGV) --- 08a7c78a ???????? (862cc90, 0) fbfa5f7b g_thread_pool_thread_proxy (80fe6c8) + b3 fbfa4b00 g_thread_create_proxy (8a92b08, fbf2f000, f71fefec, fbe9c25e) + 118 fbe9c296 _thrp_setup (fb831a00) + 7e fbe9c520 _lwp_start (fb831a00, 0, 0, fbe9c25e, 0, 0) ----------------- lwp# 10 / thread# 10 -------------------- fbea0bb7 pollsys (f6572570, 2, f6572530, 0) fbe46cd4 poll (f6572570, 2, 3a980) + 4c fe7697e5 _pr_poll_with_poll (f65728c0, 2, 16e3600) + 3c1 fe76998a PR_Poll (f65728c0, 2, 16e3600) + 16 fea260e2 stream_read (82dc780, 8531c00, 400) + f2 fe8d04fb camel_stream_read (82dc780, 8531c00, 400) + 9b fe8ce7b0 camel_stream_buffer_gets (8331548, f6572960, 400) + 6c f7c39b75 camel_imap_store_readline (8119038, f6572d9c, 862cd64) + a5 f7c2a64d camel_imap_command_response (8119038, f6572dd0, 862cd64) + 29 f7c2a883 imap_read_response (8119038, 862cd64) + 4b f7c2a209 camel_imap_command (8119038, 0, 862cd64, f7c3fea0, f7c400b8, f6572e90) + 9d f7c38d51 get_folders_sync (8119038, f6572e90, 862cd64) + 89 f7c392a7 get_folder_info (8119038, 8a56238, 9, 862cd64) + 16f fea243aa camel_store_get_folder_info (8119038, 8a56238, 9, 862cd64) + 4e f86c3086 sub_folderinfo_exec (862cd50) + 86 f86db641 mail_msg_proxy (862cd50, 0) + a1 fbfa5f7b g_thread_pool_thread_proxy (80fe6c8) + b3 fbfa4b00 g_thread_create_proxy (8a1bf48, fbf2f000, f6572fec, fbe9c25e) + 118 fbe9c296 _thrp_setup (fb832200) + 7e fbe9c520 _lwp_start (fb832200, 0, 0, fbe9c25e, 0, 0) ----------------- lwp# 9 / thread# 9 -------------------- fbe9c55b lwp_park (0, 0, 0) fbe94783 mutex_lock_impl (8119804, 0, 4, fc017bb0, 80f67e8, f6473eb8) + 132 fbe94859 mutex_lock (8119804) + 10 fbfa402b g_static_rec_mutex_lock (8119800) + a7 f7c2c576 imap_refresh_info (82e6468, 88fdd64) + 7a fea0ba81 camel_folder_refresh_info (82e6468, 88fdd64) + 35 f86e0a84 refresh_folder_exec (88fdd50) + 34 f86db641 mail_msg_proxy (88fdd50, 0) + a1 fbfa5f7b g_thread_pool_thread_proxy (8629878) + b3 fbfa4b00 g_thread_create_proxy (86e2b80, fbf2f000, f6473fec, fbe9c25e) + 118 fbe9c296 _thrp_setup (fb832a00) + 7e fbe9c520 _lwp_start (fb832a00, 0, 0, fbe9c25e, 0, 0)
Please file crashers as critical always
I tried to reproduce it and after a while I enable and disable remote imap folders, evolution crashes: Distribution: Fedora release 10 (Cambridge) Gnome Release: 2.24.1 2008-11-06 (Red Hat, Inc) BugBuddy Version: 2.24.1 System: Linux 2.6.27.5-117.fc10.x86_64 #1 SMP Tue Nov 18 11:58:53 EST 2008 x86_64 X Vendor: The X.Org Foundation X Vendor Release: 10503000 Selinux: Enforcing Accessibility: Disabled GTK+ Theme: Nodoka Icon Theme: Fedora Memory status: size: 767275008 vsize: 767275008 resident: 49651712 share: 20967424 rss: 49651712 rss_rlim: 18446744073709551615 CPU usage: start_time: 1227617979 rtime: 277 utime: 236 stime: 41 cutime:2 cstime: 8 timeout: 0 it_real_value: 0 frequency: 100 Backtrace was generated from '/usr/bin/evolution' [?1034h[Thread debugging using libthread_db enabled] [New Thread 0x7fe64c1fb7e0 (LWP 7528)] [New Thread 0x7fe6371d0950 (LWP 7589)] [New Thread 0x7fe63e198950 (LWP 7558)] [New Thread 0x7fe63f921950 (LWP 7557)] [New Thread 0x7fe641b31950 (LWP 7553)] 0x0000003dd54dc846 in poll () from /lib64/libc.so.6
+ Trace 210215
Thread 3 (Thread 0x7fe63e198950 (LWP 7558))
----------- .xsession-errors (12 sec old) --------------------- (evolution:7380): e-data-server-WARNING **: Error in execution: Failed to retrieve message (evolution:7380): e-data-server-WARNING **: Error in execution: Failed to retrieve message evolution-shell-Message: Killing old version of evolution-data-server... ** (evolution:7528): DEBUG: mailto URL command: evolution --component=mail %s ** (evolution:7528): DEBUG: mailto URL program: evolution (evolution:7528): camel-imap-provider-WARNING **: Unable to load summary no such table: INBOX (evolution:7528): camel-imap-provider-WARNING **: Unable to load summary no such table: INBOX (evolution:7528): camel-imap-provider-WARNING **: Unable to load summary no such table: INBOX --------------------------------------------------
*** Bug 562279 has been marked as a duplicate of this bug. ***
sorry, why this but is still unconfirmed?
*** Bug 563192 has been marked as a duplicate of this bug. ***
Created attachment 124904 [details] [review] The patch of Bug 558337 Cause of the Bug: In mail/em-subscribe-editor.c, the struct _zsubscribe_msg is cast to EDListNode type, however, it is not subclass of EDListNode class. Fix approach: Create a wrapper class MailMsgListNode of _zsubscribe_msg message. The MailMsgListNode class is the subclass of EDList. So the _zsubscribe_msg can be added into the EDList.
Good catch, commit to trunk and stable please.
committed to the trunk and 2.24 branch.
*** Bug 533743 has been marked as a duplicate of this bug. ***