Bug 587165 – Double free in initialize_categories()

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 587165 - Double free in initialize_categories()


Summary:	Double free in initialize_categories()


Status:	RESOLVED FIXED

Product:	evolution-data-server
Classification:	Platform
Component:	general
Version:	2.28.x (obsolete)
Hardware:	Other Linux

Importance:	Normal critical
Target Milestone:	---
Assigned To:	Evolution Shell Maintainers Team
QA Contact:	Evolution QA team

URL:
Whiteboard:	evolution[categories]

Depends on:
Blocks:

Reported:	2009-06-27 23:56 UTC by Reinout van Schouwen
Modified:	2013-09-14 16:53 UTC

See Also:
GNOME target:	---
GNOME version:	2.27/2.28

Description Reinout van Schouwen 2009-06-27 23:56:47 UTC

Evolution 2.27.3 crashes here after showing the warning dialog that it's an unstable version. 
It's a clean installation (no upgrade).

Backtrace:

+ Trace 216219

Thread 1 (Thread 0x7fd0ad769710 (LWP 27749))

#0 raise
from /lib64/libc.so.6
#1 abort
from /lib64/libc.so.6
#2 ??
from /lib64/libc.so.6
#3 ??
from /lib64/libc.so.6
#4 free
from /lib64/libc.so.6
#5 initialize_categories
at e-categories.c line 401
#6 e_categories_get_list
at e-categories.c line 490
#7 e_plugin_lib_enable
at calendar-weather.c line 76
#8 epl_loadmodule
at e-plugin.c line 1009
#9 epl_invoke
at e-plugin.c line 1047
#10 e_event_emit
at e-event.c line 288
#11 migrate_calendars
at migration.c line 890
#12 impl_upgradeFromVersion
at calendar-component.c line 960
#13 GNOME_Evolution_Component_upgradeFromVersion
at Evolution-stubs.c line 88
#14 e_shell_attempt_upgrade
at e-shell.c line 618
#15 e_shell_construct
at e-shell.c line 695
#16 e_shell_new
at e-shell.c line 743
#17 idle_cb
at main.c line 337
#18 main
at main.c line 268

Comment 1 Reinout van Schouwen 2009-06-27 23:58:35 UTC

There's console output as well:

addressbook_migrate (0.0.0)
*** glibc detected *** evolution: double free or corruption (fasttop): 0x0000000001e6ae90 ***
======= Backtrace: =========
/lib64/libc.so.6[0x7fd0a9a7c816]
/lib64/libc.so.6(cfree+0x6f)[0x7fd0a9a8133f]
/usr/lib64/libedataserver-1.2.so.11[0x7fd0aca66ca1]
/usr/lib64/libedataserver-1.2.so.11(e_categories_get_list+0x1c)[0x7fd0aca671cc]
/usr/lib64/evolution/2.28/plugins/liborg-gnome-calendar-weather.so(e_plugin_lib_enable+0x22)[0x7fd095c10172]
/usr/lib64/evolution/2.28/libeutil.so.0[0x7fd0acee1318]
/usr/lib64/evolution/2.28/libeutil.so.0[0x7fd0acee157a]
/usr/lib64/evolution/2.28/libeutil.so.0(e_event_emit+0xa2)[0x7fd0aced7a92]
/usr/lib64/evolution/2.28/components/libevolution-calendar.so(migrate_calendars+0x319)[0x7fd098236bf9]
/usr/lib64/evolution/2.28/components/libevolution-calendar.so[0x7fd0981c2ccf]
/usr/lib64/evolution/2.28/libeshell.so.0(GNOME_Evolution_Component_upgradeFromVersion+0x74)[0x7fd0ad392134]
evolution(e_shell_attempt_upgrade+0x1dd)[0x40e51d]
evolution(e_shell_construct+0xd7)[0x40eb97]
evolution(e_shell_new+0x3d)[0x40ecad]
evolution[0x415d71]
evolution(main+0x616)[0x416616]
/lib64/libc.so.6(__libc_start_main+0xfd)[0x7fd0a9a2991d]
evolution[0x40b559]
======= Memory map: ========
00400000-0041f000 r-xp 00000000 08:01 310436                             /usr/bin/evolution
0061f000-00620000 r--p 0001f000 08:01 310436                             /usr/bin/evolution
00620000-00624000 rw-p 00020000 08:01 310436                             /usr/bin/evolution
01d1f000-02079000 rw-p 00000000 00:00 0                                  [heap]
7fd0955df000-7fd0955e8000 r-xp 00000000 08:01 137136                     /usr/lib64/libproxy.so.0.0.0
7fd0955e8000-7fd0957e8000 ---p 00009000 08:01 137136                     /usr/lib64/libproxy.so.0.0.0
7fd0957e8000-7fd0957e9000 r--p 00009000 08:01 137136                     /usr/lib64/libproxy.so.0.0.0
7fd0957e9000-7fd0957ea000 rw-p 0000a000 08:01 137136                     /usr/lib64/libproxy.so.0.0.0
7fd0957ea000-7fd0957ef000 r-xp 00000000 08:01 137144                     /usr/lib64/libsoup-gnome-2.4.so.1.2.0
7fd0957ef000-7fd0959ee000 ---p 00005000 08:01 137144                     /usr/lib64/libsoup-gnome-2.4.so.1.2.0
7fd0959ee000-7fd0959ef000 r--p 00004000 08:01 137144                     /usr/lib64/libsoup-gnome-2.4.so.1.2.0
7fd0959ef000-7fd0959f0000 rw-p 00005000 08:01 137144                     /usr/lib64/libsoup-gnome-2.4.so.1.2.0
7fd0959f0000-7fd095a09000 r-xp 00000000 08:01 170090                     /usr/lib64/libgweather.so.1.4.5
7fd095a09000-7fd095c09000 ---p 00019000 08:01 170090                     /usr/lib64/libgweather.so.1.4.5
7fd095c09000-7fd095c0a000 r--p 00019000 08:01 170090                     /usr/lib64/libgweather.so.1.4.5
7fd095c0a000-7fd095c0b000 rw-p 0001a000 08:01 170090                     /usr/lib64/libgweather.so.1.4.5
7fd095c0b000-7fd095c0c000 rw-p 00000000 00:00 0 
7fd095c0c000-7fd095c11000 r-xp 00000000 08:01 310509                     /usr/lib64/evolution/2.28/plugins/liborg-gnome-calendar-weather.so
7fd095c11000-7fd095e10000 ---p 00005000 08:01 310509                     /usr/lib64/evolution/2.28/plugins/liborg-gnome-calendar-weather.so
7fd095e10000-7fd095e11000 r--p 00004000 08:01 310509                     /usr/lib64/evolution/2.28/plugins/liborg-gnome-calendar-weather.so
7fd095e11000-7fd095e12000 rw-p 00005000 08:01 310509                     /usr/lib64/evolution/2.28/plugins/liborg-gnome-calendar-weather.so
7fd095e12000-7fd095e2d000 r-xp 00000000 08:01 135559                     /usr/lib64/libsasl2.so.2.0.23
7fd095e2d000-7fd09602c000 ---p 0001b000 08:01 135559                     /usr/lib64/libsasl2.so.2.0.23
7fd09602c000-7fd09602d000 r--p 0001a000 08:01 135559                     /usr/lib64/libsasl2.so.2.0.23
7fd09602d000-7fd09602e000 rw-p 0001b000 08:01 135559                     /usr/lib64/libsasl2.so.2.0.23
7fd09602e000-7fd09603e000 r-xp 00000000 08:01 135562                     /usr/lib64/liblber-2.4.so.2.4.2
7fd09603e000-7fd09623d000 ---p 00010000 08:01 135562                     /usr/lib64/liblber-2.4.so.2.4.2
7fd09623d000-7fd09623e000 r--p 0000f000 08:01 135562                     /usr/lib64/liblber-2.4.so.2.4.2
7fd09623e000-7fd09623f000 rw-p 00010000 08:01 135562                     /usr/lib64/liblber-2.4.so.2.4.2
7fd09623f000-7fd096286000 r-xp 00000000 08:01 135564                     /usr/lib64/libldap-2.4.so.2.4.2
7fd096286000-7fd096486000 ---p 00047000 08:01 135564                     /usr/lib64/libldap-2.4.so.2.4.2
7fd096486000-7fd096487000 r--p 00047000 08:01 135564                     /usr/lib64/libldap-2.4.so.2.4.2
7fd096487000-7fd096489000 rw-p 00048000 08:01 135564                     /usr/lib64/libldap-2.4.so.2.4.2
7fd096489000-7fd096492000 r-xp 00000000 08:01 310483                     /usr/lib64/evolution/2.28/libevolution-addressbook-importers.so.0.0.0
7fd096492000-7fd096692000 ---p 00009000 08:01 310483                     /usr/lib64/evolution/2.28/libevolution-addressbook-importers.so.0.0.0
7fd096692000-7fd096693000 r--p 00009000 08:01 310483                     /usr/lib64/evolution/2.28/libevolution-addressbook-importers.so.0.0.0
7fd096693000-7fd096694000 rw-p 0000a000 08:01 310483                     /usr/lib64/evolution/2.28/libevolution-addressbook-importers.so.0.0.0
7fd096694000-7fd096699000 r-xp 00000000 08:01 310481                     /usr/lib64/evolution/2.28/libevolution-addressbook-a11y.so.0.0.0
7fd096699000-7fd096898000 ---p 00005000 08:01 310481                     /usr/lib64/evolution/2.28/libevolution-addressbook-a11y.so.0.0.0
7fd096898000-7fd096899000 r--p 00004000 08:01 310481                     /usr/lib64/evolution/2.28/libevolution-addressbook-a11y.so.0.0.0
7fd096899000-7fd09689a000 rw-p 00005000 08:01 310481                     /usr/lib64/evolution/2.28/libevolution-addressbook-a11y.so.0.0.0
7fd09689a000-7fd0968dc000 r-xp 00000000 08:01 310445                     /usr/lib64/evolution/2.28/components/libevolution-addressbook.so
7fd0968dc000-7fd096adb000 ---p 00042000 08:01 310445                     /usr/lib64/evolution/2.28/components/libevolution-addressbook.so
7fd096adb000-7fd096add000 r--p 00041000 08:01 310445                     /usr/lib64/evolution/2.28/components/libevolution-addressbook.so
7fd096add000-7fd096ae0000 rw-p 00043000 08:01 310445                     /usr/lib64/evolution/2.28/components/libevolution-addressbook.so
7fd096ae0000-7fd096ae6000 r-xp 00000000 08:01 278607                     /usr/lib64/libytnef.so.0.0.0
7fd096ae6000-7fd096ce6000 ---p 00006000 08:01 278607                     /usr/lib64/libytnef.so.0.0.0
7fd096ce6000-7fd096ce7000 r--p 00006000 08:01 278607                     /usr/lib64/libytnef.so.0.0.0
7fd096ce7000-7fd096cf6000 rw-p 00007000 08:01 278607                     /usr/lib64/libytnef.so.0.0.0
7fd096cf6000-7fd096cfc000 r-xp 00000000 08:01 310543                     /usr/lib64/evolution/2.28/plugins/liborg-gnome-tnef-attachments.so
7fd096cfc000-7fd096efb000 ---p 00006000 08:01 310543                     /usr/lib64/evolution/2.28/plugins/liborg-gnome-tnef-attachments.so
7fd096efb000-7fd096efc000 r--p 00005000 08:01 310543                     /usr/lib64/evolution/2.28/plugins/liborg-gnome-tnef-attachments.so
7fd096efc000-7fd096efd000 rw-p 00006000 08:01 310543                     /usr/lib64/evolution/2.28/plugins/liborg-gnome-tnef-attachments.so
7fd096efd000-7fd096fc4000 r-xp 00000000 08:01 137190                     /usr/lib64/libgstreamer-0.10.so.0.20.0
7fd096fc4000-7fd0971c4000 ---p 000c7000 08:01 137190                     /usr/lib64/libgstreamer-0.10.so.0.20.0
7fd0971c4000-7fd0971c8000 r--p 000c7000 08:01 137190                     /usr/lib64/libgstreamer-0.10.so.0.20.0
7fd0971c8000-7fd0971cb000 rw-p 000cb000 08:01 137190                     /usr/lib64/libgstreamer-0.10.so.0.20.0
7fd0971cb000-7fd0971cc000 rw-p 00000000 00:00 0 
7fd0971cc000-7fd0971ce000 r-xp 00000000 08:01 310504                     /usr/lib64/evolution/2.28/plugins/liborg-gnome-audio-inline.so
7fd0971ce000-7fd0973ce000 ---p 00002000 08:01 310504                     /usr/lib64/evolution/2.28/plugins/liborg-gnome-audio-inline.so
7fd0973ce000-7fd0973cf000 r--p 00002000 08:01 310504                     /usr/lib64/evolution/2.28/plugins/liborg-gnome-audio-inline.so
7fd0973cf000-7fd0973d0000 rw-p 00003000 08:01 310504                     /usr/lib64/evolution/2.2
Program received signal SIGABRT, Aborted.

I'm using Mandriva 2010 Cooker.

Comment 2 Matthew Barnes 2009-06-28 02:27:40 UTC

Fixed in:
http://git.gnome.org/cgit/evolution-data-server/commit/?id=9c673e708926c277d2bc94bb2ae893be4d09ceca

Comment 3 Reinout van Schouwen 2009-07-02 21:28:10 UTC

Problem is still present in 2.27.3!

Comment 4 Matthew Barnes 2009-07-02 22:41:00 UTC

Yes, it will be fixed in 2.27.4.