GNOME Bugzilla – Bug 591557
[HB] crash scrolling the evolution message list
Last modified: 2009-08-12 19:45:35 UTC
Version: 2.28.x What were you doing when the application crashed? scrolling the long spam folder message list Distribution: Fedora release 11.91 (Rawhide) Gnome Release: 2.27.5 2009-08-04 (Red Hat, Inc) BugBuddy Version: 2.27.1 System: Linux 2.6.31-0.149.rc5.git3.fc12.x86_64 #1 SMP Tue Aug 11 22:37:52 EDT 2009 x86_64 X Vendor: The X.Org Foundation X Vendor Release: 10699001 Selinux: Enforcing Accessibility: Disabled GTK+ Theme: Clearlooks Icon Theme: Tango GTK+ Modules: canberra-gtk-module, pk-gtk-module, gnomebreakpad Memory status: size: 3206725632 vsize: 3206725632 resident: 1744637952 share: 28065792 rss: 1744637952 rss_rlim: 18446744073709551615 CPU usage: start_time: 1250064500 rtime: 55359 utime: 43201 stime: 12158 cutime:1 cstime: 44 timeout: 0 it_real_value: 0 frequency: 100 Backtrace was generated from '/usr/bin/evolution' [?1034h[Thread debugging using libthread_db enabled] [New Thread 0x7f1f8e7a0710 (LWP 1056)] [New Thread 0x7f1fb89c0710 (LWP 7211)] [New Thread 0x7f1f8d5a2710 (LWP 7210)] [New Thread 0x7f1fab5fe710 (LWP 6295)] [New Thread 0x7f1fabfff710 (LWP 6293)] [New Thread 0x7f1fb9ed0710 (LWP 6291)] [New Thread 0x7f1fba8d1710 (LWP 6290)] 0x00007f1fd41b600d in __libc_waitpid (pid=1103, stat_loc=<value optimized out>, options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:41 41 int result = INLINE_SYSCALL (wait4, 4, pid, stat_loc, options, NULL);
+ Trace 216898
The program is running. Quit anyway (and detach it)? (y or n) [answered Y; input not from terminal] ---- Critical and fatal warnings logged during execution ---- ** GLib-GObject **: g_object_unref: assertion `G_IS_OBJECT (object)' failed ** GLib-GObject **: g_object_unref: assertion `G_IS_OBJECT (object)' failed ----------- .xsession-errors (333 sec old) --------------------- ** (galeon:3117): WARNING **: Spinner rest icon not found ** (galeon:3117): WARNING **: Spinner rest icon not found (galeon:3117): GLib-GObject-CRITICAL **: g_object_ref: assertion `G_IS_OBJECT (object)' failed ** (galeon:3117): WARNING **: Spinner rest icon not found ** (galeon:3117): WARNING **: Spinner rest icon not found ** (galeon:3117): WARNING **: Spinner rest icon not found ** (galeon:3117): WARNING **: Spinner rest icon not found (galeon:3117): GLib-GObject-CRITICAL **: g_object_ref: assertion `G_IS_OBJECT (object)' failed --------------------------------------------------
actually scrolling the message list again in the same spam folder reproduces the crash. Program received signal SIGSEGV, Segmentation fault. _hb_ot_layout_skip_mark (face=0xb31360, ginfo=0x1400dd2fcc, lookup_flags=8, property_out=0x7fffffffbbdc) at hb-ot-layout.cc:181 181 if (ginfo->gproperty == HB_BUFFER_GLYPH_PROPERTIES_UNKNOWN) Current language: auto; currently c++ (gdb) p ginfo $1 = (hb_internal_glyph_info_t *) 0x1400dd2fcc (gdb) p ginfo->gproperty Cannot access memory at address 0x1400dd2fdc (gdb) bt full
+ Trace 216899
something might be wrong with rawhide's gdb
Fixed. Will be in 1.25.3 tonight. commit ebdcfbeb5aeb3e827326844f2f942570e503e26a Author: Behdad Esfahbod <behdad@behdad.org> Date: Wed Aug 12 15:40:04 2009 -0400 [HB] Fix invalid access / overflow on x86-64 Bug 591557 – [HB] crash scrolling the evolution message list Bug 591576 – crashed with SIGSEGV at pango