After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 606997 - nautilus-sendto crashed with SIGSEGV in magazine_chain_pop_head()
nautilus-sendto crashed with SIGSEGV in magazine_chain_pop_head()
Status: RESOLVED FIXED
Product: nautilus-sendto
Classification: Applications
Component: general
unspecified
Other Linux
: Normal normal
: ---
Assigned To: nautilus-sendto-maint
nautilus-sendto-maint
Depends on:
Blocks:
 
 
Reported: 2010-01-14 19:15 UTC by Fabio Durán Verdugo
Modified: 2012-04-11 11:02 UTC
See Also:
GNOME target: ---
GNOME version: ---


Attachments
Valgrind (515.27 KB, application/x-compressed-tar)
2010-02-17 19:32 UTC, Fabio Durán Verdugo
Details

Description Fabio Durán Verdugo 2010-01-14 19:15:31 UTC
Steps:
1 .- From nautilus select one file
2. - rigth click and select sent to,
3. - Select Evolution
4. - Type Email Dir
5. - Press Enter
Crash


nautilus-sendto 2.28.2-2ubuntu2


.

Thread 1 (Thread 12354)

  • #0 magazine_chain_pop_head
    at /build/buildd/glib2.0-2.23.1/glib/gslice.c line 479
  • #1 magazine_chain_prepare_fields
    at /build/buildd/glib2.0-2.23.1/glib/gslice.c line 553
  • #2 magazine_cache_push_magazine
    at /build/buildd/glib2.0-2.23.1/glib/gslice.c line 626
  • #3 private_thread_memory_cleanup
    at /build/buildd/glib2.0-2.23.1/glib/gslice.c line 712
  • #4 __nptl_deallocate_tsd
    from /lib/tls/i686/cmov/libpthread.so.0
  • #5 start_thread
    from /lib/tls/i686/cmov/libpthread.so.0
  • #6 clone
    from /lib/tls/i686/cmov/libc.so.6

Comment 1 Bastien Nocera 2010-01-14 19:23:24 UTC
That means nothing, means that the stack is trashed. Run it under valgrind.
Comment 2 Fabio Durán Verdugo 2010-01-14 19:24:16 UTC
http://launchpadlibrarian.net/37895927/valgrind.log
Comment 3 Bastien Nocera 2010-01-14 19:33:53 UTC
Nothing in there mentioning nautilus-sendto-command.c...
Comment 4 Fabio Durán Verdugo 2010-01-14 19:54:44 UTC
https://bugs.edge.launchpad.net/nautilus-sendto/+bug/507050
Comment 5 Fabio Durán Verdugo 2010-02-17 19:32:23 UTC
Created attachment 154068 [details]
Valgrind

I execute:
fabio@OptimusPrime:~$ G_SLICE=always-malloc G_DEBUG=gc-friendly valgrind -v --tool=memcheck --leak-check=full --log-file=valgrind.log nautilus-sendto ejemplo.py
and I can get from console:
Init empathy plugin
Init gajim plugin
Init removable-devices plugin
Init evolution plugin
Init nautilus burn plugin
Init pidgin plugin

(nautilus-sendto:4932): GLib-GObject-WARNING **: unable to set property `icon-name' of type `gchararray' from value of type `GdkPixbuf'

(nautilus-sendto:4932): GLib-GObject-WARNING **: unable to set property `icon-name' of type `gchararray' from value of type `GdkPixbuf'

(nautilus-sendto:4932): GLib-GObject-WARNING **: unable to set property `icon-name' of type `gchararray' from value of type `GdkPixbuf'

** (nautilus-sendto:4932): WARNING **: e_book_new: no factories available for URI `mapi://fduran@clboldos.cl//;Contacts'

(nautilus-sendto:4932): GLib-WARNING **: GError set over the top of a previous GError or uninitialized memory.
This indicates a bug in someone's code. You must ensure an error is NULL before it's set.
The overwriting error message was: e_book_new: no factories available for URI `mapi://fduran@clboldos.cl//(null)'


attach the valgrind.log
Comment 6 Fabio Durán Verdugo 2010-03-24 20:40:20 UTC
Starting program: /usr/bin/nautilus-sendto v1
[Thread debugging using libthread_db enabled]
Init empathy plugin
Init gajim plugin
Init removable-devices plugin
Init evolution plugin
Init nautilus burn plugin
Init pidgin plugin
[New Thread 0xb6071b70 (LWP 19226)]
[New Thread 0xb5870b70 (LWP 19233)]

** (nautilus-sendto:19217): WARNING **: e_book_new: no factories available for URI `mapi://fduran@clboldos.cl//;Contacts'

(nautilus-sendto:19217): GLib-WARNING **: GError set over the top of a previous GError or uninitialized memory.
This indicates a bug in someone's code. You must ensure an error is NULL before it's set.
The overwriting error message was: e_book_new: no factories available for URI `mapi://fduran@clboldos.cl//(null)'

** (nautilus-sendto:19217): WARNING **: \x90D\xb0
*** glibc detected *** /usr/bin/nautilus-sendto: double free or corruption (!prev): 0x08253858 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(+0x6b581)[0xa18581]
/lib/tls/i686/cmov/libc.so.6(+0x6cdd8)[0xa19dd8]
/lib/tls/i686/cmov/libc.so.6(cfree+0x6d)[0xa1cebd]
/lib/libglib-2.0.so.0(g_free+0x36)[0x90e086]
/lib/libglib-2.0.so.0(g_error_free+0x29)[0x8f45e9]
/usr/lib/nautilus-sendto/plugins/libnstevolution.so(e_contact_entry_set_source_list+0x261)[0x2bc1221]
/usr/lib/nautilus-sendto/plugins/libnstevolution.so(+0x3159)[0x2bc0159]
/usr/lib/nautilus-sendto/plugins/libnstevolution.so(+0x3278)[0x2bc0278]
/usr/bin/nautilus-sendto[0x804ba5d]
/usr/bin/nautilus-sendto(main+0x3a9)[0x804c5a9]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe6)[0x9c3bd6]
/usr/bin/nautilus-sendto[0x804a961]
======= Memory map: ========
00110000-0012b000 r-xp 00000000 08:07 524292     /lib/ld-2.11.1.so
0012b000-0012c000 r--p 0001a000 08:07 524292     /lib/ld-2.11.1.so
0012c000-0012d000 rw-p 0001b000 08:07 524292     /lib/ld-2.11.1.so
0012d000-0012e000 r-xp 00000000 00:00 0          [vdso]
0012e000-004fb000 r-xp 00000000 08:05 1056278    /usr/lib/libgtk-x11-2.0.so.0.2000.0
004fb000-004ff000 r--p 003cd000 08:05 1056278    /usr/lib/libgtk-x11-2.0.so.0.2000.0
004ff000-00501000 rw-p 003d1000 08:05 1056278    /usr/lib/libgtk-x11-2.0.so.0.2000.0
00501000-00503000 rw-p 00000000 00:00 0 
00503000-00596000 r-xp 00000000 08:05 1056279    /usr/lib/libgdk-x11-2.0.so.0.2000.0
00596000-00598000 r--p 00093000 08:05 1056279    /usr/lib/libgdk-x11-2.0.so.0.2000.0
00598000-00599000 rw-p 00095000 08:05 1056279    /usr/lib/libgdk-x11-2.0.so.0.2000.0
00599000-005b2000 r-xp 00000000 08:05 1047656    /usr/lib/libatk-1.0.so.0.3001.1
005b2000-005b3000 ---p 00019000 08:05 1047656    /usr/lib/libatk-1.0.so.0.3001.1
005b3000-005b4000 r--p 00019000 08:05 1047656    /usr/lib/libatk-1.0.so.0.3001.1
005b4000-005b5000 rw-p 0001a000 08:05 1047656    /usr/lib/libatk-1.0.so.0.3001.1
005b5000-005d9000 r-xp 00000000 08:05 1057514    /usr/lib/libpangoft2-1.0.so.0.2600.2
005d9000-005da000 r--p 00023000 08:05 1057514    /usr/lib/libpangoft2-1.0.so.0.2600.2
005da000-005db000 rw-p 00024000 08:05 1057514    /usr/lib/libpangoft2-1.0.so.0.2600.2
005db000-005f3000 r-xp 00000000 08:05 1056280    /usr/lib/libgdk_pixbuf-2.0.so.0.2000.0
005f3000-005f4000 r--p 00017000 08:05 1056280    /usr/lib/libgdk_pixbuf-2.0.so.0.2000.0
005f4000-005f5000 rw-p 00018000 08:05 1056280    /usr/lib/libgdk_pixbuf-2.0.so.0.2000.0
005f5000-00619000 r-xp 00000000 08:07 524540     /lib/tls/i686/cmov/libm-2.11.1.so
00619000-0061a000 r--p 00023000 08:07 524540     /lib/tls/i686/cmov/libm-2.11.1.so
0061a000-0061b000 rw-p 00024000 08:07 524540     /lib/tls/i686/cmov/libm-2.11.1.so
0061b000-00625000 r-xp 00000000 08:05 1048915    /usr/lib/libpangocairo-1.0.so.0.2600.2
00625000-00626000 r--p 00009000 08:05 1048915    /usr/lib/libpangocairo-1.0.so.0.2600.2
00626000-00627000 rw-p 0000a000 08:05 1048915    /usr/lib/libpangocairo-1.0.so.0.2600.2
00627000-006c7000 r-xp 00000000 08:05 1048195    /usr/lib/libgio-2.0.so.0.2306.0
006c7000-006c8000 ---p 000a0000 08:05 1048195    /usr/lib/libgio-2.0.so.0.2306.0
006c8000-006c9000 r--p 000a0000 08:05 1048195    /usr/lib/libgio-2.0.so.0.2306.0
006c9000-006ca000 rw-p 000a1000 08:05 1048195    /usr/lib/libgio-2.0.so.0.2306.0
006ca000-006cb000 rw-p 00000000 00:00 0 
006cb000-00742000 r-xp 00000000 08:05 1049928    /usr/lib/libcairo.so.2.10800.10
00742000-00744000 r--p 00076000 08:05 1049928    /usr/lib/libcairo.so.2.10800.10
00744000-00745000 rw-p 00078000 08:05 1049928    /usr/lib/libcairo.so.2.10800.10
00745000-00785000 r-xp 00000000 08:05 1048914    /usr/lib/libpango-1.0.so.0.2600.2
00785000-00786000 ---p 00040000 08:05 1048914    /usr/lib/libpango-1.0.so.0.2600.2
00786000-00787000 r--p 00040000 08:05 1048914    /usr/lib/libpango-1.0.so.0.2600.2
00787000-00788000 rw-p 00041000 08:05 1048914    /usr/lib/libpango-1.0.so.0.2600.2
00788000-007f9000 r-xp 00000000 08:05 1048262    /usr/lib/libfreetype.so.6.3.22
007f9000-007fd000 r--p 00070000 08:05 1048262    /usr/lib/libfreetype.so.6.3.22
007fd000-007fe000 rw-p 00074000 08:05 1048262    /usr/lib/libfreetype.so.6.3.22
007fe000-00811000 r-xp 00000000 08:07 524618     /lib/libz.so.1.2.3.3
00811000-00812000 r--p 00012000 08:07 524618     /lib/libz.so.1.2.3.3
00812000-00813000 rw-p 00013000 08:07 524618     /lib/libz.so.1.2.3.3
00813000-00841000 r-xp 00000000 08:05 1046578    /usr/lib/libfontconfig.so.1.4.4
00841000-00842000 r--p 0002d000 08:05 1046578    /usr/lib/libfontconfig.so.1.4.4
00842000-00843000 rw-p 0002e000 08:05 1046578    /usr/lib/libfontconfig.so.1.4.4
00843000-00881000 r-xp 00000000 08:05 1046821    /usr/lib/libgobject-2.0.so.0.2306.0
00881000-00882000 ---p 0003e000 08:05 1046821    /usr/lib/libgobject-2.0.so.0.2306.0
00882000-00883000 r--p 0003e000 08:05 1046821    /usr/lib/libgobject-2.0.so.0.2306.0
00883000-00884000 rw-p 0003f000 08:05 1046821    /usr/lib/libgobject-2.0.so.0.2306.0
00884000-00887000 r-xp 00000000 08:05 1046881    /usr/lib/libgmodule-2.0.so.0.2306.0
00887000-00888000 r--p 00002000 08:05 1046881    /usr/lib/libgmodule-2.0.so.0.2306.0
00888000-00889000 rw-p 00003000 08:05 1046881    /usr/lib/libgmodule-2.0.so.0.2306.0
00889000-0088d000 r-xp 00000000 08:05 1046886    /usr/lib/libgthread-2.0.so.0.2306.0
0088d000-0088e000 r--p 00003000 08:05 1046886    /usr/lib/libgthread-2.0.so.0.2306.0
0088e000-0088f000 rw-p 00004000 08:05 1046886    /usr/lib/libgthread-2.0.so.0.2306.0
0088f000-00896000 r-xp 00000000 08:07 524658     /lib/tls/i686/cmov/librt-2.11.1.so
00896000-00897000 r--p 00006000 08:07 524658     /lib/tls/i686/cmov/librt-2.11.1.so
00897000-00898000 rw-p 00007000 08:07 524658     /lib/tls/i686/cmov/librt-2.11.1.so
00898000-008c7000 r-xp 00000000 08:05 1048276    /usr/lib/libgconf-2.so.4.1.5
008c7000-008c8000 r--p 0002e000 08:05 1048276    /usr/lib/libgconf-2.so.4.1.5
008c8000-008ca000 rw-p 0002f000 08:05 1048276    /usr/lib/libgconf-2.so.4.1.5
008ca000-00992000 r-xp 00000000 08:07 524467     /lib/libglib-2.0.so.0.2306.0
00992000-00993000 r--p 000c8000 08:07 524467     /lib/libglib-2.0.so.0.2306.0
00993000-00994000 rw-p 000c9000 08:07 524467     /lib/libglib-2.0.so.0.2306.0
00994000-009a9000 r-xp 00000000 08:07 524642     /lib/tls/i686/cmov/libpthread-2.11.1.so
009a9000-009aa000 r--p 00014000 08:07 524642     /lib/tls/i686/cmov/libpthread-2.11.1.so
009aa000-009ab000 rw-p 00015000 08:07 524642     /lib/tls/i686/cmov/libpthread-2.11.1.so
009ab000-009ad000 rw-p 00000000 00:00 0 
009ad000-00b00000 r-xp 00000000 08:07 524436     /lib/tls/i686/cmov/libc-2.11.1.so
00b00000-00b01000 ---p 00153000 08:07 524436     /lib/tls/i686/cmov/libc-2.11.1.so
00b01000-00b03000 r--p 00153000 08:07 524436     /lib/tls/i686/cmov/libc-2.11.1.so
00b03000-00b04000 rw-p 00155000 08:07 524436     /lib/tls/i686/cmov/libc-2.11.1.so
00b04000-00b07000 rw-p 00000000 00:00 0 
Program received signal SIGABRT, Aborted.
0x0012d422 in __kernel_vsyscall ()



(gdb) bt full
  • #0 __kernel_vsyscall
  • #1 *__GI_raise
    at ../nptl/sysdeps/unix/sysv/linux/raise.c line 64
  • #2 *__GI_abort
    at abort.c line 92
  • #3 __libc_message
    at ../sysdeps/unix/sysv/linux/libc_fatal.c line 189
  • #4 malloc_printerr
    at malloc.c line 6264
  • #5 _int_free
    at malloc.c line 4792
  • #6 *__GI___libc_free
    at malloc.c line 3738
  • #7 IA__g_free
    at /build/buildd/glib2.0-2.23.6/glib/gmem.c line 191
  • #8 IA__g_error_free
    at /build/buildd/glib2.0-2.23.6/glib/gerror.c line 138
  • #9 e_contact_entry_set_source_list
    at e-contact-entry.c line 518
  • #10 add_sources
    at evolution.c line 170
  • #11 get_contacts_widget
    at evolution.c line 208
  • #12 set_contact_widgets
    at nautilus-sendto-command.c line 413
  • #13 nautilus_sendto_create_ui
    at nautilus-sendto-command.c line 593
  • #14 main
    at nautilus-sendto-command.c line 830

Comment 7 Fabio Durán Verdugo 2010-03-24 20:41:47 UTC
other data: the mapi account it is desactivate.
Comment 8 Bastien Nocera 2012-04-11 11:02:31 UTC
Probably fixed in:

commit df52239f98904bee8e14d318af585513a753804b
Author: Milan Crha <mcrha@redhat.com>
Date:   Wed Apr 11 11:54:42 2012 +0100

    evolution: Fix possible double-free crash
    
    Due to error handling.
    
    https://bugzilla.gnome.org/show_bug.cgi?id=644531

Please reopen if not.