[Evolution] Bug#598123: evolution: munmap_chunk(): invalid pointer, when displaying by threads

Julien Danjou acid at debian.org
Sun Sep 26 16:28:51 UTC 2010


Package: evolution
Severity: serious
Version: 2.30.2-1

When displaying one of my mailbox by thread (Ctrl-t), evolution crashes.

*** glibc detected *** /usr/bin/evolution: munmap_chunk(): invalid pointer: 0x00007fffe7d6a6a0 ***
======= Backtrace: =========
/lib/libc.so.6(+0x71ad6)[0x7fffee4b7ad6]
/usr/lib/evolution/2.30/libevolution-mail.so.0(+0x8b486)[0x7fffe7d57486]
/lib/libglib-2.0.so.0(g_hash_table_foreach+0x43)[0x7fffee7d6c13]
/usr/lib/evolution/2.30/libevolution-mail.so.0(+0x8c456)[0x7fffe7d58456]
/usr/lib/evolution/2.30/libevolution-mail.so.0(+0x7d3c8)[0x7fffe7d493c8]
/lib/libglib-2.0.so.0(+0x695cf)[0x7fffee8105cf]
/lib/libglib-2.0.so.0(+0x67784)[0x7fffee80e784]
/lib/libpthread.so.0(+0x68ba)[0x7ffff25118ba]
/lib/libc.so.6(clone+0x6d)[0x7fffee51502d]
======= Memory map: ========
00400000-00404000 r-xp 00000000 fe:00 147523                             /usr/bin/evolution
00604000-00605000 rw-p 00004000 fe:00 147523                             /usr/bin/evolution
00605000-01251000 rw-p 00000000 00:00 0                                  [heap]
7fffd2456000-7fffd246c000 r-xp 00000000 fe:00 130468                     /lib/libgcc_s.so.1
7fffd246c000-7fffd266b000 ---p 00016000 fe:00 130468                     /lib/libgcc_s.so.1
7fffd266b000-7fffd266c000 rw-p 00015000 fe:00 130468                     /lib/libgcc_s.so.1
7fffd267d000-7fffd26de000 rw-p 00000000 00:00 0 
7fffd26de000-7fffd26e2000 r-xp 00000000 fe:00 304991                     /usr/lib/evolution/2.30/plugins/liborg-gnome-backup-restore.so
7fffd26e2000-7fffd28e1000 ---p 00004000 fe:00 304991                     /usr/lib/evolution/2.30/plugins/liborg-gnome-backup-restore.so
7fffd28e1000-7fffd28e2000 rw-p 00003000 fe:00 304991                     /usr/lib/evolution/2.30/plugins/liborg-gnome-backup-restore.so
7fffd28e2000-7fffd28e8000 r-xp 00000000 fe:00 305001                     /usr/lib/evolution/2.30/plugins/liborg-gnome-templates.so
7fffd28e8000-7fffd2ae8000 ---p 00006000 fe:00 305001                     /usr/lib/evolution/2.30/plugins/liborg-gnome-templates.so
7fffd2ae8000-7fffd2ae9000 rw-p 00006000 fe:00 305001                     /usr/lib/evolution/2.30/plugins/liborg-gnome-templates.so
7fffd2ae9000-7fffd2aed000 r-xp 00000000 fe:00 272827                     /usr/lib/evolution/2.30/plugins/liborg-gnome-plugin-manager.so
7fffd2aed000-7fffd2ced000 ---p 00004000 fe:00 272827                     /usr/lib/evolution/2.30/plugins/liborg-gnome-plugin-manager.so
7fffd2ced000-7fffd2cee000 rw-p 00004000 fe:00 272827                     /usr/lib/evolution/2.30/plugins/liborg-gnome-plugin-manager.so
7fffd2cee000-7fffd2cf1000 r-xp 00000000 fe:00 305018                     /usr/lib/evolution/2.30/plugins/liborg-gnome-mailing-list-actions.so
7fffd2cf1000-7fffd2ef1000 ---p 00003000 fe:00 305018                     /usr/lib/evolution/2.30/plugins/liborg-gnome-mailing-list-actions.so
7fffd2ef1000-7fffd2ef2000 rw-p 00003000 fe:00 305018                     /usr/lib/evolution/2.30/plugins/liborg-gnome-mailing-list-actions.so
7fffd2ef2000-7fffd2efa000 r-xp 00000000 fe:00 305011                     /usr/lib/evolution/2.30/plugins/liborg-gnome-mail-to-task.so
7fffd2efa000-7fffd30fa000 ---p 00008000 fe:00 305011                     /usr/lib/evolution/2.30/plugins/liborg-gnome-mail-to-task.so
7fffd30fa000-7fffd30fb000 rw-p 00008000 fe:00 305011                     /usr/lib/evolution/2.30/plugins/liborg-gnome-mail-to-task.so
7fffd30fb000-7fffd30ff000 r-xp 00000000 fe:00 272815                     /usr/lib/evolution/2.30/plugins/liborg-gnome-mark-all-read.so
7fffd30ff000-7fffd32ff000 ---p 00004000 fe:00 272815                     /usr/lib/evolution/2.30/plugins/liborg-gnome-mark-all-read.so
7fffd32ff000-7fffd3300000 rw-p 00004000 fe:00 272815                     /usr/lib/evolution/2.30/plugins/liborg-gnome-mark-all-read.so
7fffd3300000-7fffd3306000 r-xp 00000000 fe:00 280668                     /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-xpm.so
7fffd3306000-7fffd3506000 ---p 00006000 fe:00 280668                     /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-xpm.so
7fffd3506000-7fffd3507000 rw-p 00006000 fe:00 280668                     /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-xpm.so
7fffd3507000-7fffd3508000 ---p 00000000 00:00 0 
7fffd3508000-7fffd3d08000 rw-p 00000000 00:00 0 
7fffd3d08000-7fffd3d09000 ---p 00000000 00:00 0 
7fffd3d09000-7fffd4509000 rw-p 00000000 00:00 0 
7fffd4509000-7fffd4510000 r-xp 00000000 fe:00 305012                     /usr/lib/evolution/2.30/plugins/liborg-gnome-email-custom-header.so
7fffd4510000-7fffd470f000 ---p 00007000 fe:00 305012                     /usr/lib/evolution/2.30/plugins/liborg-gnome-email-custom-header.so
7fffd470f000-7fffd4710000 rw-p 00006000 fe:00 305012                     /usr/lib/evolution/2.30/plugins/liborg-gnome-email-custom-header.so
7fffd4710000-7fffd4715000 r-xp 00000000 fe:00 304992                     /usr/lib/evolution/2.30/plugins/liborg-gnome-evolution-attachment-reminder.so
7fffd4715000-7fffd4914000 ---p 00005000 fe:00 304992                     /usr/lib/evolution/2.30/plugins/liborg-gnome-evolution-attachment-reminder.so
7fffd4914000-7fffd4915000 rw-p 00004000 fe:00 304992                     /usr/lib/evolution/2.30/plugins/liborg-gnome-evolution-attachment-reminder.so
7fffd4915000-7fffd491c000 r-xp 00000000 fe:00 305000                     /usr/lib/evolution/2.30/plugins/liborg-gnome-evolution-bbdb.so
7fffd491c000-7fffd4b1c000 ---p 00007000 fe:00 305000                     /usr/lib/evolution/2.30/plugins/liborg-gnome-evolution-bbdb.so
7fffd4b1c000-7fffd4b1d000 rw-p 00007000 fe:00 305000                     /usr/lib/evolution/2.30/plugins/liborg-gnome-evolution-bbdb.so
Program received signal SIGABRT, Aborted.
[Switching to Thread 0x7fffe2e26710 (LWP 16497)]
0x00007fffee478165 in raise () from /lib/libc.so.6
(gdb) bt full
#0  0x00007fffee478165 in raise () from /lib/libc.so.6
No symbol table info available.
#1  0x00007fffee47af70 in abort () from /lib/libc.so.6
No symbol table info available.
#2  0x00007fffee4ae27b in ?? () from /lib/libc.so.6
No symbol table info available.
#3  0x00007fffee4b7ad6 in ?? () from /lib/libc.so.6
No symbol table info available.
#4  0x00007fffe7d57486 in free_message_info_data (uid=<value optimized out>, data=0x7fffdc682860, sort_data=0x7fffe2e25ce0) at message-list.c:4425
        v = 0x6
        i = 0
        __PRETTY_FUNCTION__ = "free_message_info_data"
#5  0x00007fffee7d6c13 in g_hash_table_foreach () from /lib/libglib-2.0.so.0
No symbol table info available.
#6  0x00007fffe7d58456 in ml_sort_uids_by_tree (m=0x11798d0) at message-list.c:4496
        adapter = <value optimized out>
        sort_info = 0x11dd780
        full_header = 0xfa7ea0
        sort_data = {ml = 0x62b5d0, sort_columns = 0x7fffdc676b20, message_infos = 0x7fffdc683280, cmp_cache = 0x7fffdc6832d0}
        i = <value optimized out>
        len = 1
#7  regen_list_exec (m=0x11798d0) at message-list.c:4736
        uids = 0xb8a160
        uidnew = 0x0
        showuids = 0xb8a160
        searchuids = 0xb8a160
        info = <value optimized out>
        cursor = <value optimized out>
        tree = <value optimized out>
        i = <value optimized out>
        expr = <value optimized out>
#8  0x00007fffe7d493c8 in mail_msg_proxy (msg=0x11798d0) at mail-mt.c:471
No locals.
#9  0x00007fffee8105cf in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#10 0x00007fffee80e784 in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#11 0x00007ffff25118ba in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#12 0x00007fffee51502d in clone () from /lib/libc.so.6
No symbol table info available.
#13 0x0000000000000000 in ?? ()
No symbol table info available.
(gdb) thread apply all bt full

Thread 14 (Thread 0x7fffd5726710 (LWP 16503)):
#0  0x00007ffff251616c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
No symbol table info available.
#1  0x00007fffee7c0762 in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#2  0x00007fffee7c0b46 in g_async_queue_pop () from /lib/libglib-2.0.so.0
No symbol table info available.
#3  0x00007ffff4dca471 in ?? () from /usr/lib/libcamel-1.2.so.14
No symbol table info available.
#4  0x00007fffee80e784 in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#5  0x00007ffff25118ba in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#6  0x00007fffee51502d in clone () from /lib/libc.so.6
No symbol table info available.
#7  0x0000000000000000 in ?? ()
No symbol table info available.

Thread 13 (Thread 0x7fffe1e24710 (LWP 16502)):
#0  0x00007ffff251616c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
No symbol table info available.
#1  0x00007fffee7c0762 in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#2  0x00007fffee7c0b46 in g_async_queue_pop () from /lib/libglib-2.0.so.0
No symbol table info available.
#3  0x00007ffff4dca471 in ?? () from /usr/lib/libcamel-1.2.so.14
No symbol table info available.
#4  0x00007fffee80e784 in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#5  0x00007ffff25118ba in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#6  0x00007fffee51502d in clone () from /lib/libc.so.6
No symbol table info available.
#7  0x0000000000000000 in ?? ()
No symbol table info available.

Thread 10 (Thread 0x7fffe2e26710 (LWP 16497)):
#0  0x00007fffee478165 in raise () from /lib/libc.so.6
No symbol table info available.
#1  0x00007fffee47af70 in abort () from /lib/libc.so.6
No symbol table info available.
#2  0x00007fffee4ae27b in ?? () from /lib/libc.so.6
No symbol table info available.
#3  0x00007fffee4b7ad6 in ?? () from /lib/libc.so.6
No symbol table info available.
#4  0x00007fffe7d57486 in free_message_info_data (uid=<value optimized out>, data=0x7fffdc682860, sort_data=0x7fffe2e25ce0) at message-list.c:4425
        v = 0x6
        i = 0
        __PRETTY_FUNCTION__ = "free_message_info_data"
#5  0x00007fffee7d6c13 in g_hash_table_foreach () from /lib/libglib-2.0.so.0
No symbol table info available.
#6  0x00007fffe7d58456 in ml_sort_uids_by_tree (m=0x11798d0) at message-list.c:4496
        adapter = <value optimized out>
        sort_info = 0x11dd780
        full_header = 0xfa7ea0
        sort_data = {ml = 0x62b5d0, sort_columns = 0x7fffdc676b20, message_infos = 0x7fffdc683280, cmp_cache = 0x7fffdc6832d0}
        i = <value optimized out>
        len = 1
#7  regen_list_exec (m=0x11798d0) at message-list.c:4736
        uids = 0xb8a160
        uidnew = 0x0
        showuids = 0xb8a160
        searchuids = 0xb8a160
        info = <value optimized out>
        cursor = <value optimized out>
        tree = <value optimized out>
        i = <value optimized out>
        expr = <value optimized out>
#8  0x00007fffe7d493c8 in mail_msg_proxy (msg=0x11798d0) at mail-mt.c:471
No locals.
#9  0x00007fffee8105cf in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#10 0x00007fffee80e784 in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#11 0x00007ffff25118ba in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#12 0x00007fffee51502d in clone () from /lib/libc.so.6
No symbol table info available.
#13 0x0000000000000000 in ?? ()
No symbol table info available.

Thread 5 (Thread 0x7fffe3627710 (LWP 16488)):
#0  0x00007ffff251616c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
No symbol table info available.
#1  0x00007fffee7c0762 in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#2  0x00007fffee7c0b46 in g_async_queue_pop () from /lib/libglib-2.0.so.0
No symbol table info available.
#3  0x00007ffff4dca471 in ?? () from /usr/lib/libcamel-1.2.so.14
No symbol table info available.
#4  0x00007fffee80e784 in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#5  0x00007ffff25118ba in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#6  0x00007fffee51502d in clone () from /lib/libc.so.6
No symbol table info available.
#7  0x0000000000000000 in ?? ()
No symbol table info available.
Thread 4 (Thread 0x7fffe3e28710 (LWP 16487)):
#0  0x00007ffff251616c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
No symbol table info available.
#1  0x00007fffee7c0762 in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#2  0x00007fffee7c0b46 in g_async_queue_pop () from /lib/libglib-2.0.so.0
No symbol table info available.
#3  0x00007ffff4dca471 in ?? () from /usr/lib/libcamel-1.2.so.14
No symbol table info available.
#4  0x00007fffee80e784 in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#5  0x00007ffff25118ba in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#6  0x00007fffee51502d in clone () from /lib/libc.so.6
No symbol table info available.
#7  0x0000000000000000 in ?? ()
No symbol table info available.

Thread 3 (Thread 0x7fffe4852710 (LWP 16486)):
#0  0x00007ffff251616c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
No symbol table info available.
#1  0x00007fffee7c0762 in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#2  0x00007fffee7c0b46 in g_async_queue_pop () from /lib/libglib-2.0.so.0
No symbol table info available.
#3  0x00007ffff4dca471 in ?? () from /usr/lib/libcamel-1.2.so.14
No symbol table info available.
#4  0x00007fffee80e784 in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#5  0x00007ffff25118ba in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#6  0x00007fffee51502d in clone () from /lib/libc.so.6
No symbol table info available.
#7  0x0000000000000000 in ?? ()
No symbol table info available.

Thread 2 (Thread 0x7fffe5053710 (LWP 16485)):
#0  0x00007ffff251616c in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
No symbol table info available.
#1  0x00007fffee7c0762 in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#2  0x00007fffee7c0b46 in g_async_queue_pop () from /lib/libglib-2.0.so.0
No symbol table info available.
#3  0x00007ffff4dca471 in ?? () from /usr/lib/libcamel-1.2.so.14
No symbol table info available.
#4  0x00007fffee80e784 in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#5  0x00007ffff25118ba in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#6  0x00007fffee51502d in clone () from /lib/libc.so.6
No symbol table info available.
#7  0x0000000000000000 in ?? ()
No symbol table info available.

Thread 1 (Thread 0x7ffff7fb9800 (LWP 16475)):
#0  0x00007fffee7e8ca8 in g_main_context_prepare () from /lib/libglib-2.0.so.0
No symbol table info available.
#1  0x00007fffee7e9138 in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#2  0x00007fffee7e9a75 in g_main_loop_run () from /lib/libglib-2.0.so.0
No symbol table info available.
#3  0x00007ffff1005657 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
No symbol table info available.
#4  0x00000000004027d4 in main (argc=1, argv=0x7fffffffe6c8) at main.c:639
        shell = 0x653020
        client = <value optimized out>
        error = 0x0


-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-- 
Julien Danjou
// ᐰ <julien at danjou.info>   http://julien.danjou.info
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-evolution-maintainers/attachments/20100926/a624f138/attachment-0001.pgp>


More information about the Pkg-evolution-maintainers mailing list