Bug 1117361

Summary: [abrt] evolution: g_type_check_instance_is_a(): evolution killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Derek Atkins <warlord>
Component: evolutionAssignee: Matthew Barnes <mbarnes>
Status: CLOSED INSUFFICIENT_DATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 20CC: fabiano, lucilanga, mbarnes, mcrha, warlord
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/7aa051b58874f2ba857d64f3e78b44cce6654129
Whiteboard: abrt_hash:807474afddd7ef2b7b34190e7abb8ccffd511693
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-09-03 06:21:51 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages none

Description Derek Atkins 2014-07-08 14:07:56 UTC 
Description of problem:
I had a mail message with a calendar entry that wasn't in any of my calendars.
It searched and didn't find them.
I wanted to change to an Exchange-EWS calendar, so I pulled it down and selected it in the dropdown.
As soon as I changed the calendar in the drop-down, evo crashed.

I was able to repeat this multiple times.

I added the calendar entry from my phone to the exchange calendar and now evo finds it and doesn't crash.

Version-Release number of selected component:
evolution-3.10.4-2.fc20

Additional info:
reporter:       libreport-2.2.2
backtrace_rating: 4
cmdline:        evolution
crash_function: g_type_check_instance_is_a
executable:     /usr/bin/evolution
kernel:         3.14.8-200.fc20.x86_64
runlevel:       N 5
type:           CCpp
uid:            9661

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 g_type_check_instance_is_a at gtype.c:3975
 #1 itip_view_ref_source at itip-view.c:2600
 #2 source_changed_cb at itip-view.c:833
 #3 WebCore::GObjectEventListener::handleEvent at Source/WebCore/bindings/gobject/GObjectEventListener.cpp:67
 #4 WebCore::EventTarget::fireEventListeners at Source/WebCore/dom/EventTarget.cpp:246
 #6 WebCore::EventContext::handleLocalEvents at Source/WebCore/dom/EventContext.cpp:58
 #7 dispatchEventAtTarget at Source/WebCore/dom/EventDispatcher.cpp:161
 #8 WebCore::EventDispatcher::dispatch at Source/WebCore/dom/EventDispatcher.cpp:118
 #9 WebCore::EventDispatcher::dispatchEvent at Source/WebCore/dom/EventDispatcher.cpp:52
 #10 WebCore::ScopedEventQueue::dispatchEvent at Source/WebCore/dom/ScopedEventQueue.cpp:84
Comment 1 Derek Atkins 2014-07-08 14:07:59 UTC 
Created attachment 916392 [details]
File: backtrace
Comment 2 Derek Atkins 2014-07-08 14:08:01 UTC 
Created attachment 916393 [details]
File: cgroup
Comment 3 Derek Atkins 2014-07-08 14:08:02 UTC 
Created attachment 916394 [details]
File: core_backtrace
Comment 4 Derek Atkins 2014-07-08 14:08:03 UTC 
Created attachment 916395 [details]
File: dso_list
Comment 5 Derek Atkins 2014-07-08 14:08:04 UTC 
Created attachment 916396 [details]
File: environ
Comment 6 Derek Atkins 2014-07-08 14:08:05 UTC 
Created attachment 916397 [details]
File: exploitable
Comment 7 Derek Atkins 2014-07-08 14:08:06 UTC 
Created attachment 916398 [details]
File: limits
Comment 8 Derek Atkins 2014-07-08 14:08:08 UTC 
Created attachment 916399 [details]
File: maps
Comment 9 Derek Atkins 2014-07-08 14:08:09 UTC 
Created attachment 916400 [details]
File: open_fds
Comment 10 Derek Atkins 2014-07-08 14:08:10 UTC 
Created attachment 916401 [details]
File: proc_pid_status
Comment 11 Derek Atkins 2014-07-08 14:08:11 UTC 
Created attachment 916402 [details]
File: var_log_messages
Comment 12 Milan Crha 2014-07-09 09:57:44 UTC 
Thanks for a bug report. I do not recall seeing any similar crash myself, and the search in an upstream bugzilla (GNOME's bugzilla) also doesn't return any hits for the last two years, thus it seems to me like you your environment behaves in a way which the itip-formatter (the part of the code responsible of the meeting invitations handling) doesn't work properly.

Could you try to install valgrind, then run evolution under it, to see whether it'll show where the memory got freed, please? Evolution will be very slow, due to all the memory checking, thus just try to reproduce the issue and close evolution. it can also happen that the evolution will not crash this time, it can be due to the valgrind catching the error and avoiding the crash, in which case it logs about the issue instead. The command to use is:

   $ G_SLICE=always-malloc valgrind --num-callers=20 evolution &>log.txt
Comment 13 Derek Atkins 2014-07-09 12:47:07 UTC 
I will attempt to do so.  I added the calendar entry through my phone so it stopped asking about it because it's in the calendar now.  I'll see if I can remove the calendar entry and try again, but in the past I've had issues removing entries.

I can send you the calendar invitation if it would help?
Comment 14 Milan Crha 2014-07-11 12:52:50 UTC 
(In reply to Derek Atkins from comment #13)
> I can send you the calendar invitation if it would help?

Not needed, thanks. I hoped you'll be quicker with the valgrind log, because I seem to be currently busy with some other stuff.
Comment 15 Derek Atkins 2014-09-02 15:09:35 UTC 
I'm afriad at this point I've upgraded to 3.12.14 so I wont be able to help you track this down.  Sorry.
Comment 16 Milan Crha 2014-09-03 06:21:51 UTC 
That's even better, using more recent code is appreciated. Feel free to reopen in case you'll face it with 3.12.x or simply file a new bug report. Thanks in advance.