Bug 1158398

Summary: [abrt] evolution: setAtkStateSetFromCoreObject(): evolution killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Ankur Sinha (FranciscoD) <sanjay.ankur>
Component: evolutionAssignee: Milan Crha <mcrha>
Status: CLOSED UPSTREAM QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 21CC: fedora, jacek.kruger, jcanderl, lucilanga, mbarnes, mcrha, tpopela
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/9795ad5de8e411c3f575de42317b45fadbb99171
Whiteboard: abrt_hash:20d4d14c12b3d97e291b5655225552de140ec36e
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-10-29 10:06:32 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages none

Description Ankur Sinha (FranciscoD) 2014-10-29 10:04:33 UTC 
Version-Release number of selected component:
evolution-3.12.7-1.fc21

Additional info:
reporter:       libreport-2.3.0
backtrace_rating: 4
cmdline:        evolution
crash_function: setAtkStateSetFromCoreObject
executable:     /usr/bin/evolution
kernel:         3.17.1-302.fc21.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 setAtkStateSetFromCoreObject at Source/WebCore/accessibility/atk/WebKitAccessibleWrapperAtk.cpp:797
 #1 webkitAccessibleRefStateSet at Source/WebCore/accessibility/atk/WebKitAccessibleWrapperAtk.cpp:923
 #2 children_changed_event_listener at event.c:1079
 #5 g_signal_emit_by_name at gsignal.c:3405
 #6 WebCore::AXObjectCache::getOrCreate at Source/WebCore/accessibility/AXObjectCache.cpp:354
 #7 WebCore::AccessibilityObject::parentObjectUnignored at Source/WebCore/accessibility/AccessibilityObject.cpp:368
 #8 WebCore::AXObjectCache::attachWrapper at Source/WebCore/accessibility/atk/AXObjectCacheAtk.cpp:79
 #9 WebCore::AXObjectCache::getOrCreate at Source/WebCore/accessibility/AXObjectCache.cpp:419
 #10 WebCore::Document::implicitClose at Source/WebCore/dom/Document.cpp:2470
 #11 WebCore::FrameLoader::checkCompleted at Source/WebCore/loader/FrameLoader.cpp:844
Comment 1 Ankur Sinha (FranciscoD) 2014-10-29 10:04:37 UTC 
Created attachment 951715 [details]
File: backtrace
Comment 2 Ankur Sinha (FranciscoD) 2014-10-29 10:04:38 UTC 
Created attachment 951716 [details]
File: cgroup
Comment 3 Ankur Sinha (FranciscoD) 2014-10-29 10:04:40 UTC 
Created attachment 951717 [details]
File: core_backtrace
Comment 4 Ankur Sinha (FranciscoD) 2014-10-29 10:04:41 UTC 
Created attachment 951718 [details]
File: dso_list
Comment 5 Ankur Sinha (FranciscoD) 2014-10-29 10:04:42 UTC 
Created attachment 951719 [details]
File: environ
Comment 6 Ankur Sinha (FranciscoD) 2014-10-29 10:04:43 UTC 
Created attachment 951720 [details]
File: exploitable
Comment 7 Ankur Sinha (FranciscoD) 2014-10-29 10:04:44 UTC 
Created attachment 951721 [details]
File: limits
Comment 8 Ankur Sinha (FranciscoD) 2014-10-29 10:04:46 UTC 
Created attachment 951722 [details]
File: maps
Comment 9 Ankur Sinha (FranciscoD) 2014-10-29 10:04:47 UTC 
Created attachment 951723 [details]
File: open_fds
Comment 10 Ankur Sinha (FranciscoD) 2014-10-29 10:04:48 UTC 
Created attachment 951724 [details]
File: proc_pid_status
Comment 11 Ankur Sinha (FranciscoD) 2014-10-29 10:04:50 UTC 
Created attachment 951725 [details]
File: var_log_messages
Comment 12 Christian Stadelmann 2014-12-10 21:45:31 UTC 
Another user experienced a similar problem:

When opening a specific email message evolution reliably crashes. This can be reproduced. It happens to one of two exactly identical emails (diff is empty). The only difference is the filename and read/unread state. Opening the unread email works, opening the read email crashes Evolution. This Email contains HTML content only, no ordinary text. If you provide an email address I could send you the mail.

reporter:       libreport-2.3.0
backtrace_rating: 4
cmdline:        evolution
crash_function: setAtkStateSetFromCoreObject
executable:     /usr/bin/evolution
kernel:         3.17.4-302.fc21.x86_64
package:        evolution-3.12.8-1.fc21
reason:         evolution killed by SIGSEGV
runlevel:       N 5
type:           CCpp
uid:            1000