Bug 1321411

Summary: [abrt] gnome-calendar: icaltime_day_of_year(): gnome-calendar killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Karl-Heinz Hoetzel <k.h.hoetzel>
Component: libicalAssignee: Milan Crha <mcrha>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 24CC: gnome-sig, ignatenko, mcrha, rdieter, redhat-bugzilla
Target Milestone: ---Flags: k.h.hoetzel: needinfo-
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/72716f7ed95d0e09dcdf2ace2292c21613aaad8f
Whiteboard: abrt_hash:7d06879ebaad09d394bf4636f40176e6dd4a14c0;VARIANT_ID=workstation;
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-07-07 11:46:13 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: mountinfo
none
File: namespaces
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages none

Description Karl-Heinz Hoetzel 2016-03-26 12:33:57 UTC 
Version-Release number of selected component:
gnome-calendar-3.19.92-1.fc24

Additional info:
reporter:       libreport-2.6.4
backtrace_rating: 4
cmdline:        /usr/bin/gnome-calendar --gapplication-service
crash_function: icaltime_day_of_year
executable:     /usr/bin/gnome-calendar
global_pid:     5912
kernel:         4.5.0-0.rc7.git0.2.fc24.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (7 frames)
 #0 icaltime_day_of_year at /usr/src/debug/libical-2.0.0/src/libical/icaltime.c:647
 #1 gcal_year_view_component_added at gcal-year-view.c:1299
 #2 cal_data_model_foreach_subscriber_in_range at e-cal-data-model.c:623
 #3 cal_data_model_process_added_component at e-cal-data-model.c:901
 #4 cal_data_model_notify_recurrences_cb at e-cal-data-model.c:1031
 #9 g_main_context_iteration at gmain.c:3901
 #10 g_application_run at gapplication.c:2381

Potential duplicate: bug 1214596
Comment 1 Karl-Heinz Hoetzel 2016-03-26 12:34:02 UTC 
Created attachment 1140595 [details]
File: backtrace
Comment 2 Karl-Heinz Hoetzel 2016-03-26 12:34:04 UTC 
Created attachment 1140596 [details]
File: cgroup
Comment 3 Karl-Heinz Hoetzel 2016-03-26 12:34:05 UTC 
Created attachment 1140597 [details]
File: core_backtrace
Comment 4 Karl-Heinz Hoetzel 2016-03-26 12:34:07 UTC 
Created attachment 1140598 [details]
File: dso_list
Comment 5 Karl-Heinz Hoetzel 2016-03-26 12:34:08 UTC 
Created attachment 1140599 [details]
File: environ
Comment 6 Karl-Heinz Hoetzel 2016-03-26 12:34:10 UTC 
Created attachment 1140600 [details]
File: exploitable
Comment 7 Karl-Heinz Hoetzel 2016-03-26 12:34:11 UTC 
Created attachment 1140601 [details]
File: limits
Comment 8 Karl-Heinz Hoetzel 2016-03-26 12:34:13 UTC 
Created attachment 1140602 [details]
File: maps
Comment 9 Karl-Heinz Hoetzel 2016-03-26 12:34:15 UTC 
Created attachment 1140603 [details]
File: mountinfo
Comment 10 Karl-Heinz Hoetzel 2016-03-26 12:34:16 UTC 
Created attachment 1140604 [details]
File: namespaces
Comment 11 Karl-Heinz Hoetzel 2016-03-26 12:34:18 UTC 
Created attachment 1140605 [details]
File: open_fds
Comment 12 Karl-Heinz Hoetzel 2016-03-26 12:34:19 UTC 
Created attachment 1140606 [details]
File: proc_pid_status
Comment 13 Karl-Heinz Hoetzel 2016-03-26 12:34:20 UTC 
Created attachment 1140607 [details]
File: var_log_messages
Comment 14 Igor Gnatenko 2016-03-27 15:40:24 UTC 
Looks like bug in ical.
Comment 15 Milan Crha 2016-03-30 12:28:53 UTC 
Thanks for a bug report. It is quite unlikely this being a bug in the libical itself, I guess the problem is that the passed in time structure contains invalid date, which causes read out of the array boundary.

Do you have any reproducer for this, please? The backtrace data suggests that this is related to the Birthdays &  Anniversaries calendar, one of your contacts having Birthday.
Comment 16 Igor Gnatenko 2016-07-07 11:46:13 UTC 

*** This bug has been marked as a duplicate of bug 1279055 ***