Bug 1677846

Summary: [abrt] Use GWeakRef when watching D-Bus bus names
Product: [Fedora] Fedora Reporter: Jens Kleine-Herzbruch <jensgr>
Component: evolutionAssignee: Milan Crha <mcrha>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 29CC: caillon+fedoraproject, lucilanga, mcrha, oscargsv, Pupkur, rhughes, rstrode, sandmann
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/c680e121d310d74403ffc479d9e901dd281fa02c
Whiteboard: abrt_hash:f48c7ea90b691ffbbcba868a13dc7999eff197f6;VARIANT_ID=workstation;
Fixed In Version: evolution-3.31.92 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-02-21 14:00:48 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: cpuinfo
none
File: dso_list
none
File: exploitable
none
File: limits
none
File: maps
none
File: mountinfo
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages none

Description Jens Kleine-Herzbruch 2019-02-16 11:19:16 UTC 
Description of problem:
Scrolling through the inbox using the arrow keys.

Version-Release number of selected component:
evolution-3.30.4-1.fc29

Additional info:
reporter:       libreport-2.10.0
backtrace_rating: 4
cmdline:        evolution
crash_function: g_ascii_strncasecmp
executable:     /usr/bin/evolution
journald_cursor: s=2d614ffdc1584669b54e01cbd0475ab1;i=7ce;b=1847a5c099a14cb483aa46a7d11a9ce6;m=117fe939;t=581871ab50efa;x=e7f75b5761012680
kernel:         4.19.13-300.fc29.x86_64
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 g_ascii_strncasecmp at gstrfuncs.c:1849
 #1 itip_strip_mailto at /usr/src/debug/evolution-3.30.4-1.fc29.x86_64/src/calendar/gui/itip-utils.c:638
 #2 itip_view_init_view at /usr/src/debug/evolution-3.30.4-1.fc29.x86_64/src/modules/itip-formatter/itip-view.c:2369
 #3 web_extension_proxy_created_cb at /usr/src/debug/evolution-3.30.4-1.fc29.x86_64/src/modules/itip-formatter/itip-view.c:1866
 #4 g_task_return_now at gtask.c:1148
 #5 g_task_return at gtask.c:1206
 #6 init_second_async_cb at gdbusproxy.c:1809
 #7 g_task_return_now at gtask.c:1148
 #8 g_task_return at gtask.c:1206
 #9 async_init_data_set_name_owner at gdbusproxy.c:1500

Potential duplicate: bug 1539425
Comment 1 Jens Kleine-Herzbruch 2019-02-16 11:19:19 UTC 
Created attachment 1535400 [details]
File: backtrace
Comment 2 Jens Kleine-Herzbruch 2019-02-16 11:19:20 UTC 
Created attachment 1535401 [details]
File: cgroup
Comment 3 Jens Kleine-Herzbruch 2019-02-16 11:19:22 UTC 
Created attachment 1535402 [details]
File: core_backtrace
Comment 4 Jens Kleine-Herzbruch 2019-02-16 11:19:23 UTC 
Created attachment 1535403 [details]
File: cpuinfo
Comment 5 Jens Kleine-Herzbruch 2019-02-16 11:19:25 UTC 
Created attachment 1535404 [details]
File: dso_list
Comment 6 Jens Kleine-Herzbruch 2019-02-16 11:19:26 UTC 
Created attachment 1535405 [details]
File: exploitable
Comment 7 Jens Kleine-Herzbruch 2019-02-16 11:19:27 UTC 
Created attachment 1535406 [details]
File: limits
Comment 8 Jens Kleine-Herzbruch 2019-02-16 11:19:29 UTC 
Created attachment 1535407 [details]
File: maps
Comment 9 Jens Kleine-Herzbruch 2019-02-16 11:19:30 UTC 
Created attachment 1535408 [details]
File: mountinfo
Comment 10 Jens Kleine-Herzbruch 2019-02-16 11:19:32 UTC 
Created attachment 1535409 [details]
File: open_fds
Comment 11 Jens Kleine-Herzbruch 2019-02-16 11:19:33 UTC 
Created attachment 1535410 [details]
File: proc_pid_status
Comment 12 Jens Kleine-Herzbruch 2019-02-16 11:19:34 UTC 
Created attachment 1535411 [details]
File: var_log_messages
Comment 13 Milan Crha 2019-02-18 09:48:17 UTC 
Thanks for a bug report. Looking into the backtrace, it seems to me that you had selected also a meeting request, but you probably moved out of it before it had been shown in the message preview. Only after that the related code had been executed, causing the crash. I'll try to reproduce it here and let you know when I know more.
Comment 14 Jens Kleine-Herzbruch 2019-02-18 13:35:52 UTC 
That's quite possible. I think I can reproduce this, too (not 100% reliably, but still), so if you need any more info from me let me know.
Comment 15 Milan Crha 2019-02-21 14:00:48 UTC 
Thanks. I managed to reproduce this by some cheating the glib2 code. You have a very interesting operations interleaving, because the GDBus code schedules a callback on the main loop just before the bus name watcher is removed, which causes this crash. I made a change for this in itip formatter and also in the message composer, where basically the same thing could happen. The third place (in EWebView) had been already covered.

Fixed upstream with [1], for evolution 3.31.92+ (thus for Fedora 30).

[1] https://gitlab.gnome.org/GNOME/evolution/commit/07a2087169
Comment 16 Pupkur 2019-04-05 13:00:12 UTC 
*** Bug 1696702 has been marked as a duplicate of this bug. ***
Comment 17 oscargsv 2019-06-21 16:49:15 UTC 
*** Bug 1722913 has been marked as a duplicate of this bug. ***