Bug 1709367

Summary: [abrt] Crash when filling mail threaded view
Product: [Fedora] Fedora Reporter: David Juran <djuran>
Component: evolutionAssignee: Milan Crha <mcrha>
Status: CLOSED NEXTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 30CC: caillon+fedoraproject, lucilanga, mcrha, rhughes, rstrode, sandmann
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/ea89d0625dd8f2c6f9c777f80d62f574c9876c98
Whiteboard: abrt_hash:8c77897d9be189584e99810b138b2e873732cd0b;VARIANT_ID=workstation;
Fixed In Version: evolution-3.32.3 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-05-13 16:30:54 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: cpuinfo
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: mountinfo
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages none

Description David Juran 2019-05-13 13:09:42 UTC
Description of problem:
I was browsing though emails and noticed that evolution was queing up quite a few background tasks.
 Do note that when the crash happened, I was logged out which implies gnome-shell also crashed

Version-Release number of selected component:
evolution-3.32.2-1.fc30

Additional info:
reporter:       libreport-2.10.0
backtrace_rating: 4
cmdline:        evolution
crash_function: g_str_hash
executable:     /usr/bin/evolution
journald_cursor: s=47b1201f1f8f4ab583f3fd45a7dc6ee7;i=8f4b82;b=9bea5e4eb6b7403684875ccb8479231d;m=c76d8d7e9;t=588c454d0e104;x=6bae0c402149bd17
kernel:         5.0.13-300.fc30.x86_64
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 g_str_hash at ../glib/ghash.c:2279
 #1 g_hash_table_lookup_node at ../glib/ghash.c:470
 #2 g_hash_table_insert_internal at ../glib/ghash.c:1551
 #3 ml_uid_nodemap_insert at /usr/src/debug/evolution-3.32.2-1.fc30.x86_64/src/mail/message-list.c:4436
 #4 build_subtree at /usr/src/debug/evolution-3.32.2-1.fc30.x86_64/src/mail/message-list.c:4579
 #5 build_tree at /usr/src/debug/evolution-3.32.2-1.fc30.x86_64/src/mail/message-list.c:4536
 #6 message_list_regen_done_cb at /usr/src/debug/evolution-3.32.2-1.fc30.x86_64/src/mail/message-list.c:6417
 #7 g_simple_async_result_complete at ../gio/gsimpleasyncresult.c:802
 #8 complete_in_idle_cb_for_thread at ../gio/gsimpleasyncresult.c:873
 #14 gtk_main at gtkmain.c:1323

Potential duplicate: bug 817664

Comment 1 David Juran 2019-05-13 13:09:47 UTC
Created attachment 1567946 [details]
File: backtrace

Comment 2 David Juran 2019-05-13 13:09:49 UTC
Created attachment 1567947 [details]
File: cgroup

Comment 3 David Juran 2019-05-13 13:09:52 UTC
Created attachment 1567948 [details]
File: core_backtrace

Comment 4 David Juran 2019-05-13 13:09:54 UTC
Created attachment 1567949 [details]
File: cpuinfo

Comment 5 David Juran 2019-05-13 13:09:56 UTC
Created attachment 1567950 [details]
File: dso_list

Comment 6 David Juran 2019-05-13 13:09:58 UTC
Created attachment 1567951 [details]
File: environ

Comment 7 David Juran 2019-05-13 13:10:01 UTC
Created attachment 1567952 [details]
File: exploitable

Comment 8 David Juran 2019-05-13 13:10:03 UTC
Created attachment 1567953 [details]
File: limits

Comment 9 David Juran 2019-05-13 13:10:07 UTC
Created attachment 1567954 [details]
File: maps

Comment 10 David Juran 2019-05-13 13:10:09 UTC
Created attachment 1567955 [details]
File: mountinfo

Comment 11 David Juran 2019-05-13 13:10:11 UTC
Created attachment 1567956 [details]
File: open_fds

Comment 12 David Juran 2019-05-13 13:10:12 UTC
Created attachment 1567957 [details]
File: proc_pid_status

Comment 13 David Juran 2019-05-13 13:10:17 UTC
Created attachment 1567958 [details]
File: var_log_messages

Comment 14 Milan Crha 2019-05-13 15:19:05 UTC
Thanks for a bug report. I see there are multiple threads filling the message list. Two threads are specific, one (Thread 1) is the crashing thread, the other (Thread 12) is destroying the structure content, which is used by the first thread. This should not happen.

Comment 15 Milan Crha 2019-05-13 16:30:54 UTC
Fixed with [1] for 3.33.2+ and 3.32.3+.

[1] https://gitlab.gnome.org/GNOME/evolution/commit/2dd75ea39b