Bug 554257

Summary: [abrt] crash in evolution-2.29.4-2 size_allocate_cb:image-inline.c:168 child_size_allocate:gtkhtml.c:1274
Product: [Fedora] Fedora Reporter: Kjartan Maraas <kmaraas>
Component: evolutionAssignee: Matthew Barnes <mbarnes>
Status: CLOSED INSUFFICIENT_DATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: rawhideCC: lucilanga, mbarnes, mcrha
Target Milestone: ---   
Target Release: ---   
Hardware: i686   
OS: Linux   
Whiteboard: abrt_hash:0655f105ce77e0ce03eaeda07b5e4ceb29ea1cea
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-01-15 12:53:31 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace none

Description Kjartan Maraas 2010-01-11 06:48:55 UTC 
abrt 1.0.2 detected a crash.

Comment: Evolution crashed when opening some spam message.
Attached file: backtrace
cmdline: evolution
component: evolution
executable: /usr/bin/evolution
kernel: 2.6.31.5-127.fc12.i686.PAE
package: evolution-2.29.4-2.fc13
rating: 4
reason: Process was terminated by signal 11 (Segmentation fault)
Comment 1 Kjartan Maraas 2010-01-11 06:48:59 UTC 
Created attachment 382921 [details]
File: backtrace
Comment 2 Kjartan Maraas 2010-01-11 12:34:56 UTC 
I have issues with the keyring password dialog opening again and again and in the end it seems to just hang. Possibly some memory management issue in the keyring library or something like that.

Thread 288 (Thread 0xb19ffb70 (LWP 701)):
#0  _dbus_connection_lock (connection=0x80b3438) at dbus-connection.c:354
No locals.
#1  0x0083c0e2 in dbus_pending_call_get_completed (
    pending=<value optimized out>) at dbus-pending-call.c:650
        completed = <value optimized out>
        __FUNCTION__ = "dbus_pending_call_get_completed"
#2  0x0082e613 in _dbus_connection_block_pending_call (
    pending=<value optimized out>) at dbus-connection.c:2287
---Type <return> to continue, or q <return> to quit---
        start_tv_sec = <value optimized out>
        start_tv_usec = <value optimized out>
        tv_sec = <value optimized out>
        tv_usec = <value optimized out>
        status = <value optimized out>
        connection = <value optimized out>
        client_serial = <value optimized out>

        timeout = 0x2e9474
        timeout_milliseconds = <value optimized out>
        elapsed_milliseconds = 0
#3  0x0083c312 in dbus_pending_call_block (pending=<value optimized out>)
    at dbus-pending-call.c:705
        __FUNCTION__ = "dbus_pending_call_block"
#4  0x0741f374 in gkr_operation_block (op=<value optimized out>)
    at gkr-operation.c:341
        __PRETTY_FUNCTION__ = "gkr_operation_block"
#5  0x07421ac5 in gnome_keyring_is_available () at gnome-keyring.c:492
        op = 0xb8ee790
        req = 0x9fd40a0
#6  0x00b96b9a in e_passwords_init () at e-passwords.c:1273
No locals.
#7  0x00b96d42 in ep_msg_new (dispatch=0xb951b0 <ep_get_password>)
    at e-passwords.c:480
---Type <return> to continue, or q <return> to quit---
        msg = <value optimized out>
#8  0x00b96f57 in e_passwords_get_password (
    component_name=<value optimized out>, key=<value optimized out>)
    at e-passwords.c:1435
        msg = <value optimized out>
        passwd = <value optimized out>
        __PRETTY_FUNCTION__ = "e_passwords_get_password"
#9  0x0116ecb3 in get_password (session=<value optimized out>, 
    service=<value optimized out>, domain=<value optimized out>, 
    prompt=<value optimized out>, item=<value optimized out>, 
    flags=<value optimized out>, ex=<value optimized out>)
    at mail-session.c:201
        key = 0xb7216d18 "pop://kmaraas.no/"
        config_service = 0x0
        ret = 0x0
        account = 0x0
#10 0x0078c371 in camel_session_get_password (session=<value optimized out>, 
    service=<value optimized out>, domain=<value optimized out>, 
    prompt=<value optimized out>, item=<value optimized out>, 
    flags=<value optimized out>, ex=<value optimized out>)
    at camel-session.c:383
        __PRETTY_FUNCTION__ = "camel_session_get_password"
#11 0x00cd57fd in pop3_try_authenticate (service=<value optimized out>, 
---Type <return> to continue, or q <return> to quit---
    reprompt=<value optimized out>, errmsg=<value optimized out>, 
    ex=<value optimized out>) at camel-pop3-store.c:484
        base_prompt = 
    0xb72588b8 "Vennligst oppgi POP-passord for <b>kmaraas</b> på vert <b>mail.broadpark.no</b>"
        full_prompt = 
    0xb47e8348 "Vennligst oppgi POP-passord for <b>kmaraas</b> på vert <b>mail.broadpark.no</b>"
        flags = <value optimized out>
        store = 0x80b3438
        pcu = 0x0
        pcp = 0x0
        status = <value optimized out>
#12 0x00cd5fbd in pop3_connect (service=<value optimized out>, 
    ex=<value optimized out>) at camel-pop3-store.c:606
        store = 0xaedbb50
        reprompt = <value optimized out>
        session = <value optimized out>
        errbuf = <value optimized out>
        status = <value optimized out>
#13 0x0078ada8 in camel_service_connect (service=<value optimized out>, 
    ex=<value optimized out>) at camel-service.c:364
        ret = 0
---Type <return> to continue, or q <return> to quit---
        unreg = <value optimized out>
        connect_op = 0xbbb9630
        __PRETTY_FUNCTION__ = "camel_service_connect"
#14 0x0078c5c3 in camel_session_get_service_connected (
    session=<value optimized out>, url_string=<value optimized out>, 
    type=<value optimized out>, ex=<value optimized out>)
    at camel-session.c:280
        svc = 0xaedbb50
#15 0x0116fe31 in mail_tool_get_inbox (url=<value optimized out>, 
    ex=<value optimized out>) at mail-tools.c:69
        folder = <value optimized out>
#16 0x0116a839 in fetch_mail_exec (m=<value optimized out>) at mail-ops.c:302
        i = <value optimized out>
#17 0x011647e9 in mail_msg_proxy (msg=<value optimized out>) at mail-mt.c:466
No locals.
#18 0x01069517 in g_thread_pool_thread_proxy (data=<value optimized out>)
    at gthreadpool.c:265
        task = 0xba929f8
        pool = 0x8880898
#19 0x01067e80 in g_thread_create_proxy (data=<value optimized out>)
    at gthread.c:635
        thread = 0xc2c2878
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
---Type <return> to continue, or q <return> to quit---
#20 0x002e5b65 in start_thread (arg=<value optimized out>)
    at pthread_create.c:297
        __res = <value optimized out>
        __ignore1 = 1
        __ignore2 = 0
        pd = 0xb19ffb70
        now = <value optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {3117044, 0, 4001536, 
    -1314917432, -333590261, -1890682264}, mask_was_saved = 0}}, priv = {pad = 
    {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <value optimized out>
        pagesize_m1 = <value optimized out>
        freesize = <value optimized out>
        __PRETTY_FUNCTION__ = "start_thread"
#21 0x03e3018e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:133
No locals.
Comment 3 Kjartan Maraas 2010-01-11 13:35:59 UTC 
Helgrind has this to say in this area:

==19845== Thread #1: lock order "0x447AF38 before 0x7436A30" violated
==19845==    at 0x400701F: pthread_mutex_lock (hg_intercepts.c:464)
==19845==    by 0x44631A4: ep_idle_dispatch (e-passwords.c:460)
==19845==    by 0x3A84A1: g_idle_dispatch (gmain.c:4065)
==19845==    by 0x3AA2B7: g_main_context_dispatch (gmain.c:1960)
==19845==    by 0x3ADBE7: g_main_context_iterate (gmain.c:2591)
==19845==    by 0x3AE05E: g_main_loop_run (gmain.c:2799)
==19845==    by 0x4E06F38: gtk_main (gtkmain.c:1219)
==19845==    by 0x804A653: main (main.c:593)
==19845==   Required order was established by acquisition of lock at 0x447AF38
==19845==    at 0x400701F: pthread_mutex_lock (hg_intercepts.c:464)
==19845==    by 0x4465B86: e_passwords_init (e-passwords.c:1257)
==19845==    by 0x804A482: main (main.c:552)
==19845==   followed by a later acquisition of lock at 0x7436A30
==19845==    at 0x400701F: pthread_mutex_lock (hg_intercepts.c:464)
==19845==    by 0x741F8AD: gkr_operation_request (gkr-operation.c:251)
==19845==    by 0x7421AAC: gnome_keyring_is_available (gnome-keyring.c:489)
==19845==    by 0x4465B99: e_passwords_init (e-passwords.c:1273)
==19845==    by 0x804A482: main (main.c:552)
Comment 4 Kjartan Maraas 2010-01-13 08:07:22 UTC 
thread apply all bt when one core is pegged at 100% is this:

(gdb) thread apply all bt

Thread 8 (Thread 0xb75b8b70 (LWP 2467)):
#0  0x00bfd424 in __kernel_vsyscall ()
#1  0x0048d255 in g_param_spec_ref () at gparam.c:200
#2  0x063a87fe in g_async_queue_pop_intern_unlocked (queue=0x9f17058, try=<value optimized out>, end_time=<value optimized out>) at gasyncqueue.c:358
#3  0x063a8bc7 in IA__g_async_queue_pop (queue=<value optimized out>) at gasyncqueue.c:398
#4  0x0026dcce in sync_request_thread_cb (cFile=<value optimized out>) at camel-db.c:78
#5  0x063f8e80 in g_thread_create_proxy (data=<value optimized out>) at gthread.c:635
#6  0x00488b65 in start_thread (arg=<value optimized out>) at gparam.c:200
#7  0x0957418e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:133

Thread 7 (Thread 0xb69ffb70 (LWP 2468)):
#0  0x00bfd424 in __kernel_vsyscall ()
#1  0x0048d255 in g_param_spec_ref () at gparam.c:200
#2  0x063a87fe in g_async_queue_pop_intern_unlocked (queue=0x9f25498, try=<value optimized out>, end_time=<value optimized out>) at gasyncqueue.c:358
#3  0x063a8bc7 in IA__g_async_queue_pop (queue=<value optimized out>) at gasyncqueue.c:398
#4  0x0026dd00 in sync_request_thread_cb (cFile=<value optimized out>) at camel-db.c:78
#5  0x063f8e80 in g_thread_create_proxy (data=<value optimized out>) at gthread.c:635
#6  0x00488b65 in start_thread (arg=<value optimized out>) at gparam.c:200
#7  0x0957418e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:133

Thread 6 (Thread 0xb46ffb70 (LWP 2547)):
#0  0x00bfd424 in __kernel_vsyscall ()
#1  0x0048d255 in g_param_spec_ref () at gparam.c:200
#2  0x063a87fe in g_async_queue_pop_intern_unlocked (queue=0xa8e38b0, try=<value optimized out>, end_time=<value optimized out>) at gasyncqueue.c:358
#3  0x063a8bc7 in IA__g_async_queue_pop (queue=<value optimized out>) at gasyncqueue.c:398
#4  0x0026dcce in sync_request_thread_cb (cFile=<value optimized out>) at camel-db.c:78
#5  0x063f8e80 in g_thread_create_proxy (data=<value optimized out>) at gthread.c:635
#6  0x00488b65 in start_thread (arg=<value optimized out>) at gparam.c:200
#7  0x0957418e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:133

Thread 5 (Thread 0xb3cfeb70 (LWP 2548)):
#0  0x00bfd424 in __kernel_vsyscall ()
#1  0x0048d255 in g_param_spec_ref () at gparam.c:200
#2  0x063a87fe in g_async_queue_pop_intern_unlocked (queue=0xa8f52b0, try=<value optimized out>, end_time=<value optimized out>) at gasyncqueue.c:358
#3  0x063a8bc7 in IA__g_async_queue_pop (queue=<value optimized out>) at gasyncqueue.c:398
#4  0x0026dcce in sync_request_thread_cb (cFile=<value optimized out>) at camel-db.c:78
#5  0x063f8e80 in g_thread_create_proxy (data=<value optimized out>) at gthread.c:635
#6  0x00488b65 in start_thread (arg=<value optimized out>) at gparam.c:200
#7  0x0957418e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:133

Thread 4 (Thread 0xb32fdb70 (LWP 6289)):
---Type <return> to continue, or q <return> to quit---
#0  0x0048afc4 in __pthread_mutex_lock (mutex=0x9ebe4f0) at gparam.c:200
#1  0x008a4b80 in _dbus_pthread_mutex_lock (mutex=<value optimized out>) at dbus-sysdeps-pthread.c:141
#2  0x0089b249 in _dbus_mutex_lock (mutex=<value optimized out>) at dbus-threads.c:148
#3  0x008825c6 in _dbus_connection_lock (connection=<value optimized out>) at dbus-connection.c:355
#4  0x008960e2 in dbus_pending_call_get_completed (pending=<value optimized out>) at dbus-pending-call.c:650
#5  0x00888613 in _dbus_connection_block_pending_call (pending=<value optimized out>) at dbus-connection.c:2287
#6  0x00896312 in dbus_pending_call_block (pending=<value optimized out>) at dbus-pending-call.c:705
#7  0x0741f374 in gkr_operation_block (op=<value optimized out>) at gkr-operation.c:341
#8  0x07421ac5 in gnome_keyring_is_available () at gnome-keyring.c:492
#9  0x00922b9a in e_passwords_init () at e-passwords.c:1273
#10 0x00922d42 in ep_msg_new (dispatch=0x9211b0 <ep_get_password>) at e-passwords.c:480
#11 0x00922f57 in e_passwords_get_password (component_name=<value optimized out>, key=<value optimized out>) at e-passwords.c:1435
#12 0x0389ecb3 in get_password (session=<value optimized out>, service=<value optimized out>, domain=<value optimized out>, prompt=<value optimized out>, 
    item=<value optimized out>, flags=<value optimized out>, ex=<value optimized out>) at mail-session.c:201
#13 0x00454371 in camel_session_get_password (session=<value optimized out>, service=<value optimized out>, domain=<value optimized out>, 
    prompt=<value optimized out>, item=<value optimized out>, flags=<value optimized out>, ex=<value optimized out>) at gparam.c:200
#14 0x00bf87fd in pop3_try_authenticate (service=<value optimized out>, reprompt=<value optimized out>, errmsg=<value optimized out>, 
    ex=<value optimized out>) at camel-pop3-store.c:484
#15 0x00bf8fbd in pop3_connect (service=<value optimized out>, ex=<value optimized out>) at camel-pop3-store.c:606
#16 0x00452da8 in camel_service_connect (service=<value optimized out>, ex=<value optimized out>) at gparam.c:200
#17 0x004545c3 in camel_session_get_service_connected (session=<value optimized out>, url_string=<value optimized out>, type=<value optimized out>, 
    ex=<value optimized out>) at gparam.c:200
#18 0x0389fe31 in mail_tool_get_inbox (url=<value optimized out>, ex=<value optimized out>) at mail-tools.c:69
#19 0x0389a839 in fetch_mail_exec (m=<value optimized out>) at mail-ops.c:302
#20 0x038947e9 in mail_msg_proxy (msg=<value optimized out>) at mail-mt.c:466
#21 0x063fa517 in g_thread_pool_thread_proxy (data=<value optimized out>) at gthreadpool.c:265
#22 0x063f8e80 in g_thread_create_proxy (data=<value optimized out>) at gthread.c:635
#23 0x00488b65 in start_thread (arg=<value optimized out>) at gparam.c:200
#24 0x0957418e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:133

Thread 3 (Thread 0xb1efbb70 (LWP 6293)):
#0  0x00bfd424 in __kernel_vsyscall ()
#1  0x0048d255 in g_param_spec_ref () at gparam.c:200
#2  0x063a87fe in g_async_queue_pop_intern_unlocked (queue=0xb0ab540, try=<value optimized out>, end_time=<value optimized out>) at gasyncqueue.c:358
#3  0x063a8bc7 in IA__g_async_queue_pop (queue=<value optimized out>) at gasyncqueue.c:398
#4  0x0026dcce in sync_request_thread_cb (cFile=<value optimized out>) at camel-db.c:78
#5  0x063f8e80 in g_thread_create_proxy (data=<value optimized out>) at gthread.c:635
#6  0x00488b65 in start_thread (arg=<value optimized out>) at gparam.c:200
#7  0x0957418e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:133

Thread 2 (Thread 0xb28fcb70 (LWP 6294)):
#0  0x00bfd424 in __kernel_vsyscall ()
---Type <return> to continue, or q <return> to quit---
#1  0x0048d255 in g_param_spec_ref () at gparam.c:200
#2  0x063a87fe in g_async_queue_pop_intern_unlocked (queue=0xacd4da0, try=<value optimized out>, end_time=<value optimized out>) at gasyncqueue.c:358
#3  0x063a8bc7 in IA__g_async_queue_pop (queue=<value optimized out>) at gasyncqueue.c:398
#4  0x0026dcce in sync_request_thread_cb (cFile=<value optimized out>) at camel-db.c:78
#5  0x063f8e80 in g_thread_create_proxy (data=<value optimized out>) at gthread.c:635
#6  0x00488b65 in start_thread (arg=<value optimized out>) at gparam.c:200
#7  0x0957418e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:133

Thread 1 (Thread 0xb7873790 (LWP 2465)):
#0  0x00bfd424 in __kernel_vsyscall ()
#1  0x09569736 in __poll (fds=<value optimized out>, nfds=<value optimized out>, timeout=<value optimized out>) at ../sysdeps/unix/sysv/linux/poll.c:87
#2  0x063dec2c in IA__g_poll (fds=<value optimized out>, nfds=<value optimized out>, timeout=<value optimized out>) at gpoll.c:127
#3  0x063d1a23 in g_main_context_poll (n_fds=<value optimized out>, fds=<value optimized out>, priority=<value optimized out>, 
    timeout=<value optimized out>, context=<value optimized out>) at gmain.c:2904
#4  g_main_context_iterate (n_fds=<value optimized out>, fds=<value optimized out>, priority=<value optimized out>, timeout=<value optimized out>, 
    context=<value optimized out>) at gmain.c:2586
#5  0x063d205f in IA__g_main_loop_run (loop=<value optimized out>) at gmain.c:2799
#6  0x04e06f39 in ?? ()
#7  0x0a683ee8 in ?? ()
#8  0x0a683ee8 in ?? ()
#9  0x0016d266 in gtk_notebook_calculate_tabs_allocation (notebook=<value optimized out>, children=<value optimized out>, last_child=<value optimized out>, 
    showarrow=<value optimized out>, direction=<value optimized out>, remaining_space=<value optimized out>, expanded_tabs=<value optimized out>, 
    min=<value optimized out>, max=<value optimized out>) at gtknotebook.c:5512
#10 0x0804a654 in main (argc=1, argv=0xbfacb494) at main.c:593
(gdb)
Comment 5 Milan Crha 2010-01-13 14:04:02 UTC 
Thanks for a bug report. The initial crash seems to be about some particular HTML message, probably with tables and such. it would be great if you can find it and attach here (I guess no (expect of your email address) private information there as it's a spam).

The other issue, the one with gnome-keyring, is about something else. Could you file a bug to that component and dealt it with them, please?
Comment 6 Kjartan Maraas 2010-01-13 21:04:53 UTC 
Filed the keyring issue as: https://bugzilla.gnome.org/show_bug.cgi?id=606902
Comment 7 Milan Crha 2010-01-14 09:47:20 UTC 
What about the test message(s), please?
Comment 8 Kjartan Maraas 2010-01-14 19:21:54 UTC 
Sorry. It got expunged somehow :-/
Comment 9 Milan Crha 2010-01-15 12:53:31 UTC 
Oh, no problem, please add it and reopen the next time it'll happen. Thanks in advance.