Bug 691119

Summary: [abrt] evolution-2.91.92-1.fc15: g_type_class_meta_marshal: Process /usr/bin/evolution was killed by signal 11 (SIGSEGV)
Product: [Fedora] Fedora Reporter: Troy <troyatlarge>
Component: evolutionAssignee: Matthew Barnes <mbarnes>
Status: CLOSED INSUFFICIENT_DATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 15CC: lucilanga, mbarnes, mcrha
Target Milestone: ---   
Target Release: ---   
Hardware: i686   
OS: Unspecified   
Whiteboard: abrt_hash:7c0bd004b4f0f3237b61c80e5c465a67a08f9720
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-03-30 06:33:55 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
File: backtrace none

Description Troy 2011-03-26 20:35:49 UTC 
abrt version: 1.1.17
architecture: i686
Attached file: backtrace, 29341 bytes
cmdline: evolution
component: evolution
Attached file: coredump, 81088512 bytes
crash_function: g_type_class_meta_marshal
executable: /usr/bin/evolution
kernel: 2.6.38.1-6.fc15.i686.PAE
package: evolution-2.91.92-1.fc15
rating: 4
reason: Process /usr/bin/evolution was killed by signal 11 (SIGSEGV)
release: Fedora release 15 (Lovelock)
time: 1301168842
uid: 500

How to reproduce
-----
1. I opened Evolution and hit new for a new letter. I skipped the address, filled in the subject and wrote a letter and then hit "send". A warning came up informing me I did not fill in the address.
2. I hit "To", selected a person to send it to.
3. I hit the "dismiss" button on the message, then hit "send". It crashed right after hitting send.
Comment 1 Troy 2011-03-26 20:36:00 UTC 
Created attachment 487954 [details]
File: backtrace
Comment 2 Troy 2011-03-26 20:40:11 UTC 
Package: evolution-2.91.92-1.fc15
Architecture: i686
OS Release: Fedora release 15 (Lovelock)


How to reproduce
-----
1. I opened Evolution and hit new for a new letter. I skipped the address, filled in the subject and wrote a letter and then hit "send". A warning came up informing me I did not fill in the address.
2. I hit "To", selected a person to send it to.
3. I hit the "dismiss" button on the message, then hit "send". It crashed right after hitting send.


Comment
-----
I was unable to reproduce this error - tried twice and the system worked as expected
Comment 3 Milan Crha 2011-03-28 07:26:40 UTC 
Thanks for a bug report. The crashing thread even doesn't contain any evolution function (except of 'main'), so this is probably some kind of memory corruption. Could you reproduce this when you run evolution like this from the console, please:
   $ G_SLICE=always-malloc evolution
if you can, and if this is really a memory corruption, then valgrind may help here to identify the issue. You can run it like this:
   $ G_SLICE=always-malloc valgrind evolution &>log.txt
Also note that this can be related to the state of e-addressbook-factory process, whether it was run for the first time or "reused". I suggest to try to close (kill -QUIT) it before you run evolution itself.
Comment 4 Milan Crha 2011-03-29 06:08:31 UTC 
*** Bug 691510 has been marked as a duplicate of this bug. ***
Comment 5 Troy 2011-03-29 20:01:01 UTC 
Sorry it took so long - did not know valgrind was a program I needed or that it would write to the said log - now that I got that .......

I ran G_SLICE=always-malloc valgrind evolution &>log.txt and tried to replicate the problem, however, it did not replicate but instead ran fine.

All the same here is the output of the log file in case it is of use to you:

==1866== Memcheck, a memory error detector
==1866== Copyright (C) 2002-2010, and GNU GPL'd, by Julian Seward et al.
==1866== Using Valgrind-3.6.0 and LibVEX; rerun with -h for copyright info
==1866== Command: evolution
==1866== 
Gtk-Message: Failed to load module "pk-gtk-module"
==1866== Invalid read of size 4
==1866==    at 0x4E84848D: icaltzutil_fetch_timezone (in /usr/lib/libical.so.0.46.0)
==1866==    by 0x4E849EEA: ??? (in /usr/lib/libical.so.0.46.0)
==1866==    by 0x4E84B0D5: icaltimezone_get_component (in /usr/lib/libical.so.0.46.0)
==1866==    by 0x5421F16: ??? (in /usr/lib/evolution/3.0/modules/libevolution-module-calendar.so)
==1866==    by 0x4D84EFEA: g_type_create_instance (in /lib/libgobject-2.0.so.0.2800.4)
==1866==    by 0x4D82C3BB: ??? (in /lib/libgobject-2.0.so.0.2800.4)
==1866==    by 0x41D4E71E: ??? (in /usr/lib/evolution/3.0/libeshell.so.0.0.0)
==1866==    by 0x4D82F158: g_object_newv (in /lib/libgobject-2.0.so.0.2800.4)
==1866==    by 0x4D83014A: g_object_new_valist (in /lib/libgobject-2.0.so.0.2800.4)
==1866==    by 0x4A58A2F: ???
==1866==  Address 0x5586928 is 0 bytes after a block of size 0 alloc'd
==1866==    at 0x4005447: calloc (vg_replace_malloc.c:467)
==1866==    by 0x4E847D78: icaltzutil_fetch_timezone (in /usr/lib/libical.so.0.46.0)
==1866==    by 0x4E849EEA: ??? (in /usr/lib/libical.so.0.46.0)
==1866==    by 0x4E84B0D5: icaltimezone_get_component (in /usr/lib/libical.so.0.46.0)
==1866==    by 0x5421F16: ??? (in /usr/lib/evolution/3.0/modules/libevolution-module-calendar.so)
==1866==    by 0x4D84EFEA: g_type_create_instance (in /lib/libgobject-2.0.so.0.2800.4)
==1866==    by 0x4D82C3BB: ??? (in /lib/libgobject-2.0.so.0.2800.4)
==1866==    by 0x41D4E71E: ??? (in /usr/lib/evolution/3.0/libeshell.so.0.0.0)
==1866==    by 0x4D82F158: g_object_newv (in /lib/libgobject-2.0.so.0.2800.4)
==1866==    by 0x4D83014A: g_object_new_valist (in /lib/libgobject-2.0.so.0.2800.4)
==1866==    by 0x4A58A2F: ???
==1866== 
==1866== Invalid read of size 4
==1866==    at 0x4DC0E4C3: ??? (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC10B8C: FcConfigFilename (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC2558C: FcConfigParseAndLoad (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC1A1C6: FcInitLoadConfig (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC1A2F9: FcInitLoadConfigAndFonts (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC1A57C: FcInit (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC0ED24: FcConfigGetCurrent (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC108FF: FcConfigSubstituteWithPat (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC10947: FcConfigSubstitute (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC8D92A: ??? (in /usr/lib/libpangocairo-1.0.so.0.2800.3)
==1866==    by 0x4DE50A11: ??? (in /usr/lib/libpangoft2-1.0.so.0.2800.3)
==1866==    by 0x4DE52006: ??? (in /usr/lib/libpangoft2-1.0.so.0.2800.3)
==1866==  Address 0x75e57bc is 20 bytes inside a block of size 22 alloc'd
==1866==    at 0x4006D69: malloc (vg_replace_malloc.c:236)
==1866==    by 0x4DC0E428: ??? (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC10B8C: FcConfigFilename (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC2558C: FcConfigParseAndLoad (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC1A1C6: FcInitLoadConfig (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC1A2F9: FcInitLoadConfigAndFonts (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC1A57C: FcInit (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC0ED24: FcConfigGetCurrent (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC108FF: FcConfigSubstituteWithPat (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC10947: FcConfigSubstitute (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC8D92A: ??? (in /usr/lib/libpangocairo-1.0.so.0.2800.3)
==1866==    by 0x4DE50A11: ??? (in /usr/lib/libpangoft2-1.0.so.0.2800.3)
==1866== 
==1866== Invalid read of size 4
==1866==    at 0x4DC0E4D7: ??? (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x900642D: ??? (in /usr/share/icons/gnome/icon-theme.cache)
==1866==  Address 0x75eaf68 is 16 bytes inside a block of size 18 alloc'd
==1866==    at 0x4006D69: malloc (vg_replace_malloc.c:236)
==1866==    by 0x4DC0E428: ??? (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x900642D: ??? (in /usr/share/icons/gnome/icon-theme.cache)
==1866== 
==1866== Invalid read of size 4
==1866==    at 0x4DC0E4D7: ??? (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC2558C: FcConfigParseAndLoad (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC25A50: FcConfigParseAndLoad (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC25E03: ??? (in /usr/lib/libfontconfig.so.1.4.4)
==1866==  Address 0x7623ac8 is 40 bytes inside a block of size 43 alloc'd
==1866==    at 0x4006D69: malloc (vg_replace_malloc.c:236)
==1866==    by 0x4DC0E428: ??? (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC2558C: FcConfigParseAndLoad (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC25A50: FcConfigParseAndLoad (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC25E03: ??? (in /usr/lib/libfontconfig.so.1.4.4)
==1866== 
==1866== Invalid read of size 4
==1866==    at 0x4DC0E4C3: ??? (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC2558C: FcConfigParseAndLoad (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC25A50: FcConfigParseAndLoad (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC25E03: ??? (in /usr/lib/libfontconfig.so.1.4.4)
==1866==  Address 0x7634484 is 36 bytes inside a block of size 39 alloc'd
==1866==    at 0x4006D69: malloc (vg_replace_malloc.c:236)
==1866==    by 0x4DC0E428: ??? (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC2558C: FcConfigParseAndLoad (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC25A50: FcConfigParseAndLoad (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x4DC25E03: ??? (in /usr/lib/libfontconfig.so.1.4.4)
==1866== 
==1866== Invalid read of size 4
==1866==    at 0x4DC0E4D7: ??? (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x2E73746D: ???
==1866==  Address 0x765d8d8 is 24 bytes inside a block of size 26 alloc'd
==1866==    at 0x4006D69: malloc (vg_replace_malloc.c:236)
==1866==    by 0x4DC0E428: ??? (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x2E73746D: ???
==1866== 
==1866== Invalid read of size 4
==1866==    at 0x4DC0E4C3: ??? (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x6F632E6B: ???
==1866==  Address 0x7665074 is 20 bytes inside a block of size 22 alloc'd
==1866==    at 0x4006D69: malloc (vg_replace_malloc.c:236)
==1866==    by 0x4DC0E428: ??? (in /usr/lib/libfontconfig.so.1.4.4)
==1866==    by 0x6F632E6B: ???
==1866== 
e-data-server-ui-Message: Unable to find password(s) in keyring (Keyring reports: No matching results)
==1866== Thread 4:
==1866== Conditional jump or move depends on uninitialised value(s)
==1866==    at 0x4D54B761: re_compile_fastmap_iter.isra.17 (in /lib/libc-2.13.90.so)
==1866==    by 0x4D5574C7: re_compile_fastmap (in /lib/libc-2.13.90.so)
==1866==    by 0x4D557BFB: regcomp (in /lib/libc-2.13.90.so)
==1866==    by 0x420C39E3: ??? (in /usr/lib/libcamel-1.2.so.23.0.0)
==1866==    by 0x4D7482B2: g_once_impl (in /lib/libglib-2.0.so.0.2800.4)
==1866==    by 0x420CA324: camel_header_raw_check_mailing_list (in /usr/lib/libcamel-1.2.so.23.0.0)
==1866==    by 0xC2B437A: ??? (in /usr/lib/evolution-data-server/camel-providers/libcamellocal.so)
==1866==    by 0xC2C2746: ??? (in /usr/lib/evolution-data-server/camel-providers/libcamellocal.so)
==1866==    by 0x415DE89D: ??? (in /usr/lib/libcamel-provider-1.2.so.23.0.0)
==1866==    by 0x415E4E12: camel_folder_summary_info_new_from_message (in /usr/lib/libcamel-provider-1.2.so.23.0.0)
==1866==    by 0x415E52A6: camel_folder_summary_add_from_message (in /usr/lib/libcamel-provider-1.2.so.23.0.0)
==1866==    by 0xC2B40A6: ??? (in /usr/lib/evolution-data-server/camel-providers/libcamellocal.so)
==1866== 
==1866== Thread 1:
==1866== Conditional jump or move depends on uninitialised value(s)
==1866==    at 0x411E8D10: gdk_window_get_root_coords (in /usr/lib/libgdk-3.so.0.0.6)
==1866==    by 0x4194B2C8: ??? (in /usr/lib/libgtk-3.so.0.0.6)
==1866==    by 0x4194B7AD: ??? (in /usr/lib/libgtk-3.so.0.0.6)
==1866==    by 0x411D44AE: ??? (in /usr/lib/libgdk-3.so.0.0.6)
==1866==    by 0x4D7220FF: ??? (in /lib/libglib-2.0.so.0.2800.4)
==1866==    by 0x4D72081E: g_main_context_dispatch (in /lib/libglib-2.0.so.0.2800.4)
==1866==    by 0x4D720F8F: ??? (in /lib/libglib-2.0.so.0.2800.4)
==1866==    by 0x4D7216B6: g_main_loop_run (in /lib/libglib-2.0.so.0.2800.4)
==1866==    by 0x41850024: gtk_main (in /usr/lib/libgtk-3.so.0.0.6)
==1866==    by 0x4D4B3432: (below main) (in /lib/libc-2.13.90.so)
==1866== 
==1866== Conditional jump or move depends on uninitialised value(s)
==1866==    at 0x411E8D1A: gdk_window_get_root_coords (in /usr/lib/libgdk-3.so.0.0.6)
==1866==    by 0x4194B2C8: ??? (in /usr/lib/libgtk-3.so.0.0.6)
==1866==    by 0x4194B7AD: ??? (in /usr/lib/libgtk-3.so.0.0.6)
==1866==    by 0x411D44AE: ??? (in /usr/lib/libgdk-3.so.0.0.6)
==1866==    by 0x4D7220FF: ??? (in /lib/libglib-2.0.so.0.2800.4)
==1866==    by 0x4D72081E: g_main_context_dispatch (in /lib/libglib-2.0.so.0.2800.4)
==1866==    by 0x4D720F8F: ??? (in /lib/libglib-2.0.so.0.2800.4)
==1866==    by 0x4D7216B6: g_main_loop_run (in /lib/libglib-2.0.so.0.2800.4)
==1866==    by 0x41850024: gtk_main (in /usr/lib/libgtk-3.so.0.0.6)
==1866==    by 0x4D4B3432: (below main) (in /lib/libc-2.13.90.so)
==1866== 
==1866== 
==1866== HEAP SUMMARY:
==1866==     in use at exit: 9,242,982 bytes in 179,498 blocks
==1866==   total heap usage: 3,705,073 allocs, 3,525,575 frees, 186,052,226 bytes allocated
==1866== 
==1866== LEAK SUMMARY:
==1866==    definitely lost: 9,433 bytes in 95 blocks
==1866==    indirectly lost: 65,165 bytes in 2,736 blocks
==1866==      possibly lost: 724,472 bytes in 3,912 blocks
==1866==    still reachable: 8,443,912 bytes in 172,755 blocks
==1866==         suppressed: 0 bytes in 0 blocks
==1866== Rerun with --leak-check=full to see details of leaked memory
==1866== 
==1866== For counts of detected and suppressed errors, rerun with: -v
==1866== Use --track-origins=yes to see where uninitialised values come from
==1866== ERROR SUMMARY: 39 errors from 10 contexts (suppressed: 536 from 16)
Comment 6 Milan Crha 2011-03-30 06:33:55 UTC 
Thanks for the update. The log looks fine, nothing unusual in it. Good it doesn't break for you finally (you noticed you did a system update in a private mail you sent me).

I'm closing this, but please feel free to reopen if you face it again. Also make sure you'll have installed debug info packages for evolution-data-server and evolution, as the log indicates you do not have installed them (or not the correct version).