Bug 696285

Summary: [abrt] evolution-data-server-2.32.2-1.fc14: _dbus_watch_invalidate: Process /usr/libexec/e-addressbook-factory was killed by signal 11 (SIGSEGV)
Product: [Fedora] Fedora Reporter: Herald van der Breggen <fedora>
Component: dbusAssignee: David Zeuthen <davidz>
Status: CLOSED WONTFIX QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 14CC: davidz, lpoetter, mbarnes, mclasen, mcrha, mendiebm, pbrobinson, walters, wojtinf
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
Whiteboard: abrt_hash:99e0d91a9ed54d34e0b4b3b838e7635d1822eb4d
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-08-16 12:57:19 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
File: backtrace none

Description Herald van der Breggen 2011-04-13 18:46:11 UTC
abrt version: 1.1.17
architecture: x86_64
Attached file: backtrace, 20261 bytes
cmdline: /usr/libexec/e-addressbook-factory
comment: I happend right after the first login after upgrading Fedora 13 -> 14 with preupgrade
component: evolution-data-server
Attached file: coredump, 27725824 bytes
crash_function: _dbus_watch_invalidate
executable: /usr/libexec/e-addressbook-factory
kernel: 2.6.35.12-88.fc14.x86_64
package: evolution-data-server-2.32.2-1.fc14
rating: 4
reason: Process /usr/libexec/e-addressbook-factory was killed by signal 11 (SIGSEGV)
release: Fedora release 14 (Laughlin)
time: 1302719943
uid: 500

How to reproduce
-----
1. use preupgrade to upgrade Fedora 13 -> 14
2. login
3.

Comment 1 Herald van der Breggen 2011-04-13 18:46:17 UTC
Created attachment 491852 [details]
File: backtrace

Comment 2 Milan Crha 2011-04-14 05:21:23 UTC
Thanks for a bug report. This crashed somewhere in D-Bus code. Could you check if your installed D-Bus is from Fedora 14 repository, and not the old from Fedora 13? I've not much idea apart of this, thus I'm moving this to dbus.

Thread 1 (Thread 0x7f16f6f617e0 (LWP 2573)):
#0  _dbus_watch_invalidate (watch=0x0) at dbus-watch.c:154
#1  0x00007f16eaf706dd in free_watches (transport=0x7f16e0003110) at dbus-transport-socket.c:83
#2  0x00007f16eaf70749 in socket_disconnect (transport=0x7f16e0003110) at dbus-transport-socket.c:987
#3  0x00007f16eaf6edb7 in _dbus_transport_disconnect (transport=0x7f16e0003110) at dbus-transport.c:504
#4  0x00007f16eaf6f5c3 in _dbus_transport_queue_messages (transport=0x7f16e0003110) at dbus-transport.c:1162
#5  0x00007f16eaf57694 in _dbus_connection_get_dispatch_status_unlocked (connection=0x7f16e00037f0) at dbus-connection.c:4227
#6  0x00007f16eaf581ee in dbus_connection_get_dispatch_status (connection=0x7f16e00037f0) at dbus-connection.c:4358
#7  0x00007f16e966da03 in message_queue_prepare (source=<value optimized out>, timeout=<value optimized out>) at dbus-gmain.c:82
#8  0x00007f16f406431f in g_main_context_prepare (context=0x12d9e60, priority=0x7fff894efa7c) at gmain.c:2469
#9  0x00007f16f4065209 in g_main_context_iterate (context=0x12d9e60, block=1, dispatch=1, self=<value optimized out>) at gmain.c:2760
#10 0x00007f16f4065c82 in g_main_loop_run (loop=0x12df210) at gmain.c:2988
#11 0x0000000000403b3a in main (argc=<value optimized out>, argv=<value optimized out>) at e-data-book-factory.c:619

Comment 3 Milan Crha 2011-04-14 11:57:03 UTC
*** Bug 696529 has been marked as a duplicate of this bug. ***

Comment 4 Herald van der Breggen 2011-04-14 14:10:17 UTC
The crash happens every time evolution's compose window is started (every new message, every reply). So *a lot*. 

Please let me know if there is a workaround. 

Thanks

Comment 5 David Zeuthen 2011-04-14 14:24:23 UTC
> I've not much idea apart of this, thus I'm moving this to dbus.

Please don't reassign to D-Bus unless you're actually certain it's a D-Bus bug and not just incorrect use of libdbus-1. Sorry to be reassigning back to you, but you can't just assign bugs based on a hunch - that's not how it works.

Comment 6 Milan Crha 2011-04-15 06:47:32 UTC
Hi David, right, I meant it if you have an idea what can be wrong in this particular case, because the crashing thread doesn't indicate anything directly related to evolution, and because this is the first issue I saw in this area for more than half a year, if I recall correctly, and I believe people are using evolution to compose messages pretty regularly. Thus a hint from your side, apart of incorrect use of libdbus, which I consider pretty unlikely, will be appreciated.

Meanwhile, Herald, could you try to reproduce this crash under valgrind, please? If this is rather about memory corruption caused by evolution, then this may show us. Please install valgrind and run evolution from console like this:
   $ G_SLICE=always-malloc valgrind --num-callers=50 evolution &>log.txt
and when it's up and running then reproduce the issue. The resulting log.txt file may contain some information. Only note that this will slow down evolution significantly, due to all the memory checking. Maybe switch evolution to offline first (File->Work offline), supposing you can reproduce this in oflline as well.

Also, could you answer my question from comment #2, please?

Comment 7 Herald van der Breggen 2011-04-15 07:53:40 UTC
The fedora 14 rpm is installed:

# rpm -q dbus
dbus-1.4.0-2.fc14.x86_64

I'll reproduce the crash under valgrind...

Comment 8 Herald van der Breggen 2011-04-15 09:13:23 UTC
Exiting evolution takes forever when running under valgrind, but I think the relevant part is already in the logfile. When evolution started up under valgrind I started the compose window and indeed the crash happened immediately. This is what valgrind says:


$ cat log.txt
==30121== Memcheck, a memory error detector
==30121== Copyright (C) 2002-2009, and GNU GPL'd, by Julian Seward et al.
==30121== Using Valgrind-3.5.0 and LibVEX; rerun with -h for copyright info
==30121== Command: evolution
==30121== 
==30121== Conditional jump or move depends on uninitialised value(s)
==30121==    at 0x3437E83D82: __GI___strcasecmp_l (in /lib64/libc-2.13.so)
==30121==    by 0x3437E1FEB1: __gconv_open (in /lib64/libc-2.13.so)
==30121==    by 0x3437E2D266: _nl_find_msg (in /lib64/libc-2.13.so)
==30121==    by 0x3437E2D9A7: __dcigettext (in /lib64/libc-2.13.so)
==30121==    by 0x3439E60C74: ??? (in /lib64/libglib-2.0.so.0.2600.0)
==30121==    by 0x3439E6390D: g_dgettext (in /lib64/libglib-2.0.so.0.2600.0)
==30121==    by 0x344074ACBE: gtk_get_option_group (in /usr/lib64/libgtk-x11-2.0.so.0.2200.0)
==30121==    by 0x344074ADC9: gtk_init_with_args (in /usr/lib64/libgtk-x11-2.0.so.0.2200.0)
==30121==    by 0x4022AE: ??? (in /usr/bin/evolution)
==30121==    by 0x3437E1EE5C: (below main) (in /lib64/libc-2.13.so)
==30121== 
==30121== Use of uninitialised value of size 8
==30121==    at 0x3437E85BC4: __GI___strcasecmp_l (in /lib64/libc-2.13.so)
==30121==    by 0x3437E1FEB1: __gconv_open (in /lib64/libc-2.13.so)
==30121==    by 0x3437E2D266: _nl_find_msg (in /lib64/libc-2.13.so)
==30121==    by 0x3437E2D9A7: __dcigettext (in /lib64/libc-2.13.so)
==30121==    by 0x3439E60C74: ??? (in /lib64/libglib-2.0.so.0.2600.0)
==30121==    by 0x3439E6390D: g_dgettext (in /lib64/libglib-2.0.so.0.2600.0)
==30121==    by 0x344074ACBE: gtk_get_option_group (in /usr/lib64/libgtk-x11-2.0.so.0.2200.0)
==30121==    by 0x344074ADC9: gtk_init_with_args (in /usr/lib64/libgtk-x11-2.0.so.0.2200.0)
==30121==    by 0x4022AE: ??? (in /usr/bin/evolution)
==30121==    by 0x3437E1EE5C: (below main) (in /lib64/libc-2.13.so)
==30121== 
==30121== Use of uninitialised value of size 8
==30121==    at 0x3437E85BC8: __GI___strcasecmp_l (in /lib64/libc-2.13.so)
==30121==    by 0x3437E1FEB1: __gconv_open (in /lib64/libc-2.13.so)
==30121==    by 0x3437E2D266: _nl_find_msg (in /lib64/libc-2.13.so)
==30121==    by 0x3437E2D9A7: __dcigettext (in /lib64/libc-2.13.so)
==30121==    by 0x3439E60C74: ??? (in /lib64/libglib-2.0.so.0.2600.0)
==30121==    by 0x3439E6390D: g_dgettext (in /lib64/libglib-2.0.so.0.2600.0)
==30121==    by 0x344074ACBE: gtk_get_option_group (in /usr/lib64/libgtk-x11-2.0.so.0.2200.0)
==30121==    by 0x344074ADC9: gtk_init_with_args (in /usr/lib64/libgtk-x11-2.0.so.0.2200.0)
==30121==    by 0x4022AE: ??? (in /usr/bin/evolution)
==30121==    by 0x3437E1EE5C: (below main) (in /lib64/libc-2.13.so)
==30121== 
==30121== Invalid read of size 8
==30121==    at 0x3451E386F9: icaltzutil_fetch_timezone (in /usr/lib64/libical.so.0.46.0)
==30121==    by 0x3451E39758: ??? (in /usr/lib64/libical.so.0.46.0)
==30121==    by 0x3451E3AEDF: icaltimezone_get_component (in /usr/lib64/libical.so.0.46.0)
==30121==    by 0xC61A554: ??? (in /usr/lib64/evolution/2.32/modules/libevolution-module-calendar.so)
==30121==    by 0x343AA31E92: g_type_create_instance (in /lib64/libgobject-2.0.so.0.2600.0)
==30121==    by 0x343AA0FE8B: ??? (in /lib64/libgobject-2.0.so.0.2600.0)
==30121==    by 0x3454E1B0F6: ??? (in /usr/lib64/evolution/2.32/libeshell.so.0.0.0)
==30121==    by 0x343AA12BB8: g_object_newv (in /lib64/libgobject-2.0.so.0.2600.0)
==30121==    by 0x343AA13BC0: g_object_new_valist (in /lib64/libgobject-2.0.so.0.2600.0)
==30121==    by 0x343AA13DF0: g_object_new (in /lib64/libgobject-2.0.so.0.2600.0)
==30121==    by 0x3452622EE4: ??? (in /usr/lib64/evolution/2.32/libeutil.so.0.0.0)
==30121==    by 0x3452636BC9: e_type_traverse (in /usr/lib64/evolution/2.32/libeutil.so.0.0.0)
==30121==    by 0x3452636BAC: e_type_traverse (in /usr/lib64/evolution/2.32/libeutil.so.0.0.0)
==30121==    by 0x345262314B: e_extensible_list_extensions (in /usr/lib64/evolution/2.32/libeutil.so.0.0.0)
==30121==    by 0x3454E19E3F: e_shell_load_modules (in /usr/lib64/evolution/2.32/libeshell.so.0.0.0)
==30121==    by 0x40269F: ??? (in /usr/bin/evolution)
==30121==    by 0x3437E1EE5C: (below main) (in /lib64/libc-2.13.so)
==30121==  Address 0xd6dbf50 is 0 bytes after a block of size 0 alloc'd
==30121==    at 0x4A04896: calloc (vg_replace_malloc.c:418)
==30121==    by 0x3451E38124: icaltzutil_fetch_timezone (in /usr/lib64/libical.so.0.46.0)
==30121==    by 0x3451E39758: ??? (in /usr/lib64/libical.so.0.46.0)
==30121==    by 0x3451E3AEDF: icaltimezone_get_component (in /usr/lib64/libical.so.0.46.0)
==30121==    by 0xC61A554: ??? (in /usr/lib64/evolution/2.32/modules/libevolution-module-calendar.so)
==30121==    by 0x343AA31E92: g_type_create_instance (in /lib64/libgobject-2.0.so.0.2600.0)
==30121==    by 0x343AA0FE8B: ??? (in /lib64/libgobject-2.0.so.0.2600.0)
==30121==    by 0x3454E1B0F6: ??? (in /usr/lib64/evolution/2.32/libeshell.so.0.0.0)
==30121==    by 0x343AA12BB8: g_object_newv (in /lib64/libgobject-2.0.so.0.2600.0)
==30121==    by 0x343AA13BC0: g_object_new_valist (in /lib64/libgobject-2.0.so.0.2600.0)
==30121==    by 0x343AA13DF0: g_object_new (in /lib64/libgobject-2.0.so.0.2600.0)
==30121==    by 0x3452622EE4: ??? (in /usr/lib64/evolution/2.32/libeutil.so.0.0.0)
==30121==    by 0x3452636BC9: e_type_traverse (in /usr/lib64/evolution/2.32/libeutil.so.0.0.0)
==30121==    by 0x3452636BAC: e_type_traverse (in /usr/lib64/evolution/2.32/libeutil.so.0.0.0)
==30121==    by 0x345262314B: e_extensible_list_extensions (in /usr/lib64/evolution/2.32/libeutil.so.0.0.0)
==30121==    by 0x3454E19E3F: e_shell_load_modules (in /usr/lib64/evolution/2.32/libeshell.so.0.0.0)
==30121==    by 0x40269F: ??? (in /usr/bin/evolution)
==30121==    by 0x3437E1EE5C: (below main) (in /lib64/libc-2.13.so)
==30121== 

(evolution:30121): GLib-CRITICAL **: the GVariant format string `(u)' has a type of `(u)' but the given value has a type of `(s)'

(evolution:30121): GLib-CRITICAL **: g_variant_get: assertion `valid_format_string (format_string, TRUE, value)' failed
(evolution:30121): libebook-DEBUG: e-book.c:129: EBook GDBus connection is closed, remote peer vanished
(evolution:30121): libebook-DEBUG: GDBus connection is closed, remote peer vanished

(evolution:30121): e-data-server-ui-WARNING **: ENameSelector: Could not load "adresboek": GDBus.Error:org.freedesktop.DBus.Error.NoReply: Message did not receive a reply (timeout by message bus)

Comment 9 Herald van der Breggen 2011-04-15 09:21:40 UTC
BTW, I tried the offline modus as you suggested, but in that case the crash did not happen, either email address lookups (while typing in the compose window) did not happen.

Another observation: at a moment address lookups actually worked while typing in the compose window and crashes did not happen. When I logged out and logged in again the situation with crashes was back again.

Comment 10 Herald van der Breggen 2011-04-15 09:30:12 UTC
Another observation: when I uncheck the "couchdb" option in preferences -> Addressbook, the crashes do not happen anymore. When I check it, the crashes happen again. So it seems to be related to couchdb.

Comment 11 Herald van der Breggen 2011-04-15 09:39:44 UTC
BTW, switching off the couchdb mode for evolution's addressbook helps to prevent crashes when opening the compose window, however, it does not prevent a crash when logging in at the gnome desktop.

Comment 12 Milan Crha 2011-04-18 06:50:36 UTC
Thanks for the update and all the tests. The valgrind log entries are more or less known and may not cause this kind of crash. Your couchdb observation seems promising. I realized I let you run evolution under valgrind, but the e-addressbook-factory is crashing for you, I'm sorry for my fault. Could you use the same valgrind command as above, only use
/usr/libexec/e-addressbook-factory
instead of "evolution" in it, please? Also make sure there will not be any other e-addressbook-factory running, as there can be only running in the system. Thanks in advance.

Comment 13 Herald van der Breggen 2011-04-18 13:42:55 UTC
I hope this makes sense to you:

$ cat /tmp/log.txt
==32043== Memcheck, a memory error detector
==32043== Copyright (C) 2002-2009, and GNU GPL'd, by Julian Seward et al.
==32043== Using Valgrind-3.5.0 and LibVEX; rerun with -h for copyright info
==32043== Command: /usr/libexec/e-addressbook-factory
==32043== 
e-data-server-Message: adding type `EBookBackendGoogleFactory'
e-data-server-Message: adding type `EBookBackendVCFFactory'
e-data-server-Message: adding type `EBookBackendLDAPFactory'
e-data-server-Message: adding type `EBookBackendWebdavFactory'
e-data-server-Message: adding type `EBookBackendCouchDBFactory'
e-data-server-Message: adding type `EBookBackendFileFactory'
e-data-server-Message: adding type `EBookBackendGroupwiseFactory'
==32043== Thread 3:
==32043== Invalid read of size 4
==32043==    at 0x3442223041: ??? (in /lib64/libdbus-1.so.3.5.2)
==32043==    by 0x344221E893: ??? (in /lib64/libdbus-1.so.3.5.2)
==32043==    by 0x3439E3161F: ??? (in /lib64/libglib-2.0.so.0.2600.0)
==32043==    by 0x3443A0ED39: ??? (in /usr/lib64/libdbus-glib-1.so.2.1.0)
==32043==    by 0x3443A12234: dbus_g_proxy_call (in /usr/lib64/libdbus-glib-1.so.2.1.0)
==32043==    by 0x60942C8: desktopcouch_session_new (in /usr/lib64/libdesktopcouch-glib-1.0.so.2.0.1)
==32043==    by 0x5E90CE3: ??? (in /usr/lib64/evolution-data-server-1.2/extensions/libebookbackendcouchdb.so)
==32043==    by 0x343AE145EC: e_book_backend_load_source (in /usr/lib64/libedata-book-1.2.so.8.0.0)
==32043==    by 0x343AE148C3: e_book_backend_open (in /usr/lib64/libedata-book-1.2.so.8.0.0)
==32043==    by 0x343AE18781: ??? (in /usr/lib64/libedata-book-1.2.so.8.0.0)
==32043==    by 0x3439E6BBC3: ??? (in /lib64/libglib-2.0.so.0.2600.0)
==32043==    by 0x3439E69445: ??? (in /lib64/libglib-2.0.so.0.2600.0)
==32043==    by 0x3438606CCA: start_thread (in /lib64/libpthread-2.13.so)
==32043==    by 0x3437EE0C2C: clone (in /lib64/libc-2.13.so)
==32043==  Address 0x4e5f440 is 0 bytes inside a block of size 56 free'd
==32043==    at 0x4A05187: free (vg_replace_malloc.c:325)
==32043==    by 0x344220C872: ??? (in /lib64/libdbus-1.so.3.5.2)
==32043==    by 0x3442224598: ??? (in /lib64/libdbus-1.so.3.5.2)
==32043==    by 0x3442224EDF: ??? (in /lib64/libdbus-1.so.3.5.2)
==32043==    by 0x34422255E4: ??? (in /lib64/libdbus-1.so.3.5.2)
==32043==    by 0x344222431C: ??? (in /lib64/libdbus-1.so.3.5.2)
==32043==    by 0x344220EDD4: ??? (in /lib64/libdbus-1.so.3.5.2)
==32043==    by 0x3442210142: ??? (in /lib64/libdbus-1.so.3.5.2)
==32043==    by 0x3443A0ECBD: ??? (in /usr/lib64/libdbus-glib-1.so.2.1.0)
==32043==    by 0x3443A12234: dbus_g_proxy_call (in /usr/lib64/libdbus-glib-1.so.2.1.0)
==32043==    by 0x60942C8: desktopcouch_session_new (in /usr/lib64/libdesktopcouch-glib-1.0.so.2.0.1)
==32043==    by 0x5E90CE3: ??? (in /usr/lib64/evolution-data-server-1.2/extensions/libebookbackendcouchdb.so)
==32043==    by 0x343AE145EC: e_book_backend_load_source (in /usr/lib64/libedata-book-1.2.so.8.0.0)
==32043==    by 0x343AE148C3: e_book_backend_open (in /usr/lib64/libedata-book-1.2.so.8.0.0)
==32043==    by 0x343AE18781: ??? (in /usr/lib64/libedata-book-1.2.so.8.0.0)
==32043==    by 0x3439E6BBC3: ??? (in /lib64/libglib-2.0.so.0.2600.0)
==32043==    by 0x3439E69445: ??? (in /lib64/libglib-2.0.so.0.2600.0)
==32043==    by 0x3438606CCA: start_thread (in /lib64/libpthread-2.13.so)
==32043==    by 0x3437EE0C2C: clone (in /lib64/libc-2.13.so)
==32043== 
==32043== Invalid write of size 4
==32043==    at 0x344222304B: ??? (in /lib64/libdbus-1.so.3.5.2)
==32043==    by 0x344221E893: ??? (in /lib64/libdbus-1.so.3.5.2)
==32043==    by 0x3439E3161F: ??? (in /lib64/libglib-2.0.so.0.2600.0)
==32043==    by 0x3443A0ED39: ??? (in /usr/lib64/libdbus-glib-1.so.2.1.0)
==32043==    by 0x3443A12234: dbus_g_proxy_call (in /usr/lib64/libdbus-glib-1.so.2.1.0)
==32043==    by 0x60942C8: desktopcouch_session_new (in /usr/lib64/libdesktopcouch-glib-1.0.so.2.0.1)
==32043==    by 0x5E90CE3: ??? (in /usr/lib64/evolution-data-server-1.2/extensions/libebookbackendcouchdb.so)
==32043==    by 0x343AE145EC: e_book_backend_load_source (in /usr/lib64/libedata-book-1.2.so.8.0.0)
==32043==    by 0x343AE148C3: e_book_backend_open (in /usr/lib64/libedata-book-1.2.so.8.0.0)
==32043==    by 0x343AE18781: ??? (in /usr/lib64/libedata-book-1.2.so.8.0.0)
==32043==    by 0x3439E6BBC3: ??? (in /lib64/libglib-2.0.so.0.2600.0)
==32043==    by 0x3439E69445: ??? (in /lib64/libglib-2.0.so.0.2600.0)
==32043==    by 0x3438606CCA: start_thread (in /lib64/libpthread-2.13.so)
==32043==    by 0x3437EE0C2C: clone (in /lib64/libc-2.13.so)
==32043==  Address 0x4e5f440 is 0 bytes inside a block of size 56 free'd
==32043==    at 0x4A05187: free (vg_replace_malloc.c:325)
==32043==    by 0x344220C872: ??? (in /lib64/libdbus-1.so.3.5.2)
==32043==    by 0x3442224598: ??? (in /lib64/libdbus-1.so.3.5.2)
==32043==    by 0x3442224EDF: ??? (in /lib64/libdbus-1.so.3.5.2)
==32043==    by 0x34422255E4: ??? (in /lib64/libdbus-1.so.3.5.2)
==32043==    by 0x344222431C: ??? (in /lib64/libdbus-1.so.3.5.2)
==32043==    by 0x344220EDD4: ??? (in /lib64/libdbus-1.so.3.5.2)
==32043==    by 0x3442210142: ??? (in /lib64/libdbus-1.so.3.5.2)
==32043==    by 0x3443A0ECBD: ??? (in /usr/lib64/libdbus-glib-1.so.2.1.0)
==32043==    by 0x3443A12234: dbus_g_proxy_call (in /usr/lib64/libdbus-glib-1.so.2.1.0)
==32043==    by 0x60942C8: desktopcouch_session_new (in /usr/lib64/libdesktopcouch-glib-1.0.so.2.0.1)
==32043==    by 0x5E90CE3: ??? (in /usr/lib64/evolution-data-server-1.2/extensions/libebookbackendcouchdb.so)
==32043==    by 0x343AE145EC: e_book_backend_load_source (in /usr/lib64/libedata-book-1.2.so.8.0.0)
==32043==    by 0x343AE148C3: e_book_backend_open (in /usr/lib64/libedata-book-1.2.so.8.0.0)
==32043==    by 0x343AE18781: ??? (in /usr/lib64/libedata-book-1.2.so.8.0.0)
==32043==    by 0x3439E6BBC3: ??? (in /lib64/libglib-2.0.so.0.2600.0)
==32043==    by 0x3439E69445: ??? (in /lib64/libglib-2.0.so.0.2600.0)
==32043==    by 0x3438606CCA: start_thread (in /lib64/libpthread-2.13.so)
==32043==    by 0x3437EE0C2C: clone (in /lib64/libc-2.13.so)
==32043== 
erver is up and running...
==32043== 
==32043== HEAP SUMMARY:
==32043==     in use at exit: 620,687 bytes in 6,138 blocks
==32043==   total heap usage: 13,977 allocs, 7,839 frees, 1,474,653 bytes allocated
==32043== 
==32043== LEAK SUMMARY:
==32043==    definitely lost: 8,488 bytes in 3 blocks
==32043==    indirectly lost: 0 bytes in 0 blocks
==32043==      possibly lost: 244,199 bytes in 160 blocks
==32043==    still reachable: 368,000 bytes in 5,975 blocks
==32043==         suppressed: 0 bytes in 0 blocks
==32043== Rerun with --leak-check=full to see details of leaked memory
==32043== 
==32043== For counts of detected and suppressed errors, rerun with: -v
==32043== ERROR SUMMARY: 2 errors from 2 contexts (suppressed: 6 from 6)

Comment 14 Milan Crha 2011-04-18 14:22:20 UTC
Yup, it makes sense to me. Thanks for the update. I thought you've installed debug info packages for evolution-data-server, but I see you do not. If you could install debug-info packages also for evolution-couchdb and couchdb-glib, together with evolution-data-server, and repost the log, then it'll surely help evolution-couchdb developer to better identify the issue, in case it will not be reproducible on his/her end.

Comment 15 Herald van der Breggen 2011-04-18 15:14:09 UTC
$ cat /tmp/log6.txt
==16881== Memcheck, a memory error detector
==16881== Copyright (C) 2002-2009, and GNU GPL'd, by Julian Seward et al.
==16881== Using Valgrind-3.5.0 and LibVEX; rerun with -h for copyright info
==16881== Command: /usr/libexec/e-addressbook-factory
==16881== 
e-data-server-Message: adding type `EBookBackendGoogleFactory'
e-data-server-Message: adding type `EBookBackendVCFFactory'
e-data-server-Message: adding type `EBookBackendLDAPFactory'
e-data-server-Message: adding type `EBookBackendWebdavFactory'
e-data-server-Message: adding type `EBookBackendCouchDBFactory'
e-data-server-Message: adding type `EBookBackendFileFactory'
e-data-server-Message: adding type `EBookBackendGroupwiseFactory'
==16881== Thread 3:
==16881== Invalid read of size 4
==16881==    at 0x3442223041: _dbus_timeout_unref (dbus-timeout.c:112)
==16881==    by 0x344221E893: _dbus_pending_call_last_unref (dbus-pending-call.c:397)
==16881==    by 0x3439E3161F: g_hash_table_remove_internal (ghash.c:452)
==16881==    by 0x3443A0ED39: dbus_g_proxy_end_call_internal (dbus-gproxy.c:2403)
==16881==    by 0x3443A12234: dbus_g_proxy_call (dbus-gproxy.c:2601)
==16881==    by 0x60942C8: desktopcouch_session_new (desktopcouch-session.c:83)
==16881==    by 0x5E90CE3: e_book_backend_couchdb_load_source (e-book-backend-couchdb.c:1019)
==16881==    by 0x343AE145EC: e_book_backend_load_source (e-book-backend.c:269)
==16881==    by 0x343AE148C3: e_book_backend_open (e-book-backend.c:323)
==16881==    by 0x343AE18781: operation_thread (e-data-book.c:103)
==16881==    by 0x3439E6BBC3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==16881==    by 0x3439E69445: g_thread_create_proxy (gthread.c:1897)
==16881==    by 0x3438606CCA: start_thread (pthread_create.c:301)
==16881==    by 0x3437EE0C2C: clone (clone.S:115)
==16881==  Address 0x4e4dc90 is 0 bytes inside a block of size 56 free'd
==16881==    at 0x4A05187: free (vg_replace_malloc.c:325)
==16881==    by 0x344220C872: _dbus_connection_queue_received_message_link (dbus-connection.c:486)
==16881==    by 0x3442224598: _dbus_transport_queue_messages (dbus-transport.c:1154)
==16881==    by 0x3442224EDF: do_reading (dbus-transport-socket.c:851)
==16881==    by 0x34422255E4: socket_do_iteration (dbus-transport-socket.c:1162)
==16881==    by 0x344222431C: _dbus_transport_do_iteration (dbus-transport.c:980)
==16881==    by 0x344220EDD4: _dbus_connection_do_iteration_unlocked (dbus-connection.c:1206)
==16881==    by 0x3442210142: _dbus_connection_block_pending_call (dbus-connection.c:2412)
==16881==    by 0x3443A0ECBD: dbus_g_proxy_end_call_internal (dbus-gproxy.c:2272)
==16881==    by 0x3443A12234: dbus_g_proxy_call (dbus-gproxy.c:2601)
==16881==    by 0x60942C8: desktopcouch_session_new (desktopcouch-session.c:83)
==16881==    by 0x5E90CE3: e_book_backend_couchdb_load_source (e-book-backend-couchdb.c:1019)
==16881==    by 0x343AE145EC: e_book_backend_load_source (e-book-backend.c:269)
==16881==    by 0x343AE148C3: e_book_backend_open (e-book-backend.c:323)
==16881==    by 0x343AE18781: operation_thread (e-data-book.c:103)
==16881==    by 0x3439E6BBC3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==16881==    by 0x3439E69445: g_thread_create_proxy (gthread.c:1897)
==16881==    by 0x3438606CCA: start_thread (pthread_create.c:301)
==16881==    by 0x3437EE0C2C: clone (clone.S:115)
==16881== 
==16881== Invalid write of size 4
==16881==    at 0x344222304B: _dbus_timeout_unref (dbus-timeout.c:112)
==16881==    by 0x344221E893: _dbus_pending_call_last_unref (dbus-pending-call.c:397)
==16881==    by 0x3439E3161F: g_hash_table_remove_internal (ghash.c:452)
==16881==    by 0x3443A0ED39: dbus_g_proxy_end_call_internal (dbus-gproxy.c:2403)
==16881==    by 0x3443A12234: dbus_g_proxy_call (dbus-gproxy.c:2601)
==16881==    by 0x60942C8: desktopcouch_session_new (desktopcouch-session.c:83)
==16881==    by 0x5E90CE3: e_book_backend_couchdb_load_source (e-book-backend-couchdb.c:1019)
==16881==    by 0x343AE145EC: e_book_backend_load_source (e-book-backend.c:269)
==16881==    by 0x343AE148C3: e_book_backend_open (e-book-backend.c:323)
==16881==    by 0x343AE18781: operation_thread (e-data-book.c:103)
==16881==    by 0x3439E6BBC3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==16881==    by 0x3439E69445: g_thread_create_proxy (gthread.c:1897)
==16881==    by 0x3438606CCA: start_thread (pthread_create.c:301)
==16881==    by 0x3437EE0C2C: clone (clone.S:115)
==16881==  Address 0x4e4dc90 is 0 bytes inside a block of size 56 free'd
==16881==    at 0x4A05187: free (vg_replace_malloc.c:325)
==16881==    by 0x344220C872: _dbus_connection_queue_received_message_link (dbus-connection.c:486)
==16881==    by 0x3442224598: _dbus_transport_queue_messages (dbus-transport.c:1154)
==16881==    by 0x3442224EDF: do_reading (dbus-transport-socket.c:851)
==16881==    by 0x34422255E4: socket_do_iteration (dbus-transport-socket.c:1162)
==16881==    by 0x344222431C: _dbus_transport_do_iteration (dbus-transport.c:980)
==16881==    by 0x344220EDD4: _dbus_connection_do_iteration_unlocked (dbus-connection.c:1206)
==16881==    by 0x3442210142: _dbus_connection_block_pending_call (dbus-connection.c:2412)
==16881==    by 0x3443A0ECBD: dbus_g_proxy_end_call_internal (dbus-gproxy.c:2272)
==16881==    by 0x3443A12234: dbus_g_proxy_call (dbus-gproxy.c:2601)
==16881==    by 0x60942C8: desktopcouch_session_new (desktopcouch-session.c:83)
==16881==    by 0x5E90CE3: e_book_backend_couchdb_load_source (e-book-backend-couchdb.c:1019)
==16881==    by 0x343AE145EC: e_book_backend_load_source (e-book-backend.c:269)
==16881==    by 0x343AE148C3: e_book_backend_open (e-book-backend.c:323)
==16881==    by 0x343AE18781: operation_thread (e-data-book.c:103)
==16881==    by 0x3439E6BBC3: g_thread_pool_thread_proxy (gthreadpool.c:319)
==16881==    by 0x3439E69445: g_thread_create_proxy (gthread.c:1897)
==16881==    by 0x3438606CCA: start_thread (pthread_create.c:301)
==16881==    by 0x3437EE0C2C: clone (clone.S:115)
==16881== 

** (e-addressbook-factory:16881): WARNING **: Couldn't get port for desktopcouch: Did not receive a reply. Possible causes include: the remote application did not send a reply, the message bus security policy blocked the reply, the reply timeout expired, or the network connection was broken.
erver is up and running...
==16881== 
==16881== HEAP SUMMARY:
==16881==     in use at exit: 576,106 bytes in 5,206 blocks
==16881==   total heap usage: 13,486 allocs, 8,280 frees, 1,470,654 bytes allocated
==16881== 
==16881== LEAK SUMMARY:
==16881==    definitely lost: 8,488 bytes in 3 blocks
==16881==    indirectly lost: 0 bytes in 0 blocks
==16881==      possibly lost: 243,992 bytes in 152 blocks
==16881==    still reachable: 323,626 bytes in 5,051 blocks
==16881==         suppressed: 0 bytes in 0 blocks
==16881== Rerun with --leak-check=full to see details of leaked memory
==16881== 
==16881== For counts of detected and suppressed errors, rerun with: -v
==16881== ERROR SUMMARY: 2 errors from 2 contexts (suppressed: 6 from 6)

Comment 16 abrt-bot 2012-03-30 12:01:54 UTC
Backtrace analysis of bugs across components suggests the actual bug is in component dbus instead of component evolution-couchdb, reassigning to dbus.

Bugs which were found to be similar to this bug: 
  GConf: bug #743706
  anyremote: bug #560182
  evolution: bug #542092
  evolution-data-server: bug #550443, bug #560734, bug #696529, bug #744925, bug #769000
  python: bug #618895
  sectool: bug #655418
  system-config-printer: bug #542290, bug #544523, bug #618906

This comment is automatically generated.

Comment 17 abrt-bot 2012-03-30 12:02:19 UTC
*** Bug 743706 has been marked as a duplicate of this bug. ***

Comment 18 abrt-bot 2012-03-30 12:02:37 UTC
*** Bug 655418 has been marked as a duplicate of this bug. ***

Comment 19 Fedora End Of Life 2012-08-16 12:57:22 UTC
This message is a notice that Fedora 14 is now at end of life. Fedora 
has stopped maintaining and issuing updates for Fedora 14. It is 
Fedora's policy to close all bug reports from releases that are no 
longer maintained.  At this time, all open bugs with a Fedora 'version'
of '14' have been closed as WONTFIX.

(Please note: Our normal process is to give advanced warning of this 
occurring, but we forgot to do that. A thousand apologies.)

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, feel free to reopen 
this bug and simply change the 'version' to a later Fedora version.

Bug Reporter: Thank you for reporting this issue and we are sorry that 
we were unable to fix it before Fedora 14 reached end of life. If you 
would still like to see this bug fixed and are able to reproduce it 
against a later version of Fedora, you are encouraged to click on 
"Clone This Bug" (top right of this page) and open it against that 
version of Fedora.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events.  Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

The process we are following is described here: 
http://fedoraproject.org/wiki/BugZappers/HouseKeeping