Bug 906267
Summary: | [abrt] Use-after-free in impl_ShellView_setButtonIcon() | ||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Product: | Red Hat Enterprise Linux 6 | Reporter: | David Jaša <djasa> | ||||||||||||||||||||||||
Component: | evolution | Assignee: | Matthew Barnes <mbarnes> | ||||||||||||||||||||||||
Status: | CLOSED ERRATA | QA Contact: | Desktop QE <desktop-qa-list> | ||||||||||||||||||||||||
Severity: | unspecified | Docs Contact: | |||||||||||||||||||||||||
Priority: | unspecified | ||||||||||||||||||||||||||
Version: | 6.4 | CC: | lnovich, mcrha, tpelka | ||||||||||||||||||||||||
Target Milestone: | rc | Keywords: | Patch | ||||||||||||||||||||||||
Target Release: | --- | ||||||||||||||||||||||||||
Hardware: | x86_64 | ||||||||||||||||||||||||||
OS: | Unspecified | ||||||||||||||||||||||||||
Whiteboard: | abrt_hash:7027d480e9ccee3f3d115057f11c2fd3d965f439 | ||||||||||||||||||||||||||
Fixed In Version: | evolution-2.32.3-2.el6 | Doc Type: | Bug Fix | ||||||||||||||||||||||||
Doc Text: | Story Points: | --- | |||||||||||||||||||||||||
Clone Of: | Environment: | ||||||||||||||||||||||||||
Last Closed: | 2013-11-21 05:10:03 UTC | Type: | --- | ||||||||||||||||||||||||
Regression: | --- | Mount Type: | --- | ||||||||||||||||||||||||
Documentation: | --- | CRM: | |||||||||||||||||||||||||
Verified Versions: | Category: | --- | |||||||||||||||||||||||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||||||||||||||||||||
Cloudforms Team: | --- | Target Upstream Version: | |||||||||||||||||||||||||
Embargoed: | |||||||||||||||||||||||||||
Bug Depends On: | 883010 | ||||||||||||||||||||||||||
Bug Blocks: | |||||||||||||||||||||||||||
Attachments: |
|
Description
David Jaša
2013-01-31 10:34:01 UTC
Created attachment 690831 [details]
File: maps
Created attachment 690832 [details]
File: var_log_messages
Created attachment 690833 [details]
File: open_fds
Created attachment 690834 [details]
File: environ
Created attachment 690835 [details]
File: dso_list
Created attachment 690836 [details]
File: limits
Created attachment 690837 [details]
File: sosreport.tar.xz
Created attachment 690838 [details]
File: backtrace
Created attachment 690839 [details]
File: build_ids
Created attachment 690840 [details]
File: cgroup
This [1] is an upstream bugzilla with basically the same backtrace, but it is was not resolved. Are you able to reproduce this consistently? I do not know, maybe you had opened a new mail window (File->New Window), then you closed it and then switched online/offline? [1] https://bugzilla.gnome.org/show_bug.cgi?id=585104 (In reply to comment #12) > This [1] is an upstream bugzilla with basically the same backtrace, but it > is was not resolved. > > Are you able to reproduce this consistently? I do not know, maybe you had > opened a new mail window (File->New Window), then you closed it and then > switched online/offline? > > [1] https://bugzilla.gnome.org/show_bug.cgi?id=585104 Yes, when I tried the same now, evo crashed few minutes after it went online (the process was apparently finished this time because I synced my mail short time ago). This request was not resolved in time for the current release. Red Hat invites you to ask your support representative to propose this request, if still desired, for consideration in the next release of Red Hat Enterprise Linux. Created attachment 693456 [details]
evolution-2.28.3-button-icon-crash.patch
for evolution;
Patch to fix the problem. With respect of reproducer:
a) run evolution in mail (evolution -c mail)
b) choose menu File->New Window
c) close the new window
d) change folder in the left folder tree
it either crashes, or prints a runtime warning about e_shell_window_peek_shell(), or just run it under valgrind (valgrind evolution) and see an invalid meory read in impl_ShellView_setButtonIcon()/e_shell_window_peek_shell().
*** Bug 845052 has been marked as a duplicate of this bug. *** The patch might be obsolete, if the rebase bug will make it in, thus I make this depend on it. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2013-1540.html |