Version-Release number of selected component: evolution-3.16.3-2.fc22 Additional info: reporter: libreport-2.6.0 backtrace_rating: 4 cmdline: evolution crash_function: g_str_hash executable: /usr/bin/evolution global_pid: 950 kernel: 4.0.6-300.fc22.x86_64 runlevel: N 5 type: CCpp uid: 1000 Truncated backtrace: Thread no. 1 (10 frames) #0 g_str_hash at /lib64/libglib-2.0.so.0 #1 g_hash_table_lookup at /lib64/libglib-2.0.so.0 #2 e_mail_label_list_store_lookup at /usr/lib64/evolution/libevolution-mail.so #3 add_label_if_known at /usr/lib64/evolution/libevolution-mail.so #4 add_all_labels_foreach at /usr/lib64/evolution/libevolution-mail.so #5 for_node_and_subtree_if_collapsed at /usr/lib64/evolution/libevolution-mail.so #6 ml_tree_value_at_ex.isra at /usr/lib64/evolution/libevolution-mail.so #7 ect_draw at /usr/lib64/evolution/libevolution-util.so #8 e_cell_draw at /usr/lib64/evolution/libevolution-util.so #9 eti_draw at /usr/lib64/evolution/libevolution-util.so
Created attachment 1049492 [details] File: backtrace
Created attachment 1049493 [details] File: cgroup
Created attachment 1049494 [details] File: core_backtrace
Created attachment 1049495 [details] File: dso_list
Created attachment 1049496 [details] File: environ
Created attachment 1049497 [details] File: limits
Created attachment 1049498 [details] File: maps
Created attachment 1049499 [details] File: mountinfo
Created attachment 1049500 [details] File: namespaces
Created attachment 1049501 [details] File: open_fds
Created attachment 1049502 [details] File: proc_pid_status
Created attachment 1049503 [details] File: var_log_messages
Thanks for a bug report. I see from the backtrace that this crashed when the message list has been drawn, concretely the column with message Labels. I tried to reproduce it here, by adding the column into the view, but evolution didn't crash here. I could be just lucky, it's also possible. Are you able to reproduce the crash consistently (probably in certain folder, when scrolling its content and thus causing redraw of the Labels column), please?
Nope, this is not anything that I am able to reproduce - it just happened once, while I was browsing message using the Space key repeatedly. What is interesting that I do not use 'Labels' column in any of my folders...
You are right, this is not only for the Labels column, I forgot it is also used when the color of the row is determined - in case only one label is set on the message the color of that label is used as the text color. I'm afraid this is part of some use-after-free, some part of the code overwriting some memory which it shouldn't. I see some odd crashes reported here and there, which perfectly fits to such use-after-free.
Another user experienced a similar problem: I think I clicked on a message of folder. reporter: libreport-2.6.2 backtrace_rating: 4 cmdline: evolution crash_function: g_str_hash executable: /usr/bin/evolution global_pid: 31701 kernel: 4.1.8-200.fc22.x86_64 package: evolution-3.16.5-3.fc22 reason: evolution killed by SIGSEGV runlevel: N 5 type: CCpp uid: 1000
*** This bug has been marked as a duplicate of bug 1273751 ***