Description of problem:
SEGFAULT in gnome clock-applet

Version-Release number of selected component (if applicable):
libsoup-2.28.2-1.el6.x86_64

How reproducible:
random

Actual results:
clock-applet gets SEGFAULT

Expected results:
clock-applet should run with no problem


Additional info:
similar to frequent bug on F12 and F13
https://bugzilla.redhat.com/show_bug.cgi?id=590834

GDB trace for program....
(gdb) bt full
#0  do_idle_run_queue (session=0x2679680) at soup-session-async.c:408
        priv = <value optimized out>
#1  0x00007fa252c5d50c in socket_connect_result (sock=0x26bdf10, status=200, user_data=0x2191b00) at soup-connection.c:389
        data = 0x2191b00
        priv = 0x2695940
#2  0x00007fa252c779ab in idle_connect_result (user_data=0x205a040) at soup-socket.c:594
        sacd = 0x205a040
        priv = <value optimized out>
        status = <value optimized out>
#3  0x00007fa252c77b69 in connect_watch (iochannel=<value optimized out>, condition=<value optimized out>, data=0x205a040) at soup-socket.c:621
        sacd = 0x205a040
        priv = 0x26bdf30
        error = 0
        len = 4
#4  0x00007fa25473bf0e in g_main_dispatch (context=0x1fef8c0) at gmain.c:1960
        dispatch = 0x7fa2547712f0 <g_io_unix_dispatch>
        was_in_call = 0
        user_data = 0x205a040
        callback = 0x7fa252c77ad0 <connect_watch>
        cb_funcs = 0x7fa2549e7970
        cb_data = 0x27ebd30
        current_source_link = {data = 0x2130e00, next = 0x0}
        need_destroy = <value optimized out>
        source = 0x2130e00
        current = 0x2043610
        i = <value optimized out>
#5  IA__g_main_context_dispatch (context=0x1fef8c0) at gmain.c:2513
No locals.
#6  0x00007fa25473f938 in g_main_context_iterate (context=0x1fef8c0, block=1, dispatch=1, self=<value optimized out>) at gmain.c:2591
        max_priority = 2147483647
        timeout = 419
        some_ready = 1
        nfds = 15
        allocated_nfds = <value optimized out>
        fds = <value optimized out>
        __PRETTY_FUNCTION__ = "g_main_context_iterate"
#7  0x00007fa25473fd55 in IA__g_main_loop_run (loop=0x20412f0) at gmain.c:2799
        self = 0x1fcc130
        __PRETTY_FUNCTION__ = "IA__g_main_loop_run"
#8  0x00007fa255360106 in bonobo_main () at bonobo-main.c:311
        loop = 0x20412f0
#9  0x00007fa25535e4e2 in bonobo_generic_factory_main_timeout (act_iid=<value optimized out>, factory_cb=<value optimized out>, user_data=<value optimized out>, 
    quit_timeout=<value optimized out>) at bonobo-generic-factory.c:411
        context = 0x20306a0
        signal = 11
        factory = 0x2030760
#10 0x00007fa2579dc801 in panel_applet_factory_main_closure (iid=<value optimized out>, applet_type=33820144, closure=0x2040f80) at panel-applet.c:1774
        retval = <value optimized out>
        display_iid = 0x2040fd0 ":0.0,OAFIID:GNOME_ClockApplet_Factory"
        data = 0x2040fb0
        __PRETTY_FUNCTION__ = "panel_applet_factory_main_closure"
#11 0x00000000004119fd in main (argc=1, argv=0x7ffff109a798) at clock.c:3761
        context = 0x1fba0d0
        error = 0x0
        retval = <value optimized out>




SOURCE CODE
static void
do_idle_run_queue (SoupSession *session)
{
        SoupSessionAsyncPrivate *priv = SOUP_SESSION_ASYNC_GET_PRIVATE (session);

        if (!priv->idle_run_queue_source) {
                priv->idle_run_queue_source = soup_add_completion (
                        soup_session_get_async_context (session),
                        idle_run_queue, session);
        }
}




NULL Pointer reference. Value of %rax remains 0x0 after g_type_instance_get_private called for session. (similar to bugzilla attachment https://bugzilla.redhat.com/attachment.cgi?id=412935 )
We need to check if variable 'priv' of type SoupSessionAsyncPrivate structure is NULL before accessing it's element. Does not look like fixed in upstream.
=> rax            0x0	0
rbx            0x12e9260	19829344
rcx            0x7f260617b940	139801287702848
rdx            0x0	0
rsi            0x0	0
rdi            0x2	2
rbp            0x1276840	0x1276840
rsp            0x7fff53fd7860	0x7fff53fd7860
r8             0x1301690	19928720
r9             0x1	1
r10            0x1	1
r11            0x0	0
r12            0xc8	200
r13            0x129fcd0	19528912
r14            0x7f2602d98d30	139801233296688
r15            0xcff100	13627648
rip            0x7f260100d731	0x7f260100d731 <do_idle_run_queue+33>
eflags         0x10206	[ PF IF RF ]
Dump of assembler code for function do_idle_run_queue:
   0x00007f260100d710 <+0>:	mov    %rbx,-0x10(%rsp)
   0x00007f260100d715 <+5>:	mov    %rbp,-0x8(%rsp)
   0x00007f260100d71a <+10>:	sub    $0x18,%rsp
   0x00007f260100d71e <+14>:	mov    %rdi,%rbp
   0x00007f260100d721 <+17>:	callq  0x7f2600fe76b8 <soup_session_async_get_type@plt>
   0x00007f260100d726 <+22>:	mov    %rbp,%rdi
   0x00007f260100d729 <+25>:	mov    %rax,%rsi
   0x00007f260100d72c <+28>:	callq  0x7f2600fe8de8 <g_type_instance_get_private@plt>
=> 0x00007f260100d731 <+33>:	cmpq   $0x0,(%rax)