Note: This bug is displayed in read-only format because
the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Thanks for a bug report. It's a memory corruption bug, and the backtrace doesn't give any clue where it could happen, because the error is detected only when doing clean-up of a thread. I would try things like:
$ export G_SLICE=always-malloc,debug-blocks
possibly also environment variables described in this [1] thread (though I'm not sure whether it's supported in el6 versions of glibc), which should help to identify what caused the issue. Of course, being able to reproduce the issue under valgrind should also provide helpful information, say when you run evolution like this:
$ G_SLICE=always-malloc valgrind --num-callers=50 evolution &>log.txt
Note valgrind can avoid certain types of crashes and log about them only. Please be sure you have installed debuginfo packages for gtkhtml3, evolution-data-server, evolution and any other evolution related package you have installed, and that these debuginfo packages are of the same version as your binary packages.
[1] http://lists.fedoraproject.org/pipermail/devel/2012-June/168162.html
Created attachment 589453 [details] full backtrace Description of problem: Evolution crashed with this error after I used ctrl+l "reply list" keyboard shortcut Version-Release number of selected component (if applicable): evolution-2.28.3-25.2.el6.x86_64 glib2-2.22.5-7.el6.x86_64 How reproducible: random Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info: relevant part of backtrace: Program terminated with signal 11, Segmentation fault. #0 magazine_chain_pop_head (ix=0, magazine_chunks=<value optimized out>, count=4) at gslice.c:474 474 (*magazine_chunks)->data = chunk->next; Thread 1 (Thread 0x7f8953fff700 (LWP 7531)): #0 magazine_chain_pop_head (ix=0, magazine_chunks=<value optimized out>, count=4) at gslice.c:474 chunk = 0x1 #1 magazine_chain_prepare_fields (ix=0, magazine_chunks=<value optimized out>, count=4) at gslice.c:555 chunk1 = 0x2928d30 chunk2 = 0x2928d90 chunk3 = 0x2a1fc40 chunk4 = <value optimized out> #2 magazine_cache_push_magazine (ix=0, magazine_chunks=<value optimized out>, count=4) at gslice.c:626 current = <value optimized out> next = <value optimized out> prev = <value optimized out> #3 0x000000363ca56d43 in private_thread_memory_cleanup (data=0x7f89400008c0) at gslice.c:712 mag = 0x7f89400008d0 mags = {0x7f89400008d0, 0x7f8940000cc0} j = <value optimized out> tmem = 0x7f89400008c0 n_magazines = 63 ix = <value optimized out> #4 0x000000363ba078e9 in __nptl_deallocate_tsd (arg=0x7f8953fff700) at pthread_create.c:154 data = <value optimized out> level2 = 0x7f8953fffa10 idx = <value optimized out> cnt = <value optimized out>