Description of problem: Evolution crashes on a particular message. Version-Release number of selected component: evolution-3.6.0-1.fc18 Additional info: libreport version: 2.0.14 abrt_version: 2.0.13 backtrace_rating: 4 cmdline: evolution crash_function: g_malloc kernel: 3.6.0-0.rc7.git1.4.fc18.x86_64 truncated backtrace: :Thread no. 1 (10 frames) : #6 g_malloc at gmem.c:159 : #7 g_strdup at gstrfuncs.c:364 : #8 e_mail_formatter_header_new at e-mail-formatter.c:1535 : #9 e_mail_formatter_add_header at e-mail-formatter.c:1460 : #10 e_mail_formatter_set_default_headers at e-mail-formatter.c:1431 : #11 g_type_create_instance at gtype.c:1890 : #12 g_object_constructor at gobject.c:1854 : #15 e_mail_formatter_new at e-mail-formatter.c:723 : #16 handle_mail_request at e-mail-request.c:114 : #17 run_in_thread at gsimpleasyncresult.c:869
Created attachment 618524 [details] File: core_backtrace
Created attachment 618525 [details] File: environ
Created attachment 618526 [details] File: backtrace
Created attachment 618527 [details] File: limits
Created attachment 618528 [details] File: cgroup
Created attachment 618529 [details] File: maps
Created attachment 618530 [details] File: dso_list
Created attachment 618531 [details] File: build_ids
Created attachment 618532 [details] File: open_fds
Created attachment 618533 [details] File: var_log_messages
Thanks for a bug report. I moved this upstream as [1]. Please see [1] for any further updates. If possible, please CC yourself there, in case upstream developers will have additional questions. I see this crashed when formatting Face header, though it seems like some memory corruption on the first look. Can you reliably reproduce this with the certain message, please? If so, would it be possible to share it, if not in the upstream bugzilla, then at least by sending it to me directly, with a subject being filled with a bug ID and the message zipped as an attachment? [1] https://bugzilla.gnome.org/show_bug.cgi?id=686216