rawhide report: 20060131 changes

Erwin Rol mailinglists at erwinrol.com
Tue Jan 31 13:42:43 UTC 2006


Build System wrote:
> evolution-2.5.90-1
> ------------------
> * Mon Jan 30 2006 David Malcolm <dmalcolm at redhat.com> - 2.5.90-1
> - 2.5.90
> - trimmed patches 805 and 808, as parts of these got merged upstream
> - trimmed and regenerated patch 806 to track upstream
> - removed the mail-to-task plugin XML UI file
>   
Evolution crashes with the backtrace at the end of this mail.
The crash seems to happen in the marked source line below:

PS: sorry for the line wraps cause i am not really used to use tunderbird.


static GSList *
get_glyph_items_in_range (HTMLTextSlave *slave, HTMLPainter *painter, 
int start_offset, int len)
{
         HTMLTextPangoInfo *pi = html_text_get_pango_info (slave->owner, 
painter);
         int i, offset, end_offset, n_items = 0;
         GSList *glyph_items = NULL;

         start_offset += slave->posStart;
         end_offset = start_offset + len;

         for (offset = 0, i = 0; i < pi->n; i ++) {
                 PangoItem *item = pi->entries [i].glyph_item.item;

                 /* do item and slave overlap? */
                 if (MAX (offset, start_offset) < MIN (offset + 
item->num_chars, end_offset)) {
                         HTMLTextSlaveGlyphItem *glyph_item = g_new 
(HTMLTextSlaveGlyphItem, 1);

                         /* use text glyph item */
                         glyph_item->type = 
HTML_TEXT_SLAVE_GLYPH_ITEM_PARENTAL;
                         glyph_item->glyph_item = pi->entries 
[i].glyph_item;
                         glyph_item->widths = pi->entries [i].widths;

                         if (start_offset > offset) {
                                 /* need to cut the beginning of current 
glyph item */
                                 PangoGlyphItem *tmp_gi;
                                 int split_index;

                                 glyph_item->type = 
HTML_TEXT_SLAVE_GLYPH_ITEM_CREATED;
                                 glyph_item->widths = NULL;
                                 glyph_item->glyph_item.item = 
pango_item_copy (glyph_item->glyph_item.item);
                                 glyph_item->glyph_item.glyphs = 
pango_glyph_string_copy (glyph_item->glyph_item.glyphs);

                                 split_index = g_utf8_offset_to_pointer 
(slave->owner->text + item->offset, start_offset - offset)
                                         - (slave->owner->text + 
item->offset);
                                 tmp_gi = pango_glyph_item_split 
(&glyph_item->glyph_item, slave->owner->text, split_index);

                                 /* free the beginning we don't need */
                                 pango_item_free (tmp_gi->item);
                                 pango_glyph_string_free (tmp_gi->glyphs);
                                 g_free (tmp_gi);

                         }

                         if (offset + item->num_chars > end_offset) {
                                 /* need to cut the ending of current 
glyph item */
                                 PangoGlyphItem tmp_gi1, *tmp_gi2;
                                 int split_index;

                                 if (glyph_item->type == 
HTML_TEXT_SLAVE_GLYPH_ITEM_PARENTAL) {
                                         tmp_gi1.item = pango_item_copy 
(glyph_item->glyph_item.item);
                                         tmp_gi1.glyphs = 
pango_glyph_string_copy (glyph_item->glyph_item.glyphs);
                                 } else
                                         tmp_gi1 = glyph_item->glyph_item;

                                 split_index = g_utf8_offset_to_pointer 
(slave->owner->text + tmp_gi1.item->offset, end_offset - MAX 
(start_offset, offset))
                                         - (slave->owner->text + 
tmp_gi1.item->offset);
                                 tmp_gi2 = pango_glyph_item_split 
(&tmp_gi1, slave->owner->text, split_index);

                                 glyph_item->glyph_item = *tmp_gi2;

                                 /* free the tmp1 content and tmp2 
container, but not the content */
                                 pango_item_free (tmp_gi1.item);
                                 pango_glyph_string_free (tmp_gi1.glyphs);




---->
---->                                g_free (tmp_gi2);
---->



                                 glyph_item->type = 
HTML_TEXT_SLAVE_GLYPH_ITEM_CREATED;
                                 glyph_item->widths = NULL;
                         }

                         glyph_items = g_slist_prepend (glyph_items, 
glyph_item);
                         n_items ++;
                 }

                 if (offset + item->num_chars >= end_offset)
                         break;
                 offset += item->num_chars;
         }

         if (glyph_items) {
                 GSList *reversed;

                 reversed = g_slist_reverse (glyph_items);
                 glyph_items = reorder_glyph_items (reversed, n_items);
                 g_slist_free (reversed);
         }

         return glyph_items;
}


(gdb) r
Starting program: /usr/bin/evolution
[Thread debugging using libthread_db enabled]
[New Thread 47726490694080 (LWP 17996)]
CalDAV Eplugin starting up ...
Detaching after fork from child process 18001.

(evolution:17996): camel-WARNING **: camel_exception_get_id called with
NULL parameter.
[New Thread 1084229984 (LWP 18002)]
[New Thread 1094719840 (LWP 18003)]
libnm_glib_get_nm_state(): org.freedesktop.DBus.Error.ServiceUnknown raised:
The name org.freedesktop.NetworkManager was not provided by any
.service files

[Thread 1094719840 (LWP 18003) exited]
[New Thread 1105209696 (LWP 18004)]
libnm_glib_get_nm_state(): org.freedesktop.DBus.Error.ServiceUnknown raised:
The name org.freedesktop.NetworkManager was not provided by any
.service files

[New Thread 1094719840 (LWP 18005)]
[New Thread 1115699552 (LWP 18006)]
[New Thread 1126189408 (LWP 18007)]
[Thread 1126189408 (LWP 18007) exited]
[New Thread 1126189408 (LWP 18009)]
[New Thread 1136679264 (LWP 18011)]
*** glibc detected *** /usr/bin/evolution: free(): invalid pointer:
0x0000000001372090 ***
======= Backtrace: =========
/lib64/libc.so.6[0x3e1be6c57e]
/lib64/libc.so.6(__libc_free+0x84)[0x3e1be6c704]
/usr/lib64/libgtkhtml-3.8.so.15(html_text_slave_get_glyph_items+0x1e6)[0x2b683027b682]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b683027c4d4]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b683023b332]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b683023e364]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b683023b332]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b6830241fd1]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b68302749c3]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b6830272696]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b683023b332]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b683023e364]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b683023b332]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b6830241fd1]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b68302749c3]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b6830272696]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b683023b332]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b683023e364]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b683023b332]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b6830241fd1]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b6830256734]
/usr/lib64/libgtkhtml-3.8.so.15[0x2b6830234943]
/usr/lib64/libgtk-x11-2.0.so.0[0x368390fa50]
/usr/lib64/libgobject-2.0.so.0(g_closure_invoke+0x114)[0x368280ae68]
/usr/lib64/libgobject-2.0.so.0[0x368281a95b]
/usr/lib64/libgobject-2.0.so.0(g_signal_emit_valist+0x5e1)[0x368281b5f4]
/usr/lib64/libgobject-2.0.so.0(g_signal_emit+0x83)[0x368281ba1d]
/usr/lib64/libgtk-x11-2.0.so.0[0x36839d72e7]
/usr/lib64/libgtk-x11-2.0.so.0(gtk_main_do_event+0x499)[0x368390bd90]
/usr/lib64/libgdk-x11-2.0.so.0[0x368362ff99]
/usr/lib64/libgdk-x11-2.0.so.0(gdk_window_process_all_updates+0x84)[0x3683630112]
/usr/lib64/libgtk-x11-2.0.so.0[0x3683896e44]
/usr/lib64/libglib-2.0.so.0(g_main_context_dispatch+0x1ac)[0x3682624e91]
/usr/lib64/libglib-2.0.so.0[0x3682627cad]
/usr/lib64/libglib-2.0.so.0(g_main_loop_run+0x19e)[0x3682627ffe]
/usr/lib64/libbonobo-2.so.0(bonobo_main+0x46)[0x368462c904]
/usr/bin/evolution[0x4155d7]
/lib64/libc.so.6(__libc_start_main+0xf4)[0x3e1be1cde4]
/usr/bin/evolution[0x40a859]
======= Memory map: ========
00400000-0041d000 r-xp 00000000 09:00 14270621
/usr/bin/evolution-2.6
0051c000-00520000 rw-p 0001c000 09:00 14270621
/usr/bin/evolution-2.6
00520000-0137d000 rw-p 00520000 00:00 0
[heap]
40000000-40001000 ---p 40000000 00:00 0
40001000-40a01000 rwxp 40001000 00:00 0
40a01000-40a02000 ---p 40a01000 00:00 0
40a02000-41402000 rwxp 40a02000 00:00 0
41402000-41403000 ---p 41402000 00:00 0
41403000-41e03000 rwxp 41403000 00:00 0
41e03000-41e04000 ---p 41e03000 00:00 0
41e04000-42804000 rwxp 41e04000 00:00 0
42804000-42805000 ---p 42804000 00:00 0
42805000-43205000 rwxp 42805000 00:00 0
43205000-43206000 ---p 43205000 00:00 0
43206000-43c06000 rwxp 43206000 00:00 0
333c800000-333c83a000 r-xp 00000000 09:00 14257116
/usr/lib64/libfontconfig.so.1.0.4
333c83a000-333c939000 ---p 0003a000 09:00 14257116
/usr/lib64/libfontconfig.so.1.0.4
333c939000-333c93f000 rw-p 00039000 09:00 14257116
/usr/lib64/libfontconfig.so.1.0.4
333c93f000-333c941000 rw-p 333c93f000 00:00 0
333ca00000-333ca4a000 r-xp 00000000 09:00 14257706
/usr/lib64/libcairo.so.2.2.3
333ca4a000-333cb49000 ---p 0004a000 09:00 14257706
/usr/lib64/libcairo.so.2.2.3
333cb49000-333cb4b000 rw-p 00049000 09:00 14257706
/usr/lib64/libcairo.so.2.2.3
35e3900000-35e3907000 r-xp 00000000 09:00 14257219
/usr/lib64/libpopt.so.0.0.0
35e3907000-35e3a07000 ---p 00007000 09:00 14257219
/usr/lib64/libpopt.so.0.0.0
35e3a07000-35e3a08000 rw-p 00007000 09:00 14257219
/usr/lib64/libpopt.so.0.0.0
35e3b00000-35e3bc6000 r-xp 00000000 09:00 8814808
/lib64/libasound.so.2.0.0
35e3bc6000-35e3cc5000 ---p 000c6000 09:00 8814808
/lib64/libasound.so.2.0.0
35e3cc5000-35e
Program received signal SIGABRT, Aborted.
[Switching to Thread 47726490694080 (LWP 17996)]
0x0000003e1be2f215 in *__GI_raise (sig=Variable "sig" is not available.
) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
64        return INLINE_SYSCALL (tgkill, 3, pid, selftid, sig);
(gdb) bt
#0  0x0000003e1be2f215 in *__GI_raise (sig=Variable "sig" is not available.
) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#1  0x0000003e1be3093e in *__GI_abort () at abort.c:88
#2  0x0000003e1be65606 in __libc_message (do_abort=2, fmt=0x3e1bf152a8
"*** glibc detected *** %s: %s: 0x%s ***\n") at
../sysdeps/unix/sysv/linux/libc_fatal.c:170
#3  0x0000003e1be6c57e in _int_free (av=0x3e1c034980, mem=Variable "mem"
is not available.
) at malloc.c:5602
#4  0x0000003e1be6c704 in *__GI___libc_free (mem=Variable "mem" is not
available.
) at malloc.c:3433
#5  0x00002b683027b682 in html_text_slave_get_glyph_items
(slave=0x136bd30, painter=Variable "painter" is not available.
) at htmltextslave.c:634
#6  0x00002b683027c4d4 in draw (o=0x136bd30, p=0xa549a0, x=Variable "x"
is not available.
) at htmltextslave.c:782
#7  0x00002b683023b332 in draw (o=0xc05f80, p=0xa549a0, x=-349, y=-84,
width=1259, height=398, tx=349, ty=114) at htmlclue.c:270
#8  0x00002b683023e364 in draw (self=0xc05f80,
painter=dwarf2_read_address: Corrupted DWARF expression.
) at htmlclueflow.c:1338
#9  0x00002b683023b332 in draw (o=0x12a0d80, p=0xa549a0, x=-349, y=-84,
width=1259, height=398, tx=349, ty=84) at htmlclue.c:270
#10 0x00002b6830241fd1 in draw (o=0x12a0d80, p=0xa549a0, x=-349, y=-84,
width=1259, height=398, tx=349, ty=84) at htmlcluev.c:395
#11 0x00002b68302749c3 in draw (o=0x12a0d80, p=0xa549a0, x=-349, y=-84,
width=1259, height=398, tx=349, ty=84) at htmltablecell.c:174
#12 0x00002b6830272696 in draw (o=0x128f600, p=0xa549a0, x=-349, y=-84,
width=1259, height=398, tx=349, ty=84) at htmltable.c:1243
#13 0x00002b683023b332 in draw (o=0x129f270, p=0xa549a0, x=-348, y=-83,
width=1259, height=398, tx=348, ty=84) at htmlclue.c:270
#14 0x00002b683023e364 in draw (self=0x129f270,
painter=dwarf2_read_address: Corrupted DWARF expression.
) at htmlclueflow.c:1338
#15 0x00002b683023b332 in draw (o=0x128dcd0, p=0xa549a0, x=-348, y=-10,
width=1259, height=398, tx=348, ty=83) at htmlclue.c:270
#16 0x00002b6830241fd1 in draw (o=0x128dcd0, p=0xa549a0, x=-348, y=-10,
width=1259, height=398, tx=348, ty=10) at htmlcluev.c:395
#17 0x00002b68302749c3 in draw (o=0x128dcd0, p=0xa549a0, x=-348, y=-10,
width=1259, height=398, tx=348, ty=10) at htmltablecell.c:174
#18 0x00002b6830272696 in draw (o=0x75cc00, p=0xa549a0, x=-10, y=-10,
width=1259, height=398, tx=348, ty=10) at htmltable.c:1243
#19 0x00002b683023b332 in draw (o=0x12c0740, p=0xa549a0, x=-10, y=-10,
width=1259, height=398, tx=10, ty=10) at htmlclue.c:270
#20 0x00002b683023e364 in draw (self=0x12c0740,
painter=dwarf2_read_address: Corrupted DWARF expression.
) at htmlclueflow.c:1338
#21 0x00002b683023b332 in draw (o=0xc0c320, p=0xa549a0, x=0, y=0,
width=1259, height=398, tx=0, ty=10) at htmlclue.c:270
#22 0x00002b6830241fd1 in draw (o=0xc0c320, p=0xa549a0, x=0, y=0,
width=1259, height=398, tx=0, ty=0) at htmlcluev.c:395
#23 0x00002b6830256734 in html_engine_draw_real (e=0xa54690, x=0, y=0,
width=1259, height=398, expose=1) at htmlengine.c:4807
#24 0x00002b6830234943 in expose (widget=0x92ac60, event=0x7fffffa79b70)
at gtkhtml.c:1066
#25 0x000000368390fa50 in _gtk_marshal_BOOLEAN__BOXED (closure=0x695370,
return_value=0x7fffffa796a0, n_param_values=Variable "n_param_values" is
not available.
) at gtkmarshalers.c:83
#26 0x000000368280ae68 in IA__g_closure_invoke (closure=0x695370,
return_value=0x7fffffa796a0, n_param_values=2,
param_values=0x7fffffa797b0, invocation_hint=0x7fffffa79660) at
gclosure.c:490
#27 0x000000368281a95b in signal_emit_unlocked_R (node=0x6953e0,
detail=0, instance=0x92ac60, emission_return=0x7fffffa79990,
instance_and_params=0x7fffffa797b0) at gsignal.c:2476
#28 0x000000368281b5f4 in IA__g_signal_emit_valist (instance=0x92ac60,
signal_id=Variable "signal_id" is not available.
) at gsignal.c:2207
#29 0x000000368281ba1d in IA__g_signal_emit (instance=Variable
"instance" is not available.
) at gsignal.c:2241
#30 0x00000036839d72e7 in gtk_widget_event_internal (widget=0x92ac60,
event=0x7fffffa79b70) at gtkwidget.c:3735
#31 0x000000368390bd90 in IA__gtk_main_do_event (event=0x7fffffa79b70)
at gtkmain.c:1370
#32 0x000000368362ff99 in gdk_window_process_updates_internal
(window=0xbaa360) at gdkwindow.c:2215
#33 0x0000003683630112 in IA__gdk_window_process_all_updates () at
gdkwindow.c:2268
#34 0x0000003683896e44 in gtk_container_idle_sizer (data=Variable "data"
is not available.
) at gtkcontainer.c:1117
#35 0x0000003682624e91 in IA__g_main_context_dispatch (context=0x5537f0)
at gmain.c:1916
#36 0x0000003682627cad in g_main_context_iterate (context=0x5537f0,
block=1, dispatch=1, self=Variable "self" is not available.
) at gmain.c:2547
#37 0x0000003682627ffe in IA__g_main_loop_run (loop=0x69a860) at
gmain.c:2751
#38 0x000000368462c904 in bonobo_main () from /usr/lib64/libbonobo-2.so.0
#39 0x00000000004155d7 in main (argc=Variable "argc" is not available.
) at main.c:603
#40 0x0000003e1be1cde4 in __libc_start_main (main=0x41520d <main>,
argc=1, ubp_av=0x7fffffa7a208, init=Variable "init" is not available.
) at libc-start.c:231
#41 0x000000000040a859 in _start ()
#42 0x00007fffffa7a1f8 in ?? ()
#43 0x0000000000000000 in ?? ()







More information about the fedora-devel-list mailing list