pasting into the composer crashes evolution

[Brian J. Murrell]

Binary package hint: evolution

Intermittently when I paste into a composer window I get the following crash:

(evolution:30776): GLib-GObject-CRITICAL **: g_object_unref: assertion `G_IS_OBJECT (object)' failed

(evolution:30776): GLib-GObject-WARNING **: instance with invalid (NULL) class pointer

(evolution:30776): GLib-GObject-CRITICAL **: g_signal_emit_valist: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed

(evolution:30776): GLib-GObject-WARNING **: instance with invalid (NULL) class pointer

(evolution:30776): GLib-GObject-CRITICAL **: g_signal_handlers_destroy: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb66988c0 (LWP 30776)]
0xb6ef9379 in IA__g_datalist_id_set_data_full (datalist=0x87300b0, key_id=49,
    data=0x0, destroy_func=0)
    at /build/buildd/glib2.0-2.15.0/glib/gdataset.c:216
216 /build/buildd/glib2.0-2.15.0/glib/gdataset.c: No such file or directory.
 in /build/buildd/glib2.0-2.15.0/glib/gdataset.c
(gdb) where
#0 0xb6ef9379 in IA__g_datalist_id_set_data_full (datalist=0x87300b0,
    key_id=49, data=0x0, destroy_func=0)
    at /build/buildd/glib2.0-2.15.0/glib/gdataset.c:216
#1 0xb6f90667 in g_object_real_dispose (object=0x87300a8)
    at /build/buildd/glib2.0-2.15.0/gobject/gobject.c:533
#2 0xb75f3c41 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#3 0x087300a8 in ?? ()
#4 0x00000002 in ?? ()
#5 0x00000000 in ?? ()
(gdb)

I've just added libgtk2.0-0-dbg to my system to get a better stack trace next time.

Please advise on how to collect any further information you may require.

[Pedro Villavicencio (pedro)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. However, your crash report is either missing or challenging to deal with as a ".crash" file. Please follow these instuctions to have apport report a new bug about your crash that can be dealt with by the automatic retracer.

If you are using Ubuntu with the Gnome desktop environment - launch nautilus and navigate to your /var/crash directory and double click on the crash report you wish to submit.

I'm closing this bug report since the process outlined above will automatically open a new bug report which can then dealt with more efficiently. Thanks in advance for your cooperation and understanding.

[Sebastien Bacher (seb128)]

Thank you for your bug, the description is similar to http://bugzilla.gnome.org/show_bug.cgi?id=504280

[Sebastien Bacher (seb128)]

The backtrace is similar to http://bugzilla.gnome.org/show_bug.cgi?id=505819 though

[Brian J. Murrell (brian-interlinx)]

Pedro: Bzzzt. I cannot follow your procedure for several reasons:

a) apport is not invoked on this crash. it simply falls to a shell prompt.

b) 144767 prevents me from being able to use apport. i'd love nothing more than to be sending you the apport reports of all of the stuff that crashes here but this bug prevents it and nobody seems to care about fixing it.

c) sending crash dumps from an application like evolution discloses far too much sensitive information such as personal account data and account data at my place of employment. i could get fired for such an act. i wonder how many people breech their employment terms by uploading apport data with their place-of-employment account data in it.

[Brian J. Murrell (brian-interlinx)]

On Tue, 2008-01-08 at 18:12 +0000, Sebastien Bacher wrote:
> The backtrace is similar to
> http://bugzilla.gnome.org/show_bug.cgi?id=505819 though

Wow! Indeed so!

b.

[Brian J. Murrell (brian-interlinx)]

Latest stack trace:

0xb6ef1379 in IA__g_datalist_id_set_data_full (datalist=0x84ae4a0, key_id=49,
    data=0x0, destroy_func=0)
    at /build/buildd/glib2.0-2.15.0/glib/gdataset.c:216
216 /build/buildd/glib2.0-2.15.0/glib/gdataset.c: No such file or directory.
 in /build/buildd/glib2.0-2.15.0/glib/gdataset.c
(gdb) where
#0 0xb6ef1379 in IA__g_datalist_id_set_data_full (datalist=0x84ae4a0,
    key_id=49, data=0x0, destroy_func=0)
    at /build/buildd/glib2.0-2.15.0/glib/gdataset.c:216
#1 0xb6f88667 in g_object_real_dispose (object=0x84ae498)
    at /build/buildd/glib2.0-2.15.0/gobject/gobject.c:533
#2 0xb75ebc41 in gtk_object_dispose (gobject=0x84ae498)
    at /build/buildd/gtk+2.0-2.12.3/gtk/gtkobject.c:423
#3 0xb76f1631 in gtk_widget_dispose (object=0x84ae498)
    at /build/buildd/gtk+2.0-2.12.3/gtk/gtkwidget.c:7851
#4 0xb6f8895c in IA__g_object_unref (_object=0x84ae498)
    at /build/buildd/glib2.0-2.15.0/gobject/gobject.c:1765
#5 0xb6faaa9c in IA__g_value_unset (value=0xbfae436c)
    at /build/buildd/glib2.0-2.15.0/gobject/gvalue.c:155
#6 0xb6f9e3b9 in IA__g_signal_emit_valist (instance=0x8548370, signal_id=91,
    detail=0, var_args=0xbfae458c "\230�J\b����\033")
    at /build/buildd/glib2.0-2.15.0/gobject/gsignal.c:2228
#7 0xb6f9e879 in IA__g_signal_emit (instance=0x8548370, signal_id=91,
    detail=0) at /build/buildd/glib2.0-2.15.0/gobject/gsignal.c:2243
#8 0xb752e064 in IA__gtk_container_remove (container=0x8548370,
    widget=0x84ae498) at /build/buildd/gtk+2.0-2.12.3/gtk/gtkcontainer.c:1187
#9 0xb76f160d in gtk_widget_dispose (object=0x84ae498)
    at /build/buildd/gtk+2.0-2.12.3/gtk/gtkwidget.c:7843
#10 0xb6f8895c in IA__g_object_unref (_object=0x84ae498)
    at /build/buildd/glib2.0-2.15.0/gobject/gobject.c:1765
#11 0xb7b47b66 in ?? () from /usr/lib/libgtkhtml-3.14.so.19
#12 0x084ae498 in ?? ()
#13 0x00000050 in ?? ()
#14 0x01000000 in ?? ()
#15 0xb7b7897c in ?? () from /usr/lib/libgtkhtml-3.14.so.19
#16 0x0823b3c0 in ?? ()
#17 0x0823b3c0 in ?? ()
#18 0xbfae4638 in ?? ()
#19 0xb7b39f51 in ?? () from /usr/lib/libgtkhtml-3.14.so.19
#20 0x0823b3c0 in ?? ()
#21 0x00000050 in ?? ()
#22 0x00000000 in ?? ()

I've installed libgtkhtml3.14-dbg to get a better trace next time.

One that thing that really sucks with this is that sometimes it hits when I send a message (but after it's cleared the "evo crashed do you want to recover in-progress messages" flag) and so then evo crashes without sending the message and without giving me an option to recover the message before the crash. :-(

Damn. In taking the time to add to this bug report I've even forgotten what message I was sending on my last crash so I can't even rewrite it from scratch.

[Brian J. Murrell (brian-interlinx)]

OK. A bit more this time:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb67058c0 (LWP 8337)]
0xb6f66379 in IA__g_datalist_id_set_data_full (datalist=0x85dc0b0, key_id=49,
    data=0x0, destroy_func=0)
    at /build/buildd/glib2.0-2.15.0/glib/gdataset.c:216
216 /build/buildd/glib2.0-2.15.0/glib/gdataset.c: No such file or directory.
 in /build/buildd/glib2.0-2.15.0/glib/gdataset.c
(gdb) where
#0 0xb6f66379 in IA__g_datalist_id_set_data_full (datalist=0x85dc0b0,
    key_id=49, data=0x0, destroy_func=0)
    at /build/buildd/glib2.0-2.15.0/glib/gdataset.c:216
#1 0xb6ffd667 in g_object_real_dispose (object=0x85dc0a8)
    at /build/buildd/glib2.0-2.15.0/gobject/gobject.c:533
#2 0xb7660c41 in gtk_object_dispose (gobject=0x85dc0a8)
    at /build/buildd/gtk+2.0-2.12.3/gtk/gtkobject.c:423
#3 0xb7766631 in gtk_widget_dispose (object=0x85dc0a8)
    at /build/buildd/gtk+2.0-2.12.3/gtk/gtkwidget.c:7851
#4 0xb6ffde30 in IA__g_object_run_dispose (object=0x85dc0a8)
    at /build/buildd/glib2.0-2.15.0/gobject/gobject.c:573
#5 0xb766093e in IA__gtk_object_destroy (object=0x85dc0a8)
    at /build/buildd/gtk+2.0-2.12.3/gtk/gtkobject.c:403
#6 0xb755d0af in gtk_bin_forall (container=0x9088d30, include_internals=0,
    callback=0x8069140, callback_data=0x0)
    at /build/buildd/gtk+2.0-2.12.3/gtk/gtkbin.c:133
#7 0xb769cb21 in gtk_scrolled_window_forall (container=0x9088d30,
    include_internals=0, callback=0xb7766890 <IA__gtk_widget_destroy>,
    callback_data=0x0)
    at /build/buildd/gtk+2.0-2.12.3/gtk/gtkscrolledwindow.c:1021
#8 0xb75a2657 in IA__gtk_container_foreach (container=0x9088d30,
    callback=0xb7766890 <IA__gtk_widget_destroy>, callback_data=0x0)
    at /build/buildd/gtk+2.0-2.12.3/gtk/gtkcontainer.c:1480
#9 0xb75a2f80 in gtk_container_destroy (object=0x9088d30)
    at /build/buildd/gtk+2.0-2.12.3/gtk/gtkcontainer.c:1020
#10 0xb769f578 in gtk_scrolled_window_destroy (object=0x9088d30)
    at /build/buildd/gtk+2.0-2.12.3/gtk/gtkscrolledwindow.c:799
#11 0xb700940f in IA__g_cclosure_marshal_VOID__VOID (closure=0x8071138,
    return_value=0x0, n_param_values=1, param_values=0xbf879b08,
    invocation_hint=0xbf879a0c, marshal_data=0xb769f4d0)
    at /build/buildd/glib2.0-2.15.0/gobject/gmarshal.c:77
#12 0xb6ffa019 in g_type_class_meta_marshal (closure=0x8071138,
    return_value=0x0, n_param_values=1, param_values=0xbf879b08,
    invocation_hint=0xbf879a0c, marshal_data=0x4c)
    at /build/buildd/glib2.0-2.15.0/gobject/gclosure.c:567
#13 0xb6ffb7cf in IA__g_closure_invoke (closure=0x8071138, return_value=0x0,
    n_param_values=1, param_values=0xbf879b08, invocation_hint=0xbf879a0c)
    at /build/buildd/glib2.0-2.15.0/gobject/gclosure.c:490
#14 0xb7011d14 in signal_emit_unlocked_R (node=0x8071180, detail=0,
    instance=0x9088d30, emission_return=0x0, instance_and_params=0xbf879b08)
    at /build/buildd/glib2.0-2.15.0/gobject/gsignal.c:2556
#15 0xb7013527 in IA__g_signal_emit_valist (instance=0x9088d30, signal_id=2,
    detail=0,
    var_args=0xbf879d3c "|]\206�|]\206�0\215\b\th\235\207�1fv�0\215\b\t0\215\b\t\210\235\207�\200�\002�\200�\002�0\215\b\t\210\235\207�0���0\215\b\tP")
    at /build/buildd/g...

[Sebastien Bacher (seb128)]

Thanks for the updated backtraces, that's enough information. You can also let apport collect the crash and use apport-retrace to get easily a debug backtraces

[Pedro Villavicencio (pedro)]

fixed upstream, thanks for reporting.

[Sebastien Bacher (seb128)]

the bug is fixed in hardy now