evolution crashed with SIGSEGV in *__GI___libc_free()

[Gert Kulyk]

Binary package hint: evolution

The bug is always reproducible with 2.26.0-0ubuntu3, in earlier packages it did not occur. Steps to reproduce:

open Imap account
have look on your pop account
reopen imap account
try to filter messages

It occurs, too, when a notification about new mail arriving is sent. I've done a backtrace and a valgrind run, the latter is attached to this report.

ProblemType: Crash
Architecture: i386
CrashCounter: 1
DistroRelease: Ubuntu 9.04
ExecutablePath: /usr/bin/evolution
Package: evolution 2.26.0-0ubuntu3 [modified: usr/share/applications/evolution-mail.desktop]
ProcCmdline: evolution
ProcEnviron:
 SHELL=/bin/bash
 LANG=de_DE.UTF-8
Signal: 11
SourcePackage: evolution
StacktraceTop:
 *__GI___libc_free (mem=0x3) at malloc.c:3599
 IA__g_free (mem=0x3)
 html_style_free (style=0x8bdf828) at htmlstyle.c:122
 html_element_free (element=0x8d05740) at htmlengine.c:411
 remove_element (e=<value optimized out>, item=0x8621150)
Title: evolution crashed with SIGSEGV in *__GI___libc_free()
Uname: Linux 2.6.28-11-generic i686
UserGroups: adm admin audio cdrom dialout dip fax floppy fuse lpadmin netdev plugdev polkituser powerdev pulse-rt scanner tape users vboxusers video

[Apport retracing service (apport)]

StacktraceTop:*__GI___libc_free (mem=0x3) at malloc.c:3599
IA__g_free (mem=0x3)
html_style_free (style=0x8bdf828) at htmlstyle.c:122
html_element_free (element=0x8d05740) at htmlengine.c:411
remove_element (e=<value optimized out>, item=0x8621150)

[Sebastien Bacher (seb128)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. Please try to obtain a valgrind log following the instructions at https://wiki.ubuntu.com/Valgrind and attach the file to the bug report. This will greatly help us in tracking down your problem.

[Sebastien Bacher (seb128)]

those recent crashers could be the same cause, there is http://bugzilla.gnome.org/show_bug.cgi?id=578685 open already about a crash

[Gert Kulyk (gkulyk)]

Valgrind output is already attached, see: http://launchpadlibrarian.net/25130718/valgrind.log

[Sebastien Bacher (seb128)]

right thanks, I've added a comment on http://bugzilla.gnome.org/show_bug.cgi?id=578685 those seem similar issues

[Launchpad Janitor (janitor)]

This bug was fixed in the package evolution - 2.26.0-0ubuntu5

---------------
evolution (2.26.0-0ubuntu5) jaunty; urgency=low

  * debian/patches/92_incorrect_free_crasher.patch:
    - don't try to free a static string should fix lot of recent crashers
      (lp: #358104, #358223, #358615)

 -- Sebastien Bacher <email address hidden> Sat, 11 Apr 2009 15:39:19 +0200