evolution crashed with SIGSEGV in PK11_ListCerts()

[Baptiste Mille-Mathias]

Binary package hint: evolution

Evolution crashed immediatly when I started it (I was the first time I started it after the upgrade to Maverick).
the crash occurs each time I start evolution.

ProblemType: Crash
DistroRelease: Ubuntu 10.10
Package: evolution 2.30.2-0ubuntu11
ProcVersionSignature: Ubuntu 2.6.35-15.21-generic 2.6.35.1
Uname: Linux 2.6.35-15-generic x86_64
Architecture: amd64
Date: Thu Aug 19 18:33:00 2010
ExecutablePath: /usr/bin/evolution
InstallationMedia: Ubuntu 10.04 "Lucid Lynx" - Alpha amd64 (20100113)
ProcCmdline: evolution
ProcEnviron:
 PATH=(custom, user)
 LANG=fr_FR.utf8
 SHELL=/bin/bash
SegvAnalysis:
 Segfault happened at: 0x7f571cab405e: mov 0x28(%rdi),%rax
 PC (0x7f571cab405e) ok
 source "0x28(%rdi)" (0x00000028) not located in a known VMA region (needed readable region)!
 destination "%rax" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: evolution
StacktraceTop:
 ?? () from /usr/lib/libnss3.so
 ?? () from /usr/lib/libnss3.so
 PK11_ListCerts () from /usr/lib/libnss3.so
 ?? ()
 certificate_manager_config_init ()
Title: evolution crashed with SIGSEGV in PK11_ListCerts()
UserGroups: adm admin cdrom dialout kvm lpadmin plugdev sambashare

[Baptiste Mille-Mathias (bmillemathias)]

(gdb) run
Starting program: /usr/bin/evolution
[Thread debugging using libthread_db enabled]

(evolution:4846): camel-WARNING **: Failed to initialize NSS

Program received signal SIGSEGV, Segmentation fault.
nssTrustDomain_GetCertsFromCache (td=0x0, certListOpt=0x83e060) at tdcache.c:1155
1155 tdcache.c: Aucun fichier ou dossier de ce type.
 in tdcache.c
(gdb) thread apply all
Display all 94844 possibilities? (y or n)
(gdb) thread apply all bt

Thread 1 (Thread 0x7ffff7fad940 (LWP 4846)):
#0 nssTrustDomain_GetCertsFromCache (td=0x0, certListOpt=0x83e060) at tdcache.c:1155
#1 0x00007ffff5fe64f7 in NSSTrustDomain_TraverseCertificates (td=0x0, callback=0x7ffff5fac160 <pk11ListCertCallback>, arg=0x7fffffffda00) at trustdomain.c:1051
#2 0x00007ffff5fac06c in PK11_ListCerts (type=PK11CertListUnique, pwarg=0x0) at pk11cert.c:2364
#3 0x00007fffe5b156df in ?? () from /usr/lib/evolution/2.30/libevolution-smime.so.0
#4 0x00007fffe5b16599 in certificate_manager_config_init () from /usr/lib/evolution/2.30/libevolution-smime.so.0
#5 0x00007fffe5d3622d in ?? () from /usr/lib/evolution/2.30/modules/libevolution-module-addressbook.so
#6 0x00007ffff073a97e in g_object_newv (object_type=<value optimized out>, n_parameters=1, parameters=0x1) at /build/buildd/glib2.0-2.25.14/gobject/gobject.c:1375
#7 0x00007ffff073b1dd in g_object_new_valist (object_type=7594768, first_property_name=0x0, var_args=0x7fffffffdc90) at /build/buildd/glib2.0-2.25.14/gobject/gobject.c:1463
#8 0x00007ffff073b421 in g_object_new (object_type=7594768, first_property_name=0x7ffff72de4f3 "extensible") at /build/buildd/glib2.0-2.25.14/gobject/gobject.c:1181
#9 0x00007ffff72c4165 in ?? () from /usr/lib/evolution/2.30/libeutil.so.0
#10 0x00007ffff72d861a in e_type_traverse () from /usr/lib/evolution/2.30/libeutil.so.0
#11 0x00007ffff72d85fd in e_type_traverse () from /usr/lib/evolution/2.30/libeutil.so.0
#12 0x00007ffff72c435c in e_extensible_list_extensions () from /usr/lib/evolution/2.30/libeutil.so.0
#13 0x00007ffff7bb2a2d in ?? () from /usr/lib/evolution/2.30/libeshell.so.0
#14 0x00007ffff073a97e in g_object_newv (object_type=<value optimized out>, n_parameters=6997568, parameters=0x1) at /build/buildd/glib2.0-2.25.14/gobject/gobject.c:1375
#15 0x00007ffff073b1dd in g_object_new_valist (object_type=6990800, first_property_name=0x0, var_args=0x7fffffffdff0) at /build/buildd/glib2.0-2.25.14/gobject/gobject.c:1463
#16 0x00007ffff073b421 in g_object_new (object_type=6990800, first_property_name=0x402d9a "name") at /build/buildd/glib2.0-2.25.14/gobject/gobject.c:1181
#17 0x00000000004025c2 in create_default_shell (argc=1, argv=0x7fffffffe278) at main.c:440
#18 main (argc=1, argv=0x7fffffffe278) at main.c:619

[Pedro Villavicencio (pedro)]

Thanks for the report, may you please install the evolution and libevolution dbgsym packages and get a new backtrace? thanks in advance.

[Baptiste Mille-Mathias (bmillemathias)]

I don't know why apport is not triggered when the crash occurs, so for now I'm only able to have the gdb crash.

(gdb) run
Starting program: /usr/bin/evolution
[Thread debugging using libthread_db enabled]

(evolution:2284): camel-WARNING **: Failed to initialize NSS

Program received signal SIGSEGV, Segmentation fault.
nssTrustDomain_GetCertsFromCache (td=0x0, certListOpt=0x83e290)
    at tdcache.c:1155
1155 tdcache.c: Aucun fichier ou dossier de ce type.
 in tdcache.c
(gdb) thread apply all bt

Thread 1 (Thread 0x7ffff7fad940 (LWP 2284)):
#0 nssTrustDomain_GetCertsFromCache (td=0x0, certListOpt=0x83e290)
    at tdcache.c:1155
#1 0x00007ffff5fe64f7 in NSSTrustDomain_TraverseCertificates (td=0x0,
    callback=0x7ffff5fac160 <pk11ListCertCallback>, arg=0x7fffffffda00)
    at trustdomain.c:1051
#2 0x00007ffff5fac06c in PK11_ListCerts (type=PK11CertListUnique, pwarg=0x0)
    at pk11cert.c:2364
#3 0x00007fffe5b156df in load_certs (cfm=0x6ed5d0, type=E_CERT_USER,
    add_cert=0x83e1b0) at certificate-manager.c:957
#4 0x00007fffe5b16599 in populate_ui (shell=0x645370)
    at certificate-manager.c:980
#5 certificate_manager_config_init (shell=0x645370)
    at certificate-manager.c:1034
#6 0x00007fffe5d3622d in book_shell_backend_constructed (object=0x6e4900)
    at e-book-shell-backend.c:537
#7 0x00007ffff073a97e in g_object_newv (object_type=<value optimized out>,
    n_parameters=1, parameters=0x1)
    at /build/buildd/glib2.0-2.25.14/gobject/gobject.c:1375
#8 0x00007ffff073b1dd in g_object_new_valist (object_type=7568512,
    first_property_name=0x0, var_args=0x7fffffffdc90)
    at /build/buildd/glib2.0-2.25.14/gobject/gobject.c:1463
#9 0x00007ffff073b421 in g_object_new (object_type=7568512,
    first_property_name=0x7ffff72de4f3 "extensible")
    at /build/buildd/glib2.0-2.25.14/gobject/gobject.c:1181
#10 0x00007ffff72c4165 in extensible_load_extension (extension_type=7568512,
    extensible=0x645370) at e-extensible.c:91
#11 0x00007ffff72d861a in e_type_traverse (parent_type=<value optimized out>,
    func=0x7ffff72c4110 <extensible_load_extension>, user_data=0x645370)
    at e-util.c:519
#12 0x00007ffff72d85fd in e_type_traverse (parent_type=<value optimized out>,
    func=0x7ffff72c4110 <extensible_load_extension>, user_data=0x645370)
    at e-util.c:513
#13 0x00007ffff72c435c in e_extensible_list_extensions (extensible=0x645370,
    extension_type=7597344) at e-extensible.c:191
#14 0x00007ffff7bb2a2d in shell_constructed (object=0x645370) at e-shell.c:700
#15 0x00007ffff073a97e in g_object_newv (object_type=<value optimized out>,
    n_parameters=6998000, parameters=0x1)
    at /build/buildd/glib2.0-2.25.14/gobject/gobject.c:1375
#16 0x00007ffff073b1dd in g_object_new_valist (object_type=6957904,
    first_property_name=0x0, var_args=0x7fffffffdff0)
    at /build/buildd/glib2.0-2.25.14/gobject/gobject.c:1463
#17 0x00007ffff073b421 in g_object_new (object_type=6957904,
    first_property_name=0x402d9a "name")
    at /build/buildd/glib2.0-2.25.14/gobject/gobject.c:1181
#18 0x00000000004025c2 in create_default_shell (argc=1, argv=0x7fffffffe278)
    at main.c:440
#19 main (argc=1, argv=0x7fffffffe278) at main.c:619

[Baptiste Mille-Mathias (bmillemathias)]

the bug #621932 is another crash I had but with all symbols.

[Baptiste Mille-Mathias (bmillemathias)]

Should I dup this bug to bug #621932 depsite the crash not being the same (PK11_ListCerts vs. nssTrustDomain_GetCertsFromCache)?