mail-notification-5.2 causes evolution-2.12.3 crash

[Pacho Ramos]

I have already sent this downstream:
http://bugs.gentoo.org/show_bug.cgi?id=215154

After updating to mail-notification-5.2 evolution crashes with the
following:
Native stacktrace:

        /usr/lib/libmono.so.0 [0x317766d3d5]
        /usr/lib/libmono.so.0 [0x317768c103]
        /lib/libpthread.so.0 [0x3c13a0ded0]
        /usr/lib/libgobject-2.0.so.0(g_type_check_is_value_type+0x23)
[0x352b227583]
        /usr/lib/libgobject-2.0.so.0(g_value_init+0x2a) [0x352b22caaa]
        /usr/lib64/evolution/2.12/plugins/liborg-jylefort-mail-notification.so
[0x2aaab33e4e96]
        /usr/lib64/evolution/2.12/plugins/liborg-jylefort-mail-notification.so
[0x2aaab33e5190]

/usr/lib64/evolution/2.12/plugins/liborg-jylefort-mail-notification.so(dbus_glib_marshal_mn_evolution_server_BOOLEAN__STRING_POINTER_POINTER+0x57)
[0x2aaab33e5527]
        /usr/lib/libdbus-glib-1.so.2 [0x3b4b00cfeb]
        /usr/lib/libdbus-1.so.3 [0x3b5121ba79]
        /usr/lib/libdbus-1.so.3(dbus_connection_dispatch+0x37a) [0x3b5120f1ca]
        /usr/lib/libdbus-glib-1.so.2 [0x3b4b009e95]
        /usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x1c2) [0x352ae30f92]
        /usr/lib/libglib-2.0.so.0 [0x352ae3428d]
        /usr/lib/libglib-2.0.so.0(g_main_loop_run+0x1a6) [0x352ae34576]
        /usr/lib/libbonobo-2.so.0(bonobo_main+0x45) [0x3804c2f355]
        evolution [0x415a4b]
        /lib/libc.so.6(__libc_start_main+0xf4) [0x3c12e1db74]
        evolution [0x40a479]

Thanks for fixing this

[Jean-Yves Lefort (jylefort)]

Please provide a normal gdb backtrace with line numbers.

[Pacho Ramos (pacho)]

How can I run gdb + evolution? When I try to run "gdb evolution" I get:
[New LWP 19315]
[LWP 19315 exited]
[New LWP 19304]
ptrace: No such process.

Thanks for info

[Erik van Pienbroek (openftd)]

I'm also encountering this crash on Fedora rawhide, with evolution 2.22.1:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7f32425cd7b0 (LWP 14685)]
0x00007f3242d74113 in g_type_check_is_value_type () from /lib64/libgobject-2.0.so.0
(gdb) bt
#0 0x00007f3242d74113 in g_type_check_is_value_type () from /lib64/libgobject-2.0.so.0
#1 0x00007f3242d7a9ca in g_value_init () from /lib64/libgobject-2.0.so.0
#2 0x00007f3235d3dc26 in mn_evolution_server_value_array_new (type=140733193388032) at build/src/mn-evolution-server.c:430
#3 0x00007f3235d3df71 in mn_evolution_server_get_unseen_messages (self=<value optimized out>, folder_uri=<value optimized out>, ret=0x1a314c0, err=<value optimized out>)
    at build/src/mn-evolution-server.c:463
#4 0x00007f3235d3e189 in dbus_glib_marshal_mn_evolution_server_BOOLEAN__STRING_POINTER_POINTER (closure=0x7fff4b613340, return_value=0x7fff4b613420,
    n_param_values=<value optimized out>, param_values=0x1a53f30, invocation_hint=<value optimized out>, marshal_data=0x7f3235d3ddd0)
    at build/src/mn-evolution-server-dbus.h:147
#5 0x0000003661a0c758 in ?? () from /usr/lib64/libdbus-glib-1.so.2
#6 0x000000365ba1c121 in ?? () from /lib64/libdbus-1.so.3
#7 0x000000365ba0ed26 in dbus_connection_dispatch () from /lib64/libdbus-1.so.3
#8 0x0000003661a09655 in ?? () from /usr/lib64/libdbus-glib-1.so.2
#9 0x00007f3242aa640a in g_main_context_dispatch () from /lib64/libglib-2.0.so.0
#10 0x00007f3242aa9b10 in ?? () from /lib64/libglib-2.0.so.0
#11 0x00007f3242aa9fdd in g_main_loop_run () from /lib64/libglib-2.0.so.0
#12 0x0000003666e2d276 in bonobo_main () from /usr/lib64/libbonobo-2.so.0
#13 0x0000000000416f15 in ?? ()
#14 0x000000365421e40a in __libc_start_main () from /lib64/libc.so.6
#15 0x000000000040a2d9 in ?? ()
#16 0x00007fff4b6138f8 in ?? ()
#17 0x000000000000001c in ?? ()
#18 0x0000000000000001 in ?? ()
#19 0x00007fff4b6145b0 in ?? ()
#20 0x0000000000000000 in ?? ()
(gdb) frame 2
#2 0x00007f3235d3dc26 in mn_evolution_server_value_array_new (type=140733193388032) at build/src/mn-evolution-server.c:430
430 g_value_init(&value, type);
(gdb) info locals
value = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0,
      v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
value_array = (GValueArray *) 0x2068d80
args = {{gp_offset = 48, fp_offset = 48, overflow_arg_area = 0x7fff4b612fb8, reg_save_area = 0x7fff4b612e90}}
(gdb) print type
$1 = 140733193388032
(gdb) frame 3
#3 0x00007f3235d3df71 in mn_evolution_server_get_unseen_messages (self=<value optimized out>, folder_uri=<value optimized out>, ret=0x1a314c0, err=<value optimized out>)
    at build/src/mn-evolution-server.c:463
463 return self_value_array_new(/* char *uid */
(gdb) info locals
info = (CamelMessageInfo *) 0x7f3230181be0
summary = (GPtrArray *) 0x1fab160
i = 2652
folder = (CamelFolder *) 0x149ed60
(gdb) q

[Jean-Yves Lefort (jylefort)]

Could you please check if the attached patch fixes the problem?

[Erik van Pienbroek (openftd)]

This patch solves the crash :)

[Jean-Yves Lefort (jylefort)]

Great, thanks.

[Pacho Ramos (pacho)]

Thanks Erik and Jean :-)

[Jean-Yves Lefort (jylefort)]

Fixed in 5.3