Evolution crashes on malformed vcard

[Aki Niemi]

Binary package hint: evolution

When receiving an email with a malformed vcard attachment, Evolution crashes with this output:

inside eab_vcard_control_new

(evolution:2679): GLib-CRITICAL **: g_ascii_strcasecmp: assertion `s1 != NULL' failed

(evolution:2679): GLib-CRITICAL **: g_ascii_strcasecmp: assertion `s1 != NULL' failed
Segmentation fault (core dumped)

Attached the vcard (info sanitized), that reproduces the crash.

The problem with the vcard is that it has no \r\n after the attributes.

[Aki Niemi (aki-niemet)]

Forgot to add:

I'm running 7.10, with:

evolution 2.12.1-0ubuntu1
evolution-data-server 1.12.1-0ubuntu2

[Ilya Barygin (randomaction)]

I was able to reproduce this crash using the Aki's bad-vcard.vcf in Evoluton 2.12.1-0ubuntu1.1.

[C de-Avillez (hggdh2)]

@all: thank you for reporting this bug and working on it, and helping making Ubuntu better. We do appreciate.

I cannot reproduce it on Hardy's Evo -- 2.21.92. The vcard as provided by Aki is shown as, huh, empty. Looking at the provided vcard, I can see it terminated by a line-feed, so I hex-edited the file, and removed it. Tried again, no crash.

Will look upstream, but odds are this has been resolved on unstable (Hardy).

@Ilya -- it is better to open a new bug via apport (and then refer to this bug) than to attach the full crash report here -- it is much more difficult to look at the crash as it is now: (1) I run on an AMD64, and the crash is on a i386; (2) the crash report does not contain a stacktrace. In other words, unfortunately your crash report is unusable for me.

@Aki: please let apport run for any crashes, and use it to open a bug, so that we get all basic data on one sweep.

[C de-Avillez (hggdh2)]

I cannot find a similar issue upstream. Aki, which client generated such a vcard?

This vcard is *extremely* malformed...

[Ilya Barygin (randomaction)]

Just for clarity, steps to reproduce this bug are:

1. Send yourself an e-mail with malformed vcard (see above) attached.
2. Try to view this e-mail.

@hggdh: I've used Apport to upload a crash report as bug 200122.

[C de-Avillez (hggdh2)]

Thank you, Ilya. For the record, I tried both sending an email with this vcard, and importing the vcard on Evolution (File/Import -- single file). Both worked.

I will look now at the uploaded apport crash.

[C de-Avillez (hggdh2)]

Ilya -- did you set this bug as a security bug? If you did so, I cannot see it until the security team analyses it, and decides to unset the "security" tag...

[C de-Avillez (hggdh2)]

Accepting, Ilya's back trace is complete. Opened upstream http://bugzilla.gnome.org/show_bug.cgi?id=528039, and linked here.

[Sebastien Bacher (seb128)]

the issue should be fixed in hardy, closing the bug, feel free to reopen if you still get the bug using the new versions though