evolution crashed with SIGSEGV in free()

Bug #397957 reported by fraggan
30
This bug affects 4 people
Affects Status Importance Assigned to Milestone
gtkhtml3.14
Fix Released
Critical
gtkhtml3.14 (Ubuntu)
Fix Released
Medium
Ubuntu Desktop Bugs

Bug Description

Binary package hint: evolution

Appeared when trying the spellcheck in evolution. Just installed the package "aspel-sv". Then I tried to write an email and rightclicked on a misspelled word and chose the right one. Then it crashed.

ProblemType: Crash
Architecture: i386
Date: Fri Jul 10 20:53:09 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/bin/evolution
Package: evolution 2.27.3-0ubuntu3
ProcCmdline: evolution --component=mail
ProcEnviron:
 LANG=en_US.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-2.16-generic
SegvAnalysis:
 Segfault happened at: 0x516e6d2 <free+82>: mov 0x4(%eax),%eax
 PC (0x0516e6d2) ok
 source "0x4(%eax)" (0xc35d5f5a) not located in a known VMA region (needed readable region)!
 destination "%eax" ok
SegvReason: reading unknown VMA
Signal: 11
SourcePackage: evolution
StacktraceTop:
 free () from /lib/tls/i686/cmov/libc.so.6
 g_free () from /usr/lib/libglib-2.0.so.0
 html_text_set_font_face ()
 html_engine_replace_spell_word_with ()
 ?? () from /usr/lib/libgtkhtml-editor.so.0
Title: evolution crashed with SIGSEGV in free()
Uname: Linux 2.6.31-2-generic i686
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare

Related branches

Revision history for this message
fraggan (fragwolf-deactivatedaccount) wrote :
Revision history for this message
Sebastien Bacher (seb128) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. Please try to obtain a valgrind log following the instructions at https://wiki.ubuntu.com/Valgrind and attach the file to the bug report. This will greatly help us in tracking down your problem.

Changed in evolution (Ubuntu):
assignee: nobody → Ubuntu Desktop Bugs (desktop-bugs)
status: New → Incomplete
importance: Undecided → Medium
Revision history for this message
NoahY (noahy) wrote :

I can confirm this exact bug, while trying to change the word "arrainment" to "arraignment". Reproduced twice in a row, but I'm not up to doing the valgrind log right now (slow internet connection).

Using Karmic Alpha 64bit, updated this morning, July 21, 2009.

Changed in evolution (Ubuntu):
status: Incomplete → Confirmed
Revision history for this message
NoahY (noahy) wrote :

Here's a backtrace, but I don't know if I did it correctly... with gdb running it doesn't actually crash, just freezes and turns dark. Pressing CTRL+C in gdb as recommended here:

https://wiki.ubuntu.com/Backtrace

just caused gdb to freeze as well.

Downloading valgrind...

Revision history for this message
NoahY (noahy) wrote :

Okay, here's the valgrind log.

Revision history for this message
Sebastien Bacher (seb128) wrote :

could you install the debug gtkhtml version and get a new valgrind log?

Changed in evolution (Ubuntu):
status: Confirmed → Incomplete
Revision history for this message
Sebastien Bacher (seb128) wrote :

The bug is fixed in git and will fixed in karmic next week with GNOME 2.27.5

affects: evolution (Ubuntu) → gtkhtml3.14 (Ubuntu)
Changed in gtkhtml3.14 (Ubuntu):
status: Incomplete → Triaged
status: Triaged → Fix Committed
Changed in gtkhtml3.14:
status: Unknown → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package gtkhtml3.14 - 1:3.27.5-0ubuntu1

---------------
gtkhtml3.14 (1:3.27.5-0ubuntu1) karmic; urgency=low

  * New upstream version:
    Bug Fixes:
    Bug #584243 - Crash when replacing a mispelled word (lp: #397957)
    Other Fixes:
    Fix some build tool warnings.

 -- Sebastien Bacher <email address hidden> Mon, 27 Jul 2009 15:38:00 +0200

Changed in gtkhtml3.14 (Ubuntu):
status: Fix Committed → Fix Released
Changed in gtkhtml3.14:
importance: Unknown → Critical
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.