Gaim crashes after connecting to ICQ

I have the exact same problem, except with MSN:

#0 0x00002aaaad3c511d in raise () from /lib/libc.so.6
#1 0x00002aaaad3c684e in abort () from /lib/libc.so.6
#2 0x00002aaaad3f9e41 in __fsetlocking () from /lib/libc.so.6
#3 0x00002aaaad3ff90e in malloc_usable_size () from /lib/libc.so.6
#4 0x00002aaaad3ffc56 in free () from /lib/libc.so.6
#5 0x00000000004444ca in gaim_privacy_deny_remove ()
#6 0x00002aaaaf9099cd in msn_got_lst_user () from /usr/lib/gaim/libmsn.so
#7 0x00002aaaaf907e32 in msn_sync_destroy () from /usr/lib/gaim/libmsn.so
#8 0x00002aaaaf8f733d in msn_cmdproc_process_cmd ()
   from /usr/lib/gaim/libmsn.so
#9 0x00002aaaaf90277d in msn_servconn_write () from /usr/lib/gaim/libmsn.so
#10 0x00000000004836df in gaim_gtkdialogs_remove_chat ()
#11 0x00002aaaad112acd in g_main_context_dispatch ()
   from /usr/lib/libglib-2.0.so.0
#12 0x00002aaaad115d95 in g_main_context_check ()
   from /usr/lib/libglib-2.0.so.0
#13 0x00002aaaad11605a in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#14 0x00002aaaab7321f2 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#15 0x00000000004aa923 in main ()

The error is notably in gaim_privacy_deny_remove, which then calls (g_free which calls) free(), and then it all goes downhill from there.

Seems to only occur with certain settings, however, because previously some amount of toying around with privacy settings in aMSN convinced GAIM to let me log in. Now I can't find the issue.

I can reproduce this bug; indeed, I cannot convince GAIM to log in any more due to this exact crash repeatedly occuring.

Major severity due to the fact that it seems to cause clients to die without warning or bug report, and most users who might ever encounter this are probably just ignoring it and finding a different client (or distro, or OS ..)

What version of Ubuntu do you use? Is that new since yesterday's update?

I've seen this bug In Dapper Drake for about 2-3 weeks now (I update regularly). I've not yet tried yesterdays update to check wether it still occurs . I can do that later today and will report if anything changes.

I've updated gaim today and the crash does no longer happen for me.

closing as fixed so, feel free to reopen if you get the issue again

Occurring in Gaim 1.5.0 on Gentoo x86 after ICQ connects (whether automatically or manually):

*** glibc detected *** gaim: free(): invalid pointer: 0x08309790 ***
======= Backtrace: =========
/lib/libc.so.6[0xb76cf7af]
/lib/libc.so.6(__libc_free+0x8b)[0xb76d02db]
/usr/lib/libglib-2.0.so.0(g_free+0x31)[0xb78f7e21]
gaim(gaim_privacy_deny_remove+0x91)[0x8086e41]
/usr/lib/gaim/liboscar.so[0xb6d229ed]
/usr/lib/gaim/liboscar.so[0xb6d1124f]
/usr/lib/gaim/liboscar.so(aim_rxdispatch+0x28f)[0xb6d0b43f]
/usr/lib/gaim/liboscar.so[0xb6d167f0]
gaim[0x80cc665]
/usr/lib/libglib-2.0.so.0[0xb7917b8f]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x1d7)[0xb78f0467]
/usr/lib/libglib-2.0.so.0[0xb78f1e04]
/usr/lib/libglib-2.0.so.0(g_main_loop_run+0x23a)[0xb78f212a]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xb3)[0xb7d3a0c3]
gaim(main+0xa98)[0x80f9a78]
/lib/libc.so.6(__libc_start_main+0xe3)[0xb7681893]
gaim(gtk_widget_grab_focus+0x39)[0x8067cb1]
======= Memory map: ========
08048000-08110000 r-xp 00000000 fe:00 1792130 /usr/bin/gaim
08110000-08113000 rw-p 000c7000 fe:00 1792130 /usr/bin/gaim
08113000-08336000 rw-p 08113000 00:00 0 [heap]
b6100000-b6121000 rw-p b6100000 00:00 0
b6121000-b6200000 ---p b6121000 00:00 0
b620a000-b6212000 r-xp 00000000 fe:00 23991 /usr/lib/gcc/i686-pc-linux-gnu/3.4.4/libgcc_s.so.1
b6212000-b6213000 rw-p 00007000 fe:00 23991 /usr/lib/gcc/i686-pc-linux-gnu/3.4.4/libgcc_s.so.1
b6230000-b623f000 r--p 00000000 fe:00 247461 /usr/share/fonts/ttf-bitstream-vera/VeraBd.ttf
b623f000-b625d000 r-xp 00000000 fe:00 44460 /usr/lib/libjpeg.so.62.0.0
b625d000-b625e000 rw-p 0001d000 fe:00 44460 /usr/lib/libjpeg.so.62.0.0
b627b000-b62db000 rw-s 00000000 00:07 3309640 /SYSV00000000 (deleted)
b62db000-b6b67000 r--p 00000000 fe:00 493899 /usr/share/icons/gnome/icon-theme.cache
b6b67000-b6b8f000 r--p 00000000 fe:00 20657 /usr/share/icons/Sandy/icon-theme.cache
b6b8f000-b6b91000 r-xp 00000000 fe:00 1792102 /usr/lib/gaim/autorecon.so
b6b91000-b6b92000 rw-p 00001000 fe:00 1792102 /usr/lib/gaim/autorecon.so
b6b92000-b6b97000 r-xp 00000000 fe:00 1819510 /lib/libcrypt-2.4.so
b6b97000-b6b99000 rw-p 00004000 fe:00 1819510 /lib/libcrypt-2.4.so
b6b99000-b6bc0000 rw-p b6b99000 00:00 0
b6bc0000-b6cb9000 r-xp 00000000 fe:00 53928 /usr/lib/libperl.so.1.5.8
b6cb9000-b6cc3000 rw-p 000f8000 fe:00 53928 /usr/lib/libperl.so.1.5.8
b6cc3000-b6cc6000 rw-p b6cc3000 00:00 0
b6cc6000-b6ccc000 r-xp 00000000 fe:00 1792143 /usr/lib/gaim/docklet.so
b6ccc000-b6ccd000 rw-p 00005000 fe:00 1792143 /usr/lib/gaim/docklet.so
b6ccd000-b6cd2000 r-xp 00000000 fe:00 1792180 /usr/lib/gaim/ticker.so
b6cd2000-b6cd3000 rw-p 00004000 fe:00 1792180 /usr/lib/gaim/ticker.so
b6cd3000-b6cd7000 r-xp 00000000 fe:00 1792172 /usr/lib/gaim/libnapster.so
b6cd7000-b6cd8000 rw-p 00003000 fe:00 1792172 /usr/lib/gaim/libnapster.so
b6cd8000-b6ce2000 r-xp 00000000 fe:00 1792135 /usr/lib/gaim/libgg.so
b6ce2000-b6ce3000 rw-p 0000a000 fe:00 1792135 /usr/lib/gaim/libgg.so
b6ce3000-b6ce9000 r-xp 00000000 fe:00 1792153 /usr/lib/gaim/perl.so
b6ce9000-b6cea000 rw-p 00005000 fe:00 1792153 /usr/lib/gaim/perl.so
b6cea000-b6ceb0...