[Users] [Bug 3415] New: glib memory structures corrupted - SIGSEGV @ gslice.c:545 called from log.c:267

noreply at thewildbeast.co.uk noreply at thewildbeast.co.uk
Wed Apr 1 20:42:33 CEST 2015


http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=3415

            Bug ID: 3415
           Summary: glib memory structures corrupted - SIGSEGV @
                    gslice.c:545 called from log.c:267
    Classification: Unclassified
           Product: Claws Mail
           Version: 3.11.1
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: major
          Priority: P3
         Component: Folders/IMAP
          Assignee: users at lists.claws-mail.org
          Reporter: deweloper at wp.pl

claws-mail-3.11.1-3.fc20.x86_64 crashed during processing a warning message
from IMAP

Program received signal SIGSEGV, Segmentation fault.
magazine_chain_pop_head (magazine_chunks=0xbadf80) at gslice.c:545
545          (*magazine_chunks)->data = chunk->next;
(gdb) bt
#0  magazine_chain_pop_head (magazine_chunks=0xbadf80) at gslice.c:545
#1  thread_memory_magazine1_alloc (tmem=<optimized out>, ix=1) at gslice.c:848
#2  g_slice_alloc (mem_size=mem_size at entry=32) at gslice.c:1007
#3  0x0000003bf50654ee in g_slice_alloc0 (mem_size=mem_size at entry=32) at
gslice.c:1042
#4  0x0000003bf50470e4 in g_source_new (source_funcs=0x3bf532a9a0
<g_timeout_funcs>, struct_size=<optimized out>) at gmain.c:856
#5  0x0000003bf504a0f9 in g_timeout_source_new (interval=interval at entry=0) at
gmain.c:4477
#6  0x0000003bf504a190 in g_timeout_add_full (priority=priority at entry=0,
interval=interval at entry=0, function=function at entry=0x5cfa70 <invoke_hook_cb>,
data=0x1dedb70, notify=notify at entry=0x0) at gmain.c:4566
#7  0x0000003bf504a222 in g_timeout_add (interval=interval at entry=0,
function=function at entry=0x5cfa70 <invoke_hook_cb>, data=<optimized out>) at
gmain.c:4616
#8  0x00000000005d01c8 in log_warning (instance=instance at entry=LOG_PROTOCOL,
format=<optimized out>) at log.c:267
#9  0x00000000004a25de in imap_handle_error (session=0x1d5e000,
server=<optimized out>, libetpan_errcode=4) at imap.c:625
#10 0x00000000004a7aac in get_list_of_uids (msgnum_list=<synthetic pointer>,
item=0x10698e0, folder=0x10688f0, session=0x1d5e000) at imap.c:4501
#11 imap_get_num_list (folder=0x10688f0, _item=0x10698e0,
msgnum_list=0x7fffffffcb08, old_uids_valid=0x7fffffffcb04) at imap.c:4596
#12 0x000000000048ecf4 in folder_item_scan_full (item=0x10698e0, filtering=1)
at folder.c:2154
#13 0x000000000049b96f in folderview_check_new (folder=<optimized out>) at
folderview.c:1117
#14 0x00000000004b3a6d in inc_all_account_mail (mainwin=0xd08060, autocheck=1,
notify=0) at inc.c:362
#15 0x00000000004b3c4e in inc_autocheck_func (data=<error reading variable:
value has been optimized out>) at inc.c:1495
#16 0x0000003bf5049e43 in g_timeout_dispatch (source=source at entry=0x197c290,
callback=<optimized out>, user_data=<optimized out>) at gmain.c:4451
#17 0x0000003bf50492a6 in g_main_dispatch (context=0xc9f9d0) at gmain.c:3066
#18 g_main_context_dispatch (context=context at entry=0xc9f9d0) at gmain.c:3642
#19 0x0000003bf5049628 in g_main_context_iterate (context=0xc9f9d0,
block=block at entry=1, dispatch=dispatch at entry=1, self=<optimized out>) at
gmain.c:3713
#20 0x0000003bf5049a3a in g_main_loop_run (loop=0xbcd780) at gmain.c:3907
#21 0x00000036d2145c77 in IA__gtk_main () at gtkmain.c:1268
#22 0x0000000000449420 in main (argc=1, argv=0x7fffffffe088) at main.c:1559
(gdb) print *(LogText*) 0x1dedb70
$6 = {instance = LOG_PROTOCOL, 
  text = 0x2b412a0 "Błąd połączenia z serwerem IMAP XXXXXX.XXXXXXXXX.XX: błąd
strumienia\n", type = LOG_WARN}
(gdb) fr 0
#0  magazine_chain_pop_head (magazine_chunks=0xbadf80) at gslice.c:545
545          (*magazine_chunks)->data = chunk->next;
(gdb) print chunk
$7 = (ChunkLink *) 0x88888800000000
(gdb) print *chunk
Cannot access memory at address 0x88888800000000
(gdb) fr 1
#1  thread_memory_magazine1_alloc (tmem=<optimized out>, ix=1) at gslice.c:848
848      ChunkLink *chunk = magazine_chain_pop_head (&mag->chunks);
(gdb) print mag
$8 = (Magazine *) 0xbadf80
(gdb) print *mag
$9 = {chunks = 0x1cb7620, count = 33}
(gdb) print *mag->chunks
$10 = {next = 0x1020d60, data = 0x88888800000000}
(gdb) print *mag->chunks->next
$11 = {next = 0x2b19100, data = 0x0}
(gdb) print *mag->chunks->next->next
$12 = {next = 0x2b191a0, data = 0x0}
(gdb) print *mag->chunks->next->next->next
$13 = {next = 0x18df980, data = 0x0}
(gdb) print *mag->chunks->next->next->next->next
$14 = {next = 0x17efee0, data = 0x0}
(gdb) print *mag->chunks->next->next->next->next->next
$15 = {next = 0x18ff140, data = 0x0}
(gdb) print *mag->chunks->next->next->next->next->next->next
$16 = {next = 0x18d5880, data = 0x0}
(gdb) print *mag->chunks->next->next->next->next->next->next->next
$17 = {next = 0x22199a0, data = 0x0}
(gdb) print *mag->chunks->next->next->next->next->next->next->next->next
$18 = {next = 0x25394a0, data = 0x0}
(gdb) print *mag->chunks->next->next->next->next->next->next->next->next->next
$19 = {next = 0x1018820, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next
$20 = {next = 0x7fffd404a400, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next
$21 = {next = 0x2b17ba0, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next
$22 = {next = 0x2b17ae0, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next
$23 = {next = 0x2b19360, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$24 = {next = 0x249df80, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$25 = {next = 0x220f400, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$26 = {next = 0x2b27ba0, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$27 = {next = 0x190d660, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$28 = {next = 0x101f6e0, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$29 = {next = 0x1012360, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$30 = {next = 0x7fffd4040720, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$31 = {next = 0x1018880, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$32 = {next = 0xe3f9a0, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$33 = {next = 0xe70260, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$34 = {next = 0x17a3da0, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$35 = {next = 0x18d5920, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$36 = {next = 0x7fffd400e440, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$37 = {next = 0x173c900, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$38 = {next = 0x101db20, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$39 = {next = 0x17adf00, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$40 = {next = 0x2b19020, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$41 = {next = 0x1c11f80, data = 0x0}
(gdb) print
*mag->chunks->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next->next
$42 = {next = 0x0, data = 0x0}

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the Users mailing list