#685588 evolution: Crash: libcamel-1.2: #0 camel_pstring_add (str=str@entry=0x4 <Address 0x4 out of bounds>, own=own@entry=0) at camel-string-utils.c:170

Package:
evolution
Source:
evolution
Description:
groupware suite with mail client and organizer
Submitter:
Paul Menzel
Date:
2015-08-13 16:51:40 UTC
Severity:
important
#685588#5
Date:
2012-08-22 07:59:25 UTC
From:
To:
Dear Debian folks,


while composing a message Evolution 3.4.3 crashed.

        $ dmesg
        […]
        [ 1775.978900] pool[10745]: segfault at 4 ip 00000000f6ab09c6 sp 00000000e9927e20 error 4 in libcamel-1.2.so.33.0.0[f6a03000+103000]

The backtrace can be found in the upstream report I reported [1].

I did not experience any crashes with Evolution 3.2.2 for a long time.

Crashes cause data loss, when the user currently composes a message.
Auto saving messages and restoring them only helps a little.

Crashes should never happen with the most used applications, which I am
counting the mail program to.


Thanks,

Paul


[1] https://bugzilla.gnome.org/show_bug.cgi?id=682426

#685588#12
Date:
2012-12-01 14:45:08 UTC
From:
To:
Control: severity -1 important
Control: tag -1 unreproducible

Well, it does prevent the data loss, at least.

In a perfect world, indeed. But that's not the case. Considering the
fact that it was not possible to reproduce the bug and that there were
not data loss thanks to the autosave mechanism, I'm lowering the
severity and tagging accordingly.

Regards,

#685588#21
Date:
2013-04-25 11:06:36 UTC
From:
To:
Dear Yves-Alexis,


sorry for the late reply.


Am Samstag, den 01.12.2012, 15:45 +0100 schrieb Yves-Alexis Perez:

I still experience this. Sometimes more, sometimes less. I even was able
to reproduce this on a different system. Most developers do not seem to
use Evolution and prefer mutt or Icedove. So I claim, that is the reason
that this is not noticed this much. Non-developer users just start
Evolution from the icon and do not know how to report bugs.

Actually only if you are lucky. It seems auto-saving only happens after
x minutes and if you type fast or copy something in that interval and
delete the source before the x minutes are over the data is lost.

As written above. I now found two (over four years old) systems that
show this behavior. Do you have a lot of IMAP and POP3 accounts?

Here some more information.

1. The crash never happens when being offline. Therefore I start
Evolution using `evolution --offline`.

2. The crash happens more often, when trying to compose a message (Ctrl
+ r or Ctrl + n) when just going online and a lot of messages (from
lists) are downloaded.

I am pretty sure there is a memory leak somewhere, as I get segmentation
faults and bus errors. Unfortunately Valgrind seems to have a bug, where
it does not find installed debugging symbols [1]. So this does not get
me further.

Here is an excerpt from `/var/log/kern.log`.

        $ zgrep -i segfau /var/log/kern.log*
        /var/log/kern.log:Apr 25 02:27:39 myhostname kernel: [  961.229070] pool[7442]: segfault at 40505 ip b7631623 sp a20fecd0 error 4 in libcamel-1.2.so.33.0.0[b75e9000+103000]
        /var/log/kern.log.0:Apr 24 02:22:04 myhostname kernel: [13679.315393] evolution[12383]: segfault at 2c ip b167cb6d sp bff8ef10 error 4 in libevolution-mail.so.0.0.0[b1633000+c8000]
        /var/log/kern.log.0:Apr 24 03:50:15 myhostname kernel: [18970.654507] evolution[21916]: segfault at 2c ip b1637b6d sp bfbe6b60 error 4 in libevolution-mail.so.0.0.0[b15ee000+c8000]
        /var/log/kern.log.0:Apr 24 02:07:15 myhostname kernel: [ 3332.242660] evolution[8856]: segfault at 2c ip b167bb6d sp bfe24130 error 4 in libevolution-mail.so.0.0.0[b1632000+c8000]
        /var/log/kern.log.0:Apr 24 03:56:42 myhostname kernel: [ 9899.344968] pool[4954]: segfault at 270038 ip b6ca1048 sp 8ebfeac0 error 4 in libglib-2.0.so.0.3200.4[b6c89000+fb000]
        /var/log/kern.log.0:Apr 25 18:18:47 myhostname kernel: [ 1074.138525] gedit[6152]: segfault at 646e6957 ip b6aca655 sp bf8ca460 error 4 in libglib-2.0.so.0.3200.4[b6a41000+fb000]
        /var/log/kern.log.1.gz:Apr 20 19:36:51 myhostname kernel: [ 2596.279247] pool[16162]: segfault at 30 ip b6c72378 sp a40fef50 error 4 in libglib-2.0.so.0.3200.4[b6c0e000+fb000]
        /var/log/kern.log.1.gz:Apr 20 20:03:12 myhostname kernel: [ 4839.160364] evolution[8803]: segfault at 10 ip b6c7b308 sp bfd63be0 error 4 in libglib-2.0.so.0.3200.4[b6c42000+fb000]
        /var/log/kern.log.4.gz:Apr 13 01:36:18 myhostname kernel: [   70.295893] bootchart-colle[3472]: segfault at 4 ip b7674795 sp bfad3d28 error 6 in libc-2.13.so[b75d8000+15c000]
        /var/log/kern.log.5.gz:Apr  9 01:10:54 myhostname kernel: [15639.126080] evolution[20463]: segfault at 2c ip b1688b6d sp bfd69a70 error 4 in libevolution-mail.so.0.0.0[b163f000+c8000]
        /var/log/kern.log.6.gz:Apr  4 03:16:30 myhostname kernel: [ 2137.203605] evolution[6511]: segfault at 0 ip b6b8380c sp bfa6b218 error 6 in libc-2.13.so[b6b0e000+15c000]
        /var/log/kern.log.6.gz:Apr  6 02:59:25 myhostname kernel: [ 5449.046442] evolution[8141]: segfault at 511ce ip b6da14a7 sp bfb02be8 error 4 in libgobject-2.0.so.0.3200.4[b6d6f000+50000]

Due to the Valgrind bug [1] I am currently stuck with debugging this. So
any help is appreciated.


Thanks,

Paul


[1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701480