Re: [Evolution-hackers] Exchange 2007 - MAPI Provider preview



  Hi Srini,
        'bt' says:

|---+ Web Forms       : (Container class: IPF.Note 95604A000000000E)
UnRead : 0 Total : 1411
exchange-mapi-connection.c(1631): exchange_mapi_get_folders_list:
unlock(connect_lock) 

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1094719824 (LWP 31444)]
0x0000003c6ba795c0 in strlen () from /lib64/libc.so.6
(gdb) bt
#0  0x0000003c6ba795c0 in strlen () from /lib64/libc.so.6
#1  0x0000003c6ea54323 in g_strdup () from /lib64/libglib-2.0.so.0
#2  0x00002aaab7b88002 in mapi_folders_sync (store=0x7cf000, ex=<value
optimized out>) at camel-mapi-store.c:972
#3  0x00002aaab7b88361 in mapi_get_folder_info (store=0x7cf000, top=0x0,
flags=<value optimized out>, ex=0xd22da0) at camel-mapi-store.c:1057
#4  0x0000003c83e3cfe7 in camel_store_get_folder_info ()
from /usr/lib64/libcamel-provider-1.2.so.10
#5  0x00002aaab05753e8 in ?? ()
from /usr/lib64/evolution/2.12/components/libevolution-mail.so
#6  0x00002aaab0572cda in ?? ()
from /usr/lib64/evolution/2.12/components/libevolution-mail.so
#7  0x0000003c6ea5cde9 in ?? () from /lib64/libglib-2.0.so.0
#8  0x0000003c6ea5b2a4 in ?? () from /lib64/libglib-2.0.so.0
#9  0x0000003c6c606407 in start_thread () from /lib64/libpthread.so.0
#10 0x0000003c6bad4b0d in clone () from /lib64/libc.so.6


valgrind was impressive. It got past the bug I reported and downloaded
lots of emails or headers or some such. Then it crashed (I did not hit
any buttons)
  Here is the end of the output plus crash report:

     EcDoRpc: struct EcDoRpc
        out: struct EcDoRpc
            handle                   : *
                handle: struct policy_handle
                    handle_type              : 0x00000000 (0)
                    uuid                     :
9d4d2d6c-c40c-4f27-8f8e-a47c3558ec9e
            size                     : 0x00007fff (32767)
            offset                   : 0x00000000 (0)
            mapi_response            : *
                mapi_response            : length=4106
                mapi_response: ARRAY(4104)
                    mapi_repl: struct EcDoRpc_MAPI_REPL
                        opnum                    : 0x2c (44)
                        handle_idx               : 0x00 (0)
                        error_code               : MAPI_E_SUCCESS (0x0)
                        u                        : union
EcDoRpc_MAPI_REPL_UNION(case 44)
                        mapi_ReadStream: struct ReadStream_repl
                            data                     : DATA_BLOB
length=4096
                mapi_response            : (handles) number=1
                    handle id                : 0x00000c30 (3120)
            length                   : *
                length                   : 0x100e (4110)
            result                   : MAPI_E_SUCCESS (0x0)
==31507== 
==31507== Invalid write of size 1
==31507==    at 0x4A07678: memcpy (mc_replace_strmem.c:406)
==31507==    by 0x12AB4726: ReadStream (IStream.c:199)
==31507==    by 0x1287E00F: exchange_mapi_util_get_attachments
(exchange-mapi-connection.c:580)
==31507==    by 0x1287F2D5: exchange_mapi_connection_fetch_items
(exchange-mapi-connection.c:784)
==31507==    by 0x12674731: mapi_refresh_folder
(camel-mapi-folder.c:522)
==31507==    by 0x12674BBD: mapi_refresh_info (camel-mapi-folder.c:136)
==31507==    by 0xA9D4972:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0xA9CFCD9:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0x3C6EA5CDE8: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA5B2A3: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6C606406: start_thread (in /lib64/libpthread-2.7.so)
==31507==    by 0x3C6BAD4B0C: clone (in /lib64/libc-2.7.so)
==31507==  Address 0x1FE927D4 is 0 bytes after a block of size 724
alloc'd
==31507==    at 0x4A059F6: malloc (vg_replace_malloc.c:149)
==31507==    by 0x13149B75: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x13149AE4: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1314AC91: talloc_named_const
(in /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1287DFE0: exchange_mapi_util_get_attachments
(exchange-mapi-connection.c:574)
==31507==    by 0x1287F2D5: exchange_mapi_connection_fetch_items
(exchange-mapi-connection.c:784)
==31507==    by 0x12674731: mapi_refresh_folder
(camel-mapi-folder.c:522)
==31507==    by 0x12674BBD: mapi_refresh_info (camel-mapi-folder.c:136)
==31507==    by 0xA9D4972:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0xA9CFCD9:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0x3C6EA5CDE8: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA5B2A3: (within /lib64/libglib-2.0.so.0.1504.0)
==31507== 
==31507== Invalid write of size 1
==31507==    at 0x4A07680: memcpy (mc_replace_strmem.c:406)
==31507==    by 0x12AB4726: ReadStream (IStream.c:199)
==31507==    by 0x1287E00F: exchange_mapi_util_get_attachments
(exchange-mapi-connection.c:580)
==31507==    by 0x1287F2D5: exchange_mapi_connection_fetch_items
(exchange-mapi-connection.c:784)
==31507==    by 0x12674731: mapi_refresh_folder
(camel-mapi-folder.c:522)
==31507==    by 0x12674BBD: mapi_refresh_info (camel-mapi-folder.c:136)
==31507==    by 0xA9D4972:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0xA9CFCD9:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0x3C6EA5CDE8: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA5B2A3: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6C606406: start_thread (in /lib64/libpthread-2.7.so)
==31507==    by 0x3C6BAD4B0C: clone (in /lib64/libc-2.7.so)
==31507==  Address 0x1FE927D5 is 1 bytes after a block of size 724
alloc'd
==31507==    at 0x4A059F6: malloc (vg_replace_malloc.c:149)
==31507==    by 0x13149B75: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x13149AE4: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1314AC91: talloc_named_const
(in /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1287DFE0: exchange_mapi_util_get_attachments
(exchange-mapi-connection.c:574)
==31507==    by 0x1287F2D5: exchange_mapi_connection_fetch_items
(exchange-mapi-connection.c:784)
==31507==    by 0x12674731: mapi_refresh_folder
(camel-mapi-folder.c:522)
==31507==    by 0x12674BBD: mapi_refresh_info (camel-mapi-folder.c:136)
==31507==    by 0xA9D4972:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0xA9CFCD9:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0x3C6EA5CDE8: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA5B2A3: (within /lib64/libglib-2.0.so.0.1504.0)
==31507== 
==31507== Invalid write of size 1
==31507==    at 0x4A07689: memcpy (mc_replace_strmem.c:406)
==31507==    by 0x12AB4726: ReadStream (IStream.c:199)
==31507==    by 0x1287E00F: exchange_mapi_util_get_attachments
(exchange-mapi-connection.c:580)
==31507==    by 0x1287F2D5: exchange_mapi_connection_fetch_items
(exchange-mapi-connection.c:784)
==31507==    by 0x12674731: mapi_refresh_folder
(camel-mapi-folder.c:522)
==31507==    by 0x12674BBD: mapi_refresh_info (camel-mapi-folder.c:136)
==31507==    by 0xA9D4972:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0xA9CFCD9:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0x3C6EA5CDE8: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA5B2A3: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6C606406: start_thread (in /lib64/libpthread-2.7.so)
==31507==    by 0x3C6BAD4B0C: clone (in /lib64/libc-2.7.so)
==31507==  Address 0x1FE927D6 is 2 bytes after a block of size 724
alloc'd
==31507==    at 0x4A059F6: malloc (vg_replace_malloc.c:149)
==31507==    by 0x13149B75: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x13149AE4: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1314AC91: talloc_named_const
(in /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1287DFE0: exchange_mapi_util_get_attachments
(exchange-mapi-connection.c:574)
==31507==    by 0x1287F2D5: exchange_mapi_connection_fetch_items
(exchange-mapi-connection.c:784)
==31507==    by 0x12674731: mapi_refresh_folder
(camel-mapi-folder.c:522)
==31507==    by 0x12674BBD: mapi_refresh_info (camel-mapi-folder.c:136)
==31507==    by 0xA9D4972:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0xA9CFCD9:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0x3C6EA5CDE8: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA5B2A3: (within /lib64/libglib-2.0.so.0.1504.0)
==31507== 
==31507== Invalid write of size 1
==31507==    at 0x4A07692: memcpy (mc_replace_strmem.c:406)
==31507==    by 0x12AB4726: ReadStream (IStream.c:199)
==31507==    by 0x1287E00F: exchange_mapi_util_get_attachments
(exchange-mapi-connection.c:580)
==31507==    by 0x1287F2D5: exchange_mapi_connection_fetch_items
(exchange-mapi-connection.c:784)
==31507==    by 0x12674731: mapi_refresh_folder
(camel-mapi-folder.c:522)
==31507==    by 0x12674BBD: mapi_refresh_info (camel-mapi-folder.c:136)
==31507==    by 0xA9D4972:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0xA9CFCD9:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0x3C6EA5CDE8: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA5B2A3: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6C606406: start_thread (in /lib64/libpthread-2.7.so)
==31507==    by 0x3C6BAD4B0C: clone (in /lib64/libc-2.7.so)
==31507==  Address 0x1FE927D7 is 3 bytes after a block of size 724
alloc'd
==31507==    at 0x4A059F6: malloc (vg_replace_malloc.c:149)
==31507==    by 0x13149B75: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x13149AE4: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1314AC91: talloc_named_const
(in /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1287DFE0: exchange_mapi_util_get_attachments
(exchange-mapi-connection.c:574)
==31507==    by 0x1287F2D5: exchange_mapi_connection_fetch_items
(exchange-mapi-connection.c:784)
==31507==    by 0x12674731: mapi_refresh_folder
(camel-mapi-folder.c:522)
==31507==    by 0x12674BBD: mapi_refresh_info (camel-mapi-folder.c:136)
==31507==    by 0xA9D4972:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0xA9CFCD9:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0x3C6EA5CDE8: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA5B2A3: (within /lib64/libglib-2.0.so.0.1504.0)
==31507== 
==31507== Invalid read of size 1
==31507==    at 0x4A075F4: memcpy (mc_replace_strmem.c:406)
==31507==    by 0x3C6EA13879: g_array_append_vals
(in /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA138C8: g_byte_array_append
(in /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x1287E05F: exchange_mapi_util_get_attachments
(exchange-mapi-connection.c:600)
==31507==    by 0x1287F2D5: exchange_mapi_connection_fetch_items
(exchange-mapi-connection.c:784)
==31507==    by 0x12674731: mapi_refresh_folder
(camel-mapi-folder.c:522)
==31507==    by 0x12674BBD: mapi_refresh_info (camel-mapi-folder.c:136)
==31507==    by 0xA9D4972:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0xA9CFCD9:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0x3C6EA5CDE8: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA5B2A3: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6C606406: start_thread (in /lib64/libpthread-2.7.so)
==31507==  Address 0x1FE9354F is 823 bytes inside a block of size 1,624
free'd
==31507==    at 0x4A0560B: free (vg_replace_malloc.c:233)
==31507==    by 0x1314A550: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1314A4D7: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1314A4D7: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1314A18C: talloc_unlink
(in /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x12DC3EFA: dcerpc_ndr_request_recv
(in /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x12AFA59F: dcerpc_EcDoRpc (ndr_exchange_c.c:1565)
==31507==    by 0x12ABADA2: emsmdb_transaction (emsmdb.c:208)
==31507==    by 0x12AB3966: GetProps (IMAPIProp.c:102)
==31507==    by 0x1287E57B: exchange_mapi_util_read_body_stream
(exchange-mapi-connection.c:286)
==31507==    by 0x1287EFE6: exchange_mapi_connection_fetch_items
(exchange-mapi-connection.c:791)
==31507==    by 0x12674731: mapi_refresh_folder
(camel-mapi-folder.c:522)
==31507== 
==31507== Invalid read of size 1
==31507==    at 0x4A075FD: memcpy (mc_replace_strmem.c:406)
==31507==    by 0x3C6EA13879: g_array_append_vals
(in /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA138C8: g_byte_array_append
(in /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x1287E05F: exchange_mapi_util_get_attachments
(exchange-mapi-connection.c:600)
==31507==    by 0x1287F2D5: exchange_mapi_connection_fetch_items
(exchange-mapi-connection.c:784)
==31507==    by 0x12674731: mapi_refresh_folder
(camel-mapi-folder.c:522)
==31507==    by 0x12674BBD: mapi_refresh_info (camel-mapi-folder.c:136)
==31507==    by 0xA9D4972:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0xA9CFCD9:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0x3C6EA5CDE8: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA5B2A3: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6C606406: start_thread (in /lib64/libpthread-2.7.so)
==31507==  Address 0x1FE9354E is 822 bytes inside a block of size 1,624
free'd
==31507==    at 0x4A0560B: free (vg_replace_malloc.c:233)
==31507==    by 0x1314A550: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1314A4D7: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1314A4D7: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1314A18C: talloc_unlink
(in /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x12DC3EFA: dcerpc_ndr_request_recv
(in /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x12AFA59F: dcerpc_EcDoRpc (ndr_exchange_c.c:1565)
==31507==    by 0x12ABADA2: emsmdb_transaction (emsmdb.c:208)
==31507==    by 0x12AB3966: GetProps (IMAPIProp.c:102)
==31507==    by 0x1287E57B: exchange_mapi_util_read_body_stream
(exchange-mapi-connection.c:286)
==31507==    by 0x1287EFE6: exchange_mapi_connection_fetch_items
(exchange-mapi-connection.c:791)
==31507==    by 0x12674731: mapi_refresh_folder
(camel-mapi-folder.c:522)
==31507== 
==31507== Invalid read of size 1
==31507==    at 0x4A07604: memcpy (mc_replace_strmem.c:406)
==31507==    by 0x3C6EA13879: g_array_append_vals
(in /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA138C8: g_byte_array_append
(in /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x1287E05F: exchange_mapi_util_get_attachments
(exchange-mapi-connection.c:600)
==31507==    by 0x1287F2D5: exchange_mapi_connection_fetch_items
(exchange-mapi-connection.c:784)
==31507==    by 0x12674731: mapi_refresh_folder
(camel-mapi-folder.c:522)
==31507==    by 0x12674BBD: mapi_refresh_info (camel-mapi-folder.c:136)
==31507==    by 0xA9D4972:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0xA9CFCD9:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0x3C6EA5CDE8: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA5B2A3: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6C606406: start_thread (in /lib64/libpthread-2.7.so)
==31507==  Address 0x1FE9354D is 821 bytes inside a block of size 1,624
free'd
==31507==    at 0x4A0560B: free (vg_replace_malloc.c:233)
==31507==    by 0x1314A550: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1314A4D7: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1314A4D7: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1314A18C: talloc_unlink
(in /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x12DC3EFA: dcerpc_ndr_request_recv
(in /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x12AFA59F: dcerpc_EcDoRpc (ndr_exchange_c.c:1565)
==31507==    by 0x12ABADA2: emsmdb_transaction (emsmdb.c:208)
==31507==    by 0x12AB3966: GetProps (IMAPIProp.c:102)
==31507==    by 0x1287E57B: exchange_mapi_util_read_body_stream
(exchange-mapi-connection.c:286)
==31507==    by 0x1287EFE6: exchange_mapi_connection_fetch_items
(exchange-mapi-connection.c:791)
==31507==    by 0x12674731: mapi_refresh_folder
(camel-mapi-folder.c:522)
==31507== 
==31507== Invalid read of size 1
==31507==    at 0x4A0760B: memcpy (mc_replace_strmem.c:406)
==31507==    by 0x3C6EA13879: g_array_append_vals
(in /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA138C8: g_byte_array_append
(in /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x1287E05F: exchange_mapi_util_get_attachments
(exchange-mapi-connection.c:600)
==31507==    by 0x1287F2D5: exchange_mapi_connection_fetch_items
(exchange-mapi-connection.c:784)
==31507==    by 0x12674731: mapi_refresh_folder
(camel-mapi-folder.c:522)
==31507==    by 0x12674BBD: mapi_refresh_info (camel-mapi-folder.c:136)
==31507==    by 0xA9D4972:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0xA9CFCD9:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0x3C6EA5CDE8: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA5B2A3: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6C606406: start_thread (in /lib64/libpthread-2.7.so)
==31507==  Address 0x1FE9354C is 820 bytes inside a block of size 1,624
free'd
==31507==    at 0x4A0560B: free (vg_replace_malloc.c:233)
==31507==    by 0x1314A550: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1314A4D7: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1314A4D7: (within /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x1314A18C: talloc_unlink
(in /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x12DC3EFA: dcerpc_ndr_request_recv
(in /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x12AFA59F: dcerpc_EcDoRpc (ndr_exchange_c.c:1565)
==31507==    by 0x12ABADA2: emsmdb_transaction (emsmdb.c:208)
==31507==    by 0x12AB3966: GetProps (IMAPIProp.c:102)
==31507==    by 0x1287E57B: exchange_mapi_util_read_body_stream
(exchange-mapi-connection.c:286)
==31507==    by 0x1287EFE6: exchange_mapi_connection_fetch_items
(exchange-mapi-connection.c:791)
==31507==    by 0x12674731: mapi_refresh_folder
(camel-mapi-folder.c:522)
--31507-- VALGRIND INTERNAL ERROR: Valgrind received a signal 11
(SIGSEGV) - exiting
--31507-- si_code=80;  Faulting address: 0x0;  sp: 0x40A1DCD20

valgrind: the 'impossible' happened:
   Killed by fatal signal
==31507==    at 0x3802033A: unlinkBlock (m_mallocfree.c:190)
==31507==    by 0x38020FA4: vgPlain_arena_malloc (m_mallocfree.c:1062)
==31507==    by 0x380358E6: vgPlain_cli_malloc
(replacemalloc_core.c:101)
==31507==    by 0x380023A5: vgMemCheck_malloc (mc_malloc_wrappers.c:182)
==31507==    by 0x38035F77: do_client_request (scheduler.c:1158)
==31507==    by 0x38037681: vgPlain_scheduler (scheduler.c:869)
==31507==    by 0x38053089: run_a_thread_NORETURN (syswrap-linux.c:87)
==31507==    by 0x3805326B: vgModuleLocal_start_thread_NORETURN
(syswrap-linux.c:207)
==31507==    by 0x3805519D:
(within /usr/lib64/valgrind/amd64-linux/memcheck)
==31507==    by 0x38114724:
(within /usr/lib64/valgrind/amd64-linux/memcheck)

sched status:
  running_tid=5

Thread 1: status = VgTs_Runnable
==31507==    at 0x3C6BACBD66: poll (in /lib64/libc-2.7.so)
==31507==    by 0x3C6EA38232: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA38729: g_main_loop_run
(in /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C7EA2CE75: bonobo_main
(in /usr/lib64/libbonobo-2.so.0.0.0)
==31507==    by 0x415CFA: (within /usr/bin/evolution)
==31507==    by 0x3C6BA1E073: (below main) (in /lib64/libc-2.7.so)

Thread 2: status = VgTs_WaitSys
==31507==    at 0x3C6BACBD66: poll (in /lib64/libc-2.7.so)
==31507==    by 0x3C6EA38232: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA38729: g_main_loop_run
(in /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C826068C2: (within /usr/lib64/libnm_glib.so.0.0.0)
==31507==    by 0x3C6EA5B2A3: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6C606406: start_thread (in /lib64/libpthread-2.7.so)
==31507==    by 0x3C6BAD4B0C: clone (in /lib64/libc-2.7.so)

Thread 5: status = VgTs_Runnable
==31507==    at 0x4A059F6: malloc (vg_replace_malloc.c:149)
==31507==    by 0x3C6BA69E8C: vasprintf (in /lib64/libc-2.7.so)
==31507==    by 0x1311EA78: ndr_print_debug_helper
(in /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x13124419: ndr_print_struct
(in /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x12AD2708: ndr_print_EcDoRpc (ndr_exchange.c:21889)
==31507==    by 0x1311EE0E: ndr_print_function_debug
(in /opt/samba4/lib/libdcerpc.so.0.0.1)
==31507==    by 0x12AFA540: dcerpc_EcDoRpc_send (ndr_exchange_c.c:1551)
==31507==    by 0x12AFA58D: dcerpc_EcDoRpc (ndr_exchange_c.c:1562)
==31507==    by 0x12ABADA2: emsmdb_transaction (emsmdb.c:208)
==31507==    by 0x12AB6ACC: Release (IUnknown.c:143)
==31507==    by 0x12AB894D: mapi_object_release (mapi_object.c:93)
==31507==    by 0x1287DED5: exchange_mapi_util_get_attachments
(exchange-mapi-connection.c:613)
==31507==    by 0x1287F2D5: exchange_mapi_connection_fetch_items
(exchange-mapi-connection.c:784)
==31507==    by 0x12674731: mapi_refresh_folder
(camel-mapi-folder.c:522)
==31507==    by 0x12674BBD: mapi_refresh_info (camel-mapi-folder.c:136)
==31507==    by 0xA9D4972:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0xA9CFCD9:
(within /usr/lib64/evolution/2.12/components/libevolution-mail.so)
==31507==    by 0x3C6EA5CDE8: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6EA5B2A3: (within /lib64/libglib-2.0.so.0.1504.0)
==31507==    by 0x3C6C606406: start_thread (in /lib64/libpthread-2.7.so)
==31507==    by 0x3C6BAD4B0C: clone (in /lib64/libc-2.7.so)



On Tue, 2008-02-05 at 09:52 +0530, Srinivasa Ragavan wrote:
> Hi William,
> 
> The trace looks fine, but I'm not able to find any segv or signal
> handler call => Not able to find which thread crashed. Just do a 'bt'
> Otherwise, it could be a memory corruption, I think.
> 
> Can you run like 'valgrind --tool=memcheck evolution' and paste me the
> logs? 
> 
> Sorry for the multiple iterations.
> 
> -Srini.
> 
> 
> On Mon, 2008-02-04 at 18:19 +0000, William John Murray wrote:
> > Hello Suman,
> >           Here is the log. Thank you for looking at this.
> >                  Bill
> > 
> >  thread apply all bt full
> > 
> > Thread 8 (Thread 1105209680 (LWP 23478)):
> > #0  0x0000003dd0ad50d8 in epoll_wait () from /lib64/libc.so.6
> > No symbol table info available.
> > #1  0x00002aaab3d305e0 in ?? () from /opt/samba4/lib/libdcerpc.so.0
> > No symbol table info available.
> > #2  0x00002aaab3d31032 in ?? () from /opt/samba4/lib/libdcerpc.so.0
> > No symbol table info available.
> > #3  0x00002aaab3d2ff42 in event_loop_once ()
> > from /opt/samba4/lib/libdcerpc.so.0
> > No symbol table info available.
> > #4  0x00002aaab39ad2ab in dcerpc_request_recv ()
> > from /opt/samba4/lib/libdcerpc.so.0
> > No symbol table info available.
> > #5  0x00002aaab39ade40 in dcerpc_ndr_request_recv ()
> > from /opt/samba4/lib/libdcerpc.so.0
> > No symbol table info available.
> > #6  0x00002aaab36e45a0 in dcerpc_EcDoRpc (p=0x2aaabc020bd0,
> > mem_ctx=<value optimized out>, r=0x41e01ca0) at
> > gen_ndr/ndr_exchange_c.c:1565
> > 	req = (struct rpc_request *) 0xfffffffffffffffc
> > #7  0x00002aaab36a4da3 in emsmdb_transaction (emsmdb=0x2aaabc020c70,
> > req=0xe1fe50, repl=0x41e01d40) at libmapi/emsmdb.c:208
> >         r = {in = {mapi_request = 0xe1fe50, max_data = 32767, handle =
> > 0x2aaabc020c78, size = 32767, offset = 0, length = 0xe1fdc0}, out =
> > {mapi_response = 0xe1ff20, handle = 0x2aaabc020c78, size = 14810816,
> > offset = 0, length = 0xe1fdc0, result = 3016974192}}
> > 	multi_req = <value optimized out>
> > 	i = 0 '\0'
> > #8  0x00002aaab369db67 in OpenMsgStore (obj_store=0x41e01e70) at
> > libmapi/IMAPISession.c:192
> > 	mapi_request = (struct mapi_request *) 0x41e01a10
> > 	mapi_response = <value optimized out>
> > 	retval = <value optimized out>
> > 	size = <value optimized out>
> > 	mem_ctx = (TALLOC_CTX *) 0xe1fc70
> > 	mailbox = <value optimized out>
> > #9  0x00002aaab3468c82 in exchange_mapi_connection_fetch_items
> > (fid=388610298799456257, GetPropsList=0x2aaab9a43080, cn_props=8,
> > build_name_id=0, res=0x0, cb=0x2aaab9a3f4e0 <fetch_items_cb>,
> > data=0x2aaabc02e100) at exchange-mapi-connection.c:654
> > 	retval = <value optimized out>
> > 	mem_ctx = (TALLOC_CTX *) 0xe1fad0
> >         obj_store = {id = 0, handle = 4294967295, handles = 0x0,
> > private_data = 0x0}
> >         obj_folder = {id = 0, handle = 4294967295, handles = 0x0,
> > private_data = 0x0}
> >         obj_table = {id = 0, handle = 4294967295, handles = 0x0,
> > private_data = 0x0}
> > 	SPropTagArray = <value optimized out>
> > 	GetPropsTagArray = <value optimized out>
> >         SRowSet = {cRows = 3007729240, aRow = 0xe09c30}
> >         count = 0
> > 	i = <value optimized out>
> > 	result = <value optimized out>
> >         __PRETTY_FUNCTION__ = "exchange_mapi_connection_fetch_items"
> > #10 0x00002aaab9a3f732 in mapi_refresh_folder (folder=0x2aaabc02e100,
> > ex=0x41e01fc0) at camel-mapi-folder.c:522
> >         temp_folder_id = 388610298799456257
> > 	mapi_store = (CamelMapiStore *) 0x719530
> > 	status = <value optimized out>
> >         folder_id = (gchar *) 0xe09c30 "05649F0200000001"
> >         __PRETTY_FUNCTION__ = "mapi_refresh_folder"
> > #11 0x00002aaab9a3fbbe in mapi_refresh_info (folder=0x2aaabc02e100,
> > ex=0x41e01fc0) at camel-mapi-folder.c:136
> > 	si = <value optimized out>
> >         __PRETTY_FUNCTION__ = "mapi_refresh_info"
> > #12 0x00002aaab0577973 in ?? ()
> > from /usr/lib64/evolution/2.12/components/libevolution-mail.so
> > No symbol table info available.
> > #13 0x00002aaab0572cda in ?? ()
> > from /usr/lib64/evolution/2.12/components/libevolution-mail.so
> > No symbol table info available.
> > #14 0x0000003dd3a5cde9 in ?? () from /lib64/libglib-2.0.so.0
> > No symbol table info available.
> > #15 0x0000003dd3a5b2a4 in ?? () from /lib64/libglib-2.0.so.0
> > No symbol table info available.
> > #16 0x0000003dd1606407 in start_thread () from /lib64/libpthread.so.0
> > No symbol table info available.
> > #17 0x0000003dd0ad4b0d in clone () from /lib64/libc.so.6
> > No symbol table info available.
> > 
> > Thread 5 (Thread 1094719824 (LWP 23381)):
> > #0  0x0000003dd0a795c0 in strlen () from /lib64/libc.so.6
> > No symbol table info available.
> > #1  0x0000003dd3a54323 in g_strdup () from /lib64/libglib-2.0.so.0
> > No symbol table info available.
> > #2  0x00002aaab9a41002 in mapi_folders_sync (store=0x719530, ex=<value
> > optimized out>) at camel-mapi-store.c:972
> >         name = 0x2aaabc012b10 "2006"
> >         fid = (gchar *) 0xffffffffbc06af90 <Address 0xffffffffbc06af90
> > out of bounds>
> > 	priv = (CamelMapiStorePrivate *) 0x73a380
> > 	status = <value optimized out>
> > 	folder_list = (GSList *) 0x7f0c10
> > 	temp_list = (GSList *) 0x7f0c20
> > 	url = 0x2aaabc076710 "mapi://ME MYBOX/"
> > 	info = <value optimized out>
> > 	present = <value optimized out>
> > 	si = <value optimized out>
> > 	count = <value optimized out>
> > 	i = <value optimized out>
> >         __PRETTY_FUNCTION__ = "mapi_folders_sync"
> > #3  0x00002aaab9a41361 in mapi_get_folder_info (store=0x719530, top=0x0,
> > flags=<value optimized out>, ex=0x87aa00) at camel-mapi-store.c:1057
> > 	mapi_store = (CamelMapiStore *) 0x719530
> > 	priv = <value optimized out>
> > 	info = <value optimized out>
> > #4  0x0000003dea63cfe7 in camel_store_get_folder_info ()
> > from /usr/lib64/libcamel-provider-1.2.so.10
> > No symbol table info available.
> > #5  0x00002aaab05753e8 in ?? ()
> > from /usr/lib64/evolution/2.12/components/libevolution-mail.so
> > No symbol table info available.
> > #6  0x00002aaab0572cda in ?? ()
> > from /usr/lib64/evolution/2.12/components/libevolution-mail.so
> > No symbol table info available.
> > #7  0x0000003dd3a5cde9 in ?? () from /lib64/libglib-2.0.so.0
> > No symbol table info available.
> > #8  0x0000003dd3a5b2a4 in ?? () from /lib64/libglib-2.0.so.0
> > No symbol table info available.
> > #9  0x0000003dd1606407 in start_thread () from /lib64/libpthread.so.0
> > No symbol table info available.
> > #10 0x0000003dd0ad4b0d in clone () from /lib64/libc.so.6
> > No symbol table info available.
> > 
> > Thread 4 (Thread 1084229968 (LWP 23380)):
> > #0  0x0000003dd0acbd66 in poll () from /lib64/libc.so.6
> > No symbol table info available.
> > #1  0x0000003dd3a38233 in ?? () from /lib64/libglib-2.0.so.0
> > No symbol table info available.
> > #2  0x0000003dd3a3872a in g_main_loop_run ()
> > from /lib64/libglib-2.0.so.0
> > No symbol table info available.
> > #3  0x0000003de0e068c3 in ?? () from /usr/lib64/libnm_glib.so.0
> > No symbol table info available.
> > #4  0x0000003dd3a5b2a4 in ?? () from /lib64/libglib-2.0.so.0
> > No symbol table info available.
> > #5  0x0000003dd1606407 in start_thread () from /lib64/libpthread.so.0
> > No symbol table info available.
> > #6  0x0000003dd0ad4b0d in clone () from /lib64/libc.so.6
> > No symbol table info available.
> > 
> > Thread 1 (Thread 46912496455680 (LWP 22960)):
> > #0  0x0000003dd0acbd66 in poll () from /lib64/libc.so.6
> > No symbol table info available.
> > #1  0x0000003dd3a38233 in ?? () from /lib64/libglib-2.0.so.0
> > No symbol table info available.
> > #2  0x0000003dd3a3872a in g_main_loop_run ()
> > from /lib64/libglib-2.0.so.0
> > No symbol table info available.
> > #3  0x0000003de322ce76 in bonobo_main ()
> > from /usr/lib64/libbonobo-2.so.0
> > No symbol table info available.
> > #4  0x0000000000415cfb in ?? ()
> > No symbol table info available.
> > #5  0x0000003dd0a1e074 in __libc_start_main () from /lib64/libc.so.6
> > No symbol table info available.
> > #6  0x0000000000409dd9 in ?? ()
> > No symbol table info available.
> > #7  0x00007fffbc1f99f8 in ?? ()
> > No symbol table info available.
> > #8  0x0000000000000000 in ?? ()
> > No symbol table info available.
> > #0  0x0000003dd0a795c0 in strlen () from /lib64/libc.so.6
> > (gdb) in gen_ndr/ndr_exchange_c.c
> > (gdb) 
> > 
> > 
> > 
> > On Mon, 2008-02-04 at 23:04 +0530, Suman Manjunath wrote:
> > > Hi.. 
> > > 
> > > On Feb 4, 2008 9:58 PM, William John Murray <W J Murray rl ac uk>
> > > wrote:
> > >         
> > >          Hi Srinivasa,
> > >            Hm, I have the debug rpm,
> > >         evolution-mapi-provider-debuginfo-20080118.3-2.1 but I am not
> > >         sure how
> > >         to use it! If I run in ddd I see this - is it enough info?
> > > 
> > > <snip>
> > >  
> > >         EcDoRpc_MAPI_REPL_UNION(case 21)
> > >                                mapi_QueryRows: struct QueryRows_repl
> > >                                    unknown                  : 0x02 (2)
> > >                                    results_count            : 0x0000
> > >         (0)
> > >                                    layout                   : 0x00 (0)
> > >                        mapi_response            : (handles) number=1
> > >                            handle id                : 0x00000f14
> > >         (3860)
> > >                    length                   : *
> > >                        length                   : 0x000f (15)
> > >                    result                   : MAPI_E_SUCCESS (0x0)
> > >         exchange-mapi-connection.c(1631):
> > >         exchange_mapi_get_folders_list:
> > >         unlock(connect_lock)
> > >         
> > >         Program received signal SIGSEGV, Segmentation fault.
> > >         [Switching to Thread 1105209680 (LWP 11659)]
> > >         0x0000003dd0a795c0 in strlen () from /lib64/libc.so.6
> > >         (gdb)
> > >         
> > > 
> > > almost enough :) .. could you just get a backtrace at the SIGSEGV
> > > (type 'thread apply all bt full' at the terminal when you get the gdb
> > > prompt after the SIGSEGV) and paste the output here ?
> > > 
> > > -Suman
> > > 
> _______________________________________________
> Evolution-hackers mailing list
> Evolution-hackers gnome org
> http://mail.gnome.org/mailman/listinfo/evolution-hackers
-- 
________________________________________________________________
Dr William Murray       w j murray rl ac uk      (44)-1235-446256
RAL, Harwell Science and Innovation Campus, Didcot, OX11 0QX, UK


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]