[Evolution] Segfault when deleting messages (04-04 snapshot)

[Ross Burton <r burton 180sw com>]

Hi,

One of my folders on an IMAP server had 20 messages in, 15 marked to be
deleted and 5 new.  I'd just started Evo so "hide deleted messages" was
on (but the menu item was showing it as off, is this known too?).  Thus
this folder was only showing me the 5 new messages. I selected the first
message and pressed [delete] 5 times to delete the messages. As the last
one disappeared evolution-mail segfaulted.  I caught this in gdb as it
is totally re-producable:

...
folder changed event, changes = 0x8237220
changed = 1 added = 0 removed = 0
Message threading 0 messages took 0.000 seconds
selecting uid (null) (direct)

Program received signal SIGSEGV, Segmentation fault.
0x407a3f79 in eti_row_height (eti=0x81dafa8, row=0) at
e-table-item.c:497
497     e-table-item.c: No such file or directory.
(gdb) bt
#0  0x407a3f79 in eti_row_height (eti=0x81dafa8, row=0) at
e-table-item.c:497
#1  0x407a42a2 in e_table_item_row_diff (eti=0x81dafa8, start_row=0,
end_row=1)
    at e-table-item.c:631
#2  0x407a43c0 in eti_request_region_show (eti=0x81dafa8, start_col=3, 
    start_row=0, end_col=3, end_row=0, delay=260) at e-table-item.c:683
#3  0x407a87e4 in eti_cursor_change (selection=0x81d1de8, row=0, col=4, 
    eti=0x81dafa8) at e-table-item.c:2275
#4  0x4051ecb0 in gtk_marshal_NONE__INT_INT (object=0x81d1de8, 
    func=0x407a86cc <eti_cursor_change>, func_data=0x81dafa8,
args=0xbfffe6c4)
    at gtkmarshal.c:327
#5  0x4054b4b7 in gtk_handlers_run (handlers=0x81b6b48,
signal=0xbfffe680, 
    object=0x81d1de8, params=0xbfffe6c4, after=0) at gtksignal.c:1917
#6  0x4054a98f in gtk_signal_real_emit (object=0x81d1de8, signal_id=125,
    params=0xbfffe6c4) at gtksignal.c:1477
#7  0x40548c20 in gtk_signal_emit (object=0x81d1de8, signal_id=125)
    at gtksignal.c:552
#8  0x4077ec1f in e_selection_model_cursor_changed (selection=0x81d1de8,
    row=0, col=4) at e-selection-model.c:577
#9  0x407b56cb in etsm_sorted_node_changed (etm=0x81da768,
node=0x819b410, 
    etsm=0x81d1de8) at e-tree-selection-model.c:390
#10 0x4051eba9 in gtk_marshal_NONE__POINTER (object=0x81da768, 
    func=0x407b5680 <etsm_sorted_node_changed>, func_data=0x81d1de8, 
    args=0xbfffea48) at gtkmarshal.c:216
#11 0x4054b4b7 in gtk_handlers_run (handlers=0x81b71e8,
signal=0xbfffea04, 
    object=0x81da768, params=0xbfffea48, after=0) at gtksignal.c:1917
#12 0x4054a98f in gtk_signal_real_emit (object=0x81da768, signal_id=132,
    params=0xbfffea48) at gtksignal.c:1477
#13 0x40548c20 in gtk_signal_emit (object=0x81da768, signal_id=132)
    at gtksignal.c:552
#14 0x407b3689 in e_tree_model_node_changed (tree_model=0x81da768, 
    node=0x819b410) at e-tree-model.c:188
#15 0x407b81a3 in ets_proxy_node_changed (etm=0x81d1fe0, node=0x8197408,
    ets=0x81da768) at e-tree-sorted.c:879
#16 0x4051eba9 in gtk_marshal_NONE__POINTER (object=0x81d1fe0, 
    func=0x407b8118 <ets_proxy_node_changed>, func_data=0x81da768, 
    args=0xbfffedc8) at gtkmarshal.c:216
#17 0x4054b4b7 in gtk_handlers_run (handlers=0x81b72c8,
signal=0xbfffed84, 
    object=0x81d1fe0, params=0xbfffedc8, after=0) at gtksignal.c:1917
#18 0x4054a98f in gtk_signal_real_emit (object=0x81d1fe0, signal_id=132,
    params=0xbfffedc8) at gtksignal.c:1477
#19 0x40548c20 in gtk_signal_emit (object=0x81d1fe0, signal_id=132)
    at gtksignal.c:552
#20 0x407b3689 in e_tree_model_node_changed (tree_model=0x81d1fe0, 
    node=0x8197408) at e-tree-model.c:188
#21 0x407b2a85 in e_tree_memory_thaw (etmm=0x81d1fe0) at
e-tree-memory.c:174
#22 0x808647f in message_list_new ()
#23 0x80879c5 in message_list_hide_clear ()
#24 0x807dbbd in mail_msg_wait ()
#25 0x407394ba in g_io_unix_dispatch (source_data=0x8135608, 
    current_time=0xbffff15c, user_data=0x8135598) at giounix.c:135
#26 0x4073a9f6 in g_main_dispatch (dispatch_time=0xbffff15c) at
gmain.c:656
#27 0x4073afb1 in g_main_iterate (block=1, dispatch=1) at gmain.c:877
#28 0x4073b129 in g_main_run (loop=0x812b938) at gmain.c:935
#29 0x4051d55a in gtk_main () at gtkmain.c:524
#30 0x400f21ea in bonobo_main () from /usr/lib/libbonobo.so.2
#31 0x808492e in main ()
#32 0x408ef9cb in __libc_start_main (main=0x8084808 <main>, argc=1, 
    argv=0xbffff324, init=0x8065320 <_init>, fini=0x80b807c <_fini>, 
    rtld_fini=0x4000ae60 <_dl_fini>, stack_end=0xbffff31c)
    at ../sysdeps/generic/libc-start.c:92


Regards,
Ross
-- 
Ross Burton                     Software Engineer
OneEighty Software Ltd          Tel: +44 20 8263 2332
The Lansdowne Building          Fax: +44 20 8263 6314
2 Lansdowne Road                r burton 180sw com
Croydon, Surrey CR9 2ER, UK     http://www.180sw.com./
====================================================================
Under the Regulation of Investigatory Powers (RIP) Act 2000 together
with any and all Regulations in force pursuant to the Act OneEighty
Software Ltd reserves the right to monitor any or all incoming or
outgoing communications as provided for under the Act