[Evolution] crash when moving in folded thread

[Xavier Bestel <n0made free fr>]

Hi again,

in the list view, the "cursor" was in a thread. I folded this thread (the
cursor disappeared), hit the down arrow, Bang.

Xav

(no debugging symbols found)...[New Thread 1024 (runnable)]
[New Thread 2049 (runnable)]
[New Thread 1026 (runnable)]
[New Thread 2051 (runnable)]
[New Thread 3076 (runnable)]
[New Thread 4101 (runnable)]
0x4095b8c9 in __wait4 () from /lib/libc.so.6
#0  0x4095b8c9 in __wait4 () from /lib/libc.so.6
#1  0x409ba1cc in __DTOR_END__ () from /lib/libc.so.6
#2  0x4035d975 in waitpid (pid=11898, stat_loc=0xbfffe8e0, options=0)
    at wrapsyscall.c:134
#3  0x403ce32f in gnome_segv_handle (signum=11) at gnome-init.c:660
#4  0x808482e in mail_view_create ()
#5  0x4035c532 in pthread_sighandler (signo=11, ctx={gs = 0, __gsh = 0, 
      fs = 0, __fsh = 0, es = 43, __esh = 0, ds = 43, __dsh = 49168, edi =
4, 
      esi = 139518632, ebp = 3221219972, esp = 3221219948, ebx =
1082002208, 
      edx = 13953, ecx = 4, eax = 139518632, trapno = 14, err = 4, 
      eip = 1081772376, cs = 35, __csh = 0, eflags = 2163202, 
      esp_at_signal = 3221219948, ss = 43, __ssh = 0, fpstate = 0xbfffe9f0,

      oldmask = 2147483648, cr2 = 13953}) at signals.c:96
#6  <signal handler called>
#7  0x407a8958 in ets_is_editable (etm=0x850e2a8, node=0x3681, col=4)
    at e-tree-sorted.c:892
#8  0x407a472c in e_tree_model_node_is_editable (etree=0x850e2a8,
node=0x3681, 
    col=4) at e-tree-model.c:709
#9  0x407aa093 in etta_is_cell_editable (etm=0x850e310, col=4, row=-2)
    at e-tree-table-adapter.c:491
#10 0x4079a4a1 in e_table_model_is_cell_editable (e_table_model=0x850e310, 
    col=4, row=-2) at e-table-model.c:148
#11 0x40797efc in eti_event (item=0x850b0a0, e=0xbfffef3c)
    at e-table-item.c:2014
#12 0x40392999 in gnome_canvas_item_marshal_signal_1 (object=0x850b0a0, 
    func=0x40796904 <eti_event>, func_data=0x0, args=0xbfffec88)
    at gnome-canvas.c:543
#13 0x405389c8 in gtk_signal_real_emit (object=0x850b0a0, signal_id=150, 
    params=0xbfffec88) at gtksignal.c:1492
#14 0x40536f33 in gtk_signal_emit_by_name (object=0x850b0a0, 
    name=0x407cb1af "event") at gtksignal.c:618
#15 0x4076193b in emit_event (canvas=0x850ada0, event=0xbfffefb8)
    at e-canvas.c:268
#16 0x40761a4c in e_canvas_key (widget=0x850ada0, event=0x84b1bec)
    at e-canvas.c:299
#17 0x4050c9e1 in gtk_marshal_BOOL__POINTER (object=0x850ada0, 
    func=0x407619b8 <e_canvas_key>, func_data=0x0, args=0xbffff0ac)
    at gtkmarshal.c:32
#18 0x405389c8 in gtk_signal_real_emit (object=0x850ada0, signal_id=32, 
    params=0xbffff0ac) at gtksignal.c:1492
#19 0x40536c20 in gtk_signal_emit (object=0x850ada0, signal_id=32)
    at gtksignal.c:552
#20 0x4056b5db in gtk_widget_event (widget=0x850ada0, event=0x84b1bec)
    at gtkwidget.c:2861
#21 0x401ba2d6 in bonobo_plug_key_press_event (widget=0x853bd00, 
    event=0x84b1bec) at bonobo-plug.c:209
#22 0x4050c9e1 in gtk_marshal_BOOL__POINTER (object=0x853bd00, 
    func=0x401ba1c0 <bonobo_plug_key_press_event>, func_data=0x0, 
    args=0xbffff418) at gtkmarshal.c:32
#23 0x405389c8 in gtk_signal_real_emit (object=0x853bd00, signal_id=32, 
    params=0xbffff418) at gtksignal.c:1492
#24 0x40536c20 in gtk_signal_emit (object=0x853bd00, signal_id=32)
    at gtksignal.c:552
#25 0x4056b5db in gtk_widget_event (widget=0x853bd00, event=0x84b1bec)
    at gtkwidget.c:2861
#26 0x4050c8d8 in gtk_propagate_event (widget=0x850ada0, event=0x84b1bec)
    at gtkmain.c:1358
#27 0x4050bbea in gtk_main_do_event (event=0x84b1bec) at gtkmain.c:818
#28 0x405b52d2 in gdk_event_dispatch (source_data=0x0, 
    current_time=0xbffff79c, user_data=0x0) at gdkevents.c:2139
#29 0x407289f6 in g_main_dispatch (dispatch_time=0xbffff79c) at gmain.c:656
#30 0x40728fb1 in g_main_iterate (block=1, dispatch=1) at gmain.c:877
#31 0x40729129 in g_main_run (loop=0x812a928) at gmain.c:935
#32 0x4050b55a in gtk_main () at gtkmain.c:524
#33 0x400f0c02 in bonobo_main () at bonobo-main.c:277
#34 0x808496e in main ()
#35 0x408e29cb in __libc_start_main (main=0x8084848 <main>, argc=3, 
    argv=0xbffff964, init=0x80652b8 <_init>, fini=0x80b82ec <_fini>, 
    rtld_fini=0x4000aea0 <_dl_fini>, stack_end=0xbffff95c)
    at ../sysdeps/generic/libc-start.c:92
#0  0x4095b8c9 in __wait4 () from /lib/libc.so.6
No locals.
#1  0x409ba1cc in __DTOR_END__ () from /lib/libc.so.6
No symbol table info available.
#2  0x4035d975 in waitpid (pid=11898, stat_loc=0xbfffe8e0, options=0)
    at wrapsyscall.c:134
stat_loc = (int *) 0xbfffe8e0
options = 0
result = 0
oldtype = 0
#3  0x403ce32f in gnome_segv_handle (signum=11) at gnome-init.c:660
estatus = 32
in_segv = 1
pid = 0
#4  0x808482e in mail_view_create ()
No symbol table info available.
#5  0x4035c532 in pthread_sighandler (signo=11, ctx={gs = 0, __gsh = 0, 
      fs = 0, __fsh = 0, es = 43, __esh = 0, ds = 43, __dsh = 49168, edi =
4, 
      esi = 139518632, ebp = 3221219972, esp = 3221219948, ebx =
1082002208, 
      edx = 13953, ecx = 4, eax = 139518632, trapno = 14, err = 4, 
      eip = 1081772376, cs = 35, __csh = 0, eflags = 2163202, 
      esp_at_signal = 3221219948, ss = 43, __ssh = 0, fpstate = 0xbfffe9f0,

      oldmask = 2147483648, cr2 = 13953}) at signals.c:96
self = 0x40363920
in_sighandler = 0x0
#6  <signal handler called>
No locals.
#7  0x407a8958 in ets_is_editable (etm=0x850e2a8, node=0x3681, col=4)
    at e-tree-sorted.c:892
etm = (ETreeModel *) 0x850e2a8
col = 4
ets = (ETreeSorted *) 0xfffffe00