[Evolution] Find/Replaces crashes the editor when forwarding a message

[Dan Hensley <dan hensley home com>]

I just submitted a bug report, but I thought I'd send it to the list
too.

In Evolution, Find/Replace crashes gnome-gtkhtml-editor.  I am using CVS
from about 11/17/01.  Here's the scenario:

I have an e-mail that I want to forward.  After I click on Forward, I
delete some text.  Then I try to replace all of the >'s at the beginning
of each line with nothing using Find/Replace.  The first time I do it
and select Replace All, it replaces the first one.  The second time I do
it, gnome-gtkhtml-editor crashes with the following backtrace:

0x408eb689 in wait4 () from /lib/libc.so.6
#0  0x408eb689 in wait4 () from /lib/libc.so.6
#1  0x4095c6ec in __check_rhosts_file () from /lib/libc.so.6
#2  0x405cbab6 in gnome_segv_handle (signum=11) at gnome-init.c:664
#3  0x40860128 in killpg () from /lib/libc.so.6
#4  0x400497b9 in remove_empty_and_merge (e=0x80b35a0, merge=1,
left=0x0, 
    right=0x0, c=0x80e8988) at htmlengine-edit-cut-and-paste.c:258
#5  0x4004a301 in insert_object (e=0x80b35a0, obj=0x813f240, len=0, 
    position_after=346, level=1, dir=HTML_UNDO_UNDO, check=1)
    at htmlengine-edit-cut-and-paste.c:602
#6  0x4004a53b in html_engine_insert_object (e=0x80b35a0, o=0x813f240,
len=0, 
    level=1) at htmlengine-edit-cut-and-paste.c:695
#7  0x4004a59d in html_engine_paste_object (e=0x80b35a0, o=0x813f240,
len=0)
    at htmlengine-edit-cut-and-paste.c:703
#8  0x4005c241 in replace (e=0x80b35a0) at htmlengine.c:4711
#9  0x4005c369 in html_engine_replace_do (e=0x80b35a0,
answer=RQA_ReplaceAll)
    at htmlengine.c:4732
#10 0x406f7d21 in gtk_marshal_NONE__NONE (object=0x810e4e0, 
    func=0x8064f90 <replace_all_cb>, func_data=0x810fee0,
args=0xbfffec90)
    at gtkmarshal.c:312
#11 0x4072a946 in gtk_handlers_run (handlers=0x80d2250,
signal=0xbfffec30, 
    object=0x810e4e0, params=0xbfffec90, after=0) at gtksignal.c:1917
#12 0x40729ca6 in gtk_signal_real_emit (object=0x810e4e0, signal_id=68, 
    params=0xbfffec90) at gtksignal.c:1477
#13 0x40727ae0 in gtk_signal_emit (object=0x810e4e0, signal_id=68)
    at gtksignal.c:552
#14 0x406909dc in gtk_button_clicked (button=0x810e4e0) at
gtkbutton.c:336
#15 0x4069212e in gtk_real_button_released (button=0x810e4e0)
    at gtkbutton.c:861
#16 0x406f7d21 in gtk_marshal_NONE__NONE (object=0x810e4e0, 
    func=0x40692080 <gtk_real_button_released>, func_data=0x0,
args=0xbffff020)
    at gtkmarshal.c:312
#17 0x40729b32 in gtk_signal_real_emit (object=0x810e4e0, signal_id=67, 
    params=0xbffff020) at gtksignal.c:1440
#18 0x40727ae0 in gtk_signal_emit (object=0x810e4e0, signal_id=67)
    at gtksignal.c:552
#19 0x4069090c in gtk_button_released (button=0x810e4e0) at
gtkbutton.c:327
#20 0x40691a37 in gtk_button_button_release (widget=0x810e4e0,
event=0x811b7b0)
    at gtkbutton.c:721
#21 0x406f7a2b in gtk_marshal_BOOL__POINTER (object=0x810e4e0, 
    func=0x40691960 <gtk_button_button_release>, func_data=0x0, 
    args=0xbffff3c0) at gtkmarshal.c:28
#22 0x40729ce9 in gtk_signal_real_emit (object=0x810e4e0, signal_id=27, 
    params=0xbffff3c0) at gtksignal.c:1492
#23 0x40727ae0 in gtk_signal_emit (object=0x810e4e0, signal_id=27)
    at gtksignal.c:552
#24 0x40761ff9 in gtk_widget_event (widget=0x810e4e0, event=0x811b7b0)
    at gtkwidget.c:2864
#25 0x406f7984 in gtk_propagate_event (widget=0x810e4e0,
event=0x811b7b0)
    at gtkmain.c:1378
#26 0x406f69f5 in gtk_main_do_event (event=0x811b7b0) at gtkmain.c:818
#27 0x407adb4f in gdk_event_dispatch (source_data=0x0, 
    current_time=0xbffff790, user_data=0x0) at gdkevents.c:2139
#28 0x40820390 in g_main_dispatch (dispatch_time=0xbffff790) at
gmain.c:656
#29 0x4082096f in g_main_iterate (block=1, dispatch=1) at gmain.c:877
#30 0x40820b2b in g_main_run (loop=0x809b808) at gmain.c:935
#31 0x406f62b3 in gtk_main () at gtkmain.c:524
#32 0x403b8a0b in bonobo_main () at bonobo-main.c:284
#33 0x0805d41a in main (argc=3, argv=0xbffff884)
    at editor-control-factory.c:885
#34 0x4084f1f0 in __libc_start_main () from /lib/libc.so.6
#0  0x408eb689 in wait4 () from /lib/libc.so.6
No symbol table info available.
#1  0x4095c6ec in __check_rhosts_file () from /lib/libc.so.6
No symbol table info available.
#2  0x405cbab6 in gnome_segv_handle (signum=11) at gnome-init.c:664
664                     eret = waitpid(pid, &estatus, 0);
estatus = 134768424
in_segv = 1
pid = 0
#3  0x40860128 in killpg () from /lib/libc.so.6
No symbol table info available.
#4  0x400497b9 in remove_empty_and_merge (e=0x80b35a0, merge=1,
left=0x0, 
    right=0x0, c=0x80e8988) at htmlengine-edit-cut-and-paste.c:258
        in htmlengine-edit-cut-and-paste.c
lo = (HTMLObject *) 0x80e8908
ro = (HTMLObject *) 0x813f240
prev = (HTMLObject *) 0x813f240
#5  0x4004a301 in insert_object (e=0x80b35a0, obj=0x813f240, len=0, 
    position_after=346, level=1, dir=HTML_UNDO_UNDO, check=1)
    at htmlengine-edit-cut-and-paste.c:602
602     in htmlengine-edit-cut-and-paste.c
orig = (HTMLCursor *) 0x80e8988
left = (GList *) 0x81265fc
right = (GList *) 0x8126608
first = (GList *) 0x8126614
last = (GList *) 0x8126620
position_before = 135423508
level = 135170440
delete_paragraph_before = 0
delete_paragraph_after = 0
position_before = 346
#6  0x4004a53b in html_engine_insert_object (e=0x80b35a0, o=0x813f240,
len=0, 
    level=1) at htmlengine-edit-cut-and-paste.c:695
695     in htmlengine-edit-cut-and-paste.c
e = (HTMLEngine *) 0x80b35a0
len = 3221219008
#7  0x4004a59d in html_engine_paste_object (e=0x80b35a0, o=0x813f240,
len=0)
    at htmlengine-edit-cut-and-paste.c:703
703     in htmlengine-edit-cut-and-paste.c
e = (HTMLEngine *) 0x80b35a0
o = (HTMLObject *) 0x813f240