Re: [Evolution] [SMP+evolution-mail] Memory corruption



On Wed, 2003-03-05 at 14:07, Mika Liljeberg wrote:
More evidence. This time the heap is clearly corrupted. malloc() crashes
inside libc and the application deadlocks on the head allocator mutex.

How many of these do you want in bugzilla? :)

Ok, looks like I'm having a particularly bad day today. Before anyone
suggests it, I've ruled out a faulty memory chip by running some pretty
extensive memory tests on my machine. Besides, none of my other
applications are crashing this way.

This time, thread 7 barfs within glib trying to allocate a hash node.

Any ideas?

        MikaL


(gdb) thread apply all bt

Thread 8 (Thread 98311 (LWP 14434)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbedffbe0) at pthread.c:1084
#2  0x4038ef05 in pthread_cond_wait (cond=0x0, mutex=0x814ba90) at restart.h:34
#3  0x4022caea in e_msgport_wait (mp=0x814ba60) at e-msgport.c:305
#4  0x4022d38a in thread_dispatch (din=0x814ba08) at e-msgport.c:665
#5  0x4038fd53 in pthread_start_thread (arg=0xbedffbe0) at manager.c:300

Thread 7 (Thread 163846 (LWP 14463)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbefffbe0) at pthread.c:1084
#2  0x40393790 in __pthread_alt_lock (lock=0x8105498, self=0xbefffbe0) at restart.h:34
#3  0x40390984 in __pthread_mutex_lock (mutex=0x8105488) at mutex.c:120
#4  0x080ae6b3 in segv_redirect (sig=1) at main.c:80
#5  0x4039575a in __pthread_sighandler (signo=11, ctx=
      {gs = 0, __gsh = 0, fs = 0, __fsh = 0, es = 43, __esh = 0, ds = 43, __dsh = 0, edi = 137543336, esi = 
512, ebp = 3204445972, esp = 3204445948, ebx = 1090151636, edx = 1, ecx = 137598230, eax = 512, trapno = 14, 
err = 4, eip = 1090069955, cs = 35, __csh = 0, eflags = 66054, esp_at_signal = 3204445948, ss = 43, __ssh = 
0, fpstate = 0xbefff480, oldmask = 2147483648, cr2 = 520}) at sighandler.c:38
#6  <signal handler called>
#7  g_hash_node_new (key=0x83394fb, value=0x413dd090) at ghash.c:360
#8  0x40f91f11 in g_hash_table_insert (hash_table=0x832bea8, key=0x83394fb, value=0x413dd090) at ghash.c:168
#9  0x412f5a3a in maildir_summary_check (cls=0x8207220, changes=0x81afc00, ex=0x416968e8) at 
camel-maildir-summary.c:559
#10 0x412eded3 in camel_local_summary_check (cls=0x8207220, changeinfo=0x81afc00, ex=0x416968e8) at 
camel-local-summary.c:257
#11 0x412f5ad2 in maildir_summary_sync (cls=0x8207220, expunge=0, changes=0x81afc00, ex=0x416968e8) at 
camel-maildir-summary.c:726
#12 0x412edf16 in camel_local_summary_sync (cls=0x8207220, expunge=0, changeinfo=0x81afc00, ex=0x416968e8) at 
camel-local-summary.c:286
#13 0x412ecca6 in local_sync (folder=0x82066e0, expunge=0, ex=0x416968e8) at camel-local-folder.c:420
#14 0x4004ae39 in camel_folder_sync (folder=0x82066e0, expunge=0, ex=0x416968e8) at camel-folder.c:279
#15 0x0809e590 in mlf_sync (folder=0x82066e0, expunge=0, ex=0x416968e8) at mail-local.c:260
#16 0x4004ae39 in camel_folder_sync (folder=0x8148e38, expunge=0, ex=0x416968e8) at camel-folder.c:279
#17 0x4004190d in close_folder (key=0x41647f48, value=0x8148e38, data=0x83a28d0) at camel-filter-driver.c:763
#18 0x40f923a5 in g_hash_table_foreach (hash_table=0x879d550, func=0x400418d0 <close_folder>, 
user_data=0x83a28d0) at ghash.c:300
#19 0x400419cb in close_folders (driver=0x83a28d0) at camel-filter-driver.c:780
#20 0x40040cd4 in camel_filter_driver_finalise (obj=0x83a28d0) at camel-filter-driver.c:239
#21 0x40066476 in camel_object_unref (vo=0x83a28d0) at camel-object.c:450
#22 0x4004d556 in filter_free (session=0x8168c68, msg=0x416968c8) at camel-folder.c:1614
#23 0x4007436d in session_thread_msg_free (session=0x8168c68, msg=0x416968c8) at camel-session.c:745
#24 0x4022d19e in thread_destroy_msg (e=0x81da7e0, m=0x416968c8) at e-msgport.c:601
#25 0x4022d305 in thread_dispatch (din=0x81da7e0) at e-msgport.c:704
#26 0x4038fd53 in pthread_start_thread (arg=0xbefffbe0) at manager.c:300

Thread 6 (Thread 65541 (LWP 14432)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbf1ffbe0) at pthread.c:1084
#2  0x4038ef05 in pthread_cond_wait (cond=0x0, mutex=0x814ba90) at restart.h:34
#3  0x4022caea in e_msgport_wait (mp=0x814ba60) at e-msgport.c:305
#4  0x4022d38a in thread_dispatch (din=0x814ba08) at e-msgport.c:665
#5  0x4038fd53 in pthread_start_thread (arg=0xbf1ffbe0) at manager.c:300

Thread 5 (Thread 49156 (LWP 14429)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbf3ffbe0) at pthread.c:1084
#2  0x4038ef05 in pthread_cond_wait (cond=0x0, mutex=0x814ba90) at restart.h:34
#3  0x4022caea in e_msgport_wait (mp=0x814ba60) at e-msgport.c:305
#4  0x4022d38a in thread_dispatch (din=0x814ba08) at e-msgport.c:665
#5  0x4038fd53 in pthread_start_thread (arg=0xbf3ffbe0) at manager.c:300

Thread 4 (Thread 32771 (LWP 14426)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbf5ffbe0) at pthread.c:1084
---Type <return> to continue, or q <return> to quit---
#2  0x4038ef05 in pthread_cond_wait (cond=0x0, mutex=0x814b9d8) at restart.h:34
#3  0x4022caea in e_msgport_wait (mp=0x814b9a8) at e-msgport.c:305
#4  0x4022d38a in thread_dispatch (din=0x814b950) at e-msgport.c:665
#5  0x4038fd53 in pthread_start_thread (arg=0xbf5ffbe0) at manager.c:300

Thread 3 (Thread 16386 (LWP 14425)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbf7ffbe0) at pthread.c:1084
#2  0x4038ef05 in pthread_cond_wait (cond=0x0, mutex=0x814b920) at restart.h:34
#3  0x4022caea in e_msgport_wait (mp=0x814b8f0) at e-msgport.c:305
#4  0x4022d38a in thread_dispatch (din=0x814b898) at e-msgport.c:665
#5  0x4038fd53 in pthread_start_thread (arg=0xbf7ffbe0) at manager.c:300

Thread 2 (Thread 32769 (LWP 14424)):
#0  0x411582c0 in *__GI___poll (fds=0x817529c, nfds=1, timeout=201) at ../sysdeps/unix/sysv/linux/poll.c:63
#1  0x4038fa8e in __pthread_manager (arg=0xc9) at manager.c:145

Thread 1 (Thread 16384 (LWP 14372)):
#0  0x41135b89 in __wait4 () at __wait4:-1
#1  0x411a9020 in __DTOR_END__ () from /usr/lib/debug/libc.so.6
#2  0x40394061 in waitpid (pid=14564, stat_loc=0xbffff4bc, options=0) at wrapsyscall.c:181
#3  0x40bd7a12 in gnome_init () from /usr/lib/libgnomeui.so.32
#4  0x080ae6d6 in segv_redirect (sig=-1073744516) at main.c:71
#5  0x4039575a in __pthread_sighandler (signo=11, ctx=
      {gs = 0, __gsh = 0, fs = 0, __fsh = 0, es = 43, __esh = 0, ds = 43, __dsh = 0, edi = 136718904, esi = 
21, ebp = 3221223560, esp = 3221223548, ebx = 136719072, edx = 120, ecx = 21, eax = 4294967292, trapno = 0, 
err = 0, eip = 1091928768, cs = 35, __csh = 0, eflags = 2097682, esp_at_signal = 3221223548, ss = 43, __ssh = 
0, fpstate = 0xbffff600, oldmask = 2147483648, cr2 = 0}) at sighandler.c:38
#6  <signal handler called>
#7  0x411582c0 in *__GI___poll (fds=0x8262a38, nfds=3221222588, timeout=0) at 
../sysdeps/unix/sysv/linux/poll.c:63
#8  0x40f95f09 in g_main_poll (timeout=1187, use_priority=0, priority=0) at gmain.c:1034
#9  0x40f958bd in g_main_iterate (block=1, dispatch=1) at gmain.c:808
#10 0x40f95c6c in g_main_run (loop=0x814edb0) at gmain.c:935
#11 0x40eb77f7 in gtk_main () at gtkmain.c:524
#12 0x404f8ecd in bonobo_main () from /usr/lib/libbonobo.so.2
#13 0x080ae84c in main (argc=-1073743020, argv=0x80f8a35) at main.c:160
0x41135b89      -1      in __wait4





[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]