Re: [Evolution] [SMP+evolution-mail] Memory corruption

[Mika Liljeberg <mika liljeberg welho com>]

On Wed, 2003-03-05 at 14:07, Mika Liljeberg wrote:
> More evidence. This time the heap is clearly corrupted. malloc() crashes
> inside libc and the application deadlocks on the head allocator mutex.
>
> How many of these do you want in bugzilla? :)

Ok, looks like I'm having a particularly bad day today. Before anyone
suggests it, I've ruled out a faulty memory chip by running some pretty
extensive memory tests on my machine. Besides, none of my other
applications are crashing this way.

This time, thread 7 barfs within glib trying to allocate a hash node.

Any ideas?

        MikaL


(gdb) thread apply all bt

Thread 8 (Thread 98311 (LWP 14434)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbedffbe0) at pthread.c:1084
#2  0x4038ef05 in pthread_cond_wait (cond=0x0, mutex=0x814ba90) at restart.h:34
#3  0x4022caea in e_msgport_wait (mp=0x814ba60) at e-msgport.c:305
#4  0x4022d38a in thread_dispatch (din=0x814ba08) at e-msgport.c:665
#5  0x4038fd53 in pthread_start_thread (arg=0xbedffbe0) at manager.c:300

Thread 7 (Thread 163846 (LWP 14463)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbefffbe0) at pthread.c:1084
#2  0x40393790 in __pthread_alt_lock (lock=0x8105498, self=0xbefffbe0) at restart.h:34
#3  0x40390984 in __pthread_mutex_lock (mutex=0x8105488) at mutex.c:120
#4  0x080ae6b3 in segv_redirect (sig=1) at main.c:80
#5  0x4039575a in __pthread_sighandler (signo=11, ctx=
      {gs = 0, __gsh = 0, fs = 0, __fsh = 0, es = 43, __esh = 0, ds = 43, __dsh = 0, edi = 137543336, esi = 
512, ebp = 3204445972, esp = 3204445948, ebx = 1090151636, edx = 1, ecx = 137598230, eax = 512, trapno = 14, 
err = 4, eip = 1090069955, cs = 35, __csh = 0, eflags = 66054, esp_at_signal = 3204445948, ss = 43, __ssh = 
0, fpstate = 0xbefff480, oldmask = 2147483648, cr2 = 520}) at sighandler.c:38
#6  <signal handler called>
#7  g_hash_node_new (key=0x83394fb, value=0x413dd090) at ghash.c:360
#8  0x40f91f11 in g_hash_table_insert (hash_table=0x832bea8, key=0x83394fb, value=0x413dd090) at ghash.c:168
#9  0x412f5a3a in maildir_summary_check (cls=0x8207220, changes=0x81afc00, ex=0x416968e8) at 
camel-maildir-summary.c:559
#10 0x412eded3 in camel_local_summary_check (cls=0x8207220, changeinfo=0x81afc00, ex=0x416968e8) at 
camel-local-summary.c:257
#11 0x412f5ad2 in maildir_summary_sync (cls=0x8207220, expunge=0, changes=0x81afc00, ex=0x416968e8) at 
camel-maildir-summary.c:726
#12 0x412edf16 in camel_local_summary_sync (cls=0x8207220, expunge=0, changeinfo=0x81afc00, ex=0x416968e8) at 
camel-local-summary.c:286
#13 0x412ecca6 in local_sync (folder=0x82066e0, expunge=0, ex=0x416968e8) at camel-local-folder.c:420
#14 0x4004ae39 in camel_folder_sync (folder=0x82066e0, expunge=0, ex=0x416968e8) at camel-folder.c:279
#15 0x0809e590 in mlf_sync (folder=0x82066e0, expunge=0, ex=0x416968e8) at mail-local.c:260
#16 0x4004ae39 in camel_folder_sync (folder=0x8148e38, expunge=0, ex=0x416968e8) at camel-folder.c:279
#17 0x4004190d in close_folder (key=0x41647f48, value=0x8148e38, data=0x83a28d0) at camel-filter-driver.c:763
#18 0x40f923a5 in g_hash_table_foreach (hash_table=0x879d550, func=0x400418d0 <close_folder>, 
user_data=0x83a28d0) at ghash.c:300
#19 0x400419cb in close_folders (driver=0x83a28d0) at camel-filter-driver.c:780
#20 0x40040cd4 in camel_filter_driver_finalise (obj=0x83a28d0) at camel-filter-driver.c:239
#21 0x40066476 in camel_object_unref (vo=0x83a28d0) at camel-object.c:450
#22 0x4004d556 in filter_free (session=0x8168c68, msg=0x416968c8) at camel-folder.c:1614
#23 0x4007436d in session_thread_msg_free (session=0x8168c68, msg=0x416968c8) at camel-session.c:745
#24 0x4022d19e in thread_destroy_msg (e=0x81da7e0, m=0x416968c8) at e-msgport.c:601
#25 0x4022d305 in thread_dispatch (din=0x81da7e0) at e-msgport.c:704
#26 0x4038fd53 in pthread_start_thread (arg=0xbefffbe0) at manager.c:300

Thread 6 (Thread 65541 (LWP 14432)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbf1ffbe0) at pthread.c:1084
#2  0x4038ef05 in pthread_cond_wait (cond=0x0, mutex=0x814ba90) at restart.h:34
#3  0x4022caea in e_msgport_wait (mp=0x814ba60) at e-msgport.c:305
#4  0x4022d38a in thread_dispatch (din=0x814ba08) at e-msgport.c:665
#5  0x4038fd53 in pthread_start_thread (arg=0xbf1ffbe0) at manager.c:300

Thread 5 (Thread 49156 (LWP 14429)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbf3ffbe0) at pthread.c:1084
#2  0x4038ef05 in pthread_cond_wait (cond=0x0, mutex=0x814ba90) at restart.h:34
#3  0x4022caea in e_msgport_wait (mp=0x814ba60) at e-msgport.c:305
#4  0x4022d38a in thread_dispatch (din=0x814ba08) at e-msgport.c:665
#5  0x4038fd53 in pthread_start_thread (arg=0xbf3ffbe0) at manager.c:300

Thread 4 (Thread 32771 (LWP 14426)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbf5ffbe0) at pthread.c:1084
---Type <return> to continue, or q <return> to quit---
#2  0x4038ef05 in pthread_cond_wait (cond=0x0, mutex=0x814b9d8) at restart.h:34
#3  0x4022caea in e_msgport_wait (mp=0x814b9a8) at e-msgport.c:305
#4  0x4022d38a in thread_dispatch (din=0x814b950) at e-msgport.c:665
#5  0x4038fd53 in pthread_start_thread (arg=0xbf5ffbe0) at manager.c:300

Thread 3 (Thread 16386 (LWP 14425)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbf7ffbe0) at pthread.c:1084
#2  0x4038ef05 in pthread_cond_wait (cond=0x0, mutex=0x814b920) at restart.h:34
#3  0x4022caea in e_msgport_wait (mp=0x814b8f0) at e-msgport.c:305
#4  0x4022d38a in thread_dispatch (din=0x814b898) at e-msgport.c:665
#5  0x4038fd53 in pthread_start_thread (arg=0xbf7ffbe0) at manager.c:300

Thread 2 (Thread 32769 (LWP 14424)):
#0  0x411582c0 in *__GI___poll (fds=0x817529c, nfds=1, timeout=201) at ../sysdeps/unix/sysv/linux/poll.c:63
#1  0x4038fa8e in __pthread_manager (arg=0xc9) at manager.c:145

Thread 1 (Thread 16384 (LWP 14372)):
#0  0x41135b89 in __wait4 () at __wait4:-1
#1  0x411a9020 in __DTOR_END__ () from /usr/lib/debug/libc.so.6
#2  0x40394061 in waitpid (pid=14564, stat_loc=0xbffff4bc, options=0) at wrapsyscall.c:181
#3  0x40bd7a12 in gnome_init () from /usr/lib/libgnomeui.so.32
#4  0x080ae6d6 in segv_redirect (sig=-1073744516) at main.c:71
#5  0x4039575a in __pthread_sighandler (signo=11, ctx=
      {gs = 0, __gsh = 0, fs = 0, __fsh = 0, es = 43, __esh = 0, ds = 43, __dsh = 0, edi = 136718904, esi = 
21, ebp = 3221223560, esp = 3221223548, ebx = 136719072, edx = 120, ecx = 21, eax = 4294967292, trapno = 0, 
err = 0, eip = 1091928768, cs = 35, __csh = 0, eflags = 2097682, esp_at_signal = 3221223548, ss = 43, __ssh = 
0, fpstate = 0xbffff600, oldmask = 2147483648, cr2 = 0}) at sighandler.c:38
#6  <signal handler called>
#7  0x411582c0 in *__GI___poll (fds=0x8262a38, nfds=3221222588, timeout=0) at 
../sysdeps/unix/sysv/linux/poll.c:63
#8  0x40f95f09 in g_main_poll (timeout=1187, use_priority=0, priority=0) at gmain.c:1034
#9  0x40f958bd in g_main_iterate (block=1, dispatch=1) at gmain.c:808
#10 0x40f95c6c in g_main_run (loop=0x814edb0) at gmain.c:935
#11 0x40eb77f7 in gtk_main () at gtkmain.c:524
#12 0x404f8ecd in bonobo_main () from /usr/lib/libbonobo.so.2
#13 0x080ae84c in main (argc=-1073743020, argv=0x80f8a35) at main.c:160
0x41135b89      -1      in __wait4