Re: [Evolution] [SMP+evolution-mail] Memory corruption

[Mika Liljeberg <mika liljeberg welho com>]

Here's another one. Corrupted memory heap again, looks like.

        MikaL

(gdb) thread apply all bt

Thread 9 (Thread 131080 (LWP 26797)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbebffbe0) at pthread.c:1084
#2  0x4038ef05 in pthread_cond_wait (cond=0x0, mutex=0x814ba80) at restart.h:34
#3  0x4022caea in e_msgport_wait (mp=0x814ba50) at e-msgport.c:305
#4  0x4022d38a in thread_dispatch (din=0x814b9f8) at e-msgport.c:665
#5  0x4038fd53 in pthread_start_thread (arg=0xbebffbe0) at manager.c:300

Thread 8 (Thread 98311 (LWP 26795)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbedffbe0) at pthread.c:1084
#2  0x4038ef05 in pthread_cond_wait (cond=0x0, mutex=0x814ba80) at restart.h:34
#3  0x4022caea in e_msgport_wait (mp=0x814ba50) at e-msgport.c:305
#4  0x4022d38a in thread_dispatch (din=0x814b9f8) at e-msgport.c:665
#5  0x4038fd53 in pthread_start_thread (arg=0xbedffbe0) at manager.c:300

Thread 7 (Thread 81926 (LWP 26794)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbefffbe0) at pthread.c:1084
#2  0x4038ef05 in pthread_cond_wait (cond=0x0, mutex=0x814ba80) at restart.h:34
#3  0x4022caea in e_msgport_wait (mp=0x814ba50) at e-msgport.c:305
#4  0x4022d38a in thread_dispatch (din=0x814b9f8) at e-msgport.c:665
#5  0x4038fd53 in pthread_start_thread (arg=0xbefffbe0) at manager.c:300

Thread 6 (Thread 180229 (LWP 26800)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbf1ffbe0) at pthread.c:1084
#2  0x4038ef05 in pthread_cond_wait (cond=0x0, mutex=0x82b32f8) at restart.h:34
#3  0x4022caea in e_msgport_wait (mp=0x82b3900) at e-msgport.c:305
#4  0x4022d38a in thread_dispatch (din=0x8287128) at e-msgport.c:665
#5  0x4038fd53 in pthread_start_thread (arg=0xbf1ffbe0) at manager.c:300

Thread 5 (Thread 49156 (LWP 26789)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbf3ffbe0) at pthread.c:1084
#2  0x4038ef05 in pthread_cond_wait (cond=0x0, mutex=0x814ba80) at restart.h:34
#3  0x4022caea in e_msgport_wait (mp=0x814ba50) at e-msgport.c:305
#4  0x4022d38a in thread_dispatch (din=0x814b9f8) at e-msgport.c:665
#5  0x4038fd53 in pthread_start_thread (arg=0xbf3ffbe0) at manager.c:300

Thread 4 (Thread 32771 (LWP 26786)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbf5ffbe0) at pthread.c:1084
#2  0x4038ef05 in pthread_cond_wait (cond=0x0, mutex=0x814b9c8) at restart.h:34
#3  0x4022caea in e_msgport_wait (mp=0x814b998) at e-msgport.c:305
#4  0x4022d38a in thread_dispatch (din=0x814b940) at e-msgport.c:665
#5  0x4038fd53 in pthread_start_thread (arg=0xbf5ffbe0) at manager.c:300

Thread 3 (Thread 16386 (LWP 26785)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0xbf7ffbe0) at pthread.c:1084
#2  0x40393790 in __pthread_alt_lock (lock=0x8105498, self=0xbf7ffbe0) at restart.h:34
#3  0x40390984 in __pthread_mutex_lock (mutex=0x8105488) at mutex.c:120
#4  0x080ae6b3 in segv_redirect (sig=1) at main.c:80
#5  0x4039575a in __pthread_sighandler (signo=11, ctx=
      {gs = 0, __gsh = 0, fs = 0, __fsh = 0, es = 43, __esh = 0, ds = 43, __dsh = 0, edi = 2207860240, esi = 
1100962560, ebp = 3212835252, esp = 3212835228, ebx = 1092259872, edx = 1106897680, ecx = 1, eax = 
1106897680, trapno = 14, err = 4, eip = 1091592901, cs = 35, __csh = 0, eflags = 66118, esp_at_signal = 
3212835228, ss = 43, __ssh = 0, fpstate = 0xbf7ff720, oldmask = 2147483648, cr2 = 2207860244}) at 
sighandler.c:38
#6  <signal handler called>
#7  _int_free (av=0x419f5b08, mem=0x80ae66c) at malloc.c:4150
#8  0x411052ca in __libc_free (mem=0x419f5b08) at malloc.c:3344
#9  0x40f966fb in g_free (mem=0x419f5b08) at gmem.c:411
#10 0x4022c7e5 in e_msgport_destroy (mp=0x419f5b08) at e-msgport.c:182
#11 0x4006795f in camel_operation_unref (cc=0x418b2fa0) at camel-operation.c:191
#12 0x080a13d6 in mail_msg_received (e=0x814b888, msg=0x4187fd00, data=0x0) at mail-mt.c:511
#13 0x4022d1f6 in thread_received_msg (e=0x814b888, m=0x4187fd00) at e-msgport.c:617
#14 0x4022d2f1 in thread_dispatch (din=0x814b888) at e-msgport.c:698
#15 0x4038fd53 in pthread_start_thread (arg=0xbf7ffbe0) at manager.c:300

Thread 2 (Thread 32769 (LWP 26784)):
#0  0x411582c0 in *__GI___poll (fds=0x817522c, nfds=1, timeout=201) at ../sysdeps/unix/sysv/linux/poll.c:63
#1  0x4038fa8e in __pthread_manager (arg=0xc9) at manager.c:145

Thread 1 (Thread 16384 (LWP 26732)):
#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1  0x40391f35 in __pthread_wait_for_restart_signal (self=0x40396080) at pthread.c:1084
#2  0x40393790 in __pthread_alt_lock (lock=0x411a9cf0, self=0x40396080) at restart.h:34
#3  0x40390984 in __pthread_mutex_lock (mutex=0x411a9ce0) at mutex.c:120
#4  0x41103000 in ptmalloc_lock_all () at arena.c:222
#5  0x40391047 in __fork () at ptfork.c:74
#6  0x40bd79fc in gnome_init () from /usr/lib/libgnomeui.so.32
#7  0x080ae6d6 in segv_redirect (sig=-1073747012) at main.c:71
#8  0x4039575a in __pthread_sighandler (signo=11, ctx=
      {gs = 0, __gsh = 0, fs = 0, __fsh = 0, es = 43, __esh = 0, ds = 43, __dsh = 0, edi = 1093664784, esi = 
1120553856, ebp = 3221221096, esp = 3221221052, ebx = 1077513040, edx = 0, ecx = 1120553883, eax = 
1093664800, trapno = 0, err = 0, eip = 1077491391, cs = 35, __csh = 0, eflags = 2097810, esp_at_signal = 
3221221052, ss = 43, __ssh = 0, fpstate = 0xbfffec40, oldmask = 2147483648, cr2 = 0}) at sighandler.c:38
#9  <signal handler called>
#10 __pthread_alt_lock (lock=0x41300010, self=0xca0) at spinlock.c:359
#11 0x40390984 in __pthread_mutex_lock (mutex=0x41300010) at mutex.c:120
#12 0x411052b5 in __libc_free (mem=0x42ca4b80) at malloc.c:3342
#13 0x40f966fb in g_free (mem=0x42ca4b80) at gmem.c:411
#14 0x405b171d in find_node (adapter=0x82848c0, path=0x41d8f920) at e-tree-table-adapter.c:90
#15 0x405b1eb6 in fill_array_from_path (etta=0x82848c0, array=0x88179b0, path=0x41d8f920) at 
e-tree-table-adapter.c:376
#16 0x405b1f05 in fill_array_from_path (etta=0x82848c0, array=0x8814730, path=0x41d8f920) at 
e-tree-table-adapter.c:387
#17 0x405b277e in etta_proxy_node_changed (etm=0x8285460, path=0x822eeec, etta=0x82848c0) at 
e-tree-table-adapter.c:681
#18 0x40eb9043 in gtk_marshal_NONE__POINTER (object=0x8285460, func=0x405b2728 <etta_proxy_node_changed>, 
func_data=0x82848c0, args=0xbffff118) at gtkmarshal.c:193
#19 0x40ee8b6c in gtk_handlers_run (handlers=0x821f908, signal=0xbffff0c4, object=0x8285460, 
params=0xbffff118, after=0) at gtksignal.c:1917
#20 0x40ee7fd5 in gtk_signal_real_emit (object=0x8285460, signal_id=136, params=0xbffff118) at 
gtksignal.c:1477
#21 0x40ee60b3 in gtk_signal_emit (object=0x8285460, signal_id=136) at gtksignal.c:552
#22 0x405aa535 in e_tree_model_node_changed (tree_model=0x8285460, node=0x822eeec) at e-tree-model.c:261
#23 0x405b07d2 in ets_proxy_node_changed (etm=0x82b4a98, node=0x82270a0, ets=0x8285460) at 
e-tree-sorted.c:1026
#24 0x40eb9043 in gtk_marshal_NONE__POINTER (object=0x82b4a98, func=0x405b075c <ets_proxy_node_changed>, 
func_data=0x8285460, args=0xbffff4f8) at gtkmarshal.c:193
#25 0x40ee8b6c in gtk_handlers_run (handlers=0x821fa48, signal=0xbffff4a4, object=0x82b4a98, 
params=0xbffff4f8, after=0) at gtksignal.c:1917
#26 0x40ee7fd5 in gtk_signal_real_emit (object=0x82b4a98, signal_id=136, params=0xbffff4f8) at 
gtksignal.c:1477
#27 0x40ee60b3 in gtk_signal_emit (object=0x82b4a98, signal_id=136) at gtksignal.c:552
#28 0x405aa535 in e_tree_model_node_changed (tree_model=0x82b4a98, node=0x82270a0) at e-tree-model.c:261
#29 0x405a9463 in e_tree_memory_thaw (etmm=0x82b4a98) at e-tree-memory.c:209
#30 0x080b0da8 in build_flat (ml=0x827e740, summary=0x426148ec, changes=0x42b68c20) at message-list.c:1869
#31 0x080b24a4 in regen_list_regened (mm=0x8cf4bd0) at message-list.c:2729
#32 0x080a1202 in mail_msgport_replied (source=0x814b2f8, cond=G_IO_IN, d=0x814b490) at mail-mt.c:394
#33 0x40f93e00 in g_io_unix_dispatch (source_data=0x814b4c0, current_time=0xbffff920, user_data=0x814b490) at 
giounix.c:135
#34 0x40f954c8 in g_main_dispatch (dispatch_time=0xbffff920) at gmain.c:656
#35 0x40f95ad3 in g_main_iterate (block=1, dispatch=1) at gmain.c:877
#36 0x40f95c6c in g_main_run (loop=0x814eec8) at gmain.c:935
#37 0x40eb77f7 in gtk_main () at gtkmain.c:524
#38 0x404f8ecd in bonobo_main () from /usr/lib/libbonobo.so.2
#39 0x080ae84c in main (argc=-1073743020, argv=0x80f8a35) at main.c:160
0x410c2ae2      45      in ../sysdeps/unix/sysv/linux/sigsuspend.c
(gdb) t 1
[Switching to thread 1 (Thread 16384 (LWP 26732))]#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at 
../sysdeps/unix/sysv/linux/sigsuspend.c:45
45      in ../sysdeps/unix/sysv/linux/sigsuspend.c
(gdb) f 14
#14 0x405b171d in find_node (adapter=0x82848c0, path=0x41d8f920) at e-tree-table-adapter.c:90
90                      g_free(save_id);
(gdb) p save_id
$1 = 0x42ca4b80 "1046689808.22055_5214.devil"
(gdb) do
#13 0x40f966fb in g_free (mem=0x42ca4b80) at gmem.c:411
411     gmem.c: No such file or directory.
        in gmem.c
(gdb) t 3
[Switching to thread 3 (Thread 16386 (LWP 26785))]#0  0x410c2ae2 in *__GI___sigsuspend (set=0x411a9020) at 
../sysdeps/unix/sysv/linux/sigsuspend.c:45
45      ../sysdeps/unix/sysv/linux/sigsuspend.c: No such file or directory.
        in ../sysdeps/unix/sysv/linux/sigsuspend.c
(gdb) f 10
#10 0x4022c7e5 in e_msgport_destroy (mp=0x419f5b08) at e-msgport.c:182
182             g_free(mp);
(gdb) p mp
$2 = (EMsgPort *) 0x419f5b08
(gdb) p *mp
$3 = {queue = {head = 0x419f5b0c, tail = 0x0, tailpred = 0x419f5b08}, condwait = 0, pipe = {pipe = {-1, -1}, 
fd = {read = -1, write = -1}}, prpipe = {read = 0x0, 
    write = 0x0}, cond = 0x41e44510, lock = 0x4187e788}