[Evolution] Evolution would crash if the title contains some patterns when sending or saving

[Hongzheng Wang <wanghz gmail com>]

Hello,

I'm using evolution 2.2.2 shipped by Debian Linux.  I found that
evolution would crash if the title of mail contains some specific
patterns when send or save it.  For example, the title
 `RE: 五一 快乐' (there are chinese words here) would make evolution
crash, but the title
`RE: 五一快乐' (the space between the chinese sentence is removed) is OK.
I have also tested other patterns and found some others would make it
crash too, for example, `RE:' follows only one chinese word.

The locale of mine is zh_CN.UTF-8.  And I have also tested
en_US.8859-1 and en_US.UTF-8.  The problem occured too.

The bt information of gdb reports:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1228442016 (LWP 8079)]
0xb6d54e09 in strcasecmp () from /lib/tls/libc.so.6
(gdb) bt
#0  0xb6d54e09 in strcasecmp () from /lib/tls/libc.so.6
#1  0xb7ed2d4d in camel_header_format_ctext ()
from /usr/lib/libcamel-1.2.so.0
#2  0xb7ed3171 in camel_header_encode_string ()
from /usr/lib/libcamel-1.2.so.0
#3  0xb7ecc586 in camel_mime_message_set_subject ()
from /usr/lib/libcamel-1.2.so.0
#4  0xb6726c29 in e_msg_composer_hdrs_new ()
from /usr/lib/evolution/2.2/components/libevolution-mail.so
#5  0xb6726e4b in e_msg_composer_hdrs_to_message ()
from /usr/lib/evolution/2.2/components/libevolution-mail.so
#6  0xb6729918 in e_msg_composer_clear_inlined_table ()
from /usr/lib/evolution/2.2/components/libevolution-mail.so
#7  0xb6734779 in e_msg_composer_get_message ()
from /usr/lib/evolution/2.2/components/libevolution-mail.so
#8  0xb6734847 in e_msg_composer_get_message_draft ()
from /usr/lib/evolution/2.2/components/libevolution-mail.so
#9  0xb66c4595 in em_utils_composer_save_draft_cb ()
from /usr/lib/evolution/2.2/components/libevolution-mail.so
#10 0xb6eb1343 in g_cclosure_marshal_VOID__BOOLEAN ()
from /usr/lib/libgobject-2.0.so.0
#11 0xb6e9f736 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#12 0xb6eb0dcf in g_signal_emit_by_name ()
from /usr/lib/libgobject-2.0.so.0
#13 0xb6eafe9c in g_signal_emit_valist ()
from /usr/lib/libgobject-2.0.so.0
#14 0xb6eb0126 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#15 0xb672c477 in e_msg_composer_get_sig_file_content ()
from /usr/lib/evolution/2.2/components/libevolution-mail.so
#16 0xb79146c4 in bonobo_socket_add_id ()
from /usr/lib/libbonoboui-2.so.0
#17 0xb6e9f736 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#18 0xb763efe3 in bonobo_closure_invoke_va_list ()
from /usr/lib/libbonobo-2.so.0
#19 0xb763f24b in bonobo_closure_invoke ()
from /usr/lib/libbonobo-2.so.0
#20 0xb7914582 in bonobo_socket_add_id ()
from /usr/lib/libbonoboui-2.so.0
#21 0xb7640321 in _ORBIT_skel_small_Bonobo_UIComponent_execVerb ()
from /usr/lib/libbonobo-2.so.0
#22 0xb759de28 in ORBit_c_stub_invoke () from /usr/lib/libORBit-2.so.0
#23 0xb7644834 in Bonobo_UIComponent_execVerb ()
from /usr/lib/libbonobo-2.so.0
#24 0xb791ae6c in bonobo_ui_engine_get_ui_container ()
from /usr/lib/libbonoboui-2.so.0
#25 0xb791b088 in bonobo_ui_engine_get_ui_container ()
from /usr/lib/libbonoboui-2.so.0
#26 0xb6eb1c03 in g_cclosure_marshal_VOID__POINTER ()
from /usr/lib/libgobject-2.0.so.0
#27 0xb6e9f9c9 in g_cclosure_new_swap ()
from /usr/lib/libgobject-2.0.so.0
#28 0xb6e9f736 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#29 0xb6eb0855 in g_signal_emit_by_name ()
from /usr/lib/libgobject-2.0.so.0
#30 0xb6eafe9c in g_signal_emit_valist ()
from /usr/lib/libgobject-2.0.so.0
#31 0xb6eb0126 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#32 0xb791d684 in bonobo_ui_engine_emit_verb_on_w ()
from /usr/lib/libbonoboui-2.so.0
#33 0xb79227a7 in bonobo_ui_sync_menu_add_popup ()
from /usr/lib/libbonoboui-2.so.0
#34 0xb6eb12a6 in g_cclosure_marshal_VOID__VOID ()
from /usr/lib/libgobject-2.0.so.0
#35 0xb6e9f736 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#36 0xb6eb0dcf in g_signal_emit_by_name ()
from /usr/lib/libgobject-2.0.so.0
#37 0xb6eafe9c in g_signal_emit_valist ()
from /usr/lib/libgobject-2.0.so.0
#38 0xb6eb0126 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#39 0xb7327067 in gtk_widget_activate ()
from /usr/lib/libgtk-x11-2.0.so.0
#40 0xb7246a32 in gtk_menu_shell_activate_item ()
from /usr/lib/libgtk-x11-2.0.so.0
#41 0xb7245fc5 in _gtk_menu_shell_activate ()
from /usr/lib/libgtk-x11-2.0.so.0
#42 0xb723ed56 in gtk_menu_reorder_child ()
from /usr/lib/libgtk-x11-2.0.so.0
#43 0xb72379fe in _gtk_marshal_BOOLEAN__BOXED ()
from /usr/lib/libgtk-x11-2.0.so.0
#44 0xb6e9f9c9 in g_cclosure_new_swap ()
from /usr/lib/libgobject-2.0.so.0
#45 0xb6e9f736 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#46 0xb6eb0855 in g_signal_emit_by_name ()
from /usr/lib/libgobject-2.0.so.0
#47 0xb6eafc8c in g_signal_emit_valist ()
from /usr/lib/libgobject-2.0.so.0
#48 0xb6eb0126 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#49 0xb7326e97 in gtk_widget_send_expose ()
from /usr/lib/libgtk-x11-2.0.so.0
#50 0xb7236512 in gtk_propagate_event ()
from /usr/lib/libgtk-x11-2.0.so.0
#51 0xb7235366 in gtk_main_do_event () from /usr/lib/libgtk-x11-2.0.so.0
#52 0xb6fad775 in _gdk_events_queue () from /usr/lib/libgdk-x11-2.0.so.0
#53 0xb6e34582 in g_main_depth () from /usr/lib/libglib-2.0.so.0
#54 0xb6e355f8 in g_main_context_dispatch ()
from /usr/lib/libglib-2.0.so.0
#55 0xb6e35930 in g_main_context_dispatch ()
from /usr/lib/libglib-2.0.so.0
#56 0xb6e35ed3 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#57 0xb762bc98 in bonobo_main () from /usr/lib/libbonobo-2.so.0
#58 0x08066e37 in main ()

--
Hongzheng Wang