Bug#314164: libgnomevfs2-0: evolution segfault in _gnome_vfs_drive_from_corba()

dann frazier dann frazier <dannf@hp.com>, 314164@bugs.debian.org
Tue, 14 Jun 2005 17:58:12 -0600


Package: libgnomevfs2-0
Version: 2.10.1-4
Severity: important

With the new libgnomevfs2-0, evolution now segfaults on my system.

To reproduce:
 1) start a new message
 2) Insert->Text File
 3) SEGV

_gnome_vfs_drive_from_corba is accessing the corba_drive pointer, without
checking if it is NULL first (it is NULL in this backtrace).

dannf@krebs:~$ LD_LIBRARY_PATH=/usr/lib/debug gdb evolution
GNU gdb 6.3-debian
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "ia64-linux"...(no debugging symbols found)
Using host libthread_db library "/usr/lib/debug/libthread_db.so.1".

(gdb) run
Starting program: /usr/bin/evolution
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[Thread debugging using libthread_db enabled]
[New Thread 16384 (LWP 31718)]
es menu class init
adding hook target 'source'

(evolution:31718): camel-WARNING **: Invalid root: '/home/dannf/.evolution/mail/local/Outbox.ibex.index'

(evolution:31718): camel-WARNING **: version: TEXT.000 (TEXT.000)

(evolution:31718): camel-WARNING **: block size: 1024 (1024) OK

(evolution:31718): camel-WARNING **: free: 0 (0 add size < 1024) OK

(evolution:31718): camel-WARNING **: last: 6144 (6144 and size: 1024) BAD

(evolution:31718): camel-WARNING **: flags: unSYNC
[New Thread 32769 (LWP 31722)]
[New Thread 16386 (LWP 31723)]
[New Thread 32771 (LWP 31724)]
[New Thread 49156 (LWP 31725)]
[Thread 32771 (LWP 31724) exited]
[New Thread 65541 (LWP 31726)]
[New Thread 81923 (LWP 31727)]
[Thread 81923 (LWP 31727) exited]
[New Thread 98307 (LWP 31728)]
[New Thread 114694 (LWP 31729)]
[New Thread 131079 (LWP 31731)]
[New Thread 147464 (LWP 31732)]
[New Thread 163849 (LWP 31733)]

(evolution:31718): composer-WARNING **: autosave load filename = "/home/dannf/.evolution-composer.autosave-pu5T5u"
[New Thread 180234 (LWP 31734)]
[New Thread 196619 (LWP 31735)]

(evolution:31718): gtkhtml-WARNING **: Cannot create spell dictionary instance (iid:OAFIID:GNOME_Spell_Dictionary:0.3)

(evolution:31718): Bonobo-WARNING **: Activation exception 'Failed to activate 'OAFIID:GNOME_Spell_Control:0.3''
restoring draft flag 'text/plain'
[New Thread 213004 (LWP 31738)]
[Thread 213004 (LWP 31738) exited]
update flow align

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 16384 (LWP 31718)]
_gnome_vfs_drive_from_corba (corba_drive=0x0,
    volume_monitor=0x600000000147a090) at gnome-vfs-drive.c:600
600     gnome-vfs-drive.c: No such file or directory.
        in gnome-vfs-drive.c
(gdb) bt
#0  _gnome_vfs_drive_from_corba (corba_drive=0x0,
    volume_monitor=0x600000000147a090) at gnome-vfs-drive.c:600
#1  0x20000000015a66f0 in read_drives_from_daemon (volume_monitor_client=0x1)
    at gnome-vfs-volume-monitor-client.c:132
#2  0x20000000015a6a90 in gnome_vfs_volume_monitor_client_init (
    volume_monitor_client=0x1) at gnome-vfs-volume-monitor-client.c:189
#3  0x2000000002aabe60 in IA__g_type_create_instance (type=1020)
    at gtype.c:1525
#4  0x2000000002a827d0 in g_object_constructor (type=1020,
    n_construct_properties=0, construct_params=0x0) at gobject.c:1045
#5  0x2000000002a81890 in IA__g_object_newv (object_type=6917529027662455760,
    n_parameters=0, parameters=0x0) at gobject.c:843
#6  0x2000000002a82740 in IA__g_object_new_valist (
    object_type=6917529027662455760, first_property_name=0x0,
    var_args=0x60000fffffffa8e0) at gobject.c:975
#7  0x2000000002a81200 in IA__g_object_new (object_type=6917529027662455760,
    first_property_name=0x0) at gobject.c:816
#8  0x20000000015a7c90 in _gnome_vfs_get_volume_monitor_internal (create=1)
    at gnome-vfs-volume-monitor.c:243
#9  0x20000000015a7d50 in gnome_vfs_get_volume_monitor ()
    at gnome-vfs-volume-monitor.c:277
#10 0x2000000007b07580 in gtk_file_system_gnome_vfs_init ()
   from /usr/lib/gtk-2.0/2.4.0/filesystems/libgnome-vfs.so
#11 0x2000000002aabe60 in IA__g_type_create_instance (type=1020)
    at gtype.c:1525
#12 0x2000000002a827d0 in g_object_constructor (type=1020,
    n_construct_properties=0, construct_params=0x0) at gobject.c:1045
#13 0x2000000002a81890 in IA__g_object_newv (object_type=6917529027662441728,
    n_parameters=0, parameters=0x0) at gobject.c:843
#14 0x2000000002a82740 in IA__g_object_new_valist (
    object_type=6917529027662441728, first_property_name=0x0,
    var_args=0x60000fffffffa9c0) at gobject.c:975
#15 0x2000000002a81200 in IA__g_object_new (object_type=6917529027662441728,
    first_property_name=0x0) at gobject.c:816
#16 0x2000000007b06f20 in gtk_file_system_gnome_vfs_new ()
   from /usr/lib/gtk-2.0/2.4.0/filesystems/libgnome-vfs.so
#17 0x2000000007b12b60 in fs_module_create ()
   from /usr/lib/gtk-2.0/2.4.0/filesystems/libgnome-vfs.so
#18 0x2000000002037130 in _gtk_file_system_module_create (
    fs_module=0x600000000145d8f0) at gtkfilesystem.c:1102
#19 0x2000000002037350 in _gtk_file_system_create (
    file_system_name=0x60000000014ea9e0 "gnome-vfs") at gtkfilesystem.c:1141
#20 0x2000000002019990 in set_file_system_backend (impl=0x6000000001445f80,
    backend=0x0) at gtkfilechooserdefault.c:3733
#21 0x2000000002a82aa0 in g_object_constructor (type=6917529027662339968,
    n_construct_properties=0, construct_params=0x600000000165a790)
    at gobject.c:1041
#22 0x20000000020191a0 in gtk_file_chooser_default_constructor (
    type=6917529027647129808, n_construct_properties=0,
    construct_params=0x600000000165a790) at gtkfilechooserdefault.c:3594
#23 0x2000000002a81890 in IA__g_object_newv (object_type=6917529027662002784,
    n_parameters=0, parameters=0x60000000014439a0) at gobject.c:843
#24 0x2000000002a824f0 in IA__g_object_new_valist (
    object_type=6917529027662002784, first_property_name=0x0,
    var_args=0x60000fffffffaaa0) at gobject.c:1026
#25 0x2000000002a81200 in IA__g_object_new (object_type=6917529027662002784,
    first_property_name=0x20000000022fc6d0 "file-system-backend")
    at gobject.c:816
#26 0x20000000020216a0 in _gtk_file_chooser_default_new (file_system=0x0)
---Type <return> to continue, or q <return> to quit---
    at gtkfilechooserdefault.c:6141
#27 0x2000000002023c80 in gtk_file_chooser_widget_constructor (type=0,
    n_construct_properties=33700992, construct_params=0xc00000000000048e)
    at gtkfilechooserwidget.c:156
#28 0x2000000002a81890 in IA__g_object_newv (object_type=6917529027659704448,
    n_parameters=1, parameters=0x600000000159ba28) at gobject.c:843
#29 0x2000000002a82740 in IA__g_object_new_valist (
    object_type=6917529027659704448, first_property_name=0x0,
    var_args=0x60000fffffffab20) at gobject.c:975
#30 0x2000000002a81200 in IA__g_object_new (object_type=6917529027659704448,
    first_property_name=0x0) at gobject.c:816
#31 0x200000000200bdc0 in gtk_file_chooser_dialog_constructor (
    type=6917529027659704448, n_construct_properties=0,
    construct_params=0x200000000200bda0) at gtkfilechooserdialog.c:374
#32 0x2000000002a81890 in IA__g_object_newv (object_type=6917529027641759360,
    n_parameters=1, parameters=0x6000000001688ae0) at gobject.c:843
#33 0x2000000002a824f0 in IA__g_object_new_valist (
    object_type=6917529027641759360, first_property_name=0x0,
    var_args=0x60000fffffffabe0) at gobject.c:1026
#34 0x2000000002a81200 in IA__g_object_new (object_type=6917529027641759360,
    first_property_name=0x20000000023858b8 "title") at gobject.c:816
#35 0x200000000200c320 in gtk_file_chooser_dialog_new_valist (
    title=0x20000000069fc0b0 "Insert: Text File", parent=0x0,
    action=GTK_FILE_CHOOSER_ACTION_OPEN, backend=0x0,
    first_button_text=0x20000000069fbf50 "gtk-cancel",
    varargs=0x60000fffffffabe0) at gtkfilechooserdialog.c:580
#36 0x200000000200c450 in IA__gtk_file_chooser_dialog_new (
    title=0x20000000069fc0b0 "Insert: Text File", parent=0x0,
    action=GTK_FILE_CHOOSER_ACTION_OPEN,
    first_button_text=0x20000000069fbf50 "gtk-cancel")
    at gtkfilechooserdialog.c:625
#37 0x20000000069d9d10 in insert_template_cb ()
   from /usr/lib/gtkhtml/libgnome-gtkhtml-editor-3.6.so
#38 0x20000000011f4320 in marshal_VOID__USER_DATA_STRING ()
   from /usr/lib/libbonoboui-2.so.0
#39 0x2000000002a7bfe0 in IA__g_closure_invoke (closure=0x600000000069d8a0,
    return_value=0x60000fffffffac60, n_param_values=2,
    param_values=0x6000000001433400, invocation_hint=0x0) at gclosure.c:437
#40 0x20000000018b9940 in bonobo_closure_invoke_va_list ()
   from /usr/lib/libbonobo-2.so.0
#41 0x20000000018b9e30 in bonobo_closure_invoke ()
   from /usr/lib/libbonobo-2.so.0
#42 0x20000000011f40e0 in impl_Bonobo_UIComponent_execVerb ()
   from /usr/lib/libbonoboui-2.so.0
#43 0x20000000018bc280 in _ORBIT_skel_small_Bonobo_UIComponent_execVerb ()
   from /usr/lib/libbonobo-2.so.0
#44 0x2000000001a4f2e0 in ORBit_c_stub_invoke () from /usr/lib/libORBit-2.so.0
#45 0x20000000018c3f60 in Bonobo_UIComponent_execVerb ()
   from /usr/lib/libbonobo-2.so.0
#46 0x20000000012010d0 in bonobo_ui_engine_get_ui_container ()
   from /usr/lib/libbonoboui-2.so.0
#47 0x2000000002aa3ce0 in IA__g_cclosure_marshal_VOID__POINTER (
    closure=0x60000000001d3510, return_value=0x0, n_param_values=5480528,
    param_values=0x60000fffffffadf0, invocation_hint=0x60000fffffffad60,
    marshal_data=0x20000000031ecfd0) at gmarshal.c:601
#48 0x2000000002a7c4b0 in g_type_class_meta_marshal (
    closure=0x60000000001d3510, return_value=0x0, n_param_values=2,
    param_values=0x60000fffffffadd0, invocation_hint=0x60000fffffffad60,
    marshal_data=0x98) at gclosure.c:514
---Type <return> to continue, or q <return> to quit---
#49 0x2000000002a7bfe0 in IA__g_closure_invoke (closure=0x60000000001d3510,
    return_value=0x0, n_param_values=2, param_values=0x60000fffffffadd0,
    invocation_hint=0x60000fffffffad60) at gclosure.c:437
#50 0x2000000002aa0fc0 in signal_emit_unlocked_R (node=0x60000000001d35c0,
    detail=0, instance=0x600000000053a050, emission_return=0x0,
    instance_and_params=0x60000fffffffadd0) at gsignal.c:2345
#51 0x2000000002a9fb30 in IA__g_signal_emit_valist (
    instance=0x600000000053a050, signal_id=75873, detail=0,
    var_args=0x60000fffffffafe0) at gsignal.c:2167
#52 0x2000000002aa0080 in IA__g_signal_emit (instance=0x600000000053a050,
    signal_id=75873, detail=0) at gsignal.c:2291
#53 0x2000000001205dd0 in bonobo_ui_engine_emit_verb_on_w ()
   from /usr/lib/libbonoboui-2.so.0
#54 0x20000000012105f0 in exec_verb_cb () from /usr/lib/libbonoboui-2.so.0
#55 0x2000000002aa2940 in IA__g_cclosure_marshal_VOID__VOID (
    closure=0x60000000006e6ac0, return_value=0x0, n_param_values=7236480,
    param_values=0x60000fffffffb080, invocation_hint=0x60000fffffffb010,
    marshal_data=0x20000000031ecc60) at gmarshal.c:77
#56 0x2000000002a7bfe0 in IA__g_closure_invoke (closure=0x60000000006e6ac0,
    return_value=0x0, n_param_values=1, param_values=0x60000fffffffb080,
    invocation_hint=0x60000fffffffb010) at gclosure.c:437
#57 0x2000000002aa1e80 in signal_emit_unlocked_R (node=0x60000000001e4760,
    detail=0, instance=0x60000000006e6b80, emission_return=0x0,
    instance_and_params=0x60000fffffffb080) at gsignal.c:2345
#58 0x2000000002a9fb30 in IA__g_signal_emit_valist (
    instance=0x60000000006e6b80, signal_id=162, detail=0,
    var_args=0x60000fffffffb288) at gsignal.c:2167
#59 0x2000000002aa0080 in IA__g_signal_emit (instance=0x60000000006e6b80,
    signal_id=162, detail=0) at gsignal.c:2291
#60 0x20000000022b0d10 in IA__gtk_widget_activate (widget=0x60000000006e6b80)
    at gtkwidget.c:3656
#61 0x20000000020e4720 in IA__gtk_menu_shell_activate_item (
    menu_shell=0x60000000005a2270, menu_item=0x60000000006e6b80,
    force_deactivate=19688736) at gtkmenushell.c:944
#62 0x20000000020e2dc0 in gtk_menu_shell_button_release (
    widget=0x60000000005a2270, event=0x60000000000c5da0) at gtkmenushell.c:526
#63 0x20000000020d3b20 in gtk_menu_button_release (widget=0x60000000005a2270,
    event=0x60000000000c5da0) at gtkmenu.c:2539
#64 0x20000000020c5660 in _gtk_marshal_BOOLEAN__BOXED (
    closure=0x600000000009ea90, return_value=0x60000fffffffb2e0,
    n_param_values=5907056, param_values=0x60000fffffffb330,
    invocation_hint=0x60000fffffffb2c0, marshal_data=0x20000000031b8e90)
    at gtkmarshalers.c:83
#65 0x2000000002a7c4b0 in g_type_class_meta_marshal (
    closure=0x600000000009ea90, return_value=0x60000fffffffb2e0,
    n_param_values=2, param_values=0x60000fffffffb330,
    invocation_hint=0x60000fffffffb2c0, marshal_data=0x160) at gclosure.c:514
#66 0x2000000002a7bfe0 in IA__g_closure_invoke (closure=0x600000000009ea90,
    return_value=0x60000fffffffb2e0, n_param_values=2,
    param_values=0x60000fffffffb330, invocation_hint=0x60000fffffffb2c0)
    at gclosure.c:437
#67 0x2000000002aa0fc0 in signal_emit_unlocked_R (node=0x600000000009eb20,
    detail=0, instance=0x60000000005a2270, emission_return=0x60000fffffffb510,
    instance_and_params=0x60000fffffffb330) at gsignal.c:2345
#68 0x2000000002a9f780 in IA__g_signal_emit_valist (
    instance=0x60000000005a2270, signal_id=796817, detail=0,
    var_args=0x60000fffffffb540) at gsignal.c:2257
#69 0x2000000002aa0080 in IA__g_signal_emit (instance=0x60000000005a2270,
    signal_id=796817, detail=0) at gsignal.c:2291
---Type <return> to continue, or q <return> to quit---
#70 0x20000000022b0930 in gtk_widget_event_internal (
    widget=0x60000000005a2270, event=0x60000000000c5da0) at gtkwidget.c:3524
#71 0x20000000020c2ce0 in IA__gtk_propagate_event (widget=0x60000000005a2270,
    event=0x60000000000c5da0) at gtkmain.c:2084
#72 0x20000000020c08c0 in IA__gtk_main_do_event (event=0x60000000000c5da0)
    at gtkmain.c:1190
#73 0x20000000027dd5e0 in gdk_event_dispatch (source=0x60000000000c5da0,
    callback=0x2000000002b63850 <g_main_dispatch+736>,
    user_data=0xc000000000000da0) at gdkevents-x11.c:2247
#74 0x2000000002b63850 in g_main_dispatch (context=0x600000000005d0b0)
    at gmain.c:1933
#75 0x2000000002b664f0 in IA__g_main_context_dispatch (
    context=0x600000000005d0b0) at gmain.c:2478
#76 0x2000000002b66d20 in g_main_context_iterate (context=0x600000000005d0b0,
    block=8, dispatch=1, self=0x1) at gmain.c:2495
#77 0x2000000002b67cf0 in IA__g_main_loop_run (loop=0x60000000000c5b90)
    at gmain.c:2709
#78 0x20000000018939a0 in bonobo_main () from /usr/lib/libbonobo-2.so.0
#79 0x400000000004df80 in main ()


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: ia64
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.11-1-mckinley
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages libgnomevfs2-0 depends on:
ii  libbonobo2-0                2.8.1-2      Bonobo CORBA interfaces library
ii  libc6.1                     2.3.2.ds1-22 GNU C Library: Shared libraries an
ii  libgconf2-4                 2.10.0-2     GNOME configuration database syste
ii  libglib2.0-0                2.6.5-1      The GLib library of C routines
ii  libgnomevfs2-common         2.10.1-4     The GNOME virtual file-system libr
ii  libgnutls11                 1.0.16-13.1  GNU TLS library - runtime library
ii  liborbit2                   1:2.12.2-1   libraries for ORBit2 - a CORBA ORB
ii  libxml2                     2.6.16-7     GNOME XML library
ii  zlib1g                      1:1.2.2-4    compression library - runtime

-- no debconf information