evolution crashed with SIGSEGV in op_copy()

Bug #361698 reported by TJ
26
This bug affects 3 people
Affects Status Importance Assigned to Milestone
gtkhtml3.14
Fix Released
Critical
gtkhtml3.14 (Ubuntu)
Fix Released
Medium
Ubuntu Desktop Bugs

Bug Description

Binary package hint: evolution

Started Evolution with:

evolution --display=:0.1 --component=mail

Navigated to one of several IMAP4 accounts, selecting a sub-folder. Selected a recent email in the list-pane that contains HTML content.

Pressed the Reply to Sender button.

Evolution is set to use Plain (not HTML) format so the resulting reply shows the original email as quoted content with ">" prefixes, e.g.:

> This is an automatic message, do not reply to this e-mail, and if you wish
> to contact us, please do that only via the ebay message centre (contact seller)
>
> You are the winning buyer for the item below. Thank you for your business!

If the mouse button is pressed in the quoted area dotted lines show the outline of HTML divisions within the quoted text.

I want to delete the entire quoted content so I press Ctrl+A (Select All). Evolution freezes then crashes.

This is repeatable - I've recreated it 4 times so far. I installed the -dbgsym packages for evolution and libgtkhtml3.14-19 before allowing this crash report to be reported.

I believe it is possibly the same issue as bug #199136

ProblemType: Crash
Architecture: amd64
DistroRelease: Ubuntu 9.04
ExecutablePath: /usr/bin/evolution
NonfreeKernelModules: nvidia
Package: evolution 2.26.1-0ubuntu1
ProcCmdline: evolution --display=:0.1 --component=mail
ProcEnviron:
 LANG=en_GB.UTF-8
 SHELL=/bin/bash
Signal: 11
SourcePackage: evolution
StacktraceTop:
 op_copy (self=0x1d351d0,
 op_helper (self=<value optimized out>, e=0x1b329f0,
 op_copy (self=0x1d351d0,
 op_helper (self=0x1d35e20, e=0x1b329f0, from=0x0,
 op_copy (self=0x1d351d0,
Title: evolution crashed with SIGSEGV in op_copy()
Uname: Linux 2.6.28-11-generic x86_64
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare staff users video

Related branches

Revision history for this message
TJ (tj) wrote :
Revision history for this message
Apport retracing service (apport) wrote : Stacktrace.txt (retraced)

StacktraceTop:op_copy (self=0x1d351d0,
op_helper (self=<value optimized out>, e=0x1b329f0,
op_copy (self=0x1d351d0,
op_helper (self=0x1d35e20, e=0x1b329f0, from=0x0,
op_copy (self=0x1d351d0,

Revision history for this message
Apport retracing service (apport) wrote : ThreadStacktrace.txt (retraced)
Changed in evolution (Ubuntu):
importance: Undecided → Medium
tags: removed: need-amd64-retrace
Revision history for this message
Pedro Villavicencio (pedro) wrote :

Thanks for the report TJ, can you attach an example email to the report? it indeed looks like a duplicate of bug 199136 and upstream http://bugzilla.gnome.org/show_bug.cgi?id=471687 but for re opening would be good to have an example to give to the developers to try, thanks for your help.

affects: evolution (Ubuntu) → gtkhtml3.14 (Ubuntu)
Changed in gtkhtml3.14 (Ubuntu):
assignee: nobody → Ubuntu Desktop Bugs (desktop-bugs)
status: New → Incomplete
visibility: private → public
Revision history for this message
TJ (tj) wrote :

Unfortunately I can't attach an example email since the ones I know of that cause the issue all contain private information - they are however the standard template emails that ebay sends out to a winning bidder.

I've confirmed it is likely the ebay template that triggers the bug since I can crash Evolution by following the same procedure with any of the winning-bidder emails that use that same template. The subject lines all start "Good news. eBay item #xxxxxxxxxxxx item title"

I'll see if I can deduce a test email that will trigger the bug, but can't promise to be successful.

Changed in gtkhtml3.14 (Ubuntu):
status: Incomplete → Confirmed
Revision history for this message
TJ (tj) wrote :

Examining the issue some more I'm of the view that there is another bug here, in Evolution. That bug is that when I've configured Preferences > Composer Preferences > Format messages in HTML to be disabled, and Reply-style "Quoted", the Reply-to-sender composer should *only* quote the text/plain multipart-MIME section of the original.

In this case the presence of the hidden HTML DIVs (revealed by the mouse clicked in the quoted area) and the use of libgtkhtml shows this is not the case.

Revision history for this message
Pedro Villavicencio (pedro) wrote :

setting this to new, waiting for the html example.

Changed in gtkhtml3.14 (Ubuntu):
status: Confirmed → New
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package gtkhtml3.14 - 1:3.28.2-0ubuntu1

---------------
gtkhtml3.14 (1:3.28.2-0ubuntu1) lucid; urgency=low

  * New upstream version:
    Bug Fixes:
    #471687 - Crash selecting mail content (lp: #199136, #361698)
    #598159 - Context popup clears a selection
    #600042 - Hyperlink dialog doesn't allow more hyperlinks (lp: #459179)
  * Sync on Debian, only change is the epoch number added by error in ubuntu

gtkhtml3.14 (3.28.1-1) unstable; urgency=low

  * New upstream release.
  * debian/patches:
    - 01_fix-editing-crash dropped, included upstream.

gtkhtml3.14 (3.28.0-3) unstable; urgency=low

  * debian/control:
    - move editor-common in the libs section. closes: #548279
  * debian/patches/
    - 01_fix-editing-crash added.

gtkhtml3.14 (3.28.0-2) unstable; urgency=low

  * Upload to unstable.
  * debian/libgtkhtml3.14-19.shlibs:
    - add an shlib for libgtkhtml3.14-19 too so people doesn't try to mess
      development with stable releases. closes: #537161, #535948

gtkhtml3.14 (3.28.0-1) experimental; urgency=low

  * New upstream release.
  * debian/watch:
    - updated to track stable releases.
  * debian/libgtkhtml-editor0.shlibs:
    - update shlibs to force dependency on stable release.

gtkhtml3.14 (3.27.92-1) experimental; urgency=low

  * New upstream release candidate.

gtkhtml3.14 (3.27.91-1) experimental; urgency=low

  * New upstream beta release.
  * debian/control:
    - update standards version to 3.8.3.

gtkhtml3.14 (3.27.90-1) experimental; urgency=low

  * New upstream release candidate.

gtkhtml3.14 (3.27.5-1) experimental; urgency=low

  * New upstream development release.
  * debian/control:
    - add strict versionned dependency on libgtkhtml-editor-common to
      libgtkhtml-editor0

gtkhtml3.14 (3.27.4-1) experimental; urgency=low

  * New upstream development release.
  * debian/control:
    - drop glade from build-deps.
 -- Sebastien Bacher <email address hidden> Mon, 14 Dec 2009 16:20:05 +0100

Changed in gtkhtml3.14 (Ubuntu):
status: New → Fix Released
Changed in gtkhtml3.14:
importance: Unknown → Critical
status: Unknown → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.