Bug 119108 - fontconfig qt patch crashes kmail
Summary: fontconfig qt patch crashes kmail
Status: RESOLVED FIXED
Alias: None
Product: kmail
Classification: Applications
Component: general (show other bugs)
Version: 1.9.1
Platform: Compiled Sources Linux
: NOR crash
Target Milestone: ---
Assignee: Lubos Lunak
URL:
Keywords:
: 119076 119194 (view as bug list)
Depends on:
Blocks:
 
Reported: 2005-12-28 11:41 UTC by Tobias Powalowski
Modified: 2006-01-02 18:37 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments
mail 1 (3.95 KB, message/rfc822)
2005-12-28 11:42 UTC, Tobias Powalowski
Details
mail 2 (5.25 KB, message/rfc822)
2005-12-28 11:42 UTC, Tobias Powalowski
Details
mail 3 (7.44 KB, message/rfc822)
2005-12-28 11:43 UTC, Tobias Powalowski
Details
fontconfig patch (364 bytes, patch)
2006-01-02 18:36 UTC, Lubos Lunak
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Tobias Powalowski 2005-12-28 11:41:28 UTC
Version:           1.9.1 (using KDE KDE 3.5.0)
Installed from:    Compiled From Sources
Compiler:          gcc 4.0.3 
OS:                Linux

these emails were sent to our ML,
kmail crashes immediately without any error dump.
i attach these mails here then you can add them to a maildir, and then tryx to click on them, kmail will crash.
opening the mails by clicking in konqueror on them has the same result.
files are attached
greetings
from archlinux maintainer
Comment 1 Tobias Powalowski 2005-12-28 11:42:20 UTC
Created attachment 14054 [details]
mail 1
Comment 2 Tobias Powalowski 2005-12-28 11:42:49 UTC
Created attachment 14055 [details]
mail 2
Comment 3 Tobias Powalowski 2005-12-28 11:43:18 UTC
Created attachment 14056 [details]
mail 3
Comment 4 Andreas Gungl 2005-12-28 12:42:11 UTC
Adjusting summary.
Comment 5 Thiago Macieira 2005-12-28 15:22:05 UTC
No crash here. I downloaded email 3, moved it to a maildir folder and KMail did not crash.

Can you paste the backtrace?
Comment 6 Tobias Powalowski 2005-12-28 15:26:13 UTC
problem is i ahve no backtrace :/
Comment 7 Tobias Powalowski 2005-12-28 15:34:25 UTC
*** glibc detected *** kmail: corrupted double-linked list: 0xb5c6d8b8 ***
======= Backtrace: =========
/lib/tls/libc.so.6[0xb5bb5233]
/lib/tls/libc.so.6[0xb5bb537f]
/lib/tls/libc.so.6[0xb5bb5ff4]
/lib/tls/libc.so.6(malloc+0x7f)[0xb5bb75df]
/usr/lib/libfreetype.so.6[0xb59d6aed]
/usr/lib/libfreetype.so.6(FT_Alloc+0x31)[0xb59d6f71]
/usr/lib/libfreetype.so.6[0xb59daf04]
/usr/lib/libfreetype.so.6(FT_Open_Face+0x2d3)[0xb59dba33]
/usr/lib/libfreetype.so.6(FT_New_Face+0x48)[0xb59dc558]
/usr/lib/libXft.so.2[0xb5a47794]
/usr/lib/libXft.so.2(XftFontOpenInfo+0xdb)[0xb5a47f2b]
/usr/lib/libXft.so.2(XftFontOpenPattern+0x4a)[0xb5a490ca]
/opt/qt/lib/libqt-mt.so.3[0xb6146e13]
/opt/qt/lib/libqt-mt.so.3(_ZN13QFontDatabase8findFontEN5QFont6ScriptEPK12QFontPrivateRK8QFontDefi+0x2d1)[0xb614d7d1]
/opt/qt/lib/libqt-mt.so.3(_ZN12QFontPrivate4loadEN5QFont6ScriptE+0x48f)[0xb60d392f]
/opt/qt/lib/libqt-mt.so.3(_ZNK12QFontMetrics9charWidthERK7QStringi+0x32e)[0xb60d3ebe]
/opt/kde/lib/libkhtml.so.4[0xb794f784]
/opt/kde/lib/libkhtml.so.4[0xb794ffb3]
/opt/kde/lib/libkhtml.so.4[0xb78c9918]
/opt/kde/lib/libkhtml.so.4[0xb78e5ab1]
/opt/kde/lib/libkhtml.so.4[0xb78e5e22]
/opt/kde/lib/libkhtml.so.4[0xb78ea2e3]
/opt/kde/lib/libkhtml.so.4(_ZN9KHTMLPart5writeERK7QString+0xc6)[0xb784c566]
/opt/kde/lib/libkmailprivate.so(_ZN5KMail19KHtmlPartHtmlWriter22slotWriteNextHtmlChunkEv+0x63)[0xb7d6a743]
/opt/kde/lib/libkmailprivate.so(_ZN5KMail19KHtmlPartHtmlWriter9qt_invokeEiP8QUObject+0x32)[0xb7d6a802]
/opt/qt/lib/libqt-mt.so.3(_ZN7QObject15activate_signalEP15QConnectionListP8QUObject+0x169)[0xb6182de9]
/opt/qt/lib/libqt-mt.so.3(_ZN7QObject15activate_signalEi+0x80)[0xb6183290]
/opt/qt/lib/libqt-mt.so.3(_ZN6QTimer7timeoutEv+0x29)[0xb64c0839]
/opt/qt/lib/libqt-mt.so.3(_ZN6QTimer5eventEP6QEvent+0x3f)[0xb61a6f0f]
/opt/qt/lib/libqt-mt.so.3(_ZN12QApplication14internalNotifyEP7QObjectP6QEvent+0xa1)[0xb6123ba1]
/opt/qt/lib/libqt-mt.so.3(_ZN12QApplication6notifyEP7QObjectP6QEvent+0xef)[0xb61245bf]
/opt/kde/lib/libkdecore.so.4(_ZN12KApplication6notifyEP7QObjectP6QEvent+0x1ee)[0xb6840e8e]
/opt/qt/lib/libqt-mt.so.3(_ZN10QEventLoop14activateTimersEv+0x1e8)[0xb6118a18]
/opt/qt/lib/libqt-mt.so.3(_ZN10QEventLoop13processEventsEj+0x58f)[0xb60d20ef]
/opt/qt/lib/libqt-mt.so.3(_ZN10QEventLoop9enterLoopEv+0xc3)[0xb613a713]
/opt/qt/lib/libqt-mt.so.3(_ZN10QEventLoop4execEv+0x26)[0xb613a5f6]
/opt/qt/lib/libqt-mt.so.3(_ZN12QApplication4execEv+0x1f)[0xb61235bf]
kmail(_ZN12QApplication16x11ClientMessageEP7QWidgetP7_XEventb+0x2f4)[0x804a3b8]
/lib/tls/libc.so.6(__libc_start_main+0xdb)[0xb5b65d6b]
kmail(_ZN7QObject16checkConnectArgsEPKcPKS_S1_+0x5d)[0x804a131]
======= Memory map: ========
08048000-0804b000 r-xp 00000000 03:03 1057253    /opt/kde/bin/kmail
0804b000-0804c000 rw-p 00002000 03:03 1057253    /opt/kde/bin/kmail
0804c000-086d2000 rw-p 0804c000 00:00 0          [heap]
b2880000-b28a2000 r--p 00000000 03:03 1144249    /usr/share/fonts/TTF/verdanab.ttf
b28a2000-b28c5000 r--p 00000000 03:03 1144248    /usr/share/fonts/TTF/verdana.ttf
b2a00000-b2a21000 rw-p b2a00000 00:00 0
b2a21000-b2b00000 ---p b2a21000 00:00 0
b2b28000-b352c000 r--p 00000000 03:03 29936      /usr/share/fonts/TTF/simsun.ttf
b352c000-b3531000 rw-p b352c000 00:00 0
b3531000-b3555000 r--p 00000000 03:03 761901     /opt/kde/share/locale/de/LC_MESSAGES/kio.mo
b3555000-b3557000 r-xp 00000000 03:03 1057498    /opt/kde/lib/kde3/libkmail_bodypartformatter_application_octetstream.so
b3557000-b3558000 rw-p 00001000 03:03 1057498    /opt/kde/lib/kde3/libkmail_bodypartformatter_application_octetstream.so
b3558000-b3577000 r--p 00000000 03:03 3873       /usr/share/locale/de/LC_MESSAGES/libc.mo
b3577000-b3579000 r-xp 00000000 03:03 972689     /opt/kde/lib/kde3/kabc_file.so
b3579000-b357a000 rw-p 00001000 03:03 972689     /opt/kde/lib/kde3/kabc_file.so
b35b4000-b35c4000 r--p 00000000 03:03 30210      /usr/share/fonts/TTF/VeraIt.ttf
b35c4000-b35c5000 r--s 00000000 03:04 1163301    /home/tobias/Mail/.test.index
b35c5000-b35c8000 rw-p b35c5000 00:00 0
b35c8000-b35d7000 r--p 00000000 03:03 30212      /usr/share/fonts/TTF/VeraBd.ttf
b35d7000-b35e8000 r--p 00000000 03:03 29320      /usr/share/fonts/TTF/Vera.ttf
b35e8000-b3657000 r-xp 00000000 03:03 63613      /usr/lib/libmng.so.1.1.0.9
b3657000-b3658000 rw-p 0006e000 03:03 63613      /usr/lib/libmng.so.1.1.0.9
b3658000-b3661000 r-xp 00000000 03:03 3730       /lib/libnss_files-2.3.5.so
b3661000-b3663000 rw-p 00008000 03:03 3730       /lib/libnss_files-2.3.5.so
b366d000-b3674000 r-xp 00000000 03:03 1057482    /opt/kde/lib/kde3/libkmail_bodypartformatter_text_calendar.so
b3674000-b3675000 rw-p 00006000 03:03 1057482    /opt/kde/lib/kde3/libkmail_bodypartformatter_text_calendar.so
b3675000-b3680000 r-xp 00000000 03:03 972772     /opt/kde/lib/libkabc_file.so.1.0.0
b3680000-b3681000 rw-p 0000b000 03:03 972772     /opt/kde/lib/libkabc_file.so.1.0.0
b3681000-b3682000 ---p b3681000 00:00 0
b3682000-b3e82000 rwxp b3682000 00:00 0
b3e82000-b3e83000 ---p b3e82000 00:00 0
b3e83000-b4683000 rwxp b3e83000 00:00 0
b4683000-b4684000 ---p b4683000 00:00 0
b4684000-b4e84000 rwxp b4684000 00:00 0
b4e84000-b4e85000 ---p b4e84000 00:00 0
b4e85000-b5685000 rwxp b4e85000 00:00 0
b5685000-b56a5000 rw-p b5685000 00:00 0
b56a5000-b56a6000 r--s 00000000 03:04 6191448    /home/tobias/Mail/.drafts.index
b56a6000-b56c6000 rw-p b56a6000 00:00 0
b56c6000-b56c7000 r--s 00000000 03:04 1202363    /home/tobias/Mail/.outbox.index
b56c7000-b5807000 r--s 00000000 03:03 6824       /var/tmp/kdecache-tobias/ksycoca
b58*** KMail got signal 6 (Crashing)
                                                                                     
Comment 8 Matthew Sutton 2005-12-28 16:03:00 UTC
Hi all,

Perhaps it is related to this bug I found in knode?

https://bugs.kde.org/show_bug.cgi?id=119076

Cheers,

Matthew
Comment 9 Tobias Powalowski 2005-12-30 21:35:14 UTC
probably it's related to the new qt patches in qt-copy, downgraded to older qt without the patches makes kmail not crash on it
Comment 10 David Faure 2005-12-30 22:45:33 UTC
I can confirm. I sent a mail to Lubos about it last Tuesday, but I think he's on vacations currently ;)

Here's what I said: there's a kde-commits answer mail (*) which crashes khtml because of Japanese in a .desktop file being quoted, I think:

==23802==
==23802== Invalid free() / delete / delete[]
==23802==    at 0x401AF66: free (vg_replace_malloc.c:235)
==23802==    by 0x669922E: FcMatrixFree (in /usr/lib/libfontconfig.so.1.0.4)
==23802==  Address 0x6F07AD8 is 0 bytes inside a block of size 32 free'd
==23802==    at 0x401AF66: free (vg_replace_malloc.c:235)
==23802==    by 0x669922E: FcMatrixFree (in /usr/lib/libfontconfig.so.1.0.4)

Hmm I first got a nice gdb backtrace with QFontDatabase loading a font (using loadFontConfigFont())
with script=QFont::Han_Japanese. But now I lost it and when I retry I only get a crap bt, strange.
#0  0xffffe410 in ?? ()
#1  0xbf86ef6c in ?? ()
#2  0x00000006 in ?? ()
#3  0x00005f81 in ?? ()
#4  0xb54d96e5 in raise () from /lib/tls/libc.so.6
#5  0xb54db049 in abort () from /lib/tls/libc.so.6
#6  0xb550d7ba in __fsetlocking () from /lib/tls/libc.so.6
#7  0xb5513717 in malloc_usable_size () from /lib/tls/libc.so.6
#8  0xb551468e in free () from /lib/tls/libc.so.6
#9  0xb5516411 in malloc () from /lib/tls/libc.so.6
#10 0xb586dbab in ?? () from //usr/lib/libfreetype.so.6
#11 0x000002c8 in ?? ()
#12 0x00000000 in ?? ()
#13 0xb58cab4c in ?? () from //usr/lib/libfreetype.so.6
#14 0xb586e034 in FT_Alloc () from //usr/lib/libfreetype.so.6
#15 0x08086308 in ?? ()
#16 0x000002c8 in ?? ()
etc.

$ rpm -qf /usr/lib/libfreetype.so.6
libfreetype6-2.1.9-6mdk
$ rpm -q libfontconfig1
libfontconfig1-2.3.1-2mdk

(*) mail by Ismail Donmez, 24-December, 22:55 CET, subject "Re: branches/KDE/3.5/kdemultimedia/juk"
Comment 11 Lubos Lunak 2006-01-01 14:39:58 UTC
*** Bug 119076 has been marked as a duplicate of this bug. ***
Comment 12 Volker Krause 2006-01-02 11:05:01 UTC
*** Bug 119194 has been marked as a duplicate of this bug. ***
Comment 13 Lubos Lunak 2006-01-02 18:36:41 UTC
Created attachment 14112 [details]
fontconfig patch
Comment 14 Lubos Lunak 2006-01-02 18:37:27 UTC
Fontconfig patch accepted upstream, qt-copy patch disabled for the time being, packagers informed.