Bug 156528

Summary: Crash when applying all filters to an IMAP folder
Product: [Unmaintained] kmail Reporter: Oliver Putz <Regnaron>
Component: IMAPAssignee: kdepim bugs <pim-bugs-null>
Status: RESOLVED WORKSFORME    
Severity: crash    
Priority: NOR    
Version First Reported In: 1.9.50   
Target Milestone: ---   
Platform: unspecified   
OS: Linux   
Latest Commit: Version Fixed/Implemented In:
Sentry Crash Report:

Description Oliver Putz 2008-01-24 03:58:50 UTC 
Version:           1.9.50 (using 4.00.80 (KDE 4.0.80 >= 20080104), Gentoo)
Compiler:          i686-pc-linux-gnu-gcc
OS:                Linux (i686) release 2.6.23-gentoo-r3

Whenever I try to apply all filters (CTRL+J) on a folder within my IMAP account, KMail crashes. This bug seems to be related to the bugs bug #156319 (almost same backtrace) and bug #156291 (same backtrace, but bug #156291 already was fixed long ago...). Note that 

- KMail does *not* crash if I apply filters on a local Mailbox (even if the filter moves the mail to an IMAP account)
- Kmail does *not* crash if I apply only a single filter on an IMAP Mailbox.

The backtrace and valgrind output during the crash are:

Backtrace:
Application: Kontact (kontact), signal SIGSEGV
Using host libthread_db library "/lib/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread 0xb53826d0 (LWP 7255)]
[KCrash handler]
#6  0xb368c709 in KMail::ActionScheduler::debug ()
    at /var/tmp/portage/kde-base/kdepim-9999.4/work/kdepim-9999.4/kmail/actionscheduler.cpp:797
#7  0xb368e2c8 in KMail::ActionScheduler::processMessage (this=0x84ed120)
    at /var/tmp/portage/kde-base/kdepim-9999.4/work/kdepim-9999.4/kmail/actionscheduler.cpp:491
#8  0xb368ebe1 in KMail::ActionScheduler::qt_metacall (this=0x84ed120, 
    _c=QMetaObject::InvokeMetaMethod, _id=18, _a=0xbfffc224)
    at /var/tmp/portage/kde-base/kdepim-9999.4/work/kdepim_build/kmail/actionscheduler.moc:118
#9  0xb7eca1f4 in QMetaObject::activate (sender=0x8587288, 
    from_signal_index=4, to_signal_index=4, argv=<value optimized out>)
    at kernel/qobject.cpp:3081
#10 0xb7ecad94 in QMetaObject::activate (sender=0x8587288, m=0xb7f699e4, 
    local_signal_index=0, argv=0x0) at kernel/qobject.cpp:3140
#11 0xb7eeb083 in QTimer::timeout (this=0x8587288)
    at .moc/debug-shared/moc_qtimer.cpp:125
#12 0xb7ed3a2e in QTimer::timerEvent (this=0x8587288, e=0xbfffc758)
    at kernel/qtimer.cpp:259
#13 0xb7ec8269 in QObject::event (this=0x8587288, e=0x84e6868)
    at kernel/qobject.cpp:1086
#14 0xb6d89e8a in QApplicationPrivate::notify_helper (this=0x80648e8, 
    receiver=0x8587288, e=0xbfffc758) at kernel/qapplication.cpp:3556
#15 0xb6d8b77a in QApplication::notify (this=0xbfffc9e0, receiver=0x8587288, 
    e=0xbfffc758) at kernel/qapplication.cpp:3115
#16 0xb7a3c083 in KApplication::notify (this=0xbfffc9e0, receiver=0x8587288, 
    event=0xbfffc758)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs-9999.4/kdeui/kernel/kapplication.cpp:314
#17 0xb7eb6d7b in QCoreApplication::notifyInternal (this=0xbfffc9e0, 
    receiver=0x8587288, event=0xbfffc758) at kernel/qcoreapplication.cpp:530
#18 0xb7edfefb in QTimerInfoList::activateTimers (this=0x8065024)
    at kernel/qcoreapplication.h:200
#19 0xb7edffd1 in QEventDispatcherUNIX::activateTimers (this=0x805f108)
    at kernel/qeventdispatcher_unix.cpp:828
#20 0xb7ee09ab in QEventDispatcherUNIX::processEvents (this=0x805f108, 
    flags=@0xbfffc8d8) at kernel/qeventdispatcher_unix.cpp:890
#21 0xb6e13cce in QEventDispatcherX11::processEvents (this=0x805f108, 
    flags=@0xbfffc904) at kernel/qeventdispatcher_x11.cpp:145
#22 0xb7eb6191 in QEventLoop::processEvents (this=0xbfffc970, 
    flags=@0xbfffc938) at kernel/qeventloop.cpp:140
#23 0xb7eb629a in QEventLoop::exec (this=0xbfffc970, flags=@0xbfffc978)
    at kernel/qeventloop.cpp:186
#24 0xb7eb8626 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:759
#25 0xb6d89487 in QApplication::exec () at kernel/qapplication.cpp:3053
#26 0x0804b3f5 in main (argc=1, argv=0xbfffcb74)
    at /var/tmp/portage/kde-base/kdepim-9999.4/work/kdepim-9999.4/kontact/src/main.cpp:162
#27 0xb5703fdc in __libc_start_main (main=0x804ab60 <main>, argc=1, 
    ubp_av=0xbfffcb74, init=0x804c180 <__libc_csu_init>, 
    fini=0x804c170 <__libc_csu_fini>, rtld_fini=0xb7f7a100 <_dl_fini>, 
    stack_end=0xbfffcb6c) at libc-start.c:229
#28 0x0804a791 in _start ()
#0  0xffffe410 in __kernel_vsyscall ()


Valgrind:
==9632== Memcheck, a memory error detector.
==9632== Copyright (C) 2002-2007, and GNU GPL'd, by Julian Seward et al.
==9632== Using LibVEX rev 1732, a library for dynamic binary translation.
==9632== Copyright (C) 2004-2007, and GNU GPL'd, by OpenWorks LLP.
==9632== Using valgrind-3.2.3, a dynamic binary instrumentation framework.
==9632== Copyright (C) 2000-2007, and GNU GPL'd, by Julian Seward et al.
==9632== For more details, rerun with: -v
==9632== 
==9632== My PID = 9632, parent PID = 8386.  Prog and args are:
==9632==    kontact
==9632== 
==9632== Conditional jump or move depends on uninitialised value(s)
==9632==    at 0x400A9B5: _dl_relocate_object (do-rel.h:65)
==9632==    by 0x400454C: dl_main (rtld.c:2214)
==9632==    by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239)
==9632==    by 0x400124E: _dl_start (rtld.c:327)
==9632==    by 0x40008A6: (within /lib/ld-2.6.1.so)
==9632== 
==9632== Conditional jump or move depends on uninitialised value(s)
==9632==    at 0x400A9BD: _dl_relocate_object (do-rel.h:68)
==9632==    by 0x400454C: dl_main (rtld.c:2214)
==9632==    by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239)
==9632==    by 0x400124E: _dl_start (rtld.c:327)
==9632==    by 0x40008A6: (within /lib/ld-2.6.1.so)
==9632== 
==9632== Conditional jump or move depends on uninitialised value(s)
==9632==    at 0x400B053: _dl_relocate_object (do-rel.h:104)
==9632==    by 0x400454C: dl_main (rtld.c:2214)
==9632==    by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239)
==9632==    by 0x400124E: _dl_start (rtld.c:327)
==9632==    by 0x40008A6: (within /lib/ld-2.6.1.so)
==9632== 
==9632== Conditional jump or move depends on uninitialised value(s)
==9632==    at 0x400AAF3: _dl_relocate_object (do-rel.h:117)
==9632==    by 0x400454C: dl_main (rtld.c:2214)
==9632==    by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239)
==9632==    by 0x400124E: _dl_start (rtld.c:327)
==9632==    by 0x40008A6: (within /lib/ld-2.6.1.so)
==9632== 
==9632== Conditional jump or move depends on uninitialised value(s)
==9632==    at 0x400A9B5: _dl_relocate_object (do-rel.h:65)
==9632==    by 0x4004169: dl_main (rtld.c:2284)
==9632==    by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239)
==9632==    by 0x400124E: _dl_start (rtld.c:327)
==9632==    by 0x40008A6: (within /lib/ld-2.6.1.so)
==9632== 
==9632== Conditional jump or move depends on uninitialised value(s)
==9632==    at 0x400A9BD: _dl_relocate_object (do-rel.h:68)
==9632==    by 0x4004169: dl_main (rtld.c:2284)
==9632==    by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239)
==9632==    by 0x400124E: _dl_start (rtld.c:327)
==9632==    by 0x40008A6: (within /lib/ld-2.6.1.so)
==9632== 
==9632== Conditional jump or move depends on uninitialised value(s)
==9632==    at 0x400AAF3: _dl_relocate_object (do-rel.h:117)
==9632==    by 0x4004169: dl_main (rtld.c:2284)
==9632==    by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239)
==9632==    by 0x400124E: _dl_start (rtld.c:327)
==9632==    by 0x40008A6: (within /lib/ld-2.6.1.so)
==9632== 
==9632== ERROR SUMMARY: 7 errors from 7 contexts (suppressed: 0 from 0)
==9632== malloc/free: in use at exit: 42,253 bytes in 325 blocks.
==9632== malloc/free: 8,438 allocs, 8,113 frees, 26,118,021 bytes allocated.
==9632== For counts of detected errors, rerun with: -v
==9632== searching for pointers to 325 not-freed blocks.
==9632== checked 864,024 bytes.
==9632== 
==9632== LEAK SUMMARY:
==9632==    definitely lost: 0 bytes in 0 blocks.
==9632==      possibly lost: 0 bytes in 0 blocks.
==9632==    still reachable: 42,253 bytes in 325 blocks.
==9632==         suppressed: 0 bytes in 0 blocks.
==9632== Rerun with --leak-check=full to see details of leaked memory.
==9638== 
==9638== Invalid read of size 4
==9638==    at 0xA75C240: KMAcctImap::ignoreJobsForFolder(KMFolder*) (kmacctimap.cpp:211)
==9638==    by 0xA7784E4: KMFolderImap::close(char const*, bool) (kmfolderimap.cpp:131)
==9638==    by 0xA7A432D: KMKernel::cleanupImapFolders() (kmkernel.cpp:1500)
==9638==    by 0xA7A54BA: KMKernel::init() (kmkernel.cpp:1410)
==9638==    by 0xA53CD0B: KMailPart::KMailPart(QWidget*, QObject*, QList<QVariant> const&) (kmail_part.cpp:70)
==9638==    by 0xA53E691: QObject* KPluginFactory::createPartInstance<KMailPart>(QWidget*, QObject*, QList<QVariant> const&) (kpluginfactory.h:465)
==9638==    by 0x43BE3D1: KPluginFactory::create(char const*, QWidget*, QObject*, QList<QVariant> const&, QString const&) (kpluginfactory.cpp:181)
==9638==    by 0x54A79AA: KParts::ReadOnlyPart* KPluginFactory::create<KParts::ReadOnlyPart>(QObject*, QList<QVariant> const&) (kpluginfactory.h:489)
==9638==    by 0x5D4D501: Kontact::Core::createPart(char const*) (core.cpp:70)
==9638==    by 0x5D4FA50: Kontact::Plugin::loadPart() (plugin.cpp:126)
==9638==    by 0xA4FD054: KMailPlugin::createPart() (kmail_plugin.cpp:172)
==9638==    by 0x5D4F50E: Kontact::Plugin::part() (plugin.cpp:163)
==9638==  Address 0x9B5BFA4 is 0 bytes after a block of size 20 alloc'd
==9638==    at 0x402137E: malloc (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==9638==    by 0x405609C: qMalloc(unsigned) (qglobal.cpp:1964)
==9638==    by 0x407E660: QListData::detach2() (qlistdata.cpp:86)
==9638==    by 0xA75E5B1: QList<KMail::ImapJob*>::detach_helper() (qlist.h:513)
==9638==    by 0xA75E658: QList<KMail::ImapJob*>::detach() (qlist.h:112)
==9638==    by 0xA75E697: QList<KMail::ImapJob*>::begin() (qlist.h:228)
==9638==    by 0xA75C1A8: KMAcctImap::ignoreJobsForFolder(KMFolder*) (kmacctimap.cpp:211)
==9638==    by 0xA7784E4: KMFolderImap::close(char const*, bool) (kmfolderimap.cpp:131)
==9638==    by 0xA7A432D: KMKernel::cleanupImapFolders() (kmkernel.cpp:1500)
==9638==    by 0xA7A54BA: KMKernel::init() (kmkernel.cpp:1410)
==9638==    by 0xA53CD0B: KMailPart::KMailPart(QWidget*, QObject*, QList<QVariant> const&) (kmail_part.cpp:70)
==9638==    by 0xA53E691: QObject* KPluginFactory::createPartInstance<KMailPart>(QWidget*, QObject*, QList<QVariant> const&) (kpluginfactory.h:465)
==9638== Warning: ignored attempt to set SIGKILL handler in sigaction();
==9638==          the SIGKILL signal is uncatchable
==9638== 
==9638== Conditional jump or move depends on uninitialised value(s)
==9638==    at 0xA679504: KMFolderTree::addDirectory(KMFolderDir*, KMFolderTreeItem*) (kmfoldertree.cpp:696)
==9638==    by 0xA679A25: KMFolderTree::reload(bool) (kmfoldertree.cpp:547)
==9638==    by 0xA8468DB: KMMainWidget::readConfig() (kmmainwidget.cpp:625)
==9638==    by 0xA847858: KMMainWidget::KMMainWidget(QWidget*, KXMLGUIClient*, KActionCollection*, KConfig*) (kmmainwidget.cpp:219)
==9638==    by 0xA53CF4C: KMailPart::KMailPart(QWidget*, QObject*, QList<QVariant> const&) (kmail_part.cpp:108)
==9638==    by 0xA53E691: QObject* KPluginFactory::createPartInstance<KMailPart>(QWidget*, QObject*, QList<QVariant> const&) (kpluginfactory.h:465)
==9638==    by 0x43BE3D1: KPluginFactory::create(char const*, QWidget*, QObject*, QList<QVariant> const&, QString const&) (kpluginfactory.cpp:181)
==9638==    by 0x54A79AA: KParts::ReadOnlyPart* KPluginFactory::create<KParts::ReadOnlyPart>(QObject*, QList<QVariant> const&) (kpluginfactory.h:489)
==9638==    by 0x5D4D501: Kontact::Core::createPart(char const*) (core.cpp:70)
==9638==    by 0x5D4FA50: Kontact::Plugin::loadPart() (plugin.cpp:126)
==9638==    by 0xA4FD054: KMailPlugin::createPart() (kmail_plugin.cpp:172)
==9638==    by 0x5D4F50E: Kontact::Plugin::part() (plugin.cpp:163)
==9638== 
==9638== Invalid read of size 4
==9638==    at 0xA679500: KMFolderTree::addDirectory(KMFolderDir*, KMFolderTreeItem*) (kmfoldertree.cpp:696)
==9638==    by 0xA67936F: KMFolderTree::addDirectory(KMFolderDir*, KMFolderTreeItem*) (kmfoldertree.cpp:716)
==9638==    by 0xA679A55: KMFolderTree::reload(bool) (kmfoldertree.cpp:551)
==9638==    by 0xA8468DB: KMMainWidget::readConfig() (kmmainwidget.cpp:625)
==9638==    by 0xA847858: KMMainWidget::KMMainWidget(QWidget*, KXMLGUIClient*, KActionCollection*, KConfig*) (kmmainwidget.cpp:219)
==9638==    by 0xA53CF4C: KMailPart::KMailPart(QWidget*, QObject*, QList<QVariant> const&) (kmail_part.cpp:108)
==9638==    by 0xA53E691: QObject* KPluginFactory::createPartInstance<KMailPart>(QWidget*, QObject*, QList<QVariant> const&) (kpluginfactory.h:465)
==9638==    by 0x43BE3D1: KPluginFactory::create(char const*, QWidget*, QObject*, QList<QVariant> const&, QString const&) (kpluginfactory.cpp:181)
==9638==    by 0x54A79AA: KParts::ReadOnlyPart* KPluginFactory::create<KParts::ReadOnlyPart>(QObject*, QList<QVariant> const&) (kpluginfactory.h:489)
==9638==    by 0x5D4D501: Kontact::Core::createPart(char const*) (core.cpp:70)
==9638==    by 0x5D4FA50: Kontact::Plugin::loadPart() (plugin.cpp:126)
==9638==    by 0xA4FD054: KMailPlugin::createPart() (kmail_plugin.cpp:172)
==9638==  Address 0x7FA4AC8 is 0 bytes after a block of size 64 alloc'd
==9638==    at 0x4021454: realloc (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==9638==    by 0x4055F53: qRealloc(void*, unsigned) (qglobal.cpp:1966)
==9638==    by 0x407DC49: QListData::realloc(int) (qlistdata.cpp:103)
==9638==    by 0x407DDB6: QListData::append() (qlistdata.cpp:123)
==9638==    by 0xA6D6A21: QList<KMFolderNode*>::append(KMFolderNode* const&) (qlist.h:418)
==9638==    by 0xA70B57B: KMFolderDir::reload() (kmfolderdir.cpp:253)
==9638==    by 0xA70B912: KMFolderDir::reload() (kmfolderdir.cpp:290)
==9638==    by 0xA70EF11: KMFolderMgr::setBasePath(QString const&) (kmfoldermgr.cpp:166)
==9638==    by 0xA70F639: KMFolderMgr::KMFolderMgr(QString const&, KMFolderDirType) (kmfoldermgr.cpp:44)
==9638==    by 0xA7A52CA: KMKernel::init() (kmkernel.cpp:1393)
==9638==    by 0xA53CD0B: KMailPart::KMailPart(QWidget*, QObject*, QList<QVariant> const&) (kmail_part.cpp:70)
==9638==    by 0xA53E691: QObject* KPluginFactory::createPartInstance<KMailPart>(QWidget*, QObject*, QList<QVariant> const&) (kpluginfactory.h:465)
==9638== 
==9638== Conditional jump or move depends on uninitialised value(s)
==9638==    at 0xA679504: KMFolderTree::addDirectory(KMFolderDir*, KMFolderTreeItem*) (kmfoldertree.cpp:696)
==9638==    by 0xA679A55: KMFolderTree::reload(bool) (kmfoldertree.cpp:551)
==9638==    by 0xA8468DB: KMMainWidget::readConfig() (kmmainwidget.cpp:625)
==9638==    by 0xA847858: KMMainWidget::KMMainWidget(QWidget*, KXMLGUIClient*, KActionCollection*, KConfig*) (kmmainwidget.cpp:219)
==9638==    by 0xA53CF4C: KMailPart::KMailPart(QWidget*, QObject*, QList<QVariant> const&) (kmail_part.cpp:108)
==9638==    by 0xA53E691: QObject* KPluginFactory::createPartInstance<KMailPart>(QWidget*, QObject*, QList<QVariant> const&) (kpluginfactory.h:465)
==9638==    by 0x43BE3D1: KPluginFactory::create(char const*, QWidget*, QObject*, QList<QVariant> const&, QString const&) (kpluginfactory.cpp:181)
==9638==    by 0x54A79AA: KParts::ReadOnlyPart* KPluginFactory::create<KParts::ReadOnlyPart>(QObject*, QList<QVariant> const&) (kpluginfactory.h:489)
==9638==    by 0x5D4D501: Kontact::Core::createPart(char const*) (core.cpp:70)
==9638==    by 0x5D4FA50: Kontact::Plugin::loadPart() (plugin.cpp:126)
==9638==    by 0xA4FD054: KMailPlugin::createPart() (kmail_plugin.cpp:172)
==9638==    by 0x5D4F50E: Kontact::Plugin::part() (plugin.cpp:163)
==9638== 
==9638== Invalid read of size 4
==9638==    at 0xA679500: KMFolderTree::addDirectory(KMFolderDir*, KMFolderTreeItem*) (kmfoldertree.cpp:696)
==9638==    by 0xA679A83: KMFolderTree::reload(bool) (kmfoldertree.cpp:555)
==9638==    by 0xA8468DB: KMMainWidget::readConfig() (kmmainwidget.cpp:625)
==9638==    by 0xA847858: KMMainWidget::KMMainWidget(QWidget*, KXMLGUIClient*, KActionCollection*, KConfig*) (kmmainwidget.cpp:219)
==9638==    by 0xA53CF4C: KMailPart::KMailPart(QWidget*, QObject*, QList<QVariant> const&) (kmail_part.cpp:108)
==9638==    by 0xA53E691: QObject* KPluginFactory::createPartInstance<KMailPart>(QWidget*, QObject*, QList<QVariant> const&) (kpluginfactory.h:465)
==9638==    by 0x43BE3D1: KPluginFactory::create(char const*, QWidget*, QObject*, QList<QVariant> const&, QString const&) (kpluginfactory.cpp:181)
==9638==    by 0x54A79AA: KParts::ReadOnlyPart* KPluginFactory::create<KParts::ReadOnlyPart>(QObject*, QList<QVariant> const&) (kpluginfactory.h:489)
==9638==    by 0x5D4D501: Kontact::Core::createPart(char const*) (core.cpp:70)
==9638==    by 0x5D4FA50: Kontact::Plugin::loadPart() (plugin.cpp:126)
==9638==    by 0xA4FD054: KMailPlugin::createPart() (kmail_plugin.cpp:172)
==9638==    by 0x5D4F50E: Kontact::Plugin::part() (plugin.cpp:163)
==9638==  Address 0x9B3E7A4 is 0 bytes after a block of size 20 alloc'd
==9638==    at 0x402137E: malloc (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==9638==    by 0x405609C: qMalloc(unsigned) (qglobal.cpp:1964)
==9638==    by 0x407E660: QListData::detach2() (qlistdata.cpp:86)
==9638==    by 0xA6D6881: QList<KMFolderNode*>::detach_helper() (qlist.h:513)
==9638==    by 0xA6D6928: QList<KMFolderNode*>::detach() (qlist.h:112)
==9638==    by 0xA6F3397: QList<KMFolderNode*>::begin() (qlist.h:228)
==9638==    by 0xA7A4137: KMKernel::cleanupImapFolders() (kmkernel.cpp:1472)
==9638==    by 0xA7A54BA: KMKernel::init() (kmkernel.cpp:1410)
==9638==    by 0xA53CD0B: KMailPart::KMailPart(QWidget*, QObject*, QList<QVariant> const&) (kmail_part.cpp:70)
==9638==    by 0xA53E691: QObject* KPluginFactory::createPartInstance<KMailPart>(QWidget*, QObject*, QList<QVariant> const&) (kpluginfactory.h:465)
==9638==    by 0x43BE3D1: KPluginFactory::create(char const*, QWidget*, QObject*, QList<QVariant> const&, QString const&) (kpluginfactory.cpp:181)
==9638==    by 0x54A79AA: KParts::ReadOnlyPart* KPluginFactory::create<KParts::ReadOnlyPart>(QObject*, QList<QVariant> const&) (kpluginfactory.h:489)
==9638== 
==9638== Conditional jump or move depends on uninitialised value(s)
==9638==    at 0xA679504: KMFolderTree::addDirectory(KMFolderDir*, KMFolderTreeItem*) (kmfoldertree.cpp:696)
==9638==    by 0xA679A25: KMFolderTree::reload(bool) (kmfoldertree.cpp:547)
==9638==    by 0xA82F041: KMMainWidget::slotShowStartupFolder() (kmmainwidget.cpp:3790)
==9638==    by 0xA848CC6: KMMainWidget::qt_metacall(QMetaObject::Call, int, void**) (kmmainwidget.moc:443)
==9638==    by 0x413C1F3: QMetaObject::activate(QObject*, int, int, void**) (qobject.cpp:3081)
==9638==    by 0x413CD93: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3140)
==9638==    by 0x41453C2: QSingleShotTimer::timeout() (qtimer.moc:73)
==9638==    by 0x414540B: QSingleShotTimer::timerEvent(QTimerEvent*) (qtimer.cpp:296)
==9638==    by 0x413A268: QObject::event(QEvent*) (qobject.cpp:1086)
==9638==    by 0x4BA4E89: QApplicationPrivate::notify_helper(QObject*, QEvent*) (qapplication.cpp:3556)
==9638==    by 0x4BA6779: QApplication::notify(QObject*, QEvent*) (qapplication.cpp:3115)
==9638==    by 0x459B082: KApplication::notify(QObject*, QEvent*) (kapplication.cpp:314)
==9638== 
==9638== Invalid read of size 4
==9638==    at 0xA679500: KMFolderTree::addDirectory(KMFolderDir*, KMFolderTreeItem*) (kmfoldertree.cpp:696)
==9638==    by 0xA67936F: KMFolderTree::addDirectory(KMFolderDir*, KMFolderTreeItem*) (kmfoldertree.cpp:716)
==9638==    by 0xA679A55: KMFolderTree::reload(bool) (kmfoldertree.cpp:551)
==9638==    by 0xA82F041: KMMainWidget::slotShowStartupFolder() (kmmainwidget.cpp:3790)
==9638==    by 0xA848CC6: KMMainWidget::qt_metacall(QMetaObject::Call, int, void**) (kmmainwidget.moc:443)
==9638==    by 0x413C1F3: QMetaObject::activate(QObject*, int, int, void**) (qobject.cpp:3081)
==9638==    by 0x413CD93: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3140)
==9638==    by 0x41453C2: QSingleShotTimer::timeout() (qtimer.moc:73)
==9638==    by 0x414540B: QSingleShotTimer::timerEvent(QTimerEvent*) (qtimer.cpp:296)
==9638==    by 0x413A268: QObject::event(QEvent*) (qobject.cpp:1086)
==9638==    by 0x4BA4E89: QApplicationPrivate::notify_helper(QObject*, QEvent*) (qapplication.cpp:3556)
==9638==    by 0x4BA6779: QApplication::notify(QObject*, QEvent*) (qapplication.cpp:3115)
==9638==  Address 0x7FA4AC8 is 0 bytes after a block of size 64 alloc'd
==9638==    at 0x4021454: realloc (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==9638==    by 0x4055F53: qRealloc(void*, unsigned) (qglobal.cpp:1966)
==9638==    by 0x407DC49: QListData::realloc(int) (qlistdata.cpp:103)
==9638==    by 0x407DDB6: QListData::append() (qlistdata.cpp:123)
==9638==    by 0xA6D6A21: QList<KMFolderNode*>::append(KMFolderNode* const&) (qlist.h:418)
==9638==    by 0xA70B57B: KMFolderDir::reload() (kmfolderdir.cpp:253)
==9638==    by 0xA70B912: KMFolderDir::reload() (kmfolderdir.cpp:290)
==9638==    by 0xA70EF11: KMFolderMgr::setBasePath(QString const&) (kmfoldermgr.cpp:166)
==9638==    by 0xA70F639: KMFolderMgr::KMFolderMgr(QString const&, KMFolderDirType) (kmfoldermgr.cpp:44)
==9638==    by 0xA7A52CA: KMKernel::init() (kmkernel.cpp:1393)
==9638==    by 0xA53CD0B: KMailPart::KMailPart(QWidget*, QObject*, QList<QVariant> const&) (kmail_part.cpp:70)
==9638==    by 0xA53E691: QObject* KPluginFactory::createPartInstance<KMailPart>(QWidget*, QObject*, QList<QVariant> const&) (kpluginfactory.h:465)
==9638== 
==9638== Conditional jump or move depends on uninitialised value(s)
==9638==    at 0xA679504: KMFolderTree::addDirectory(KMFolderDir*, KMFolderTreeItem*) (kmfoldertree.cpp:696)
==9638==    by 0xA679A55: KMFolderTree::reload(bool) (kmfoldertree.cpp:551)
==9638==    by 0xA82F041: KMMainWidget::slotShowStartupFolder() (kmmainwidget.cpp:3790)
==9638==    by 0xA848CC6: KMMainWidget::qt_metacall(QMetaObject::Call, int, void**) (kmmainwidget.moc:443)
==9638==    by 0x413C1F3: QMetaObject::activate(QObject*, int, int, void**) (qobject.cpp:3081)
==9638==    by 0x413CD93: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3140)
==9638==    by 0x41453C2: QSingleShotTimer::timeout() (qtimer.moc:73)
==9638==    by 0x414540B: QSingleShotTimer::timerEvent(QTimerEvent*) (qtimer.cpp:296)
==9638==    by 0x413A268: QObject::event(QEvent*) (qobject.cpp:1086)
==9638==    by 0x4BA4E89: QApplicationPrivate::notify_helper(QObject*, QEvent*) (qapplication.cpp:3556)
==9638==    by 0x4BA6779: QApplication::notify(QObject*, QEvent*) (qapplication.cpp:3115)
==9638==    by 0x459B082: KApplication::notify(QObject*, QEvent*) (kapplication.cpp:314)
==9638== 
==9638== Invalid read of size 4
==9638==    at 0xA679500: KMFolderTree::addDirectory(KMFolderDir*, KMFolderTreeItem*) (kmfoldertree.cpp:696)
==9638==    by 0xA679A83: KMFolderTree::reload(bool) (kmfoldertree.cpp:555)
==9638==    by 0xA82F041: KMMainWidget::slotShowStartupFolder() (kmmainwidget.cpp:3790)
==9638==    by 0xA848CC6: KMMainWidget::qt_metacall(QMetaObject::Call, int, void**) (kmmainwidget.moc:443)
==9638==    by 0x413C1F3: QMetaObject::activate(QObject*, int, int, void**) (qobject.cpp:3081)
==9638==    by 0x413CD93: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3140)
==9638==    by 0x41453C2: QSingleShotTimer::timeout() (qtimer.moc:73)
==9638==    by 0x414540B: QSingleShotTimer::timerEvent(QTimerEvent*) (qtimer.cpp:296)
==9638==    by 0x413A268: QObject::event(QEvent*) (qobject.cpp:1086)
==9638==    by 0x4BA4E89: QApplicationPrivate::notify_helper(QObject*, QEvent*) (qapplication.cpp:3556)
==9638==    by 0x4BA6779: QApplication::notify(QObject*, QEvent*) (qapplication.cpp:3115)
==9638==    by 0x459B082: KApplication::notify(QObject*, QEvent*) (kapplication.cpp:314)
==9638==  Address 0x9B3E7A4 is 0 bytes after a block of size 20 alloc'd
==9638==    at 0x402137E: malloc (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==9638==    by 0x405609C: qMalloc(unsigned) (qglobal.cpp:1964)
==9638==    by 0x407E660: QListData::detach2() (qlistdata.cpp:86)
==9638==    by 0xA6D6881: QList<KMFolderNode*>::detach_helper() (qlist.h:513)
==9638==    by 0xA6D6928: QList<KMFolderNode*>::detach() (qlist.h:112)
==9638==    by 0xA6F3397: QList<KMFolderNode*>::begin() (qlist.h:228)
==9638==    by 0xA7A4137: KMKernel::cleanupImapFolders() (kmkernel.cpp:1472)
==9638==    by 0xA7A54BA: KMKernel::init() (kmkernel.cpp:1410)
==9638==    by 0xA53CD0B: KMailPart::KMailPart(QWidget*, QObject*, QList<QVariant> const&) (kmail_part.cpp:70)
==9638==    by 0xA53E691: QObject* KPluginFactory::createPartInstance<KMailPart>(QWidget*, QObject*, QList<QVariant> const&) (kpluginfactory.h:465)
==9638==    by 0x43BE3D1: KPluginFactory::create(char const*, QWidget*, QObject*, QList<QVariant> const&, QString const&) (kpluginfactory.cpp:181)
==9638==    by 0x54A79AA: KParts::ReadOnlyPart* KPluginFactory::create<KParts::ReadOnlyPart>(QObject*, QList<QVariant> const&) (kpluginfactory.h:489)
==9638== 
==9638== Syscall param write(buf) points to uninitialised byte(s)
==9638==    at 0x420BF83: __write_nocancel (in /lib/libpthread-2.6.1.so)
==9638==    by 0x6448767: _X11TransWrite (Xtrans.c:900)
==9638==    by 0x6442066: _XFlushInt (XlibInt.c:675)
==9638==    by 0x6167BE6: (within /usr/lib/libXrender.so.1.3.0)
==9638==  Address 0x6E627A2 is 14,202 bytes inside a block of size 16,384 alloc'd
==9638==    at 0x40207D3: calloc (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==9638==    by 0x6433578: XOpenDisplay (OpenDis.c:289)
==9638==    by 0x4C0C318: qt_init(QApplicationPrivate*, int, _XDisplay*, unsigned long, unsigned long) (qapplication_x11.cpp:1530)
==9638==    by 0x4BAD6B8: QApplicationPrivate::construct(_XDisplay*, unsigned long, unsigned long) (qapplication.cpp:709)
==9638==    by 0x4BAE253: QApplication::QApplication(int&, char**, bool, int) (qapplication.cpp:667)
==9638==    by 0x459A03F: KApplication::KApplication(bool, KComponentData const&) (kapplication.cpp:384)
==9638==    by 0x45A1A0D: KUniqueApplication::KUniqueApplication(bool, bool) (kuniqueapplication.cpp:292)
==9638==    by 0x804C0E0: KontactApp::KontactApp() (main.cpp:53)
==9638==    by 0x804B36C: main (main.cpp:150)
==9638== 
==9638== Conditional jump or move depends on uninitialised value(s)
==9638==    at 0xA75C36A: KMAcctImap::ignoreJobsForMessage(KMMessage*) (kmacctimap.cpp:197)
==9638==    by 0xA76FB88: KMFolderImap::ignoreJobsForMessage(KMMessage*) (kmfolderimap.cpp:1553)
==9638==    by 0xA6EEED7: FolderStorage::unGetMsg(int) (folderstorage.cpp:554)
==9638==    by 0xA6D196A: KMFolder::unGetMsg(int) (kmfolder.cpp:333)
==9638==    by 0xA6F5F87: KMail::ActionScheduler::messageFetched(KMMessage*) (actionscheduler.cpp:455)
==9638==    by 0xA6F78FA: KMail::ActionScheduler::fetchMessage() (actionscheduler.cpp:410)
==9638==    by 0xA6F7B7B: KMail::ActionScheduler::qt_metacall(QMetaObject::Call, int, void**) (actionscheduler.moc:114)
==9638==    by 0x413C1F3: QMetaObject::activate(QObject*, int, int, void**) (qobject.cpp:3081)
==9638==    by 0x413CD93: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3140)
==9638==    by 0x415D082: QTimer::timeout() (moc_qtimer.cpp:125)
==9638==    by 0x4145A2D: QTimer::timerEvent(QTimerEvent*) (qtimer.cpp:259)
==9638==    by 0x413A268: QObject::event(QEvent*) (qobject.cpp:1086)
==9638== 
==9638== Conditional jump or move depends on uninitialised value(s)
==9638==    at 0x4081C50: qulltoa(unsigned long long, int, QLocalePrivate const&) (qlocale.cpp:3154)
==9638==    by 0x40865C8: QLocalePrivate::unsLongLongToString(unsigned long long, int, int, int, unsigned) const (qlocale.cpp:3515)
==9638==    by 0x40A6CC6: QString::setNum(unsigned long long, int) (qstring.cpp:5369)
==9638==    by 0x40A6D83: QString::number(unsigned long long, int) (qstring.cpp:5512)
==9638==    by 0x40A6F34: QString::arg(unsigned long long, int, int, QChar const&) const (qstring.cpp:6104)
==9638==    by 0xA64AAFA: QString::arg(unsigned, int, int, QChar const&) const (qstring.h:683)
==9638==    by 0xA6F568C: KMail::ActionScheduler::debug() (actionscheduler.cpp:796)
==9638==    by 0xA6F72C7: KMail::ActionScheduler::processMessage() (actionscheduler.cpp:491)
==9638==    by 0xA6F7BE0: KMail::ActionScheduler::qt_metacall(QMetaObject::Call, int, void**) (actionscheduler.moc:118)
==9638==    by 0x413C1F3: QMetaObject::activate(QObject*, int, int, void**) (qobject.cpp:3081)
==9638==    by 0x413CD93: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3140)
==9638==    by 0x415D082: QTimer::timeout() (moc_qtimer.cpp:125)
==9638== 
==9638== Conditional jump or move depends on uninitialised value(s)
==9638==    at 0x4081CCE: qulltoa(unsigned long long, int, QLocalePrivate const&) (qlocale.cpp:3159)
==9638==    by 0x40865C8: QLocalePrivate::unsLongLongToString(unsigned long long, int, int, int, unsigned) const (qlocale.cpp:3515)
==9638==    by 0x40A6CC6: QString::setNum(unsigned long long, int) (qstring.cpp:5369)
==9638==    by 0x40A6D83: QString::number(unsigned long long, int) (qstring.cpp:5512)
==9638==    by 0x40A6F34: QString::arg(unsigned long long, int, int, QChar const&) const (qstring.cpp:6104)
==9638==    by 0xA64AAFA: QString::arg(unsigned, int, int, QChar const&) const (qstring.h:683)
==9638==    by 0xA6F568C: KMail::ActionScheduler::debug() (actionscheduler.cpp:796)
==9638==    by 0xA6F72C7: KMail::ActionScheduler::processMessage() (actionscheduler.cpp:491)
==9638==    by 0xA6F7BE0: KMail::ActionScheduler::qt_metacall(QMetaObject::Call, int, void**) (actionscheduler.moc:118)
==9638==    by 0x413C1F3: QMetaObject::activate(QObject*, int, int, void**) (qobject.cpp:3081)
==9638==    by 0x413CD93: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3140)
==9638==    by 0x415D082: QTimer::timeout() (moc_qtimer.cpp:125)
==9638== 
==9638== Conditional jump or move depends on uninitialised value(s)
==9638==    at 0x4081CA2: qulltoa(unsigned long long, int, QLocalePrivate const&) (qlocale.cpp:3154)
==9638==    by 0x40865C8: QLocalePrivate::unsLongLongToString(unsigned long long, int, int, int, unsigned) const (qlocale.cpp:3515)
==9638==    by 0x40A6CC6: QString::setNum(unsigned long long, int) (qstring.cpp:5369)
==9638==    by 0x40A6D83: QString::number(unsigned long long, int) (qstring.cpp:5512)
==9638==    by 0x40A6F34: QString::arg(unsigned long long, int, int, QChar const&) const (qstring.cpp:6104)
==9638==    by 0xA64AAFA: QString::arg(unsigned, int, int, QChar const&) const (qstring.h:683)
==9638==    by 0xA6F568C: KMail::ActionScheduler::debug() (actionscheduler.cpp:796)
==9638==    by 0xA6F72C7: KMail::ActionScheduler::processMessage() (actionscheduler.cpp:491)
==9638==    by 0xA6F7BE0: KMail::ActionScheduler::qt_metacall(QMetaObject::Call, int, void**) (actionscheduler.moc:118)
==9638==    by 0x413C1F3: QMetaObject::activate(QObject*, int, int, void**) (qobject.cpp:3081)
==9638==    by 0x413CD93: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3140)
==9638==    by 0x415D082: QTimer::timeout() (moc_qtimer.cpp:125)
==9638== 
==9638== Invalid read of size 4
==9638==    at 0xA6F5709: KMail::ActionScheduler::debug() (actionscheduler.cpp:797)
==9638==    by 0xA6F72C7: KMail::ActionScheduler::processMessage() (actionscheduler.cpp:491)
==9638==    by 0xA6F7BE0: KMail::ActionScheduler::qt_metacall(QMetaObject::Call, int, void**) (actionscheduler.moc:118)
==9638==    by 0x413C1F3: QMetaObject::activate(QObject*, int, int, void**) (qobject.cpp:3081)
==9638==    by 0x413CD93: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3140)
==9638==    by 0x415D082: QTimer::timeout() (moc_qtimer.cpp:125)
==9638==    by 0x4145A2D: QTimer::timerEvent(QTimerEvent*) (qtimer.cpp:259)
==9638==    by 0x413A268: QObject::event(QEvent*) (qobject.cpp:1086)
==9638==    by 0x4BA4E89: QApplicationPrivate::notify_helper(QObject*, QEvent*) (qapplication.cpp:3556)
==9638==    by 0x4BA6779: QApplication::notify(QObject*, QEvent*) (qapplication.cpp:3115)
==9638==    by 0x459B082: KApplication::notify(QObject*, QEvent*) (kapplication.cpp:314)
==9638==    by 0x4128D7A: QCoreApplication::notifyInternal(QObject*, QEvent*) (qcoreapplication.cpp:530)
==9638==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
==9638== Warning: invalid file descriptor -1 in syscall write()
==9638== Warning: invalid file descriptor -1 in syscall write()
==9638== Warning: invalid file descriptor -1 in syscall read()
==9638== 
==9638== ERROR SUMMARY: 22 errors from 22 contexts (suppressed: 16 from 3)
==9638== malloc/free: in use at exit: 5,674,937 bytes in 84,497 blocks.
==9638== malloc/free: 1,200,298 allocs, 1,115,801 frees, 257,113,711 bytes allocated.
==9638== For counts of detected errors, rerun with: -v
==9638== searching for pointers to 84,497 not-freed blocks.
==9638== checked 46,552,656 bytes.
==9638== 
==9638== LEAK SUMMARY:
==9638==    definitely lost: 11,976 bytes in 462 blocks.
==9638==      possibly lost: 157,524 bytes in 5,798 blocks.
==9638==    still reachable: 5,505,437 bytes in 78,237 blocks.
==9638==         suppressed: 0 bytes in 0 blocks.
==9638== Rerun with --leak-check=full to see details of leaked memory.
Comment 1 Oliver Putz 2008-01-24 04:05:43 UTC 
Sorry, I meant that this backtrace is similar to the (second) backtrace in bug #156289, not bug #156291
Comment 2 Oliver Putz 2008-03-19 01:37:49 UTC 
I cannot reproduce this crash in a current SVN build any longer, so I assume it was fixed