Bug 276548

Application: kmail (1.13.7)
KDE Platform Version: 4.6.4 (4.6.4)
Qt Version: 4.7.3
Operating System: Linux 2.6.39-2-amd64 x86_64
Distribution: Debian GNU/Linux unstable (sid)

-- Information about the crash:
- What I was doing when the application crashed:

I was trying to read my mail, when kmail crashed when I tried to scroll the message subject tree view to the end. Near the end, kmail crashed. Multiple times.

The crash can be reproduced every time.

-- Backtrace:
Application: KMail (kmail), signal: Aborted
[Current thread is 1 (Thread 0x7f1cd9dce760 (LWP 12330))]

Thread 3 (Thread 0x7f1cb77f0700 (LWP 12341)):
#0  pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:216
#1  0x00007f1cd735e60e in wait (this=<value optimized out>, mutex=0x3e7e680, time=30000) at thread/qwaitcondition_unix.cpp:86
#2  QWaitCondition::wait (this=<value optimized out>, mutex=0x3e7e680, time=30000) at thread/qwaitcondition_unix.cpp:160
#3  0x00007f1cd7352d5f in QThreadPoolThread::run (this=0x3c15e80) at concurrent/qthreadpool.cpp:140
#4  0x00007f1cd735e205 in QThreadPrivate::start (arg=0x3c15e80) at thread/qthread_unix.cpp:320
#5  0x00007f1cd46d8b40 in start_thread (arg=<value optimized out>) at pthread_create.c:304
#6  0x00007f1cd6b052fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#7  0x0000000000000000 in ?? ()

Thread 2 (Thread 0x7f1cb6fef700 (LWP 12342)):
#0  pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:216
#1  0x00007f1cd735e60e in wait (this=<value optimized out>, mutex=0x3e7e680, time=30000) at thread/qwaitcondition_unix.cpp:86
#2  QWaitCondition::wait (this=<value optimized out>, mutex=0x3e7e680, time=30000) at thread/qwaitcondition_unix.cpp:160
#3  0x00007f1cd7352d5f in QThreadPoolThread::run (this=0x3da8500) at concurrent/qthreadpool.cpp:140
#4  0x00007f1cd735e205 in QThreadPrivate::start (arg=0x3da8500) at thread/qthread_unix.cpp:320
#5  0x00007f1cd46d8b40 in start_thread (arg=<value optimized out>) at pthread_create.c:304
#6  0x00007f1cd6b052fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#7  0x0000000000000000 in ?? ()

Thread 1 (Thread 0x7f1cd9dce760 (LWP 12330)):
[KCrash Handler]
#6  0x00007f1cd6a62405 in raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#7  0x00007f1cd6a65680 in abort () at abort.c:92
#8  0x00007f1cd6a98dbb in __libc_message (do_abort=<value optimized out>, fmt=<value optimized out>) at ../sysdeps/unix/sysv/linux/libc_fatal.c:189
#9  0x00007f1cd6aa2606 in malloc_printerr (action=3, str=0x7f1cd6b791a8 "double free or corruption (!prev)", ptr=<value optimized out>) at malloc.c:6283
#10 0x00007f1cd6aa733c in __libc_free (mem=<value optimized out>) at malloc.c:3738
#11 0x00007f1ccecafed4 in FcPatternDestroy () from /usr/lib/libfontconfig.so.1
#12 0x00007f1cd7baf66d in loadFc (d=0x427eba0, script=1) at text/qfontdatabase_x11.cpp:1718
#13 QFontDatabase::load (d=0x427eba0, script=1) at text/qfontdatabase_x11.cpp:1951
#14 0x00007f1cd7b8dff5 in QFontPrivate::engineForScript (this=0x427eba0, script=1) at text/qfont.cpp:270
#15 0x00007f1cd7bc281c in QTextEngine::fontEngine (this=0x7fff7f33ac70, si=..., ascent=0x4fd0c70, descent=0x4fd0c6c, leading=0x4fd0c74) at text/qtextengine.cpp:1812
#16 0x00007f1cd7bc34f7 in QTextEngine::shapeTextWithHarfbuzz (this=0x7fff7f33ac70, item=0) at text/qtextengine.cpp:1135
#17 0x00007f1cd7bc44db in QTextEngine::shapeText (this=0x7fff7f33ac70, item=0) at text/qtextengine.cpp:874
#18 0x00007f1cd7bc47f2 in QTextEngine::shape (this=0x7fff7f33ac70, item=0) at text/qtextengine.cpp:1381
#19 0x00007f1cd7bc8eb6 in QTextEngine::width (this=0x7fff7f33ac70, from=0, len=<value optimized out>) at text/qtextengine.cpp:1595
#20 0x00007f1cd7bc906f in QTextEngine::elidedText (this=0x7fff7f33ac70, mode=Qt::ElideRight, width=..., flags=<value optimized out>) at text/qtextengine.cpp:2386
#21 0x00007f1cd7ba22a8 in QFontMetrics::elidedText (this=0x7fff7f33ded0, text=<value optimized out>, mode=Qt::ElideRight, width=<value optimized out>, flags=0) at text/qfontmetrics.cpp:904
#22 0x00007f1cd29174e5 in paint_left_aligned_elided_text (this=0x37e9ee0, painter=0x7fff7f33e580, option=..., index=<value optimized out>) at ../../messagelist/core/themedelegate.cpp:138
#23 MessageList::Core::ThemeDelegate::paint (this=0x37e9ee0, painter=0x7fff7f33e580, option=..., index=<value optimized out>) at ../../messagelist/core/themedelegate.cpp:996
#24 0x00007f1cd7ebfc3d in QTreeView::drawRow (this=0x37ec7a0, painter=0x7fff7f33e580, option=..., index=...) at itemviews/qtreeview.cpp:1678
#25 0x00007f1cd7ec2728 in QTreeView::drawTree (this=0x37ec7a0, painter=0x7fff7f33e580, region=<value optimized out>) at itemviews/qtreeview.cpp:1441
#26 0x00007f1cd7ec30c0 in QTreeView::paintEvent (this=0x37ec7a0, event=0x7fff7f33f200) at itemviews/qtreeview.cpp:1274
#27 0x00007f1cd79ced58 in QWidget::event (this=0x37ec7a0, event=0x7fff7f33f200) at kernel/qwidget.cpp:8405
#28 0x00007f1cd7d6fd76 in QFrame::event (this=0x37ec7a0, e=0x7fff7f33f200) at widgets/qframe.cpp:557
#29 0x00007f1cd7e7fdab in QAbstractItemView::viewportEvent (this=0x37ec7a0, event=0x7fff7f33f200) at itemviews/qabstractitemview.cpp:1628
#30 0x00007f1cd7ec4ad5 in QTreeView::viewportEvent (this=0x37ec7a0, event=0x7fff7f33f200) at itemviews/qtreeview.cpp:1256
#31 0x00007f1cd7444748 in QCoreApplicationPrivate::sendThroughObjectEventFilters (this=<value optimized out>, receiver=0x37ebc20, event=0x7fff7f33f200) at kernel/qcoreapplication.cpp:846
#32 0x00007f1cd797e74f in notify_helper (this=0x19d8260, receiver=0x37ebc20, e=0x7fff7f33f200) at kernel/qapplication.cpp:4463
#33 QApplicationPrivate::notify_helper (this=0x19d8260, receiver=0x37ebc20, e=0x7fff7f33f200) at kernel/qapplication.cpp:4439
#34 0x00007f1cd7983611 in QApplication::notify (this=0x7fff7f342f70, receiver=0x37ebc20, e=0x7fff7f33f200) at kernel/qapplication.cpp:4346
#35 0x00007f1cd95e54f6 in KApplication::notify (this=0x7fff7f342f70, receiver=0x37ebc20, event=0x7fff7f33f200) at ../../kdeui/kernel/kapplication.cpp:311
#36 0x00007f1cd74445bc in QCoreApplication::notifyInternal (this=0x7fff7f342f70, receiver=0x37ebc20, event=0x7fff7f33f200) at kernel/qcoreapplication.cpp:731
#37 0x00007f1cd79cbc66 in sendSpontaneousEvent (this=0x37eb460, pdev=0x3b49808, rgn=..., offset=..., flags=4, sharedPainter=0x0, backingStore=0x3b980c0) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:218
#38 QWidgetPrivate::drawWidget (this=0x37eb460, pdev=0x3b49808, rgn=..., offset=..., flags=4, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5492
#39 0x00007f1cd79cc840 in QWidgetPrivate::paintSiblingsRecursive (this=0x372aef0, pdev=0x3b49808, siblings=..., index=<value optimized out>, rgn=..., offset=..., flags=4, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5699
#40 0x00007f1cd79cc720 in QWidgetPrivate::paintSiblingsRecursive (this=0x372aef0, pdev=0x3b49808, siblings=..., index=2, rgn=..., offset=..., flags=4, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5686
#41 0x00007f1cd79cc720 in QWidgetPrivate::paintSiblingsRecursive (this=0x372aef0, pdev=0x3b49808, siblings=..., index=6, rgn=..., offset=..., flags=4, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5686
#42 0x00007f1cd79cc720 in QWidgetPrivate::paintSiblingsRecursive (this=0x372aef0, pdev=0x3b49808, siblings=..., index=7, rgn=..., offset=..., flags=4, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5686
#43 0x00007f1cd79cc720 in QWidgetPrivate::paintSiblingsRecursive (this=0x372aef0, pdev=0x3b49808, siblings=..., index=8, rgn=..., offset=..., flags=4, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5686
#44 0x00007f1cd79cc720 in QWidgetPrivate::paintSiblingsRecursive (this=0x372aef0, pdev=0x3b49808, siblings=..., index=9, rgn=..., offset=..., flags=4, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5686
#45 0x00007f1cd79cc720 in QWidgetPrivate::paintSiblingsRecursive (this=0x372aef0, pdev=0x3b49808, siblings=..., index=10, rgn=..., offset=..., flags=4, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5686
#46 0x00007f1cd79cb99c in QWidgetPrivate::drawWidget (this=0x372aef0, pdev=0x3b49808, rgn=..., offset=..., flags=<value optimized out>, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5545
#47 0x00007f1cd79cc840 in QWidgetPrivate::paintSiblingsRecursive (this=0x376e150, pdev=0x3b49808, siblings=..., index=<value optimized out>, rgn=..., offset=..., flags=4, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5699
#48 0x00007f1cd79cb99c in QWidgetPrivate::drawWidget (this=0x376e150, pdev=0x3b49808, rgn=..., offset=..., flags=<value optimized out>, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5545
#49 0x00007f1cd79cc840 in QWidgetPrivate::paintSiblingsRecursive (this=0x3767210, pdev=0x3b49808, siblings=..., index=<value optimized out>, rgn=..., offset=..., flags=4, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5699
#50 0x00007f1cd79cb99c in QWidgetPrivate::drawWidget (this=0x3767210, pdev=0x3b49808, rgn=..., offset=..., flags=<value optimized out>, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5545
#51 0x00007f1cd79cc840 in QWidgetPrivate::paintSiblingsRecursive (this=0x37720a0, pdev=0x3b49808, siblings=..., index=<value optimized out>, rgn=..., offset=..., flags=4, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5699
#52 0x00007f1cd79cb99c in QWidgetPrivate::drawWidget (this=0x37720a0, pdev=0x3b49808, rgn=..., offset=..., flags=<value optimized out>, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5545
#53 0x00007f1cd79cc840 in QWidgetPrivate::paintSiblingsRecursive (this=0x3aa40f0, pdev=0x3b49808, siblings=..., index=<value optimized out>, rgn=..., offset=..., flags=4, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5699
#54 0x00007f1cd79cb99c in QWidgetPrivate::drawWidget (this=0x3aa40f0, pdev=0x3b49808, rgn=..., offset=..., flags=<value optimized out>, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5545
#55 0x00007f1cd79cc840 in QWidgetPrivate::paintSiblingsRecursive (this=0x3a9d2d0, pdev=0x3b49808, siblings=..., index=<value optimized out>, rgn=..., offset=..., flags=4, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5699
#56 0x00007f1cd79cb99c in QWidgetPrivate::drawWidget (this=0x3a9d2d0, pdev=0x3b49808, rgn=..., offset=..., flags=<value optimized out>, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5545
#57 0x00007f1cd79cc840 in QWidgetPrivate::paintSiblingsRecursive (this=0x38132c0, pdev=0x3b49808, siblings=..., index=<value optimized out>, rgn=..., offset=..., flags=4, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5699
#58 0x00007f1cd79cb99c in QWidgetPrivate::drawWidget (this=0x38132c0, pdev=0x3b49808, rgn=..., offset=..., flags=<value optimized out>, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5545
#59 0x00007f1cd79cc840 in QWidgetPrivate::paintSiblingsRecursive (this=0x37df930, pdev=0x3b49808, siblings=..., index=<value optimized out>, rgn=..., offset=..., flags=4, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5699
#60 0x00007f1cd79cb99c in QWidgetPrivate::drawWidget (this=0x37df930, pdev=0x3b49808, rgn=..., offset=..., flags=<value optimized out>, sharedPainter=0x0, backingStore=0x3b980c0) at kernel/qwidget.cpp:5545
#61 0x00007f1cd7b88ac2 in QWidgetBackingStore::sync (this=0x3b980c0) at painting/qbackingstore.cpp:1333
#62 0x00007f1cd79c24b0 in QWidgetPrivate::syncBackingStore (this=0x37df930) at kernel/qwidget.cpp:1842
#63 0x00007f1cd79cf26c in QWidget::event (this=0x3721020, event=0x424a480) at kernel/qwidget.cpp:8552
#64 0x00007f1cd7d8947b in QMainWindow::event (this=0x3721020, event=0x424a480) at widgets/qmainwindow.cpp:1480
#65 0x00007f1cd96e18be in KXmlGuiWindow::event (this=0x3721020, ev=0x424a480) at ../../kdeui/xmlgui/kxmlguiwindow.cpp:126
#66 0x00007f1cd797e784 in notify_helper (this=0x19d8260, receiver=0x3721020, e=0x424a480) at kernel/qapplication.cpp:4467
#67 QApplicationPrivate::notify_helper (this=0x19d8260, receiver=0x3721020, e=0x424a480) at kernel/qapplication.cpp:4439
#68 0x00007f1cd7983611 in QApplication::notify (this=0x7fff7f342f70, receiver=0x3721020, e=0x424a480) at kernel/qapplication.cpp:4346
#69 0x00007f1cd95e54f6 in KApplication::notify (this=0x7fff7f342f70, receiver=0x3721020, event=0x424a480) at ../../kdeui/kernel/kapplication.cpp:311
#70 0x00007f1cd74445bc in QCoreApplication::notifyInternal (this=0x7fff7f342f70, receiver=0x3721020, event=0x424a480) at kernel/qcoreapplication.cpp:731
#71 0x00007f1cd7447978 in sendEvent (receiver=0x0, event_type=0, data=0x1879410) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:215
#72 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x1879410) at kernel/qcoreapplication.cpp:1372
#73 0x00007f1cd746ec63 in sendPostedEvents (s=<value optimized out>) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:220
#74 postEventSourceDispatch (s=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:277
#75 0x00007f1cce7d24a3 in g_main_context_dispatch () from /lib/libglib-2.0.so.0
#76 0x00007f1cce7d2c80 in ?? () from /lib/libglib-2.0.so.0
#77 0x00007f1cce7d2f1d in g_main_context_iteration () from /lib/libglib-2.0.so.0
#78 0x00007f1cd746f0bf in QEventDispatcherGlib::processEvents (this=0x187af20, flags=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:422
#79 0x00007f1cd7a2275e in QGuiEventDispatcherGlib::processEvents (this=<value optimized out>, flags=<value optimized out>) at kernel/qguieventdispatcher_glib.cpp:204
#80 0x00007f1cd74437c2 in QEventLoop::processEvents (this=<value optimized out>, flags=...) at kernel/qeventloop.cpp:149
#81 0x00007f1cd74439bf in QEventLoop::exec (this=0x7fff7f342db0, flags=...) at kernel/qeventloop.cpp:201
#82 0x00007f1cd7447b67 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1008
#83 0x0000000000402f80 in main (argc=<value optimized out>, argv=<value optimized out>) at ../../kmail/main.cpp:158

Possible duplicates by query: bug 275788, bug 275601, bug 275298, bug 272921, bug 271754.

Reported using DrKonqi