Bug 281019

Summary:	crash after email was fetched
Product:	[Applications] kmail2	Reporter:	Milian Wolff <mail>
Component:	general	Assignee:	kdepim bugs <pim-bugs-null>
Status:	RESOLVED UNMAINTAINED
Severity:	crash	CC:	kdenis
Priority:	NOR
Version First Reported In:	4.8
Target Milestone:	---
Platform:	Arch Linux
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description Milian Wolff 2011-08-29 20:41:28 UTC

Application: kmail (4.8 pre)
KDE Platform Version: 4.7.00 (4.7.0)
Qt Version: 4.7.3
Operating System: Linux 3.0-ARCH x86_64
Distribution (Platform): Archlinux Packages

-- Information about the crash:
kmail ran for some time, I just saw the notification about a new email and then boom it crashed. cli showed this:

*** glibc detected *** kmail: malloc(): smallbin double linked list corrupted: 0x000000000c3cbda0 ***
======= Backtrace: =========
/lib/libc.so.6(+0x731f6)[0x7f24bfce41f6]
/lib/libc.so.6(+0x753a2)[0x7f24bfce63a2]
/lib/libc.so.6(__libc_malloc+0x6d)[0x7f24bfce7bbd]
/usr/lib/libstdc++.so.6(_Znwm+0x1d)[0x7f24c052800d]
/home/milian/projects/compiled/kde4/lib/libmessagelist.so.4(_ZN11MessageList4Core4Item15appendChildItemEPNS0_5ModelEPS1_+0x30)[0x7f24bcda12c4]
/home/milian/projects/compiled/kde4/lib/libmessagelist.so.4(+0x6507c)[0x7f24bcdc407c]
/home/milian/projects/compiled/kde4/lib/libmessagelist.so.4(+0x5b5e6)[0x7f24bcdba5e6]
/home/milian/projects/compiled/kde4/lib/libmessagelist.so.4(+0x5cb5f)[0x7f24bcdbbb5f]
/home/milian/projects/compiled/kde4/lib/libmessagelist.so.4(+0x5f35e)[0x7f24bcdbe35e]
/home/milian/projects/compiled/kde4/lib/libmessagelist.so.4(+0x5f944)[0x7f24bcdbe944]
/home/milian/projects/compiled/kde4/lib/libmessagelist.so.4(+0x60341)[0x7f24bcdbf341]
/home/milian/projects/compiled/kde4/lib/libmessagelist.so.4(_ZN11MessageList4Core5Model11qt_metacallEN11QMetaObject4CallEiPPv+0xb9)[0x7f24bcdc14db]
/usr/lib/libQtCore.so.4(_ZN11QMetaObject8activateEP7QObjectPKS_iPPv+0x2da)[0x7f24c0afe7fa]
/usr/lib/libQtCore.so.4(_ZN7QObject5eventEP6QEvent+0x99)[0x7f24c0b020c9]
/usr/lib/libQtGui.so.4(_ZN19QApplicationPrivate13notify_helperEP7QObjectP6QEvent+0xb4)[0x7f24c17bd174]
/usr/lib/libQtGui.so.4(_ZN12QApplication6notifyEP7QObjectP6QEvent+0x121)[0x7f24c17c1fe1]
/usr/lib/libkdeui.so.5(_ZN12KApplication6notifyEP7QObjectP6QEvent+0x36)[0x7f24c5ee7226]
/usr/lib/libQtCore.so.4(_ZN16QCoreApplication14notifyInternalEP7QObjectP6QEvent+0x8c)[0x7f24c0aebbbc]
/usr/lib/libQtCore.so.4(+0x187732)[0x7f24c0b18732]
/usr/lib/libQtCore.so.4(+0x184ed8)[0x7f24c0b15ed8]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x1dd)[0x7f24b602729d]
/usr/lib/libglib-2.0.so.0(+0x42a78)[0x7f24b6027a78]
/usr/lib/libglib-2.0.so.0(g_main_context_iteration+0x69)[0x7f24b6027d09]
/usr/lib/libQtCore.so.4(_ZN20QEventDispatcherGlib13processEventsE6QFlagsIN10QEventLoop17ProcessEventsFlagEE+0x76)[0x7f24c0b16876]
/usr/lib/libQtGui.so.4(+0x25a1be)[0x7f24c18601be]
/usr/lib/libQtCore.so.4(_ZN10QEventLoop13processEventsE6QFlagsINS_17ProcessEventsFlagEE+0x32)[0x7f24c0aeadb2]
/usr/lib/libQtCore.so.4(_ZN10QEventLoop4execE6QFlagsINS_17ProcessEventsFlagEE+0xa7)[0x7f24c0aeafb7]
/usr/lib/libQtCore.so.4(_ZN16QCoreApplication4execEv+0x8b)[0x7f24c0aef1ab]
kmail[0x403676]
/lib/libc.so.6(__libc_start_main+0xed)[0x7f24bfc9213d]
kmail[0x402659]
======= Memory map: ========
00400000-00405000 r-xp 00000000 08:12 1184471                            /home/development/projects/compiled/kde4/bin/kmail
00605000-00606000 rw-p 00005000 08:12 1184471                            /home/development/projects/compiled/kde4/bin/kmail
01de1000-01e65000 rw-p 00000000 00:00 0                                  [heap]
01e65000-0cba0000 rw-p 00000000 00:00 0                                  [heap]
7f2494000000-7f2494073000 rw-p 00000000 00:00 0 
7f2494073000-7f2498000000 ---p 00000000 00:00 0 
7f249b5c5000-7f249b7ff000 r--s 00000000 08:03 158904                     /usr/lib/aspell-0.60/en-common.rws
7f249b7ff000-7f249b800000 ---p 00000000 00:00 0 
7f249b800000-7f249c000000 rw-p 00000000 00:00 0 
7f249c000000-7f249c82b000 rw-p 00000000 00:00 0 
7f249c82b000-7f24a0000000 ---p 00000000 00:00 0 
7f24a006e000-7f24a0085000 r--s 00000000 08:03 158944                     /usr/lib/aspell-0.60/en_US-wo_accents-only.rws
7f24a0085000-7f24a038d000 rw-p 00000000 00:00 0 
7f24a038d000-7f24a038f000 r--p 00000000 08:03 6902                       /usr/share/fonts/local/ter-112b.pcf.gz
7f24a038f000-7f24a0397000 r--p 00000000 08:04 665                        /home/milian/.fonts/MonteCarloBold.bdf
7f24a0397000-7f24a03ec000 r--p 00000000 08:04 635                        /home/milian/.fonts/ArevBd.ttf
7f24a03ec000-7f24a0412000 r--p 00000000 08:03 147327                     /usr/local/share/fonts/a/Anonymous_Pro_B.ttf
7f24a0412000-7f24a046a000 r--p 00000000 08:03 14869                      /usr/share/fonts/TTF/FreeSansBold.ttf
7f24a046a000-7f24a047c000 r--p 00000000 08:04 685                        /home/milian/.fonts/math5b__.ttf
7f24a047c000-7f24a048a000 r--p 00000000 08:04 650                        /home/milian/.fonts/math3b__.ttf
7f24a048a000-7f24a0521000 r--p 00000000 08:03 14873                      /usr/share/fonts/TTF/FreeSerifBold.ttf
7f24a0521000-7f24a0575000 r--p 00000000 08:03 124414                     /usr/share/fonts/TTF/DejaVuSerif-Bold.ttf
7f24a0575000-7f24a05bf000 r--p 00000000 08:03 98523                      /usr/share/fonts/TTF/DejaVuLGCSerif-Bold.ttf
7f24a05bf000-7f24a0605000 r--p 00000000 08:03 66871                      /usr/share/fonts/TTF/arialbd.ttf
7f24a0605000-7f24a0652000 r--p 00000000 08:03 66714                      /usr/share/fonts/TTF/courbd.ttf
7f24a0652000-7f24a0654000 r--p 00000000 08:03 51042                      /usr/share/fonts/misc/6x10-ISO8859-1.pcf.gz
7f24a0654000-7f24a0655000 r--p 00000000 08:03 53776                      /usr/share/fonts/100dpi/courR08-ISO8859-1.pcf.gz
7f24a0655000-7f24a06eb000 r--p 00000000 08:03 50876                      /usr/share/fonts/misc/18x18ja.pcf.gz
7f24a06eb000-7f24a06ec000 r--p 00000000 08:03 50868                      /usr/share/fonts/misc/cu-pua12.pcf.gz
7f24a06ec000-7f24a06f0000 r--p 00000000 08:03 51008                      /usr/share/fonts/misc/cu-alt12.pcf.gz
7f24a06f0000-7f24a0720000 r--p 00000000 08:03 50991                      /usr/share/fonts/misc/cu12.pcf.gz
7f24a0720000-7f24a0724000 r--p 00000000 08:04 645                        /home/milian/.fonts/console8x16.pcf.gz
7f24a0724000-7f24a0738000 r--p 00000000 08:04 686                        /home/milian/.fonts/9x15.pcf.gz
7f24a0738000-7f24a074a000 r--p 00000000 08:03 50988                      /usr/share/fonts/misc/6x13.pcf.gz
7f24a074a000-7f24a07a2000 r--p 00000000 08:03 50882                      /usr/share/fonts/misc/12x13ja.pcf.gz
7f24a07a2000-7f24a07a7000 r--p 00000000 08:03 43052                      /usr/share/fonts/local/ter-x12n.pcf.gz
7f24a07a7000-7f24a07ba000 r--p 00000000 08:03 51046                      /usr/share/fonts/misc/6x12.pcf.gz
7f24a07ba000-7f24a07c2000 r--p 00000000 08:04 680                        /home/milian/.fonts/MonteCarloMedium.bdf
7f24a07c2000-7f24a07c4000 r--p 00000000 08:03 50915                      /usr/share/fonts/misc/5x8-ISO8859-1.pcf.gz
7f24a07c4000-7f24a07cd000 r--p 00000000 08:03 57128                      /usr/share/fonts/Type1/s050000l.pfb
7f24a07cd000-7f24a0823000 r--p 00000000 08:04 672                        /home/milian/.fonts/Arev.ttf
7f24a0823000-7f24a082b000 r--p 00000000 08:04 679                        /home/milian/.fonts/cmmi10.ttf
7f24a082b000-7f24a083a000 r--p 00000000 08:04 637                        /home/milian/.fonts/math1___.ttf
7f24a083a000-7f24a0845000 r--p 00000000 08:04 648                        /home/milian/.fonts/ProggyCleanSZBP.ttf*** KMail got signal 6 (Exiting)
*** Dead letters dumped.
KCrash: Application 'kmail' crashing...
KCrash: Attempting to start /usr/lib/kde4/libexec/drkonqi from kdeinit
sock_file=/home/milian/.kde/socket-thor/kdeinit4__0
QSocketNotifier: Invalid socket 20 and type 'Read', disabling...

-- Backtrace:
Application: KMail (kmail), signal: Aborted
[Current thread is 1 (Thread 0x7f24c64cd780 (LWP 25024))]

Thread 6 (Thread 0x7f24a8b64700 (LWP 25027)):
#0  0x00007f24c077fac4 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#1  0x00007f24b984f0ea in ?? () from /usr/lib/libQtWebKit.so.4
#2  0x00007f24b984f1d9 in ?? () from /usr/lib/libQtWebKit.so.4
#3  0x00007f24c077bd60 in start_thread () from /lib/libpthread.so.0
#4  0x00007f24bfd4425d in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 5 (Thread 0x7f24a3bef700 (LWP 30396)):
#0  0x00007f24bfd3bff3 in poll () from /lib/libc.so.6
#1  0x00007f24b60277d4 in ?? () from /usr/lib/libglib-2.0.so.0
#2  0x00007f24b6027d09 in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#3  0x00007f24c0b168de in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/libQtCore.so.4
#4  0x00007f24c0aeadb2 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/libQtCore.so.4
#5  0x00007f24c0aeafb7 in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/libQtCore.so.4
#6  0x00007f24c0a0269f in QThread::exec() () from /usr/lib/libQtCore.so.4
#7  0x00007f24c0acdd8f in ?? () from /usr/lib/libQtCore.so.4
#8  0x00007f24c0a050f5 in ?? () from /usr/lib/libQtCore.so.4
#9  0x00007f24c077bd60 in start_thread () from /lib/libpthread.so.0
#10 0x00007f24bfd4425d in clone () from /lib/libc.so.6
#11 0x0000000000000000 in ?? ()

Thread 4 (Thread 0x7f24a159f700 (LWP 30400)):
#0  0x00007f24bfd3e093 in select () from /lib/libc.so.6
#1  0x00007f24c0acd741 in ?? () from /usr/lib/libQtCore.so.4
#2  0x00007f24c0a050f5 in ?? () from /usr/lib/libQtCore.so.4
#3  0x00007f24c077bd60 in start_thread () from /lib/libpthread.so.0
#4  0x00007f24bfd4425d in clone () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 3 (Thread 0x7f24a2eb7700 (LWP 2510)):
#0  0x00007f24c077fe3b in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#1  0x00007f24c0a0550e in QWaitCondition::wait(QMutex*, unsigned long) () from /usr/lib/libQtCore.so.4
#2  0x00007f24c09f9ebf in ?? () from /usr/lib/libQtCore.so.4
#3  0x00007f24c0a050f5 in ?? () from /usr/lib/libQtCore.so.4
#4  0x00007f24c077bd60 in start_thread () from /lib/libpthread.so.0
#5  0x00007f24bfd4425d in clone () from /lib/libc.so.6
#6  0x0000000000000000 in ?? ()

Thread 2 (Thread 0x7f24a6ebf700 (LWP 2511)):
#0  0x00007f24c077fe3b in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#1  0x00007f24c0a0550e in QWaitCondition::wait(QMutex*, unsigned long) () from /usr/lib/libQtCore.so.4
#2  0x00007f24c09f9ebf in ?? () from /usr/lib/libQtCore.so.4
#3  0x00007f24c0a050f5 in ?? () from /usr/lib/libQtCore.so.4
#4  0x00007f24c077bd60 in start_thread () from /lib/libpthread.so.0
#5  0x00007f24bfd4425d in clone () from /lib/libc.so.6
#6  0x0000000000000000 in ?? ()

Thread 1 (Thread 0x7f24c64cd780 (LWP 25024)):
[KCrash Handler]
#6  0x00007f24bfca5725 in raise () from /lib/libc.so.6
#7  0x00007f24bfca6b9b in abort () from /lib/libc.so.6
#8  0x00007f24bfcde2de in ?? () from /lib/libc.so.6
#9  0x00007f24bfce41f6 in ?? () from /lib/libc.so.6
#10 0x00007f24bfce63a2 in ?? () from /lib/libc.so.6
#11 0x00007f24bfce7bbd in malloc () from /lib/libc.so.6
#12 0x00007f24c052800d in operator new(unsigned long) () from /usr/lib/libstdc++.so.6
#13 0x00007f24bcda12c4 in MessageList::Core::Item::appendChildItem (this=0xc3add30, model=0x0, child=0x86cda80) at /home/milian/projects/kde4/kdepim/messagelist/core/item.cpp:524
#14 0x00007f24bcdc407c in MessageList::Core::ItemPrivate::insertChildItem<MessageList::Core::ItemMaxDateComparator, true> (this=0xc7326b0, model=0x0, child=0x86cda80) at /home/milian/projects/kde4/kdepim/messagelist/core/item_p.h:94
#15 0x00007f24bcdba5e6 in MessageList::Core::ModelPrivate::attachMessageToParent (this=0x232d600, pParent=0xc3add30, mi=0x86cda80) at /home/milian/projects/kde4/kdepim/messagelist/core/model.cpp:2167
#16 0x00007f24bcdbbb5f in MessageList::Core::ModelPrivate::viewItemJobStepInternalForJobPass2 (this=0x232d600, job=0xc705890, tStart=...) at /home/milian/projects/kde4/kdepim/messagelist/core/model.cpp:2620
#17 0x00007f24bcdbe35e in MessageList::Core::ModelPrivate::viewItemJobStepInternalForJob (this=0x232d600, job=0xc705890, tStart=...) at /home/milian/projects/kde4/kdepim/messagelist/core/model.cpp:3462
#18 0x00007f24bcdbe944 in MessageList::Core::ModelPrivate::viewItemJobStepInternal (this=0x232d600) at /home/milian/projects/kde4/kdepim/messagelist/core/model.cpp:3752
#19 0x00007f24bcdbf341 in MessageList::Core::ModelPrivate::viewItemJobStep (this=0x232d600) at /home/milian/projects/kde4/kdepim/messagelist/core/model.cpp:3967
#20 0x00007f24bcdc14db in MessageList::Core::Model::qt_metacall (this=0x236d3c0, _c=QMetaObject::InvokeMetaMethod, _id=2, _a=0x7fff4077ebb0) at /home/milian/projects/.build/kde4/kdepim/messagelist/model.moc:90
#21 0x00007f24c0afe7fa in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib/libQtCore.so.4
#22 0x00007f24c0b020c9 in QObject::event(QEvent*) () from /usr/lib/libQtCore.so.4
#23 0x00007f24c17bd174 in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/lib/libQtGui.so.4
#24 0x00007f24c17c1fe1 in QApplication::notify(QObject*, QEvent*) () from /usr/lib/libQtGui.so.4
#25 0x00007f24c5ee7226 in KApplication::notify(QObject*, QEvent*) () from /usr/lib/libkdeui.so.5
#26 0x00007f24c0aebbbc in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/lib/libQtCore.so.4
#27 0x00007f24c0b18732 in ?? () from /usr/lib/libQtCore.so.4
#28 0x00007f24c0b15ed8 in ?? () from /usr/lib/libQtCore.so.4
#29 0x00007f24b602729d in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#30 0x00007f24b6027a78 in ?? () from /usr/lib/libglib-2.0.so.0
#31 0x00007f24b6027d09 in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#32 0x00007f24c0b16876 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/libQtCore.so.4
#33 0x00007f24c18601be in ?? () from /usr/lib/libQtGui.so.4
#34 0x00007f24c0aeadb2 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/libQtCore.so.4
#35 0x00007f24c0aeafb7 in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/libQtCore.so.4
#36 0x00007f24c0aef1ab in QCoreApplication::exec() () from /usr/lib/libQtCore.so.4
#37 0x0000000000403676 in main (argc=1, argv=0x7fff4077f668) at /home/milian/projects/kde4/kdepim/kmail/main.cpp:145

Reported using DrKonqi

Comment 1 Christophe Marin 2011-10-12 23:48:10 UTC

we found a way to get the malloc issue this evening:

rmb on a folder / properties / view tab / changing the displayed name twice triggers the issue

Comment 2 Denis Kurz 2016-09-17 11:09:01 UTC

Closing due to lack of activity for 5 years and kmail(1) being unmaintained for a long time. Also, the actions suggested in comment 1 do not trigger a crash any more.