Bug 350048

Application: kmail (4.14.6)
KDE Platform Version: 4.14.6
Qt Version: 4.8.6
Operating System: Linux 3.19.0-22-generic x86_64
Distribution: Ubuntu 15.04

-- Information about the crash:
- What I was doing when the application crashed:

I was replaying with option TO ALL (circa to 7 e-mail address). 
-- The mail was long, with HTML formatting and pictures (logos)
-- the mail was already a replay to another mail and so on (a longer conversation).
Application crashes. When starting it again, it also crashes -- each time I tray to start it until deleting the autosave-file in:
.../.kde/share/apps/kmail2/autosave/
After deleting the autosave-file, kMail starts without crash, but the bug is reproducible.
I can reproduce the bug with this particular mail, but also with other mails similar to this (specially from the same client).

-- Backtrace:
Application: KMail (kmail), signal: Aborted
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[Current thread is 1 (Thread 0x7f0bc1907800 (LWP 4133))]

Thread 2 (Thread 0x7f0b99221700 (LWP 4136)):
#0  0x00007f0bb68082d7 in g_main_context_prepare () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#1  0x00007f0bb6808de8 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#2  0x00007f0bb6808fcc in g_main_context_iteration () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#3  0x00007f0bc023987e in QEventDispatcherGlib::processEvents (this=0x7f0b940008c0, flags=...) at kernel/qeventdispatcher_glib.cpp:452
#4  0x00007f0bc0208d21 in QEventLoop::processEvents (this=this@entry=0x7f0b99220d80, flags=...) at kernel/qeventloop.cpp:149
#5  0x00007f0bc0209085 in QEventLoop::exec (this=this@entry=0x7f0b99220d80, flags=...) at kernel/qeventloop.cpp:204
#6  0x00007f0bc00fce89 in QThread::exec (this=this@entry=0x108ef80) at thread/qthread.cpp:538
#7  0x00007f0bc01e9493 in QInotifyFileSystemWatcherEngine::run (this=0x108ef80) at io/qfilesystemwatcher_inotify.cpp:265
#8  0x00007f0bc00ff6ff in QThreadPrivate::start (arg=0x108ef80) at thread/qthread_unix.cpp:349
#9  0x00007f0bbc4436aa in start_thread (arg=0x7f0b99221700) at pthread_create.c:333
#10 0x00007f0bbeba0eed in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 1 (Thread 0x7f0bc1907800 (LWP 4133)):
[KCrash Handler]
#6  0x00007f0bbeacf267 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:55
#7  0x00007f0bbead0eca in __GI_abort () at abort.c:89
#8  0x00007f0bbeb12c53 in __libc_message (do_abort=do_abort@entry=1, fmt=fmt@entry=0x7f0bbec2b1a8 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175
#9  0x00007f0bbeb1ac69 in malloc_printerr (ptr=<optimized out>, str=0x7f0bbec2b220 "free(): invalid next size (fast)", action=1) at malloc.c:4965
#10 _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:3834
#11 0x00007f0bbeb1e89c in __GI___libc_free (mem=<optimized out>) at malloc.c:2950
#12 0x00007f0bbf7bd58d in free (alignment=8, x=<optimized out>) at ../../include/QtCore/../../src/corelib/tools/qvector.h:99
#13 free (this=<optimized out>, x=<optimized out>) at ../../include/QtCore/../../src/corelib/tools/qvector.h:468
#14 operator= (v=..., this=0x1600f00) at ../../include/QtCore/../../src/corelib/tools/qvector.h:395
#15 clear (this=0x1600f00) at ../../include/QtCore/../../src/corelib/tools/qvector.h:348
#16 QTextEngine::clearLineData (this=0x1600f00) at text/qtextengine.cpp:1480
#17 0x00007f0bbf7bf428 in QTextLayout::clearLayout (this=<optimized out>) at text/qtextlayout.cpp:659
#18 0x00007f0bbf7d1bdc in QTextBlock::clearLayout (this=this@entry=0x7ffc02cb62f0) at text/qtextobject.cpp:1084
#19 0x00007f0bbf80a5fb in QTextDocumentLayout::documentChanged (this=0xf6e710, from=0, oldLength=0, length=10367) at text/qtextdocumentlayout.cpp:2882
#20 0x00007f0bbf9d6f75 in QTextEditPrivate::relayoutDocument (this=this@entry=0x1090a60) at widgets/qtextedit.cpp:1438
#21 0x00007f0bbf9d77b0 in QTextEdit::resizeEvent (this=<optimized out>, e=0x7ffc02cb6810) at widgets/qtextedit.cpp:1397
#22 0x00007f0bbf5a4dc8 in QWidget::event (this=0x10c4590, event=0x7ffc02cb6810) at kernel/qwidget.cpp:8775
#23 0x00007f0bbf96b64e in QFrame::event (this=0x10c4590, e=0x7ffc02cb6810) at widgets/qframe.cpp:557
#24 0x00007f0bc020a336 in QCoreApplicationPrivate::sendThroughObjectEventFilters (this=this@entry=0xc20940, receiver=receiver@entry=0xf6e640, event=event@entry=0x7ffc02cb6810) at kernel/qcoreapplication.cpp:1065
#25 0x00007f0bbf55199c in QApplicationPrivate::notify_helper (this=this@entry=0xc20940, receiver=receiver@entry=0xf6e640, e=e@entry=0x7ffc02cb6810) at kernel/qapplication.cpp:4566
#26 0x00007f0bbf5584d8 in QApplication::notify (this=this@entry=0x7ffc02cb76a0, receiver=receiver@entry=0xf6e640, e=e@entry=0x7ffc02cb6810) at kernel/qapplication.cpp:4356
#27 0x00007f0bc131eb4a in KApplication::notify (this=0x7ffc02cb76a0, receiver=0xf6e640, event=0x7ffc02cb6810) at ../../kdeui/kernel/kapplication.cpp:311
#28 0x00007f0bc020a1cd in QCoreApplication::notifyInternal (this=0x7ffc02cb76a0, receiver=receiver@entry=0xf6e640, event=event@entry=0x7ffc02cb6810) at kernel/qcoreapplication.cpp:955
#29 0x00007f0bbf5a0f51 in sendEvent (event=0x7ffc02cb6810, receiver=0xf6e640) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:231
#30 QWidgetPrivate::sendPendingMoveAndResizeEvents (this=this@entry=0x10bd130, recursive=recursive@entry=false, disableUpdates=<optimized out>, disableUpdates@entry=false) at kernel/qwidget.cpp:7459
#31 0x00007f0bbf5a2103 in QWidgetPrivate::show_helper (this=this@entry=0x10bd130) at kernel/qwidget.cpp:7510
#32 0x00007f0bbf5a415a in QWidget::setVisible (this=0xf6e640, visible=<optimized out>) at kernel/qwidget.cpp:7791
#33 0x00007f0bbf5a206e in show (this=0xf6e640) at ../../include/QtGui/../../src/gui/kernel/qwidget.h:497
#34 QWidgetPrivate::showChildren (this=this@entry=0x1090a60, spontaneous=spontaneous@entry=false) at kernel/qwidget.cpp:7879
#35 0x00007f0bbf5a211f in QWidgetPrivate::show_helper (this=this@entry=0x1090a60) at kernel/qwidget.cpp:7516
#36 0x00007f0bbf5a415a in QWidget::setVisible (this=0x10c4590, visible=<optimized out>) at kernel/qwidget.cpp:7791
#37 0x00007f0bbf5a206e in show (this=0x10c4590) at ../../include/QtGui/../../src/gui/kernel/qwidget.h:497
#38 QWidgetPrivate::showChildren (this=this@entry=0x10d4110, spontaneous=spontaneous@entry=false) at kernel/qwidget.cpp:7879
#39 0x00007f0bbf5a211f in QWidgetPrivate::show_helper (this=this@entry=0x10d4110) at kernel/qwidget.cpp:7516
#40 0x00007f0bbf5a415a in QWidget::setVisible (this=0x108b910, visible=<optimized out>) at kernel/qwidget.cpp:7791
#41 0x00007f0bbf5a206e in show (this=0x108b910) at ../../include/QtGui/../../src/gui/kernel/qwidget.h:497
#42 QWidgetPrivate::showChildren (this=this@entry=0x105d470, spontaneous=spontaneous@entry=false) at kernel/qwidget.cpp:7879
#43 0x00007f0bbf5a211f in QWidgetPrivate::show_helper (this=this@entry=0x105d470) at kernel/qwidget.cpp:7516
#44 0x00007f0bbf5a415a in QWidget::setVisible (this=0x1025e20, visible=<optimized out>) at kernel/qwidget.cpp:7791
#45 0x00007f0bbf5a206e in show (this=0x1025e20) at ../../include/QtGui/../../src/gui/kernel/qwidget.h:497
#46 QWidgetPrivate::showChildren (this=this@entry=0xf6e400, spontaneous=spontaneous@entry=false) at kernel/qwidget.cpp:7879
#47 0x00007f0bbf5a211f in QWidgetPrivate::show_helper (this=this@entry=0xf6e400) at kernel/qwidget.cpp:7516
#48 0x00007f0bbf5a415a in QWidget::setVisible (this=0xf6e850, visible=<optimized out>) at kernel/qwidget.cpp:7791
#49 0x00007f0bbf5a206e in show (this=0xf6e850) at ../../include/QtGui/../../src/gui/kernel/qwidget.h:497
#50 QWidgetPrivate::showChildren (this=this@entry=0x1027d50, spontaneous=spontaneous@entry=false) at kernel/qwidget.cpp:7879
#51 0x00007f0bbf5a211f in QWidgetPrivate::show_helper (this=this@entry=0x1027d50) at kernel/qwidget.cpp:7516
#52 0x00007f0bbf5a415a in QWidget::setVisible (this=0x1029530, visible=<optimized out>) at kernel/qwidget.cpp:7791
#53 0x00007f0bbf5a206e in show (this=0x1029530) at ../../include/QtGui/../../src/gui/kernel/qwidget.h:497
#54 QWidgetPrivate::showChildren (this=this@entry=0x1027b50, spontaneous=spontaneous@entry=false) at kernel/qwidget.cpp:7879
#55 0x00007f0bbf5a211f in QWidgetPrivate::show_helper (this=this@entry=0x1027b50) at kernel/qwidget.cpp:7516
#56 0x00007f0bbf5a415a in QWidget::setVisible (this=0x1026670, visible=<optimized out>) at kernel/qwidget.cpp:7791
#57 0x00007f0bbf5a206e in show (this=0x1026670) at ../../include/QtGui/../../src/gui/kernel/qwidget.h:497
#58 QWidgetPrivate::showChildren (this=this@entry=0xff6e20, spontaneous=spontaneous@entry=false) at kernel/qwidget.cpp:7879
#59 0x00007f0bbf5a211f in QWidgetPrivate::show_helper (this=this@entry=0xff6e20) at kernel/qwidget.cpp:7516
#60 0x00007f0bbf5a415a in QWidget::setVisible (this=0xff6240, visible=<optimized out>) at kernel/qwidget.cpp:7791
#61 0x00007f0bc06333df in show (this=0xff6240) at /usr/include/qt4/QtGui/qwidget.h:497
#62 KMKernel::recoverDeadLetters (this=this@entry=0x7ffc02cb76d0) at ../../kmail/kmkernel.cpp:1157
#63 0x0000000000402d5e in main (argc=<optimized out>, argv=<optimized out>) at ../../kmail/main.cpp:136

Possible duplicates by query: bug 349754, bug 348699, bug 347139, bug 347134, bug 347050.

Reported using DrKonqi