Bug 315334 - double free or corruption (fasttop)
Summary: double free or corruption (fasttop)
Status: RESOLVED DUPLICATE of bug 313509
Alias: None
Product: kmail2
Classification: Applications
Component: general (show other bugs)
Version: 4.9.5
Platform: Fedora RPMs Linux
: NOR crash
Target Milestone: ---
Assignee: kdepim bugs
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-02-17 17:37 UTC by pcfe
Modified: 2013-02-18 01:57 UTC (History)
0 users

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description pcfe 2013-02-17 17:37:26 UTC
Application: kmail (4.9.5)
KDE Platform Version: 4.9.5
Qt Version: 4.8.4
Operating System: Linux 3.7.6-201.fc18.x86_64 x86_64
Distribution (Platform): Fedora RPMs

-- Information about the crash:
- What I was doing when the application crashed:

been using kmail happily for a few weeks but recently it will crash every time shortly after launch. Rendering it unuseable.

I've tried all of
aconadictl fsck
aconadictl vacuum
aconadictl restart
rm -rf ~/.kde/share/apps/kmail2

I'm at a loss as to how to get kmail to function again.

there are 2 IMAP servers used, one with only a few hundred messages and about a dozen nested folders and my main mail server, several hundred folders and a couple ten thousand messages.

The crash can be reproduced every time.

-- Backtrace:
Application: KMail (kmail), signal: Aborted
Using host libthread_db library "/lib64/libthread_db.so.1".
81	T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS)
[Current thread is 1 (Thread 0x7fab293c0880 (LWP 4770))]

Thread 3 (Thread 0x7fab1ea65700 (LWP 4774)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:165
#1  0x00000035e18169bd in WTF::TCMalloc_PageHeap::scavengerThread (this=0x35e2201d00 <WTF::pageheap_memory>) at wtf/FastMalloc.cpp:2495
#2  0x00000035e1816ac9 in WTF::TCMalloc_PageHeap::runScavengerThread (context=<optimized out>) at wtf/FastMalloc.cpp:1618
#3  0x0000003b20e07d15 in start_thread (arg=0x7fab1ea65700) at pthread_create.c:308
#4  0x0000003b206f246d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:114

Thread 2 (Thread 0x7fab1e164700 (LWP 4775)):
#0  0x0000003b206e998d in poll () at ../sysdeps/unix/syscall-template.S:81
#1  0x0000003498447d24 in g_main_context_poll (priority=2147483647, n_fds=1, fds=0x7fab180029c0, timeout=7708, context=0x7fab180009a0) at gmain.c:3584
#2  g_main_context_iterate (context=context@entry=0x7fab180009a0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3285
#3  0x0000003498447e44 in g_main_context_iteration (context=0x7fab180009a0, may_block=1) at gmain.c:3351
#4  0x00000035d05a60f6 in QEventDispatcherGlib::processEvents (this=0x7fab180008c0, flags=...) at kernel/qeventdispatcher_glib.cpp:426
#5  0x00000035d05767df in QEventLoop::processEvents (this=this@entry=0x7fab1e163d00, flags=...) at kernel/qeventloop.cpp:149
#6  0x00000035d0576a68 in QEventLoop::exec (this=0x7fab1e163d00, flags=...) at kernel/qeventloop.cpp:204
#7  0x00000035d0478950 in QThread::exec (this=<optimized out>) at thread/qthread.cpp:542
#8  0x00000035d047b92c in QThreadPrivate::start (arg=0x13b5bf0) at thread/qthread_unix.cpp:338
#9  0x0000003b20e07d15 in start_thread (arg=0x7fab1e164700) at pthread_create.c:308
#10 0x0000003b206f246d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:114

Thread 1 (Thread 0x7fab293c0880 (LWP 4770)):
[KCrash Handler]
#6  0x0000003b20635ba5 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:63
#7  0x0000003b20637358 in __GI_abort () at abort.c:90
#8  0x0000003b2067559b in __libc_message (do_abort=do_abort@entry=2, fmt=fmt@entry=0x3b20779b88 "*** glibc detected *** %s: %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:197
#9  0x0000003b2067ca8e in malloc_printerr (ptr=0x1c00130, str=0x3b20779be0 "double free or corruption (fasttop)", action=3) at malloc.c:4969
#10 _int_free (av=0x3b209b1740 <main_arena>, p=0x1c00120, have_lock=0) at malloc.c:3826
#11 0x00000035dacfebb8 in Akonadi::EntityTreeModelPrivate::removeItems (this=this@entry=0x1030f30, it=..., end=..., pos=pos@entry=0x7fffb6c6610c, collection=...) at /usr/src/debug/kdepimlibs-4.9.5/akonadi/entitytreemodel_p.cpp:1537
#12 0x00000035dacfedb5 in Akonadi::EntityTreeModelPrivate::purgeItems (this=0x1030f30, id=81) at /usr/src/debug/kdepimlibs-4.9.5/akonadi/entitytreemodel_p.cpp:1557
#13 0x00000035dacf7800 in Akonadi::EntityTreeModel::setData (this=0x1057790, index=..., value=..., role=53) at /usr/src/debug/kdepimlibs-4.9.5/akonadi/entitytreemodel.cpp:735
#14 0x00000035d23501ce in QSortFilterProxyModel::setData (this=<optimized out>, index=..., value=..., role=role@entry=53) at itemviews/qsortfilterproxymodel.cpp:1747
#15 0x00000035d234eeb8 in QAbstractProxyModel::setData (this=<optimized out>, index=..., value=..., role=role@entry=53) at itemviews/qabstractproxymodel.cpp:270
#16 0x00000035d234eeb8 in QAbstractProxyModel::setData (this=<optimized out>, index=..., value=..., role=53) at itemviews/qabstractproxymodel.cpp:270
#17 0x00000035d23501ce in QSortFilterProxyModel::setData (this=<optimized out>, index=..., value=..., role=53) at itemviews/qsortfilterproxymodel.cpp:1747
#18 0x00000035d23501ce in QSortFilterProxyModel::setData (this=<optimized out>, index=..., value=..., role=53) at itemviews/qsortfilterproxymodel.cpp:1747
#19 0x00000035dad6533e in rootIndexAboutToBeRemoved (removedRootIndex=..., this=<optimized out>) at /usr/src/debug/kdepimlibs-4.9.5/akonadi/selectionproxymodel.cpp:59
#20 Akonadi::SelectionProxyModel::qt_static_metacall (_o=<optimized out>, _c=<optimized out>, _id=<optimized out>, _a=<optimized out>) at /usr/src/debug/kdepimlibs-4.9.5/x86_64-redhat-linux-gnu/akonadi/selectionproxymodel.moc:52
#21 0x00000035d058cebf in QMetaObject::activate (sender=0x1481800, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fffb6c66650) at kernel/qobject.cpp:3539
#22 0x00000035d382cbc2 in KSelectionProxyModel::rootIndexAboutToBeRemoved (this=this@entry=0x1481800, _t1=...) at /usr/src/debug/kdelibs-4.9.5/x86_64-redhat-linux-gnu/kdeui/moc_kselectionproxymodel.cpp:160
#23 0x00000035d382fb8d in KSelectionProxyModelPrivate::sourceLayoutAboutToBeChanged (this=0x1486790) at /usr/src/debug/kdelibs-4.9.5/kdeui/itemviews/kselectionproxymodel.cpp:752
#24 0x00000035d058cebf in QMetaObject::activate (sender=0x12fea60, m=<optimized out>, local_signal_index=<optimized out>, argv=0x0) at kernel/qobject.cpp:3539
#25 0x00000035d2356951 in QSortFilterProxyModelPrivate::_q_sourceDataChanged (this=0x1300560, source_top_left=..., source_bottom_right=...) at itemviews/qsortfilterproxymodel.cpp:1176
#26 0x00000035d058cebf in QMetaObject::activate (sender=0x1331ad0, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fffb6c66b20) at kernel/qobject.cpp:3539
#27 0x00000035d05d6f67 in QAbstractItemModel::dataChanged (this=<optimized out>, _t1=..., _t2=...) at .moc/release-shared/moc_qabstractitemmodel.cpp:163
#28 0x00000035d235665a in QSortFilterProxyModelPrivate::_q_sourceDataChanged (this=0x1332310, source_top_left=..., source_bottom_right=...) at itemviews/qsortfilterproxymodel.cpp:1210
#29 0x00000035d057f8d7 in QMetaMethod::invoke (this=this@entry=0x7fffb6c66f00, object=object@entry=0x1331ad0, connectionType=connectionType@entry=Qt::DirectConnection, returnValue=..., val0=..., val1=..., val2=..., val3=..., val4=..., val5=..., val6=..., val7=..., val8=..., val9=...) at kernel/qmetaobject.cpp:1664
#30 0x00000035d0581cac in QMetaObject::invokeMethod (obj=0x1331ad0, member=<optimized out>, type=Qt::DirectConnection, ret=..., val0=..., val1=..., val2=..., val3=..., val4=..., val5=..., val6=..., val7=..., val8=..., val9=...) at kernel/qmetaobject.cpp:1179
#31 0x00000035d380b153 in invokeMethod (val9=..., val8=..., val7=..., val6=..., val5=..., val4=..., val3=..., val2=..., val1=..., val0=..., type=Qt::DirectConnection, member=0x35d39a2ccb "_q_sourceDataChanged", obj=0x1331ad0) at /usr/include/QtCore/qobjectdefs.h:418
#32 invokeDataChanged (bottomRight=..., topLeft=..., this=0x1055610) at /usr/src/debug/kdelibs-4.9.5/kdeui/itemviews/krecursivefilterproxymodel.cpp:55
#33 KRecursiveFilterProxyModelPrivate::sourceDataChanged (this=0x1055610, source_top_left=..., source_bottom_right=...) at /usr/src/debug/kdelibs-4.9.5/kdeui/itemviews/krecursivefilterproxymodel.cpp:131
#34 0x00000035d058cebf in QMetaObject::activate (sender=0x11a1f10, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fffb6c674a0) at kernel/qobject.cpp:3539
#35 0x00000035d05d6f67 in QAbstractItemModel::dataChanged (this=<optimized out>, _t1=..., _t2=...) at .moc/release-shared/moc_qabstractitemmodel.cpp:163
#36 0x00000035d38093f7 in KIdentityProxyModelPrivate::_k_sourceDataChanged (this=<optimized out>, topLeft=..., bottomRight=...) at /usr/src/debug/kdelibs-4.9.5/kdeui/itemviews/kidentityproxymodel.cpp:573
#37 0x00000035d058cebf in QMetaObject::activate (sender=0x132ae10, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fffb6c67650) at kernel/qobject.cpp:3539
#38 0x00000035d05d6f67 in QAbstractItemModel::dataChanged (this=<optimized out>, _t1=..., _t2=...) at .moc/release-shared/moc_qabstractitemmodel.cpp:163
#39 0x00000035d38093f7 in KIdentityProxyModelPrivate::_k_sourceDataChanged (this=<optimized out>, topLeft=..., bottomRight=...) at /usr/src/debug/kdelibs-4.9.5/kdeui/itemviews/kidentityproxymodel.cpp:573
#40 0x00000035d058cebf in QMetaObject::activate (sender=0x1032020, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fffb6c67800) at kernel/qobject.cpp:3539
#41 0x00000035d05d6f67 in QAbstractItemModel::dataChanged (this=<optimized out>, _t1=..., _t2=...) at .moc/release-shared/moc_qabstractitemmodel.cpp:163
#42 0x00000035d235665a in QSortFilterProxyModelPrivate::_q_sourceDataChanged (this=0x11a0fa0, source_top_left=..., source_bottom_right=...) at itemviews/qsortfilterproxymodel.cpp:1210
#43 0x00000035d058cebf in QMetaObject::activate (sender=0x1057790, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fffb6c67aa0) at kernel/qobject.cpp:3539
#44 0x00000035d05d6f67 in QAbstractItemModel::dataChanged (this=<optimized out>, _t1=..., _t2=...) at .moc/release-shared/moc_qabstractitemmodel.cpp:163
#45 0x00000035dacfcb65 in Akonadi::EntityTreeModelPrivate::dataChanged (this=this@entry=0x1030f30, top=..., bottom=...) at /usr/src/debug/kdepimlibs-4.9.5/akonadi/entitytreemodel_p.cpp:1576
#46 0x00000035dad06919 in Akonadi::EntityTreeModelPrivate::fetchJobDone (this=0x1030f30, job=<optimized out>) at /usr/src/debug/kdepimlibs-4.9.5/akonadi/entitytreemodel_p.cpp:1248
#47 0x00000035d058cebf in QMetaObject::activate (sender=0x1a031e0, m=<optimized out>, local_signal_index=<optimized out>, argv=0x7fffb6c67d50) at kernel/qobject.cpp:3539
#48 0x00000035d1733ee2 in KJob::result (this=this@entry=0x1a031e0, _t1=_t1@entry=0x1a031e0) at /usr/src/debug/kdelibs-4.9.5/x86_64-redhat-linux-gnu/kdecore/kjob.moc:207
#49 0x00000035d1733f20 in KJob::emitResult (this=0x1a031e0) at /usr/src/debug/kdelibs-4.9.5/kdecore/jobs/kjob.cpp:318
#50 0x00000035d058c39e in QObject::event (this=0x1a031e0, e=<optimized out>) at kernel/qobject.cpp:1194
#51 0x00000035d1dca5cc in QApplicationPrivate::notify_helper (this=0xeed120, receiver=0x1a031e0, e=0x505a470) at kernel/qapplication.cpp:4562
#52 0x00000035d1dcea4a in QApplication::notify (this=0x7fffb6c689e0, receiver=0x1a031e0, e=0x505a470) at kernel/qapplication.cpp:4423
#53 0x00000035d3846916 in KApplication::notify (this=0x7fffb6c689e0, receiver=0x1a031e0, event=0x505a470) at /usr/src/debug/kdelibs-4.9.5/kdeui/kernel/kapplication.cpp:311
#54 0x00000035d0577a8e in QCoreApplication::notifyInternal (this=0x7fffb6c689e0, receiver=receiver@entry=0x1a031e0, event=event@entry=0x505a470) at kernel/qcoreapplication.cpp:946
#55 0x00000035d057b541 in sendEvent (event=0x505a470, receiver=0x1a031e0) at kernel/qcoreapplication.h:231
#56 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0xdc7210) at kernel/qcoreapplication.cpp:1570
#57 0x00000035d05a5f43 in sendPostedEvents () at kernel/qcoreapplication.h:236
#58 postEventSourceDispatch (s=s@entry=0xe726f0) at kernel/qeventdispatcher_glib.cpp:279
#59 0x0000003498447a55 in g_main_dispatch (context=0xef3220) at gmain.c:2715
#60 g_main_context_dispatch (context=context@entry=0xef3220) at gmain.c:3219
#61 0x0000003498447d88 in g_main_context_iterate (context=context@entry=0xef3220, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3290
#62 0x0000003498447e44 in g_main_context_iteration (context=0xef3220, may_block=1) at gmain.c:3351
#63 0x00000035d05a60d6 in QEventDispatcherGlib::processEvents (this=0xe585d0, flags=...) at kernel/qeventdispatcher_glib.cpp:424
#64 0x00000035d1e6a73e in QGuiEventDispatcherGlib::processEvents (this=<optimized out>, flags=...) at kernel/qguieventdispatcher_glib.cpp:207
#65 0x00000035d05767df in QEventLoop::processEvents (this=this@entry=0x7fffb6c68660, flags=...) at kernel/qeventloop.cpp:149
#66 0x00000035d0576a68 in QEventLoop::exec (this=0x7fffb6c68660, flags=...) at kernel/qeventloop.cpp:204
#67 0x00000035d057b858 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1218
#68 0x0000000000402e92 in main ()

Possible duplicates by query: bug 314123, bug 314055, bug 313684, bug 311589, bug 309216.

Reported using DrKonqi
Comment 1 Jekyll Wu 2013-02-18 01:57:36 UTC
Try https://bugs.kde.org/show_bug.cgi?id=313509#c1 as workaround.

*** This bug has been marked as a duplicate of bug 313509 ***