[Pidgin] #2725: msimprpl sometimes crashes in buddy icon download, double free

Pidgin trac at pidgin.im
Thu Aug 23 01:43:57 EDT 2007 

#2725: msimprpl sometimes crashes in buddy icon download, double free
-----------------------+----------------------------------------------------
 Reporter:  jeff       |       Owner:  jeff 
     Type:  defect     |      Status:  new  
 Priority:  major      |   Milestone:       
Component:  libpurple  |     Version:  2.1.1
 Keywords:  msimprpl   |     Pending:  0    
-----------------------+----------------------------------------------------
 {{{
 (22:40:49) msim: msim_send_raw: writing
 <\persist\1\sesskey\146958523\cmd\1\dsn\4\uid\180301984\lid\3\rid\4\body\UserID=6221\final\>
 (22:40:49) msim: msim_msg_send()ing <MsimMessage:
 persist(integer): 1
 sesskey(integer): 146958523
 cmd(integer): 1
 dsn(integer): 4
 uid(integer): 180301984
 lid(integer): 3
 rid(integer): 4
 body(dict): <MsimMessage:
 UserID(string): 6221
 /MsimMessage>
 /MsimMessage>
 (22:40:49) msim: buffer at 0 (max 15360), reading up to 15360
 (22:40:49) msim: msim_input_cb: going to null terminate at n=302
 (22:40:49) msim: msim_input_cb: read=302
 (22:40:49) msim: msim_parse: got
 <\persistr\\cmd\257\dsn\4\uid\180301984\lid\3\rid\4\body\UserID=6221ImageURL=http:/1/1a503
 .ac-
 images.myspacecdn.com/100000/120/152/12502_m.jpgDisplayName=TomUserName=tomBandName=Kate
 VoegeleSongName=I Wont DisagreeAge=31Gender=MLocation=Santa Monica,
 CALIFORNIA, USTotalFriends=197301434>
 (22:40:49) msim: associating uid UserID with username tom
 (22:40:49) util: requested to fetch (http://a503.ac-
 images.myspacecdn.com/00000/20/52/2502_m.jpg), full=1,
 user_agent=((null)), http11=1
 (22:40:50) dns: DNS query for 'a503.ac-images.myspacecdn.com' queued
 (22:40:50) msim: msim_process_reply: calling callback now
 (22:40:50) msim: for msg=<MsimMessage:
 persistr(raw):
 cmd(raw): 257
 dsn(raw): 4
 uid(raw): 180301984
 lid(raw): 3
 rid(raw): 4
 body(raw): UserID=6221ImageURL=http:/1/1a503.ac-
 images.myspacecdn.com/100000/120/152/12502_m.jpgDisplayName=TomUserName=tomBandName=Kate
 VoegeleSongName=I Wont DisagreeAge=31Gender=MLocation=Santa Monica,
 CALIFORNIA, USTotalFriends=197301434
 /MsimMessage>
 (22:40:50) msim: msim_get_info_cb: got for user: tom
 (22:40:50) msim: associating uid UserID with username tom
 (22:40:50) util: requested to fetch (http://a503.ac-
 images.myspacecdn.com/00000/20/52/2502_m.jpg), full=1,
 user_agent=((null)), http11=1
 (22:40:50) dns: DNS query for 'a503.ac-images.myspacecdn.com' queued
 (22:40:50) msim: msim_get_info_cb: username=tom
 (22:40:50) dns: Created new DNS child 11064, there are now 1 children.
 (22:40:50) dns: Successfully sent DNS request to child 11064
 (22:40:50) dns: Created new DNS child 11065, there are now 2 children.
 (22:40:50) dns: Successfully sent DNS request to child 11065
 (22:40:50) dns: Got response for 'a503.ac-images.myspacecdn.com'
 (22:40:50) dnsquery: IP resolved for a503.ac-images.myspacecdn.com
 (22:40:50) proxy: Attempting connection to 204.2.160.48
 (22:40:50) proxy: Connecting to a503.ac-images.myspacecdn.com:80 with no
 proxy
 (22:40:50) proxy: Connection in progress
 (22:40:50) dns: Got response for 'a503.ac-images.myspacecdn.com'
 (22:40:50) dnsquery: IP resolved for a503.ac-images.myspacecdn.com
 (22:40:50) proxy: Attempting connection to 204.2.160.41
 (22:40:50) proxy: Connecting to a503.ac-images.myspacecdn.com:80 with no
 proxy
 (22:40:50) proxy: Connection in progress
 (22:40:50) proxy: Connected to a503.ac-images.myspacecdn.com:80.
 (22:40:50) util: Request: 'GET http://a503.ac-
 images.myspacecdn.com/00000/20/52/2502_m.jpg HTTP/1.1
 Connection: close
 Accept: */*
 Host: a503.ac-images.myspacecdn.com

 '
 (22:40:50) proxy: Connected to a503.ac-images.myspacecdn.com:80.
 (22:40:50) util: Request: 'GET http://a503.ac-
 images.myspacecdn.com/00000/20/52/2502_m.jpg HTTP/1.1
 Connection: close
 Accept: */*
 Host: a503.ac-images.myspacecdn.com

 '
 (22:40:50) util: Response headers: 'HTTP/1.1 200 OK
 Content-Type: image/jpeg
 ETag: "-4780966840295601033"
 Accept-Ranges: bytes
 Last-Modified: Sun, 08 Aug 2004 18:57:29 GMT
 Content-Length: 4085
 Server: lighttpd/1.4.11
 Cache-Control: max-age=18979420
 Expires: Sat, 29 Mar 2008 21:44:32 GMT
 Date: Thu, 23 Aug 2007 05:40:52 GMT
 Connection: close

 '
 (22:40:50) util: parsed 4085
 (22:40:50) msim_downloaded_buddy_icon: Downloaded 4085 bytes
 (22:40:50) buddyicon: Wrote cache file:
 /home/jeff/.purple/icons/787bbfe9b256ca88c6bada4da34c54eaf692ad71.jpg
 (22:40:50) util: Response headers: 'HTTP/1.1 200 OK
 Content-Type: image/jpeg
 ETag: "-4780966840295601033"
 Accept-Ranges: bytes
 Last-Modified: Sun, 08 Aug 2004 18:57:29 GMT
 Content-Length: 4085
 Server: lighttpd/1.4.11
 Cache-Control: max-age=18979467
 Expires: Sat, 29 Mar 2008 21:45:19 GMT
 Date: Thu, 23 Aug 2007 05:40:52 GMT
 Connection: close

 '
 (22:40:50) util: parsed 4085
 (22:40:50) msim_downloaded_buddy_icon: Downloaded 4085 bytes
 *** glibc detected *** /usr/local/bin/pidgin: double free or corruption
 (out): 0x00000000010aa410 ***
 ======= Backtrace: =========
 /lib/libc.so.6[0x2ae6afedbb23]
 /lib/libc.so.6(cfree+0x8c)[0x2ae6afedf26c]
 /usr/local/lib/libpurple.so.0(purple_util_fetch_url_cancel+0x70)[0x2ae6af5bd380]
 /usr/local/lib/libpurple.so.0[0x2ae6af5c1516]
 /usr/local/bin/pidgin[0x45c2ef]
 /usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x1b4)[0x2ae6af2d8a14]
 /usr/lib/libglib-2.0.so.0[0x2ae6af2db85d]
 /usr/lib/libglib-2.0.so.0(g_main_loop_run+0x1ca)[0x2ae6af2dbb6a]
 /usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xa3)[0x2ae6ac56c023]
 /usr/local/bin/pidgin(main+0x989)[0x4708e9]
 /lib/libc.so.6(__libc_start_main+0xf4)[0x2ae6afe898e4]
 /usr/local/bin/pidgin[0x42c659]
 ======= Memory map: ========
 00400000-004bb000 r-xp 00000000 03:01 6358546
 /usr/local/bin/pidgin
 006ba000-006c0000 rw-p 000ba000 03:01 6358546
 /usr/local/bin/pidgin
 006c0000-010ca000 rw-p 006c0000 00:00 0
 [heap]
 2ae6aa8a3000-2ae6aa8bf000 r-xp 00000000 03:01 2899987
 /lib/ld-2.5.so
 2ae6aa8bf000-2ae6aa8c2000 rw-p 2ae6aa8bf000 00:00 0
 2ae6aa8c2000-2ae6aa8c3000 r--p 00000000 03:01 6243414
 /usr/lib/locale/en_US.utf8/LC_IDENTIFICATION
 2ae6aa8c3000-2ae6aa8ca000 r--s 00000000 03:01 6389995
 /usr/lib/gconv/gconv-modules.cache
 2ae6aa8ca000-2ae6aa8cb000 r--p 00000000 03:01 6243415
 /usr/lib/locale/en_US.utf8/LC_MEASUREMENT
 2ae6aa8cb000-2ae6aa8cc000 r--p 00000000 03:01 6243420
 /usr/lib/locale/en_US.utf8/LC_TELEPHONE
 2ae6aa8cc000-2ae6aa8cd000 r--p 00000000 03:01 6243411
 /usr/lib/locale/en_US.utf8/LC_ADDRESS
 2ae6aa8cd000-2ae6aa8ce000 r--p 00000000 03:01 6243417
 /usr/lib/locale/en_US.utf8/LC_NAME
 2ae6aa8ce000-2ae6aa8cf000 r--p 00000000 03:01 6243419
 /usr/lib/locale/en_US.utf8/LC_PAPER
 2ae6aa8cf000-2ae6aa8d0000 r--p 00000000 03:01 6258709
 /usr/lib/locale/en_US.utf8/LC_MESSAGES/SYS_LC_MESSAGES
 2ae6aa8d0000-2ae6aa8d1000 r--p 00000000 03:01 6243416
 /usr/lib/locale/en_US.utf8/LC_MONETARY
 2ae6aa8d1000-2ae6aa9a8000 r--p 00000000 03:01 6243412
 /usr/lib/locale/en_US.utf8/LC_COLLATE
 2ae6aa9a8000-2ae6aa9a9000 r--p 00000000 03:01 6243421
 /usr/lib/locale/en_US.utf8/LC_TIME
 2ae6aa9a9000-2ae6aa9aa000 r--p 00000000 03:01 6243418
 /usr/lib/locale/en_US.utf8/LC_NUMERIC
 2ae6aa9aa000-2ae6aa9e5000 r--p 00000000 03:01 6243413
 /usr/lib/locale/en_US.utf8/LC_CTYPE
 2ae6aaabe000-2ae6aaac0000 rw-p 0001b000 03:01 2899987
 /lib/ld-2.5.so
 2ae6aaac0000-2ae6aaade000 r-xp 00000000 03:01 6178177
 /usr/lib/libdbus-glib-1.so.2.1.0
 2ae6aaade000-2ae6aacde000 ---p 0001e000 03:01 6178177
 /usr/lib/libdbus-glib-1.so.2.1.0
 2ae6aacde000-2ae6aace0000 rw-p 0001e000 03:01 6178177
 /usr/lib/libdbus-glib-1.so.2.1.0
 2ae6aace0000-2ae6aad17000 r-xp 00000000 03:01 6178175
 /usr/lib/libdbus-1.so.3.2.0
 2ae6aad17000-2ae6aaf16000 ---p 00037000 03:01 6178175
 /usr/lib/libdbus-1.so.3.2.0
 2ae6aaf16000-2ae6aaf18000 rw-p 00036000 03:01 6178175
 /usr/lib/libdbus-1.so.3.2.0
 2ae6aaf18000-2ae6aafc2000 r-xp 00000000 03:01 6178432
 /usr/lib/libgstreamer-0.10.so.0.11.0
 2ae6aafc2000-2ae6ab1c2000 ---p 000aa000 03:01 6178432
 /usr/lib/libgstreamer-0.10.so.0.11.0
 2ae6ab1c2000-2ae6ab1c9000 rw-p 000aa000 03:01 6178432
 /usr/lib/libgstreamer-0.10.so.0.11.0
 2ae6ab1c9000-2ae6ab1ca000 rw-p 2ae6ab1c9000 00:00 0
 2ae6ab1ca000-2ae6ab1ce000 r-xp 00000000 03:01 6178442
 /usr/lib/libgthread-2.0.so.0.1200.11
 2ae6ab1ce000-2ae6ab3cd000 ---p 00004000 03:01 6178442
 /usr/lib/libgthread-2.0.so.0.1200.11
 2ae6ab3cd000-2ae6ab3ce000 rw-p 00003000 03:01 6178442
 /usr/lib/libgthread-2.0.so.0.1200.11
 2ae6ab3ce000-2ae6ab3cf000 rw-p 2ae6ab3ce000 00:00 0
 2ae6ab3cf000-2ae6ab3d7000 r-xp 00000000 03:01 2900081
 /lib/librt-2.5.so
 2ae6ab3d7000-2ae6ab5d6000 ---p 00008000 03:01 2900081
 /lib/librt-2.5.so
 2ae6ab5d6000-2ae6ab5d8000 rw-p 00007000 03:01 2900081
 /lib/librt-2.5.so
 2ae6ab5d8000-2ae6ab5da000 r-xp 00000000 03:01 6178076
 /usr/lib/libXss.so.1.0.0
 2ae6ab5da000-2ae6ab7da000 ---p 00002000 03:01 6178076
 /usr/lib/libXss.so.1.0.0
 2ae6ab7da000-2ae6ab7db000 rw-p 00002000 03:01 6178076
 /usr/lib/libXss.so.1.0.0
 2ae6ab7db000-2ae6ab7e4000 r-xp 00000000 03:01 6178027
 /usr/lib/libSM.so.6.0.0
 2ae6ab7e4000-2ae6ab9e4000 ---p 00009000 03:01 6178027
 /usr/lib/libSM.so.6.0.0
 2ae6ab9e4000-2ae6ab9e5000 rw-p 00009000 03:01 6178027
 /usr/lib/libSM.so.6.0.0
 2ae6ab9e5000-2ae6ab9e6000 rw-p 2ae6ab9e5000 00:00 0
 2ae6ab9e6000-2ae6ab9fd000 r-xp 00000000 03:01 6178009
 /usr/lib/libICE.so.6.3.0
 2ae6ab9fd000-2ae6abbfc000 ---p 00017000 03:01 6178009
 /usr/lib/libICE.so.6.3.0
 2ae6abbfc000-2ae6abbfe000 rw-p 00016000 03:01 6178009
 /usr/lib/libICE.so.6.3.0
 2ae6abbfe000-2ae6abc01000 rw-p 2ae6abbfe000 00:00 0
 2ae6abc01000-2ae6abc06000 r-xp 00000000 03:01 6178455
 /usr/lib/libgtkspell.so.0.0.0
 2ae6abc06000-2ae6abd06000 ---p 00005000 03:01 6178455
 /usr/lib/libgtkspell.so.0.0.0
 2ae6abd06000-2ae6abd07000 rw-p 00005000 03:01 6178455
 /usr/lib/libgtkspell.so.0.0.0
 2ae6abd07000-2ae6abdd0000 r-xp 00000000 03:01 6178104
 /usr/lib/libaspell.so.15.1.4
 2ae6abdd0000-2ae6abed0000 ---p 000c9000 03:01 6178104
 /usr/lib/libaspell.so.15.1.4
 2ae6abed0000-2ae6abed7000 rw-p 000c9000 03:01 6178104
 /usr/lib/libaspell.so.15.1.4
 2ae6abed7000-2ae6abee0000 rw-p 2ae6abed7000 00:00 0
 2ae6abee0000-2ae6abee9000 r-xp 00000000 03:01 6178722
 /usr/lib/libstartup-notification-1.so.0.0.0
 2ae6abee9000-2ae6ac0e8000 ---p 00009000 03:01 6178722
 /usr/lib/libstartup-notification-1.so.0.0.0
 2ae6ac0e8000-2ae6ac0e9000 rw-p 00008000 03:01 6178722
 /usr/lib/libstartup-notification-1.so.0.0.0
 2ae6ac0e9000-2ae6ac220000 r-xp 00000000 03:01 6178782
 /usr/lib/libxml2.so.2.6.27
 2ae6ac220000-2ae6ac420000 ---p 00137000 03:01 6178782
 /usr/lib/libxml2.so.2.6.27
 2ae6ac420000-2ae6ac429000 rw-p 00137000 03:01 6178782
 /usr/lib/libxml2.so.2.6.27
 2ae6ac429000-2ae6ac42a000 rw-p 2ae6ac429000 00:00 0
 2ae6ac42a000-2ae6ac7b9000 r-xp 00000000 03:01 6178445
 /usr/lib/libgtk-x11-2.0.so.0.1000.11
 2ae6ac7b9000-2ae6ac9b8000 ---p 0038f000 03:01 6178445
 /usr/lib/libgtk-x11-2.0.so.0.1000.11
 2ae6ac9b8000-2ae6ac9c3000 rw-p 0038e000 03:01 6178445
 /usr/lib/libgtk-x11-2.0.so.0.1000.11
 2ae6ac9c3000-2ae6ac9c6000 rw-p 2ae6ac9c3000 00:00 0
 2ae6ac9c6000-2ae6aca5b000 r-xp 00000000 03:01 6178296
 /usr/lib/libgdk-x11-2.0.so.0.1000.11
 2ae6aca5b000-2ae6acc5a000 ---p 00095000 03:01 6178296
 /usr/lib/libgdk-x11-2.0.so.0.1000.11
 2ae6acc5a000-2ae6acc5f000 rw-p 00094000 03:01 6178296
 /usr/lib/libgdk-x11-2.0.so.0.1000.11
 2ae6acc5f000-2ae6acc7d000 r-xp 00000000 03:01 6178108
 /usr/lib/libatk-1.0.so.0.1809.1
 2ae6acc7d000-2ae6ace7d000 ---p 0001e000 03:01 6178108
 /usr/lib/libatk-1.0.so.0.1809.1
 2ae6ace7d000-2ae6ace80000 rw-p 0001e000 03:01 6178108
 /usr/lib/libatk-1.0.so.0.1809.1
 2ae6ace80000-2ae6ace97000 r-xp 00000000 03:01 6178298
 /usr/lib/libgdk_pixbuf-2.0.so.0.1000.11
 2ae6ace97000-2ae6ad097000 ---p 00017000 03:01 6178298
 /usr/lib/libgdk_pixbuf-2.0.so.0.1000.11
 2ae6ad097000-2ae6ad098000 rw-p 00017000 03:01 6178298
 /usr/lib/libgdk_pixbuf-2.0.so.0.1000.11
 2ae6ad098000-2ae6ad099000 rw-p 2ae6ad098000 00:00 0
 2ae6ad099000-2ae6ad11a000 r-xp 00000000 03:01 2900036
 /lib/libm-2.5.so
 2ae6ad11a000-2ae6ad319000 ---p 00081000 03:01 2900036
 /lib/libm-2.5.so
 2ae6ad319000-2ae6ad31b000 rw-p 00080000 03:01 2900036
 /lib/libm-2.5.so
 2ae6ad31b000-2ae6ad324000 r-xp 00000000 03:01 6178623
 /usr/lib/libpangocairo-1.0.so.0.1600.2
 2ae6ad324000-2ae6ad523000 ---p 00009000 03:01 6178623
 /usr/lib/libpangocairo-1.0.so.0.1600.2
 2ae6ad523000-2ae6ad524000 rw-p 00008000 03:01 6178623
 /usr/lib/libpangocairo-1.0.so.0.1600.2
 2ae6ad524000-2ae6ad54e000 r-xp 00000000 03:01 6178239
 /usr/lib/libfontconfig.so.1.2.0
 2ae6ad54e000-2ae6ad74d000 ---p 0002a000 03:01 6178239
 /usr/lib/libfontconfig.so.1.2.0
 2ae6ad74d000-2ae6ad758000 rw-p 00029000 03:01 6178239
 /usr/lib/libfontconfig.so.1.2.0
 2ae6ad758000-2ae6ad759000 rw-p 2ae6ad758000 00:00 0
 2ae6ad759000-2ae6ad769000 r-xp 00000000 03:01 6178052
 /usr/lib/libXext.so.6.4.0
 2ae6ad769000-2ae6ad969000 ---p 00010000 03:01 6178052
 /usr/lib/libXext.so.6.4.0
 2ae6ad969000-2ae6ad96a000 rw-p 00010000 03:01 6178052
 /usr/lib/libXext.so.6.4.0
 2ae6ad96a000-2ae6ad973000 r-xp 00000000 03:01 6178074
 /usr/lib/libXrender.so.1.3.0
 2ae6ad973000-2ae6adb72000 ---p 00009000 03:01 6178074
 /usr/lib/libXrender.so.1.3.0
 2ae6adb72000-2ae6adb73000 rw-p 00008000 03:01 6178074
 /usr/lib/libXrender.so.1.3.0
 2ae6adb73000-2ae6adb75000 r-xp 00000000 03:01 6178062
 /usr/lib/libXinerama.so.1.0.0
 2ae6adb75000-2ae6adc74000 ---p 00002000 03:01 6178062
 /usr/lib/libXinerama.so.1.0.0
 2ae6adc74000-2ae6adc75000 rw-p 00001000 03:01 6178062
 /usr/lib/libXinerama.so.1.0.0
 2ae6adc75000-2ae6adc76000 rw-p 2ae6adc75000 00:00 0
 2ae6adc76000-2ae6adc7e000 r-xp 00000000 03:01 6178060
 /usr/lib/libXi.so.6.0.0
 2ae6adc7e000-2ae6ade7e000 ---p 00008000 03:01 6178060
 /usr/lib/libXi.so.6.0.0
 2ae6ade7e000-2ae6ade7f000 rw-p 00008000 03:01 6178060
 /usr/lib/libXi.so.6.0.0
 2ae6ade7f000-2ae6ade85000 r-xp 00000000 03:01 6178072
 /usr/lib/libXrandr.so.2.1.0
 2ae6ade85000-2ae6ae085000 ---p 00006000 03:01 6178072
 /usr/lib/libXrandr.so.2.1.0
 2ae6ae085000-2ae6ae086000 rw-p 00006000 03:01 6178072
 /usr/lib/libXrandr.so.2.1.0
 2ae6ae086000-2ae6ae090000 r-xp 00000000 03:01 6178044
 /usr/lib/libXcursor.so.1.0.2
 2ae6ae090000-2ae6ae28f000 ---p 0000a000 03:01 6178044
 /usr/lib/libXcursor.so.1.0.2
 2ae6ae28f000-2ae6ae290000 rw-p 00009000 03:01 6178044
 Program received signal SIGABRT, Aborted.
 [Switching to Thread 47170306573280 (LWP 11052)]
 0x00002ae6afe9ccab in raise () from /lib/libc.so.6
 }}}

-- 
Ticket URL: <http://developer.pidgin.im/ticket/2725>
Pidgin <http://pidgin.im>
Pidgin

More information about the Tracker mailing list