[Pidgin] #1652: bonjour protocol crashes sometimes

[Pidgin]

#1652: bonjour protocol crashes sometimes
------------------------+---------------------------------------------------
  Reporter:  ywwg       |       Owner:       
      Type:  defect     |      Status:  new  
  Priority:  minor      |   Milestone:       
 Component:  libpurple  |     Version:  2.0.1
Resolution:             |    Keywords:       
   Pending:  0          |  
------------------------+---------------------------------------------------
Comment (by jgxenite):

 I've just had a similar problem with the Bonjour plugin in Pidgin:

 (00:07:25) bonjour: Receive: -
 - 2 bytes
 *** glibc detected *** pidgin: free(): invalid pointer: 0x097d2e78 ***
 ======= Backtrace: =========
 /lib/libc.so.6[0x8cdf41]
 /lib/libc.so.6(cfree+0x90)[0x8d1580]
 /lib/libglib-2.0.so.0(g_free+0x31)[0xa358c1]
 /usr/lib/purple-2/libbonjour.so[0x484a5ec]
 pidgin[0x80a045e]
 /lib/libglib-2.0.so.0[0xa57d8d]
 /lib/libglib-2.0.so.0(g_main_context_dispatch+0x182)[0xa2e622]
 /lib/libglib-2.0.so.0[0xa315ff]
 /lib/libglib-2.0.so.0(g_main_loop_run+0x1a9)[0xa319a9]
 /usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xb4)[0x3400e4]
 pidgin(main+0x64b)[0x80b807b]
 /lib/libc.so.6(__libc_start_main+0xe0)[0x87bf70]
 pidgin[0x8066721]
 ======= Memory map: ========
 00110000-0020e000 r-xp 00000000 08:05 2018515    /usr/lib/libX11.so.6.2.0
 0020e000-00212000 rwxp 000fe000 08:05 2018515    /usr/lib/libX11.so.6.2.0
 00212000-005a9000 r-xp 00000000 08:05 2015805
 /usr/lib/libgtk-x11-2.0.so.0.1000.13
 005a9000-005af000 rwxp 00397000 08:05 2015805
 /usr/lib/libgtk-x11-2.0.so.0.1000.13
 005af000-005b0000 rwxp 005af000 00:00 0
 005b0000-0062d000 r-xp 00000000 08:05 2015377
 /usr/lib/libcairo.so.2.11.2
 0062d000-0062f000 rwxp 0007c000 08:05 2015377
 /usr/lib/libcairo.so.2.11.2
 0062f000-00633000 r-xp 00000000 08:05 2011706
 /usr/lib/libnm_glib.so.0.0.0
 00633000-00634000 rwxp 00004000 08:05 2011706
 /usr/lib/libnm_glib.so.0.0.0
 00634000-00635000 r-xp 00000000 08:05 2434454
 /usr/lib/pidgin/gtkbuddynote.so
 00635000-00636000 rwxp 00000000 08:05 2434454
 /usr/lib/pidgin/gtkbuddynote.so
 00636000-0063d000 r-xp 00000000 08:05 2067803    /lib/librt-2.6.so
 0063d000-0063e000 r-xp 00006000 08:05 2067803    /lib/librt-2.6.so
 0063e000-0063f000 rwxp 00007000 08:05 2067803    /lib/librt-2.6.so
 0063f000-00646000 r-xp 00000000 08:05 2018522    /usr/lib/libXi.so.6.0.0
 00646000-00647000 rwxp 00006000 08:05 2018522    /usr/lib/libXi.so.6.0.0
 00647000-00649000 r-xp 00000000 08:05 2067805    /lib/libcap.so.1.10
 00649000-0064a000 rwxp 00002000 08:05 2067805    /lib/libcap.so.1.10
 0064a000-00654000 r-xp 00000000 08:05 2064425    /lib/libnss_files-2.6.so
 00654000-00655000 r-xp 00009000 08:05 2064425    /lib/libnss_files-2.6.so
 00655000-00656000 rwxp 0000a000 08:05 2064425    /lib/libnss_files-2.6.so
 00656000-00657000 r-xp 00000000 08:05 2064633
 /usr/lib/gconv/ISO8859-1.so
 00657000-00659000 rwxp 00000000 08:05 2064633
 /usr/lib/gconv/ISO8859-1.so
 00659000-0065d000 r-xp 00000000 08:05 2434452
 /usr/lib/pidgin/gestures.so
 0065d000-0065e000 rwxp 00004000 08:05 2434452
 /usr/lib/pidgin/gestures.so
 0065e000-00663000 r-xp 00000000 08:05 2434459    /usr/lib/pidgin/notify.so
 00663000-00664000 rwxp 00004000 08:05 2434459    /usr/lib/pidgin/notify.so
 00664000-00666000 r-xp 00000000 08:05 2434464
 /usr/lib/pidgin/timestamp_format.so
 00666000-00667000 rwxp 00001000 08:05 2434464
 /usr/lib/pidgin/timestamp_format.so
 00667000-00669000 r-xp 00000000 08:05 2434457
 /usr/lib/pidgin/markerline.so
 00669000-0066a000 rwxp 00002000 08:05 2434457
 /usr/lib/pidgin/markerline.so
 0066a000-0066e000 r-xp 00000000 08:05 2434460
 /usr/lib/pidgin/pidginrc.so
 0066e000-0066f000 rwxp 00004000 08:05 2434460
 /usr/lib/pidgin/pidginrc.so
 0066f000-00676000 r-xp 00000000 08:05 2434465
 /usr/lib/pidgin/xmppconsole.so
 00676000-00677000 rwxp 00006000 08:05 2434465
 /usr/lib/pidgin/xmppconsole.so
 00677000-00679000 r-xp 00000000 08:05 2434463
 /usr/lib/pidgin/timestamp.so
 00679000-0067a000 rwxp 00001000 08:05 2434463
 /usr/lib/pidgin/timestamp.so
 0067a000-0067c000 r-xp 00000000 08:05 2434455
 /usr/lib/pidgin/history.so
 0067c000-0067d000 rwxp 00001000 08:05 2434455
 /usr/lib/pidgin/history.so
 0067e000-00693000 r-xp 00000000 08:05 2067807    /lib/libnsl-2.6.so
 00693000-00694000 r-xp 00014000 08:05 2067807    /lib/libnsl-2.6.so
 00694000-00695000 rwxp 00015000 08:05 2067807    /lib/libnsl-2.6.so
 00695000-00697000 rwxp 00695000 00:00 0
 00697000-006a6000 r-xp 00000000 08:05 2434461
 /usr/lib/pidgin/spellchk.so
 006a6000-006a7000 rwxp 0000e000 08:05 2434461
 /usr/lib/pidgin/spellchk.so
 006a7000-006dAborted

 It seems that upon receiving these 2 byte messages, Pidgin just dies (with
 the above printed to the console in debug mode). I am using Pidgin
 2.0.2-3.fc7.

-- 
Ticket URL: <http://developer.pidgin.im/ticket/1652#comment:3>
Pidgin <http://pidgin.im>
Pidgin