[Pidgin] #3470: crash with pidgin 2.5.1 using msn (was: crash with pidgin 2.2.1 using msn)

[Pidgin]

#3470: crash with pidgin 2.5.1 using msn
--------------------------------+-------------------------------------------
 Reporter:  JosephHeenan        |        Owner:  khc
     Type:  defect              |       Status:  new
Milestone:                      |    Component:  MSN
  Version:  2.5.1               |   Resolution:     
 Keywords:  msn crash valgrind  |  
--------------------------------+-------------------------------------------
Changes (by JosephHeenan):

  * version:  2.2.1 => 2.5.1


Comment:

 Still happens with 2.5.1 :(

 $ pidgin
 *** glibc detected *** corrupted double-linked list: 0x085462f8 ***
 Aborted

 Or in gdb:

 (gdb) run
 Starting program: /usr/local/bin/pidgin
 [Thread debugging using libthread_db enabled]
 [New Thread -1222957376 (LWP 7428)]
 *** glibc detected *** corrupted double-linked list: 0x08547200 ***

 Program received signal SIGABRT, Aborted.
 [Switching to Thread -1222957376 (LWP 7428)]
 0xb72f6947 in raise () from /lib/tls/libc.so.6
 (gdb) bt
 #0  0xb72f6947 in raise () from /lib/tls/libc.so.6
 #1  0xb72f80c9 in abort () from /lib/tls/libc.so.6
 #2  0xb732c6ba in __fsetlocking () from /lib/tls/libc.so.6
 #3  0xb733273c in malloc_usable_size () from /lib/tls/libc.so.6
 #4  0xb7334638 in free () from /lib/tls/libc.so.6
 #5  0xb733632f in malloc () from /lib/tls/libc.so.6
 #6  0xb75a3cc6 in g_malloc () from /usr/lib/libglib-2.0.so.0
 #7  0xb75b3720 in g_slice_alloc () from /usr/lib/libglib-2.0.so.0
 #8  0xb79c1e29 in pango_script_iter_new () from /usr/lib/libpango-1.0.so.0
 #9  0xb79b2953 in pango_context_get_font_description ()
    from /usr/lib/libpango-1.0.so.0
 #10 0xb79b3639 in pango_itemize_with_base_dir ()
    from /usr/lib/libpango-1.0.so.0
 #11 0xb79bb6d0 in pango_layout_iter_get_char_extents ()
    from /usr/lib/libpango-1.0.so.0
 #12 0xb79bc26b in pango_layout_iter_get_char_extents ()
    from /usr/lib/libpango-1.0.so.0
 #13 0xb79bd283 in pango_layout_get_pixel_extents ()
    from /usr/lib/libpango-1.0.so.0
 #14 0xb7b2d99f in gtk_cell_renderer_text_new ()
    from /usr/lib/libgtk-x11-2.0.so.0
 #15 0xb7b28054 in gtk_cell_renderer_get_size ()
    from /usr/lib/libgtk-x11-2.0.so.0
 ---Type <return> to continue, or q <return> to quit---
 #16 0xb7cc8da7 in gtk_tree_view_column_cell_get_size ()
    from /usr/lib/libgtk-x11-2.0.so.0
 #17 0xb7cb052e in gtk_tree_view_set_hover_selection ()
    from /usr/lib/libgtk-x11-2.0.so.0
 #18 0xb7cb51e6 in gtk_tree_view_set_fixed_height_mode ()
    from /usr/lib/libgtk-x11-2.0.so.0
 #19 0xb7cb5691 in gtk_tree_view_set_fixed_height_mode ()
    from /usr/lib/libgtk-x11-2.0.so.0
 #20 0xb7cb5758 in gtk_tree_view_set_fixed_height_mode ()
    from /usr/lib/libgtk-x11-2.0.so.0
 #21 0xb759a9b1 in g_source_is_destroyed () from /usr/lib/libglib-2.0.so.0
 #22 0xb759c731 in g_main_context_dispatch () from
 /usr/lib/libglib-2.0.so.0
 #23 0xb759f7a6 in g_main_context_check () from /usr/lib/libglib-2.0.so.0
 #24 0xb759fb67 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
 #25 0xb7be8281 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
 #26 0x080bf7df in main (argc=Cannot access memory at address 0x6
 ) at gtkmain.c:888

-- 
Ticket URL: <http://developer.pidgin.im/ticket/3470#comment:6>
Pidgin <http://pidgin.im>
Pidgin