[Pidgin] #9407: Crash when send message with bold + italic + underline + strikethrough format

Pidgin trac at pidgin.im
Thu Jun 18 21:41:43 EDT 2009


#9407: Crash when send message with bold + italic + underline + strikethrough
format
--------------------+-------------------------------------------------------
 Reporter:  kwv     |        Owner:  rekkanoryo  
     Type:  defect  |       Status:  new         
Milestone:          |    Component:  unclassified
  Version:  2.5.6   |   Resolution:              
 Keywords:          |  
--------------------+-------------------------------------------------------
Description changed by kwv:

Old description:

> After login MSN and try to send a message to buddy with bold + italic +
> underline + strikethrough format, it will crash once message is sent.
>
> I run it on Fedora 8.
>
> The backtrace is as following:
> (gdb) bt full
> #0  0x00110402 in __kernel_vsyscall ()
> No symbol table info available.
> #1  0x00e1b690 in raise () from /lib/libc.so.6
> No symbol table info available.
> #2  0x00e1cf91 in abort () from /lib/libc.so.6
> No symbol table info available.
> #3  0x00e539eb in __libc_message () from /lib/libc.so.6
> No symbol table info available.
> #4  0x00edbb58 in __fortify_fail () from /lib/libc.so.6
> No symbol table info available.
> #5  0x00eda200 in __chk_fail () from /lib/libc.so.6
> No symbol table info available.
> #6  0x00ed95c7 in __strcat_chk () from /lib/libc.so.6
> No symbol table info available.
> #7  0x040ed801 in msn_import_html (html=0x87fe6b0
> "<b><i><u><s>a</s></u></i></b>", attributes=0xbfd30cb8,
> message=0xbfd30cb4)
>     at /usr/include/bits/string3.h:145
>         retcount = 0
>         c = 0xbfd30c68 "f蚇0W\r\004唳\177\b稞f蚇廄f蚇@潭\b@畟"
>         fontface = 0x0
>         fonteffect = "BIUS"
>         fontcolor = "0\000\000\000\000\000"
>         direction = 48 '0'
>         has_bold = 1
>         has_italic = 1
>         has_underline = 1
>         has_strikethrough = 0
>         __PRETTY_FUNCTION__ = "msn_import_html"
> #8  0x040d5730 in msn_send_im (gc=0x8c4a100, who=0x8e6bc40
> "kevinwang at hotmail.com",
>     message=0x87fe6b0 "<b><i><u><s>a</s></u></i></b>",
> flags=PURPLE_MESSAGE_SEND) at msn.c:1206
>         p = <value optimized out>
>         account = (PurpleAccount *) 0x8678c90
>         buddy = (PurpleBuddy *) 0x8786c48
>         session = (MsnSession *) 0x8c4d838
>         swboard = (MsnSwitchBoard *) 0x0
>         msg = <value optimized out>
>         msgformat = <value optimized out>
>         msgtext = <value optimized out>
>         msglen = <value optimized out>
>         username = 0x8678c50 "aumamsntest at hotmail.com"
> #9  0x00bc8a90 in serv_send_im (gc=0x8c4a100, name=0x8e6bc40
> "kevinwang at hotmail.com",
>     message=0x87fe6b0 "<b><i><u><s>a</s></u></i></b>",
> flags=PURPLE_MESSAGE_SEND) at server.c:146
>         conv = (PurpleConversation *) 0x8c42200
>         account = (PurpleAccount *) 0x8678c90
>         presence = (PurplePresence *) 0x8678900
>         prpl = <value optimized out>
>         val = <value optimized out>
>         auto_reply_pref = <value optimized out>
>         __PRETTY_FUNCTION__ = "serv_send_im"
> #10 0x00ba30ca in common_send (conv=0x8c42200, message=<value optimized
> out>, msgflags=PURPLE_MESSAGE_SEND) at conversation.c:136
> ---Type <return> to continue, or q <return> to quit---
>         im = (PurpleConvIm *) 0x8e8de00
>         type = PURPLE_CONV_TYPE_IM
>         account = (PurpleAccount *) 0x8678c90
>         gc = (PurpleConnection *) 0x8c4a100
>         displayed = 0x87fe688 "<b><i><u><s>a</s></u></i></b>"
>         sent = 0x87fe6b0 "<b><i><u><s>a</s></u></i></b>"
>         err = <value optimized out>
>         __PRETTY_FUNCTION__ = "common_send"
> #11 0x08092d34 in send_cb (widget=0x8a0e348, gtkconv=0x8e85240) at
> gtkconv.c:589
>         status = 134817936
>         markup = 0x814694 "D琵003"
>         end = {dummy1 = 0xbfd30dd8, dummy2 = 0x7fd381, dummy3 = 13591804,
> dummy4 = 4096, dummy5 = 0, dummy6 = 1, dummy7 = 0,
>   dummy8 = 9, dummy9 = 0x1, dummy10 = 0x814694, dummy11 = 150831968,
> dummy12 = 141889104, dummy13 = -1076687352,
>   dummy14 = 0x7fd381}
>         error = <value optimized out>
>         cmdline = 0x1 <Address 0x1 out of bounds>
>         send_history = <value optimized out>
>         conv = (PurpleConversation *) 0x8c42200
>         account = (PurpleAccount *) 0x8678c90
>         gc = <value optimized out>
>         flags = <value optimized out>
>         buf = 0x9089e80 "<b><i><u><s>a</s></u></i></b>"
>         clean = 0x908fd18 "a"
> #12 0x007efc79 in IA__g_cclosure_marshal_VOID__VOID (closure=0x8ee97e0,
> return_value=0x0, n_param_values=1,
>     param_values=0x8fd8360, invocation_hint=0xbfd30f7c,
> marshal_data=0x8092890) at gmarshal.c:77
>         data1 = (gpointer) 0x8a0e348
>         data2 = (gpointer) 0x0
>         __PRETTY_FUNCTION__ = "IA__g_cclosure_marshal_VOID__VOID"
> #13 0x007e2302 in IA__g_closure_invoke (closure=0x8ee97e0,
> return_value=0x0, n_param_values=1, param_values=0x8fd8360,
>     invocation_hint=0xbfd30f7c) at gclosure.c:767
>         marshal = (GClosureMarshal) 0x80678b0
> <g_cclosure_marshal_VOID__VOID at plt>
>         marshal_data = (gpointer) 0x0
>         __PRETTY_FUNCTION__ = "IA__g_closure_invoke"
> #14 0x007f5171 in signal_emit_unlocked_R (node=0x8750e80, detail=0,
> instance=0x8a0e348, emission_return=0x0,
>     instance_and_params=0x8fd8360) at gsignal.c:3317
>         tmp = <value optimized out>
>         handler = (Handler *) 0x89ee240
>         accumulator = (SignalAccumulator *) 0x0
>         emission = {next = 0xbfd313f4, instance = 0x8a0e348, ihint =
> {signal_id = 204, detail = 0, run_type = G_SIGNAL_RUN_LAST},
>   state = EMISSION_RUN, chain_type = 4}
>         class_closure = (GClosure *) 0x8750e50
>         handler_list = (Handler *) 0x89ee240
>         return_accu = (GValue *) 0x0
>         accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0,
> v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0,
>       v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0,
> v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0,
>       v_double = 0, v_pointer = 0x0}}}
>         signal_id = 204
>         max_sequential_handler_number = 4105
>         return_value_altered = 1
> ---Type <return> to continue, or q <return> to quit---
> #15 0x007f67bc in IA__g_signal_emitv (instance_and_params=0x8fd8360,
> signal_id=204, detail=0, return_value=0x0) at gsignal.c:2883
>         instance = (gpointer) 0x8a0e348
>         node = (SignalNode *) 0x8750e80
>         param_values = (const GValue *) 0x8fd8374
>         i = <value optimized out>
>         __PRETTY_FUNCTION__ = "IA__g_signal_emitv"
> #16 0x002988d0 in gtk_binding_entry_activate (entry=0x8a0d650,
> object=0x8a0e348) at gtkbindings.c:536
>         params = (GValue *) 0x8fd8360
>         return_val = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long
> = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0,
>       v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0,
> v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0,
>       v_double = 0, v_pointer = 0x0}}}
>         accelerator = (gchar *) 0x0
>         query = {signal_id = 204, signal_name = 0x8750ec8 "message-send",
> itype = 142470744, signal_flags = 34, return_type = 4,
>   n_params = 0, param_types = 0x0}
>         signal_id = 204
>         sig = (GtkBindingSignal *) 0x87c9670
>         old_emission = 0
>         handled = 0
>         i = 13592832
> #17 0x00299849 in binding_match_activate (pspec_list=0x87fe860,
> object=0x8a0e348, path_length=9, path=0x9097478 "GtkIMHtml",
>     path_reversed=0x8efae30 "lmtHMIktG", unbound=0xbfd31124) at
> gtkbindings.c:1100
>         pspec = (PatternSpec *) 0x8a0d5e0
>         binding_set = (GtkBindingSet *) 0x8a0d5b8
>         slist = (GSList *) 0x87fe860
> #18 0x00299c0c in gtk_bindings_activate_list (object=0x8a0e348,
> entries=0x87fe850, is_release=0) at gtkbindings.c:1245
>         path_length = 9
>         path = (gchar *) 0x9097478 "GtkIMHtml"
>         path_reversed = (gchar *) 0x8efae30 "lmtHMIktG"
>         patterns = (GSList *) 0x87fe860
>         class_type = 142470744
>         unbound = 0
>         widget = (GtkWidget *) 0x8a0e348
>         handled = 0
> #19 0x00299fb0 in IA__gtk_bindings_activate_event (object=0x8a0e348,
> event=0x8ef4f38) at gtkbindings.c:1338
>         entries = (GSList *) 0x87fe850
>         display = (GdkDisplay *) 0x864d020
>         key_hash = (GtkKeyHash *) 0x908e660
>         handled = 0
>         __PRETTY_FUNCTION__ = "IA__gtk_bindings_activate_event"
> #20 0x0054f243 in gtk_widget_real_key_press_event (widget=0x8a0e348,
> event=0x8ef4f38) at gtkwidget.c:4412
> No locals.
> #21 0x004c7a86 in gtk_text_view_key_press_event (widget=0x8a0e348,
> event=0x8ef4f38) at gtktextview.c:4040
>         retval = 0
>         obscure = 0
>         text_view = (GtkTextView *) 0x8a0e348
>         insert = (GtkTextMark *) 0x89d3d60
>         iter = {dummy1 = 0x89d6d78, dummy2 = 0x89d6958, dummy3 = 1,
> dummy4 = -1, dummy5 = -1, dummy6 = -1, dummy7 = -2143321692,
>   dummy8 = -1374697112, dummy9 = 0x89d6cd8, dummy10 = 0x908bc38, dummy11
> = 0, dummy12 = -1, dummy13 = -1076686232,
>   dummy14 = 0x7df561}
> ---Type <return> to continue, or q <return> to quit---
>         can_insert = 1
> #22 0x003c3fe8 in _gtk_marshal_BOOLEAN__BOXED (closure=0x8692b50,
> return_value=0xbfd31410, n_param_values=2,
>     param_values=0x8ef9228, invocation_hint=0xbfd313fc,
> marshal_data=0x4c7935) at gtkmarshalers.c:84
>         callback = (GMarshalFunc_BOOLEAN__BOXED) 0x4c7935
> <gtk_text_view_key_press_event>
>         cc = (GCClosure *) 0x8692b50
>         data1 = (gpointer) 0x8a0e348
>         data2 = (gpointer) 0x868fe40
>         v_return = 8340078
>         __PRETTY_FUNCTION__ = "_gtk_marshal_BOOLEAN__BOXED"
> #23 0x007e0af9 in g_type_class_meta_marshal (closure=0x8692b50,
> return_value=0xbfd31410, n_param_values=2, param_values=0x8ef9228,
>     invocation_hint=0xbfd313fc, marshal_data=0xcc) at gclosure.c:878
>         callback = <value optimized out>
> #24 0x007e23ec in IA__g_closure_invoke (closure=0x8692b50,
> return_value=0xbfd31410, n_param_values=2, param_values=0x8ef9228,
>     invocation_hint=0xbfd313fc) at gclosure.c:767
>         marshal = (GClosureMarshal) 0x7e0ab0 <g_type_class_meta_marshal>
>         marshal_data = (gpointer) 0xcc
>         __PRETTY_FUNCTION__ = "IA__g_closure_invoke"
> #25 0x007f54db in signal_emit_unlocked_R (node=0x8692c48, detail=0,
> instance=0x8a0e348, emission_return=0xbfd3159c,
>     instance_and_params=0x8ef9228) at gsignal.c:3285
>         tmp = <value optimized out>
>         handler = (Handler *) 0xbfd313c8
>         accumulator = (SignalAccumulator *) 0x8692c78
>         emission = {next = 0xbfd31874, instance = 0x8a0e348, ihint =
> {signal_id = 38, detail = 0, run_type = G_SIGNAL_RUN_LAST},
>   state = EMISSION_RUN, chain_type = 142470744}
>         class_closure = (GClosure *) 0x8692b50
>         handler_list = (Handler *) 0x89ee220
>         return_accu = (GValue *) 0xbfd31410
>         accu = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0,
> v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0,
>       v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0,
> v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0,
>       v_double = 0, v_pointer = 0x0}}}
>         signal_id = 38
>         max_sequential_handler_number = 4105
>         return_value_altered = 1
> #26 0x007f610f in IA__g_signal_emit_valist (instance=0x8a0e348,
> signal_id=38, detail=0, var_args=0xbfd31620 "<\026蚇\t")
>     at gsignal.c:2990
>         _flags = <value optimized out>
>         _vtable = <value optimized out>
>         _cvalues = {{v_int = -1076685252, v_long = -1076685252, v_int64 =
> 3218282044, v_double = 1.590042596568147e-314,
>     v_pointer = 0xbfd3163c}, {v_int = 0, v_long = 0, v_int64 = 0,
> v_double = 0, v_pointer = 0x0}, {v_int = 0, v_long = 0,
>     v_int64 = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_long = 0,
> v_int64 = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0,
>     v_long = 0, v_int64 = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0,
> v_long = 0, v_int64 = 0, v_double = 0, v_pointer = 0x0}, {
>     v_int = 0, v_long = 0, v_int64 = 0, v_double = 0, v_pointer = 0x0},
> {v_int = 0, v_long = 0, v_int64 = 0, v_double = 0,
>     v_pointer = 0x0}}
>         _lcopy_format = <value optimized out>
>         _n_values = <value optimized out>
>         return_value = {g_type = 20, data = {{v_int = 0, v_uint = 0,
> v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0,
>       v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint =
> 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0,
>       v_float = 0, v_double = 0, v_pointer = 0x0}}}
>         error = <value optimized out>
> ---Type <return> to continue, or q <return> to quit---
>         signal_return_type = 20
>         param_values = (GValue *) 0x8ef923c
>         node = (SignalNode *) 0x8692c48
>         i = 1
>         n_params = 1
>         __PRETTY_FUNCTION__ = "IA__g_signal_emit_valist"
> #27 0x007f64f9 in IA__g_signal_emit (instance=0x8a0e348, signal_id=38,
> detail=0) at gsignal.c:3037
>         var_args = 0xbfd3161c "8O駹b<\026蚇\t"
> #28 0x0054f8d8 in gtk_widget_event_internal (widget=0x8a0e348,
> event=0x8ef4f38) at gtkwidget.c:4675
>         signal_num = 28
>         return_val = 0
> #29 0x0054f3dc in IA__gtk_widget_event (widget=0x8a0e348,
> event=0x8ef4f38) at gtkwidget.c:4475
>         __PRETTY_FUNCTION__ = "IA__gtk_widget_event"
> #30 0x00563d91 in IA__gtk_window_propagate_key_event (window=0x8e790e8,
> event=0x8ef4f38) at gtkwindow.c:4935
>         parent = (GtkWidget *) 0x563e07
>         handled = 0
>         widget = (GtkWidget *) 0x8e790e8
>         focus = (GtkWidget *) 0x8a0e348
>         __PRETTY_FUNCTION__ = "IA__gtk_window_propagate_key_event"
> #31 0x00563e6a in gtk_window_key_press_event (widget=0x8e790e8,
> event=0x8ef4f38) at gtkwindow.c:4965
>         window = (GtkWindow *) 0x8e790e8
>         handled = 0
> #32 0x003c3fe8 in _gtk_marshal_BOOLEAN__BOXED (closure=0x8692b50,
> return_value=0xbfd31890, n_param_values=2,
>     param_values=0x8ef8d40, invocation_hint=0xbfd3187c,
> marshal_data=0x563e07) at gtkmarshalers.c:84
>         callback = (GMarshalFunc_BOOLEAN__BOXED) 0x563e07
> <gtk_window_key_press_event>
>         cc = (GCClosure *) 0x8692b50
>         data1 = (gpointer) 0x8e790e8
>         data2 = (gpointer) 0x868fe40
>         v_return = 8340078
>         __PRETTY_FUNCTION__ = "_gtk_marshal_BOOLEAN__BOXED"
> #33 0x007e0af9 in g_type_class_meta_marshal (closure=0x8692b50,
> return_value=0xbfd31890, n_param_values=2, param_values=0x8ef8d40,
>     invocation_hint=0xbfd3187c, marshal_data=0xcc) at gclosure.c:878
>         callback = <value optimized out>
> #34 0x007e2302 in IA__g_closure_invoke (closure=0x8692b50,
> return_value=0xbfd31890, n_param_values=2, param_values=0x8ef8d40,
>     invocation_hint=0xbfd3187c) at gclosure.c:767
>         marshal = (GClosureMarshal) 0x7e0ab0 <g_type_class_meta_marshal>
>         marshal_data = (gpointer) 0xcc
>         __PRETTY_FUNCTION__ = "IA__g_closure_invoke"
> #35 0x007f54db in signal_emit_unlocked_R (node=0x8692c48, detail=0,
> instance=0x8e790e8, emission_return=0xbfd31a1c,
>     instance_and_params=0x8ef8d40) at gsignal.c:3285
>         tmp = <value optimized out>
>         handler = (Handler *) 0xbfd31848
>         accumulator = (SignalAccumulator *) 0x8692c78
>         emission = {next = 0x0, instance = 0x8e790e8, ihint = {signal_id
> = 38, detail = 0, run_type = G_SIGNAL_RUN_LAST},
>   state = EMISSION_RUN, chain_type = 141100296}
>         class_closure = (GClosure *) 0x8692b50
>         handler_list = (Handler *) 0x8ef3ec0
>         return_accu = (GValue *) 0xbfd31890
>         accu = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0,
> v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0,
> ---Type <return> to continue, or q <return> to quit---
>       v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0,
> v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0,
>       v_double = 0, v_pointer = 0x0}}}
>         signal_id = 38
>         max_sequential_handler_number = 4105
>         return_value_altered = 1
> #36 0x007f610f in IA__g_signal_emit_valist (instance=0x8e790e8,
> signal_id=38, detail=0, var_args=0xbfd31aa0 "墦032蚇\t")
>     at gsignal.c:2990
>         _flags = <value optimized out>
>         _vtable = <value optimized out>
>         _cvalues = {{v_int = -1076684100, v_long = -1076684100, v_int64 =
> 3218283196, v_double = 1.590043165731771e-314,
>     v_pointer = 0xbfd31abc}, {v_int = 0, v_long = 0, v_int64 = 0,
> v_double = 0, v_pointer = 0x0}, {v_int = 0, v_long = 0,
>     v_int64 = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_long = 0,
> v_int64 = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0,
>     v_long = 0, v_int64 = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0,
> v_long = 0, v_int64 = 0, v_double = 0, v_pointer = 0x0}, {
>     v_int = 0, v_long = 0, v_int64 = 0, v_double = 0, v_pointer = 0x0},
> {v_int = 0, v_long = 0, v_int64 = 0, v_double = 0,
>     v_pointer = 0x0}}
>         _lcopy_format = <value optimized out>
>         _n_values = <value optimized out>
>         return_value = {g_type = 20, data = {{v_int = 0, v_uint = 0,
> v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0,
>       v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint =
> 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0,
>       v_float = 0, v_double = 0, v_pointer = 0x0}}}
>         error = <value optimized out>
>         signal_return_type = 20
>         param_values = (GValue *) 0x8ef8d54
>         node = (SignalNode *) 0x8692c48
>         i = 1
>         n_params = 1
>         __PRETTY_FUNCTION__ = "IA__g_signal_emit_valist"
> #37 0x007f64f9 in IA__g_signal_emit (instance=0x8e790e8, signal_id=38,
> detail=0) at gsignal.c:3037
>         var_args = 0xbfd31a9c "8O駹b墦032蚇\t"
> #38 0x0054f8d8 in gtk_widget_event_internal (widget=0x8e790e8,
> event=0x8ef4f38) at gtkwidget.c:4675
>         signal_num = 28
>         return_val = 0
> #39 0x0054f3dc in IA__gtk_widget_event (widget=0x8e790e8,
> event=0x8ef4f38) at gtkwidget.c:4475
>         __PRETTY_FUNCTION__ = "IA__gtk_widget_event"
> #40 0x003c2309 in IA__gtk_propagate_event (widget=0x8e790e8,
> event=0x8ef4f38) at gtkmain.c:2293
>         window = (GtkWidget *) 0x8e790e8
>         handled_event = 0
>         __PRETTY_FUNCTION__ = "IA__gtk_propagate_event"
> #41 0x003c0cbe in IA__gtk_main_do_event (event=0x8ef4f38) at
> gtkmain.c:1539
>         event_widget = (GtkWidget *) 0x8e790e8
>         grab_widget = (GtkWidget *) 0x8e790e8
>         window_group = (GtkWindowGroup *) 0x875eeb0
>         rewritten_event = (GdkEvent *) 0x0
>         tmp_list = (GList *) 0x9089310
>         __PRETTY_FUNCTION__ = "IA__gtk_main_do_event"
> #42 0x006be2ea in gdk_event_dispatch (source=0x864a628, callback=0,
> user_data=0x0) at gdkevents-x11.c:2351
>         display = (GdkDisplay *) 0x864d020
>         event = (GdkEvent *) 0x8ef4f38
> #43 0x0084f293 in IA__g_main_context_dispatch (context=0x8651f88) at
> gmain.c:1814
> ---Type <return> to continue, or q <return> to quit---
> No locals.
> #44 0x0085248f in g_main_context_iterate (context=0x8651f88, block=1,
> dispatch=1, self=0x8633238) at gmain.c:2445
>         got_ownership = <value optimized out>
>         max_priority = 2147483647
>         timeout = 45
>         some_ready = 1
>         nfds = <value optimized out>
>         allocated_nfds = <value optimized out>
>         fds = (GPollFD *) 0x8e51730
>         __PRETTY_FUNCTION__ = "g_main_context_iterate"
> #45 0x00852768 in IA__g_main_loop_run (loop=0x8e511b0) at gmain.c:2653
>         got_ownership = 13587264
>         self = (GThread *) 0x8633238
>         __PRETTY_FUNCTION__ = "IA__g_main_loop_run"
> #46 0x003c03a2 in IA__gtk_main () at gtkmain.c:1146
>         tmp_list = (GList *) 0x0
>         functions = (GList *) 0x0
>         init = (GtkInitFunction *) 0xbfd33ec8
>         loop = (GMainLoop *) 0x8e511b0
> #47 0x080bc594 in main (argc=Cannot access memory at address 0x6
> ) at gtkmain.c:882
>         display = <value optimized out>
>         opt_help = 0
>         opt_login = 0
>         opt_nologin = 0
>         opt_version = <value optimized out>
>         opt_si = 1
>         opt_config_dir_arg = 0x0
>         opt_login_arg = 0x0
>         opt_session_arg = 0x0
>         accounts = <value optimized out>
>         sig_indx = <value optimized out>
>         sigset = {__val = {82951, 0 <repeats 31 times>}}
>         prev_sig_disp = <value optimized out>
>         errmsg = "(\036蚇跚001琵000?蚇", '\0' <repeats 12 times>,
> "?蚇張琵000?蚇文?, '\0' <repeats 13 times>,
> "?蚇澀琵000\005\000\000\000<\004035蚇嶜琵000\b\000\000\000,\000\000\000澀琵000\b;蚇\204賵\000赨237237\024\000\000\000澀琵000\000\000\000\000?蚇詰\000\2230淕愧200漟",
> '\0' <repeats 13 times>,
> "\227\000餐036蚇跚001琵000?蚇張琵000\020\000\000\000\023埶\000?蚇?蚇?蚇文琵000澀琵000\004\000\000\000\224\a珮000(\036蚇"...
>         segfault_message_tmp = <value optimized out>
>         error = (GError *) 0x0
>         opt = <value optimized out>
>         gui_check = <value optimized out>
>         debug_enabled = <value optimized out>
>         migration_failed = <value optimized out>
>         active_accounts = <value optimized out>
>         long_options = {{name = 0x810246a "config", has_arg = 1, flag =
> 0x0, val = 99}, {name = 0x80f1abc "debug", has_arg = 0,
>     flag = 0x0, val = 100}, {name = 0x80f5121 "help", has_arg = 0, flag =
> 0x0, val = 104}, {name = 0x80f1d87 "login", has_arg = 2,
>     flag = 0x0, val = 108}, {name = 0x80fe95e "multiple", has_arg = 0,
> flag = 0x0, val = 109}, {name = 0x80fe967 "nologin",
>     has_arg = 0, flag = 0x0, val = 110}, {name = 0x80fe96f "nocrash",
> has_arg = 0, flag = 0x0, val = 120}, {
>     name = 0x8102460 "session", has_arg = 1, flag = 0x0, val = 115},
> {name = 0x80f6e1a "version", has_arg = 0, flag = 0x0,
> ---Type <return> to continue, or q <return> to quit---
>     val = 118}, {name = 0x8102473 "display", has_arg = 1, flag = 0x0, val
> = 68}, {name = 0x80fe977 "sync", has_arg = 0,
>     flag = 0x0, val = 83}, {name = 0x0, has_arg = 0, flag = 0x0, val =
> 0}}

New description:

 After login MSN and try to send a message to buddy with bold + italic +
 underline + strikethrough format, it will crash once message is sent.

 I run it on Fedora 8.

 The backtrace is as attached file.

--

-- 
Ticket URL: <http://developer.pidgin.im/ticket/9407#comment:1>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list