[Pidgin] #8836: crash dismissing e-mail notification window

Pidgin trac at pidgin.im
Tue Mar 31 14:07:02 EDT 2009 

#8836: crash dismissing e-mail notification window
--------------------------+-------------------------------------------------
 Reporter:  brantgurga    |           Owner:  lschiere
     Type:  defect        |          Status:  new     
Component:  unclassified  |         Version:  2.5.5   
 Keywords:                |   Launchpad_bug:          
--------------------------+-------------------------------------------------
 Pidgin crashed after this procedure:
 1. View the new e-mail list for Google.
 2. Dismiss the list.

 I will attached the crash dump. It appears to have been heap corruption:
 FAULTING_IP:
 ntdll!RtlFreeHeap+36
 7716f217 80780705        cmp     byte ptr [eax+7],5

 EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
 ExceptionAddress: 7716f217 (ntdll!RtlFreeHeap+0x00000036)
    ExceptionCode: c0000005 (Access violation)
   ExceptionFlags: 00000000
 NumberParameters: 2
    Parameter[0]: 00000000
    Parameter[1]: 6e69686f
 Attempt to read from address 6e69686f

 PROCESS_NAME:  pidgin.exe

 ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced
 memory at 0x%08lx. The memory could not be %s.

 EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx
 referenced memory at 0x%08lx. The memory could not be %s.

 EXCEPTION_PARAMETER1:  00000000

 EXCEPTION_PARAMETER2:  6e69686f

 READ_ADDRESS:  6e69686f

 FOLLOWUP_IP:
 ntdll!RtlFreeHeap+36
 7716f217 80780705        cmp     byte ptr [eax+7],5

 NTGLOBALFLAG:  0

 APPLICATION_VERIFIER_FLAGS:  0

 ADDITIONAL_DEBUG_TEXT:  Enable Pageheap/AutoVerifer

 FAULTING_THREAD:  000008ac

 DEFAULT_BUCKET_ID:  HEAP_CORRUPTION

 PRIMARY_PROBLEM_CLASS:  HEAP_CORRUPTION

 BUGCHECK_STR:
 APPLICATION_FAULT_HEAP_CORRUPTION_STRING_DEREFERENCE_INVALID_POINTER_READ

 LAST_CONTROL_TRANSFER:  from 74d23593 to 7716f217

 STACK_TEXT:
 0027e3e8 74d23593 00370000 00000000 6e696870 ntdll!RtlFreeHeap+0x36
 0027e3fc 75ec9d6b 00370000 00000000 6e696870 kernel32!HeapFree+0x14
 0027e448 64a93afb 6e696870 0027e4a0 0027e478 msvcrt!free+0xcd
 WARNING: Stack unwind information not available. Following frames may be
 wrong.
 0027e468 64a93c10 00000002 0446a2c0 00000002
 pidgin_64a40000!pidgin_menu_tray_append+0x270b
 0027e4c8 63a43955 04494030 fffffff9 0438a108
 pidgin_64a40000!pidgin_menu_tray_append+0x2820
 0027e528 63a57e85 044668e0 00000000 00000002
 libgobject_2_0_0!g_closure_invoke+0x115
 0027e618 63a58bf1 04494030 00000000 04222990
 libgobject_2_0_0!g_signal_has_handler_pending+0xf55
 0027e758 63a58e76 04494030 000000f1 00000000
 libgobject_2_0_0!g_signal_emit_valist+0x7b1
 0027e778 617db787 04494030 000000f1 00000000
 libgobject_2_0_0!g_signal_emit+0x26
 0027e798 63a43955 04494030 fffffff9 00000001
 libgtk_win32_2_0_0!gtk_dialog_response+0x47
 0027e7f8 63a57e85 044661a0 00000000 00000001
 libgobject_2_0_0!g_closure_invoke+0x115
 0027e8e8 63a58bf1 03ade3f0 00000000 063fa138
 libgobject_2_0_0!g_signal_has_handler_pending+0xf55
 0027ea28 63a58e76 03ade3f0 00000078 00000000
 libgobject_2_0_0!g_signal_emit_valist+0x7b1
 0027ea48 617a5e30 03ade3f0 00000078 00000000
 libgobject_2_0_0!g_signal_emit+0x26
 0027ea68 617a80ac 03ade3f0 0027eb98 0027ead8
 libgtk_win32_2_0_0!gtk_button_clicked+0x40
 0027ea78 63a43955 03ade3f0 027839b0 00000001
 libgtk_win32_2_0_0!gtk_button_get_alignment+0x50c
 0027ead8 63a57882 03ad7c28 00000000 00000001
 libgobject_2_0_0!g_closure_invoke+0x115
 0027ebc8 63a58bf1 03ade3f0 00000000 04302780
 libgobject_2_0_0!g_signal_has_handler_pending+0x952
 0027ed08 63a58e76 03ade3f0 00000077 00000000
 libgobject_2_0_0!g_signal_emit_valist+0x7b1
 0027ed28 617a5da0 03ade3f0 00000077 00000000
 libgobject_2_0_0!g_signal_emit+0x26
 0027ed48 617a74a2 03ade3f0 027839b0 0027ed88
 libgtk_win32_2_0_0!gtk_button_released+0x40
 0027ed58 618611d2 03ade3f0 0422c170 02711fa0
 libgtk_win32_2_0_0!gtk_button_set_relief+0x1062
 0027ed88 63a43955 02768d58 0027ee80 00000002
 libgtk_win32_2_0_0!gtk_marshal_VOID__UINT_STRING+0x142
 0027ede8 63a57ab6 02768d58 0027ee80 00000002
 libgobject_2_0_0!g_closure_invoke+0x115
 0027eed8 63a5896b 03ade3f0 0027ef90 04222ed0
 libgobject_2_0_0!g_signal_has_handler_pending+0xb86
 0027f018 63a58e76 03ade3f0 0000001e 00000000
 libgobject_2_0_0!g_signal_emit_valist+0x52b
 0027f038 61980ae4 03ade3f0 0000001e 00000000
 libgobject_2_0_0!g_signal_emit+0x26
 0027f068 6185e221 03ade3f0 0422c170 0027f098
 libgtk_win32_2_0_0!gtk_widget_activate+0x224
 0027f098 6185f681 03ade3f0 0422c170 0027f0d8
 libgtk_win32_2_0_0!gtk_propagate_event+0xd1
 0027f0e8 6c37408e 0422c170 00000000 0027f108
 libgtk_win32_2_0_0!gtk_main_do_event+0x231
 0027f108 685e73d7 0037e5e0 00000000 00000000
 libgdk_win32_2_0_0!gdk_event_get_graphics_expose+0x426e
 0027f168 685e8aa3 026f4710 00000000 06336fb0
 libglib_2_0_0!g_main_context_dispatch+0x197
 0027f1b8 685e8d4a 00000001 026e07c8 0027f1e8
 libglib_2_0_0!g_main_context_acquire+0x543
 0027f1e8 6185ebfe 03b9b438 03b9b438 67cfecf0
 libglib_2_0_0!g_main_loop_run+0x17a
 0027f238 64a90a61 04305280 64adcca5 00000000
 libgtk_win32_2_0_0!gtk_main+0x9e
 0027f358 004023ec 00400000 00000001 00372f98
 pidgin_64a40000!pidgin_main+0x481
 0027fec8 00402a4a 00400000 00000000 00692d6b pidgin+0x23ec
 0027ff48 00401247 00000001 00372f98 00371b30 pidgin+0x2a4a
 0027ff78 004012b8 00000002 00000000 0027ff94 pidgin+0x1247
 0027ff88 74d2e3f3 7efde000 0027ffd4 771bcfed pidgin+0x12b8
 0027ff94 771bcfed 7efde000 770da7d2 00000000
 kernel32!BaseThreadInitThunk+0xe
 0027ffd4 771bd1ff 004012a0 7efde000 00000000
 ntdll!__RtlUserThreadStart+0x23
 0027ffec 00000000 004012a0 7efde000 00000000
 ntdll!_RtlUserThreadStart+0x1b


 STACK_COMMAND:  ~0s; .ecxr ; kb

 SYMBOL_NAME:  heap_corruption!heap_corruption

 FOLLOWUP_NAME:  MachineOwner

 MODULE_NAME: heap_corruption

 IMAGE_NAME:  heap_corruption

 DEBUG_FLR_IMAGE_TIMESTAMP:  0

 FAILURE_BUCKET_ID:
 HEAP_CORRUPTION_c0000005_heap_corruption!heap_corruption

 BUCKET_ID:
 APPLICATION_FAULT_HEAP_CORRUPTION_STRING_DEREFERENCE_INVALID_POINTER_READ_heap_corruption!heap_corruption

 WATSON_IBUCKET:  1171886852

 WATSON_IBUCKETTABLE:  1

 WATSON_STAGEONE_URL:
 http://watson.microsoft.com/StageOne/pidgin_exe/2_5_5_0/49abebce/ntdll_dll/6_0_6001_18000/4791a783/c0000005/0002f217.htm?Retriage=1

 Followup: MachineOwner
 ---------

-- 
Ticket URL: <http://developer.pidgin.im/ticket/8836>
Pidgin <http://pidgin.im>
Pidgin

More information about the Tracker mailing list