[Pidgin] #10465: MSN Segfault when sending a message

[Pidgin]

#10465: MSN Segfault when sending a message
--------------------------+-------------------------------------------------
 Reporter:  bgK           |     Owner:  rekkanoryo
     Type:  defect        |    Status:  new       
Component:  unclassified  |   Version:  2.6.1     
 Keywords:                |  
--------------------------+-------------------------------------------------
 Pidgin crashes with a segfault when sending a message to an offline
 contact using the default MSN plugin.

 Backtrace extract :
 {{{
 Thread 3 (Thread 0xb47f3b90 (LWP 10355)):
 #0  0xb3e371cd in ?? ()
 No symbol table info available.
 #1  0xb76af49e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130
 No locals.
 }}}

 It looks like the crash happens just after the creation of the thread.

 Disassembly :
 {{{
 (gdb) disass $pc-32 $pc+32
 Dump of assembler code from 0xb3e371ad to 0xb3e371ed:
 0xb3e371ad:     add    %al,(%eax)
 0xb3e371af:     add    %al,(%eax)
 0xb3e371b1:     add    %al,(%eax)
 0xb3e371b3:     add    %al,(%eax)
 0xb3e371b5:     add    %al,(%eax)
 0xb3e371b7:     add    %al,(%eax)
 0xb3e371b9:     add    %al,(%eax)
 0xb3e371bb:     add    %al,(%eax)
 0xb3e371bd:     add    %al,(%eax)
 0xb3e371bf:     add    %al,(%eax)
 0xb3e371c1:     add    %al,(%eax)
 0xb3e371c3:     add    %cl,(%ebx)
 0xb3e371c5:     add    %al,(%eax)
 0xb3e371c7:     add    %cl,(%eax)
 0xb3e371c9:     jb     0xb3e371ae
 0xb3e371cb:     mov    $0x60,%bl
 0xb3e371cd:     mov    0x7f24b3ea,%eax
 0xb3e371d2:     jecxz  0xb3e37187
 0xb3e371d4:     and    0x0(%esi),%dl
 0xb3e371d7:     add    %al,(%eax)
 0xb3e371d9:     add    %al,(%eax)
 0xb3e371db:     add    %ah,%ah
 0xb3e371dd:     sahf
 0xb3e371de:     ljmp   $0x0,$0xb3
 0xb3e371e5:     add    %al,(%eax)
 0xb3e371e7:     add    %al,(%ecx)
 0xb3e371e9:     add    %al,(%eax)
 0xb3e371eb:     add    %al,(%eax)
 End of assembler dump.
 }}}

 This is by no means x86 code. It maybe the function pointer passed when
 creating the thread is wrong. No idea why this happens though.

-- 
Ticket URL: <http://developer.pidgin.im/ticket/10465>
Pidgin <http://pidgin.im>
Pidgin