[Pidgin] #13247: Pidgin crashes frequently without apparent reason

[Pidgin]

#13247: Pidgin crashes frequently without apparent reason
--------------------+-------------------------------------------------------
 Reporter:  chf     |        Owner:  rekkanoryo
     Type:  defect  |       Status:  new       
Milestone:          |    Component:  SILC      
  Version:  2.7.9   |   Resolution:            
 Keywords:          |  
--------------------+-------------------------------------------------------

Comment(by darkrain42):

 {{{
 ==25053== Thread 1:
 ==25053== Invalid read of size 4
 ==25053==    at 0x68D4D47: silc_client_add_connection (client.c:619)
 ==25053==    by 0x68D51D3: silc_client_key_exchange (client.c:876)
 ==25053==    by 0x686D8E4: silcpurple_stream_created (silc.c:403)
 ==25053==    by 0x690D060: silc_socket_host_lookup_finish
 (silcsocketstream.c:83)
 ==25053==    by 0x6908189: silc_schedule_dispatch_timeout
 (silcschedule.c:114)
 ==25053==    by 0x6908CE6: silc_schedule_iterate (silcschedule.c:159)
 ==25053==    by 0x6909047: silc_schedule_one (silcschedule.c:484)
 ==25053==    by 0x68D31FC: silc_client_run_one (client.c:1095)
 ==25053==    by 0x6869AFC: silcpurple_scheduler_fd (silc.c:166)
 ==25053==    by 0x80AF85F: pidgin_io_invoke (gtkeventloop.c:73)
 ==25053==    by 0x491C6DA: g_io_unix_dispatch (giounix.c:162)
 ==25053==    by 0x48D8304: g_main_context_dispatch (gmain.c:1960)
 ==25053==    by 0x48DBFE7: g_main_context_iterate (gmain.c:2591)
 ==25053==    by 0x48DC526: g_main_loop_run (gmain.c:2799)
 ==25053==    by 0x43F4E18: gtk_main (gtkmain.c:1219)
 ==25053==    by 0x80CB0E7: main (gtkmain.c:978)
 ==25053==  Address 0x71c12ac is 84 bytes inside a block of size 88 free'd
 ==25053==    at 0x4023B6A: free (vg_replace_malloc.c:366)
 ==25053==    by 0x6912064: silc_free (silcmemory.c:68)
 ==25053==    by 0x68D4D46: silc_client_add_connection (client.c:618)
 ==25053==    by 0x68D51D3: silc_client_key_exchange (client.c:876)
 ==25053==    by 0x686D8E4: silcpurple_stream_created (silc.c:403)
 ==25053==    by 0x690D060: silc_socket_host_lookup_finish
 (silcsocketstream.c:83)
 ==25053==    by 0x6908189: silc_schedule_dispatch_timeout
 (silcschedule.c:114)
 ==25053==    by 0x6908CE6: silc_schedule_iterate (silcschedule.c:159)
 ==25053==    by 0x6909047: silc_schedule_one (silcschedule.c:484)
 ==25053==    by 0x68D31FC: silc_client_run_one (client.c:1095)
 ==25053==    by 0x6869AFC: silcpurple_scheduler_fd (silc.c:166)
 ==25053==    by 0x80AF85F: pidgin_io_invoke (gtkeventloop.c:73)
 ==25053==    by 0x491C6DA: g_io_unix_dispatch (giounix.c:162)
 ==25053==    by 0x48D8304: g_main_context_dispatch (gmain.c:1960)
 ==25053==    by 0x48DBFE7: g_main_context_iterate (gmain.c:2591)
 ==25053==    by 0x48DC526: g_main_loop_run (gmain.c:2799)
 ==25053==    by 0x43F4E18: gtk_main (gtkmain.c:1219)
 ==25053==    by 0x80CB0E7: main (gtkmain.c:978)
 ==25053==
 }}}


 {{{
 ==25053== Invalid read of size 4
 ==25053==    at 0x6928C52: silc_cipher_get_block_len (silccipher.c:363)
 ==25053==    by 0x68F8C13: silc_packet_send_raw (silcpacket.c:1537)
 ==25053==    by 0x68FCEBD: silc_packet_send (silcpacket.c:1701)
 ==25053==    by 0x6869055: silcpurple_keepalive (silc.c:129)
 ==25053==    by 0x49B1404: send_keepalive (connection.c:65)
 ==25053==    by 0x48D8A7B: g_timeout_dispatch (gmain.c:3396)
 ==25053==    by 0x48D8304: g_main_context_dispatch (gmain.c:1960)
 ==25053==    by 0x48DBFE7: g_main_context_iterate (gmain.c:2591)
 ==25053==    by 0x48DC526: g_main_loop_run (gmain.c:2799)
 ==25053==    by 0x43F4E18: gtk_main (gtkmain.c:1219)
 ==25053==    by 0x80CB0E7: main (gtkmain.c:978)
 ==25053==  Address 0x8b5ce08 is 24 bytes inside a block of size 28 free'd
 ==25053==    at 0x4023B6A: free (vg_replace_malloc.c:366)
 ==25053==    by 0x6912064: silc_free (silcmemory.c:68)
 ==25053==    by 0x69291FA: silc_cipher_unregister (silccipher.c:135)
 ==25053==    by 0x69293D8: silc_cipher_unregister_all (silccipher.c:176)
 ==25053==    by 0x68D384F: silc_client_free (client.c:957)
 ==25053==    by 0x6869E69: silcpurple_close_final (silc.c:658)
 ==25053==    by 0x48D8A7B: g_timeout_dispatch (gmain.c:3396)
 ==25053==    by 0x48D8304: g_main_context_dispatch (gmain.c:1960)
 ==25053==    by 0x48DBFE7: g_main_context_iterate (gmain.c:2591)
 ==25053==    by 0x48DC526: g_main_loop_run (gmain.c:2799)
 ==25053==    by 0x43F4E18: gtk_main (gtkmain.c:1219)
 ==25053==    by 0x80CB0E7: main (gtkmain.c:978)
 ==25053==
 ==25053== Invalid read of size 1
 ==25053==    at 0x6928C86: silc_cipher_get_mode (silccipher.c:384)
 ==25053==    by 0x68F8D05: silc_packet_send_raw (silcpacket.c:1555)
 ==25053==    by 0x68FCEBD: silc_packet_send (silcpacket.c:1701)
 ==25053==    by 0x6869055: silcpurple_keepalive (silc.c:129)
 ==25053==    by 0x49B1404: send_keepalive (connection.c:65)
 ==25053==    by 0x48D8A7B: g_timeout_dispatch (gmain.c:3396)
 ==25053==    by 0x48D8304: g_main_context_dispatch (gmain.c:1960)
 ==25053==    by 0x48DBFE7: g_main_context_iterate (gmain.c:2591)
 ==25053==    by 0x48DC526: g_main_loop_run (gmain.c:2799)
 ==25053==    by 0x43F4E18: gtk_main (gtkmain.c:1219)
 ==25053==    by 0x80CB0E7: main (gtkmain.c:978)
 ==25053==  Address 0x8b5ce0b is 27 bytes inside a block of size 28 free'd
 ==25053==    at 0x4023B6A: free (vg_replace_malloc.c:366)
 ==25053==    by 0x6912064: silc_free (silcmemory.c:68)
 ==25053==    by 0x69291FA: silc_cipher_unregister (silccipher.c:135)
 ==25053==    by 0x69293D8: silc_cipher_unregister_all (silccipher.c:176)
 ==25053==    by 0x68D384F: silc_client_free (client.c:957)
 ==25053==    by 0x6869E69: silcpurple_close_final (silc.c:658)
 ==25053==    by 0x48D8A7B: g_timeout_dispatch (gmain.c:3396)
 ==25053==    by 0x48D8304: g_main_context_dispatch (gmain.c:1960)
 ==25053==    by 0x48DBFE7: g_main_context_iterate (gmain.c:2591)
 ==25053==    by 0x48DC526: g_main_loop_run (gmain.c:2799)
 ==25053==    by 0x43F4E18: gtk_main (gtkmain.c:1219)
 ==25053==    by 0x80CB0E7: main (gtkmain.c:978)
 ==25053==
 ==25053== Invalid read of size 4
 ==25053==    at 0x692C398: silc_hmac_len (silchmac.c:270)
 ==25053==    by 0x68F9316: silc_packet_send_raw (silcpacket.c:1455)
 ==25053==    by 0x68FCEBD: silc_packet_send (silcpacket.c:1701)
 ==25053==    by 0x6869055: silcpurple_keepalive (silc.c:129)
 ==25053==    by 0x49B1404: send_keepalive (connection.c:65)
 ==25053==    by 0x48D8A7B: g_timeout_dispatch (gmain.c:3396)
 ==25053==    by 0x48D8304: g_main_context_dispatch (gmain.c:1960)
 ==25053==    by 0x48DBFE7: g_main_context_iterate (gmain.c:2591)
 ==25053==    by 0x48DC526: g_main_loop_run (gmain.c:2799)
 ==25053==    by 0x43F4E18: gtk_main (gtkmain.c:1219)
 ==25053==    by 0x80CB0E7: main (gtkmain.c:978)
 ==25053==  Address 0xe3c3a4c is 4 bytes inside a block of size 8 free'd
 ==25053==    at 0x4023B6A: free (vg_replace_malloc.c:366)
 ==25053==    by 0x6912064: silc_free (silcmemory.c:68)
 ==25053==    by 0x692C976: silc_hmac_unregister (silchmac.c:136)
 ==25053==    by 0x692CB54: silc_hmac_unregister_all (silchmac.c:177)
 ==25053==    by 0x68D385E: silc_client_free (client.c:960)
 ==25053==    by 0x6869E69: silcpurple_close_final (silc.c:658)
 ==25053==    by 0x48D8A7B: g_timeout_dispatch (gmain.c:3396)
 ==25053==    by 0x48D8304: g_main_context_dispatch (gmain.c:1960)
 ==25053==    by 0x48DBFE7: g_main_context_iterate (gmain.c:2591)
 ==25053==    by 0x48DC526: g_main_loop_run (gmain.c:2799)
 ==25053==    by 0x43F4E18: gtk_main (gtkmain.c:1219)
 ==25053==    by 0x80CB0E7: main (gtkmain.c:978)
 ==25053==
 }}}

-- 
Ticket URL: <http://developer.pidgin.im/ticket/13247#comment:12>
Pidgin <http://pidgin.im>
Pidgin