[Pidgin] #16259: pidgin 2.10.9 segfaults on some gmail email notifcations

[Pidgin]

#16259: pidgin 2.10.9 segfaults on some gmail email notifcations
-----------------------+-----------------------------------------
 Reporter:  rabbitear  |      Owner:  darkrain42
     Type:  defect     |     Status:  new
Milestone:             |  Component:  Google Talk
  Version:  2.10.9     |   Keywords:  email notification segfault
-----------------------+-----------------------------------------
 Pidgin will segfault while trying to notify the user of new email from
 gmail.

 ---snip: from gdb after sigfault---
 Program received signal SIGSEGV, Segmentation fault.
 0x00007fffe53143d5 in purple_events_callback_emails_notification ()
    from /usr/lib64/purple-2/purple-events.so
 ---snip---

 ---snip: backtrace---
 (gdb) bt full
 #0  0x00007fffe53143d5 in purple_events_callback_emails_notification ()
    from /usr/lib64/purple-2/purple-events.so
 No symbol table info available.
 #1  0x00007ffff3b0f123 in purple_signal_emit_vargs (instance=<optimized
 out>,
     signal=signal at entry=0x7ffff3b5f820 "displaying-emails-notification",
     args=args at entry=0x7fffffffb228) at signals.c:482
         instance_data = <optimized out>
         signal_data = 0x7c7ba0
         handler_data = <optimized out>
         l = <optimized out>
         l_next = 0x0
         tmp = {{gp_offset = 48, fp_offset = 48,
             overflow_arg_area = 0x7fffffffb308, reg_save_area =
 0x7fffffffb240}}
         __PRETTY_FUNCTION__ = "purple_signal_emit_vargs"
 #2  0x00007ffff3b0f281 in purple_signal_emit (instance=<optimized out>,
     signal=signal at entry=0x7ffff3b5f820 "displaying-emails-notification")
     at signals.c:434
         args = {{gp_offset = 16, fp_offset = 48,
             overflow_arg_area = 0x7fffffffb300, reg_save_area =
 0x7fffffffb240}}
         __PRETTY_FUNCTION__ = "purple_signal_emit"
 #3  0x00007ffff3afa8d8 in purple_notify_emails (handle=0xd32910,
     count=count at entry=7, detailed=detailed at entry=0,
 subjects=subjects at entry=0x0,
     froms=froms at entry=0x0, tos=tos at entry=0x7fffffffb3d0,
 urls=urls at entry=0x0,
     cb=cb at entry=0x0, user_data=user_data at entry=0x0) at notify.c:155
         ui_handle = <optimized out>
         ops = 0x6ef5c0 <ops>
 #4  0x00007fffe4684e56 in jabber_gmail_parse (js=0xd32cc0, from=<optimized
 out>,
     type=<optimized out>, id=<optimized out>, packet=<optimized out>,
     nul=<optimized out>) at google/gmail.c:63
         bare_jid = 0xf93680 "weatchu at gmail.com"
         default_tos = {0xf93680 "weatchu at gmail.com", 0x0}
         child = 0xf9e8e0
         message = <optimized out>
         url = <optimized out>
         to_name = <optimized out>
         tos = <optimized out>
         to = 0xfbddc0 "weatchu at gmail.com/1AB65262"
         in_str = <optimized out>
         count = <optimized out>
         returned_count = <optimized out>
         i = <optimized out>
         froms = <optimized out>
         urls = <optimized out>
         subjects = <optimized out>
         from = <optimized out>
         type = <optimized out>
         nul = <optimized out>
         packet = <optimized out>
         id = <optimized out>
         js = 0xd32cc0
 #5  0x00007fffe46883c0 in jabber_iq_parse (js=0xd32cc0, packet=0xff5a80)
     at iq.c:429
         jcd = 0xb68630
         child = <optimized out>
         error = <optimized out>
         x = <optimized out>
         xmlns = <optimized out>
         iq_type = 0xe30df0 "result"
         id = 0xff35b0 "purple8bf4fad2"
         from = 0x0
         type = JABBER_IQ_RESULT
         signal_return = <optimized out>
         from_id = 0x0
 #6  0x00007fffe469001e in jabber_process_packet (js=js at entry=0xd32cc0,
     packet=packet at entry=0x7fffffffb4d8) at jabber.c:345
         name = 0xd9c4e0 "iq"
         xmlns = 0xe16320 "jabber:client"
 #7  0x00007fffe4699df7 in jabber_parser_element_end_libxml
 (user_data=0xd32cc0,
     element_name=<optimized out>, prefix=<optimized out>,
     namespace=<optimized out>) at parser.c:169
         packet = 0xff5a80
         js = 0xd32cc0
 #8  0x00007ffff621c923 in ?? () from /usr/lib64/libxml2.so.2
 No symbol table info available.
 #9  0x00007ffff6222291 in ?? () from /usr/lib64/libxml2.so.2
 No symbol table info available.
 #10 0x00007ffff6223c9e in xmlParseChunk () from /usr/lib64/libxml2.so.2
 No symbol table info available.
 #11 0x00007fffe469a29d in jabber_parser_process (js=0xd32cc0,
     buf=<optimized out>, len=<optimized out>) at parser.c:279
         ret = <optimized out>
 #12 0x00007fffe468c2bb in jabber_recv_cb_ssl (data=0xd32910, gsc=0xd33e70,
     cond=<optimized out>) at jabber.c:659
         gc = 0xd32910
         js = 0xd32cc0
         len = 192
         buf = "<iq to=\"weatchu at gmail.com/1AB65262\" id=\"purple8bf4fad2\"
 type=\"result\"><mailbox url=\"http://mail.google.com/mail\" total-
 matched=\"7\" result-time=\"1401756748462\"
 xmlns=\"google:mail:notify\"/></iq>\000uc-v1 s"...
         __PRETTY_FUNCTION__ = "jabber_recv_cb_ssl"
 #13 0x000000000046befe in pidgin_io_invoke (source=<optimized out>,
     condition=<optimized out>, data=0x989750) at gtkeventloop.c:73
         closure = 0x989750
         purple_cond = PURPLE_INPUT_READ
 #14 0x00007ffff3df7316 in g_main_context_dispatch ()
    from /usr/lib64/libglib-2.0.so.0
 No symbol table info available.
 #15 0x00007ffff3df7668 in ?? () from /usr/lib64/libglib-2.0.so.0
 No symbol table info available.
 #16 0x00007ffff3df7a6a in g_main_loop_run () from
 /usr/lib64/libglib-2.0.so.0
 No symbol table info available.
 #17 0x00007ffff5ccce47 in gtk_main () from /usr/lib64/libgtk-x11-2.0.so.0
 No symbol table info available.
 #18 0x0000000000433577 in main (argc=1, argv=0x7fffffffdd38) at
 gtkmain.c:933
         opt_force_online = 0
         opt_help = <optimized out>
         opt_login = 0
         opt_nologin = 0
         opt_version = <optimized out>
         opt_si = <optimized out>
         opt_config_dir_arg = <optimized out>
         opt_login_arg = <optimized out>
         opt_session_arg = <optimized out>
         search_path = <optimized out>
         accounts = <optimized out>
         sig_indx = 1
         sigset = {__val = {82950, 0 <repeats 15 times>}}
         errmsg = '\000' <repeats 936 times>...
         signal_channel = <optimized out>
         signal_status = <optimized out>
         signal_channel_watcher = 1
         segfault_message_tmp = <optimized out>
         error = 0x0
         opt = <optimized out>
         gui_check = <optimized out>
         debug_enabled = <optimized out>
         migration_failed = <optimized out>
         active_accounts = <optimized out>
         st = {st_dev = 2054, st_ino = 1573158, st_nlink = 2, st_mode =
 16877,
           st_uid = 1000, st_gid = 100, __pad0 = 0, st_rdev = 0, st_size =
 4096,
           st_blksize = 4096, st_blocks = 8, st_atim = {tv_sec =
 1392730816,
             tv_nsec = 364980620}, st_mtim = {tv_sec = 1401727681,
             tv_nsec = 192409740}, st_ctim = {tv_sec = 1401727681,
             tv_nsec = 192409740}, __unused = {0, 0, 0}}
         long_options = {{name = 0x4c952d "config", has_arg = 1, flag =
 0x0,
             val = 99}, {name = 0x4b8839 "debug", has_arg = 0, flag = 0x0,
             val = 100}, {name = 0x4c5e36 "force-online", has_arg = 0, flag
 = 0x0,
             val = 102}, {name = 0x4ba387 "help", has_arg = 0, flag = 0x0,
             val = 104}, {name = 0x4c5cfd "login", has_arg = 2, flag = 0x0,
             val = 108}, {name = 0x4c5e43 "multiple", has_arg = 0, flag =
 0x0,
             val = 109}, {name = 0x4c5e4c "nologin", has_arg = 0, flag =
 0x0,
             val = 110}, {name = 0x4c9523 "session", has_arg = 1, flag =
 0x0,
             val = 115}, {name = 0x4bcb2a "version", has_arg = 0, flag =
 0x0,
             val = 118}, {name = 0x4c9536 "display", has_arg = 1, flag =
 0x0,
             val = 68}, {name = 0x4c6075 "sync", has_arg = 0, flag = 0x0,
             val = 83}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}}
 (gdb)
 ---snip---

 Jon.

-- 
Ticket URL: <https://developer.pidgin.im/ticket/16259>
Pidgin <https://pidgin.im>
Pidgin