*** This bug is a duplicate of bug 196852 ***
    https://bugs.launchpad.net/bugs/196852

Public bug reported:

Binary package hint: evolution

I tried to display an ical invitation generated from TUTOS (a web based
calendar & todo system). The invitation contained latin2 text in its
"summary" field.

The most important part is:

DESCRIPTION
 :Balabit Basketball Association GXlamXrkőzXs

The 'X' characters denote some hungarian accented characters in the
latin2 character set.

This generates the following chrash in evolution if the message preview
panel is enabled:

(gdb) bt
#0  0x00007f7230cb5230 in IA__g_markup_escape_text (text=0x1738000 <Address 
0x1738000 out of bounds>, length=24346624) at 
/build/buildd/glib2.0-2.16.3/glib/gmarkup.c:1952
#1  0x00007f7230cb648c in IA__g_markup_vprintf_escaped (format=0x7f72264b9a90 
"<b>%s</b>", args=<value optimized out>) at 
/build/buildd/glib2.0-2.16.3/glib/gmarkup.c:2272
#2  0x00007f7230cb65ad in IA__g_markup_printf_escaped (format=0x7f7222a22d60 
"\020�6\037r\177") at /build/buildd/glib2.0-2.16.3/glib/gmarkup.c:2329
#3  0x00007f72264b7d68 in itip_view_set_summary (view=<value optimized out>, 
summary=0x160dfd0 "Balabit Basketball Association G�lam�rk&#337;z�s") at 
itip-view.c:597
#4  0x00007f72264b1d59 in format_itip_object (efh=<value optimized out>, 
eb=0x11b4260, pobject=<value optimized out>) at itip-formatter.c:2013
#5  0x00007f722a81db6e in efh_object_requested (html=<value optimized out>, 
eb=0x11b4260, efh=0xda4000) at em-format-html.c:625
#6  0x00007f72368fe31f in html_g_cclosure_marshal_BOOLEAN__OBJECT () from 
/usr/lib/libgtkhtml-3.14.so.19
#7  0x00007f723114cbcf in IA__g_closure_invoke (closure=0xc07af0, 
return_value=0x7fff4377ad70, n_param_values=2, param_values=0x7fff4377ab50, 
invocation_hint=0x7fff4377aa30)
    at /build/buildd/glib2.0-2.16.3/gobject/gclosure.c:490
#8  0x00007f72311606bc in signal_emit_unlocked_R (node=0xb72c20, detail=0, 
instance=0xb965d0, emission_return=0x7fff4377ad70, 
instance_and_params=0x7fff4377ab50)
    at /build/buildd/glib2.0-2.16.3/gobject/gsignal.c:2440
#9  0x00007f7231161de6 in IA__g_signal_emit_valist (instance=0xb965d0, 
signal_id=<value optimized out>, detail=0, var_args=0x7fff4377add0) at 
/build/buildd/glib2.0-2.16.3/gobject/gsignal.c:2209
#10 0x00007f7231162483 in IA__g_signal_emit (instance=0x7f7222a22d60, 
signal_id=1, detail=592891) at 
/build/buildd/glib2.0-2.16.3/gobject/gsignal.c:2243
#11 0x00007f72368c2f9e in ?? () from /usr/lib/libgtkhtml-3.14.so.19
#12 0x00007f72368fe31f in html_g_cclosure_marshal_BOOLEAN__OBJECT () from 
/usr/lib/libgtkhtml-3.14.so.19
#13 0x00007f723114cbcf in IA__g_closure_invoke (closure=0xdc0110, 
return_value=0x7fff4377b440, n_param_values=2, param_values=0x7fff4377b220, 
invocation_hint=0x7fff4377b100)
    at /build/buildd/glib2.0-2.16.3/gobject/gclosure.c:490
#14 0x00007f72311606bc in signal_emit_unlocked_R (node=0xdadd40, detail=0, 
instance=0xdce000, emission_return=0x7fff4377b440, 
instance_and_params=0x7fff4377b220)
    at /build/buildd/glib2.0-2.16.3/gobject/gsignal.c:2440
#15 0x00007f7231161de6 in IA__g_signal_emit_valist (instance=0xdce000, 
signal_id=<value optimized out>, detail=0, var_args=0x7fff4377b4a0) at 
/build/buildd/glib2.0-2.16.3/gobject/gsignal.c:2209
#16 0x00007f7231162483 in IA__g_signal_emit (instance=0x7f7222a22d60, 
signal_id=1, detail=592891) at 
/build/buildd/glib2.0-2.16.3/gobject/gsignal.c:2243
#17 0x00007f72368ee704 in ?? () from /usr/lib/libgtkhtml-3.14.so.19
#18 0x00007f72368ecfd8 in ?? () from /usr/lib/libgtkhtml-3.14.so.19
#19 0x00007f72368f2b4c in ?? () from /usr/lib/libgtkhtml-3.14.so.19
#20 0x00007f72368f2bf8 in html_engine_flush () from 
/usr/lib/libgtkhtml-3.14.so.19
#21 0x00007f722a824ad9 in emhs_sync_flush (stream=<value optimized out>) at 
em-html-stream.c:127
#22 0x00007f722a832751 in emss_process_message (msg=0x41cb6ef0) at 
em-sync-stream.c:80
#23 0x00007f7230cb1262 in IA__g_main_context_dispatch (context=0x6663b0) at 
/build/buildd/glib2.0-2.16.3/glib/gmain.c:2009
#24 0x00007f7230cb4516 in g_main_context_iterate (context=0x6663b0, block=1, 
dispatch=1, self=<value optimized out>) at 
/build/buildd/glib2.0-2.16.3/glib/gmain.c:2642
#25 0x00007f7230cb47d7 in IA__g_main_loop_run (loop=0x6ab220) at 
/build/buildd/glib2.0-2.16.3/glib/gmain.c:2850
#26 0x00007f7235248466 in bonobo_main () from /usr/lib/libbonobo-2.so.0
#27 0x0000000000417485 in main (argc=<value optimized out>, 
argv=0x7fff4377bab8) at main.c:782
(gdb) frame 3
#3  0x00007f72264b7d68 in itip_view_set_summary (view=<value optimized out>, 
summary=0x160dfd0 "Balabit Basketball Association G�lam�rk&#337;z�s") at 
itip-view.c:597
597     in itip-view.c
(gdb) p priv
$9 = (ItipViewPrivate *) 0x16b2070
(gdb) p priv->summary
$10 = 0x16b2880 "Balabit Basketball Association G�lam�rk&#337;z�s"

The glib g_markup_printf_escaped() function crashes if it receives a
non-utf8 string.

I see two bugs:
  1) glib crashes for non-utf8 strings (I'm attaching a test program)
  2) evolution does not convert invitations in latin2 to utf8 before passing 
them to utf8-expecting functions.

I'm filing this to evolution as that's the application that is affected
for me.

Versions:

$ dpkg -l evolution\* libglib2.0-0\*
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Installed/Config-f/Unpacked/Failed-cfg/Half-inst/t-aWait/T-pend
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
||/ Name                                          Version                       
                Description
+++-=============================================-=============================================-==========================================================================================================
ii  evolution                                     2.22.1.1-0ubuntu2             
                groupware suite with mail client and organizer
ii  evolution-common                              2.22.1.1-0ubuntu2             
                architecture independent files for Evolution
ii  evolution-data-server                         2.22.1-0ubuntu2.1             
                evolution database backend server
ii  evolution-data-server-common                  2.22.1-0ubuntu2.1             
                architecture independent files for Evolution Data Server
un  evolution-data-server-dbg                     <none>                        
                (no description available)
un  evolution-data-server1.2                      <none>                        
                (no description available)
un  evolution-dbg                                 <none>                        
                (no description available)
ii  evolution-dbgsym                              2.22.1.1-0ubuntu2             
                debug symbols for package evolution
ii  evolution-exchange                            2.22.1-0ubuntu1               
                Exchange plugin for the Evolution groupware suite
un  evolution-jescs                               <none>                        
                (no description available)
ii  evolution-plugins                             2.22.1-0ubuntu3.1             
                standard plugins for Evolution
un  evolution-plugins-experimental                <none>                        
                (no description available)
un  evolution-scalix                              <none>                        
                (no description available)
ii  evolution-webcal                              2.21.92-0ubuntu1              
                webcal: URL handler for GNOME and Evolution
ii  libglib2.0-0                                  2.16.3-1ubuntu1               
                The GLib library of C routines
un  libglib2.0-0-dbg                              <none>                        
                (no description available)
ii  libglib2.0-0-dbgsym                           2.16.3-1ubuntu1               
                debug symbols for package libglib2.0-0

** Affects: evolution (Ubuntu)
     Importance: Undecided
         Status: Invalid

-- 
evolution crashes on non-utf8 ical entries
https://bugs.launchpad.net/bugs/229916
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evolution in ubuntu.

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

Reply via email to