GSlice crash, possibly multithreaded race condition
I just received this crash of an evolution-calendar-factory process (from evolution-data-server), which I do not know how to reproduce, but which might be interesting for you. There are two threads accessing the same SoupSession and GSlice claims that libsoup is trying to free non-allocated memory in both of them. This is with libsoup 2.66.2 (not the latest. I'm sorry).
GSlice: MemChecker: attempt to release non-allocated block: 0x7fe794015e00 size=48
GSlice: MemChecker: attempt to release non-allocated block: 0x7fe794006250 size=128
Thread 24 (Thread 0x7fe7eeffd700 (LWP 13495)):
#0 0x00007fe88346a696 in waitpid () at /lib64/libc.so.6
#1 0x00007fe8833e7e07 in do_system () at /lib64/libc.so.6
#2 0x00007fe8841fa6ae in bugbuddy_segv_handle (signum=6) at gnome-segvhanlder.c:180
#3 0x00007fe8833daf00 in <signal handler called> () at /lib64/libc.so.6
#4 0x00007fe8833dae75 in raise () at /lib64/libc.so.6
#5 0x00007fe8833c5895 in abort () at /lib64/libc.so.6
#6 0x00007fe883e8f0bc in g_slice_free1 (mem_size=48, mem_block=0x7fe794015e00) at ../glib/gslice.c:1108
#7 0x00007fe8832cb7bf in process_set_cookie_header (msg=0x7fe7d4003990 [ESoapMessage], user_data=0x7fe7a0004f00) at ../libsoup/soup-cookie-jar.c:682
#8 0x00007fe883f665d0 in g_cclosure_marshal_VOID__VOID (closure=0x7fe7d4007b60, return_value=0x0, n_param_values=1, param_values=0x7fe7eeffc290, invocation_hint=0x7fe7eeffc1d0, marshal_data=0x7fe8832cb770 <process_set_cookie_header>) at ../gobject/gmarshal.c:117
#9 0x00007fe883f63232 in g_closure_invoke (closure=0x7fe7d4007b60, return_value=0x0, n_param_values=1, param_values=0x7fe7eeffc290, invocation_hint=0x7fe7eeffc1d0) at ../gobject/gclosure.c:810
#10 0x00007fe883f815a1 in signal_emit_unlocked_R (node=0x7fe84c00bff0, detail=0, instance=0x7fe7d4003990, emission_return=0x0, instance_and_params=0x7fe7eeffc290) at ../gobject/gsignal.c:3635
#11 0x00007fe883f80893 in g_signal_emit_valist (instance=0x7fe7d4003990, signal_id=311, detail=0, var_args=0x7fe7eeffc538) at ../gobject/gsignal.c:3391
#12 0x00007fe883f80e16 in <emit signal ??? on instance 0x7fe7d4003990 [ESoapMessage]> (instance=0x7fe7d4003990, signal_id=311, detail=0) at ../gobject/gsignal.c:3447
#13 0x00007fe8832d4963 in soup_message_got_headers (msg=msg@entry=0x7fe7d4003990 [ESoapMessage]) at ../libsoup/soup-message.c:1126
#14 0x00007fe8832d975e in io_read (msg=msg@entry=0x7fe7d4003990 [ESoapMessage], blocking=blocking@entry=1, cancellable=cancellable@entry=0x7fe7d4006f40 [GCancellable], error=error@entry=0x7fe7eeffc6c0) at ../libsoup/soup-message-io.c:710
#15 0x00007fe8832d9a56 in io_run_until (msg=msg@entry=0x7fe7d4003990 [ESoapMessage], blocking=blocking@entry=1, read_state=read_state@entry=SOUP_MESSAGE_IO_STATE_DONE, write_state=write_state@entry=SOUP_MESSAGE_IO_STATE_DONE, cancellable=cancellable@entry=0x7fe7d4006f40 [GCancellable], error=error@entry=0x7fe7eeffc710) at ../libsoup/soup-message-io.c:986
#16 0x00007fe8832da514 in io_run (msg=0x7fe7d4003990 [ESoapMessage], blocking=1) at ../libsoup/soup-message-io.c:1057
#17 0x00007fe8832da745 in soup_message_io_client (item=item@entry=0x7fe7d42c21b0, iostream=<optimized out>, async_context=async_context@entry=0x0, get_headers_cb=get_headers_cb@entry=0x7fe8832d6aa0 <get_request_headers>, parse_headers_cb=parse_headers_cb@entry=0x7fe8832d6840 <parse_response_headers>, header_data=header_data@entry=0x7fe7d42c21b0, completion_cb=0x7fe8832eaee0 <message_completed>, completion_data=0x7fe7d42c21b0) at ../libsoup/soup-message-io.c:1237
#18 0x00007fe8832d6e78 in soup_message_send_request (item=item@entry=0x7fe7d42c21b0, completion_cb=completion_cb@entry=0x7fe8832eaee0 <message_completed>, user_data=user_data@entry=0x7fe7d42c21b0) at ../libsoup/soup-message-client-io.c:161
#19 0x00007fe8832c636a in soup_connection_send_request (conn=<optimized out>, item=item@entry=0x7fe7d42c21b0, completion_cb=completion_cb@entry=0x7fe8832eaee0 <message_completed>, user_data=user_data@entry=0x7fe7d42c21b0) at ../libsoup/soup-connection.c:753
#20 0x00007fe8832e58c4 in soup_session_send_queue_item (session=session@entry=0x7fe7a00072b0 [SoupSessionSync], item=item@entry=0x7fe7d42c21b0, completion_cb=completion_cb@entry=0x7fe8832eaee0 <message_completed>) at ../libsoup/soup-session.c:1338
#21 0x00007fe8832ea9dc in soup_session_process_queue_item (loop=<optimized out>, should_cleanup=<optimized out>, item=<optimized out>, session=<optimized out>) at ../libsoup/soup-session.c:2005
#22 0x00007fe8832ea9dc in soup_session_process_queue_item (session=<optimized out>, item=0x7fe7d42c21b0, should_cleanup=<optimized out>, loop=<optimized out>) at ../libsoup/soup-session.c:1964
#23 0x00007fe8832eaec2 in soup_session_real_send_message (session=0x7fe7a00072b0 [SoupSessionSync], msg=0x7fe7d4003990 [ESoapMessage]) at ../libsoup/soup-session.c:2236
#24 0x00007fe875a25162 in e_ews_notification_subscribe_folder_sync (notification=0x7fe7a0005830 [EEwsNotification], folders=0x1ead000 = {...}, subscription_id=0x7fe7eeffc928, cancellable=0x7fe7e0001330 [GCancellable]) at ../evolutionews/src/server/e-ews-notification.c:362
#25 0x00007fe875a26795 in e_ews_notification_get_events_thread (user_data=0x1eca990) at ../evolutionews/src/server/e-ews-notification.c:901
#26 0x00007fe883e9d957 in g_thread_proxy (data=0x7fe7e0045d80) at ../glib/gthread.c:805
#27 0x00007fe882ea75a2 in start_thread () at /lib64/libpthread.so.0
#28 0x00007fe88349e303 in clone () at /lib64/libc.so.6
Thread 23 (Thread 0x7fe7a5ffb700 (LWP 13244)):
#0 0x00007fe88346a696 in waitpid () at /lib64/libc.so.6
#1 0x00007fe8833e7e07 in do_system () at /lib64/libc.so.6
#2 0x00007fe8841fa6ae in bugbuddy_segv_handle (signum=6) at gnome-segvhanlder.c:180
#3 0x00007fe8833daf00 in <signal handler called> () at /lib64/libc.so.6
#4 0x00007fe8833dae75 in raise () at /lib64/libc.so.6
#5 0x00007fe8833c5895 in abort () at /lib64/libc.so.6
#6 0x00007fe883e8f0bc in g_slice_free1 (mem_size=128, mem_block=0x7fe794006250) at ../glib/gslice.c:1108
#7 0x00007fe883f867b8 in g_type_free_instance (instance=0x7fe7940062a0) at ../gobject/gtype.c:1943
#8 0x00007fe883f6fffb in g_object_unref (_object=0x7fe7940062a0) at ../gobject/gobject.c:3541
#9 0x00007fe8832d8a27 in soup_message_io_cleanup (msg=msg@entry=0x7fe7940035d0 [ESoapMessage]) at ../libsoup/soup-message-io.c:115
#10 0x00007fe8832d8c53 in soup_message_io_finished (msg=msg@entry=0x7fe7940035d0 [ESoapMessage]) at ../libsoup/soup-message-io.c:182
#11 0x00007fe8832da588 in io_run (msg=0x7fe7940035d0 [ESoapMessage], blocking=1) at ../libsoup/soup-message-io.c:1077
#12 0x00007fe8832da745 in soup_message_io_client (item=item@entry=0x7fe794018be0, iostream=<optimized out>, async_context=async_context@entry=0x0, get_headers_cb=get_headers_cb@entry=0x7fe8832d6aa0 <get_request_headers>, parse_headers_cb=parse_headers_cb@entry=0x7fe8832d6840 <parse_response_headers>, header_data=header_data@entry=0x7fe794018be0, completion_cb=0x7fe8832eaee0 <message_completed>, completion_data=0x7fe794018be0) at ../libsoup/soup-message-io.c:1237
#13 0x00007fe8832d6e78 in soup_message_send_request (item=item@entry=0x7fe794018be0, completion_cb=completion_cb@entry=0x7fe8832eaee0 <message_completed>, user_data=user_data@entry=0x7fe794018be0) at ../libsoup/soup-message-client-io.c:161
#14 0x00007fe8832c636a in soup_connection_send_request (conn=<optimized out>, item=item@entry=0x7fe794018be0, completion_cb=completion_cb@entry=0x7fe8832eaee0 <message_completed>, user_data=user_data@entry=0x7fe794018be0) at ../libsoup/soup-connection.c:753
#15 0x00007fe8832e58c4 in soup_session_send_queue_item (session=session@entry=0x7fe7a00072b0 [SoupSessionSync], item=item@entry=0x7fe794018be0, completion_cb=completion_cb@entry=0x7fe8832eaee0 <message_completed>) at ../libsoup/soup-session.c:1338
#16 0x00007fe8832ea9dc in soup_session_process_queue_item (loop=<optimized out>, should_cleanup=<optimized out>, item=<optimized out>, session=<optimized out>) at ../libsoup/soup-session.c:2005
#17 0x00007fe8832ea9dc in soup_session_process_queue_item (session=<optimized out>, item=0x7fe794018be0, should_cleanup=<optimized out>, loop=<optimized out>) at ../libsoup/soup-session.c:1964
#18 0x00007fe8832eaec2 in soup_session_real_send_message (session=0x7fe7a00072b0 [SoupSessionSync], msg=0x7fe7940035d0 [ESoapMessage]) at ../libsoup/soup-session.c:2236
#19 0x00007fe875a256b4 in e_ews_notification_unsubscribe_folder_sync (notification=0x7fe7a0005830 [EEwsNotification], subscription_id=0x7fe794004860 "aaa") at ../evolutionews/src/server/e-ews-notification.c:478
#20 0x00007fe875a26901 in e_ews_notification_get_events_thread (user_data=0x7fe7a00044b0) at ../evolutionews/src/server/e-ews-notification.c:930
#21 0x00007fe883e9d957 in g_thread_proxy (data=0x7fe7a0005950) at ../glib/gthread.c:805
#22 0x00007fe882ea75a2 in start_thread () at /lib64/libpthread.so.0
#23 0x00007fe88349e303 in clone () at /lib64/libc.so.6