Folder-filtered query crashes Tracker

[humdinger]

This is hrev58006, 64bit.

I tried searching in just one folder for emails with a subject containing "Tracker". Crashed with:

thread 805: w>Subject contains Tracker - Au 
state: Call (getNumAvailable() == 0)

Frame		IP			Function Name
-----------------------------------------------
00000000	0x1a9c5b4b0d7	_kern_debugger + 0x7 
	Disassembly:
		_kern_debugger:
		0x000001a9c5b4b0d0:   48c7c0eb000000  mov $0xeb, %rax
		0x000001a9c5b4b0d7:             0f05  syscall <--

0x7fc827774010	0x1a9c5b51d90	__assert_fail + 0x60 
0x7fc827774020	0x1a9c5bd454e	BPrivate::superblock::getBlock() + 0x8e 
0x7fc827774070	0x1a9c5bd46e9	BPrivate::hoardHeap::findAvailableSuperblock(int, BPrivate::block*&, BPrivate::processHeap*) + 0x129 
0x7fc8277740c0	0x1a9c5bd28bd	BPrivate::threadHeap::malloc(unsigned long) + 0x6d 
0x7fc8277740f0	0x1a9c5bd30cc	malloc + 0x8c 
0x7fc827774110	0x1a9c5bd61db	operator new(unsigned long) + 0x1b 
0x7fc827774120	0x1a9c5bd6224	operator new[](unsigned long, std::nothrow_t const&) + 0x4 
0x7fc827774150	0x231b67a536f	BPath::_SetPath(char const*) + 0x2f 
0x7fc827774580	0x231b67a548e	BPath::SetTo(entry_ref const*) + 0x4e 
0x7fc8277745a0	0x231b67a54e7	BPath::BPath(entry_ref const*) + 0x27 
0x7fc827774630	0x10529aefa2c	FolderFilterFunction(entry_ref const*, entry_ref const*) + 0x4c 
0x7fc827774660	0x10529aefb2a	BPrivate::QueryRefFilter::PassThroughDirectoryFilters(entry_ref const*) const + 0x4a 
0x7fc8277746e0	0x10529acf59a	BPrivate::BPoseView::ShouldShowPose(BPrivate::Model const*, BPrivate::PoseInfo const*) + 0x6a 
0x7fc827774770	0x10529adb47f	BPrivate::BPoseView::FilterPose(BPrivate::BPose*) + 0x7f 
0x7fc827774850	0x10529ae80ed	BPrivate::BPoseView::CreatePoses(BPrivate::Model**, BPrivate::PoseInfo*, int, BPrivate::BPose**, bool, int*, BRect*, bool) + 0x4dd 
0x7fc827774980	0x10529ae88c9	BPrivate::BPoseView::MessageReceived(BMessage*) + 0x2f9 
0x7fc827774a10	0x231b676f4d3	BWindow::task_looper() + 0x1d3 
0x7fc827774a30	0x231b66b056b	BLooper::_task0_(void*) + 0x1b 
0x7fc827774a50	0x1a9c5b49de7	thread_entry + 0x17 
00000000	0x7f1ddac77258	commpage_thread_exit + 0 

Full debug report attached.

[bipolar]

I had a similar crash a couple of times, but while just using drill-down menues, or normal Tracker windows in list-view mode with many files.

I have since been trying to catch it while using LD_PRELOAD=libroot_debug.so /system/Tracker, but that seems to make the bug too shy to show up again :-(

Reading from similar allocator-related crashes, the suggestion seems to be to try to get more info via using:

launch_roster stop x-vnd.be-trak
LD_PRELOAD=libroot_debug.so MALLOC_DEBUG=g /system/Tracker

[bipolar]

#15890 is the one I reopened for the similar crash I was talking about.

[humdinger]

Annoyingly, today I cannot reproduce...