Comment 4 for bug 608085

I see the same bug, but a slightly different backtrace:

/home/markus/.evolution/cache/tmp/tnef-attachment-tzTE6x/calendar.vcf
*** buffer overflow detected ***: evolution terminated
======= Backtrace: =========
/lib/libc.so.6(__fortify_fail+0x37)[0x7f225cd56207]
/lib/libc.so.6(+0xfe0c0)[0x7f225cd550c0]
/usr/lib/libytnef.so.0(DecompressRTF+0x3c)[0x7f224e96c4ec]
/usr/lib/evolution/2.28/plugins/liborg-gnome-tnef-attachments.so(saveVCalendar+0x3f3)[0x7f224eb841b3]
/usr/lib/evolution/2.28/plugins/liborg-gnome-tnef-attachments.so(processTnef+0x28d)[0x7f224eb8490d]
/usr/lib/evolution/2.28/plugins/liborg-gnome-tnef-attachments.so(org_gnome_format_tnef+0xfc)[0x7f224eb84d8c]
/usr/lib/evolution/2.28/libeutil.so.0(+0x2b192)[0x7f2266e79192]
/usr/lib/evolution/2.28/components/libevolution-mail.so(+0x37c72)[0x7f2252385c72]
/usr/lib/evolution/2.28/components/libevolution-mail.so(+0x3b1d7)[0x7f22523891d7]
/usr/lib/evolution/2.28/libevolution-mail-shared.so.0(em_format_part_as+0xfd)[0x7f22520fe41d]
/usr/lib/evolution/2.28/libevolution-mail-shared.so.0(em_format_part+0x52)[0x7f22520fe5e2]
/usr/lib/evolution/2.28/libevolution-mail-shared.so.0(+0x54302)[0x7f22520ff302]
/usr/lib/evolution/2.28/libevolution-mail-shared.so.0(em_format_part_as+0x15e)[0x7f22520fe47e]
/usr/lib/evolution/2.28/libevolution-mail-shared.so.0(em_format_part+0x52)[0x7f22520fe5e2]
/usr/lib/evolution/2.28/components/libevolution-mail.so(+0x3e0ee)[0x7f225238c0ee]
/usr/lib/evolution/2.28/components/libevolution-mail.so(+0x3ce60)[0x7f225238ae60]
/usr/lib/evolution/2.28/libevolution-mail-shared.so.0(+0x691df)[0x7f22521141df]
/lib/libglib-2.0.so.0(+0x69a5f)[0x7f225d043a5f]
/lib/libglib-2.0.so.0(+0x67b84)[0x7f225d041b84]
/lib/libpthread.so.0(+0x69ca)[0x7f2263c569ca]
/lib/libc.so.6(clone+0x6d)[0x7f225cd3d6fd]
======= Memory map: ========
00400000-00420000 r-xp 00000000 08:01 5900579 /usr/bin/evolution
00620000-00621000 r--p 00020000 08:01 5900579 /usr/bin/evolution
00621000-00625000 rw-p 00021000 08:01 5900579 /usr/bin/evolution
025af000-02fad000 rw-p 00000000 00:00 0 [heap]
7f2233424000-7f2233485000 rw-p 00000000 00:00 0
7f2233485000-7f2233487000 r-xp 00000000 08:01 5906252 /usr/lib/gconv/ISO8859-1.so
7f2233487000-7f2233686000 ---p 00002000 08:01 5906252 /usr/lib/gconv/ISO8859-1.so
7f2233686000-7f2233687000 r--p 00001000 08:01 5906252 /usr/lib/gconv/ISO8859-1.so
7f2233687000-7f2233688000 rw-p 00002000 08:01 5906252 /usr/lib/gconv/ISO8859-1.so
7f2233688000-7f2233689000 ---p 00000000 00:00 0
7f2233689000-7f2233e89000 rw-p 00000000 00:00 0
7f223421b000-7f223426a000 r--p 00000000 08:01 29963 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSansMono.ttf
7f223426a000-7f2234282000 r-xp 00000000 08:01 5900545 /usr/lib/evolution/2.28/plugins/liborg-gnome-groupwise-features.so
7f2234282000-7f2234481000 ---p 00018000 08:01 5900545 /usr/lib/evolution/2.28/plugins/liborg-gnome-groupwise-features.so
7f2234481000-7f2234482000 r--p 00017000 08:01 5900545 /usr/lib/evolution/2.28/plugins/liborg-gnome-groupwise-features.so
7f2234482000-7f2234483000 rw-p 00018000 08:01 5900545 /usr/lib/evolution/2.28/plugins/liborg-gnome-groupwise-features.so
7f2234483000-7f2234489000 r-xp 00000000 08:01 5900629 /usr/lib/evolution/2.28/plugins/liborg-gnome-mail-notification.so
7f2234489000-7f2234688000 ---p 00006000 08:01 5900629 /usr/lib/evolution/2.28/plugins/liborg-gnome-mail-notification.so
7f2234688000-7f2234689000 r--p 00005000 08:01 5900629 /usr/lib/evolution/2.28/plugins/liborg-gnome-mail-notification.so
7f2234689000-7f223468a000 rw-p 00006000 08:01 5900629 /usr/lib/evolution/2.28/plugins/liborg-gnome-mail-notification.so
7f223468a000-7f2234690000 r-xp 00000000 08:01 5907979 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-gif.so
7f2234690000-7f223488f000 ---p 00006000 08:01 5907979 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-gif.so
7f223488f000-7f2234890000 r--p 00005000 08:01 5907979 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-gif.so
7f2234890000-7f2234891000 rw-p 00006000 08:01 5907979 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-gif.so
7f2234891000-7f2234892000 ---p 00000000 00:00 0
7f2234892000-7f2235092000 rw-p 00000000 00:00 0
7f2235092000-7f223509a000 r-xp 00000000 08:01 5900561 /usr/lib/evolution/2.28/plugins/liborg-gnome-evolution-google.so
7f223509a000-7f2235299000 ---p 00008000 08:01 5900561 /usr/lib/evolution/2.28/plugins/liborg-gnome-evolution-google.so
7f2235299000-7f223529a000 r--p 00007000 08:01 5900561 /usr/lib/evolution/2.28/plugins/liborg-gnome-evolution-google.so
7f223529a000-7f223529b000 rw-p 00008000 08:01 5900561 /usr/lib/evolution/2.28/plugins/liborg-gnome-evolution-google.so
7f223529b000-7f22352a9000 r-xp 00000000 08:01 5898422 /usr/lib/libdbusmenu-glib.so.1.0.6
7f22352a9000-7f22354a9000 ---p 0000e000 08:01 5898422 /usr/lib/libdbusmenu-glib.so.1.0.6
7f22354a9000-7f22354aa000 r--p 0000e000 08:01 5898422 /usr/lib/libdbusmenu-glib.so.1.0.6
7f22354aa000-7f22354ab000 rw-p 0000f000 08:01 5898422 /usr/lib/libdbusmenu-glib.so.1.0.6
7f22354ab000-7f22354ba000 r-xp 00000000 08:01 5901687 /usr/lib/libindicate.so.4.0.2
7f22354ba000-7f22356b9000 ---p 0000f000 08:01 5901687 /usr/lib/libindicate.so.4.0.2
7f22356b9000-7f22356ba000 r--p 0000e000 08:01 5901687 /usr/lib/libindicate.so.4.0.2
7f22356ba000-7f22356bb000 rw-p 0000f000 08:01 5901687 /usr/lib/libindicate.so.4.0.2
7f22356bb000-7f22356c2000 r-xp 00000000 08:01 5904090 /usr/lib/evolution/2.28/plugins/liborg-freedesktop-evolution-indicator.so
7f22356c2000-7f22358c1000 ---p 00007000 08:01 5904090 /usr/lib/evolution/2.28/plugins/liborg-freedesktop-evolution-indicator.soAborted

And the calendar file that caused this:
markus@markus-desktop:~$ cat /home/markus/.evolution/cache/tmp/tnef-attachment-tzTE6x/calendar.vcf
BEGIN:VCALENDAR
METHOD:REQUEST
VERSION:2.0
BEGIN:VEVENT
UID:040000008200E00074C5B7101A82E00800000000C0E706E3902ECB01000000000000000010000000008B6D1FB78A264BB76921A932BADD7B
SEQUENCE:0
ATTENDEE;PARTSTAT=NEEDS-ACTION;ROLE=REQ-PARTICIPANT;RSVP=TRUE;CN="Markus Gonaus [<email address hidden>]":MAILTO:Markus Gonaus [<email address hidden>]
SUMMARY:Besprechung: xxxxxxcensored for privacyxxxxxx