220346 - Mozilla Crash with IMAP [@ nsUInt32Array::GetAt ]

Status: RESOLVED FIXED

(MailNews Core :: Backend, defect)

Description

[C. Mourad Jaber]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; fr-FR; rv:1.4) Gecko/20030630
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; fr-FR; rv:1.4) Gecko/20030630

Hi,
I have a IMAP mail server ( exim ) on my personal machine ( on ADSL ).
As every day ip address change, I have a dyndns domain name to stay in touch
with my server.
Every time one IMAP folder is open ( with mail lis panel on it ), and the ip
change, mozilla report a connection timeout even if the dyndns domain is
refreshed ( is it a bug into a dns cache ? ) and if I try to see a particular
mail in that circonstances, mozilla seem to try to connect ( log is animated )
and after 1 or 2 minutes, mozilla report connection timeout or completely crash...

Reproducible: Sometimes

Steps to Reproduce:
1.open IMAP mailbox
2.change ip address of the server
3.try to open a mail into an IMAP folder

Actual Results:  
after a long time mozilla report server connection Timeout or crash 

Expected Results:  
reconnect to the dns name and re-open IMAP connection to open message

Comment 1

[C. Mourad Jaber]

This bug already exists into mozilla 1.3.1 ( mandrake security update version )

Comment 2

[Adam Hauner]

Could you retest it with 1.5 RC or with actual nightbuild?

Comment 3

[Matthias Versen [:Matti]]

no, please try a Nightly build (1.6a)
They rewrote the whole DNS part (and disabled the caching)
This DNS reqrite is not in 1.5 branch

Comment 4

[C. Mourad Jaber]

I just try the nightly build 1.6a and I've got the same result but faster....
see the feedback agent report : TB23903745E and TB23903619 ( Program Exception )
for more informations...

Comment 5

[Simon Montagu :smontagu]

Stack trace from TB23903745E:

nsUInt32Array::GetAt()
nsMsgDBView::ApplyCommandToIndicesWithFolder()
nsMsgDBView::PerformActionOnJunkMsgs()
nsMsgDBView::OnMessageClassified()
nsBayesianFilter::observeMessage()
MessageObserver::analyzeTokens()
TokenStreamListener::OnStopRequest()
nsStreamConverter::OnStopRequest()
nsStreamListenerTee::OnStopRequest()
nsOnStopRequestEvent0::HandleEvent()
nsStreamListenerEvent0::HandlePLEvent()
PL_HandleEvent()
PL_ProcessPendingEvents()
nsEventQueueImpl::ProcessPendingEvents()
event_processor_callback()
our_gdk_io_invoke()
libglib-1.2.so.0 + 0x117d6 (0x402cd7d6)
libglib-1.2.so.0 + 0x143ee (0x402d03ee)
libglib-1.2.so.0 + 0x14199 (0x402d0199)
libglib-1.2.so.0 + 0x13174 (0x402cf174)

Comment 6

[Simon Montagu :smontagu]

Stack from TB23903619 (seems to be a different crash):

0x08e237ac
nsHTMLIFrameElement::~nsHTMLIFrameElement()
nsHTMLIFrameElement::Release()
nsGenericHTMLContainerElement::~nsGenericHTMLContainerElement()
nsHTMLDivElement::~nsHTMLDivElement()
nsGenericElement::Release()
nsHTMLDivElement::Release()
nsGenericHTMLContainerElement::~nsGenericHTMLContainerElement()
nsHTMLBodyElement::~nsHTMLBodyElement()
nsGenericElement::Release()
nsHTMLBodyElement::Release()
SinkContext::End()
HTMLContentSink::~HTMLContentSink()
HTMLContentSink::Release()
nsParser::~nsParser()
nsParser::Release()
nsCOMPtr::assign_with_AddRef()
CSSLoaderImpl::SheetComplete()
CSSLoaderImpl::ParseSheet()
SheetLoadData::OnStreamComplete()
nsUnicharStreamLoader::OnStopRequest()
nsJARChannel::OnStopRequest()
nsInputStreamPump::OnStateStop()
nsInputStreamPump::OnInputStreamReady()
nsInputStreamReadyEvent::EventHandler()
PL_HandleEvent()
PL_ProcessPendingEvents()
nsEventQueueImpl::ProcessPendingEvents()
event_processor_callback()
our_gdk_io_invoke()
libglib-1.2.so.0 + 0x117d6 (0x402cd7d6)
libglib-1.2.so.0 + 0x143ee (0x402d03ee)
libglib-1.2.so.0 + 0x14199 (0x402d0199)
libglib-1.2.so.0 + 0x13174 (0x402cf174) 

Comment 7

[timeless]

nsUInt32Array::GetAt
[c:/builds/seamonkey/mozilla/mailnews/base/util/nsUInt32Array.cpp line 144]
nsMsgDBView::CopyMessages
[c:/builds/seamonkey/mozilla/mailnews/base/src/nsMsgDBView.cpp line 2173]
nsMsgDBView::ApplyCommandToIndicesWithFolder
[c:/builds/seamonkey/mozilla/mailnews/base/src/nsMsgDBView.cpp line 2213]
nsMsgDBView::PerformActionOnJunkMsgs
[c:/builds/seamonkey/mozilla/mailnews/base/src/nsMsgDBView.cpp line 2764]
nsMsgDBView::OnMessageClassified
[c:/builds/seamonkey/mozilla/mailnews/base/src/nsMsgDBView.cpp line 2732]

Comment 8

[David :Bienvenu]

taking

Comment 9

[David :Bienvenu]

Attachment: proposed fix

check that the view index is valid

Comment 10

[Scott MacGregor]

Comment on attachment 143534 [details] [diff] [review]
proposed fix

this could be a good 1.7b candidate

Comment 11

[David :Bienvenu]

Comment on attachment 143534 [details] [diff] [review]
proposed fix

yes, it's a pretty safe fix.

Comment 12

[Greg K.]

*** Bug 313103 has been marked as a duplicate of this bug. ***

Comment 13

[Greg K.]

*** Bug 315922 has been marked as a duplicate of this bug. ***

Comment 14

[Greg K.]

Crash occurs across platforms, setting All/All.

Comment 15

[Greg K.]

This got 1.7b approval, was it checked in?

Comment 16

[David :Bienvenu]

yes, afaik, it was. Is the same crash still occurring on trunk builds?

Comment 17

[timeless]

sure looks that way, i'd say those two bugs were poorly duped. if the bug was fixed as it claims in 2004, then bugs opened in late 2005 shouldn't be resolved as duplicates.

Comment 18

[Greg K.]

(In reply to comment #17)
> sure looks that way, i'd say those two bugs were poorly duped. if the bug was
> fixed as it claims in 2004, then bugs opened in late 2005 shouldn't be resolved
> as duplicates.

Whoops, my error. I completely missed the date differential here.

The crash is still happening (as evinced by the newer bugs) on the 1.5 branch, at least, if not the trunk.