246439 - Crash checking for new IMAP messages [@ OnCreateServerSourceFolderPathString]

Status: VERIFIED FIXED

(Thunderbird :: General, defect)

Description

[Iain MacDonnell]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040606 Firefox/0.8.0+
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040606 Firefox/0.8.0+


Yet another aviary branch crash - looks like it was doing the check for new
messages:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1229213568 (LWP 1124)]
0xb489567d in nsImapProtocol::OnCreateServerSourceFolderPathString
(this=0x88605b8) at nsImapProtocol.cpp:5303
/export/stuff/mozilla/thunderbird-20040609/mozilla/mailnews/imap/src/nsImapProtocol.cpp:5303:181652:beg:0xb489567d
(gdb) where
#0  0xb489567d in nsImapProtocol::OnCreateServerSourceFolderPathString
(this=0x88605b8) at nsImapProtocol.cpp:5303
#1  0xb488a0bf in nsImapProtocol::CanHandleUrl (this=0x88605b8,
aImapUrl=0x9cf1580, aCanRunUrl=0xbfffd208, hasToWait=0xbfffd204) at
nsImapProtocol.cpp:1699
#2  0xb484887e in nsImapIncomingServer::GetImapConnection (this=0x8732d18,
aEventQueue=0x80f9df0, aImapUrl=0x9cf1580, aImapConnection=0xbfffd290) at
nsImapIncomingServer.cpp:720
#3  0xb48476a0 in nsImapIncomingServer::GetImapConnectionAndLoadUrl
(this=0x8732d18, aClientEventQueue=0x80f9df0, aImapUrl=0x9cf1580, aConsumer=0x0)
at nsImapIncomingServer.cpp:438
#4  0xb48bbb11 in nsImapService::GetImapConnectionAndLoadUrl (this=0x8732850,
aClientEventQueue=0x80f9df0, aImapUrl=0x9cf1580, aConsumer=0x0, aURL=0xbfffd4d0)
at nsImapService.cpp:2283
#5  0xb48b7e2b in nsImapService::UpdateFolderStatus (this=0x8732850,
aClientEventQueue=0x80f9df0, aImapMailFolder=0x878b968, aUrlListener=0x0,
aURL=0xbfffd4d0) at nsImapService.cpp:1387
#6  0xb4860188 in nsImapMailFolder::UpdateStatus (this=0x878b940, aListener=0x0,
aMsgWindow=0x0) at nsImapMailFolder.cpp:1217
#7  0xb485607f in nsImapIncomingServer::GetNewMessagesForNonInboxFolders
(this=0x8732d18, aFolder=0x878b968, aWindow=0x0, forceAllFolders=0,
performingBiff=1) at nsImapIncomingServer.cpp:3642
#8  0xb4856313 in nsImapIncomingServer::GetNewMessagesForNonInboxFolders
(this=0x8732d18, aFolder=0x877e570, aWindow=0x0, forceAllFolders=0,
performingBiff=1) at nsImapIncomingServer.cpp:3668
#9  0xb4856313 in nsImapIncomingServer::GetNewMessagesForNonInboxFolders
(this=0x8732d18, aFolder=0x8733258, aWindow=0x0, forceAllFolders=0,
performingBiff=1) at nsImapIncomingServer.cpp:3668
#10 0xb4866648 in nsImapMailFolder::GetNewMessages (this=0x8733230, aWindow=0x0,
aListener=0x0) at nsImapMailFolder.cpp:2384
#11 0xb4849b0f in nsImapIncomingServer::PerformBiff (this=0x8732d18,
aMsgWindow=0x0) at nsImapIncomingServer.cpp:995
#12 0xb46d3f54 in nsMsgBiffManager::PerformBiff (this=0x872b558) at
nsMsgBiffManager.cpp:338
#13 0xb46d2e94 in OnBiffTimer (timer=0xb3f80e18, aBiffManager=0x872b558) at
nsMsgBiffManager.cpp:53
#14 0xb70d4bbc in nsTimerImpl::Fire (this=0xb3f80e18) at nsTimerImpl.cpp:382
#15 0xb70d4da2 in handleTimerEvent (event=0xa6e030c0) at nsTimerImpl.cpp:447
#16 0xb70cc9f4 in PL_HandleEvent (self=0xa6e030c0) at plevent.c:673
#17 0xb70cc895 in PL_ProcessPendingEvents (self=0x80d9668) at plevent.c:608
#18 0xb70cfb94 in nsEventQueueImpl::ProcessPendingEvents (this=0x80f9df0) at
nsEventQueue.cpp:391
#19 0xb678b088 in event_processor_callback (source=0x82c1ad0, condition=G_IO_IN,
data=0x80f9df0) at nsAppShell.cpp:67
#20 0xb7174f8f in g_vsnprintf () from /usr/lib/libglib-2.0.so.0
#21 0xb7153c30 in unblock_source () from /usr/lib/libglib-2.0.so.0
#22 0xb7154c98 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#23 0xb7154fad in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#24 0xb71556cf in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#25 0xb73a945f in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#26 0xb678b77a in nsAppShell::Run (this=0x80e0d78) at nsAppShell.cpp:142
#27 0xb68b8e47 in nsAppShellService::Run (this=0x80debb0) at
nsAppShellService.cpp:488
#28 0x0805fe53 in xre_main (argc=1, argv=0xbfffe2b4, aAppData=0x807700c) at
nsAppRunner.cpp:1980
#29 0x080590ea in main (argc=1, argv=0xbfffe2b4) at nsMailApp.cpp:58
(gdb)


Reproducible: Didn't try
Steps to Reproduce:
1.
2.
3.

Comment 1

[Scott MacGregor]

Quite a few Mozilla 1.7 talkback reports with similar crashes in
OnCreateServerSourceFolderPathString.

http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=stacksig&match=contains&searchfor=OnCreateServerSourceFolderPathString

Comment 2

[Scott MacGregor]

actually there are only 14 reports. I'll take a cheap fix but wouldn't block the
release for this. 

Comment 3

[David :Bienvenu]

I wonder if m_runningUrl is getting cleared in a race condition, after the
check. Perhaps we need to protect this with a monitor...

Comment 4

[Scott MacGregor]

not a .7 stopper

Comment 5

[Iain MacDonnell]

Similar-looking trace from just now (aviary branch from last night):

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1084989312 (LWP 22058)]
0x0044df56 in nsCOMPtr<nsIEventQueue>::get() const (this=0x8) at nsCOMPtr.h:693
693     nsCOMPtr.h: No such file or directory.
        in nsCOMPtr.h
(gdb) where
#0  0x0044df56 in nsCOMPtr<nsIEventQueue>::get() const (this=0x8) at nsCOMPtr.h:693
#1  0x0044ce98 in nsCOMPtr<nsIEventQueue>::operator
nsDerivedSafe<nsIEventQueue>*() const (this=0x8) at nsCOMPtr.h:705
#2  0x004cacb2 in nsProxyObject::Post(unsigned, nsXPTMethodInfo*,
nsXPTCMiniVariant*, nsIInterfaceInfo*) (this=0x0,
    methodIndex=24, methodInfo=0xbf137920, params=0xbfed0960,
interfaceInfo=0x8f2ebe0) at nsProxyEvent.cpp:431
#3  0x004ce82a in nsProxyEventObject::CallMethod(unsigned short, nsXPTMethodInfo
const*, nsXPTCMiniVariant*) (
    this=0x8f6e730, methodIndex=24, info=0xbf137920, params=0xbfed0960) at
nsProxyEventObject.cpp:546
#4  0x004ed65e in PrepareAndDispatch (methodIndex=24, self=0x8f6e730,
args=0xbfed0a04)
    at xptcstubs_gcc_x86_unix.cpp:100
#5  0x02a09455 in nsImapProtocol::OnCreateServerSourceFolderPathString()
(this=0x8f3d6a0) at nsImapProtocol.cpp:5312
#6  0x029fde3f in nsImapProtocol::CanHandleUrl(nsIImapUrl*, int*, int*)
(this=0x8f3d6a0, aImapUrl=0x95ca980,
    aCanRunUrl=0xbfed0cb8, hasToWait=0xbfed0cb4) at nsImapProtocol.cpp:1702
#7  0x029bc3de in nsImapIncomingServer::GetImapConnection(nsIEventQueue*,
nsIImapUrl*, nsIImapProtocol**) (
    this=0x8dffc90, aEventQueue=0x8754898, aImapUrl=0x95ca980,
aImapConnection=0xbfed0d40)
    at nsImapIncomingServer.cpp:720
#8  0x029bb200 in
nsImapIncomingServer::GetImapConnectionAndLoadUrl(nsIEventQueue*, nsIImapUrl*,
nsISupports*) (
    this=0x8dffc90, aClientEventQueue=0x8754898, aImapUrl=0x95ca980,
aConsumer=0x0) at nsImapIncomingServer.cpp:438
#9  0x02a2f8f9 in nsImapService::GetImapConnectionAndLoadUrl(nsIEventQueue*,
nsIImapUrl*, nsISupports*, nsIURI**) (
    this=0x8dff350, aClientEventQueue=0x8754898, aImapUrl=0x95ca980,
aConsumer=0x0, aURL=0xbfed0f80)
    at nsImapService.cpp:2283
#10 0x02a2bc13 in nsImapService::UpdateFolderStatus(nsIEventQueue*,
nsIMsgFolder*, nsIUrlListener*, nsIURI**) (
    this=0x8dff350, aClientEventQueue=0x8754898, aImapMailFolder=0x8e6b400,
aUrlListener=0x0, aURL=0xbfed0f80)
    at nsImapService.cpp:1387
#11 0x029d3d5c in nsImapMailFolder::UpdateStatus(nsIUrlListener*, nsIMsgWindow*)
(this=0x8e6b3d8, aListener=0x0,
    aMsgWindow=0x0) at nsImapMailFolder.cpp:1217
#12 0x029c9bdf in
nsImapIncomingServer::GetNewMessagesForNonInboxFolders(nsIMsgFolder*,
nsIMsgWindow*, int, int) (
    this=0x8dffc90, aFolder=0x8e6b400, aWindow=0x0, forceAllFolders=0,
performingBiff=1)
    at nsImapIncomingServer.cpp:3642
#13 0x029c9e73 in
nsImapIncomingServer::GetNewMessagesForNonInboxFolders(nsIMsgFolder*,
nsIMsgWindow*, int, int) (
    this=0x8dffc90, aFolder=0x8e51aa8, aWindow=0x0, forceAllFolders=0,
performingBiff=1)
    at nsImapIncomingServer.cpp:3668
#14 0x029c9e73 in
nsImapIncomingServer::GetNewMessagesForNonInboxFolders(nsIMsgFolder*,
nsIMsgWindow*, int, int) (
    this=0x8dffc90, aFolder=0x8e00388, aWindow=0x0, forceAllFolders=0,
performingBiff=1)
    at nsImapIncomingServer.cpp:3668
#15 0x029da21c in nsImapMailFolder::GetNewMessages(nsIMsgWindow*,
nsIUrlListener*) (this=0x8e00360, aWindow=0x0,
    aListener=0x0) at nsImapMailFolder.cpp:2384
#16 0x029bd66f in nsImapIncomingServer::PerformBiff(nsIMsgWindow*)
(this=0x8dffc90, aMsgWindow=0x0)
    at nsImapIncomingServer.cpp:995
#17 0x0283f0ba in nsMsgBiffManager::PerformBiff() (this=0x8dfe4d8) at
nsMsgBiffManager.cpp:338
#18 0x0283dff8 in OnBiffTimer(nsITimer*, void*) (timer=0x96ee290,
aBiffManager=0x8dfe4d8) at nsMsgBiffManager.cpp:53
#19 0x004c6bd8 in nsTimerImpl::Fire() (this=0x96ee290) at nsTimerImpl.cpp:382
#20 0x004c6dbe in handleTimerEvent(TimerEventType*) (event=0xbf1f6028) at
nsTimerImpl.cpp:447
#21 0x004bea10 in PL_HandleEvent (self=0xbf1f6028) at plevent.c:673
#22 0x004be8b1 in PL_ProcessPendingEvents (self=0x87548d0) at plevent.c:608
#23 0x004c1bb0 in nsEventQueueImpl::ProcessPendingEvents() (this=0x8754898) at
nsEventQueue.cpp:391
#24 0x0642e0d4 in event_processor_callback (source=0x8964838, condition=G_IO_IN,
data=0x8754898) at nsAppShell.cpp:67
#25 0x00767ccf in g_vsnprintf () from /usr/lib/libglib-2.0.so.0
---Type <return> to continue, or q <return> to quit---
#26 0x00746fdd in unblock_source () from /usr/lib/libglib-2.0.so.0
#27 0x00747fd8 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#28 0x007482ef in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#29 0x007489cf in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#30 0x00c4a44f in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#31 0x0879dc10 in ?? ()
#32 0x0881b090 in ?? ()
#33 0x022be8bc in vtable for nsAppShellService ()
   from
/export/stuff/mozilla/thunderbird-20040713/mozilla/dist/bin/components/libnsappshell.so
#34 0xbfed1698 in ?? ()
#35 0x0879dc10 in ?? ()
(gdb)
 

Comment 6

[David :Bienvenu]

do you have a multi-cpu machine? I've never seen this crash...

Comment 7

[Iain MacDonnell]

(In reply to comment #6)
> do you have a multi-cpu machine? I've never seen this crash...

Yes. The original report was from a dual-Xeon system, which appears as 4 virtual
CPUs in Linux, due to HyperThreading. I've since moved over to a dual-PentiumIII
box, though, to eliminate hyperthreading from the set of variables. This latest
crash was on the dual-PIII system.

Comment 8

[Iain MacDonnell]

I just had another crash in this general vacinity, but this time I'm NOT running
an SMP kernel, so have only one active CPU.


Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -150162144 (LWP 3868)]
0x003768c2 in PrepareAndDispatch (methodIndex=24, self=0xa14c560,
args=0xfeed57e4) at xptcstubs_gcc_x86_unix.cpp:100
100         result = self->CallMethod((PRUint16)methodIndex, info, dispatchParams);
(gdb) where
#0  0x003768c2 in PrepareAndDispatch (methodIndex=24, self=0xa14c560,
args=0xfeed57e4) at xptcstubs_gcc_x86_unix.cpp:100#1  0x032ae3b5 in
nsImapProtocol::OnCreateServerSourceFolderPathString (this=0x9593058) at
nsImapProtocol.cpp:5315
#2  0x032a2d9f in nsImapProtocol::CanHandleUrl (this=0x9593058,
aImapUrl=0x9e08d80, aCanRunUrl=0xfeed5a98,
    hasToWait=0xfeed5a94) at nsImapProtocol.cpp:1705
#3  0x03261196 in nsImapIncomingServer::GetImapConnection (this=0x93b2d78,
aEventQueue=0x8c63058, aImapUrl=0x9e08d80,
    aImapConnection=0xfeed5b20) at nsImapIncomingServer.cpp:720
#4  0x0325ffb8 in nsImapIncomingServer::GetImapConnectionAndLoadUrl
(this=0x93b2d78, aClientEventQueue=0x8c63058,
    aImapUrl=0x9e08d80, aConsumer=0x0) at nsImapIncomingServer.cpp:438
#5  0x032d49e9 in nsImapService::GetImapConnectionAndLoadUrl (this=0x93aac98,
aClientEventQueue=0x8c63058,
    aImapUrl=0x9e08d80, aConsumer=0x0, aURL=0xfeed5d60) at nsImapService.cpp:2283
#6  0x032d0d03 in nsImapService::UpdateFolderStatus (this=0x93aac98,
aClientEventQueue=0x8c63058,
    aImapMailFolder=0x9404f58, aUrlListener=0x0, aURL=0xfeed5d60) at
nsImapService.cpp:1387
#7  0x03278b64 in nsImapMailFolder::UpdateStatus (this=0x9404f30, aListener=0x0,
aMsgWindow=0x0)
    at nsImapMailFolder.cpp:1229
#8  0x0326ea0d in nsImapIncomingServer::GetNewMessagesForNonInboxFolders
(this=0x93b2d78, aFolder=0x9404f58,
    aWindow=0x0, forceAllFolders=0, performingBiff=1) at
nsImapIncomingServer.cpp:3544
#9  0x0326eca1 in nsImapIncomingServer::GetNewMessagesForNonInboxFolders
(this=0x93b2d78, aFolder=0x93b36c8,
    aWindow=0x0, forceAllFolders=0, performingBiff=1) at
nsImapIncomingServer.cpp:3570
#10 0x0327f082 in nsImapMailFolder::GetNewMessages (this=0x93b36a0, aWindow=0x0,
aListener=0x0)
    at nsImapMailFolder.cpp:2416
#11 0x03262427 in nsImapIncomingServer::PerformBiff (this=0x93b2d78,
aMsgWindow=0x0) at nsImapIncomingServer.cpp:995
#12 0x030e3452 in nsMsgBiffManager::PerformBiff (this=0x93a9e00) at
nsMsgBiffManager.cpp:338
#13 0x030e2390 in OnBiffTimer (timer=0x9897280, aBiffManager=0x93a9e00) at
nsMsgBiffManager.cpp:53
#14 0x0034fe40 in nsTimerImpl::Fire (this=0x9897280) at nsTimerImpl.cpp:382
#15 0x00350026 in handleTimerEvent (event=0xf6bfbb88) at nsTimerImpl.cpp:447
#16 0x00347c78 in PL_HandleEvent (self=0xf6bfbb88) at plevent.c:673
#17 0x00347b19 in PL_ProcessPendingEvents (self=0x8c630a0) at plevent.c:608
#18 0x0034ae18 in nsEventQueueImpl::ProcessPendingEvents (this=0x8c63058) at
nsEventQueue.cpp:391
#19 0x02eca0d4 in event_processor_callback (source=0x8eb0b80, condition=G_IO_IN,
data=0x8c63058) at nsAppShell.cpp:67
#20 0x00d1221f in g_vasprintf () from /usr/lib/libglib-2.0.so.0
#21 0x00cece4a in g_main_depth () from /usr/lib/libglib-2.0.so.0
#22 0x00cedf28 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#23 0x00cee260 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#24 0x00cee8a3 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#25 0x00a93403 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#26 0x02eca7c6 in nsAppShell::Run (this=0x8db6340) at nsAppShell.cpp:142
#27 0x05bdffcf in nsAppShellService::Run (this=0x8db62e0) at
nsAppShellService.cpp:494
#28 0x0805fedf in xre_main (argc=1, argv=0xfeed6a74, aAppData=0x807700c) at
nsAppRunner.cpp:2005
#29 0x08058dd6 in main (argc=1, argv=0xfeed6a74) at nsMailApp.cpp:58
(gdb)
                                                                               
                                        

Comment 9

[David :Bienvenu]

I'll try to figure this out...

Comment 10

[David :Bienvenu]

duh, this is because we're going through the m_imapMailFolderSink to get the
online delimiter, but this is called from the ui thread. m_imapMailFolderSink
should only be referenced from the imap thread. I'll try to figure out how to do
what we're doing without going through the m_imapMailFolderSink.

Comment 11

[David :Bienvenu]

Attachment: proposed fix

make a version of OnCreateServerSourceFolderPathString that can be called from
the UI thread.

Comment 12

[sairuh (rarely reading bugmail)]

haven't encountered this with recent tbird builds (aviary1.0 branch).

Comment 13

[Iain MacDonnell]

(In reply to comment #12)
> haven't encountered this with recent tbird builds (aviary1.0 branch).

thunderbird built from aviary yesterday has crashed this morning as below.
Not sure if this is the same problem. I didn't catch it in time to
attach gdb.


Program
/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/thunderbird-bin (pid
= 26279) received signal 11.
Stack:
_ZN13nsProfileLock18FatalSignalHandlerEi+0x00000137
[/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/thunderbird-bin
+0x00027A49]
UNKNOWN 0xffffe420
_ZN15nsSupportsArray9ElementAtEj+0x0000003F
[/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/libxpcom.so
+0x0008DAA1]
_ZN15nsSupportsArray12GetElementAtEjPP11nsISupports+0x0000001B
[/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/libxpcom.so
+0x0008E785]
UNKNOWN [/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/libxpcom.so
+0x00085B53]
UNKNOWN [/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/libxpcom.so
+0x00086EDC]
_ZN16nsEventQueueImpl15NotifyObserversEPKc+0x000000CB
[/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/libxpcom.so
+0x000EAB7F]
UNKNOWN [/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/libxpcom.so
+0x000EA789]
UNKNOWN [/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/libxpcom.so
+0x000ECD11]
UNKNOWN [/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/libxpcom.so
+0x000ECDE8]
UNKNOWN [/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/libxpcom.so
+0x000ECC2D]
_ZN13nsProxyObject11PostAndWaitEP21nsProxyObjectCallInfo+0x000000DE
[/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/libxpcom.so
+0x000F3F42]
_ZN13nsProxyObject4PostEjP15nsXPTMethodInfoP17nsXPTCMiniVariantP16nsIInterfaceInfo+0x00000215
[/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/libxpcom.so
+0x000F44AB]
UNKNOWN [/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/libxpcom.so
+0x000F7E9D]
UNKNOWN [/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/libxpcom.so
+0x0011719E]
_ZN14nsImapProtocol36OnCreateServerSourceFolderPathStringEv+0x00000091
[/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/components/libmail.so
+0x003C70F9]
_ZN14nsImapProtocol28ProcessAuthenticatedStateURLEv+0x00000356
[/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/components/libmail.so
+0x003CC690]
_ZN14nsImapProtocol17ProcessCurrentURLEv+0x00000644
[/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/components/libmail.so
+0x003BA81C]
_ZN14nsImapProtocol18ImapThreadMainLoopEv+0x00000141
[/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/components/libmail.so
+0x003B9E37]
UNKNOWN
[/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/components/libmail.so
+0x003B90A7]
_ZN8nsThread4MainEPv+0x000000B6
[/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/libxpcom.so
+0x000EE24A]
UNKNOWN [/export/stuff/mozilla/thunderbird-20041122/mozilla/dist/bin/libnspr4.so
+0x000304A8]
UNKNOWN [/lib/tls/libpthread.so.0 +0x000059ED]

Comment 14

[David :Bienvenu]

Iain, that crash is bug 234620 - there's a fix baking on the trunk that we'll
take for the branch as long as it doesn't cause any regressions.

Comment 15

[Iain MacDonnell]

(In reply to comment #14)
> Iain, that crash is bug 234620 - there's a fix baking on the trunk that we'll
> take for the branch as long as it doesn't cause any regressions.

Right. I was hoping that was the case, but mentioned it here because I saw
"OnCreateServerSourceFolderPathString" in the trace. Thanks for confirming:)