44203 - Closing last mail compose crashes the app

Status: VERIFIED FIXED

(MailNews Core :: Composition, defect, P3)

Description

[jefft]

Steps to reproduce the problem:

o Launch the mail 3 pane window
o Set save Drafts on an Imap server
o Compose a new message
o Close all other windows except the compose window
o Type something in the compose window
o Now close down the compose window by clicking the "X" on the upper right hand 
corner
o Click on "Save" Draft button on the prompt for saving draft dialog box
o Crashes with the following stack, where mComposeObj has been destroyed

nsMsgCompose::NotifyStateListeners(nsMsgCompose::TStateListenerNotification 
eSaveAndSendProcessDone) line 2156 + 24 bytes
nsMsgComposeSendListener::OnStopCopy(nsMsgComposeSendListener * const 
0x034e8394, unsigned int 0x80004005) line 1774
nsMsgComposeAndSend::NotifyListenersOnStopCopy(nsMsgComposeAndSend * const 
0x034e8240, unsigned int 0x80004005) line 3360
CopyListener::OnStopCopy(CopyListener * const 0x034f57d0, unsigned int 
0x80004005) line 142
nsMsgCopyService::ClearRequest(nsCopyRequest * 0x034f5770, unsigned int 
0x80004005) line 160
nsMsgCopyService::~nsMsgCopyService() line 143
nsMsgCopyService::`scalar deleting destructor'(unsigned int 0x00000001) + 15 
bytes
nsMsgCopyService::Release(nsMsgCopyService * const 0x034f58e0) line 277 + 132 
bytes
DeleteEntry(nsHashKey * 0x034f5860, void * 0x034f58a0, void * 0x00000000) line 
260 + 18 bytes
_hashEnumerateRemove(PLHashEntry * 0x034f5820, int 0x00000015, void * 
0x0012fdf4) line 246 + 26 bytes
PL_HashTableEnumerateEntries(PLHashTable * 0x00c548f0, int (PLHashEntry *, int, 
void *)* 0x1001c6c0 _hashEnumerateRemove(PLHashEntry *, int, void *), void * 
0x0012fdf4) line 413 + 15 bytes
nsHashtable::Reset(int (nsHashKey *, void *, void *)* 0x1005c2b0 
DeleteEntry(nsHashKey *, void *, void *), void * 0x00000000) line 262 + 21 bytes
nsObjectHashtable::Reset() line 371
nsObjectHashtable::~nsObjectHashtable() line 337
nsObjectHashtable::`vector deleting destructor'(unsigned int 0x00000001) + 81 
bytes
nsServiceManagerImpl::~nsServiceManagerImpl() line 285 + 33 bytes
nsServiceManagerImpl::`scalar deleting destructor'(unsigned int 0x00000001) + 15 
bytes
nsServiceManagerImpl::Release(nsServiceManagerImpl * const 0x00c54990) line 294 
+ 152 bytes
nsServiceManager::ShutdownGlobalServiceManager(nsIServiceManager * * 0x00000000) 
line 546 + 17 bytes
NS_ShutdownXPCOM(nsIServiceManager * 0x00000000) line 614 + 7 bytes
main(int 0x00000003, char * * 0x00c54d90) line 1105 + 8 bytes
mainCRTStartup() line 338 + 17 bytes
KERNEL32! 77f1ba06()

Comment 1

[jefft]

Adding crash keyword...

Comment 2

[jefft]

I'll take this one since I am on top of bug 33986.

Comment 3

[jefft]

This is a data loss. Adding nsbeta2 keyword....

Comment 4

[Jay Patel [:jay]]

Putting on [nsbeta2+] radar for beta2 fix. 

Comment 5

[jefft]

fix checked in.

Comment 6

[pmock]

Verified as fixed on win32, linux, and macos using the following builds:
 win32 commercial seamonkey build 2000-070609-m17 installed on P500 Win98 and on 
a P200 Winnt 4.0
 linux commercial seamonkey build 2000-070608-m17 installed on P200 RedHat 6.1
 macos commercial seamonkey build 2000-070608-m17 installed on G3/400 OS 9.04

I could not reproduce original problem. I tested using the plain text and html 
editor.