277115 - Subscribing to discussion.epoc.C++ newsgroup crashes mozilla [@ nsMsgKeySet::Output]

Status: RESOLVED DUPLICATE of bug 188243

(SeaMonkey :: MailNews: Message Display, defect)

Description

[Ric]

When I try to suscribe to discussion.epoc.C++ at the above link mozilla 1.7.5
chrashes I tried this both under freebsd and windows xp.

If I use thunderbird everything is fine.

Comment 1

[Frank Wein [:mcsmurf]]

Stacktrace (with a current trunk build):
nsMsgKeySet::Output(nsMsgKeySet * const 0x00000000, char * * 0x0012f99c) line 316
nsMsgNewsFolder::UpdateSummaryFromNNTPInfo(nsMsgNewsFolder * const 0x00000000,
int 0x00000002, int 0x00008eb9, int 0x000076b0) line 797 + 24 bytes
nsNNTPProtocol::BeginReadXover(nsNNTPProtocol * const 0x00000000) line 3350
nsNNTPProtocol::ProcessProtocolState(nsNNTPProtocol * const 0x00000000, nsIURI *
0x017550f9, nsIInputStream * 0x02dd0474, unsigned int 0x01b2ebe0, unsigned int
0x00000088) line 5061
nsMsgProtocol::OnDataAvailable(nsMsgProtocol * const 0x00000009, nsIRequest *
0x0253f118, nsISupports * 0x00000000, nsIInputStream * 0x00000000, unsigned int
0x00000000, unsigned int 0x00000000) line 325 + 20 bytes
MSGNEWS! const  nsNntpUrl::`vftable'{for `nsMsgMailNewsUrl'} address 0x03a4a210
nsNntpUrl::AddRef(nsNntpUrl * const 0x03a47f9c nsMsgMailNewsUrl::GetSpec) line 84
nsNntpUrl::Release() address 0x03a3524e
UCONV! g_uf0208Mapping + 20624 bytes

Crashes in line:
	size = m_length;

|this| is 0x00000000. 

Comment 2

[Hermann Schwab]

Talkback with links, Mozilla trunk 2004122906
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=TB2960219E

Talkback without links, BuildID 2005010606 Win98
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=TB2959688Z

8 more crashes with same stack signature, symbian link also crashing Thunderbird:
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=stacksig&match=contains&searchfor=%09+nsMsgKeySet%3A%3AOutput&vendor=All&product=All&platform=All&buildid=&sdate=&stime=&edate=&etime=&sortby=bbid

Comment 3

[(not reading, please use [e-mail] instead)]

over to david, cc neil.

note, he says tbird is fine.

Comment 4

[[e-mail]]

OK, so what's happening here is that nsNNTPProtocol::LoadUrl is calling
nsNntpIncomingServer::SubscribeToNewsgroup("discussion.epoc.C%2B%2B"); which is
calling nsMsgNewsFolder::CreateSubfolder which is calling
nsMsgNewsFolder::AddNewsgroup("discussion.epoc.C++", ...); - oops.

Of course when nsNNTPProtocol::LoadUrl later calls
nsNntpIncomingServer::FindGroup("discussion.epoc.C%2B%2B") it won't find it.

I tried bypassing the call to NS_MsgDecodeUnescapeURLPath in
nsNntpIncomingServer::SubscribeToNewsgroup but it still faulted :-(

Comment 5

[Serge Gautherie (:sgautherie)]

<http://www.symbian.com/developer/public/index.html>
does not seem to have any News/NNTP link (anymore).

***

[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.13) Gecko/20060414] (release) (W2Ksp4)
[Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9.0.1pre) Gecko/2008062515 SeaMonkey/2.0a1pre] (SEA-WIN32-TBOX-trunk) (W2Ksp4)

From Browser location bar (or MailNews UI),
subscribing to <news://news.free.fr:119/comp.lang.c++> works fine.

WorksForMe, or is it not the proper way to test this ?

Comment 6

[Serge Gautherie (:sgautherie)]

(In reply to comment #2)
> http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=TB2960219E
> http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=TB2959688Z

Unavailable (too old) reports.

> http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=stacksig&match=contains&searchfor=%09+nsMsgKeySet%3A%3AOutput&vendor=All&product=All&platform=All&buildid=&sdate=&stime=&edate=&etime=&sortby=bbid

9 reports, but only 1 (TB v2) like comment 1:
<http://talkback-public.mozilla.org/search/start.jsp?search=2&type=iid&id=44350086>

Nothing on
<http://crash-stats.mozilla.com/?do_query=1&product=Thunderbird&version=Thunderbird%3A3.0a1pre&version=Thunderbird%3A3.0a2pre&query_search=signature&query_type=contains&query=nsMsgKeySet%3A%3AOutput&date=&range_value=3&range_unit=months>

Comment 7

[timeless]

http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/mailnews/news/src/nsNewsFolder.cpp&mark=796&rev=MOZILLA_1_8_BRANCH#796

my guess is that mReadSet is null.