112184 - crash sending plaintext mail to many recipients

Status: RESOLVED WORKSFORME

(SeaMonkey :: MailNews: Message Display, defect)

Description

[Asa Dotzler [:asa]]

When attempting to send a short plaintext mail with 154 To: recipients the
application crashes. I was able to reproduce this twice while attempting to send
mail to everone with bugs targeted at mozilla1.0. 
Teested: mozilla trunk builds 2001112608 and 2001112703 on win2K
Here is the stack trace from talkback: 

0x06f62670
nsHTMLInputElement::GetValue
[d:\builds\seamonkey\mozilla\content\html\content\src\nsHTMLInputElement.cpp,
line 431]
XPTC_InvokeByIndex
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp,
line 154]
XPCWrappedNative::CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 2011]
XPC_WN_GetterSetter
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp,
line 1299]
js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 834]
js_InternalInvoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 925]
js_GetProperty [d:\builds\seamonkey\mozilla\js\src\jsobj.c, line 2448]
js_Interpret [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2625]
js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 850]
js_InternalInvoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 925]
js_GetProperty [d:\builds\seamonkey\mozilla\js\src\jsobj.c, line 2448]
js_Interpret [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2625]
js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 850]
nsXPCWrappedJSClass::CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappedjsclass.cpp, line 1218]
nsXPCWrappedJS::CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappedjs.cpp, line 430]
PrepareAndDispatch
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcstubs.cpp,
line 117]
SharedStub
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcstubs.cpp,
line 139]
XPTC_InvokeByIndex
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp,
line 154]
XPCWrappedNative::CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednative.cpp, line 2011]
XPC_WN_CallMethod
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp,
line 1267]
js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 834]
js_Interpret [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2792]
js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 850]
js_InternalInvoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 925]
JS_CallFunctionValue [d:\builds\seamonkey\mozilla\js\src\jsapi.c, line 3407]
nsJSContext::CallEventHandler
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 1012]
nsJSEventListener::HandleEvent
[d:\builds\seamonkey\mozilla\dom\src\events\nsJSEventListener.cpp, line 182]
nsEventListenerManager::HandleEventSubType
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, line
1214]
nsEventListenerManager::HandleEvent
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, line
2206]
nsXULElement::HandleDOMEvent
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 3404]
PresShell::HandleDOMEventWithTarget
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5906]
nsButtonBoxFrame::MouseClicked
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsButtonBoxFrame.cpp, line 192]
nsButtonBoxFrame::HandleEvent
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsButtonBoxFrame.cpp, line 142]
PresShell::HandleEventInternal
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5875]
PresShell::HandleEventWithTarget
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5828]
nsEventStateManager::CheckForAndDispatchClick
[d:\builds\seamonkey\mozilla\content\events\src\nsEventStateManager.cpp, line 2457]
nsEventStateManager::PostHandleEvent
[d:\builds\seamonkey\mozilla\content\events\src\nsEventStateManager.cpp, line 1540]
PresShell::HandleEventInternal
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5879]
PresShell::HandleEvent
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5783]
nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 375]
nsViewManager::DispatchEvent
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1874]
HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 84]
nsWindow::DispatchEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 838]
nsWindow::DispatchWindowEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 855]
nsWindow::DispatchMouseEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4410]
ChildWindow::DispatchMouseEvent
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4660]
nsWindow::ProcessMessage
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3376]
nsWindow::WindowProc
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 1103]
USER32.DLL + 0x3eb0 (0x77e13eb0)
USER32.DLL + 0x401a (0x77e1401a)
USER32.DLL + 0x92da (0x77e192da)
nsAppShellService::Run
[d:\builds\seamonkey\mozilla\xpfe\appshell\src\nsAppShellService.cpp, line 303]
main1 [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp, line 1318]
main [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp, line 1635]
WinMain [d:\builds\seamonkey\mozilla\xpfe\bootstrap\nsAppRunner.cpp, line 1653]
WinMainCRTStartup()
KERNEL32.DLL + 0x7903 (0x77e87903)

Comment 1

[Matthias Versen [:Matti]]

looks like a dupe of bug 108922 if I compare the stacks

Comment 2

[scottputterman]

reassigning to ducarroz.  JF, if you think this is a dup, please mark it that
way otherwise we should look into this.  Have you had this happen to you
recently, Asa?

Comment 3

[Matthias Versen [:Matti]]

*** Bug 113251 has been marked as a duplicate of this bug. ***

Comment 4

[Asa Dotzler [:asa]]

This happened to me last a few days before christmas I believe. The only time I
see it is when I send mail to owners of bugs in a large buglist. I do this about
once a milestone and don't know how else I would test it.

Comment 5

[Koike Kazuhiko]

Attachment: mail file

2002012006/Linux crashes if I open, edit and save this mail.
If I reduce Bcc: addresses from 4 to 3, crash doesn't happen.

Comment 6

[scottputterman]

I can't reproduce this with this email on the 1/21 build on Windows from my
Local Mail folder

Comment 7

[R.K.Aa.]

*** Bug 124330 has been marked as a duplicate of this bug. ***

Comment 8

[Matthias Versen [:Matti]]

*** Bug 124444 has been marked as a duplicate of this bug. ***

Comment 9

[laurel]

*** Bug 122832 has been marked as a duplicate of this bug. ***

Comment 10

[Matthias Versen [:Matti]]

*** Bug 126392 has been marked as a duplicate of this bug. ***

Comment 11

[R.K.Aa.]

There were three mail crasher-bugs related to amount of addresses/entries:
Bug 110165, bug 118815 and this one.

They all kept appearing/vanishing/re-appearing at the same times.
Fix for 110165 now went in at 02/19/2002 18:19 "bonsai time" and that also fixed
bug 118815. Can someone check if it affected this bug as well.

Comment 12

[laurel]

*** Bug 127937 has been marked as a duplicate of this bug. ***

Comment 13

[Koike Kazuhiko]

This bug seems to be fixed now.

Comment 14

[[e-mail] (gone - use [e-mail] instead)]

This bug seems to be gone - at least with the same stack trace

2002-02-04-09 MozillaBranch was the last build to crash here.

I checked both frames:

0x06f62670
nsHTMLInputElement::GetValue

I'm taking the libery of marking this one worksforme. build 2002-03-01-03,
Windows 2000.

Comment 15

[R.K.Aa.]

*** Bug 128686 has been marked as a duplicate of this bug. ***

Comment 16

[[e-mail] (gone - use [e-mail] instead)]

verified, we still seem safe.

Comment 17

[R.K.Aa.]

*** Bug 130063 has been marked as a duplicate of this bug. ***

Comment 18

[John Muir]

I will try on a newer release (with talk-back). Sorry my search didn't pickup
similar bugs.

Comment 19

[Mirek]

Moz 1.0.0, WinNT4SP6a, Build 2002053012.
I have again experienced similar crash scrolling the list of recipients (9
entries), (originally filed as bug 113251 ). Talkback ID TB7918643K.

Comment 20

[Jean-Francois Ducarroz]

-->varada

Comment 21

[[e-mail] (gone - use [e-mail] instead)]

Can anybody still reproduce this?

Comment 22

[Albert Yang]

Mozilla freezes when I try to send ANY email.  I assume it's this bug, but am
not sure.  It didn't do it before, but now it does, I've changed nothing on my
settings.  Using an IMAP connection; has worked for months, and now it's stopped
working.  It crashes so bad I don't know what to do except kill it in Task
Manager (Win2K).  I've upgraded to SP3 to see if that fixed it.  It didn't. 
I've downloaded last night's build to verify; it's still freezes.  I've tried it
on last night's build as of 11/27/2002 as well as Mozilla 1.2b, both crash.

Someone tell me how to dump the core on the crash or access the info from
talkback on such a bad crash, and I'll dump it out.  It's driving me nuts, I
might have to abandon Mozilla because of this....   I hope I don't.

Comment 23

[[e-mail] (gone - use [e-mail] instead)]

Albert - sounds like your bug is unique - please file a new bug, and if you can,
post the contents of the IMAP log.  Instructions for generating this logfile can
be found here: http://www.mozilla.org/quality/mailnews/mail-troubleshoot.html#imap

Please note that a hang is not a crash (although it's obviously just as
serious).  This bug was intended for a specific crash only.  Albert, when you've
filed the new bug, please make sure I'm cc:ed on the bug.  Make sure you make a
comment in that bug when you file it, because my Bugzilla notification settings
are such that I won't see an email unless there is a comment associated with it.

Thanks!

Comment 24

[(not reading, please use [e-mail] instead)]

taking all of varada's bugs.

Comment 25

[Dan Oh]

I run WinXp Home.  I removed Cyberpatrol, and Norton,and when I press send
button in 1.3b mail the whole Mozilla crashes.  In fact I unchecked all mscig
start ups.

Please help!!

Comment 26

[Andrew Hagen]

Has anyone got Talkback ID for this crash?

Comment 27

[Andrew Schultz]

re-resolving WFM from comment 14.  Sitings of this bug after that were in Mozilla 1.0, which didn't have this fix.