crash in nsMsgSearchDBView::OnHdrDeleted deleting message in gloda search results

NEW
Unassigned

Status

MailNews Core
Backend
--
critical
3 years ago
3 months ago

People

(Reporter: wsmwk, Unassigned)

Tracking

(Depends on: 1 bug, {crash})

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

(Reporter)

Description

3 years ago
I crashed bp-5fe3496f-347e-4684-a569-9f9502150224.
" just deleted the last message in a two message conversation"

 0 		@0x12c6d414	
1 	xul.dll	nsMsgSearchDBView::OnHdrDeleted(nsIMsgDBHdr*, unsigned int, int, nsIDBChangeListener*)	c:/builds/moz2_slave/tb-c-cen-w32-ntly-000000000000/build/mailnews/base/src/nsMsgSearchDBView.cpp:228
2 	xul.dll	nsMsgDatabase::NotifyHdrDeletedAll(nsIMsgDBHdr*, unsigned int, int, nsIDBChangeListener*)	c:/builds/moz2_slave/tb-c-cen-w32-ntly-000000000000/build/mailnews/db/msgdb/src/nsMsgDatabase.cpp:929
3 	xul.dll	nsMsgDatabase::DeleteHeader(nsIMsgDBHdr*, nsIDBChangeListener*, bool, bool)	c:/builds/moz2_slave/tb-c-cen-w32-ntly-000000000000/build/mailnews/db/msgdb/src/nsMsgDatabase.cpp:2031
4 	xul.dll	nsMsgDatabase::DeleteMessages(unsigned int, unsigned int*, nsIDBChangeListener*)	c:/builds/moz2_slave/tb-c-cen-w32-ntly-000000000000/build/mailnews/db/msgdb/src/nsMsgDatabase.cpp:1975
5 	xul.dll	nsImapMailFolder::CopyMessagesOffline(nsIMsgFolder*, nsIArray*, bool, nsIMsgWindow*, nsIMsgCopyServiceListener*)	c:/builds/moz2_slave/tb-c-cen-w32-ntly-000000000000/build/mailnews/imap/src/nsImapMailFolder.cpp:7430
6 	xul.dll	nsImapMailFolder::CopyMessages(nsIMsgFolder*, nsIArray*, bool, nsIMsgWindow*, nsIMsgCopyServiceListener*, bool, bool)	c:/builds/moz2_slave/tb-c-cen-w32-ntly-000000000000/build/mailnews/imap/src/nsImapMailFolder.cpp:7597 



This user has several signature which are no doubt related

bp-28811a65-b455-4918-bbfa-916c22150224	
nsMsgXFViewThread::RemoveChildHdr(nsIMsgDBHdr*, nsIDBChangeAnnouncer*)   

bp-94760e0d-7337-4048-a0b1-e4ddb2150224	
nsCOMPtr_base::assign_with_AddRef(nsISupports*) | nsMsgBodyHandler::nsMsgBodyHandler(nsIMsgSearchScopeTerm*, unsigned int, nsIMsgDBHdr*, nsIMsgDatabase*)   

bp-41bf67a9-bcf9-4962-8cda-bd6cc2150220	
@0x0 | nsMsgSearchDBView::OnHdrDeleted(nsIMsgDBHdr*, unsigned int, int, nsIDBChangeListener*)   

bp-3669d1ef-bd56-4f57-a1e9-266b92150224	 	nsMsgSearchDBView::OnHdrDeleted(nsIMsgDBHdr*, unsigned int, int, nsIDBChangeListener*)
" I click a message as JUNK and the program closes. "

http://hg.mozilla.org/releases/comm-esr31/annotate/431088bed817/mailnews/db/msgdb/src/nsMsgDatabase.cpp#l911
hg@0 	906 NS_IMETHODIMP nsMsgDatabase::NotifyHdrDeletedAll(nsIMsgDBHdr *aHdrDeleted,
hg@0 	907                                      nsMsgKey aParentKey,
ehsan@13324 908                                  int32_t aFlags,
hg@0 	909                                      nsIDBChangeListener *aInstigator)
hg@0 	910 {
hg@0 	911  NOTIFY_LISTENERS(OnHdrDeleted, (aHdrDeleted, aParentKey, aFlags, aInstigator));

http://hg.mozilla.org/releases/comm-esr31/annotate/431088bed817/mailnews/base/src/nsMsgSearchDBView.cpp#l228
bienvenu@774 223   nsCOMPtr<nsIMsgThread> thread;
bienvenu@774 224   GetXFThreadFromMsgHdr(aHdrDeleted, getter_AddRefs(thread));
bienvenu@774 225   if (thread)
bienvenu@774 226   {
bienvenu@774 227      nsMsgXFViewThread *viewThread = static_cast<nsMsgXFViewThread*>(thread.get());
mconley@13187 228     viewThread->RemoveChildHdr(aHdrDeleted, nullptr);
(Reporter)

Updated

2 years ago
Depends on: 646168
(Reporter)

Comment 1

2 years ago
I just crashed bp-5079f917-c4de-45ac-a521-618382150803

 nsCOMPtr_base::assign_with_AddRef(nsISupports*) | nsMsgBodyHandler::nsMsgBodyHandler(nsIMsgSearchScopeTerm*, unsigned int, nsIMsgDBHdr*, nsIMsgDatabase*)
Crash Signature: [@ nsMsgSearchDBView::OnHdrDeleted(nsIMsgDBHdr*, unsigned int, int, nsIDBChangeListener*)] → [@ nsMsgSearchDBView::OnHdrDeleted(nsIMsgDBHdr*, unsigned int, int, nsIDBChangeListener*)] [@ nsCOMPtr_base::assign_with_AddRef(nsISupports*) | nsMsgBodyHandler::nsMsgBodyHandler(nsIMsgSearchScopeTerm*, unsigned int, nsIMsgDBHdr*, nsIMsgDatabase*)]

Updated

2 years ago
Crash Signature: [@ nsMsgSearchDBView::OnHdrDeleted(nsIMsgDBHdr*, unsigned int, int, nsIDBChangeListener*)] [@ nsCOMPtr_base::assign_with_AddRef(nsISupports*) | nsMsgBodyHandler::nsMsgBodyHandler(nsIMsgSearchScopeTerm*, unsigned int, nsIMsgDBHdr*, nsIMsgDatabase*)] → [@ nsMsgSearchDBView::OnHdrDeleted(nsIMsgDBHdr*, unsigned int, int, nsIDBChangeListener*)] [@ nsCOMPtr_base::assign_with_AddRef(nsISupports*) | nsMsgBodyHandler::nsMsgBodyHandler(nsIMsgSearchScopeTerm*, unsigned int, nsIMsgDBHdr*, nsIMsgDatabase*)&hellip;
(Reporter)

Comment 2

9 months ago
Mac signature appears to be [@ <name omitted> | nsMsgBodyHandler::nsMsgBodyHandler ]  bp-d2646e3c-e9f6-4d59-a1e6-349bf2170226

 0 	XUL	<name omitted>	xpcom/glue/nsCOMPtr.cpp:50
1 	XUL	nsMsgBodyHandler::nsMsgBodyHandler(nsIMsgSearchScopeTerm*, unsigned int, nsIMsgDBHdr*, nsIMsgDatabase*)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/objdir-tb/x86_64/dist/include/nsCOMPtr.h:578
2 	XUL	nsMsgSearchTerm::MatchBody(nsIMsgSearchScopeTerm*, unsigned long long, unsigned int, char const*, nsIMsgDBHdr*, nsIMsgDatabase*, bool*)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/base/search/src/nsMsgSearchTerm.cpp:934
3 	XUL	nsMsgSearchOfflineMail::ProcessSearchTerm(nsIMsgDBHdr*, nsIMsgSearchTerm*, char const*, nsIMsgSearchScopeTerm*, nsIMsgDatabase*, char const*, unsigned int, bool, bool*)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/base/search/src/nsMsgLocalSearch.cpp:497
4 	XUL	nsMsgSearchBoolExpression::OfflineEvaluate(nsIMsgDBHdr*, char const*, nsIMsgSearchScopeTerm*, nsIMsgDatabase*, char const*, unsigned int, bool)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/base/search/src/nsMsgLocalSearch.cpp:139
5 	XUL	nsMsgSearchBoolExpression::OfflineEvaluate(nsIMsgDBHdr*, char const*, nsIMsgSearchScopeTerm*, nsIMsgDatabase*, char const*, unsigned int, bool)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/base/search/src/nsMsgLocalSearch.cpp:160
6 	XUL	nsMsgSearchBoolExpression::OfflineEvaluate(nsIMsgDBHdr*, char const*, nsIMsgSearchScopeTerm*, nsIMsgDatabase*, char const*, unsigned int, bool)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/base/search/src/nsMsgLocalSearch.cpp:160
7 	XUL	<name omitted>	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/base/search/src/nsMsgLocalSearch.cpp:686
8 	XUL	nsMsgSearchSession::MatchHdr(nsIMsgDBHdr*, nsIMsgDatabase*, bool*)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/base/search/src/nsMsgSearchSession.cpp:668
9 	XUL	nsMsgXFVirtualFolderDBView::OnNewHeader(nsIMsgDBHdr*, unsigned int, bool)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/base/src/nsMsgXFVirtualFolderDBView.cpp:123
10 	XUL	nsMsgDatabase::NotifyHdrAddedAll(nsIMsgDBHdr*, unsigned int, int, nsIDBChangeListener*)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/db/msgdb/src/nsMsgDatabase.cpp:921
11 	XUL	nsMsgDatabase::AddNewHdrToDB(nsIMsgDBHdr*, bool)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/db/msgdb/src/nsMsgDatabase.cpp:3547
12 	XUL	nsMsgLocalMailFolder::EndCopy(bool)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/local/src/nsLocalMailFolder.cpp:2472
13 	XUL	nsMsgLocalMailFolder::CopyFileMessage(nsIFile*, nsIMsgDBHdr*, bool, unsigned int, nsACString_internal const&, nsIMsgWindow*, nsIMsgCopyServiceListener*)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/local/src/nsLocalMailFolder.cpp:1946
14 	XUL	nsMsgCopyService::DoNextCopy()	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/base/src/nsMsgCopyService.cpp:353
15 	XUL	nsMsgCopyService::CopyFileMessage(nsIFile*, nsIMsgFolder*, nsIMsgDBHdr*, bool, unsigned int, nsACString_internal const&, nsIMsgCopyServiceListener*, nsIMsgWindow*)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/base/src/nsMsgCopyService.cpp:646
16 	XUL	nsMsgCopy::DoCopy(nsIFile*, nsIMsgFolder*, nsIMsgDBHdr*, bool, nsIMsgWindow*, nsIMsgSend*)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/compose/src/nsMsgCopy.cpp:274
17 	XUL	nsMsgCopy::StartCopyOperation(nsIMsgIdentity*, nsIFile*, int, nsIMsgSend*, char const*, nsIMsgDBHdr*)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/compose/src/nsMsgCopy.cpp:225
18 	XUL	nsMsgComposeAndSend::StartMessageCopyOperation(nsIFile*, int, nsCString const&)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/compose/src/nsMsgSend.cpp:4698
19 	XUL	nsMsgComposeAndSend::MimeDoFCC(nsIFile*, int, char const*, char const*, char const*)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/compose/src/nsMsgSend.cpp:4667
20 	XUL	nsMsgComposeAndSend::DoFcc()	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/compose/src/nsMsgSend.cpp:3659
21 	XUL	nsMsgComposeAndSend::DeliverAsMailExit(nsIURI*, nsresult)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/compose/src/nsMsgSend.cpp:3593
22 	XUL	nsMsgComposeAndSend::SendDeliveryCallback(nsIURI*, bool, nsresult)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/compose/src/nsMsgSend.cpp:3181
23 	XUL	MsgDeliveryListener::OnStopRunningUrl(nsIURI*, nsresult)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/compose/src/nsMsgSend.cpp:249
24 	XUL	nsMsgMailNewsUrl::SetUrlState(bool, nsresult)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/base/util/nsMsgMailNewsUrl.cpp:97
25 	XUL	nsSmtpProtocol::ProcessProtocolState(nsIURI*, nsIInputStream*, unsigned long long, unsigned int)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/compose/src/nsSmtpProtocol.cpp:2057
26 	XUL	nsMsgProtocol::OnDataAvailable(nsIRequest*, nsISupports*, nsIInputStream*, unsigned long long, unsigned int)	/builds/slave/tb-rel-c-esr45-m64_bld-0000000/build/mailnews/base/util/nsMsgProtocol.cpp:293
Crash Signature: [@ nsMsgSearchDBView::OnHdrDeleted(nsIMsgDBHdr*, unsigned int, int, nsIDBChangeListener*)] [@ nsCOMPtr_base::assign_with_AddRef(nsISupports*) | nsMsgBodyHandler::nsMsgBodyHandler(nsIMsgSearchScopeTerm*, unsigned int, nsIMsgDBHdr*, nsIMsgDatabase*)&hellip; → [@ nsMsgSearchDBView::OnHdrDeleted] [@ nsCOMPtr_base::assign_with_AddRef | nsMsgBodyHandler::nsMsgBodyHandler] [@ nsMsgBodyHandler::nsMsgBodyHandler ] [@ <name omitted> | nsMsgBodyHandler::nsMsgBodyHandler ]
(Reporter)

Comment 3

3 months ago
I crashed deleting a message bp-b95ce729-805e-4625-854e-33dc10170910.
I was in a list of gloda results (not a cross folder saved search)
Crash Signature: [@ nsMsgSearchDBView::OnHdrDeleted] [@ nsCOMPtr_base::assign_with_AddRef | nsMsgBodyHandler::nsMsgBodyHandler] [@ nsMsgBodyHandler::nsMsgBodyHandler ] [@ <name omitted> | nsMsgBodyHandler::nsMsgBodyHandler ] → [@ nsMsgSearchDBView::OnHdrDeleted] [@ @0x0 | nsMsgSearchDBView::OnHdrDeleted ] [@ nsCOMPtr_base::assign_with_AddRef | nsMsgBodyHandler::nsMsgBodyHandler] [@ nsMsgBodyHandler::nsMsgBodyHandler ] [@ <name omitted> | nsMsgBodyHandler::nsMsgBodyHandler ]
Summary: crash in nsMsgSearchDBView::OnHdrDeleted(nsIMsgDBHdr*, unsigned int, int, nsIDBChangeListener*) → crash in nsMsgSearchDBView::OnHdrDeleted deleting message
(Reporter)

Comment 4

3 months ago
(In reply to Wayne Mery (:wsmwk, NI for questions) from comment #3)
> I crashed deleting a message bp-b95ce729-805e-4625-854e-33dc10170910.
> I was in a list of gloda results (not a cross folder saved search)

FWIW user crashes always when "open email as list" bp-3c457cc4-f3a9-44ea-b195-e4b520170912 with InvalidArrayIndex_CRASH | nsTArray_Impl<T>::ElementAt | nsMsgSearchDBView::AddHdrFromFolder] - Thunderbird 52.3.0
Summary: crash in nsMsgSearchDBView::OnHdrDeleted deleting message → crash in nsMsgSearchDBView::OnHdrDeleted deleting message in gloda search results
You need to log in before you can comment on or make changes to this bug.