114670 - Crash on tearing down composition window after send (OSX)

Status: VERIFIED DUPLICATE of bug 113719

(MailNews Core :: Composition, defect)

Description

[The Michael Toy]

Build 2001120708
Mac OSX

I have crashed a four times since downloading this build when I hit the send
button.  The mail gets sent, but mozilla dies.  I can't reproduce this on
purpose yet.

I've learned how to turn on stack traces, and caught the traces from the last
two crashes.  I'm attaching the trace to the bug, the top few frames look like this:

 #0   0x0064294c in 0x64294c
 #1   0x0054e304 in free
 #2   0x00616f58 in nsCOMPtr_base::assign_from_helper(nsCOMPtr_helper const &,
nsID const &)
 #3   0x02bbc3c0 in nsXULTooltipListener::HideTooltip(void)
 #4   0x02bba0b0 in nsXULTooltipListener::_dt(void)
 #5   0x02bba268 in nsXULTooltipListener::Release(void)

Comment 1

[The Michael Toy]

Attachment: Stack trace

Attached stack trace

Comment 2

[Mike Pinkerton (not reading bugmail)]

this looks like hewitt's new tooltip code.

Comment 3

[Boris Zbarsky [:bzbarsky]]

*** This bug has been marked as a duplicate of 113719 ***

Comment 4

[Sheela Ravindran]

verified as dup