Closed Bug 1211845 Opened 9 years ago Closed 9 years ago

Thunderbird crashes when clicking on a few emails in my inbox. [@ MimeMultipart_parse_eof ]

Categories

(Thunderbird :: Mail Window Front End, defect)

38 Branch
x86
Windows 8.1
defect
Not set
critical

Tracking

(Not tracked)

RESOLVED DUPLICATE of bug 1016524

People

(Reporter: geoffrey.walton, Unassigned)

Details

(Keywords: crash)

Crash Data

User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0
Build ID: 20150929144111

Steps to reproduce:

Start Thunderbird and display inbox.

Click on an unread email and TB crashes.

Restart and click on same email again and TB crashes again.

All other mails can be read / deleted / moved without problem.

I now have 3 of these emails.


Actual results:

TB crashes.

Restarted in safe mode same problem.

Report ID 	Submitted
bp-e108d31d-2175-4f2a-bc8c-b08a82151006	06/10/2015
bp-556ebe60-73da-4094-8e4b-f72142151006	06/10/2015
bp-1b2984fb-2343-44ba-a376-cd0f12151006	06/10/2015
bp-f65f9f33-da9f-4579-8505-1fe9a2151005	05/10/2015
bp-77973e22-7805-41f2-8dd8-fe7862151005	05/10/2015

AdapterDeviceID: 0x0a16
AdapterDriverVersion: 10.18.10.3574
AdapterSubsysID: 227e103c
AdapterVendorID: 0x8086
Add-ons: en-GB%40dictionaries.addons.mozilla.org:1.19.1,%7Be2fda1a4-762b-4020-b5ad-a41df1933103%7D:4.0.3,%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:38.3.0
AvailablePageFile: 6311931904
AvailablePhysicalMemory: 5576957952
AvailableVirtualMemory: 3844927488
BIOS_Manufacturer: Insyde
BlockedDllList: 
BreakpadReserveAddress: 36306944
BreakpadReserveSize: 67108864
BuildID: 20150928051427
CrashTime: 1444127141
EMCheckCompatibility: true
FramePoisonBase: 00000000f0de0000
FramePoisonSize: 65536
InstallTime: 1444042768
Notes: AdapterVendorID: 0x8086, AdapterDeviceID: 0x0a16, AdapterSubsysID: 227e103c, AdapterDriverVersion: 10.18.10.3574

ProductID: {3550f703-e582-4d05-9a08-453d09bdfdc6}
ProductName: Thunderbird
ReleaseChannel: release
SecondsSinceLastCrash: 186
StartupTime: 1444127094
SystemMemoryUsePercentage: 34
Theme: classic/1.0
Throttleable: 1
TotalPageFile: 9858867200
TotalPhysicalMemory: 8516689920
TotalVirtualMemory: 4294836224
URL: 
Vendor: 
Version: 38.3.0
Winsock_LSP: MSAFD Tcpip [TCP/IP] : 2 : 1 : %SystemRoot%\system32\mswsock.dll 
 MSAFD Tcpip [UDP/IP] : 2 : 2 :  
 MSAFD Tcpip [RAW/IP] : 2 : 3 : %SystemRoot%\system32\mswsock.dll 
 MSAFD Tcpip [TCP/IPv6] : 2 : 1 :  
 MSAFD Tcpip [UDP/IPv6] : 2 : 2 : %SystemRoot%\system32\mswsock.dll 
 MSAFD Tcpip [RAW/IPv6] : 2 : 3 :  
 RSVP TCPv6 Service Provider : 2 : 1 : %SystemRoot%\system32\mswsock.dll 
 RSVP TCP Service Provider : 2 : 1 :  
 RSVP UDPv6 Service Provider : 2 : 2 : %SystemRoot%\system32\mswsock.dll 
 RSVP UDP Service Provider : 2 : 2 :  
 MSAFD RfComm [Bluetooth] : 2 : 1 : %SystemRoot%\system32\mswsock.dll
useragent_locale: en-GB

This report also contains technical information about the state of the application when it crashed.


Expected results:

Email contents displayed in preview pane.
Same problem after updating to Earlybird v41.0

07c6df19-2d7e-418e-a3af-e8e0772c0045

EXCEPTION_ACCESS_VIOLATION_EXEC

AdapterDeviceID: 0x0a16
AdapterDriverVersion: 10.18.10.3574
AdapterSubsysID: 227e103c
AdapterVendorID: 0x8086
Add-ons: extra-cols%40jminta_gmail.com:1.1.5,en-GB%40dictionaries.addons.mozilla.org:1.19.1,%7Be2fda1a4-762b-4020-b5ad-a41df1933103%7D:4.3b1,%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:41.0
AvailablePageFile: 6263906304
AvailablePhysicalMemory: 5570121728
AvailableVirtualMemory: 3732480000
BIOS_Manufacturer: Insyde
BlockedDllList: 
BreakpadReserveAddress: 51707904
BreakpadReserveSize: 67108864
BuildID: 20150908063005
CrashTime: 1444131694
EMCheckCompatibility: true
FramePoisonBase: 00000000f0de0000
FramePoisonSize: 65536
InstallTime: 1444131514
Notes: AdapterVendorID: 0x8086, AdapterDeviceID: 0x0a16, AdapterSubsysID: 227e103c, AdapterDriverVersion: 10.18.10.3574
D2D- D2D1.1- D2D1.1+ D2D+ DWrite- DWrite+ D3D11 Layers- D3D11 Layers+ 
ProductID: {3550f703-e582-4d05-9a08-453d09bdfdc6}
ProductName: Thunderbird
ReleaseChannel: beta
SafeMode: 0
SecondsSinceLastCrash: 138
StartupTime: 1444131567
SystemMemoryUsePercentage: 34
TelemetryEnvironment: {"build":{"applicationId":"{3550f703-e582-4d05-9a08-453d09bdfdc6}","applicationName":"Thunderbird","architecture":"x86","buildId":"20150908063005","version":"41.0","vendor":null,"platformVersion":"41.0","xpcomAbi":"x86-msvc","hotfixVersion":null},"partner":{"distributionId":null,"distributionVersion":null,"partnerId":null,"distributor":null,"distributorChannel":null,"partnerNames":[]},"system":{"memoryMB":8122,"isWow64":true,"cpu":{"count":4,"vendor":null,"family":null,"model":null,"stepping":null,"extensions":["hasMMX","hasSSE","hasSSE2","hasSSE3","hasSSSE3","hasSSE4_1","hasSSE4_2"]},"os":{"name":"Windows_NT","version":"6.3","servicePackMajor":0,"servicePackMinor":0,"installYear":2015,"locale":"en-GB"},"hdd":{"profile":{"model":"HGST HTS541010A9E680","revision":"JA0OA710"},"binary":{"model":"HGST HTS541010A9E680","revision":"JA0OA710"},"system":{"model":"HGST HTS541010A9E680","revision":"JA0OA710"}},"gfx":{"D2DEnabled":true,"DWriteEnabled":true,"adapters":[{"description":"Intel(R) HD Graphics Family","vendorID":"0x8086","deviceID":"0x0a16","subsysID":"227e103c","RAM":null,"driver":"igdumdim64 igd10iumd64 igd10iumd64 igdumdim32 igd10iumd32 igd10iumd32","driverVersion":"10.18.10.3574","driverDate":"4-24-2014","GPUActive":true}],"monitors":[{"screenWidth":1366,"screenHeight":768,"refreshRate":60,"pseudoDisplay":false}]}},"settings":{"addonCompatibilityCheckEnabled":true,"blocklistEnabled":true,"isDefaultBrowser":null,"e10sEnabled":false,"telemetryEnabled":true,"isInOptoutSample":false,"locale":"en-US","update":{"channel":"beta","enabled":true,"autoDownload":false},"userPrefs":{"app.update.auto":false,"browser.cache.disk.capacity":358400,"devtools.debugger.remote-enabled":false}},"profile":{"creationDate":16501},"addons":{"activeAddons":{"extra-cols@jminta_gmail.com":{"blocklisted":false,"description":"Adds additional columns to Thunderbird's folder pane","name":"Extra Folder Columns","userDisabled":false,"appDisabled":false,"version":"1.1.5","scope":1,"type":"extension","foreignInstall":0,"hasBinaryComponents":false,"installDay":15307,"updateDay":15798},"en-GB@dictionaries.addons.mozilla.org":{"blocklisted":false,"description":"British English Dictionary R1.19 for Firefox, Thunderbird and SeaMonkey by David Bartlett.\n\nTo enable, right-click in a multi-line text box, select \"Languages\", then \"English / United Kingdom\".","name":"British English Dictionary","userDisabled":false,"appDisabled":false,"version":"1.19.1","scope":1,"type":"extension","foreignInstall":0,"hasBinaryComponents":false,"installDay":15317,"updateDay":16503},"{e2fda1a4-762b-4020-b5ad-a41df1933103}":{"blocklisted":false,"description":"An integrated calendar for Thunderbird","name":"Lightning","userDisabled":false,"appDisabled":false,"version":"4.3b1","scope":1,"type":"extension","foreignInstall":0,"hasBinaryComponents":false,"installDay":15397,"updateDay":16714}},"theme":{"id":"{972ce4c6-7e08-4474-a285-3208198ce6fd}","blocklisted":false,"description":"The default theme.","name":"Default","userDisabled":false,"appDisabled":false,"version":"41.0","scope":4,"foreignInstall":false,"hasBinaryComponents":false,"installDay":15307,"updateDay":16714},"activePlugins":[{"name":"Shockwave Flash","version":"19.0.0.185","description":"Shockwave Flash 19.0 r0","blocklisted":false,"disabled":false,"clicktoplay":false,"mimeTypes":["application/x-shockwave-flash","application/futuresplash"],"updateDay":16699}],"activeGMPlugins":{},"activeExperiment":{},"persona":null}}
Theme: classic/1.0
Throttleable: 1
TotalPageFile: 9858867200
TotalPhysicalMemory: 8516689920
TotalVirtualMemory: 4294836224
URL: 
Vendor: 
Version: 41.0
Winsock_LSP: MSAFD Tcpip [TCP/IP] : 2 : 1 : %SystemRoot%\system32\mswsock.dll 
 MSAFD Tcpip [UDP/IP] : 2 : 2 :  
 MSAFD Tcpip [RAW/IP] : 2 : 3 : %SystemRoot%\system32\mswsock.dll 
 MSAFD Tcpip [TCP/IPv6] : 2 : 1 :  
 MSAFD Tcpip [UDP/IPv6] : 2 : 2 : %SystemRoot%\system32\mswsock.dll 
 MSAFD Tcpip [RAW/IPv6] : 2 : 3 :  
 RSVP TCPv6 Service Provider : 2 : 1 : %SystemRoot%\system32\mswsock.dll 
 RSVP TCP Service Provider : 2 : 1 :  
 RSVP UDPv6 Service Provider : 2 : 2 : %SystemRoot%\system32\mswsock.dll 
 RSVP UDP Service Provider : 2 : 2 :  
 MSAFD RfComm [Bluetooth] : 2 : 1 : %SystemRoot%\system32\mswsock.dll
useragent_locale: en-US

This report also contains technical information about the state of the application when it crashed.
OS: Unspecified → Windows 8.1
Hardware: Unspecified → x86
Please do the following
1. turn off the preview pane using F8
2. copy a couple of the affected messages to a NEW local folder A
3. visit your Thunderbird profile via Help | Troubleshooting | Show Folder and find  Mail\Local Folders
4. shut down thunderbird
5. zip and email folder A that you find in  Mail\Local Folders
Will do.

Error console shows these types of errors:-

Timestamp: 06/10/2015 12:42:15
Error: [Exception... "Component returned failure code: 0x80070057 (NS_ERROR_ILLEGAL_VALUE) [nsIMsgFolder.getStringProperty]"  nsresult: "0x80070057 (NS_ERROR_ILLEGAL_VALUE)"  location: "JS frame :: chrome://messenger/content/folderPane.js :: getSmartFolderName :: line 2764"  data: no]
Source File: chrome://messenger/content/folderPane.js
Line: 2766

or

Timestamp: 06/10/2015 12:42:15
Error: [Exception... "Component returned failure code: 0x80070057 (NS_ERROR_ILLEGAL_VALUE) [nsIMsgFolder.getStringProperty]"  nsresult: "0x80070057 (NS_ERROR_ILLEGAL_VALUE)"  location: "JS frame :: chrome://messenger/content/folderPane.js :: getSmartFolderName :: line 2764"  data: no]
Source File: chrome://messenger/content/folderPane.js
Line: 2766

Which links to

function getSmartFolderName(aFolder) {
  try {
    return aFolder.getStringProperty("smartFolderName");
  } catch (ex) {
    Components.utils.reportError(ex);
    return null;
  }
}
Please find attached directory zip containing 3 mails that cause this error.
Group: mail-core-security
This is a dup of bug 1016524. That bug shows two different crash address patterns, the most common pattern is 0x5a5a5a82, a less common pattern (and the reports here) are ffffffffe5e5e60d.

I assume the security-sensitive setting is because you do not want the attachment contents world readable?

I loaded the mbox directory from the attachment, but unfortunately I could not reproduce the crash with that. I can see all three messages with no crash. I'll make any further comments in bug 1016524.

Since you can reliably reproduce this bug and you seem technically sophisticated, I may ask you to try a version with some experimental fixes in it.
Status: UNCONFIRMED → RESOLVED
Closed: 9 years ago
Resolution: --- → DUPLICATE
Yes just though it might be best not to advertise businesses and contents.

Thanks for your kind evaluation of my technical expertise.

Just ping over what you need done or if you want to "take control" of my PC so you can see the problem that is fine too.

Cheers

G
When running with the attached messages, I never reach the code where it crashes. Whenever I get the stack in the same state, obj->closed_p is true at this point, and the method returns:


static int
MimeMultipart_parse_eof (MimeObject *obj, bool abort_p)
{
  MimeMultipart *mult = (MimeMultipart *) obj;
  MimeContainer *cont = (MimeContainer *) obj;

  if (obj->closed_p) return 0;
Group: mail-core-security
Severity: normal → critical
Crash Signature: [@ MimeMultipart_parse_eof ]
Keywords: crash
Summary: Thunderbird crashes when clicking on a few emails in my inbox. → Thunderbird crashes when clicking on a few emails in my inbox. [@ MimeMultipart_parse_eof ]
You need to log in before you can comment on or make changes to this bug.