Crash in _purecall | Imeapiutil::CImeCandidateListChangeNotify::`vector deleting destructor'' (win10)

NEW
Unassigned

Status

()

Core
Widget: Win32
P3
critical
8 months ago
2 months ago

People

(Reporter: wsmwk, Unassigned)

Tracking

({crash, inputmethod, topcrash-thunderbird})

54 Branch
x86
Windows 10
crash, inputmethod, topcrash-thunderbird
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [tbird topcrash][tpi:+], crash signature)

(Reporter)

Description

8 months ago
THis has emerged as #16 crash for TB45.7.1

bp-30388f0b-cbe6-4222-b2a2-726b72170214.
0 	kernelbase.dll	RaiseException	
1 	msvcrt.dll	_purecall	
2 	imetip.dll	Imeapiutil::CImeCandidateListChangeNotify::`vector deleting destructor'(unsigned int)	
3 	imetip.dll	Imeapiutil::CImeCandidateListChangeNotify::Release()	
4 	imjpapi.dll	ATL::IConnectionPointImpl<CImeCandidateList, &__s_GUID const _GUID_b455d56b_508b_4782_9ff1_bfe7700aae19, ATL::CComDynamicUnkArray>::Unadvise(unsigned long)	
5 	imetip.dll	Imeapiutil::CImeCandidateListChangeNotify::Unadvise()	
6 	imetip.dll	CTipFnCandidateHandler::OnProductObjectChanged(unsigned long)	
7 	imetip.dll	CTipFnCandidateHandler::_OnProductObjectChanged(unsigned long, void*)	
8 	imetip.dll	Imeapiutil::CImeProductObjectChangeNotify::OnProductObjectChanged(unsigned long)	
9 	imjkapi.dll	CImeProductObject_JK::EndUpdateProductObject(int)	
10 	imjpapi.dll	CImeIPointCallBack::GenerateMessage()	
11 	imjpapi.dll	CIImeIPoint::UpdateContext(int)	
12 	imjppred.dll	NotifyUpdateContextToMainThread(IImeEMManager*)	
13 	imjppred.dll	CCmdPredictCreateCandidate::ShowCandidateWindow(bool)	
14 	imjppred.dll	CCmdPredictCreateCandidate::OnCandidateReady(void*)	
15 	imjppred.dll	std::_Func_impl<std::_Callable_fun<void (*const)(void*), 0>, std::allocator<std::_Func_class<void, void*, std::_Nil, std::_Nil, std::_Nil, std::_Nil, std::_Nil, std::_Nil> >, void, void*, std::_Nil, std::_Nil, std::_Nil, std::_Nil, std::_Nil, std::_Nil>::_Do_call(void*&&)	
16 	imjppred.dll	CSuggestionClient::_OnSuggestionReady(unsigned long, IMtfSuggestionList*, void*)	
17 	imjppred.dll	CImeSuggestionNotify::SuggestionReady(unsigned long, IMtfSuggestionList*)	
18 	imjppred.dll	CFrameworkWrapper::RunSuggestion(CQueueItem*)	
19 	imjppred.dll	CIMEFrameworkHost::CIMEFrameworkThread::ThProcMain()	
20 	imjppred.dll	CIMEFrameworkHost::CIMEFrameworkThread::_ThreadProc(void*)	
21 	kernel32.dll	BaseThreadInitThunk

Updated

6 months ago
Component: General → Widget: Win32
Keywords: inputmethod
Product: Thunderbird → Core

Updated

6 months ago
Priority: -- → P3
Whiteboard: tpi:+
(Reporter)

Comment 1

6 months ago
To reconfiRm, this is a significant crash for thunderbird, i.e. topcrash.
TB52 rank is about the same at #21. TB45.8.0 settled in at #23

For unknown reason, crash rate dropped signifiantly for a one month period starting Nov 9
https://crash-stats.mozilla.com/signature/?signature=_purecall%20%7C%20Imeapiutil%3A%3ACImeCandidateListChangeNotify%3A%3A%60vector%20deleting%20destructor%27%27&date=%3E%3D2016-10-20T10%3A11%3A21.000Z&date=%3C2017-04-20T10%3A11%3A21.000Z&_columns=date&_columns=product&_columns=version&_columns=build_id&_columns=platform&_columns=reason&_columns=address&_columns=install_time&_sort=-date&page=1#graphs
Keywords: topcrash-thunderbird
Whiteboard: tpi:+ → [tbird topcrash][tpi:+]

Comment 2

6 months ago
This is IME's thread by IME, not us.  Why is most crash Thunderbird although there is a few crash in Firefox?
(In reply to Makoto Kato [:m_kato] from comment #2)
> This is IME's thread by IME, not us.  Why is most crash Thunderbird although
> there is a few crash in Firefox?

If this crash can occur only with HTMLEditor, it's possible.
Some useful comments:

* 文章(本文)を入力して、Enterキーを押下したら落ちました。 
  (Crashed at Enter key when I compose body of an email.)
* キーボードを早く打つと落ちます。かな漢字変換の問題なのかもしれませんが、IMEです。 
  (Crashed when I type fast.)
* メール本文を作成中、漢字変換をしようとした際に変換ができずひらがなの状態のままフリーズし、そのままThunderbirdが落ちた。 
  (When I compose body of an email and try to convert composition string, Thunderbird was frozen with non-converted composition string, then, crashed.)
* 最近、よくクラッシュします... 日本語入力中に発生することが多いです。 Windows10標準IMEです。(Microsoft IME) 
  (In most cases, crashed at typing Japanese text.  Windows 10's default IME.)
* メール作成中にエンターを押す事で急にソフト自体が終了してしまった。 
  (Crashed at typing Enter when I compose body of an email.)
* 落ちました。 起動後しばらくたつと重くなるというよりも、メールを記入していると徐々に重くなってしまう傾向がある様に思われます。 その後、日本語文字入力で変換時に変換候補がプルダウン表示されなくなったりしています。 最後には固まって落ちます。 今回は、いきなり固まって落ちた感じです。 
  (While I'm composing email, it becomes slower.  Then, I sometimes don't see candidate list of IME.  And finally, it's frozen and crashes.  But in this time, it was suddenly frozen and crashed.)

And looks like that all reports (at least having comment of them) use Japanese MS-IME.
Yoshida-san, could you check this too?

Updated

5 months ago
Crash Signature: [@ _purecall | Imeapiutil::CImeCandidateListChangeNotify::`vector deleting destructor''] → [@ _purecall | Imeapiutil::CImeCandidateListChangeNotify::`vector deleting destructor''] [@ Imeapiutil::CImeCandidateListChangeNotify::`vector deleting destructor'']
(Reporter)

Comment 6

2 months ago
(In reply to Masayuki Nakano [:masayuki] (JST, +0900) from comment #5)
> Yoshida-san, could you check this too?

Is [thunk]:Imeapiutil::CImeIsAIMMWindow::Release`adjustor{4}'' also an example?  #22 crash for Thunderbird 52.2.1
https://crash-stats.mozilla.com/signature/?date=%3C2017-08-14T06%3A32%3A51%2B00%3A00&date=%3E%3D2017-08-07T06%3A32%3A51%2B00%3A00&product=Thunderbird&version=52.2.1&signature=%5Bthunk%5D%3AImeapiutil%3A%3ACImeIsAIMMWindow%3A%3ARelease%60adjustor%7B4%7D%27%27
Flags: needinfo?(kotaroy)

Comment 7

2 months ago
Crash at Imeapiutil::CImeCandidateListChangeNotify::`vector deleting destructor' and IMJPTIP.DLL!CTipFnHotkeyManager::InitContextHotkeys are similar but different bugs. Both will be fixed in Fall Creators Update. And in addition to that we're now working on backporting the fixes to Creators Update (1703).

Not sure for CImeIsAIMMWindow::Release, though. We have no such crash in our record.
Flags: needinfo?(kotaroy)
(Reporter)

Updated

2 months ago
Depends on: 1367692
You need to log in before you can comment on or make changes to this bug.