168904 - MailNews crashes when opening news groups [@ 0x0012eae9 | 0x0012de02 - nsMsgFolder::SetLabelForMessages]

Status: VERIFIED WORKSFORME

(MailNews Core :: Networking: NNTP, defect)

Description

[Mark Slater]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.2a) Gecko/20020915
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.2a) Gecko/20020915

Clicking on a newsgroup with new messages crashes Mozilla immediately.

Reproducible: Always

Steps to Reproduce:
1. Go to newsgroup with new messages indicated
2. Click on newsgroup

Actual Results:  
Immediate crash.

Expected Results:  
Display newsgroup with news messages.

TB 11003996K
TB 11003979Z

Comment 1

[Frederic Bezies]

WFM - trunk build 2002091504 - WinXP

Reporter: did you try with a blank new profile ?

Have you made a clean install of this mozilla nightly build ?

Any 3rd party theme used ?

Comment 2

[Olivier Cahagne]

doron, can you retreive Talkback data please: TB11003996K ?

Comment 3

[Frank Contrepois]

Moz crash when I try to get Imap mail.

Comment 4

[Frank Contrepois]

TB11012768Q
TB11019699Q

Comment 5

[Patrick]

I saw this too with Sept 15 built on Win2k, SP3 and IMAP account. Even after
uninstalling MOZ and clearing the installation folder.

Not seeing this with 2002091604 anymore when installed on top of Sept 13 build.

Comment 6

[Patrick]

sorry for the spam, forgot to add myself to the CC list

Comment 7

[Mark Slater]

Frederic - Haven't tried with blank profile, will try tomorrow (I saw the crash
on my office PC). No third party themes used or otherwise installed.

Frank - Perhaps you're experiencing bug 130359 ?

Comment 8

[[e-mail] (gone - use [e-mail] instead)]

From TB11003979Z (note that there aren't any NNTP/NEWS calls in this stack).

I think this should go to Sean Su, because it's crashing in Label code (I don't
see the crash in news, myself).

0x0012de02
nsMsgFolder::SetLabelForMessages
[c:/builds/seamonkey/mozilla/mailnews/base/util/nsMsgFolder.cpp, line 2235]
XPTC_InvokeByIndex
[c:/builds/seamonkey/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp,
line 106]
XPCWrappedNative::CallMethod
[c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 1996]
XPC_WN_CallMethod
[c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp,
line 1267]
js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 841]
js_Interpret [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 2804]
js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 857]
js_InternalInvoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 932]
JS_CallFunctionValue [c:/builds/seamonkey/mozilla/js/src/jsapi.c, line 3433]
nsJSContext::CallEventHandler
[c:/builds/seamonkey/mozilla/dom/src/base/nsJSEnvironment.cpp, line 1044]
nsJSEventListener::HandleEvent
[c:/builds/seamonkey/mozilla/dom/src/events/nsJSEventListener.cpp, line 184]
nsEventListenerManager::HandleEventSubType
[c:/builds/seamonkey/mozilla/content/events/src/nsEventListenerManager.cpp, line
1183]
nsEventListenerManager::HandleEvent
[c:/builds/seamonkey/mozilla/content/events/src/nsEventListenerManager.cpp, line
1782]
nsXULElement::HandleDOMEvent
[c:/builds/seamonkey/mozilla/content/xul/content/src/nsXULElement.cpp, line 3470]
nsTreeSelection::FireOnSelectHandler
[c:/builds/seamonkey/mozilla/layout/xul/base/src/tree/src/nsTreeSelection.cpp,
line 744]
nsTreeSelection::Select
[c:/builds/seamonkey/mozilla/layout/xul/base/src/tree/src/nsTreeSelection.cpp,
line 370]
XPTC_InvokeByIndex
[c:/builds/seamonkey/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp,
line 106]
XPCWrappedNative::CallMethod
[c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 1996]
XPC_WN_CallMethod
[c:/builds/seamonkey/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp,
line 1267]
js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 841]
js_Interpret [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 2804]
js_Invoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 857]
js_InternalInvoke [c:/builds/seamonkey/mozilla/js/src/jsinterp.c, line 932]
JS_CallFunctionValue [c:/builds/seamonkey/mozilla/js/src/jsapi.c, line 3433]
nsJSContext::CallEventHandler
[c:/builds/seamonkey/mozilla/dom/src/base/nsJSEnvironment.cpp, line 1044]
nsJSEventListener::HandleEvent
[c:/builds/seamonkey/mozilla/dom/src/events/nsJSEventListener.cpp, line 184]
nsXBLPrototypeHandler::ExecuteHandler
[c:/builds/seamonkey/mozilla/content/xbl/src/nsXBLPrototypeHandler.cpp, line 457]
DoMouse
[c:/builds/seamonkey/mozilla/content/xbl/src/nsXBLMouseMotionHandler.cpp, line 103]
nsXBLMouseHandler::MouseDown
[c:/builds/seamonkey/mozilla/content/xbl/src/nsXBLMouseHandler.cpp, line 124]
nsEventListenerManager::HandleEvent
[c:/builds/seamonkey/mozilla/content/events/src/nsEventListenerManager.cpp, line
1268]
nsXULElement::HandleDOMEvent
[c:/builds/seamonkey/mozilla/content/xul/content/src/nsXULElement.cpp, line 3470]
PresShell::HandleEventInternal
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsPresShell.cpp, line 6200]
PresShell::HandleEvent
[c:/builds/seamonkey/mozilla/layout/html/base/src/nsPresShell.cpp, line 6118]
nsViewManager::HandleEvent
[c:/builds/seamonkey/mozilla/view/src/nsViewManager.cpp, line 2098]
nsView::HandleEvent [c:/builds/seamonkey/mozilla/view/src/nsView.cpp, line 301]
nsViewManager::DispatchEvent
[c:/builds/seamonkey/mozilla/view/src/nsViewManager.cpp, line 1909]
HandleEvent [c:/builds/seamonkey/mozilla/view/src/nsView.cpp, line 83]
nsWindow::DispatchEvent
[c:/builds/seamonkey/mozilla/widget/src/windows/nsWindow.cpp, line 1042]
nsWindow::DispatchWindowEvent
[c:/builds/seamonkey/mozilla/widget/src/windows/nsWindow.cpp, line 1059]
nsWindow::DispatchMouseEvent
[c:/builds/seamonkey/mozilla/widget/src/windows/nsWindow.cpp, line 5143]
ChildWindow::DispatchMouseEvent
[c:/builds/seamonkey/mozilla/widget/src/windows/nsWindow.cpp, line 5398]
nsWindow::ProcessMessage
[c:/builds/seamonkey/mozilla/widget/src/windows/nsWindow.cpp, line 3850]
nsWindow::WindowProc
[c:/builds/seamonkey/mozilla/widget/src/windows/nsWindow.cpp, line 1308]
USER32.DLL + 0x2e98 (0x77e12e98)
USER32.DLL + 0x30e0 (0x77e130e0)
USER32.DLL + 0x5824 (0x77e15824)
nsAppShellService::Run
[c:/builds/seamonkey/mozilla/xpfe/appshell/src/nsAppShellService.cpp, line 472]
main1 [c:/builds/seamonkey/mozilla/xpfe/bootstrap/nsAppRunner.cpp, line 1524]
main [c:/builds/seamonkey/mozilla/xpfe/bootstrap/nsAppRunner.cpp, line 1872]
WinMain [c:/builds/seamonkey/mozilla/xpfe/bootstrap/nsAppRunner.cpp, line 1892]
WinMainCRTStartup()
KERNEL32.DLL + 0x17d08 (0x77e97d08) 

Comment 9

[(not reading, please use [e-mail] instead)]

I don't think it's ssu.

that stack looks wacky.

jband / brendan, does it look kosher to you?

Comment 10

[Frank Contrepois]

I'm not using ssl on my imap, I'm not on OSX :( and the system doesn't hang ...
moz crash!!!

Comment 11

[Mark Slater]

Note: This crash occurs even when trying to read newsgroups that DON'T have new
messages. Changing summary.

TB 11066022H & TB 11067742M

Comment 12

[greer]

These crashes are showing up in the Trunk topcrash data with the signatures
0x0012eae9 and 0x0012de0. Adding those to the summary so that the reporting
shows this bug is logged. 

Marking NEW and topcrash based on the Talkback data. We need to find out what's
wrong or if this is even valid.

Comment 13

[Mark Slater]

Happens with 2002091508 (Win2k), too.

TB 11122762Q

Comment 14

[[e-mail] (gone - use [e-mail] instead)]

Mark Slater, I looked up your stack and it's not anything close to the stack in
this bug.  Perhaps you had content loading in the browser at the same time?

Comment 15

[Mark Slater]

Stephen - That may well be. Lemme just crash my browser again :)

Comment 16

[Mark Slater]

OK. Started moz again, with an old profile (~ 2 months usage). Browser opened,
pressed CTRL-2 to open mailnews. Checked back in the browser window to make sure
about:blank was loaded and nothing else happening. Back to mailnews, clicked on
a newsgroup name. Crash.

That's TB 11182953X

Then I created a new profile, it loaded the default mozilla.org start page.
Loading completed without any problems, throbber stopped etc.
Pressed CTRL-2 to open mailnews, added the newsgroup server, subscribed to some
newsgroups on that server. Clicked on a newsgroup name. Crash.

And that's TB 11183014X

Comment 17

[greer]

Attachment: Talkback stacks

Mark's stacks from the crashes listed in comment #16 match the stack Stephen
lists in comment #8. 
Mark, sounds like you are able to reliably reproduce this one. Would you please
list your steps? Thanks.

Comment 18

[Mark Slater]

Greer, steps are as follows:

1. Open Mailnews
2. Click on news group

Crashes every time.

Comment 19

[Jay Patel [:jay]]

Looking at the source code (nsMsgFolder.cpp, line 2235), it looks like bienvenu
was the last one to touch it on 9/12.  Maybe he can shed some light on this crash. 

2223                  NS_IMETHODIMP

2224 bienvenu   1.273 nsMsgFolder::SetLabelForMessages(nsISupportsArray
*aMessages, nsMsgLabelValue aLabel)
2225                  {
2226                    PRUint32 count;
2227                    NS_ENSURE_ARG(aMessages);
2228                    nsresult rv = aMessages->Count(&count);
2229                    NS_ENSURE_SUCCESS(rv, rv);
2230                  
2231                    for(PRUint32 i = 0; i < count; i++)
2232                    {
2233                      nsCOMPtr<nsIMsgDBHdr> message =
do_QueryElementAt(aMessages, i, &rv);
2234                      NS_ENSURE_SUCCESS(rv, rv);
2235                  
2236                      rv = message->SetLabel(aLabel);
2237                      NS_ENSURE_SUCCESS(rv, rv);
2238                    }
2239                    return NS_OK;
2240                  }

Looks like we're crashing at line 2233 or 2234 according to Talkback. 

Comment 20

[David :Bienvenu]

nsMsgFolder::SetLabelForMessages shouldn't be called when opening a newsgroup.

Comment 21

[David :Bienvenu]

my guess is that this was a broken depend build. Are all instances of this crash
from that one build?

Comment 22

[Jay Patel [:jay]]

Here is what I see in the latest Talkback data for the following stack signatures:

0x0012eae9 - 0 crashes since 9/19
0x0012de02 - 0 crashes since 9/17

nsMsgFolder::SetLabelForMessages - 0 crashes (since Talkback has never reported
this crash under that signature, this just happened to be the function a few
frames down in the all the stacks)

If no one is able to reproduce this crash, looks like a worksforme to me.

Comment 23

[[e-mail] (gone - use [e-mail] instead)]

http://climate/reports/VeryFastSearchStackSigNEW.cfm?stacksig=0x0012eae9
and 
http://climate/reports/VeryFastSearchStackSigNEW.cfm?stacksig=0x0012de02

aren't bringing up any crashes past  9/19 and 9/17, respectively.  I'm marking
this WFM until someone can reproduce this.

Mark Slate, Patrick, Frank, are any of you still seeing this?

Comment 24

[Mark Slater]

Not seeing this anymore. Then again, I completely reinstalled and started with a
fresh profile. Prolly yet another case of a change in a module and old-ish
profiles not working well together.

Comment 25

[[e-mail] (gone - use [e-mail] instead)]

I'm marking this one worksforme.  I've not been able to reproduce, and it's not
showing up in Talkback.

Comment 26

[[e-mail] (gone - use [e-mail] instead)]

verified worksforme.