1696893 - Crash in [@ memset | nsXPCWrappedJS::CleanupOutparams] via nsMsgMdnGenerator::SendMdnMsg

Status: RESOLVED FIXED

(Thunderbird :: General, defect)

Description

[Wayne Mery (:wsmwk)]

Daily crash - begins with feb 28 daily build. Continues to today.

Crash report: https://crash-stats.mozilla.org/report/index/87f76b08-f79e-4058-8dc2-f25eb0210301

Reason: EXCEPTION_ACCESS_VIOLATION_WRITE

Top 10 frames of crashing thread:

0 vcruntime140.dll memset f:\dd\vctools\crt\vcruntime\src\string\amd64\memset.asm:292
1 xul.dll static nsXPCWrappedJS::CleanupOutparams js/xpconnect/src/XPCWrappedJSClass.cpp:588
2 xul.dll nsXPCWrappedJS::CallMethod js/xpconnect/src/XPCWrappedJSClass.cpp:951
3 xul.dll PrepareAndDispatch xpcom/reflect/xptcall/md/win32/xptcstubs_x86_64.cpp:168
4 xul.dll SharedStub 
5 xul.dll nsMsgMdnGenerator::SendMdnMsg comm/mailnews/extensions/mdn/nsMsgMdnGenerator.cpp:758
6 xul.dll nsMsgMdnGenerator::CreateMdnMsg comm/mailnews/extensions/mdn/nsMsgMdnGenerator.cpp:366
7 xul.dll nsMsgMdnGenerator::UserAgreed comm/mailnews/extensions/mdn/nsMsgMdnGenerator.cpp:903
8 xul.dll XPTC__InvokebyIndex 
9 xul.dll static XPCWrappedNative::CallMethod js/xpconnect/src/XPCWrappedNative.cpp:1142

bp-b2e8cdab-0412-49c5-ad5a-4b1dd0210308 (has no extensions)

Comment 1

[Wayne Mery (:wsmwk)]

Ping, is nsMsgMdnGenerator::SendMdnMsg in your area?

Comment 2

[Ping Chen [:rnons] (away)]

https://searchfox.org/comm-central/rev/5957a014611d5adf37557044215b486cce565856/mailnews/extensions/mdn/nsMsgMdnGenerator.cpp#758

This must be from bug 1661694, I will send a fix.

Comment 3

[Ping Chen [:rnons] (away)]

Attachment: Bug 1696893 - Fix crash in nsMsgMdnGenerator::SendMdnMsg. r=mkmelin

Seems when an idl function is implemented in JS, the out param can't be nullptr in C++.

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/comm-central/rev/9a412f255856
Fix crash in nsMsgMdnGenerator::SendMdnMsg. r=mkmelin