25181 - mail wizard crashes when you hit cancel and start with mozilla -mail

Status: VERIFIED DUPLICATE of bug 25269

(Core :: JavaScript Engine, defect, P3)

Description

[Christopher Blizzard (:blizzard)]

If you start mozilla with the -mail command line and you haven't established an
account yet, the mail wizard will fire up.  If you hit cancel, it will close the
window.  Then it will pop it up again ( another bug?  might be causing this? )
Hit cancel again and it will crash.  It doesn't do this if you set up a main
account by clicking on the mail/news icon in the browser if the browser window
is up first.

Here's the trace:

(gdb) where
#0  0x404664ff in nsJSContext::EvaluateString (this=0x8248bd0, 
    aScript=@0xbffff4c8, aScopeObject=0x824ad98, aPrincipal=0x87fc380, 
    aURL=0x87ce140 "¨X\207\b\230¡<@", aLineNo=142332464, 
    aVersion=0x862e3f8 "", aRetValue=@0xbffff430, aIsUndefined=0xbffff42c)
    at nsJSEnvironment.cpp:299
#1  0x4047ce1a in GlobalWindowImpl::RunTimeout (this=0x8241648, 
    aTimeout=0x87417e0) at nsGlobalWindow.cpp:2172
#2  0x4047cb61 in nsGlobalWindow_RunTimeout (aTimer=0x8741870, 
    aClosure=0x87417e0) at nsGlobalWindow.cpp:2087
#3  0x409914bb in nsTimerGtk::FireTimeout (this=0x8741870) at nsTimerGtk.cpp:48
#4  0x40991a26 in nsTimerExpired (aCallData=0x8741870) at nsTimerGtk.cpp:165
#5  0x408b8a04 in g_timeout_dispatch () from /usr/lib/libglib-1.2.so.0
#6  0x408b7be6 in g_main_dispatch () from /usr/lib/libglib-1.2.so.0
#7  0x408b81a1 in g_main_iterate () from /usr/lib/libglib-1.2.so.0
#8  0x408b8341 in g_main_run () from /usr/lib/libglib-1.2.so.0
#9  0x407dd479 in ?? () from /usr/lib/libgtk-1.2.so.0
#10 0x406ff647 in nsAppShell::Run (this=0x809c678) at nsAppShell.cpp:304
#11 0x405b541d in nsAppShellService::Run (this=0x80b3da0)
    at nsAppShellService.cpp:465
#12 0x804bfbd in main1 (argc=2, argv=0xbffff8c4) at nsAppRunner.cpp:597
#13 0x804c447 in main (argc=2, argv=0xbffff8c4) at nsAppRunner.cpp:690

Comment 1

[Alec Flett]

see also bug 25269
adding brendan/jband to CC

Comment 2

[Mike McCabe]

Reassigning to Vidur, as the timer code seems to be his.  (Vidur, could you
either reassign or set the category appropriately?)

This stack trace doesn't actually get as far as either the JS engine or
XPConnect, so it's not likely to be one of those.

Comment 3

[Mike McCabe]

Any connection with the checkin of 22979?

Comment 4

[Alec Flett]

see also my recent comments in bug 25269

Comment 5

[leger]

Adding "crash" keyword to all known open crasher bugs.

Comment 6

[vidur (gone)]

Seems very likely that this is the same bug as 25269. DUPing this, since there's 
some very useful Michael Lowe detective work in the other one.

*** This bug has been marked as a duplicate of 25269 ***

Comment 7

[John Unruh]

Verified duplicate.