265074 - Crash due to problems handling folder names with '/' (forward slash) in them

Status: VERIFIED DUPLICATE of bug 264467

(Thunderbird :: Mail Window Front End, defect)

Description

[Sean Vickery]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; rv:1.7.3) Gecko/20041001 Firefox/0.10.1
Build Identifier: Thunderbird version 0.8 (20040922)

There's problems with folder names with '/' (forward slash) in them.

1. If you try to rename a subfolder to a name containing a '/' the Rename Folder
dialogue does not complete when you press OK. If you press OK again while
Thunderbird is in this hung state, Thunderbird crashes with an Application Error
(null reference, further details below).

2. If you make a new subfolder with a '/' in it you cannot later delete it.

Reproducible: Always
Steps to Reproduce:
For the error that causes the crash:

1. Make a subfolder of some folder called 'x'
2. Select the subfolder
3. Press F2 to popup the Rename Folder dialog window
4. Change the name of the folder to 'x/y'
5. Press OK (The Rename Folder doesn't close)
5. Press OK again
Actual Results:  
Thunderbird crashed.

Expected Results:  
Renamed the folder as I specified.

Application Error: "The instruction at "0x008e260e" referenced memory at
"0x00000000". The memory could not be "read". Press OK to end program, Cancel to
debug."

(On pressing Cancel to debug, the Visual Studio debugger gave me an error on
startup: "Microsoft Visual C++: Unhandled exception in thunderbird.exe:
0xC0000005: Access Violation.")

The call stack I then obtained was:
THUNDERBIRD! 008e260e()
THUNDERBIRD! 0083e6b4()
THUNDERBIRD! 00493551()
THUNDERBIRD! 0082ea74()
XPCOM! 603161f0()
THUNDERBIRD! 0041b0f3()
THUNDERBIRD! 0041907b()
JS3250! 6009bcf6()
JS3250! 600a0e5c()
JS3250! 6009bd36()
JS3250! 6009bfa3()
JS3250! 60084c4a()
THUNDERBIRD! 005d9be4()
THUNDERBIRD! 006932ee()
THUNDERBIRD! 00540477()
THUNDERBIRD! 005406ca()
THUNDERBIRD! 0055c19a()
THUNDERBIRD! 005662d4()
THUNDERBIRD! 0062f8fa()
THUNDERBIRD! 0062f797()
THUNDERBIRD! 00566214()
THUNDERBIRD! 00565f6a()
THUNDERBIRD! 006538de()
THUNDERBIRD! 00652728()
THUNDERBIRD! 0056625f()
THUNDERBIRD! 00565ccf()
THUNDERBIRD! 005c045d()
THUNDERBIRD! 005bf870()
THUNDERBIRD! 005c28cf()
THUNDERBIRD! 004ec5d6()
THUNDERBIRD! 004f0307()
THUNDERBIRD! 004f072c()
THUNDERBIRD! 004ecb36()
USER32! 77e11ef0()
USER32! 77e1204c()
USER32! 77e121af()
THUNDERBIRD! 007623fc()
THUNDERBIRD! 00523f7e()
THUNDERBIRD! 00522178()
XPCOM! 603161f0()
THUNDERBIRD! 0041b0f3()
THUNDERBIRD! 0041907b()
JS3250! 6009bcf6()
JS3250! 600a0e5c()
JS3250! 6009bd36()
THUNDERBIRD! 0041ff49()
THUNDERBIRD! 0041dec3()
XPCOM! 603156d6()
XPCOM! 603161f0()
THUNDERBIRD! 0041b0f3()
THUNDERBIRD! 0041907b()
JS3250! 6009bcf6()
JS3250! 600a0e5c()
JS3250! 6009bd36()
JS3250! 6009bfa3()
JS3250! 60084c4a()
THUNDERBIRD! 005d9be4()
THUNDERBIRD! 006932ee()
THUNDERBIRD! 005d134e()
THUNDERBIRD! 005d07d0()
THUNDERBIRD! 0050e680()
THUNDERBIRD! 0050e85e()
THUNDERBIRD! 00540692()
THUNDERBIRD! 005b405d()
THUNDERBIRD! 0055c244()
THUNDERBIRD! 0055c21c()
THUNDERBIRD! 0055c21c()
THUNDERBIRD! 0055c21c()
THUNDERBIRD! 0055c21c()
THUNDERBIRD! 00566199()
THUNDERBIRD! 00565ccf()
THUNDERBIRD! 005c0559()
THUNDERBIRD! 005bf870()
THUNDERBIRD! 005c28cf()
THUNDERBIRD! 004ec5d6()
THUNDERBIRD! 004ee0f6()
THUNDERBIRD! 004ee2c5()

and the register set was:

 EAX = 00000000 EBX = 00000000
 ECX = 0012B610 EDX = 0012B610
 ESI = 029E8FF4 EDI = 00000000
 EIP = 008E260E ESP = 0012B450
 EBP = 0012B618 EFL = 00000246
 MM0 = 05D800000123027F
 MM1 = A00BD8F4BB47E5F4
 MM2 = 00000000E37E2D28
 MM3 = E369F48800004000
 MM4 = 0000000000000000
 MM5 = 0000000000000000
 MM6 = C800000000000000
 MM7 = C800000000000000
 CS = 001B DS = 0023 ES = 0023 SS = 0023
 FS = 0038 GS = 0000 OV=0 UP=0 EI=1 PL=0
 ZR=1 AC=0 PE=1 CY=0
 ST0 = +0.13222475531848305e+2005
 ST1 = +0.00000000000000000e+0000
 ST2 = +0.00000000000000000e+0000
 ST3 = +0.00000000000000000e+0000
 ST4 = +0.00000000000000000e+0000
 ST5 = +0.00000000000000000e+0000
 ST6 = +2.50000000000000000e+0001
 ST7 = +2.50000000000000000e+0001
 CTRL = 027F STAT = 0123 TAGS = FFFF
 EIP = 7802D390
 CS = 001B DS = 0023 EDO = 0012AB

Comment 1

[Jo Hermans]

Bug 140212 reports lots of problems, but no crash.

Comment 2

[Mike Cowperthwaite]

*** This bug has been marked as a duplicate of 264467 ***

Comment 3

[Henrik Skupin [:whimboo][⌚️UTC+2]]

v.