274169 - Trunk crash [@ nsSubstring::ReplacePrep] [@ nsAString::~nsAString] using password manager

Status: RESOLVED WORKSFORME

(SeaMonkey :: Passwords & Permissions, defect)

Description

[Tobias Fischer]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a6) Gecko/20041210 Mnenhy/0.6.1.10028
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a6) Gecko/20041211 Mnenhy/0.6.1.10028

When I startup MailNews Mozilla is crashing reproduceable while try to send
Account-Information (saved Username) to Pop3-Server. "Checking for new messages
at Startup" is enabled for one account. 

Mozilla is also crashing when I try to login at Bugzilla, clicking "Send"
Button. I have saved the Account-Information in the Passwordmanager. 

Sorry that I have choosed probably the wrong Component, but I don't know better now.

Reproducible: Always
Steps to Reproduce:
1. Start Tinderbox-Build Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US;
rv:1.8a6) Gecko/20041211 Mnenhy/0.6.1.10028 {Build ID: 2004121101}
2. Start MailNews or try to send Account Information to eg. Bugzilla for Login
3. 

Actual Results:  
Mozilla ceashes imediatly

Expected Results:  
Sendein Account Information successful, Login at Server.

Have tried another Profile without mnenhy, Mozilla crashes too.

Comment 1

[Tobias Fischer]

Attachment: Part of Dr. Watson Crash Back Stack

Add the upper Part of the (hopefully not to useless) Dr. Watson Stack, there is
nothing better now. Try to get an Talkback-Report later today.

Comment 2

[Tobias Fischer]

This must be broken sometimes later than 2004121008, this Build works fine here,
but 2004121023 is broken. 

Comment 3

[Christian :Biesinger (don't email me, ping me on IRC)]

do you have a talkback ID for this crash? with that, we could get function names
for the wallet.dll functions from your dr. watson stack...

Comment 4

[Tobias Fischer]

No, sorry I haven't got an Talkback-Stack. 

I have reproduced the crash several times with the Talkback enabled Build:
http://ftp.mozilla.org/pub/mozilla.org/mozilla/nightly/2004-12-11-06-trunk/mozilla-i586-pc-msvc.zip
but Talkback won't come up while crashing. Pitty. 

Probably Bug 274185 is related to this, there are two stacks from an Linux-Crash.

Comment 5

[Tobias Fischer]

This is probably related to the checkin yesterday to signsign.cpp from bug 270248

Comment 6

[Philip K. Warren]

I have backed out the changes from yesterday. Can you verify that this problem
no longer exists?

Comment 7

[Hermann Schwab]

crashes using todays windows nightly on Win98, 1.8a6: 2004121104
TB2485817X, TB2485768H, TB2485741Z, TB2485612H, TB2485260E, TB2485120W

got them when I tried to login using passwordmanager, or lookup a talkbackid at 
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=TB2485768H

feel free to file a new bug if they don´t belong here. I didn´t want to crash my
mail accounts.

Comment 8

[Tobias Fischer]

Now MailNews and login in at Bugzilla works fine with CREATURE-Tinderbox-Build
2004121112, first one after Philip has backed out his yesterdays Checkin. 

Yes, I can verify, that this Problem no longer exists. 

Thank you for backing out, and sorry that I havn't got a better Windows-Stack. 
And Bug 274215 is an Duplicate, but I have not the permission to dupe. 

Comment 9

[Frank Wein [:mcsmurf]]

(In reply to comment #4)
> No, sorry I haven't got an Talkback-Stack. 
> 
> I have reproduced the crash several times with the Talkback enabled Build:
>
http://ftp.mozilla.org/pub/mozilla.org/mozilla/nightly/2004-12-11-06-trunk/mozilla-i586-pc-msvc.zip
> but Talkback won't come up while crashing. Pitty. 

IIRC you have to delete compreg.dat once, because Talkback doesn't get
registered correctly since some time now...

Comment 10

[Philip K. Warren]

*** Bug 274215 has been marked as a duplicate of this bug. ***

Comment 11

[Hermann Schwab]

Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8a6) Gecko/20041211
BuildID 2004121112 from CREATURE tinderbox.
my problems reported in comment 7 are gone

Comment 12

[Tobias Fischer]

Add another Talkback-Stack while try to Login at Bugzilla with 2004121106:
TB2490227H

Thanks Frank for your hint. 

Comment 13

[Jay Patel [:jay]]

Adding topcrash and zt4newcrash keywords to make sure we take care of this
regression and make sure it doesn't come back on the Trunk.  

From looking at the Talkback data, it looks like this was only a problem for
12/11 builds...I don't see any crashes from the past couple of days, so Philips
backout seemed to have worked.

Most user comments mentioned the password manager and crashing on autofill.  If
this doesn't show up again in the next few days, we can mark this worksforme.

Comment 14

[Jay Patel [:jay]]

Adding [@ nsSubstring::ReplacePrep] [@ nsAString::~nsAString] to summary to
track the 2 stack signatures that represent most of the crashes for this
regression.  Here are a couple of incidents:

Incident ID: 2485612
Stack Signature	nsSubstring::ReplacePrep 9631aec4
Product ID	MozillaTrunk
Build ID	2004121104
Trigger Time	2004-12-11 10:28:45.0
Platform	Win32
Operating System	Windows 98 4.10 build 67766222
Module	XPCOM_CORE.DLL + (00039952)
URL visited	http://www.heise.de/foren/login.shtml
User Comments	started browser with URL above, waited for PaswordManager to fill
in, crashed instead, reproducable. Created new profile, passwwordmanager didn´t
work.
Since Last Crash	1301 sec
Total Uptime	3204 sec
Trigger Reason	Access violation
Source File, Line No.
c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/string/src/nsTSubstring.cpp,
line 231
Stack Trace 	
nsSubstring::ReplacePrep 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/string/src/nsTSubstring.cpp,
line 231]
nsSubstring::Assign 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/string/src/nsTSubstring.cpp,
line 304]
nsSubstring::Assign 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/string/src/nsTSubstring.cpp,
line 366]
SI_LoadSignonData 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/extensions/wallet/src/singsign.cpp,
line 1993]
si_RegisterSignonPrefCallbacks 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/extensions/wallet/src/singsign.cpp,
line 324]
si_GetSignonRememberingPref 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/extensions/wallet/src/singsign.cpp,
line 360]
si_RestoreSignonData 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/extensions/wallet/src/singsign.cpp,
line 2377]
SINGSIGN_RestoreSignonData 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/extensions/wallet/src/singsign.cpp,
line 2497]
nsWalletlibService::OnStateChange 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/extensions/wallet/src/nsWalletService.cpp,
line 453]
nsDocLoader::FireOnStateChange 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/uriloader/base/nsDocLoader.cpp,
line 1187]
nsDocLoader::FireOnStateChange 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/uriloader/base/nsDocLoader.cpp,
line 1212]
nsDocLoader::FireOnStateChange 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/uriloader/base/nsDocLoader.cpp,
line 1212]
nsDocLoader::doStopDocumentLoad 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/uriloader/base/nsDocLoader.cpp,
line 827]
nsDocLoader::DocLoaderIsEmpty 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/uriloader/base/nsDocLoader.cpp,
line 724]
nsDocLoader::OnStopRequest 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/uriloader/base/nsDocLoader.cpp,
line 648]
nsLoadGroup::RemoveRequest 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/netwerk/base/src/nsLoadGroup.cpp,
line 712]
HandleImagePLEvent 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsImageLoadingContent.cpp,
line 636]
PL_HandleEvent 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/threads/plevent.c,
line 693]
PL_ProcessPendingEvents 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/threads/plevent.c,
line 631]
_md_EventReceiverProc 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/threads/plevent.c,
line 1434]
KERNEL32.DLL + 0x242e7 (0xbff942e7)
0x00638bea

--------------------
Incident ID: 2485016
Stack Signature	nsAString::~nsAString f7bf7ec6
Product ID	MozillaTrunk
Build ID	2004121104
Trigger Time	2004-12-11 09:53:40.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	xpcom_core.dll + (0003b205)
URL visited	firewall.cmsu.edu
User Comments	
Since Last Crash	9 sec
Total Uptime	23 sec
Trigger Reason	Access violation
Source File, Line No.
c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/string/src/nsTAString.cpp,
line 60
Stack Trace 	
nsAString::~nsAString 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/string/src/nsTAString.cpp,
line 60]
SI_LoadSignonData 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/extensions/wallet/src/singsign.cpp,
line 2005]
si_RegisterSignonPrefCallbacks 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/extensions/wallet/src/singsign.cpp,
line 324]
si_GetSignonRememberingPref 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/extensions/wallet/src/singsign.cpp,
line 360]
si_RestoreSignonData 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/extensions/wallet/src/singsign.cpp,
line 2377]
SINGSIGN_RestoreSignonData 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/extensions/wallet/src/singsign.cpp,
line 2497]
nsWalletlibService::OnStateChange 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/extensions/wallet/src/nsWalletService.cpp,
line 453]
nsDocLoader::FireOnStateChange 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/uriloader/base/nsDocLoader.cpp,
line 1187]
nsDocLoader::FireOnStateChange 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/uriloader/base/nsDocLoader.cpp,
line 1212]
nsDocLoader::FireOnStateChange 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/uriloader/base/nsDocLoader.cpp,
line 1212]
nsDocLoader::doStopDocumentLoad 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/uriloader/base/nsDocLoader.cpp,
line 827]
nsDocLoader::DocLoaderIsEmpty 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/uriloader/base/nsDocLoader.cpp,
line 724]
nsDocLoader::OnStopRequest 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/uriloader/base/nsDocLoader.cpp,
line 648]
nsLoadGroup::RemoveRequest 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/netwerk/base/src/nsLoadGroup.cpp,
line 712]
HandleImagePLEvent 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/content/base/src/nsImageLoadingContent.cpp,
line 636]
PL_HandleEvent 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/threads/plevent.c,
line 693]
PL_ProcessPendingEvents 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/threads/plevent.c,
line 631]
_md_EventReceiverProc 
[c:/builds/tinderbox/MozillaTrunk/WINNT_5.0_Clobber/mozilla/xpcom/threads/plevent.c,
line 1434]
USER32.dll + 0x30494 (0x77d70494)
USER32.dll + 0x30494 (0x77d70494)
gkwidget.dll + 0x14631 (0x60524631)
_except_handler3()
kernel32.dll + 0x399f3 (0x7c8399f3)

Comment 15

[Philip K. Warren]

*** Bug 274185 has been marked as a duplicate of this bug. ***