27600 - crash closing mail window...

Status: VERIFIED DUPLICATE of bug 26653

(MailNews Core :: Networking, defect, P3)

Description

[rickg]

Running precheckin test:
1. Create mail message
2. Send (and read successfully)
3. close mail window
4. crash with following stack trace

GlobalWindowImpl::ClearAllTimeouts() line 3189 + 15 bytes
GlobalWindowImpl::SetNewDocument(GlobalWindowImpl * const 0x02c068b4, 
nsIDOMDocument * 0x00000000) line 231
DocumentViewerImpl::~DocumentViewerImpl() line 326
DocumentViewerImpl::`scalar deleting destructor'(unsigned int 1) + 15 bytes
DocumentViewerImpl::Release(DocumentViewerImpl * const 0x02c05a10) line 260 + 
134 bytes
nsCOMPtr<nsIContentViewer>::assign_assuming_AddRef(nsIContentViewer * 
0x00000000) line 417
nsCOMPtr<nsIContentViewer>::assign_with_AddRef(nsISupports * 0x00000000) line 
788
nsCOMPtr<nsIContentViewer>::operator=(nsIContentViewer * 0x00000000) line 527
nsWebShell::Destroy(nsWebShell * const 0x02c06e2c) line 3704
nsXULWindow::Destroy(nsXULWindow * const 0x02c05064) line 320
nsWebShellWindow::Close(nsWebShellWindow * const 0x02c050a8) line 394
nsWebShellWindow::HandleEvent(nsGUIEvent * 0x0012f85c) line 453
nsWindow::DispatchEvent(nsWindow * const 0x02c07f04, nsGUIEvent * 0x0012f85c, 
nsEventStatus & nsEventStatus_eIgnore) line 493 + 10 bytes
nsWindow::DispatchWindowEvent(nsGUIEvent * 0x0012f85c) line 514
nsWindow::DispatchStandardEvent(unsigned int 101) line 534 + 15 bytes
nsWindow::ProcessMessage(unsigned int 16, unsigned int 0, long 0, long * 
0x0012faa4) line 2083
nsWindow::WindowProc(HWND__ * 0x00380324, unsigned int 16, unsigned int 0, long 
0) line 673 + 27 bytes
USER32! 77e719d0()

Comment 1

[Phil Peterson]

Reassign to travis, cc mscott

Comment 2

[lchiang]

I'm wondering if related to http://bugzilla.mozilla.org/show_bug.cgi?id=26653. 
I'm going to mark beta1 since closing of a mail window is pretty standard.

Comment 3

[Phil Peterson]

PDT+

Comment 4

[travis]

I saw this but now I don't.  Can someone give me a reproduceable step by step 
test case?  The problem is the one time I saw it, the stack was toasted, so I 
have to set a breakpoint before it happens, but I can't get a reproduceable 
case that ensures me a crash.

Comment 5

[don]

Putting on the M14 radar (obviously).

Travis, if you can't get a reproducible case in a timely manner, then mark this
"WORKSFORME".

Comment 6

[travis]

I can't get a reproduceable case for this.  If it happens and you care then get 
me a reproduceable case I can debug.

Comment 7

[travis]

re-opening to make it a dup.

Comment 8

[travis]

*** This bug has been marked as a duplicate of 26653 ***

Comment 9

[lchiang]

verified as duplicate.