285822 - Crash if I change a folder during search [@ nsMsgSearchOfflineMail::Search ] [@ nsMsgSearchOfflineMail::Search() ]

Status: RESOLVED WORKSFORME

(Thunderbird :: Mail Window Front End, defect)

Description

[Andrei Oleinik]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.6) Gecko/20050225 Firefox/1.0.1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.6) Gecko/20050225 Firefox/1.0.1 Build Identifier: Thunderbird version 1.0 (20041206)

I have 2 trees of folders. One is Local Folders, another is for e-mail account.
So, I have 2 Inbox folders. Each contains lots of e-mails. 
When Inbox in Local folders active, I type in Seach field (in Entire Message
mode) keyword, than almost immediately, when search starts, go to another Inbox,
Thunderbird crashes.
It reproduces not always but often. After successful search I was not able to
fail it again, so I was restarting application each time to reproduce the problem.


Reproducible: Sometimes

Steps to Reproduce:
1. Start Thunderbird
2. Choose one of Inboxes
3. Go to search field and select Entire Message mode.
4. Type anything in search field
5. When messages disappear and search procedure starts, choose another Inbox.
6. Crash
7. If not crashed, restart application and try again.

Actual Results:  
Crash

Expected Results:  
Displaying messages from newly selected folder.

Windows error message says:
thunderbird.exe has generated an error and will be closed by Windows.

This is from event log:
The application, , generated an application error The error occurred on
03/12/2005 @ 02:10:57.428 The exception generated was c0000005 at address
746E6F63 (<nosymbols>)

Comment 1

[Adam Hauner]

Andrei Oleinik: Could you provide Talkback incident ID of your crash?

Comment 2

[Andrei Oleinik]

(In reply to comment #1)
> Andrei Oleinik: Could you provide Talkback incident ID of your crash?
I was trying to get this information, but Talkback doesn't start after
Thunderbird crash, although I have installed and activated it.

Comment 3

[Jerry Baker]

Cannot reproduce using Tbird 20050225 trunk.

Comment 4

[Martin Treusch von Buttlar]

(In reply to comment #3)
> Cannot reproduce using Tbird 20050225 trunk.
I think I can reproduce this and have submitted 5 incidents (TB4906160Z,
TB4906143Q, TB4906139K, TB4906136Z, TB4906395G).

My setup is a little bit simpler, though. In my inbox are >25000 mails and a
view is active selecting about 60%. To reproduce I
1. open Thunderbird.
2. click on my inbox in the folder pane
3. during display click on any other folder in the pane.
4. bang.

Comment 5

[Adam Hauner]

Four incidents look like this one:
Incident ID: 4906143
Stack Signature	nsMsgSearchOfflineMail::Search f013d41b
Product ID	Thunderbird10
Build ID	2005031711
Trigger Time	2005-04-07 02:09:46.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	thunderbird.exe + (00501bb6)
URL visited	
User Comments	
Since Last Crash	4 sec
Total Uptime	36336 sec
Trigger Reason	Access violation
Source File, Line No.
e:/builds/tinderbox/Tb-Aviary1.0.1/WINNT_5.0_Depend/mozilla/mailnews/base/search/src/nsMsgLocalSearch.cpp,
line 667

Stack Trace 	
nsMsgSearchOfflineMail::Search 
[e:/builds/tinderbox/Tb-Aviary1.0.1/WINNT_5.0_Depend/mozilla/mailnews/base/search/src/nsMsgLocalSearch.cpp,
line 667]
nsMsgSearchScopeTerm::TimeSlice 
[e:/builds/tinderbox/Tb-Aviary1.0.1/WINNT_5.0_Depend/mozilla/mailnews/base/search/src/nsMsgSearchTerm.cpp,
line 1500]
nsTimerImpl::Fire 
[e:/builds/tinderbox/Tb-Aviary1.0.1/WINNT_5.0_Depend/mozilla/xpcom/threads/nsTimerImpl.cpp,
line 382]
nsAppShellService::Run 
[e:/builds/tinderbox/Tb-Aviary1.0.1/WINNT_5.0_Depend/mozilla/xpfe/appshell/src/nsAppShellService.cpp,
line 495]
main 
[e:/builds/tinderbox/Tb-Aviary1.0.1/WINNT_5.0_Depend/mozilla/mail/app/nsMailApp.cpp,
line 58]
kernel32.dll + 0x2141a (0x77e6141a)

and one look like:
Incident ID: 4906160
Stack Signature	TimerThread::AddTimerInternal 774a3c50
Product ID	Thunderbird10
Build ID	2005031711
Trigger Time	2005-04-07 02:11:03.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	xpcom.dll + (0002a92a)
URL visited	
User Comments	
Since Last Crash	70 sec
Total Uptime	36406 sec
Trigger Reason	Access violation
Source File, Line No.
e:/builds/tinderbox/Tb-Aviary1.0.1/WINNT_5.0_Depend/mozilla/xpcom/threads/TimerThread.cpp,
line 376
Stack Trace 	
TimerThread::AddTimerInternal 
[e:/builds/tinderbox/Tb-Aviary1.0.1/WINNT_5.0_Depend/mozilla/xpcom/threads/TimerThread.cpp,
line 376]
TimerThread::AddTimer 
[e:/builds/tinderbox/Tb-Aviary1.0.1/WINNT_5.0_Depend/mozilla/xpcom/threads/TimerThread.cpp,
line 298]
nsAppShellService::Run 
[e:/builds/tinderbox/Tb-Aviary1.0.1/WINNT_5.0_Depend/mozilla/xpfe/appshell/src/nsAppShellService.cpp,
line 495]
main 
[e:/builds/tinderbox/Tb-Aviary1.0.1/WINNT_5.0_Depend/mozilla/mail/app/nsMailApp.cpp,
line 58]
kernel32.dll + 0x2141a (0x77e6141a)

Comment 6

[Asa Dotzler [:asa]]

I'm seeing this crash as well. Scott, this is probably worth looking into. Jay,
can you do some more talkback investigation here?

Comment 7

[Tobias Sager]

I have a talkback for Linux: TB8302631E

Comment 8

[OstGote!]

see
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=stacksig&match=contains&searchfor=nsMsgSearchOfflineMail%3A%3ASearch&vendor=All&product=All&platform=All&buildid=&sdate=&stime=&edate=&etime=&sortby=bbid

Affects all platforms, even TB 1.5?

Comment 9

[demi]

errr...i found a bug, not sure if it is same and/or related, but want opinion of
readers on this page before i report it as a new one.
Summary: Thunderbird crashes if you click one virtual folder after another,
while it is in the process of performing search.

Reproducible (Always)
Steps to reproduce
1) install tb :p (ok, i couldnt resist this one)
2) create a folder with 10,000+ messages (may work with less)
3) inside this folder, create 3 virtual folders (or saved searches, whatever you
want to call it), using any criteria, each filtering for 10-90% of the messages.
4) click on the 3 virtual folders one after another in rapid succession (one
click per second or faster), till thunderbird crashes. (typically takes 4-5 clicks)

tested it 86 times, trying to find some pattern in the crashes.
for 10 k messages, at one click per second, takes avg 4 clicks to crash
for 9 k messages, same results
for 6 k messages, at one click per second, couldnt crash, but at 2 clicks per
second, takes 5 clicks.
for 4 k messages, at one click per second, couldnt crash. at 2 clicks per
second, crashed twice, after 41 and 62 clicks respectively. at 3 clicks per
second, crashes in 6 clicks.
for 2 k messages, why dont you do the tests and tell me :)

quality feedback agent is on.
mozilla 1.0.6, only one extension mnenhy 0.7.2, tb was in online mode at time of
tests, but not sending receiving messages. machine is 2.3 ghz on winxp pro sp1.
also, i have a medical condition which causes me to kill all unnecessary
processes when my machine boots ;)

any comments??
ciao
demi

Comment 10

[Tobias Sager]

(In reply to comment #9)
> 4) click on the 3 virtual folders one after another in rapid succession (one
> click per second or faster), till thunderbird crashes. (typically takes 4-5
clicks)

My Linux talkback for this: TB9643504Q

Tested on a folder with 6800 msgs, saved search folder 1 had 5331 and search
folder 2 had 7000 msgs.

Don't know if this is the same bug here.

Comment 11

[demi]

i am going to file this as a new bug, since too many differences from original bug.
1) search folder vs search field.
2) original bug does not cause crash after successful search.
3) original bug requires application restart for definite crash.

ciao
demi

Comment 12

[Joseph Conner]

Crash occured to me too.  Specifics:  "The instruction at "0x03f9744d"
referenced memory at "0:80000000".  The memory could not be "written".
Click on OK to terminate the program.  Click on CANCEL to debug the program.

The crash resulted because I had a Thunderbird message word search in progress
and changed folders.

Comment 13

[Joseph Conner]

Crash occured to me too.  Specifics:  "The instruction at "0x03f9744d"
referenced memory at "0:80000000".  The memory could not be "written".
Click on OK to terminate the program.  Click on CANCEL to debug the program.

The crash resulted because I had a Thunderbird message word search in progress
and changed folders.

Comment 14

[Bob Clary [:bc] (inactive)]

tb2.0a 2006051006/winxp TB18534094E opening search folder to local folder and switching to the search folder before the search folder completed displaying.

123 crashes with this sig
<http://talkback-public.mozilla.org/search/start.jsp?search=1&searchby=stacksig&match=contains&searchfor=nsMsgSearchOfflineMail%3A%3ASearch&vendor=MozillaOrg&product=All&platform=All&buildid=&sdate=&stime=&edate=&etime=&sortby=bbid&rlimit=0>

Comment 15

[Wayne Mery (:wsmwk)]

do you still see this?

fixed perhaps by
bug 339518, circa TB 2.0.0.3
bug 336737 circa 2006-05-19 trunk

Comment 16

[Joseph Conner]

I no longer have the crash.  I am using version 2.0.0.9 (20071031).

Comment 17

[Martin Treusch von Buttlar]

Sorry, I cannot easily reproduce this right now, as I am working for another company right now.

Comment 18

[Wayne Mery (:wsmwk)]

similar to bug 325768 Crash when selecting Inbox after selecting saved search folder before search complete [@ nsMsgLocalMailFolder::OnStopRunningUrl ]

some search crashes are also top of stack nsMsgSearchScopeTerm::TimeSlice, like TB38487336  MozillaOrgThunderbird2Win322007103104 	

Some current crashes:
TB38464261 I switched from one inbox to another while loading email-messages after startup thunderbird.
TB38231094 every time I go to select an unread (new) message from my inbox in a saved search folder.

2.0.0.9 crash rank #131 on talkback.  
Are the crashes all imap?  Or are some pop?


(Reporter writes: "I am not using Thunderbird any more, can't help with the test.")

Comment 19

[Wayne Mery (:wsmwk)]

If this is happening on trunk or v3 then it is very rare, because I can't find any with sig as top of stack or top 10 frames & matching stack.  So I'm going to close WFM.