311339 - The system crashes after making a mail folder or server named "con" [@ net_pop3_load_state]

Status: RESOLVED WORKSFORME

(MailNews Core :: Networking: POP, defect)

Description

[John]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6

When attempting to create a subfolder in the mail menu, a 4th level folder named
"Con" generates a program crash and an invitation to report the crash to
microsoft  This is a repeatable problem after restart.  Making a folder with a
different name "Conrad" works fine

Reproducible: Always

Steps to Reproduce:
1.Open mail folder tree
2.right click on folder and click "new subfolder"
3.Enter "Con" omit parenthesis and click OK
4. Error program begins
Actual Results:  
The program automatically shuts down

Expected Results:  
Created a sub folder named Con

thunderbird.exe

Comment 1

[David :Bienvenu]

I do indeed fail creating a file called con (probably a reserved name in
windows) but I don't crash, on the trunk. What version of thunderbird are you using?

Comment 2

[timeless]

con is the console (stdin/stdout) it is most certainly a reserved name.

Comment 3

[OstGote!]

con and others are reserved device names on Windows (comes from old DOS), even
with NT 5.x and NTFS:

"Several special file names are reserved by the system and cannot be used for
files or folders: CON, AUX, COM1, COM2, COM3, COM4, LPT1, LPT2, LPT3, PRN, NUL."

see
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/8cc5891d-bf8e-4164-862d-dac5418c5948.mspx

There exist tricks do create them though, but it is not recommended (you cannot
delete them with Explorer etc).

Comment 4

[WADA:World Anti-bad-Duping Agency]

Hang of Tb 1.5 Beta(Win XP) has been reported to Bug 312265, PRN/LPT1 and "Saved
Search Folder"(Virtual Folder) case.
I couldn't re-create crash/hang yet with Seamonkey nightly and Tb 1.0.7 on Win 2K,
although I saw "Folder already exists" message when CON/PRN in folder creation
by Seamonkey, and I saw directry name of "con-1"/"prn-1" when POP3 server name
of con/prn in account difinition by Tb 1.0.7.
Crash or hang on Win XP only?

Comment 5

[WADA:World Anti-bad-Duping Agency]

Similar crash(when "con" as POP3 server name on account creation) has been
reported to Bugzilla Japan. ( http://bugzilla.mozilla.gr.jp/show_bug.cgi?id=4662 )

Talkback IDs :  TB10589294X, TB10632788Q
MS Windows XP SP1, Thunderbird version 1.5 Beta 2 (20051011)
No directry is created("con-N") in this case.
(Tb 1.0.7 on Win-2k created "con-1" when server name of "con" and no crash.) 
(This is same result when multi-accounts on same POP3 server.              )

Comment 6

[WADA:World Anti-bad-Duping Agency]

(In reply to comment #0)
> When attempting to create a subfolder in the mail menu
John(reporter), is "Saved Search Folder(Virtual Folder)" involved in your
"folder" or "subfolder"?

Comment 7

[timeless]

Incident ID: 10589294
Stack Signature	net_pop3_load_state b17cf081
Product ID	Thunderbird15
Build ID	2005101106
Trigger Time	2005-10-12 21:13:12.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	thunderbird.exe + (0054e9ff)
URL visited	
User Comments	
Since Last Crash	1286 sec
Total Uptime	1286 sec
Trigger Reason	Access violation
Source File, Line No.
e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/mailnews/local/src/nsPop3Protocol.cpp,
line 254
Stack Trace 	
net_pop3_load_state 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/mailnews/local/src/nsPop3Protocol.cpp,
line 254]
nsPop3Protocol::LoadUrl 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/mailnews/local/src/nsPop3Protocol.cpp,
line 874]
nsPop3Service::RunPopUrl 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/mailnews/local/src/nsPop3Service.cpp,
line 246]
nsPop3Service::GetMail 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/mailnews/local/src/nsPop3Service.cpp,
line 168]
nsPop3Service::GetNewMail 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/mailnews/local/src/nsPop3Service.cpp,
line 106]
nsPop3GetMailChainer::RunNextGetNewMail 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/mailnews/local/src/nsPop3IncomingServer.cpp,
line 686]
nsPop3GetMailChainer::GetNewMailForServers 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/mailnews/local/src/nsPop3IncomingServer.cpp,
line 644]
nsPop3IncomingServer::DownloadMailFromServers 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/mailnews/local/src/nsPop3IncomingServer.cpp,
line 453]
nsMsgLocalMailFolder::GetNewMessages 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/mailnews/local/src/nsLocalMailFolder.cpp,
line 2252]
nsMsgIncomingServer::GetNewMessages 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/mailnews/base/util/nsMsgIncomingServer.cpp,
line 198]
CompositeDataSourceImpl::DoCommand 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/rdf/base/src/nsCompositeDataSource.cpp,
line 1337]
XPCWrappedNative::CallMethod 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp,
line 2139]
XPC_WN_CallMethod 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp,
line 1402]
js_Invoke 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c,
line 1163]
js_Interpret 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c,
line 3487]
js_Invoke 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c,
line 1183]
js_InternalInvoke 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c,
line 1260]
JS_CallFunctionValue 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/js/src/jsapi.c, line
4184]
nsJSContext::CallEventHandler 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/dom/src/base/nsJSEnvironment.cpp,
line 1406]
nsGlobalWindow::RunTimeout 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/dom/src/base/nsGlobalWindow.cpp,
line 6268]
nsGlobalWindow::TimerCallback 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/dom/src/base/nsGlobalWindow.cpp,
line 6626]
nsXULWindow::ShowModal 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/xpfe/appshell/src/nsXULWindow.cpp,
line 400]
nsContentTreeOwner::ShowAsModal 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/xpfe/appshell/src/nsContentTreeOwner.cpp,
line 431]
nsWindowWatcher::OpenWindow 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/embedding/components/windowwatcher/src/nsWindowWatcher.cpp,
line 476]
nsPromptService::DoDialog 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/embedding/components/windowwatcher/src/nsPromptService.cpp,
line 634]
nsPromptService::ConfirmEx 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/embedding/components/windowwatcher/src/nsPromptService.cpp,
line 347]
nsMapiRegistry::ShowMailIntegrationDialog 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/mailnews/mapi/mapihook/src/nsMapiRegistry.cpp,
line 224]
XPTC_InvokeByIndex 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp,
line 102]
XPCWrappedNative::CallMethod 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp,
line 2139]
XPC_WN_CallMethod 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp,
line 1402]
js_Invoke 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c,
line 1163]
js_Interpret 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c,
line 3487]
js_Execute 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/js/src/jsinterp.c,
line 1394]
JS_EvaluateUCScriptForPrincipals 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/js/src/jsapi.c, line
4119]
nsJSContext::EvaluateString 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/dom/src/base/nsJSEnvironment.cpp,
line 1056]
nsGlobalWindow::RunTimeout 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/dom/src/base/nsGlobalWindow.cpp,
line 6255]
nsGlobalWindow::TimerCallback 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/dom/src/base/nsGlobalWindow.cpp,
line 6626]
nsAppStartup::Run 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/toolkit/components/startup/src/nsAppStartup.cpp,
line 151]
main 
[e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/mail/app/nsMailApp.cpp,
line 62]
kernel32.dll + 0x2141a (0x77e8141a)

Comment 8

[WADA:World Anti-bad-Duping Agency]

Changing component because no relation to "Networking".

Comment 9

[David :Bienvenu]

back to networking pop - nothing to do with the mail db.

Comment 10

[David :Bienvenu]

adjusting summary - the crash only happens when the server is named "con", not
the folder.

Comment 11

[WADA:World Anti-bad-Duping Agency]

(In reply to comment #9)
> back to networking pop - nothing to do with the mail db.
Main cause of the crash seems to relate to "directry creation", doesn't seem to
relate to server access.
David, "local directry creation for a POP3 account" is categorized "Networking"?
Or the crash occured when trying to access POP3 server which named CON?
(Sorry but I cannot understand what the Talkback says.)

Comment 12

[David :Bienvenu]

the crash is in the pop3 networking code. It shouldn't crash. The crash is
because the actual directory for the server couldn't be created, I believe, and
that null directory gets passed down to the pop3 networking code. It should
return an error in that case. There are several other places that should be
fixed, obviously - the account manager should detect the error in creating the
directory, etc.

Comment 13

[WADA:World Anti-bad-Duping Agency]

(In reply to comment #10)
> the crash only happens when the server is named "con", not the folder.

If Virual Folder(Saved Search Folder) is invloved, and if "/" is involved in
folder name, and if Thunderbird is not latest builds(including 1.0), both
directry creation and file creation may occur.
For virtual folder of "X/Y", non-current Thunderbird possibly try to create
directry of "X"(funny but was NOT file of "X") and file of 'Y'.
See Bug 286523 comment #1 for detail.

Trying to creation of directry of "X" won't occur if latest builds, as written
in Bug 286523 comment #3 and Bug 286523 comment #4.

I don't know whether bug reporter's case has relation to it or not.

Comment 14

[Wayne Mery (:wsmwk)]

impacted by bug 103468? whose "patch disallows specific filenames such as "aux" and "con", among other things." per bug 29079

Comment 15

[Robert Kaiser]

This has no info on recent versions, so resolving as incomplete. Bug 536802 is also open about the same crash signature, FWIW.

If this can be reproduced, please add references to actual crash reports that show this happening on recent versions.

Comment 16

[Wayne Mery (:wsmwk)]

this bug has a specific steps which should be retested. and bug 536802 stack is different iirc.

bp-bp-cb531c34-ae2d-4857-8a5b-87df92120425  is an example of this bug's stack

Comment 17

[:aceman]

Wayne, does the patch in comment 14 prevent creating the special filenames also in TB's dialogs (Like create/rename folder)?

Comment 18

[Wayne Mery (:wsmwk)]

could well be. i haven't tested

Comment 19

[Wayne Mery (:wsmwk)]

(In reply to :aceman from comment #17)
> Wayne, does the patch in comment 14 prevent creating the special filenames
> also in TB's dialogs (Like create/rename folder)

I assume these checins had some impact. No crashes with name "con" or "aux". 

However ...
* local folders
- first click to create subfolder has no visible response, and no folder created on disk
- second click to create subfolder results in a dialog with "A folder with that name already exists", as if the folder had been created.

erratically, the error console willl have
Timestamp: 12/3/2012 12:40:21 PM
Error: Component returned failure code: 0x80550013 [nsIMsgFolder.createSubfolder]
Source File: chrome://messenger/content/folderPane.js
Line: 2012

*imap folder
- i get absolutely no feedback

Apparently the failed folder creation isn't getting properly propagated.  I'm not sure if a bug exists to address these cases. But at least we are not crashing