361150 - Message aging with grouped views can crash [@thunderbird-bin + 0x402 (0xb7f13402) 41762308]

Status: RESOLVED FIXED

(Thunderbird :: General, defect)

Description

[Nir]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9a1) Gecko/20061113 Minefield/3.0a1
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9a1) Gecko/20061113 Minefield/3.0a1

Using TB-3a1 (20061118) under Fedora core 5.

After settings one of my RSS folder's Message Aging to "Delete all but last '20' messages", whenever I click on that folder after new RSS feeds are downloaded , TB-3a1 crashes and opens 'Netscape Quality Feedback'.

Reproducible: Always

Steps to Reproduce:
1.Set Messaging policy of any RSS folder to "Delete all but last 'XX' messages"

2.Select any Other folder.Download some RSS feeds for that RSS folder by "Get Mail > News & Blogs".

3.Click on that RSS folder.

Actual Results:  
TB-3a1 crashes and opens 'Netscape Quality Feedback'

Expected Results:  
Message Aging should work without any problem.

Some Other Talkback ID:
TB26180891Z
TB26182711X

This same behaviour occurs for any other mail folder also.

Comment 1

[Carsten Book [:Tomcat]]

Talkback TB26180891Z
Stack Signature	 thunderbird-bin + 0x402 (0xb7f13402) 41762308
Product ID	ThunderbirdTrunk
Build ID	2006111703
Trigger Time	2006-11-18 09:53:39.0
Platform	LinuxIntel
Operating System	Linux 2.6.18-1.2239.fc5
Module	thunderbird-bin + (00000402)
URL visited	
User Comments	
Since Last Crash	0 sec
Total Uptime	0 sec
Trigger Reason	SIGIOT: Abort or IOT Instruction: (signal 6)
Source File, Line No.	N/A
Stack Trace 	
thunderbird-bin + 0x402 (0xb7f13402)
libc.so.6 + 0x296e3 (0x00adc6e3)
libc.so.6 + 0x5ca1b (0x00b0fa1b)
libc.so.6 + 0x6751f (0x00b1a51f)
PR_Free()  [mozilla/nsprpub/pr/src/malloc/prmem.c, line 491]
nsUInt32Array::SetSize()  [mozilla/mailnews/base/util/nsUInt32Array.cpp, line 94]
nsUInt32Array::RemoveAll()  [mozilla/mailnews/base/util/nsUInt32Array.cpp, line 248]
nsMsgDBView::Close()  [mozilla/mailnews/base/src/nsMsgDBView.cpp, line 1920]
XPTC_InvokeByIndex()
XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode)()  [mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 3200]
XPC_WN_CallMethod()  [mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1455]
js_Invoke()  [mozilla/js/src/jsinterp.c, line 1396]
js_Interpret()  [mozilla/js/src/jsinterp.c, line 3948]
js_Invoke()  [mozilla/js/src/jsinterp.c, line 1415]
js_InternalInvoke()  [mozilla/js/src/jsinterp.c, line 1490]
JS_CallFunctionValue()  [mozilla/js/src/jsapi.c, line 4357]
nsJSContext::CallEventHandler()  [mozilla/dom/src/base/nsJSEnvironment.cpp, line 1752]
nsJSEventListener::HandleEvent()  [mozilla/dom/src/events/nsJSEventListener.cpp, line 848]
nsEventListenerManager::HandleEventSubType()  [mozilla/content/events/src/nsEventListenerManager.cpp, line 1268]
nsEventListenerManager::HandleEvent()  [mozilla/content/events/src/nsEventListenerManager.cpp, line 1056]
nsEventTargetChainItem::HandleEvent()  [mozilla/content/events/src/nsEventDispatcher.cpp, line 1032]
nsEventTargetChainItem::HandleEventTargetChain()  [mozilla/content/events/src/nsEventDispatcher.cpp, line 433]
nsEventDispatcher::Dispatch()  [mozilla/content/events/src/nsEventDispatcher.cpp, line 636]
nsTreeSelection::FireOnSelectHandler()  [mozilla/layout/xul/base/src/tree/src/nsTreeSelection.cpp, line 1636]
nsTreeSelection::Select()  [mozilla/layout/xul/base/src/tree/src/nsTreeSelection.cpp, line 389]
XPTC_InvokeByIndex()
XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode)()  [mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 3200]
XPC_WN_CallMethod()  [mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1455]
js_Invoke()  [mozilla/js/src/jsinterp.c, line 1396]
js_Interpret()  [mozilla/js/src/jsinterp.c, line 3948]
js_Invoke()  [mozilla/js/src/jsinterp.c, line 1415]
js_InternalInvoke()  [mozilla/js/src/jsinterp.c, line 1490]
JS_CallFunctionValue()  [mozilla/js/src/jsapi.c, line 4357]
nsJSContext::CallEventHandler()  [mozilla/dom/src/base/nsJSEnvironment.cpp, line 1752]
nsJSEventListener::HandleEvent()  [mozilla/dom/src/events/nsJSEventListener.cpp, line 848]
nsXBLPrototypeHandler::ExecuteHandler()  [mozilla/content/xbl/src/nsXBLPrototypeHandler.cpp, line 506]
nsXBLEventHandler::HandleEvent()  [mozilla/content/xbl/src/nsXBLEventHandler.cpp, line 82]
nsEventListenerManager::HandleEventSubType()  [mozilla/content/events/src/nsEventListenerManager.cpp, line 1268]
nsEventListenerManager::HandleEvent()  [mozilla/content/events/src/nsEventListenerManager.cpp, line 1056]
nsEventTargetChainItem::HandleEvent()  [mozilla/content/events/src/nsEventDispatcher.cpp, line 1032]
nsEventTargetChainItem::HandleEventTargetChain()  [mozilla/content/events/src/nsEventDispatcher.cpp, line 433]
nsEventDispatcher::Dispatch()  [mozilla/content/events/src/nsEventDispatcher.cpp, line 636]
PresShell::HandleEventInternal()  [mozilla/layout/base/nsPresShell.cpp, line 955]
PresShell::HandlePositionedEvent()  [mozilla/layout/base/nsPresShell.cpp, line 6064]
PresShell::HandleEvent()  [mozilla/layout/base/nsPresShell.cpp, line 5892]
nsViewManager::HandleEvent()  [mozilla/view/src/nsViewManager.cpp, line 1665]
nsViewManager::DispatchEvent()  [mozilla/view/src/nsViewManager.cpp, line 1623]
HandleEvent()  [mozilla/view/src/nsView.cpp, line 228]
nsCommonWidget::DispatchEvent()  [mozilla/widget/src/gtk2/nsCommonWidget.cpp, line 216]
nsWindow::OnButtonPressEvent()  [mozilla/widget/src/gtk2/nsWindow.cpp, line 1915]
button_press_event_cb()  [mozilla/widget/src/gtk2/nsWindow.cpp, line 4223]
libgtk-x11-2.0.so.0 + 0x12358e (0x0546958e)
libgobject-2.0.so.0 + 0x8f6d (0x00a59f6d)
libgobject-2.0.so.0 + 0x19a3d (0x00a6aa3d)
libgobject-2.0.so.0 + 0x1ad0f (0x00a6bd0f)
libgobject-2.0.so.0 + 0x1b109 (0x00a6c109)
libgtk-x11-2.0.so.0 + 0x20e858 (0x05554858)
libgtk-x11-2.0.so.0 + 0x11cf63 (0x05462f63)
libgtk-x11-2.0.so.0 + 0x11e1b7 (0x054641b7)
libgdk-x11-2.0.so.0 + 0x4085a (0x030ee85a)
libglib-2.0.so.0 + 0x2509d (0x02f3e09d)
libglib-2.0.so.0 + 0x2832f (0x02f4132f)
libglib-2.0.so.0 + 0x28895 (0x02f41895)
nsBaseAppShell::DoProcessNextNativeEvent()  [mozilla/widget/src/xpwidgets/nsBaseAppShell.cpp, line 137]
nsBaseAppShell::OnProcessNextEvent()  [mozilla/widget/src/xpwidgets/nsBaseAppShell.cpp, line 231]
nsThread::ProcessNextEvent()  [mozilla/xpcom/threads/nsThread.cpp, line 496]
NS_ProcessNextEvent_P()  [mozilla/xpcom/build/nsThreadUtils.cpp, line 225]
nsBaseAppShell::Run()  [mozilla/widget/src/xpwidgets/nsBaseAppShell.cpp, line 153]
nsAppStartup::Run()  [mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 172]
XRE_main()  [mozilla/toolkit/xre/nsAppRunner.cpp, line 848]
main()  [mozilla/mail/app/nsMailApp.cpp, line 63]
libc.so.6 + 0x157e4 (0x00ac87e4)

Comment 2

[Nir]

TB26554793Q

TB-3a1 stop responding or freeze when that RSS folder ( with message aging ) was selected.  

Comment 3

[Nir]

It stops responding again and needed to forcefully termination
TB26592461K 

Comment 4

[Nir]

Stoped responding again 
TB26598169W

Comment 5

[Nir]

TB crashed again for the same reason , crash id - TB26688480Y

I also have got this error report in console window :

[root@localhost thunderbird]# ./thunderbird
selecting folder news://news.mozilla.org
TypeError: inboxFolder has no properties
TypeError: inboxFolder has no properties
TypeError: inboxFolder has no properties
*** glibc detected *** ./thunderbird-bin: munmap_chunk(): invalid pointer: 0x0ae5dc70 ***
======= Backtrace: =========
/lib/libc.so.6(__libc_free+0x17b)[0xb1a51f]
./libnspr4.so(PR_Free+0x38)[0xb7e2e118]
./thunderbird-bin[0x8a2fabd]
./thunderbird-bin[0x8a2fde3]
./thunderbird-bin[0x8a46d93]
./libxpcom_core.so(NS_InvokeByIndex+0x29)[0xb7eec435]
./thunderbird-bin[0x8149178]
./thunderbird-bin[0x81504a1]
./libmozjs.so(js_Invoke+0x646)[0xb7f65b96]
./libmozjs.so(js_Interpret+0x3e0f)[0xb7f6b0af]
./libmozjs.so(js_Invoke+0x740)[0xb7f65c90]
./libmozjs.so(js_InternalInvoke+0xc3)[0xb7f66153]
./libmozjs.so(JS_CallFunctionValue+0x4e)[0xb7f39e8e]
./thunderbird-bin[0x84c830f]
./thunderbird-bin[0x84fb03a]
./thunderbird-bin[0x844c112]
./thunderbird-bin[0x844c5fd]
./thunderbird-bin[0x845fade]
./thunderbird-bin[0x845fc36]
./thunderbird-bin[0x84600c8]
./thunderbird-bin[0x851d68b]
./thunderbird-bin[0x851c548]
./libxpcom_core.so(NS_InvokeByIndex+0x29)[0xb7eec435]
./thunderbird-bin[0x8149178]
./thunderbird-bin[0x81504a1]
./libmozjs.so(js_Invoke+0x646)[0xb7f65b96]
./libmozjs.so(js_Interpret+0x3e0f)[0xb7f6b0af]
./libmozjs.so(js_Invoke+0x740)[0xb7f65c90]
./libmozjs.so(js_InternalInvoke+0xc3)[0xb7f66153]
./libmozjs.so(JS_CallFunctionValue+0x4e)[0xb7f39e8e]
./thunderbird-bin[0x84c830f]
./thunderbird-bin[0x84fb03a]
./thunderbird-bin[0x84a4fee]
./thunderbird-bin[0x84a3312]
./thunderbird-bin[0x844c112]
./thunderbird-bin[0x844c5fd]
./thunderbird-bin[0x845fade]
./thunderbird-bin[0x845fc36]
./thunderbird-bin[0x84600c8]
./thunderbird-bin[0x82dc10f]
./thunderbird-bin[0x82dbf10]
./thunderbird-bin[0x82dba18]
./thunderbird-bin[0x84c18af]
./thunderbird-bin[0x84c11ee]
./thunderbird-bin[0x84bc006]
./thunderbird-bin[0x829a369]
./thunderbird-bin[0x82921e5]
./thunderbird-bin[0x82970db]
/usr/lib/libgtk-x11-2.0.so.0[0x546958e]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x11d)[0xa59f6d]
/usr/lib/libgobject-2.0.so.0[0xa6aa3d]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x68f)[0xa6bd0f]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x29)[0xa6c109]
/usr/lib/libgtk-x11-2.0.so.0[0x5554858]
/usr/lib/libgtk-x11-2.0.so.0(gtk_propagate_event+0x183)[0x5462f63]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main_do_event+0x317)[0x54641b7]
/usr/lib/libgdk-x11-2.0.so.0[0x30ee85a]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x16d)[0x2f3e09d]
/usr/lib/libglib-2.0.so.0[0x2f4132f]
/usr/lib/libglib-2.0.so.0(g_main_context_iteration+0x65)[0x2f41895]
./thunderbird-bin[0x827fc46]
./thunderbird-bin[0x827fde3]
./libxpcom_core.so[0xb7edf747]
======= Memory map: ========
00101000-00112000 r-xp 00000000 03:07 33116      /lib/libnsl-2.4.so
00112000-00113000 r-xp 00010000 03:07 33116      /lib/libnsl-2.4.so
00113000-00114000 rwxp 00011000 03:07 33116      /lib/libnsl-2.4.so
00114000-00116000 rwxp 00114000 00:00 0
00238000-00247000 r-xp 00000000 03:09 335495     /usr/lib/libavahi-client.so.3.1.1
00247000-00248000 rwxp 0000e000 03:09 335495     /usr/lib/libavahi-client.so.3.1.1
0024f000-0025a000 r-xp 00000000 03:09 330590     /usr/lib/libpangox-1.0.so.0.1200.0
0025a000-0025b000 rwxp 0000a000 03:09 330590     /usr/lib/libpangox-1.0.so.0.1200.0
0025d000-00263000 r-xp 00000000 03:09 330369     /usr/lib/libpangoxft-1.0.so.0.1200.0
00263000-00264000 rwxp 00006000 03:09 330369     /usr/lib/libpangoxft-1.0.so.0.1200.0
00286000-00295000 r-xp 00000000 03:07 33111      /lib/libresolv-2.4.so
00295000-00296000 r-xp 0000e000 03:07 33111      /lib/libresolv-2.4.so
00296000-00297000 rwxp 0000f000 03:07 33111      /lib/libresolv-2.4.so
00297000-00299000 rwxp 00297000 00:00 0
0029b000-002ae000 r-xp 00000000 03:09 335350     /usr/lib/libXft.so.2.1.2
002ae000-002af000 rwxp 00012000 03:09 335350     /usr/lib/libXft.so.2.1.2
002b1000-002b3000 r-xp 00000000 03:07 33112      /lib/libcom_err.so.2.1
002b3000-002b4000 rwxp 00001000 03:07 33112      /lib/libcom_err.so.2.1
002b6000-002b9000 r-xp 00000000 03:07 32249      /lib/libcap.so.1.10
002b9000-002ba000 rwxp 00002000 03:07 32249      /lib/libcap.so.1.10
002bc000-002c0000 r-xp 00000000 03:09 335371     /usr/lib/libgthread-2.0.so.0.1000.1
002c0000-002c1000 rwxp 00003000 03:09 335371     /usr/lib/libgthread-2.0.so.0.1000../run-mozilla.sh: line 131:  2871 Aborted                 "$prog" ${1+"$@"}

Comment 6

[David :Bienvenu]

Interesting - I've seen that crash in Talkback before, but it hadn't been associated with message aging. 

Comment 7

[David :Bienvenu]

Does this work in 2.0 branch builds? I'm not seeing any problem with my 2.0 debug build on Mac OS/X. I don't have access to a Linux machine.

Comment 8

[Nir]

(In reply to comment #7)
> Does this work in 2.0 branch builds? I'm not seeing any problem with my 2.0
> debug build on Mac OS/X. I don't have access to a Linux machine.
> 
I haven't yet tested it on TB-2 but it definitely occurs in TB-3a1 ( see Talkback IDs ).
And some info. that i want to add here :

1. I am using 'mail.db_timestamp_leeway' pref ( with value 1400 )
[http://kb.mozillazine.org/Daylight_savings_time]

2.I'm sharing only Newsgroup folders in between TB-3a1 and TB-1.5.0.*

3. I have set 'Compact folders when it will save over '1' Kb '

4.This problem sometimes stops TB from responding ( and i have to manually close TB ) and sometime crash TB. I have checked it with error free .msf files but this problem still occurs if that Rss folder receives lots of feed frequently , like feed from Google News.

5.before this problem occurs ( I'm using message grouping  ) messages in that folders are looked like

+
+yesterday
+Today

note: first '+' doesn't have any label.

Comment 9

[David :Bienvenu]

Nir, did you check the box that says to automatically compact w/o asking you?

Comment 10

[Nir]

(In reply to comment #9)
> Nir, did you check the box that says to automatically compact w/o asking you?
> 

Yes, it is already selected.

Comment 11

[David :Bienvenu]

you might try unselecting it and seeing what happens - I wonder if applying the retentiion settings is kicking off an auto-compact

Comment 12

[Nir]

(In reply to comment #11)
> you might try unselecting it and seeing what happens - I wonder if applying the
> retentiion settings is kicking off an auto-compact
> 

it stops responding again and manually terminated ( Talkback ID - TB26708323W )

In console i again got this message :

[root@localhost thunderbird]# ./thunderbird
selecting folder news://news.mozilla.org
TypeError: inboxFolder has no properties
*** glibc detected *** ./thunderbird-bin: corrupted double-linked list: 0x0baa4590 ***
======= Backtrace: =========
/lib/libc.so.6[0x48cdd7]
/lib/libc.so.6(__libc_free+0x79)[0x49041d]
./libnspr4.so(PR_Free+0x38)[0xf8d118]
./thunderbird-bin[0x8a84918]
./thunderbird-bin[0x8a84ce3]
./thunderbird-bin[0x8a89a91]
./thunderbird-bin[0x8a89bd4]
./thunderbird-bin[0x8a84817]
./thunderbird-bin[0x8a7d7cb]
./thunderbird-bin[0x8a7fe1a]
./thunderbird-bin[0x8a89a91]
./thunderbird-bin[0x8a89bd4]
./thunderbird-bin[0x8a8367d]
./thunderbird-bin[0x8a8b792]
./thunderbird-bin[0x8a0f53e]
./thunderbird-bin[0x8618aed]
./thunderbird-bin[0x8a5f17c]
./thunderbird-bin[0x8a5f476]
./thunderbird-bin[0x8a3b9cf]
./thunderbird-bin[0x80b4fd0]
./thunderbird-bin[0x80b4dff]
./libxpcom_core.so[0x87c047]
./libxpcom_core.so[0x8987b6]
./libxpcom_core.so(_Z21NS_ProcessNextEvent_PP9nsIThreadi+0x36)[0x8580f6]
./thunderbird-bin[0x827fed4]
./thunderbird-bin[0x87c273f]
./thunderbird-bin[0x8079796]
./thunderbird-bin(g_type_class_ref+0x134)[0x8075274]
/lib/libc.so.6(__libc_start_main+0xdc)[0x43e7e4]
./thunderbird-bin(gtk_widget_grab_focus+0x31)[0x80751a1]
======= Memory map: ========
00110000-00113000 rwxp 00110000 00:00 0
00113000-0020c000 r-xp 00000000 03:09 335341     /usr/lib/libX11.so.6.2.0
0020c000-00210000 rwxp 000f9000 03:09 335341     /usr/lib/libX11.so.6.2.0
00210000-00233000 r-xp 00000000 03:09 196586     /usr/thunderbird/libsmime3.so
00233000-00236000 rwxp 00022000 03:09 196586     /usr/thunderbird/libsmime3.so
00236000-00237000 rwxp 00236000 00:00 0
00237000-0024a000 r-xp 00000000 03:09 335350     /usr/lib/libXft.so.2.1.2
0024a000-0024b000 rwxp 00012000 03:09 335350     /usr/lib/libXft.so.2.1.2
0024b000-0024f000 rwxp 0024b000 00:00 0
0024f000-0025a000 r-xp 00000000 03:09 330590     /usr/lib/libpangox-1.0.so.0.1200.0
0025a000-0025b000 rwxp 0000a000 03:09 330590     /usr/lib/libpangox-1.0.so.0.1200.0
0025b000-0025c000 rwxp 0025b000 00:00 0
0025c000-0025d000 r-xs 00001000 03:07 1089568    /var/cache/fontconfig/88fe7a657865849dd90c96886eae1da0.cache-2
0025d000-00263000 r-xp 00000000 03:09 330369     /usr/lib/libpangoxft-1.0.so.0.1200.0
00263000-00264000 rwxp 00006000 03:09 330369     /usr/lib/libpangoxft-1.0.so.0.1200.0
00264000-0028b000 r-xp 00000000 03:09 196560     /usr/thunderbird/libssl3.so
0028b000-0028d000 rwxp 00027000 03:09 196560     /usr/thunderbird/libssl3.so
0028d000-002df000 r-xp 00000000 03:09 196554     /usr/thunderbird/libsoftokn3.so
002df000-002e3000 rwxp 00052000 03:09 196554     /usr/thunderbird/libsoftokn3.so
002e3000-002e4000 rwxp 002e3000 00:00 0
002e4000-00352000 r-xp 00000000 03:09 196581     /usr/thunderbird/libnss3.so
00352000-00357000 rwxp 0006e000 03:09 196581     /usr/thunderbird/libnss3.so
00357000-0038f000 r-xp 00000000 03:09 335349     /usr/lib/libfontconfig.so.1.0.4
0038f000-00393000 rwxp 00038000 03:09 335349     /usr/lib/libfontconfig.so.1.0.4
00393000-00394000 rwxp 00393000 00:00 0
00394000-00396000 r-xp 00000000 03:09 335339     /usr/lib/libXau.so.6.0.0
00396000-00397000 rwxp 00001000 03:09 335339     /usr/lib/libXau.so.6.0.0
00397000-0039e000 r-xs 00000000 03:09 392306     /usr/lib/gconv/gconv-modules.cache
0039e000-0039f000 r-xp 00000000 03:09 392247     /usr/lib/gconv/ISO8859-1.so
0039f000-003a1000 rwxp 00000000 03:09 392247     /usr/lib/gconv/ISO8859-1.so
003a1000-003a3000 r-xp 00000000 03:07 33112      /lib/libcom_err.so.2.1
003a3000-003a4000 rwxp 00001000 03:07 33112      /lib/libcom_err.so.2.1
003a4000-003a8000 r-xp 00000000 03:09 196809     /usr/thunderbird/libprldap50.so
003a8000-003a9000 rwxp 00003000 03:09 196809     /usr/thunderbird/libprldap50.so
003a9000-00414000 r-xp 00000000 03:09 335348     /usr/lib/libfreetype.so.6.3.8
00414000-00417000 rwxp 0006a000 03:09 335348     /usr/lib/libfreetype.so.6.3.8
00417000-00428000 r-xp 00000000 03:09 196579     /usr/thunderbird/libxpcom_compat.so
00428000-00429000 rwxp 00011000 03:09 196579     /usr/thunderbird/libxpcom_compat.so
00429000-00555000 r-xp 00000000 03:07 33103      /lib/libc-2.4.so
00555000-00558000 r-xp 0012b000 03:07 33103      /lib/libc-2.4.so
00558000-00559000 rwxp 0./run-mozilla.sh: line 131:  8779 Killed                  "$prog" ${1+"$@"}



One thing should i mention that i'm not sure whether this error messages has occurred after or before TB goes to non-responding state.
After crash  i open console window (Yakuake) and found that message

Comment 13

[David :Bienvenu]

if that's the right talkback id, it's a completely different stack

Comment 14

[Nir]

(In addition to comment #12)

Here is a (In reply to comment #13)
> if that's the right talkback id, it's a completely different stack
> 

I have opened 'Quality feedback agent' and checked that id again. It is the correct id.

here is a descriptions what i have followed before this non-responding state occurs:
1. uncheck 'Compact folder...' option.
2.In account Settings , set 'Check for new article for every '1' minute'
3.Select that rss folder > property > retention policy > 'Delete all but the last 30 messages'
4.Restart TB.
5.Select that Rss folder
6.Keep TB open for 20-30 minutes without changing focus to any other folder
7.now try to select any other folder

result : TB stops responding .

when i open TB again and goto that rss folder > properties > retention policies . it is automatically has changed back to 'use server default' . ( probably because a new .msf file is generated ? )

Comment 15

[Nir]

(In reply to comment #13)
> if that's the right talkback id, it's a completely different stack
> 

I has now crashed ( id  TB26709235G ) , just after i have changed retention policy from 'use server defaults ' to 'Delete all but the last 30 messages' and select another folder and select that rss folder again ( to refresh its content ).

Comment 16

[David :Bienvenu]

yes, that's the original crash stack trace

Comment 17

[Nir]

(In reply to comment #15)
> It has now crashed ( id  TB26709235G ) , just after i have changed retention
> policy from 'use server defaults ' to 'Delete all but the last 30 messages' and
> select another folder and select that rss folder again ( to refresh its content
> ).
> 

[root@localhost thunderbird]# ./thunderbird
selecting folder news://news.mozilla.org
TypeError: inboxFolder has no properties
failed to get view & sort values.  ex = [Exception... "Component returned failure code: 0x80550006 [nsIMsgFolder.getMsgDatabase]"  nsresult: "0x80550006 (<unknown>)"  location: "JS frame :: chrome://messenger/content/commandglue.js :: FolderPaneSelectionChange :: line 878"  data: no]
Error loading with many headers to download: [Exception... "Component returned failure code: 0xc1f30001 (NS_ERROR_NOT_INITIALIZED) [nsIMsgFolder.updateFolder]"  nsresult: "0xc1f30001 (NS_ERROR_NOT_INITIALIZED)"  location: "JS frame :: chrome://messenger/content/commandglue.js :: ChangeFolderByURI :: line 193"  data: no]
Trying to position a sizeless window; caller should have called sizeToContent() or sizeTo(). See bug 75649.
Trying to position a sizeless window; caller should have called sizeToContent() or sizeTo(). See bug 75649.
*** glibc detected *** ./thunderbird-bin: munmap_chunk(): invalid pointer: 0x0b59d0a8 ***
======= Backtrace: =========
/lib/libc.so.6(__libc_free+0x17b)[0x61851f]
./libnspr4.so(PR_Free+0x38)[0x35b118]
./thunderbird-bin[0x8a317ad]
./thunderbird-bin[0x8a31ad3]
./thunderbird-bin[0x8a48a83]
./libxpcom_core.so(NS_InvokeByIndex+0x29)[0x272435]
./thunderbird-bin[0x8149398]
./thunderbird-bin[0x81506c1]
./libmozjs.so(js_Invoke+0x646)[0x16cb16]
./libmozjs.so(js_Interpret+0x3e0f)[0x17202f]
./libmozjs.so(js_Invoke+0x740)[0x16cc10]
./libmozjs.so(js_InternalInvoke+0xc3)[0x16d0d3]
./libmozjs.so(JS_CallFunctionValue+0x4e)[0x140e1e]
./thunderbird-bin[0x84c85af]
./thunderbird-bin[0x84fb2da]
./thunderbird-bin[0x844c3b2]
./thunderbird-bin[0x844c89d]
./thunderbird-bin[0x845fd7e]
./thunderbird-bin[0x845fed6]
./thunderbird-bin[0x8460368]
./thunderbird-bin[0x851d92b]
./thunderbird-bin[0x851c7e8]
./libxpcom_core.so(NS_InvokeByIndex+0x29)[0x272435]
./thunderbird-bin[0x8149398]
./thunderbird-bin[0x81506c1]
./libmozjs.so(js_Invoke+0x646)[0x16cb16]
./libmozjs.so(js_Interpret+0x3e0f)[0x17202f]
./libmozjs.so(js_Invoke+0x740)[0x16cc10]
./libmozjs.so(js_InternalInvoke+0xc3)[0x16d0d3]
./libmozjs.so(JS_CallFunctionValue+0x4e)[0x140e1e]
./thunderbird-bin[0x84c85af]
./thunderbird-bin[0x84fb2da]
./thunderbird-bin[0x84a528e]
./thunderbird-bin[0x84a35b2]
./thunderbird-bin[0x844c3b2]
./thunderbird-bin[0x844c89d]
./thunderbird-bin[0x845fd7e]
./thunderbird-bin[0x845fed6]
./thunderbird-bin[0x8460368]
./thunderbird-bin[0x82dc3af]
./thunderbird-bin[0x82dc1b0]
./thunderbird-bin[0x82dbcb8]
./thunderbird-bin[0x84c1b4f]
./thunderbird-bin[0x84c148e]
./thunderbird-bin[0x84bc2a6]
./thunderbird-bin[0x829a609]
./thunderbird-bin[0x8292405]
./thunderbird-bin[0x829737b]
/usr/lib/libgtk-x11-2.0.so.0[0x546958e]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x11d)[0xa59f6d]
/usr/lib/libgobject-2.0.so.0[0xa6aa3d]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x68f)[0xa6bd0f]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x29)[0xa6c109]
/usr/lib/libgtk-x11-2.0.so.0[0x5554858]
/usr/lib/libgtk-x11-2.0.so.0(gtk_propagate_event+0x183)[0x5462f63]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main_do_event+0x317)[0x54641b7]
/usr/lib/libgdk-x11-2.0.so.0[0x30ee85a]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x16d)[0x2f3e09d]
/usr/lib/libglib-2.0.so.0[0x2f4132f]
/usr/lib/libglib-2.0.so.0(g_main_context_iteration+0x65)[0x2f41895]
./thunderbird-bin[0x827fe66]
./thunderbird-bin[0x8280003]
./libxpcom_core.so[0x265747]
======= Memory map: ========
00110000-00120000 r-xp 00000000 03:07 33107      /lib/libpthread-2.4.so
00120000-00121000 r-xp 0000f000 03:07 33107      /lib/libpthread-2.4.so
00121000-00122000 rwxp 00010000 03:07 33107      /lib/libpthread-2.4.so
00122000-00124000 rwxp 00122000 00:00 0
00124000-001d6000 r-xp 00000000 03:09 196513     /usr/thunderbird/libmozjs.so
001d6000-001dc000 rwxp 000b1000 03:09 196513     /usr/thunderbird/libmozjs.so
001dc000-001dd000 rwxp 001dc000 00:00 0
001dd000-00297000 r-xp 00000000 03:09 196820     /usr/thunderbird/libxpcom_core.so
00297000-0029e000 rwxp 000ba000 03:09 196820     /usr/thunderbird/libxpcom_core.so
0029e000-002a2000 r-xp 00000000 03:09 196566     /usr/thunderbird/libplc4.so
002a2000-002a3000 rwxp 00003000 03:09 196566     /usr/thunderbird/libplc4.so
002a3000-002a9000 r-xp 00000000 03:09 330369     /usr/lib/libpangoxft-1.0.so.0.1200.0
002a9000-002aa000 rwxp 00006000 03:09 330369     /usr/lib/libpangoxft-1.0.so.0.1200.0
002aa000-002b5000 r-xp 00000000 03:09 330590     /usr/lib/libpangox-1.0.so.0.1200.0
002b5000-002b6000 rwxp 0000a000 03:09 330590     /usr/lib/libpangox-1.0.so.0.1200.0
002b6000-002d9000 r-xp 00000000 03:09 196586     /usr/thunderbird/libsmime3.so
002d9000-002dc000 rwxp 00022000 03:09 196586     /usr/thunderbird/libsmime3.so
002dc000-002dd000 rwxp 002dc000 00:00 0
002dd000-00307000 r-xp 00000000 03:09 196796     /usr/thunderbird/libldap50.so
00307000-00309000 rwxp 00029000 03:09 196796     /usr/thunderbird/libldap50.so
00309000-0030d000 r-xp 00000000 03:09 196809     /usr/thunderbird/libprldap50.so
0030d000-0030e000 rwxp 00003000 03:09 196809     /usr/thunderbird/libprldap50.s./run-mozilla.sh: line 131: 14191 Aborted                 "$prog" ${1+"$@"}

Comment 18

[Nir]

id - TB26709681W

should i clear all .msf files and check again whther there is any improvement?

Comment 19

[David :Bienvenu]

you could to that, but I don't see how it would help - if they were corrupted, auto aging wouldn't happen because we wouldn't be able to get the retention settings

Comment 20

[Nir]

stopped responding now ( id - TB26709865Q )

Although this crash id doesn't seems to contain any useful info. but i have able to collect some important info :

1. that 'memory map' occurs when TB starts to stop responding ( I have checked console window just before clicking that rss folder and there was no such error message . it occurs just after i select rss folder.

2. when i have opened console it was on the line '003d3000-003e5000' . rest of the message occurs after i terminated TB

[root@localhost thunderbird]# ./thunderbird
selecting folder news://news.mozilla.org
TypeError: inboxFolder has no properties
*** glibc detected *** ./thunderbird-bin: double free or corruption (out): 0x0acb4928 ***
======= Backtrace: =========
/lib/libc.so.6[0x7f1f18]
/lib/libc.so.6(__libc_free+0x79)[0x7f541d]
./libnspr4.so(PR_Free+0x38)[0x1eb118]
./thunderbird-bin[0x8a317ad]
./thunderbird-bin[0x8a31ad3]
./thunderbird-bin[0x8a48a83]
./libxpcom_core.so(NS_InvokeByIndex+0x29)[0x1a6435]
./thunderbird-bin[0x8149398]
./thunderbird-bin[0x81506c1]
./libmozjs.so(js_Invoke+0x646)[0x434b16]
./libmozjs.so(js_Interpret+0x3e0f)[0x43a02f]
./libmozjs.so(js_Invoke+0x740)[0x434c10]
./libmozjs.so(js_InternalInvoke+0xc3)[0x4350d3]
./libmozjs.so(JS_CallFunctionValue+0x4e)[0x408e1e]
./thunderbird-bin[0x84c85af]
./thunderbird-bin[0x84fb2da]
./thunderbird-bin[0x844c3b2]
./thunderbird-bin[0x844c89d]
./thunderbird-bin[0x845fd7e]
./thunderbird-bin[0x845fed6]
./thunderbird-bin[0x8460368]
./thunderbird-bin[0x851d92b]
./thunderbird-bin[0x851c7e8]
./libxpcom_core.so(NS_InvokeByIndex+0x29)[0x1a6435]
./thunderbird-bin[0x8149398]
./thunderbird-bin[0x81506c1]
./libmozjs.so(js_Invoke+0x646)[0x434b16]
./libmozjs.so(js_Interpret+0x3e0f)[0x43a02f]
./libmozjs.so(js_Invoke+0x740)[0x434c10]
./libmozjs.so(js_InternalInvoke+0xc3)[0x4350d3]
./libmozjs.so(JS_CallFunctionValue+0x4e)[0x408e1e]
./thunderbird-bin[0x84c85af]
./thunderbird-bin[0x84fb2da]
./thunderbird-bin[0x84a528e]
./thunderbird-bin[0x84a35b2]
./thunderbird-bin[0x844c3b2]
./thunderbird-bin[0x844c89d]
./thunderbird-bin[0x845fd7e]
./thunderbird-bin[0x845fed6]
./thunderbird-bin[0x8460368]
./thunderbird-bin[0x82dc3af]
./thunderbird-bin[0x82dc1b0]
./thunderbird-bin[0x82dbcb8]
./thunderbird-bin[0x84c1b4f]
./thunderbird-bin[0x84c148e]
./thunderbird-bin[0x84bc2a6]
./thunderbird-bin[0x829a609]
./thunderbird-bin[0x8292405]
./thunderbird-bin[0x829737b]
/usr/lib/libgtk-x11-2.0.so.0[0x546958e]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x11d)[0xa59f6d]
/usr/lib/libgobject-2.0.so.0[0xa6aa3d]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x68f)[0xa6bd0f]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x29)[0xa6c109]
/usr/lib/libgtk-x11-2.0.so.0[0x5554858]
/usr/lib/libgtk-x11-2.0.so.0(gtk_propagate_event+0x183)[0x5462f63]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main_do_event+0x317)[0x54641b7]
/usr/lib/libgdk-x11-2.0.so.0[0x30ee85a]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x16d)[0x2f3e09d]
/usr/lib/libglib-2.0.so.0[0x2f4132f]
/usr/lib/libglib-2.0.so.0(g_main_context_iteration+0x65)[0x2f41895]
./thunderbird-bin[0x827fe66]
./thunderbird-bin[0x8280003]
======= Memory map: ========
00110000-00111000 rwxp 00110000 00:00 0
00111000-001cb000 r-xp 00000000 03:09 196820     /usr/thunderbird/libxpcom_core.so
001cb000-001d2000 rwxp 000ba000 03:09 196820     /usr/thunderbird/libxpcom_core.so
001d2000-001d6000 r-xp 00000000 03:09 196566     /usr/thunderbird/libplc4.so
001d6000-001d7000 rwxp 00003000 03:09 196566     /usr/thunderbird/libplc4.so
001d7000-00208000 r-xp 00000000 03:09 196542     /usr/thunderbird/libnspr4.so
00208000-0020b000 rwxp 00030000 03:09 196542     /usr/thunderbird/libnspr4.so
0020b000-0020d000 rwxp 0020b000 00:00 0
0020d000-00213000 r-xp 00000000 03:09 330369     /usr/lib/libpangoxft-1.0.so.0.1200.0
00213000-00214000 rwxp 00006000 03:09 330369     /usr/lib/libpangoxft-1.0.so.0.1200.0
00214000-00237000 r-xp 00000000 03:09 196586     /usr/thunderbird/libsmime3.so
00237000-0023a000 rwxp 00022000 03:09 196586     /usr/thunderbird/libsmime3.so
0023a000-0023e000 r-xp 00000000 03:09 196809     /usr/thunderbird/libprldap50.so
0023e000-0023f000 rwxp 00003000 03:09 196809     /usr/thunderbird/libprldap50.so
0023f000-00244000 rwxp 0023f000 00:00 0
00244000-0024b000 r-xs 00000000 03:09 392306     /usr/lib/gconv/gconv-modules.cache
0024b000-0024c000 r-xp 00000000 03:09 392247     /usr/lib/gconv/ISO8859-1.so
0024c000-0024e000 rwxp 00000000 03:09 392247     /usr/lib/gconv/ISO8859-1.so
0024e000-0024f000 r-xs 00001000 03:07 1089569    /var/cache/fontconfig/b714d06a0aa38f2a015b255ffd23f739.cache-2
0024f000-0025a000 r-xp 00000000 03:09 330590     /usr/lib/libpangox-1.0.so.0.1200.0
0025a000-0025b000 rwxp 0000a000 03:09 330590     /usr/lib/libpangox-1.0.so.0.1200.0
0025b000-00264000 r-xp 00000000 03:07 32041      /lib/libnss_files-2.4.so
00264000-00265000 r-xp 00008000 03:07 32041      /lib/libnss_files-2.4.so
00265000-00266000 rwxp 00009000 03:07 32041      /lib/libnss_files-2.4.so
00266000-00276000 r-xp 00000000 03:09 457947     /usr/lib/gtk-2.0/2.4.0/engines/libclearlooks.so
00276000-00277000 rwxp 0000f000 03:09 457947     /usr/lib/gtk-2.0/2.4.0/engines/libclearlooks.so
00277000-0027b000 r-xp 00000000 03:09 335371     /usr/lib/libgthread-2.0.so.0.1000.1
0027b000-0027c000 rwxp 00003000 03:09 335371     /usr/lib/libgthread-2.0.so.0.1000.1
0027c000-002ea000 r-xp 00000000 03:09 196581     /usr/thunderbird/libnss3.so
002ea000-002ef000 rwxp 0006e000 03:09 196581     /usr/thunderbird/libnss3.so
002ef000-00341000 r-xp 00000000 03:09 196554     /usr/thunderbird/libsoftokn3.so
00341000-00345000 rwxp 00052000 03:09 196554     /usr/thunderbird/libsoftokn3.so
00345000-00358000 r-xp 00000000 03:09 335350     /usr/lib/libXft.so.2.1.2
00358000-00359000 rwxp 00012000 03:09 335350     /usr/lib/libXft.so.2.1.2
00359000-0035e000 r-xp 00000000 03:09 196288     /usr/thunderbird/extensions/[e-mail]/components/libqfaservices.so
0035e000-0035f000 rwxp 00004000 03:09 196288     /usr/thunderbird/extensions/[e-mail]/components/libqfaservices.so
0035f000-00362000 r-xp 00000000 03:09 335408     /usr/lib/libavahi-glib.so.1.0.0
00362000-00363000 rwxp 00002000 03:09 335408     /usr/lib/libavahi-glib.so.1.0.0
00363000-00365000 r-xs 00001000 03:07 1088055    /var/cache/fontconfig/d0852e6107e29cf2370e29e932b671e8.cache-2
00365000-00367000 r-xp 00000000 03:09 196571     /usr/thunderbird/libplds4.so
00367000-00368000 rwxp 00002000 03:09 196571     /usr/thunderbird/libplds4.so
00368000-003bd000 r-xp 00000000 03:09 329671     /usr/lib/libXt.so.6.0.0
003bd000-003c1000 rwxp 00054000 03:09 329671     /usr/lib/libXt.so.6.0.0
003c1000-003d2000 r-xp 00000000 03:09 196579     /usr/thunderbird/libxpcom_compat.so
003d2000-003d3000 rwxp 00011000 03:09 196579     /usr/thunderbird/libxpcom_compat.so
003d3000-003e5000 ./run-mozilla.sh: line 131: 20097 Killed                  "$prog" ${1+"$@"}

Comment 21

[David :Bienvenu]

so you've turned off autocompaction, so that's not involved. Would it be possible for you to send me a folder and the corresponding .msf file which crashes when you open it?

Comment 22

[Nir]

Attachment: 'News & Blogs' Folder ( Zipped )

This .zip file contains 'News & Blog' folder .
The probable corrupted .msf file is :
Google News - Sci98a3e61e.msf

( Sending this file as i have found it after crash TB26758410E )

Some additional Info.
It seems to me now that Message grouping has some role in this crash as i have already mentioned in my previous comment that before a crash is going to happen message grouping is shown in incorrect order like:

+
+yesterday
+Today

or

+Xbox 360 Halo 3 Trailer Right Around The Corner - Xbox Today
+yesterday
+Today

probably it has caused by corrupted .msf file

Comment 23

[Nir]

Attachment: Collected data from console after crash - TB26758410E

( in addition to Comment #22 ) attaching the 'Memory map & Backtrace ' data

Comment 24

[David :Bienvenu]

Have you done something clever like setting the retention policy for the news and blogs account (which involves setting hidden prefs for the account)?

I saw that many of those .msf files were not openable, but I didn't see any crashes.

Comment 25

[Nir]

(In reply to comment #24)
 I am using 'mail.db_timestamp_leeway' pref ( with value 1400 )
[http://kb.mozillazine.org/Daylight_savings_time]

The easiest ways to detect a crash :
1.group message of Google-news rss 
2.click on 'Get mail' 2 or 3 times until message grouping shown in incorrect order
3.click on any other folder

or
1.group message of google-news rss
2.set timer to download frequently ,like 1 minute
3.keep TB open with GNews rss selected for 20-30 minutes
4.select any other folder

Comment 26

[David :Bienvenu]

OK, thx, I made it crash in the same place - I'll try to figure out what's going on.

Comment 27

[David :Bienvenu]

Attachment: proposed fix

this is basically a bunch of bulletproofing that prevents memory corruption, which was leading to the crash (I believe this is a top-crasher, or close to it)

There may be other things we can do to avoid getting into this situation, but for now, this fixes the crash...

Comment 28

[David :Bienvenu]

Nir, thx for the test case - you're right that it's the group view that causes this problem.

Comment 29

[David :Bienvenu]

fixed on trunk and branch

Comment 30

[Nir]

(In reply to comment #29)
> fixed on trunk and branch
> 

David, how can i use your patch to fix this problem in my TB-3a1?
Thanks

Comment 31

[David :Bienvenu]

today's trunk build will have the fix, as well as today's 2.0 pre beta 1 build - you can't apply the patch yourself since it's a c++ change

Comment 32

[David :Bienvenu]

Thx again for all your help diagnosing this problem - you were also right that having the header show up w/o a group was involved with the problem. That problem still exists, but it no longer causes the crash.

Comment 33

[Nir]

(In reply to comment #32)
> Thx again for all your help diagnosing this problem - you were also right that
> having the header show up w/o a group was involved with the problem. That
> problem still exists, but it no longer causes the crash.
> 


should i report this problem ( incorrect message grouping ) as a separate bug report ?

Comment 34

[Carsten Book [:Tomcat]]

verified fixed 1.8.1.3 using Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.3) Gecko/20070326 Thunderbird/2.0.0.0 ID:2007032622 on Fedora FC 6 and the testcase and file from comment0 

No Crash on message aging with grouped views.