364007 - [IMAP] Crash when navigating through new mail with key 'N' [@ nsSocketTransport::OpenOutputStream]

Status: RESOLVED WORKSFORME

(MailNews Core :: Networking: IMAP, defect)

Description

[Henrik Skupin [:whimboo][⌚️UTC+1]]

version 2 beta 1 (20061214)

I've an IMAP account where junk mail is collected. Sometimes I look over it to see that no ham is inside. So I step through the list by hitting key 'N' to get the next unread message. Dunno if I was too fast but after some messages Thunderbird crashed. Looking at the topcrasher list this is listed mainly for 1.5.x builds of Thunderbird.

Talkback id: TB27375005Z

Stack Signature	 nsSocketTransport::OpenOutputStream 5200fe0e
Product ID	Thunderbird2
Build ID	2006121404
Trigger Time	2006-12-15 12:20:56.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	thunderbird.exe + (000b1d68)
URL visited	
User Comments	
Since Last Crash	584 sec
Total Uptime	584 sec
Trigger Reason	Access violation
Source File, Line No.	e:/builds/tinderbox/Tb-Mozilla1.8/WINNT_5.0_Depend/mozilla/netwerk/base/src/nsSocketTransport2.cpp, line 1676
Stack Trace 	
nsSocketTransport::OpenOutputStream  [mozilla/netwerk/base/src/nsSocketTransport2.cpp, line 1676]
nsImapProtocol::SetupWithUrl  [mozilla/mailnews/imap/src/nsImapProtocol.cpp, line 822]
nsImapProtocol::LoadImapUrl  [mozilla/mailnews/imap/src/nsImapProtocol.cpp, line 1685]
nsImapIncomingServer::GetImapConnectionAndLoadUrl  [mozilla/mailnews/imap/src/nsImapIncomingServer.cpp, line 458]
nsImapMockChannel::ReadFromImapConnection  [mozilla/mailnews/imap/src/nsImapProtocol.cpp, line 8425]
nsImapMockChannel::OnCacheEntryAvailable  [mozilla/mailnews/imap/src/nsImapProtocol.cpp, line 8251]
XPTC_InvokeByIndex  [mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp, line 102]
EventHandler  [mozilla/xpcom/proxy/src/nsProxyEvent.cpp, line 561]
0x778b0c24
UnescapeFragment  [mozilla/uriloader/exthandler/nsExternalHelperAppService.cpp, line 160]

Comment 1

[David :Bienvenu]

does this crash occur on the trunk or 2.0 branch builds?

Comment 2

[Henrik Skupin [:whimboo][⌚️UTC+1]]

(In reply to comment #1)
> does this crash occur on the trunk or 2.0 branch builds?

This bug is listed as topcrasher for Thunderbird 2 Branch (surprisingly its only my own crash report) and Thunderbird 1.5.0.x builds with 127 crashes. I can't find any crash for trunk builds.

Comment 3

[Wayne Mery (:wsmwk)]

still a topcrash for TB2 - #47.  Most describe reading messages, and majority of those cite message has attachments (jpg for example, but not strictly) or are otherwise large message.  Doesn't show up on trunk/crash-stats.

probably related, or same as, bug 373895 - which is highly reproducible

Comment 4

[Wayne Mery (:wsmwk)]

Bug 403272 – crash typically retrieving attachments/images [@ nsSocketTransport::OpenInputStream] - has same stack except for the top frame 1. 
 (note firefox has crashes with same top of stack)

so  ... is Bug 373895 - Crash when moving from partly displayed large IMAP message to another IMAP folder [@ nsImapProtocol::SetupWithUrl] - the common denominator cause of the two bugs?

Comment 5

[Magnus Melin [:mkmelin]]

The patch in bug 373895 should fix this too.

Comment 6

[Wayne Mery (:wsmwk)]

Magnus in comment #5:
> The patch in bug 373895 should fix this too.

I don't think that patch never checked in.  

bug 373895 top of stack doesn't appear on trunk.
bug 403272's [1] does appear on trunk.
this bug's TOS does not appear on trunk. (for all v3 builds, for at least 2 weeks)

[1] bp-df4009e3-f38a-45e7-85b6-98f2e2081210

Comment 7

[Wayne Mery (:wsmwk)]

is this gone for you in v3?  
I can't find this top of stack for last 2 months.

However, there is a crash with pop in the stack

https://crash-stats.mozilla.com/report/list?product=Thunderbird&build_id=&query_search=signature&query_type=exact&query=nsSocketTransport%3A%3AOpenOutputStream%28unsigned%20int%2C%20unsigned%20int%2C%20unsigned%20int%2C%20nsIOutputStream**%29&date=3%2F1%2F2010&range_value=4&range_unit=weeks&process_type=all&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&signature=nsSocketTransport%3A%3AOpenOutputStream%28unsigned%20int%2C%20unsigned%20int%2C%20unsigned%20int%2C%20nsIOutputStream**%29&missing_sig=&page=1

Comment 8

[Wayne Mery (:wsmwk)]

not seen in crash-stats, so => WFM