366234 - segfault crash when applying filter containing forward rule

Status: VERIFIED DUPLICATE of bug 315091

(Thunderbird :: General, defect)

Description

[vlio]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; fr; rv:1.8.1.1) Gecko/20060601 Firefox/2.0.0.1 (Ubuntu-edgy)
Build Identifier: 1.5.0.9 (20070103)

Thunderbird crashes with segfault when attempting to execute a filter.
This happens when
- the filter contains a rule having the message forwarded
AND
- a message concerned by the filter has an empty subject

Reproducible: Always

Steps to Reproduce:
1. create a new filter
2. in this filter, add a rule that forward the matching messages to an external mail address
3. receive a matching mail with an empty subject field
Actual Results:  
segfault

Expected Results:  
apply the filter (= forward the mail)

Comment 1

[Magnus Melin [:mkmelin]]

Can't reproduce using Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.2pre) Gecko/20070107 Thunderbird/2.0b1 ID:2007010703

Can you provide the talkback id? (http://kb.mozillazine.org/Talkback)

Comment 2

[vlio]

don't think I have talkback installed on Ubuntu...

what do you want to know ?

Comment 3

[Magnus Melin [:mkmelin]]

Can you install an official build from mozilla.org. If you can reproduce with that, post the talkback id.

Comment 4

[timeless]

ubuntu is supposed to have a system for you to get symbols for ubuntu builds, you can try to use their support network to install those packages.

i'd just install a mozilla.org build. you can install it into your home directory, your desktop, or a temp folder.

Comment 5

[vlio]

ok, used the mozilla.org build, incident sent with talkback
ID: TB28153142W

Comment 7

[Henrik Skupin [:whimboo][⌚️UTC+2]]

v.

Stack Signature	 msg_pick_real_name() 718150b5
Product ID	Thunderbird15
Build ID	2006120623
Trigger Time	2007-01-08 09:57:11.0
Platform	LinuxIntel
Operating System	Linux 2.6.17-10-generic
Module	thunderbird-bin + (00808601)
URL visited	
User Comments	bug 366234
Since Last Crash	0 sec
Total Uptime	0 sec
Trigger Reason	SIGSEGV: Segmentation Fault: (signal 11)
Source File, Line No.	/builds/tinderbox/Tb-Mozilla1.8.0-Release/Linux_2.4.18-14_Depend/mozilla/mailnews/compose/src/nsMsgCompUtils.cpp, line 848
Stack Trace 

Comment 8

[David :Bienvenu]

do you only have one message that matches the filter criteria, so that you're sure it's the empty subject that's causing the problem? That's a great clue, if that's what it turns out to be!

Comment 9

[vlio]

yes, this happens too when only one message matches the filter criteria, if it has an empty subject

it happens as soon as one of the matching messages has an empty subject

I am pretty sure of the cause, as I recently encountered that problem many times

Comment 10

[David :Bienvenu]

ok, thx. I'm not seeing it here on my debug trunk build, but it definitely makes sense, since the forwarded attachment gets its name from the subject

Comment 11

[David :Bienvenu]

Here are much better line numbers:

msg_pick_real_name  [mozilla/mailnews/compose/src/nsMsgCompUtils.cpp, line 1653]
nsMsgComposeAndSend::AddCompFieldRemoteAttachments  [mozilla/mailnews/compose/src/nsMsgSend.cpp, line 2466]
nsMsgComposeAndSend::HackAttachments  [mozilla/mailnews/compose/src/nsMsgSend.cpp, line 2639]
nsMsgComposeAndSend::Init  [mozilla/mailnews/compose/src/nsMsgSend.cpp, line 3244]
nsMsgComposeAndSend::CreateAndSendMessage  [mozilla/mailnews/compose/src/nsMsgSend.cpp, line 4087]

Comment 12

[David :Bienvenu]

do these messages w/o a subject have any attachments themselves? When creating the name for the forwarded attachment, we append .eml to the subject to create the atachment name, so we get ".eml", and we don't get to the crashing code. I'm not sure why that wouldn't be working for you...

Comment 13

[vlio]

no they don't have any attachments

Comment 14

[vlio]

did some test, it happens when the message has an attachment as well...