Closed Bug 372215 Opened 18 years ago Closed 18 years ago

Segfault scrolling in message list [@ find_attribute]

Categories

(Core Graveyard :: GFX: Gtk, defect)

Product:
Core Graveyard
Component:
GFX: Gtk
Platform:
Sun
Solaris
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
RESOLVED WORKSFORME

People

(Reporter: km, Assigned: mscott)

Details

(Keywords: crash)

Crash Data

User-Agent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.8.1.2pre) Gecko/20070211 Firefox/2.0.0.2pre Build Identifier: version 3 alpha 1 (20070228) If I pull the message list scrollbar slowly, thunderbird segfaults. This doesn't happen if I pull it rapidly from top to bottom. The stack backtrace is quite consistent. =>[1] find_attribute(0xaa, 0x10, 0xfe7e1050, 0xfe7e1078, 0x5af, 0xfe7e11d8), at 0xfe7c666c [2] update_attr_iterator(0xffbfa00c, 0x0, 0x58, 0x30020, 0xfe7c4910, 0x0), at 0xfe7c6744 [3] itemize_state_init(0xffbfa00c, 0xacfe78, 0x2166d38, 0x0, 0x0, 0x58), at 0xfe7c6890 [4] pango_itemize_with_base_dir(0xacfe78, 0x0, 0x2166d38, 0x0, 0x58, 0x0), at 0xfe7c7490 [5] pango_itemize(0xacfe78, 0x2166d38, 0x0, 0x58, 0x0, 0x0), at 0xfe7c7620 [6] gfxPangoFontGroup::CreateGlyphRunsItemizing(0xad2010, 0xb13e60, 0x2166d38, 0x58, 0x3, 0x926ae0), at 0xf9da8dcc [7] gfxPangoFontGroup::MakeTextRun(0xad2010, 0xac80d8, 0x55, 0xac8182, 0xb13e60, 0xaa), at 0xf9da41f4 [8] gfxTextRunCache::GetOrMakeTextRun(0x250b20, 0x3cdd08, 0xad2010, 0xac80d8, 0x55, 0x3c), at 0xf9d9ff24 [9] nsThebesFontMetrics::GetWidth(0x7a9e60, 0xac80d8, 0x55, 0xffbfa454, 0x250b20, 0x0), at 0xf9ec03ac [10] nsRenderingContextImpl::GetWidth(0x2251434, 0xac80d8, 0x55, 0xffbfa4e4, 0x0, 0x787), at 0xf9ec3648 [11] nsLayoutUtils::GetStringWidth(0xf9ebde04, 0x2251434, 0xac80d8, 0x55, 0xcc, 0x31a1b0), at 0xf94fab88 [12] nsTreeBodyFrame::AdjustForCellText(0x78bacc, 0xffbfa950, 0x3f06, 0xb97630, 0x2251434, 0xffbfa940), at 0xf99190b4 [13] nsTreeBodyFrame::PaintText(0x78bacc, 0x3f06, 0xb97630, 0x3c0, 0x31a1b0, 0x2251434), at 0xf991e7a8 [14] nsTreeBodyFrame::PaintCell(0x78bacc, 0x3f06, 0xb97630, 0xffbfab04, 0x31a1b0, 0x2251434), at 0xf991de30 [15] nsTreeBodyFrame::PaintRow(0x78bacc, 0x3f06, 0x7844c0, 0x31a1b0, 0x2251434, 0xffbfaef0), at 0xf991d680 [16] nsTreeBodyFrame::PaintTreeBody(0x78bacc, 0x2251434, 0xffbfaef0, 0x3084, 0xffbface4, 0xffbfacfc), at 0xf991ceb4 [17] PaintTreeBody(0x78bacc, 0x2251434, 0xffbfaef0, 0xffbfae28, 0x19c8, 0x3084), at 0xf991cad4 [18] nsDisplayGeneric::Paint(0x21b1164, 0xffbfb008, 0x2251434, 0xffbfaef0, 0x72fe64, 0xf991cab4), at 0xf9545588 [19] nsDisplayList::Paint(0x21b11b8, 0xffbfb008, 0x2251434, 0xffbfaef0, 0x21b1164, 0xf9c5cb18), at 0xf94e3f20 [20] nsDisplayClip::Paint(0x21b11ac, 0xffbfb008, 0x2251434, 0xf9ebe184, 0xf9ebe1d4, 0xf9eda358), at 0xf94e5ac0 [21] nsDisplayList::Paint(0xffbfb000, 0xffbfb008, 0x2251434, 0xffbfb130, 0x21b11ac, 0xf9c55c3c), at 0xf94e3f20 [22] nsLayoutUtils::PaintFrame(0x2251434, 0xffbfafc0, 0xffbfb110, 0xffe6e6e6, 0x0, 0xffbfb008), at 0xf94f8e9c [23] PresShell::Paint(0xffe6e6e6, 0x0, 0x2251434, 0xffbfb110, 0x0, 0x0), at 0xf9508abc [24] nsViewManager::RenderViews(0xf950ca74, 0xf9c56c80, 0x2251434, 0xf9eda358, 0x31af7c, 0x3e9618), at 0xf986c6ec [25] nsViewManager::Refresh(0x3e9618, 0x6e6c40, 0x2251434, 0xac7dd0, 0x3c, 0xf986bd80), at 0xf986c1e8 [26] nsViewManager::DispatchEvent(0x3e9618, 0xffbfb6b8, 0xfa478668, 0x31af7c, 0x0, 0xffbfb444), at 0xf986dac0 [27] HandleEvent(0xffbfb6b8, 0x1, 0x0, 0x3, 0xf986d670, 0xf9c96cb0), at 0xf9867608 [28] nsCommonWidget::DispatchEvent(0x4f1eb8, 0xffbfb6b8, 0xffbfb6b4, 0x1, 0xfa417088, 0xfa478668), at 0xfa426990 [29] nsWindow::OnExposeEvent(0x4f1eb8, 0x330258, 0xfa478668, 0x2251434, 0x868938, 0xffbfb754), at 0xfa419c54 [30] expose_event_cb(0x3276b0, 0xffbfbde8, 0x0, 0x4c00, 0x1084, 0xfe834528), at 0xfa420a10 [31] _gtk_marshal_BOOLEAN__BOXED(0xffbfb988, 0x1b0bd0, 0x32b018, 0xffbfbae0, 0xffbfb974, 0xfa4209f8), at 0xfebada58 [32] g_closure_invoke(0xffbfbae0, 0xffbfb974, 0x2, 0x10000, 0x0, 0x32b018), at 0xfe82dcd8 [33] signal_emit_unlocked_R(0xfe83b034, 0xfe86eaf8, 0xfe93ee34, 0xfe93ee20, 0xfe86eae4, 0xcb080), at 0xfe8454c8 [34] g_signal_emit_valist(0x3276b0, 0x0, 0xcb080, 0xffbfbd14, 0xfe86eaf8, 0xfe858d20), at 0xfe844484 [35] g_signal_emit(0x3276b0, 0x21, 0x0, 0xffbfbde8, 0xffbfbd24, 0xfffffec8), at 0xfe844738 [36] gtk_widget_event_internal(0x3276b0, 0xffbfbde8, 0xfecb3118, 0x234, 0xc, 0x9c00), at 0xfecb336c [37] gtk_main_do_event(0x2e8, 0xffbfbde8, 0x3276b0, 0xfebaab08, 0x0, 0xc), at 0xfebaae38 [38] gdk_window_process_updates_internal(0x61a180, 0x1, 0x860c10, 0x1cc3068, 0xfebaab90, 0xfea0262c), at 0xfe9b1bdc [39] gdk_window_process_updates(0x61a180, 0x0, 0x400, 0x4d4c0, 0xfe8ec098, 0x0), at 0xfe9b1e50 [40] nsWindow::Update(0x4f1eb8, 0x0, 0x400, 0x4d4c0, 0xf986f440, 0x761f20), at 0xfa418aa4 [41] nsViewManager::UpdateWidgetsForView(0x3e9618, 0x6e6c40, 0xffbfbe10, 0xfa418a8c, 0xfa478668, 0x0), at 0xf986f428 [42] nsViewManager::UpdateWidgetsForView(0x3e9618, 0x7485b0, 0xffbfbea0, 0xfa418a8c, 0xfa478668, 0x6e6c40), at 0xf986f440 [43] nsViewManager::UpdateWidgetsForView(0x3e9618, 0x3284f0, 0x102c94, 0xfa418a8c, 0xfa478668, 0x7485b0), at 0xf986f440 [44] nsViewManager::ForceUpdate(0x3e9618, 0xffbfc154, 0x102a9c, 0x64, 0xfa2d7c8c, 0x63), at 0xf986fc6c [45] nsViewManager::Composite(0x3e9618, 0xffbfc154, 0x4e99b8, 0xf986fc44, 0xf9c96cb0, 0x3e9618), at 0xf986cd04 [46] nsViewManager::UpdateView(0x3e9618, 0x3e9618, 0xffbfc228, 0xf986ccc0, 0xf9c96cb0, 0x3284f0), at 0xf986d58c [47] nsIFrame::InvalidateRoot(0x1eef, 0xbf4, 0xc3b4, 0x3bff, 0x2, 0x0), at 0xf95311b8 [48] nsIFrame::Invalidate(0x78beb0, 0xf953113c, 0x1, 0xf9c6d8f8, 0xbf4, 0xffbfc36c), at 0xf953112c [49] nsSliderFrame::CurrentPositionChanged(0x78beb0, 0x31a1b0, 0x1f2b, 0x0, 0x1f2b, 0x1f2b), at 0xf96404fc [50] nsSliderFrame::AttributeChanged(0x78beb0, 0x0, 0x42e78, 0x1, 0x0, 0x78bd3c), at 0xf963f274 [51] nsCSSFrameConstructor::AttributeChanged(0x31b1c0, 0x747148, 0x0, 0x42e78, 0x1, 0x0), at 0xf94ce5d0 [52] PresShell::AttributeChanged(0x31af00, 0x1, 0x747148, 0x0, 0x1, 0x0), at 0xf95081d0 [53] nsBindingManager::AttributeChanged(0xf950c9c4, 0x3f1fd8, 0x747148, 0x0, 0x42e78, 0x1), at 0xf984a080 [54] nsNodeUtils::AttributeChanged(0x747148, 0x0, 0x42e78, 0x1, 0x3f1fd8, 0xf9c94e24), at 0xf96d6e28 [55] nsGenericElement::SetAttrAndNotify(0x747148, 0x0, 0x42e78, 0x0, 0xffbfc960, 0xffbfc954), at 0xf96c8174 [56] nsGenericElement::SetAttr(0x747148, 0x0, 0x0, 0x0, 0xffbfcba8, 0x1), at 0xf96c7bfc [57] nsXBLPrototypeBinding::AttributeChanged(0x1, 0x42e78, 0x0, 0x40ac40, 0x51c610, 0x0), at 0xf9830ca0 [58] nsXBLBinding::AttributeChanged(0x78c518, 0x42e78, 0x0, 0x0, 0x1, 0x8da0e4), at 0xf982e4c8 [59] nsGenericElement::SetAttrAndNotify(0x51c610, 0x0, 0x42e78, 0x0, 0xffbfcfa0, 0xffbfcf94), at 0xf96c7ee8 [60] nsGenericElement::SetAttr(0x51c610, 0x0, 0x0, 0x0, 0xffbfd098, 0x1), at 0xf96c7bfc [61] nsTreeBodyFrame::PositionChanged(0x78bacc, 0x78bd34, 0x3efb, 0xffbfd208, 0xffbfd098, 0xf9c4d93c), at 0xf9920164 [62] nsSliderFrame::SetCurrentPosition(0x78beb0, 0x51c610, 0x46db4, 0x0, 0x0, 0xf9ca1904), at 0xf96407c4 [63] nsSliderFrame::HandleEvent(0x78beb0, 0xf99390d0, 0xffbfd920, 0x78bf94, 0xf9c4d93c, 0x85), at 0xf963fe6c [64] nsEventTargetChainItem::HandleEventTargetChain(0x22ae5a8, 0xffbfd3e4, 0x6, 0xffbfd490, 0x821, 0x823), at 0xf9726530 [65] nsEventDispatcher::Dispatch(0x31a1b0, 0x0, 0x22ae440, 0x80000000, 0xffbfd628, 0xffbfd490), at 0xf9726a20 [66] PresShell::HandleEventInternal(0x31af00, 0xffbfd920, 0x747338, 0xffbfd628, 0x0, 0xa8), at 0xf9509c90 [67] PresShell::HandlePositionedEvent(0x31af00, 0x747338, 0xf9ca2d80, 0xffbfd920, 0xffbfd628, 0x8), at 0xf9509904 [68] PresShell::HandleEvent(0x31a1b0, 0xffbfd920, 0x0, 0xffbfd628, 0xa, 0x31af00), at 0xf95094c8 [69] nsViewManager::HandleEvent(0x3e9618, 0x747338, 0xf9c56c80, 0xffbfd920, 0x3e9618, 0xf950ca54), at 0xf986e6d4 [70] nsViewManager::DispatchEvent(0x3e9618, 0xffbfd920, 0xffbfd854, 0x970e, 0xf986d658, 0x3048), at 0xf986e230 [71] HandleEvent(0xffbfd920, 0xffbfd857, 0x0, 0x4, 0xf986d670, 0xf9c96cb0), at 0xf9867608 [72] nsCommonWidget::DispatchEvent(0x748610, 0xffbfd920, 0xffbfd91c, 0x0, 0xfa417088, 0xfa478668), at 0xfa426990 [73] nsWindow::OnMotionNotifyEvent(0x748610, 0x0, 0xfa426964, 0xfa478668, 0x100, 0x0), at 0xfa41a868 [74] motion_notify_event_cb(0x3276b0, 0x3e6738, 0x0, 0x4c00, 0x1084, 0xfe834528), at 0xfa420b40 [75] _gtk_marshal_BOOLEAN__BOXED(0xffbfdbc8, 0x1b0bd0, 0x32b078, 0xffbfdd20, 0xffbfdbb4, 0xfa420b28), at 0xfebada58 [76] g_closure_invoke(0xffbfdd20, 0xffbfdbb4, 0x2, 0x10000, 0x0, 0x32b078), at 0xfe82dcd8 [77] signal_emit_unlocked_R(0xfe83b034, 0xfe86eaf8, 0xfe93ee34, 0xfe93ee20, 0xfe86eae4, 0xcbad8), at 0xfe8454c8 [78] g_signal_emit_valist(0x3276b0, 0x0, 0xcbad8, 0xffbfdf54, 0xfe86eaf8, 0xfe858d20), at 0xfe844484 [79] g_signal_emit(0x3276b0, 0x1e, 0x0, 0x3e6738, 0xffbfdf64, 0xfffffec8), at 0xfe844738 [80] gtk_widget_event_internal(0x3276b0, 0x3e6738, 0xfecb3118, 0x174, 0x10, 0x9c00), at 0xfecb336c [81] gtk_propagate_event(0x3276b0, 0x3e6738, 0xff339c58, 0x1b26c8, 0xfe8d20dc, 0xfed5e53c), at 0xfebabfa8 [82] gtk_main_do_event(0x38c, 0x3e6738, 0x3276b0, 0xfebaab08, 0x0, 0x10), at 0xfebaae98 [83] gdk_event_dispatch(0x35d78, 0x33c28, 0x3a4ec, 0xff339c2c, 0x3e6738, 0xfe9ff244), at 0xfe9c4dd4 [84] g_main_dispatch(0x36f98, 0xfe93ec00, 0x0, 0x0, 0xfffffffd, 0xffffffef), at 0xfe8d5ac8 [85] g_main_context_dispatch(0x36f98, 0x1, 0xa81a28, 0x1, 0xfe93ec00, 0x36f98), at 0xfe8d6ffc [86] g_main_context_iterate(0x1, 0x0, 0x1, 0x36f98, 0x36fa0, 0x9), at 0xfe8d74c8 [87] g_main_context_iteration(0x0, 0xfe93ec00, 0x1, 0x36f98, 0x4ca3, 0xbfec7884), at 0xfe8d76d8 [88] nsBaseAppShell::DoProcessNextNativeEvent(0xabce0, 0xfa4247a4, 0xfa47891c, 0x0, 0xabce0, 0x1), at 0xfa43d150 [89] nsBaseAppShell::OnProcessNextEvent(0xabce0, 0x37540, 0x1, 0x7d0, 0xfb212ce0, 0x0), at 0xfa43d2dc [90] nsThread::ProcessNextEvent(0x37540, 0x1, 0xffbfe3a4, 0x0, 0x0, 0x0), at 0xff048110 [91] NS_ProcessNextEvent_P(0x37540, 0x1, 0x0, 0x80000000, 0xff048088, 0xff0bd5f0), at 0xfeff6620 [92] nsBaseAppShell::Run(0xabce0, 0x0, 0x1, 0x37540, 0x0, 0x0), at 0xfa43d1a8 [93] nsAppStartup::Run(0xff230, 0xfa47891c, 0x1, 0xff0b9438, 0xff148844, 0x0), at 0xfa3557b4 [94] XRE_main(0xffbfe524, 0xffbfe564, 0xffbfe568, 0xffbfe6f4, 0xffbfe730, 0xffbfe734), at 0xff142948 Reproducible: Always Steps to Reproduce: 1. 2. 3.
I can not reproduce it on Solaris11: 1.Thunderbird version 2 beta 2 (20070411) 2.trunk :thunderbird-3.0a1.en-US.solaris11-i386 11/04/2007
Can not reproduce this bug on latest trunk build. Works for me. Reporter, feel free to reopen this bug if you can reproduce this bug on latest TB trunk build
Status: UNCONFIRMED → RESOLVED
Closed: 18 years ago
Resolution: --- → WORKSFORME
what version of pango do you have?
Severity: normal → critical
Component: Mail Window Front End → GFX: Gtk
Keywords: crash
Product: Thunderbird → Core
Summary: Segfault scrolling in message list → Segfault scrolling in message list [@ find_attribute]
The pango version is : 1.18.3 pango_module_version=1.6.0
Product: Core → Core Graveyard
Crash Signature: [@ find_attribute]
You need to log in before you can comment on or make changes to this bug.