375698 - Thunderbird crashes when trying to read a mail message.

Status: RESOLVED FIXED

(Thunderbird :: Mail Window Front End, defect)

Description

[Rich Burridge]

This is on Ubuntu Feisty with all the latest updated.
Thunderbird was built from trunk this morning.

See also Orca bug #423323
http://bugzilla.gnome.org/show_bug.cgi?id=423323

Orca is the default screen reader for the GNOME desktop.

Steps to reproduce:

1/ Start Orca.
2/ Start .../mozilla/dist/bin/thunderbird
3/ Attempt to read a message
4/ Watch it go kaboom!

I attached the debugger as suggested. Here's the stack trace:

(gdb) where
#0  0xffffe410 in __kernel_vsyscall ()
#1  0xb738be66 in nanosleep () from /lib/tls/i686/cmov/libc.so.6
#2  0xb738bc8f in sleep () from /lib/tls/i686/cmov/libc.so.6
#3  0xb7e5764d in ah_crap_handler (signum=6) at nsSigHandlers.cpp:134
#4  0xb7e6d74c in nsProfileLock::FatalSignalHandler (signo=6)
    at nsProfileLock.cpp:210
#5  <signal handler called>
#6  0xffffe410 in __kernel_vsyscall ()
#7  0xb7325df0 in raise () from /lib/tls/i686/cmov/libc.so.6
#8  0xb7327641 in abort () from /lib/tls/i686/cmov/libc.so.6
#9  0xb731f43b in __assert_fail () from /lib/tls/i686/cmov/libc.so.6
#10 0xb6a1b53a in _cairo_ft_unscaled_font_set_scale (unscaled=0x93867c8, 
    scale=0x901e810) at cairo-ft-font.c:692
#11 0xb6a1cad9 in _cairo_ft_scaled_font_create (unscaled=0x93867c8, 
    font_face=0x8ffb920, font_matrix=0xbfceb848, ctm=0xbfceb8e0, 
    options=0x9004870, ft_options=
      {base = {antialias = CAIRO_ANTIALIAS_NONE, subpixel_order = CAIRO_SUBPIXEL_ORDER_DEFAULT, hint_style = CAIRO_HINT_STYLE_DEFAULT, hint_metrics = CAIRO_HINT_METRICS_DEFAULT}, load_flags = 0, extra_flags = CAIRO_FT_OPTIONS_HINT_METRICS}) at cairo-ft-font.c:1455
#12 0xb6a1dbe3 in _cairo_ft_font_face_scaled_font_create (
    abstract_face=0x8ffb920, font_matrix=0xbfceb848, ctm=0xbfceb8e0, 
    options=0x9004870, scaled_font=0xbfceb7f8) at cairo-ft-font.c:2122
---Type <return> to continue, or q <return> to quit---
#13 0xb69f7947 in *INT__moz_cairo_scaled_font_create (font_face=0x8ffb920, 
    font_matrix=0xbfceb848, ctm=0xbfceb8e0, options=0x9004870)
    at cairo-scaled-font.c:476
#14 0xb69d398e in CreateScaledFont (aCR=0x9061820, aCTM=0xbfceb8e0, 
    aPangoFont=0x8f80758) at gfxPangoFonts.cpp:869
#15 0xb69d466e in gfxPangoFont::SetupCairoFont (this=0x8df4aa8, aCR=0x9061820)
    at gfxPangoFonts.cpp:895
#16 0xb69c84dd in gfxFont::Draw (this=0x8df4aa8, aTextRun=0x8d8f860, aStart=0, 
    aEnd=77, aContext=0x90ce988, aDrawToPath=0, aPt=0xbfced758, aSpacing=0x0)
    at gfxFont.cpp:163
#17 0xb69c4bdb in gfxTextRun::DrawGlyphs (this=0x8d8f860, aFont=0x8df4aa8, 
    aContext=0x90ce988, aDrawToPath=0, aPt=0xbfced758, aStart=0, aEnd=77, 
    aProvider=0xbfced808) at gfxFont.cpp:763
#18 0xb69c6804 in gfxTextRun::Draw (this=0x8d8f860, aContext=0x90ce988, 
    aPt=@0xbfced7f0, aStart=0, aLength=77, aDirtyRect=0x0, 
    aProvider=0xbfced808, aAdvanceWidth=0x0) at gfxFont.cpp:887
#19 0xb6a7e6c8 in nsThebesFontMetrics::DrawString (this=0x9025fb8, 
    aString=0xafe33230 "If you have any questions why you received this email, please see the text at\nthe end of this email. Replies to this email are NOT read, please see the text\nat the end of this email. You can add comme"..., 
    aLength=77, aX=480, aY=1080, aSpacing=0x0, aContext=0x8d8fbf8)
    at nsThebesFontMetrics.cpp:431
#20 0xb6a787ca in nsThebesRenderingContext::DrawStringInternal (
---Type <return> to continue, or q <return> to quit---
    this=0x8d8fbf8, 
    aString=0xafe33230 "If you have any questions why you received this email, please see the text at\nthe end of this email. Replies to this email are NOT read, please see the text\nat the end of this email. You can add comme"..., 
    aLength=77, aX=480, aY=1080, aSpacing=0x0)
    at nsThebesRenderingContext.cpp:1182
#21 0xb6a82fd3 in nsRenderingContextImpl::DrawString (this=0x8d8fbfc, 
    aString=0xafe33230 "If you have any questions why you received this email, please see the text at\nthe end of this email. Replies to this email are NOT read, please see the text\nat the end of this email. You can add comme"..., 
    aLength=77, aX=480, aY=1080, aSpacing=0x0)
    at nsRenderingContextImpl.cpp:788
#22 0xb6173aa9 in nsTextFrame::PaintAsciiText (this=0xafe2f0cc, 
    aPresContext=0x8d515e8, aRenderingContext=@0x8d8fbfc, 
    aStyleContext=0xafe34cf4, aTextStyle=@0xbfcede40, dx=480, dy=480)
    at nsTextFrame.cpp:3951
#23 0xb617818a in nsTextFrame::PaintText (this=0xafe2f0cc, 
    aRenderingContext=@0x8d8fbfc, aPt=@0xbfcedf5c) at nsTextFrame.cpp:2073
#24 0xb6178211 in nsDisplayText::Paint (this=0xafe972e8, aBuilder=0xbfcee054, 
    aCtx=0x8d8fbfc, aDirtyRect=@0xbfcedfd4) at nsTextFrame.cpp:2002
#25 0xb606736b in nsDisplayList::Paint (this=0x93ac330, aBuilder=0xbfcee054, 
    aCtx=0x8d8fbfc, aDirtyRect=@0xbfcedfd4) at nsDisplayList.cpp:299
#26 0xb6067609 in nsDisplayWrapList::Paint (this=0x93ac324, 
---Type <return> to continue, or q <return> to quit---
    aBuilder=0xbfcee054, aCtx=0x8d8fbfc, aDirtyRect=@0xbfcedfd4)
    at nsDisplayList.cpp:707
#27 0xb606853c in nsDisplayClip::Paint (this=0x93ac324, aBuilder=0xbfcee054, 
    aCtx=0x8d8fbfc, aDirtyRect=@0xbfcee17c) at nsDisplayList.cpp:939
#28 0xb606736b in nsDisplayList::Paint (this=0xbfcee0d0, aBuilder=0xbfcee054, 
    aCtx=0x8d8fbfc, aDirtyRect=@0xbfcee17c) at nsDisplayList.cpp:299
#29 0xb6091dbf in nsLayoutUtils::PaintFrame (aRenderingContext=0x8d8fbfc, 
    aFrame=0x938b948, aDirtyRegion=@0xbfcee15c, aBackground=4294967295)
    at nsLayoutUtils.cpp:817
#30 0xb60a31e9 in PresShell::Paint (this=0x9389e38, aView=0x9387790, 
    aRenderingContext=0x8d8fbfc, aDirtyRegion=@0xbfcee15c)
    at nsPresShell.cpp:5373
#31 0xb6534c79 in nsViewManager::RenderViews (this=0x9387728, 
    aView=0xafe28eb0, aRC=@0x8d8fbfc, aRegion=@0xbfcee218, aRCSurface=0x0)
    at nsViewManager.cpp:669
#32 0xb6535b33 in nsViewManager::Refresh (this=0x9387728, aView=0xafe28eb0, 
    aContext=0x8d8fbfc, aRegion=0x8736be8, aUpdateFlags=1)
    at nsViewManager.cpp:540
#33 0xb65361dd in nsViewManager::DispatchEvent (this=0x9387728, 
    aEvent=0xbfcee45c, aStatus=0xbfcee3ec) at nsViewManager.cpp:1226
#34 0xb652b46d in HandleEvent (aEvent=0xbfcee45c) at nsView.cpp:171
#35 0xb6897447 in nsCommonWidget::DispatchEvent (this=0xafe2f2a8, 
    aEvent=0xbfcee45c, aStatus=@0xbfcee554) at nsCommonWidget.cpp:220
---Type <return> to continue, or q <return> to quit---
#36 0xb688acbb in nsWindow::OnExposeEvent (this=0xafe2f2a8, aWidget=0x836ab98, 
    aEvent=0xbfceeb14) at nsWindow.cpp:1736
#37 0xb688b0d6 in expose_event_cb (widget=0x836ab98, event=0xbfceeb14)
    at nsWindow.cpp:4279
#38 0xb7a976b0 in _gtk_marshal_BOOLEAN__BOXED ()
   from /usr/lib/libgtk-x11-2.0.so.0
#39 0xb766462b in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#40 0xb7675103 in ?? () from /usr/lib/libgobject-2.0.so.0
#41 0x08236d80 in ?? ()
#42 0xbfcee740 in ?? ()
#43 0x00000002 in ?? ()
#44 0xbfcee81c in ?? ()
#45 0xbfcee72c in ?? ()
#46 0xb74227bc in ?? () from /lib/tls/i686/cmov/libc.so.6
#47 0xb0000010 in ?? ()
#48 0xb76939b8 in g_param_spec_types () from /usr/lib/libgobject-2.0.so.0
#49 0xb76939b8 in g_param_spec_types () from /usr/lib/libgobject-2.0.so.0
#50 0xbfcee724 in ?? ()
#51 0xb73638e1 in ?? () from /lib/tls/i686/cmov/libc.so.6
#52 0xbfcee754 in ?? ()
#53 0x0836ab98 in ?? ()
#54 0x00000000 in ?? ()
(gdb)

Comment 1

[Rich Burridge]

Using the thunderbird 3.0a1 nightly build from:
ftp://ftp.mozilla.org/pub/mozilla.org/thunderbird/nightly/latest-trunk
I can no longer reproduce this bug. Closing as FIXED.