382725 - Crash in IMAP code on POP3 account [@ nsImapProtocol::ProcessStoreFlags]

Status: RESOLVED WORKSFORME

(MailNews Core :: Backend, defect)

Description

[Howard Chu]

OK, this makes no sense to me at all. I have no IMAP accounts in my profile, but the crash happened here:

Program received signal SIGSEGV, Segmentation fault.
nsImapProtocol::ProcessStoreFlags (this=0xa16e370, messageIdsString=@0xd0f5058, idsAreUids=219107416, flags=0,
    addFlags=170011680) at /home/software/mozilla/mailnews/imap/src/nsImapProtocol.cpp:7434
7434        flagString.SetCharAt(')',flagString.Length() - 1);
Current language:  auto; currently c++
(gdb) l
7429          flagString.Append("$Label1 $Label2 $Label3 $Label4 $Label5 ");
7430      }
7431      if (flagString.Length() > 8) // if more than "+Flags ("
7432      {
7433      // replace the final space with ')'
7434        flagString.SetCharAt(')',flagString.Length() - 1);
7435
7436        Store(messageIdsString, flagString.get(), idsAreUids);
7437
7438        // looks like we're going to have to turn off any potential labels on these msgs.
(gdb) p flagString
$1 = {<nsACString_internal> = {<nsCSubstring_base> = {<No data fields>}, mData = 0xbfdb334c "\031\004",
    mLength = 3218813736, mFlags = 219107416}, <No data fields>}
(gdb) l
7439        if (addFlags && (userFlags & (kImapMsgSupportUserFlag |
7440          kImapMsgLabelFlags)) && (flags & kImapMsgLabelFlags))
7441        {
7442          flagString = "-Flags (";
7443          PRUint32 labelValue = (flags & kImapMsgLabelFlags) >> 9;
7444          for (PRUint32 i = 1; i <= 5; i++)
7445          {
7446             if (labelValue != i)
7447             {
7448                flagString.Append("$Label");
(gdb) bt
#0  nsImapProtocol::ProcessStoreFlags (this=0xa16e370, messageIdsString=@0xd0f5058, idsAreUids=219107416, flags=0,
    addFlags=170011680) at /home/software/mozilla/mailnews/imap/src/nsImapProtocol.cpp:7434
#1  0xb7061c7b in nsImapProtocol::Search (this=0xa16e370, searchCriteria=0xbda6a68 "Ha\031\006", useUID=170011680,
    notifyHit=-1224358648) at ../../../dist/include/string/nsTSubstring.h:401
#2  0xb7055d94 in nsImapMailFolder::DownloadMessagesForOffline (this=0xa222c20, messages=0xbda6a68, window=0xbfdb33ac)
    at ../../../dist/include/string/nsTString.h:428
#3  0xb7051ede in nsImapMailFolder::FetchMsgPreviewText (this=0xa222c20, aKeysToFetch=0xbda6a68, aNumKeys=0,
    aLocalOnly=0, aUrlListener=0x1, aAsyncResults=0xb7176164) at ../../../dist/include/msgbaseutil/nsMsgKeyArray.h:53
#4  0xb6ff438e in nsMsgAttachmentHandler::UrlExit (this=0x9986968, status=207169208, aMsg=0xbfdb3494)
    at /home/software/mozilla/mailnews/compose/src/nsMsgAttachmentHandler.cpp:1272
#5  0xb6fe3d67 in nsMsgSendPart::Write (this=0xc025de8)
    at /home/software/mozilla/mailnews/compose/src/nsMsgSendPart.cpp:796
#6  0xb6fdd761 in nsMsgComposeAndSend::ProcessMultipartRelated (this=0xbf928c0, aMailboxCount=0xbfc0298,
    aNewsCount=0x2) at ../../../dist/include/xpcom/nsCOMPtr.h:542
#7  0xb6fddaef in nsMsgComposeAndSend::HackAttachments (this=0xbf928c0, attachments=0xbf3f260,
    preloaded_attachments=0xf40) at /home/software/mozilla/mailnews/compose/src/nsMsgSend.cpp:2577
#8  0xb6fe1fbb in nsMsgComposeAndSend::GatherMimeAttachments (this=0xbf928c0)
    at /home/software/mozilla/mailnews/compose/src/nsMsgSend.cpp:1056
#9  0xb6f5b3f2 in nsSubscribeDataSource::GetTargets (this=0xbf928c0, source=0xbbbe938, property=0xbfdb35e8,
    tv=200536672, targets=0x114) at /home/software/mozilla/mailnews/base/src/nsSubscribeDataSource.cpp:338
#10 0xb6cf9f90 in nsMIMEHeaderParamImpl::DecodeRFC2047Header ()
   from /home/software/mozob2/dist/bin/components/libnecko.so
#11 0x0bf928c0 in ?? ()
#12 0x0bbbe938 in ?? ()
#13 0x0bd1ffa4 in ?? ()
#14 0x0bf3f260 in ?? ()
#15 0x00000114 in ?? ()
#16 0x00000f40 in ?? ()
#17 0xbfdb3638 in ?? ()
---Type <return> to continue, or q <return> to quit---
#18 0x00000001 in ?? ()
#19 0x080777c0 in ?? ()
#20 0x0bbbe95c in ?? ()
#21 0x00000114 in ?? ()
#22 0x00000000 in ?? ()

Also, I wasn't composing any email at the time, so I don't see why MsgCompose is involved. I had just downloaded the headers for my POP3 account, deleted the Junk headers, and was left with a single non-junk header. I had selected it and used the Get Selected Messages command, and got a "Folder is currently being processed" dialog. The busy cursor showed up, and then I saw my "Total" messages counter spin up by a few thousand messages, and nothing else happened. I dismissed the dialog and tried again, and got the same result. I dismissed it one more time and tried again, and then it crashed with the above stack trace.

Build identifier: Mozilla/5.0 (X11; U; Linux i686; rv:1.9a5pre) Gecko/0000000000 SeaMonkey/2.0a1pre

This is with code from CVS yesterday.

Comment 1

[Howard Chu]

Haven't seen this in quite a long time.