383477 - sliding new mail notification shows "Re: null" instead of "Re: "

Status: RESOLVED DUPLICATE of bug 379583

(Thunderbird :: Mail Window Front End, defect)

Description

[Robert Stupp]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1.4) Gecko/20070515 Firefox/2.0.0.4
Build Identifier: Version 2.0.0.0 (20070326)

If a new mail with the subject "Re: " arrives, the new mail notification box shows "Re: null" as the message subject.

It seems, that the text after the "Re: " is evaluated in some way and the string "null" is appended by the new mail notification box.

Please check, if code can be executed using this issue.

Reproducible: Always

Steps to Reproduce:
1. Send a mail with subject "Re:" to yourself.
2. Wait until the new mail notification slides in
3. Look at the subject ("Re: null") shown by the new mail notification
Actual Results:  
New mail notification shows "Re: null"

Expected Results:  
New mail notification shows "Re:"

I filed this issue because I can imagine (I do not know!) that malicious code can be executed.
Because of that fear, I set the severity to "major".

Comment 1

[Marcia Knous [:marcia]]

Robert: I am using the Tbird 2.0.0.4 candidate on Vista (version 2.0.0.4 (20070604), and I can't repro this bug. Can you please try it on this build, you can get it here: ftp://ftp.mozilla.org/pub/mozilla.org/thunderbird/nightly/2.0.0.4-candidates/rc1

Comment 2

[Robert Stupp]

Hi Marcia,
it's still in 2.0.0.4rc1. See the screenshots I made. And it does not only show "Re: null" in the notification box - it shows "Re: null" using the mouse-over tooltip on the INBOX.

screenshot#1: mail send
screenshot#2: mouse-over on INBOX with new message in thunderbird 2.0.0.0 (de)
screenshot#3: mouse-over on INBOX with new message in thunderbird 2.0.0.4rc1 (de)

One additional information: I'm using the german version of thunderbird on WinXP. I did not try Vista (but do not think, that there's a difference)

Comment 3

[Robert Stupp]

Attachment: screenshot#1 - send mail to myself

Comment 4

[Robert Stupp]

Attachment: screenshot#2 - mail mouse-over-INBOX-tooltip (2.0.0.0/de)

Comment 5

[Robert Stupp]

Attachment: screenshot#3 - mouse-over-INBOX-tooltip (2.0.0.4rc1 / de)

Comment 6

[Robert Stupp]

Attachment: Same email in inbox

Comment 7

[Robert Stupp]

Hi!

Any progress in the evaluation?

Regards,
Robert

Comment 8

[Daniel Veditz [:dveditz]]

Not a security issue,