391252 - crash [@ ClusterIterator::ClusterIterator(nsTextFrame*, int, int)]

Status: RESOLVED WORKSFORME

(Thunderbird :: Message Compose Window, defect)

Description

[Wayne Mery (:wsmwk)]

Attachment: corrupt thread pane

trunk version 3.0a1pre (2007080605). version 3.0a1pre (2007072305) is clean for me. I didn't test other builds in between or from today.  

Crash during compose iirc.  Perhaps another symptom of bug 385270? 

After this crash I had crashes on the next 4 startups - can't tell if related or not - all with top of stack 
nsMsgLocalMailFolder::WriteStartOfNewMessage()
http://crash-stats.mozilla.com/report/index/743730ba-44c9-11dc-b445-001a4bd43ef6?date=2007-08-07-09

Don't have a regression range for this problem. Perhaps bug 62033?

In addition, some local folders are messed up in the thread pane. The last several entries in Folder 1 shows only date column and rebuild index did not help (see attachment corrupt.png). Folder 2 nothing displays and I got "Unable to the open folder ... in use by some other operation" (inuse.png).  Restarted thunderbird a 5th time and folder 2 comes up, but has the same problem as folder 1, i.e. some items in thread pane are missing/messed up.  Examined the end of folder 1 and folder 1.msf - it looks like .msf folder has extra entries that are corrupted 

The original crash ...

http://crash-stats.mozilla.com/report/index/6360bd57-44c9-11dc-b7be-001a4bd43ef6?date=2007-08-07-09
UUID	6360bd57-44c9-11dc-b7be-001a4bd43ef6
Time	2007-08-07 02:34:26.070000-07:00
Build ID	2007080605
OS	Windows NT
OS Version	5.1.2600 Service Pack 2
CPU	x86
CPU Info	GenuineIntel family 15 model 2 stepping 9
Crash Reason	EXCEPTION_ACCESS_VIOLATION
Crash Address	0x604ae000
Stack Traces
Stack of Crashing Thread
frame 	signature 	source
0 	ClusterIterator::ClusterIterator(nsTextFrame*, int, int) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\layout\generic\nstextframethebes.cpp:4799
1 	nsTextFrame::PeekOffsetWord(int, int, int, int*, int*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\layout\generic\nstextframethebes.cpp:4815
2 	nsIFrame::PeekOffset(nsPeekOffsetStruct*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\layout\generic\nsframe.cpp:4836
3 	nsFrameSelection::MoveCaret(unsigned int, int, nsSelectionAmount) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\layout\generic\nsselection.cpp:1350
4 	nsFrameSelection::WordMove(int, int) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\layout\generic\nsselection.cpp:2764
5 	PresShell::WordMove(int, int) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\layout\base\nspresshell.cpp:2678
6 	nsSelectionMoveCommands::DoCommand(char const*, nsISupports*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\editor\libeditor\base\nseditorcommands.cpp:679
7 	nsControllerCommandTable::DoCommand(char const*, nsISupports*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\embedding\components\commandhandler\src\nscontrollercommandtable.cpp:191
8 	nsBaseCommandController::DoCommand(char const*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\embedding\components\commandhandler\src\nsbasecommandcontroller.cpp:169
9 	nsXBLPrototypeHandler::ExecuteHandler(nsPIDOMEventTarget*, nsIDOMEvent*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\content\xbl\src\nsxblprototypehandler.cpp:359
10 	nsXBLWindowKeyHandler::WalkHandlersInternal(nsIDOMEvent*, nsIAtom*, nsXBLPrototypeHandler*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\content\xbl\src\nsxblwindowkeyhandler.cpp:548
11 	nsXBLWindowKeyHandler::WalkHandlers(nsIDOMEvent*, nsIAtom*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\content\xbl\src\nsxblwindowkeyhandler.cpp:346
12 	nsXBLWindowKeyHandler::KeyPress(nsIDOMEvent*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\content\xbl\src\nsxblwindowkeyhandler.cpp:403
13 	nsEventListenerManager::HandleEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, nsISupports*, unsigned int, nsEventStatus*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\content\events\src\nseventlistenermanager.cpp:1207
14 	nsEventTargetChainItem::HandleEvent(nsEventChainPostVisitor&, unsigned int) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\content\events\src\nseventdispatcher.cpp:201
15 	nsEventTargetChainItem::HandleEventTargetChain(nsEventChainPostVisitor&, unsigned int, nsDispatchingCallback*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\content\events\src\nseventdispatcher.cpp:281
16 	nsEventTargetChainItem::HandleEventTargetChain(nsEventChainPostVisitor&, unsigned int, nsDispatchingCallback*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\content\events\src\nseventdispatcher.cpp:310
17 	nsEventDispatcher::Dispatch(nsISupports*, nsPresContext*, nsEvent*, nsIDOMEvent*, nsEventStatus*, nsDispatchingCallback*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\content\events\src\nseventdispatcher.cpp:473
18 	PresShell::HandleEventInternal(nsEvent*, nsIView*, nsEventStatus*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\layout\base\nspresshell.cpp:5731
19 	PresShell::HandleEvent(nsIView*, nsGUIEvent*, nsEventStatus*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\layout\base\nspresshell.cpp:5532
20 	nsViewManager::HandleEvent(nsView*, nsPoint, nsGUIEvent*, int) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\view\src\nsviewmanager.cpp:1292
21 	nsViewManager::DispatchEvent(nsGUIEvent*, nsEventStatus*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\view\src\nsviewmanager.cpp:1248
22 	HandleEvent 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\view\src\nsview.cpp:168
23 	nsWindow::DispatchEvent(nsGUIEvent*, nsEventStatus&) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\widget\src\windows\nswindow.cpp:1106
24 	nsWindow::DispatchWindowEvent(nsGUIEvent*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\widget\src\windows\nswindow.cpp:1126
25 	nsWindow::DispatchKeyEvent(unsigned int, unsigned short, unsigned int, long, unsigned int) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\widget\src\windows\nswindow.cpp:3434
26 	nsWindow::OnKeyDown(unsigned int, unsigned int, long) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\widget\src\windows\nswindow.cpp:3653
27 	nsWindow::ProcessMessage(unsigned int, unsigned int, long, long*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\widget\src\windows\nswindow.cpp:4584
28 	nsWindow::WindowProc(HWND__*, unsigned int, unsigned int, long) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\widget\src\windows\nswindow.cpp:1319
29 	InternalCallWinProc 	
30 	UserCallWinProcCheckWow 	
31 	DispatchMessageWorker 	
32 	DispatchMessageW 	
33 	nsAppShell::ProcessNextNativeEvent(int) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\widget\src\windows\nsappshell.cpp:148
34 	nsBaseAppShell::DoProcessNextNativeEvent(int) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\widget\src\xpwidgets\nsbaseappshell.cpp:137
35 	nsBaseAppShell::OnProcessNextEvent(nsIThreadInternal*, int, unsigned int) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\widget\src\xpwidgets\nsbaseappshell.cpp:247
36 	nsThread::ProcessNextEvent(int, int*) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\xpcom\threads\nsthread.cpp:477
37 	NS_ProcessNextEvent_P(nsIThread*, int) 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\obj-tb-trunk\xpcom\build\nsthreadutils.cpp:227
38 	nsBaseAppShell::Run() 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\widget\src\xpwidgets\nsbaseappshell.cpp:154
39 	nsAppStartup::Run() 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\toolkit\components\startup\src\nsappstartup.cpp:170
40 	XRE_main 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\toolkit\xre\nsapprunner.cpp:3057
41 	main 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\mail\app\nsmailapp.cpp:87
42 	WinMain 	d:\builds\tinderbox\tb-trunk\winnt_5.2_depend\mozilla\mail\app\nsmailapp.cpp:98
43 	__tmainCRTStartup 	f:\rtm\vctools\crt_bld\self_x86\crt\src\crtexe.c:578
44 	BaseProcessStart

Comment 1

[Wayne Mery (:wsmwk)]

Attachment: folder "in use by some other operation"

Comment 2

[Wayne Mery (:wsmwk)]

breakpad lists thunderbird crashes going back to 2007-07-24. http://crash-stats.mozilla.com/report/index/c64aee9c-3a3e-11dc-a2ad-001a4bd43ef6

ClusterIterator crashers also for seamonkey and firefox. Seamonkey stack matches http://crash-stats.mozilla.com/report/index/27b40af3-3fb9-11dc-be2c-001a4bd43ed6  

The one firefox stack I checked does not match up. 

Comment 3

[[e-mail]]

I don't know why you CC'd me on this bug. None of these issues (which should have all been filed separately) seem to relate to any code I know.

Comment 4

[Wayne Mery (:wsmwk)]

earliest build currently listed on breakpad is 2007073000

my crash today
- composing mail
- build 2007082004
- bp-a1bd3c9c-5265-11dc-b4c9-001a4bd43ed6 - appears to match stack of comment 0


(In reply to comment #0)
> Crash during compose iirc.  Perhaps another symptom of bug 385270? 

patched checked in on that bug 2007-08-15 
so ?

Comment 5

[Martijn Wargers (dead)]

Based on the stack I see in this bug, I think this is basically bug 389437.

Comment 6

[Wayne Mery (:wsmwk)]

quite plausible. If I had regression range (which I don't plan to do) I'd say with more certainty. Time will tell. 

This happens during compose quite frequently.

Comment 7

[Wayne Mery (:wsmwk)]

Martijn in comment #5
> Based on the stack I see in this bug, I think this is basically bug 389437.

Didn't cure me. I just crashed in thunderbird version 3.0a1pre (2007112004) moving a message from an inbox on one imap account to another.  But Bug 389437 checked in 2007-09-10.  I haven't been running trunk thunderbird for a couple months, so I can't say anything about frequency of crashing

bp-e69b731c-5682-11dc-90cd-001a4bd46e84 - same stack as comment 0 (crash during compose).  no other matching thunderbird crashes on crash-stats.  (firefox + seamonkey crashes, but all builds are prior to 389437 checkin)

Enabled Extensions: [7]
    * mozPod 0.2a1
    * MR Tech Local Install 5.3.2.1
    * Nightly Tester Tools 1.3b3
    * Palm Sync 1.8.1.5pre
    * ProfileSwitcher 0.1.3
    * ThreadBubble 0.6
    * Tools->About:Config 1.0
Disabled Extensions: [7]
    * Addressbooks Synchronizer 0.7.0
    * Clippings 2.6
    * functions for keyconfig (Thunderbird) 1.0.4
    * keyconfig 20060828.1
    * nntpthreads 0.1.0
    * Remove Duplicate Messages 0.1.02
    * Show InOut 0.4.3

Comment 8

[Wayne Mery (:wsmwk)]

oddly, hasn't happened since, nothing listed on crash-stats from 3 past month, and no likely dupes in bz

Comment 9

[Wayne Mery (:wsmwk)]

haven't seen this again.  I don't see that I tried safe mode, so perhaps ThreadBubble extension might have contributed to the crash
=> WSM