401496 - Thunderbird crashes upon auto complete of alias after importing Address Book [@ nsAddrDatabase::GetIntColumn]

Status: RESOLVED WORKSFORME

(Thunderbird :: Address Book, defect)

Description

[Wes Barris]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.8) Gecko/20071008 Firefox/2.0.0.8
Build Identifier: Thunderbird 2.0.0.6

After deleting and then importing a new (ldif) address book, Thunderbird crashes
during auto complete of an email alias of the first message composed.  When
Thunderbird is restarted, it works properly.

Reproducible: Always

Steps to Reproduce:
1. Delete address book
2. Import ldif address book
3. Close address book window
4. Click on "Write" to open a new compose window
5. Begin typing an email alias
6. Thunderbird crashes with the message "thunderbird.exe has encountered a problem and needs to close..."

Actual Results:  
Thunderbird crashed.

Expected Results:  
I would expect to successfully compose a new message.

Comment 1

[Jeremy Baron]

I see you filled in the STR (steps to reproduce) but just to be safe I want to double check: you were able to reproduce this multiple times?
Does this only happen with one ldif file or with any one you import?
Do you have an ldif that this happens with that you'd be willing to submit as an attachment to this bug or to share privately with a developer?
Please install Talkback, crash a few times with it, submit the crash reports, and comment here with the IDs.  (2-3 reports should be fine)
Instructions: http://kb.mozillazine.org/Talkback

Comment 2

[Wes Barris]

Attachment: Sample ldif file that I used for test case crashes.

Comment 3

[Wes Barris]

This happens every time on every computer (1 work computer and 2 home computers) I have tried with every version of Thunderbird since I started using Thunderbird a couple years ago.  I only have one ldif file that I modify and load into mail clients.  I have crashed Thunderbird several times just now and used the Quality
Feedback Agent to send several reports.  Here are their ids:

TB37469487Q
TB37469455H
TB37469435M

and one from a while back:

TB36574165G

Comment 4

[timeless]

Incident ID: 37469487
Stack Signature	nsAddrDatabase::GetIntColumn 0aaeb6f7
Product ID	Thunderbird2
Build ID	2007072817
Trigger Time	2007-10-28 18:19:34.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	thunderbird.exe + (00496e78)
URL visited	
User Comments	I was composing a message after reloading my ldif address book.
Since Last Crash	44 sec
Total Uptime	1246276 sec
Trigger Reason	Access violation
Source File, Line No.	e:/builds/tinderbox/Tb-Mozilla1.8-Release/WINNT_5.0_Depend/mozilla/mailnews/addrbook/src/nsAddrDatabase.cpp, line 2647
Stack Trace 	
nsAddrDatabase::GetIntColumn  [mozilla/mailnews/addrbook/src/nsAddrDatabase.cpp, line 2647]
nsAddrDatabase::GetListAddressTotal  [mozilla/mailnews/addrbook/src/nsAddrDatabase.cpp, line 1877]
nsListAddressEnumerator::nsListAddressEnumerator  [mozilla/mailnews/addrbook/src/nsAddrDatabase.cpp, line 3310]
nsAbMDBDirectory::GetChildCards  [mozilla/mailnews/addrbook/src/nsAbMDBDirectory.cpp, line 429]
nsAbAutoCompleteSession::SearchCards  [mozilla/mailnews/addrbook/src/nsAbAutoCompleteSession.cpp, line 347]
nsAbAutoCompleteSession::SearchDirectory  [mozilla/mailnews/addrbook/src/nsAbAutoCompleteSession.cpp, line 548]
nsAbAutoCompleteSession::SearchDirectory  [mozilla/mailnews/addrbook/src/nsAbAutoCompleteSession.cpp, line 568]
nsAbAutoCompleteSession::SearchDirectory  [mozilla/mailnews/addrbook/src/nsAbAutoCompleteSession.cpp, line 568]
nsAbAutoCompleteSession::OnStartLookup  [mozilla/mailnews/addrbook/src/nsAbAutoCompleteSession.cpp, line 693]
XPTC_InvokeByIndex  [mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp, line 102]
XPCWrappedNative::CallMethod  [mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 2169]
XPC_WN_CallMethod  [mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1455]
js_Invoke  [mozilla/js/src/jsinterp.c, line 1375]
js_Interpret  [mozilla/js/src/jsinterp.c, line 3946]
js_Invoke  [mozilla/js/src/jsinterp.c, line 1394]
js_InternalInvoke  [mozilla/js/src/jsinterp.c, line 1469]
JS_CallFunctionValue  [mozilla/js/src/jsapi.c, line 4351]
nsJSContext::CallEventHandler  [mozilla/dom/src/base/nsJSEnvironment.cpp, line 1493]
nsGlobalWindow::RunTimeout  [mozilla/dom/src/base/nsGlobalWindow.cpp, line 6807]
nsGlobalWindow::TimerCallback  [mozilla/dom/src/base/nsGlobalWindow.cpp, line 7179]
nsAppStartup::Run  [mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 152]
main  [mozilla/mail/app/nsMailApp.cpp, line 62]
kernel32.dll + 0x16fd7 (0x7c816fd7)

I see at least one bug here.

Comment 5

[timeless]

i suspect the root problem was fixed by bug 203927.

can you try a trunk nightly? this is probably fixed.

http://ftp.mozilla.org/pub/mozilla.org/thunderbird/nightly/latest-trunk/

Comment 6

[Wes Barris]

I downloaded and installed the latest trunk but every time I click on "Write" thunderbird crashes so I can't even get close to testing this bug.

Comment 7

[Mark Banner (:standard8)]

(In reply to comment #6)
> I downloaded and installed the latest trunk but every time I click on "Write"
> thunderbird crashes so I can't even get close to testing this bug.
> 
That's probably due to bug 401288.

Comment 8

[Wes Barris]

I downloaded and installed the latest trunk again (a few days later) and thunderbird does not crash when following the same sequence.  So, it looks like the bug has been fixed in version 3.

Comment 9

[Wayne Mery (:wsmwk)]

Mark, so the Wes' original report is bug 401288?

Comment 10

[Wayne Mery (:wsmwk)]

testcase doesn't crash for me version 2.0.0.13pre (20080227)

however, there are crashes on talkback from builds 2008042104 (TB46156459) and 2008021305 (TB43902999) 

so I don't think this problem is gone in version 2.  Confirming

Comment 11

[Wayne Mery (:wsmwk)]

I suspect this is gone in version 3. so closing WFM against trunk. Perhaps gone because of toolkit autocomplete.

The only crash we have in v3 with something close to this crash sig is nsAddrDatabase::GetIntColumn(nsIMdbRow*, unsigned int, unsigned int*, unsigned int) and the stack is nothing close to this bug. For example bp-3fad9644-401b-4b99-a7c0-c553c2100324