438700 - "ASSERTION: nsVoidArray::FastElementAt: index out of range: '0 <= aIndex && aIndex < Count()'" when quitting Thunderbird

Status: RESOLVED WORKSFORME

(MailNews Core :: Networking, defect)

Description

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Attachment: backtrace

###!!! ASSERTION: nsVoidArray::FastElementAt: index out of range: '0 <= aIndex && aIndex < Count()', file ../../dist/include/xpcom/nsVoidArray.h, line 72

I hit this while quitting Thunderbird. Latest compiled debug builds on Leopard.

Comment 1

[Joshua Cranmer [:jcranmer]]

From the code, it looks like it's a threading issue: the connection is being removed in the middle of connection shutdown.

It's a hard one to create a reliable test, but I think I can open a few connections to a fakeserver and then force the others to timeout as I close the first one.

Fix should be simple: protect the array by having a mIsClosing attribute.

Comment 2

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Moving to Core -> Networking. I can trigger this assertion with IMAP files on the stack instead of news.

Comment 3

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Attachment: both normal and full backtraces with IMAP on stack

Comment 4

[Nomis101]

nsVoidArray.h does not exist anymore. It was removed here.
http://hg.mozilla.org/mozilla-central/diff/e9f75be97c2d/xpcom/glue/nsVoidArray.h

(Not sure if this is "Fixed" or "Wontfix", change if you thing different)

Comment 5

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Thanks for looking at this! I'd say WORKSFORME though, since the assertion no longer shows up presumably.