445446 - Accessing "Search Folders" on IMAP account causes crash [@ nsMsgQuickSearchDBView::OnSearchDone]

Status: RESOLVED DUPLICATE of bug 369918

(MailNews Core :: Search, defect)

Description

[Patrick]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.15) Gecko/20080702 Fedora/2.0.0.15-1.fc8 Firefox/2.0.0.15
Build Identifier: Shredder 3.0a2pre 2008-07-15/3, also Thunderbird 2.0.0.14

I tried with a new profile, with the current nightly build (Shredder 3.0a2pre 2008-07-15/3) and with Thunderbird 2.0.0.14, and it's always the same:

Thunderbird crashes after clicking on a Search Folder (example criteria: From header contains "test"). This seems to happen after the search results are being returned from the server (according to the mail list that gets populated, and to the debug log that shows that message headers are being fetched from the server).

Reproducible: Always

Steps to Reproduce:
1. Create a new Search Folder in an IMAP account
2. Click on the Search Folder

Actual Results:  
Thunderbird shows the search result in the message list pane and then immediately crashes.

Expected Results:  
Thunderbird should show the search result in the message list pane and not crash.

Searching in the search dialog works perfectly fine, no crashes here, and results are returned as desired.

dovecot is being used as IMAP server, if that makes any difference

Comment 1

[WADA:World Anti-bad-Duping Agency]

Crash is re-produced, with Name=Thunderbird,Version=3.0a2pre,BuildID=2008071003 on MS Win-XP SP3, with Gmail IMAP.

>(virtualFoldrs.dat content. For search folder under Gmail IMAP folder only.) 
> uri=imap://[e-mail]/Label-A/PQ
> scope=imap://[e-mail]/Label-A/X2
> terms=AND (subject,contains,test)
> searchOnline=true
> uri=imap://[e-mail]/Label-A/AB
> scope=imap://[e-mail]/Label-A/X1
> terms=OR (subject,contains,test)
> searchOnline=true

(Steps to produce the Crash)
0. Create saved search folders under Gmail IMAP folder named Label-A
1. Restart Tb trunk
   => search folder of AB and PQ is not displayed under Label-A folder
2. Collapse Label-A folder, then expand Label-A folder
   => search folder of AB and PQ appears under Label-A folder
3. Click Label-A/AB folder or Label-A/PQ folder => Crash

(Crash ID's)
 Crash ID: bp-d5d85859-5326-11dd-a2e7-001cc4e2bf68
 Crash ID: bp-e8079d2e-5326-11dd-8a7d-001cc4e2bf68

Comment 2

[timeless]

Signature	nsMsgQuickSearchDBView::OnSearchDone(unsigned int)
UUID	d5d85859-5326-11dd-a2e7-001cc4e2bf68
Time	2008-07-16 04:03:27-07:00
Uptime	55
Product	Thunderbird
Version	3.0a2pre
Build ID	2008071003
OS	Windows NT
OS Version	5.1.2600 Service Pack 3
CPU	x86
CPU Info	GenuineIntel family 6 model 15 stepping 6
Crash Reason	EXCEPTION_ACCESS_VIOLATION
Crash Address	0x601a1000
Comments	
Crashing Thread
Frame 	Module 	Signature 	Source
0 	thunderbird.exe 	nsMsgQuickSearchDBView::OnSearchDone 	mozilla/mailnews/base/src/nsMsgQuickSearchDBView.cpp:284
1 	thunderbird.exe 	nsMsgSearchSession::NotifyListenersDone 	mozilla/mailnews/base/search/src/nsMsgSearchSession.cpp:597
2 	thunderbird.exe 	nsMsgSearchSession::TimerCallback 	mozilla/mailnews/base/search/src/nsMsgSearchSession.cpp:537
3 	xpcom_core.dll 	nsTimerImpl::Fire 	mozilla/xpcom/threads/nsTimerImpl.cpp:400

Comment 3

[Magnus Melin [:mkmelin]]

Does this still crash with the latest nightlies now after bug 369918 (earlier this week)?

Comment 4

[WADA:World Anti-bad-Duping Agency]

Crash didn't occur with Name=Thunderbird,Version=3.0a2pre,BuildID=2008071603, with same test case as Comment #1.
Note: "collapse/re-expand of parent folder" was still required to display saved serach folders.

Comment 5

[Patrick]

(In reply to comment #4)
> Crash didn't occur with Name=Thunderbird,Version=3.0a2pre,BuildID=2008071603,

I can confirm that. The profile I used in my original bug report also works without crash now.

Is there a chance that the fix will be backported to 2.0.0.x?

Comment 6

[Magnus Melin [:mkmelin]]

Duping this then...

Comment 7

[Magnus Melin [:mkmelin]]

No luck at reproducing on linux even with the patch backed out btw.