Closed Bug 458977 Opened 16 years ago Closed 8 years ago

"invalid array index: 'i < Length()'" and crash when deleting messages

Categories

(MailNews Core :: Backend, defect)

Product:
MailNews Core
Component:
Backend
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
RESOLVED INCOMPLETE

People

(Reporter: BenB, Unassigned)

References

Details

(Keywords: crash) 

Reproduction:
1. Open my spam folder
2. Search for "enlarge" (selects 200 out of 1600 msgs)
3. Press "Del" key to delete them

Actual result:
Crash
After a restart, the msgs are still there

Assertion and stack:
###!!! ASSERTION: invalid array index: 'i < Length()', file ../../../../mozilla/dist/include/xpcom/nsTArray.h, line 317
[repeated >1000 times]

Program /usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/thunderbird-bin (pid = 26005) received signal 11.
Stack:
UNKNOWN 0xffffe400
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libmsgdb.so +0x0001033F]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libmsgimap.so +0x00049904]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libmsgimap.so +0x0004A3CB]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libmailnews.so +0x00058E31]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libmailnews.so +0x00059018]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libmailnews.so +0x00059BC3]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libmsgimap.so +0x0004C767]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libmailnews.so +0x000749B9]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libmailnews.so +0x0008A29F]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libmailnews.so +0x0007A5B5]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libmailnews.so +0x00077987]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libmailnews.so +0x0008A04B]
NS_InvokeByIndex_P+0x00000029 [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libxpcom_core.so +0x00097CD9]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libxpconnect.so +0x00049A0B]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libxpconnect.so +0x000540FE]
js_Invoke+0x000006A0 [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libmozjs.so +0x00071FA8]
UNKNOWN [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libmozjs.so +0x0004AE64]
js_Invoke+0x00000706 [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libmozjs.so +0x0007200E]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libxpconnect.so +0x00044BF2]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libxpconnect.so +0x0003E9C0]
UNKNOWN [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libxpcom_core.so +0x00098977]
NS_InvokeByIndex_P+0x00000029 [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libxpcom_core.so +0x00097CD9]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libxpconnect.so +0x00049A0B]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libxpconnect.so +0x000540FE]
js_Invoke+0x000006A0 [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libmozjs.so +0x00071FA8]
UNKNOWN [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libmozjs.so +0x0004AE64]
js_Invoke+0x00000706 [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libmozjs.so +0x0007200E]
UNKNOWN [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libmozjs.so +0x00072408]
JS_CallFunctionValue+0x00000065 [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libmozjs.so +0x0001277D]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x004ABF90]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x004FF3AF]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x00353054]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x0035357B]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x003784FE]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x003786C6]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x00378C36]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x005B10AB]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x003785BF]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x00378A84]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x00470FE8]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x004718B2]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x0046E637]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x0046E909]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x0046F6A7]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x0046F96C]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x00351689]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x00353554]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x003784FE]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x003787A8]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x00378823]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x00378C36]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x0010E832]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x0010F369]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x0049D50A]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x004A071F]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libgklayout.so +0x00499368]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libwidget_gtk2.so +0x0002DBF8]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libwidget_gtk2.so +0x00022580]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libwidget_gtk2.so +0x0002285D]
UNKNOWN [/usr/lib/libgtk-x11-2.0.so.0 +0x0014C8A4]
g_closure_invoke+0x00000129 [/usr/lib/libgobject-2.0.so.0 +0x00009919]
UNKNOWN [/usr/lib/libgobject-2.0.so.0 +0x0001C9ED]
g_signal_emit_valist+0x00000617 [/usr/lib/libgobject-2.0.so.0 +0x0001E367]
g_signal_emit+0x00000029 [/usr/lib/libgobject-2.0.so.0 +0x0001E989]
UNKNOWN [/usr/lib/libgtk-x11-2.0.so.0 +0x0026B197]
gtk_window_propagate_key_event+0x00000110 [/usr/lib/libgtk-x11-2.0.so.0 +0x0027C190]
UNKNOWN [/usr/lib/libgtk-x11-2.0.so.0 +0x0027F2FC]
UNKNOWN [/usr/lib/libgtk-x11-2.0.so.0 +0x0014C8A4]
UNKNOWN [/usr/lib/libgobject-2.0.so.0 +0x000081F9]
g_closure_invoke+0x00000129 [/usr/lib/libgobject-2.0.so.0 +0x00009919]
UNKNOWN [/usr/lib/libgobject-2.0.so.0 +0x0001CB82]
g_signal_emit_valist+0x00000617 [/usr/lib/libgobject-2.0.so.0 +0x0001E367]
g_signal_emit+0x00000029 [/usr/lib/libgobject-2.0.so.0 +0x0001E989]
UNKNOWN [/usr/lib/libgtk-x11-2.0.so.0 +0x0026B197]
gtk_propagate_event+0x000001AD [/usr/lib/libgtk-x11-2.0.so.0 +0x00145BED]
gtk_main_do_event+0x000002B8 [/usr/lib/libgtk-x11-2.0.so.0 +0x00146D68]
UNKNOWN [/usr/lib/libgdk-x11-2.0.so.0 +0x00043A2A]
g_main_context_dispatch+0x00000176 [/usr/lib/libglib-2.0.so.0 +0x0002F5D6]
UNKNOWN [/usr/lib/libglib-2.0.so.0 +0x00032972]
g_main_context_iteration+0x0000006E [/usr/lib/libglib-2.0.so.0 +0x00032F2E]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libwidget_gtk2.so +0x0002B5CC]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libwidget_gtk2.so +0x0004A214]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libwidget_gtk2.so +0x0004A58B]
UNKNOWN [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libxpcom_core.so +0x00082E84]
NS_ProcessNextEvent_P(nsIThread*, int)+0x00000027 [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libxpcom_core.so +0x00030D61]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libwidget_gtk2.so +0x0004A732]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libtoolkitcomps.so +0x000071E0]
XRE_main+0x0000193A [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libxul.so +0x0001D3A4]
UNKNOWN [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/thunderbird-bin +0x00000AF1]
__libc_start_main+0x000000E0 [/lib/libc.so.6 +0x00015FE0]
Keywords: crash
Step 2 (quicksearch) is not necessary. I get the same crash when selecting 41 msgs without a search.
Same crash (with slightly different stack) when getting new mail:
###!!! ASSERTION: invalid array index: 'i < Length()', file ../../../../mozilla/dist/include/xpcom/nsTArray.h, line 317

Program /usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/thunderbird-bin (pid = 28053) received signal 11.
Stack:
UNKNOWN 0xffffe400
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libmsgdb.so +0x0001033F]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libmsgimap.so +0x00045E0D]
NS_InvokeByIndex_P+0x00000029 [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libxpcom_core.so +0x00097CD9]
UNKNOWN [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libxpcom_core.so +0x0008AFA5]
UNKNOWN [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libxpcom_core.so +0x00082F1C]
NS_ProcessNextEvent_P(nsIThread*, int)+0x00000027 [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libxpcom_core.so +0x00030D61]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libwidget_gtk2.so +0x0004A732]
UNKNOWN [/mnt/media/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/components/libtoolkitcomps.so +0x000071E0]
XRE_main+0x0000193A [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/libxul.so +0x0001D3A4]
UNKNOWN [/usr/src/mozilla/thunderbird/trunk/debug/mozilla/dist/bin/thunderbird-bin +0x00000AF1]
__libc_start_main+0x000000E0 [/lib/libc.so.6 +0x00015FE0]
Sleeping for 300 seconds.
Source from 2008-09-26. Will try newest trunk.
Same with latest trunk.
Sorry for the missing symbols in the stack.
Ben, now that crash reporter is better with Mac, can you post crash report id?
Wayne, I'm on Linux. And not using crash reporter either, but my own builds.
I no longer have said Spam folder.

I think the crash maybe be related to msf files, as I had various problems back then.
assuming you were using an nightly and not 3.0a3, the following bugs have been resolved/checked in since your report
bug 457751
bug 458362 
bug 355333

but hard to tell without crash signature
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → INCOMPLETE
Status: RESOLVED → REOPENED
Resolution: INCOMPLETE → ---
Timo, can you reproduce this crash with same quantity of messages, using the newer quick filter?

I think we should close this if we can't reproduce, given that stack doesn't have symbols. Unless the problem can be resolved via the assertion alone.
Why are you asking me? Or are you confusing me to someone else? I don't know, I don't care.
bienvenu, given comment 7 (and many bugs fixed since then) and comment 8, do you see value in keeping this?  (note, comment 0 is based on deleting only 200 messages)


perhaps i had meant the other Timo (but I can't remember out why) ...

(In reply to Wayne Mery (:wsmwk) from comment #8)
> Timo, can you reproduce this crash with same quantity of messages, using the
> newer quick filter?
> 
> I think we should close this if we can't reproduce, given that stack doesn't
> have symbols. Unless the problem can be resolved via the assertion alone.
I think I fixed an issue like this when deleting messages from a quick search view, though it's possible it didn't make it through the review process. But in any case, if it's not showing up in crash-stats, I don't see any value in keeping this open.
(In reply to Wayne Mery (:wsmwk) from comment #10)

> perhaps i had meant the other Timo (but I can't remember out why) ...

Maybe you did meant me, I'm in cc-list. I can't remember why though. Maybe I saw this error, but I don't think so because I don't remember deleting messages from search (at least not that many).
(In reply to David :Bienvenu from comment #11)
> I think I fixed an issue like this when deleting messages from a quick
> search view, though it's possible it didn't make it through the review
> process. 

I believe you fixed more than one. I don't see any open bugs with patches. Interesting bugs fixed in the era are bug 492571, bug 539784.

> But in any case, if it's not showing up in crash-stats, I don't see
> any value in keeping this open.

I also used to have problems similar to this (eg bug 539784) but I'm not aware of bugs or crash-stats signatures in this area starting since about version 3.1. I also tested and could not reproduce.


Ben, are you cool with closing?
Ben, please see comment 13.

Even if it wasn't fixed, if you can't reproduce and without symbols I don't think anyone will bother to touch this.
See Also: → 380167
In it's current state, this isn't actionable
Status: REOPENED → RESOLVED
Closed: 15 years ago → 8 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.