Closed Bug 487763 Opened 15 years ago Closed 13 years ago

*** glibc detected *** ./thunderbird-bin: double free or corruption (out): 0x0b0334c0 ***

Categories

(Thunderbird :: General, defect)

Product:
Thunderbird
Component:
General
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
RESOLVED WORKSFORME

People

(Reporter: wharms, Unassigned)

Details

(Keywords: crash, Whiteboard: [USB]) 

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; de; rv:1.9.0.6) Gecko/2009012700 SUSE/3.0.6-0.1.2 Firefox/3.0.6
Build Identifier: Version 2.0.0.19 

*** glibc detected *** ./thunderbird-bin: double free or corruption (out): 0x0b0334c0 ***
======= Backtrace: =========
/lib/libc.so.6[0xb703a654]
/lib/libc.so.6(cfree+0x9c)[0xb703bf3c]
/usr/lib/libglib-2.0.so.0(g_free+0x36)[0xb76ae026]
/usr/lib/libgio-2.0.so.0(g_unix_mount_free+0x28)[0xb799d318]
/usr/lib/libglib-2.0.so.0(g_list_foreach+0x27)[0xb76a3197]
/usr/lib/libgio-2.0.so.0[0xb799ff8a]
/usr/lib/libgobject-2.0.so.0(g_cclosure_marshal_VOID__VOID+0x84)[0xb774e474]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x1ab)[0xb7740d8b]
/usr/lib/libgobject-2.0.so.0[0xb775712d]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x7dc)[0xb775883c]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x26)[0xb7758cb6]
/usr/lib/libgio-2.0.so.0[0xb799dccd]
/usr/lib/libgio-2.0.so.0[0xb79ab9fa]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x1ab)[0xb7740d8b]
/usr/lib/libgobject-2.0.so.0[0xb775712d]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x7dc)[0xb775883c]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x26)[0xb7758cb6]
/usr/lib/libgio-2.0.so.0[0xb7985e76]
/usr/lib/libglib-2.0.so.0[0xb76a3a71]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x1e8)[0xb76a59a8]
/usr/lib/libglib-2.0.so.0[0xb76a9063]
/usr/lib/libglib-2.0.so.0(g_main_loop_run+0x1d2)[0xb76a9582]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xb9)[0xb7bb0239]
./thunderbird-bin[0x829c29c]
./thunderbird-bin[0x8705115]
./thunderbird-bin[0x808505e]
./thunderbird-bin[0x808081e]
/lib/libc.so.6(__libc_start_main+0xe5)[0xb6fe4705]
./thunderbird-bin[0x8080761]
======= Memory map: ========
08048000-08e6a000 r-xp 00000000 08:02 43921      /usr/lib/thunderbird/thunderbir
d-bin
08e6b000-08e6d000 r--p 00e22000 08:02 43921      /usr/lib/thunderbird/thunderbir
d-bin
08e6d000-08e82000 rw-p 00e24000 08:02 43921      /usr/lib/thunderbird/thunderbir
d-bin
08e82000-0c87e000 rw-p 08e82000 00:00 0          [heap]
a4f4f000-a4f50000 ---p a4f4f000 00:00 0 
a4f50000-a5750000 rwxp a4f50000 00:00 0 
a5750000-a5751000 ---p a5750000 00:00 0 
a5751000-a5f51000 rwxp a5751000 00:00 0 
a6752000-a6753000 ---p a6752000 00:00 0 
a6753000-a6f53000 rwxp a6753000 00:00 0 
a6f53000-a6f54000 ---p a6f53000 00:00 0 
a6f54000-a7754000 rwxp a6f54000 00:00 0 
a7754000-a81e8000 r--p 00000000 08:03 19158      /opt/kde3/share/icons/hicolor/i
con-theme.cache
a81e8000-a87ec000 r--p 00000000 08:02 627893     /usr/share/icons/hicolor/icon-t
heme.cache
a87ec000-a98f6000 r--p 00000000 08:03 19147      /opt/kde3/share/icons/crystalsv
g/icon-theme.cache
a98f6000-abbf2000 r--p 00000000 08:02 627891     /usr/share/icons/Tango/icon-the
me.cache
ac000000-ac0f9000 rw-p ac000000 00:00 0 
ac0f9000-ac100000 ---p ac0f9000 00:00 0 
ac100000-ac173000 rw-p ac100000 00:00 0 
ac173000-ac200000 ---p ac173000 00:00 0 
ac200000-ac300000 rw-p ac200000 00:00 0 
ac3e5000-ac3e6000 ---p ac3e5000 00:00 0 
ac3e6000-acbe6000 rwxp ac3e6000 00:00 0 
acbe6000-acbe7000 ---p acbe6000 00:00 0 
acbe7000-ad3e7000 rwxp acbe7000 00:00 0 
ad3e7000-ad3f4000 r-xp 00000000 08:02 81437      /usr/lib/gnome-vfs-2.0/modules/
libfile.so
ad3f4000-ad3f5000 r--p 0000c000 08:02 81437      /usr/lib/gnome-vfs-2.0/modules/
libfile.so
ad3f5000-ad3f6000 rw-p 0000d000 08:02 81437      /usr/lib/gnome-vfs-2.0/modules/
libfile.so
ad3f6000-ad3f7000 ---p ad3f6000 00:00 0 
ad3f7000-adbf7000 rwxp ad3f7000 00:00 0 
adbf7000-adbf8000 ---p adbf7000 00:00 0 
adbf8000-ae3f8000 rwxp adbf8000 00:00 0 
ae3f8000-ae3f9000 ---p ae3f8000 00:00 0 
ae3f9000-aebf9000 rwxp ae3f9000 00:00 0 
aebf9000-aebfa000 ---p aebf9000 00:00 0 
aebfa000-af3fa000 rwxp aebfa000 00:00 0 
af58f000-afbfb000 r--p 00000000 08:02 627892     /usr/share/icons/gnome/icon-the
me.cache
afbfb000-afbfc000 ---p afbfb000 00:00 0 
afbfc000-b03fc000 rwxp afbfc000 00:00 0 
b03fc000-b0bfe000 rw-p b03fc000 00:00 0 
b0cc7000-b0cc9000 r-xp 00000000 08:03 218959     /lib/libnss_mdns4_minimal.so.2
b0cc9000-b0cca000 r--p 00001000 08:03 218959     /lib/libnss_mdns4_minimal.so.2
b0cca000-b0ccb000 rw-p 00002000 08:03 218959     /lib/libnss_mdns4_minimal.so.2
b0ce8000-b0d41000 rw-p b0ce8000 00:00 0 
b0d41000-b0dc6000 r--p 00000000 08:02 597734     /usr/share/fonts/misc/b12.pcf.g
z


Reproducible: Sometimes

Steps to Reproduce:
1. running thunderbird for some time (several days) produce random crashes due to memory corruption. It should be sufficent to run tunderbird for sometime in a low memory box. The crash described here occured without any user intervention. a plain thunderbird seems sufficient.




The crash described here occured without any user intervention. a plain thunderbird seems sufficient.
Version: unspecified → 2.0
It would be very useful to know if this also happens in nightly 1.9.1 builds, so adding qawanted.

If it does, the next thing to do would be to figure out how to convince glibc (or breakpad?) to give us symbols for the crash.  For 1.9.1, gozer or ted are likely to have ideas on that.
Keywords: qawanted
Walter can you give a try to thunderbird 3.0 béta 2 ? (http://www.mozillamessaging.com/en-US/thunderbird/early_releases/downloads/)
i willing to test 3.0b2 but nothing happens when i select the link, no idea what is going on. Can you give me an ftp site ?

breakpad: i have trouble for some time now with random chrashes. i tried breakpad and several other tools but nothing has helped sofar. when i compiled the source i found 10000+ warnings some serious but i am not in c++ so ... i guess one of them is important.
found the problem: a mozilla bug :(
i will report later
i have a problem with TB3.0b2. i can not send mails while TB 2 works fine.
I have reported that as a bug the down side is that i can not continue testing
until i found how to solve that.
What bug number is the "can't send mails" issue?
Bug 488028 it has nothing todo with this problem (i guess)
TB 3 Linux nightly builds WFM so far. Walter, does this still occur for you?
Keywords: qawanted
Whiteboard: closeme 2009-06-11
I will be on vacation (and other things) so it will take some time to confirm.
When i forget to test please ping me again i about 4 weeks.
please note that the main problem of TB3 for me was to connect to our smtp server at all. without that connection i can not test.
Whiteboard: closeme 2009-06-11 → closeme 2009-07-09
RESO INCO due to lack of response to last question. If you feel this change was made in error, please respond to this bug with your reasons why.
Status: UNCONFIRMED → RESOLVED
Closed: 15 years ago
Resolution: --- → INCOMPLETE
I am sorry i forgot about this because my situation has changed. The system i used to have this problem is dead. before the dead there was an update for X11 that seem to fix some problems, read it took longer to crash.

my current system has much more memory and is 64bit (and reinstaled with the same distribution). i have no problems for now. I strongly suspect that the problems relate to poor memory handling. (esay testing reduce  available memory and see it crashing).
Resolution: INCOMPLETE → FIXED
(In reply to comment #11)
> I am sorry i forgot about this because my situation has changed. The system i
> used to have this problem is dead. before the dead there was an update for X11
> that seem to fix some problems, read it took longer to crash.
> 
> my current system has much more memory and is 64bit (and reinstaled with the
> same distribution). i have no problems for now. I strongly suspect that the
> problems relate to poor memory handling. (esay testing reduce  available memory
> and see it crashing).

Still RESO incomplete due to inadequate information.
Resolution: FIXED → INCOMPLETE
(In reply to comment #11)
>
> my current system has much more memory and is 64bit (and reinstaled with the
> same distribution). i have no problems for now. I strongly suspect that the
> problems relate to poor memory handling. (esay testing reduce  available memory
> and see it crashing).

This is definitely a possibility, particularly if you don't have enough swap space.  Mozilla's behavior in low-memory conditions is, at best, erratic.  Work is underway to fix this at the allocator level over the longer term.
I seems that our idea of low memory ist not totaly wrong but is not related to swapspace. This time the bug come up with swapspace not touched.

The computer is new and new installed from gound up. The thunderbird version i use now is 2.0.0.23 from Opensuse 64Bit, it occurs here seldom it is possible they are not related. 

*** glibc detected *** /usr/lib64/thunderbird/thunderbird-bin: double free or co
rruption (out): 0x00000000053c3360 ***
======= Backtrace: =========
/lib64/libc.so.6[0x7f3357bb2108]
/lib64/libc.so.6(cfree+0x76)[0x7f3357bb3c66]
/usr/lib64/libgio-2.0.so.0(g_unix_mount_free+0x11)[0x7f335c175901]
/usr/lib64/libglib-2.0.so.0(g_list_foreach+0x1d)[0x7f335a87592d]
/usr/lib64/libgio-2.0.so.0[0x7f335c177cc8]
/usr/lib64/libgobject-2.0.so.0(g_closure_invoke+0x16d)[0x7f335ad1337d]
/usr/lib64/libgobject-2.0.so.0[0x7f335ad2907d]
/usr/lib64/libgobject-2.0.so.0(g_signal_emit_valist+0x7c8)[0x7f335ad2a738]
/usr/lib64/libgobject-2.0.so.0(g_signal_emit+0x83)[0x7f335ad2ac63]
/usr/lib64/libgobject-2.0.so.0(g_closure_invoke+0x16d)[0x7f335ad1337d]
/usr/lib64/libgobject-2.0.so.0[0x7f335ad2907d]
/usr/lib64/libgobject-2.0.so.0(g_signal_emit_valist+0x7c8)[0x7f335ad2a738]
/usr/lib64/libgobject-2.0.so.0(g_signal_emit+0x83)[0x7f335ad2ac63]
/usr/lib64/libgio-2.0.so.0[0x7f335c15fc91]
/usr/lib64/libglib-2.0.so.0(g_main_context_dispatch+0x23b)[0x7f335a8780fb]
/usr/lib64/libglib-2.0.so.0[0x7f335a87b8cd]
/usr/lib64/libglib-2.0.so.0(g_main_loop_run+0x1cd)[0x7f335a87bdfd]
/usr/lib64/libgtk-x11-2.0.so.0(gtk_main+0xa7)[0x7f335c996a17]
/usr/lib64/thunderbird/thunderbird-bin[0x637675]
/usr/lib64/thunderbird/thunderbird-bin[0xac5d8c]
/usr/lib64/thunderbird/thunderbird-bin[0x44eced]
/usr/lib64/thunderbird/thunderbird-bin[0x44a01a]
/lib64/libc.so.6(__libc_start_main+0xe6)[0x7f3357b5c586]
/usr/lib64/thunderbird/thunderbird-bin[0x449f49]
======= Memory map: ========
00400000-012f8000 r-xp 00000000 08:18 1349800                            /usr/li
b64/thunderbird/thunderbird-bin
014f7000-014fb000 r--p 00ef7000 08:18 1349800                            /usr/li
b64/thunderbird/thunderbird-bin
014fb000-0151a000 rw-p 00efb000 08:18 1349800                            /usr/li
b64/thunderbird/thunderbird-bin
0151a000-06785000 rw-p 0151a000 00:00 0                                  [heap]
7f333b7ff000-7f333b800000 ---p 7f333b7ff000 00:00 0 
7f333b800000-7f333c000000 rw-p 7f333b800000 00:00 0 
7f333c000000-7f333cb3d000 rw-p 7f333c000000 00:00 0 
7f333cb3d000-7f3340000000 ---p 7f333cb3d000 00:00 0 
7f33406ae000-7f334070e000 rw-s 00000000 00:0a 154828803                  /SYSV00
000000 (deleted)
7f334070e000-7f334070f000 ---p 7f334070e000 00:00 0 
7f334070f000-7f3340f0f000 rw-p 7f334070f000 00:00 0 
7f3340f0f000-7f3341273000 r--p 00000000 08:18 201227                     /usr/sh
are/icons/hicolor/icon-theme.cache
7f3341273000-7f33418df000 r--p 00000000 08:18 245348                     /usr/sh
are/icons/gnome/icon-theme.cache
7f33418df000-7f3341b72000 r--p 00000000 08:18 238482                     /usr/sh
are/icons/Gilouche/icon-theme.cache
7f3341b72000-7f3341b73000 ---p 7f3341b72000 00:00 0 
7f3341b73000-7f3342373000 rw-p 7f3341b73000 00:00 0 
7f3342373000-7f3342374000 ---p 7f3342373000 00:00 0 
7f3342374000-7f3342b74000 rw-p 7f3342374000 00:00 0 
7f3343375000-7f3343376000 ---p 7f3343375000 00:00 0 
7f3343376000-7f3343b76000 rw-p 7f3343376000 00:00 0 
7f3344377000-7f3344378000 ---p 7f3344377000 00:00 0 
7f3344378000-7f3344b78000 rw-p 7f3344378000 00:00 0 
7f3344b78000-7f3344b79000 ---p 7f3344b78000 00:00 0 
7f3344b79000-7f3345379000 rw-p 7f3344b79000 00:00 0 
7f3345379000-7f334537a000 ---p 7f3345379000 00:00 0 
7f334537a000-7f3345b7a000 rw-p 7f334537a000 00:00 0 
7f3345b7a000-7f3345b7b000 ---p 7f3345b7a000 00:00 0 
7f3345b7b000-7f334637b000 rw-p 7f3345b7b000 00:00 0 
7f334637b000-7f334637c000 ---p 7f334637b000 00:00 0 
7f334637c000-7f334757e000 rw-p 7f334637c000 00:00 0 
7f33475ca000-7f33475da000 r-xp 00000000 08:18 1276901                    /usr/li
b64/libgvfscommon.so.0.0.0
7f33475da000-7f33477da000 ---p 00010000 08:18 1276901                    /usr/li
b64/libgvfscommon.so.0.0.0
7f33477da000-7f33477db000 r--p 00010000 08:18 1276901                    /usr/li
b64/libgvfscommon.so.0.0.0
7f33477db000-7f33477dc000 rw-p 00011000 08:18 1276901                    /usr/li
b64/libgvfscommon.so.0.0.0
7f33477dc000-7f33477e9000 r-xp 00000000 08:18 1301550                    /usr/li
b64/gio/modules/libgioremote-volume-monitor.so
7f33477e9000-7f33479e8000 ---p 0000d000 08:18 1301550                    /usr/li
b64/gio/modules/libgioremote-volume-monitor.so
7f33479e8000-7f33479e9000 r--p 0000c000 08:18 1301550                    /usr/li
b64/gio/modules/libgioremote-volume-monitor.so
7f33479e9000-7f33479ea000 rw-p 0000d000 08:18 1301550                    /usr/li
b64/gio/modules/libgioremote-volume-monitor.so
7f33479ea000-7f33479f2000 r-xp 00000000 08:18 1276185                    /usr/li
b64/libfam.so.0.0.0
7f33479f2000-7f3347bf1000 ---p 00008000 08:18 1276185                    /usr/li
b64/libfam.so.0.0.0
7f3347bf1000-7f3347bf2000 r--p 00007000 08:18 1276185                    /usr/li
b64/libfam.so.0.0.0
7f3347bf2000-7f3347bf3000 rw-p 00008000 08:18 1276185                    /usr/li
b64/libfam.so.0.0.0
7f3347bf3000-7f3347bfa000 r-xp 00000000 08:11 788020                     /lib64/
libacl.so.1.1.0
7f3347bfa000-7f3347df9000 ---p 00007000 08:11 788020                     /lib64/
libacl.so.1.1.0
7f3347df9000-7f3347dfa000 r--p 00006000 08:11 788020                     /lib64/
libacl.so.1.1.0
7f3347dfa000-7f3347dfb000 rw-p 00007000 08:11 788020                     /lib64/
libacl.so.1.1.0
7f3347dfb000-7f3347dff000 r-xp 00000000 08:11 788005                     /lib64/
libattr.so.1.1.0
7f3347dff000-7f3347fGetötet
Resolution: INCOMPLETE → FIXED
Status: RESOLVED → UNCONFIRMED
Resolution: FIXED → ---
Whiteboard: closeme 2009-07-09
Today i had an other crash. The frequence is increasing (mem frag?). If someone can give a hand what source to use and how to debug i can run a thunderbird version with memcheck. It would be clever to come forward NOW in a few days i will go offline for xmas etc. (= ca. 1 month)

*** glibc detected *** /usr/lib64/thunderbird/thunderbird-bin: double free or co
rruption (out): 0x0000000003cab680 ***
======= Backtrace: =========
/lib64/libc.so.6[0x7f56f41d2108]
/lib64/libc.so.6(cfree+0x76)[0x7f56f41d3c66]
/usr/lib64/libgio-2.0.so.0(g_unix_mount_free+0x11)[0x7f56f8795901]
/usr/lib64/libglib-2.0.so.0(g_list_foreach+0x1d)[0x7f56f6e9592d]
/usr/lib64/libgio-2.0.so.0[0x7f56f8797cc8]
/usr/lib64/libgobject-2.0.so.0(g_closure_invoke+0x16d)[0x7f56f733337d]
/usr/lib64/libgobject-2.0.so.0[0x7f56f734907d]
/usr/lib64/libgobject-2.0.so.0(g_signal_emit_valist+0x7c8)[0x7f56f734a738]
/usr/lib64/libgobject-2.0.so.0(g_signal_emit+0x83)[0x7f56f734ac63]
/usr/lib64/libgobject-2.0.so.0(g_closure_invoke+0x16d)[0x7f56f733337d]
/usr/lib64/libgobject-2.0.so.0[0x7f56f734907d]
/usr/lib64/libgobject-2.0.so.0(g_signal_emit_valist+0x7c8)[0x7f56f734a738]
/usr/lib64/libgobject-2.0.so.0(g_signal_emit+0x83)[0x7f56f734ac63]
/usr/lib64/libgio-2.0.so.0[0x7f56f877fc91]
/usr/lib64/libglib-2.0.so.0(g_main_context_dispatch+0x23b)[0x7f56f6e980fb]
/usr/lib64/libglib-2.0.so.0[0x7f56f6e9b8cd]
/usr/lib64/libglib-2.0.so.0(g_main_loop_run+0x1cd)[0x7f56f6e9bdfd]
/usr/lib64/libgtk-x11-2.0.so.0(gtk_main+0xa7)[0x7f56f8fb6a17]
/usr/lib64/thunderbird/thunderbird-bin[0x637675]
/usr/lib64/thunderbird/thunderbird-bin[0xac5d8c]
/usr/lib64/thunderbird/thunderbird-bin[0x44eced]
/usr/lib64/thunderbird/thunderbird-bin[0x44a01a]
/lib64/libc.so.6(__libc_start_main+0xe6)[0x7f56f417c586]
/usr/lib64/thunderbird/thunderbird-bin[0x449f49]
The source will be available in your distro's repo.

Running Thunderbird un gdb should help (ie something along the lines of ./Thunderbird -g).

Adding distro maintainer for source link/package name.
Adding timeless for more debug information/ commands.
Not sure which openSUSE version and Thunderbird you run exactly.
For example the debuginfo package for 11.1-x86_64 is here:
http://download.opensuse.org/debug/update/11.1/rpm/x86_64/MozillaThunderbird-debuginfo-2.0.0.23-0.2.1.x86_64.rpm
I have the debuginfo installed (strangely not available via 11.1-debug repo)
and i have started with
thunderbird -g
Warning: unrecognized command line flag -g

(i looked into the code, it is -g, someone should fix that)

anything else i can do ? now lets hope for the crash
roughly this looks like a bug in gio. That's not our module.

you need to install debuginfo for libc, gio, and glib.
@timeless, thx for info
i had a crash today (see bug 533662) but no additional infos since i had no
time to locate the required debuginfo files for libc, gio, and glib. (NTL the mentioned bug was pure thunderbird).

@openSUSE
is there some propper documentation how to use theses debuginfo suff ? 
and why is the debug repos most times out-of-sync ? surely you have a autobuild for that.

i am running low on time for this year, so i can only say i hope we read from each other next year.
ah, ok.

thunderbird -d gdb
Warning: unrecognized command line flag -d

opensuse seems to ship a modified startup-script
gdb ./thunderbird

i guess. if that fails, find someone from opensuse and ask for help.
(In reply to comment #23)
> gdb ./thunderbird
> 
> i guess. if that fails, find someone from opensuse and ask for help.
Wolfgang , any pointer for that ?
With TB3 "thunderbird -d gdb" would be correct. The 2.0 version doesn't have that feature.

$ LD_LIBRARY_PATH=/usr/lib/thunderbird gdb /usr/lib/thunderbird/thunderbird-bin

should give you a working debugger environment
I am running thunderbird now with gdb and debuginfo.
and i run into this crash:


Program received signal SIGSEGV, Segmentation fault.
0x00000000008d1374 in nsTreeSelection::SetCurrentIndex (this=0x60eed90, aIndex=-1) at nsTreeSelection.cpp:599
	in nsTreeSelection.cpp
(gdb) bt
#0  0x00000000008d1374 in nsTreeSelection::SetCurrentIndex (this=0x60eed90, aIndex=-1) at nsTreeSelection.cpp:599
#1  0x00000000008d4594 in nsTreeSelection::ToggleSelect (this=0x0, aIndex=1) at nsTreeSelection.cpp:394
#2  0x0000000000d34896 in nsMsgDBView::RestoreSelection (this=0x50e53c0, aCurrentMsgKey=4294956260, aMsgKeyArray=0x7fffffffd450) at nsMsgDBView.cpp:820
#3  0x0000000000b8debf in nsMsgGroupView::HandleDayChange (this=<value optimized out>) at nsMsgGroupView.cpp:431

i took a look into buzilla and found an old bug (bug 262095) still marked critical. please note that my bug occured without my (manual) intervention. TB simply crashed at night.
(In reply to comment #26)
> i took a look into buzilla and found an old bug (bug 262095) still marked
> critical. please note that my bug occured without my (manual) intervention. TB
> simply crashed at night.

walter, are you saying you can reproduce using the steps in bug 262095?
see my most recent comment in that bug - I suspect you won't be able to reproduce the crash using thunderbird v3.x
Severity: normal → critical
Keywords: crash
It seems i found a found to make it happen.

1. start tunderbird
2. prepare a message
3. select a file from USB-Stick as attachment
4 [review]. remove USB stick

thunderbird (aks libgio-2.0) will die with:
/usr/lib64/thunderbird/thunderbird-bin: double free or corruption


It is clearly not resposible for all chrashes i have seen, but perhaps it points in the right direction
walter, thanks for those steps.

I'd prefer to see this tested using trunk version souruce before confirming. Unless ludo or someone else offers to test, can you test with trunk? (with appropriate precautions for your profile data)
 ftp://ftp.mozilla.org/pub/thunderbird/nightly/latest-comm-central/
Whiteboard: [USB]
(In reply to comment #13)
> (In reply to comment #11)
> >
> > my current system has much more memory and is 64bit (and reinstaled with the
> > same distribution). i have no problems for now. I strongly suspect that the
> > problems relate to poor memory handling. (esay testing reduce  available memory
> > and see it crashing).
> 
> This is definitely a possibility, particularly if you don't have enough swap
> space.  Mozilla's behavior in low-memory conditions is, at best, erratic.  Work
> is underway to fix this at the allocator level over the longer term.

dmose, in that case this should be a duplicate of some other bug or depends on. Is there a core bug we can target?  Note, I don't think we know what constitutes low memory in this bug report - I don't see where Walter mentions how much memory he had.

Wolfgang, what's your take on comment 19?

Comment 26 is a different bug.


In summary, I'm not sure this bug report is worth keeping.
Comment 29 may be worth pursuing, if someone has the time to try reproducing it under (eg) valgrind. 

The bigger picture allocator betterments may or may not help here, so I'm not sure that depending on them buys us much.
no activity for a long time, please close
I am using TB 3.0.11 now and this bug seems gone.
RESOLVED WFM per comment 34.
Status: UNCONFIRMED → RESOLVED
Closed: 15 years ago → 13 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.