524806 - subject with tab character ($09) in index-file crashes application if CZTSans font is installed

Status: RESOLVED INVALID

(Thunderbird :: Folder and Message Lists, defect)

Description

[André Bargull [:anba]]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3
Build Identifier: Version 2.0.0.23 (20090812)

If the mail's subject contains a tab-character, the folder's index-file will encode this character to '$09'. But now, whenever I open a folder which contains an E-Mail with a tab character in its subject line, the complete application crashes with the following exception:
---
Die Anweisung in "0x004fab84" verweist auf Speicher in "0x0000002c". Der Vorgang "written" konnte nicht auf dem Speicher durchgeführt werden.
---
(The instruction at "0x004fab84" points to the memory address at "0x0000002c". The instruction "written" couldn't be executed on the memory.)

And in addition to the tab character in the subject line, you also need to have the CZTSans [1] font installed on your system. So I suspect the font file somehow is corrupted, but nevertheless, the font isn't actually used in Thunderbird and just if you've installed a corrupted font, that shouldn't crash Thunderbird completely. 

Removing the '$09' entry from the index-file or uninstalling the font makes the problem go away. Btw, the memory addresses are always the same.

[1] http://sourceforge.net/projects/czt/files/czt/1_5_0/CZTSans_1_5_0.ttf/download

Reproducible: Always

Steps to Reproduce:
1. install CZTSans font
2. receive a mail with a tab character in its subject
3. ensure the index-file is updated, that means it contains the '$09' entry
4. open the folder with the email from step 2

Comment 1

[Wayne Mery (:wsmwk)]

if you are imap user, can you reproduce with version 3 beta using new profile? (to protect your data)
ftp://ftp.mozilla.org/pub/thunderbird/nightly/latest-comm-1.9.1/

Comment 2

[André Bargull [:anba]]

I'm not using IMAP, so should I try to reproduce the crash with latest beta nevertheless?

Comment 3

[David :Bienvenu]

the imap comment was just because it's easier to create new profiles and access existing mail via imap. If you can try to recreate with the latest beta via pop3, that would be great.

Comment 4

[André Bargull [:anba]]

The crash was _not_ reproducible with the latest beta!

Comment 5

[timeless]

In theory, you might be able to do this for the 2.* versions:
https://developer.mozilla.org/En/How_to_get_a_stacktrace_with_windbg
with firefox replaced by thunderbird

It /might/ be worth chasing this in case CZTSans is particularly interesting

Comment 6

[WADA:World Anti-bad-Duping Agency]

(In reply to comment #0)
> User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; (snip)
> Steps to Reproduce:
> 1. install CZTSans font

FYI.
Problem due to CZT font on MS Win looks to be already known.
Developer of CZT font says; 
> http://czt.sourceforge.net/font.html
> WARNING: Installing this font on Windows stops Visual Studio 2005 from
> opening its GUI Code Designer window! (It gives an error that says something
> about memory being corrupt). To fix this, you will need to uninstall
> the CZT font.

Comment 7

[Wayne Mery (:wsmwk)]

please post if you get additional information to tickle our curiosity.

if you submitted the talkback report using version it might still be there  http://kb.mozillazine.org/Quality_Feedback_Agent

Comment 8

[André Bargull [:anba]]

Since the bug doesn't occur when using TB3, I'm fine with closing this report as "Won't fix", because I don't use TB2 anymore. 

(This is rather the user-centric view. From a developer's perspective, it might be useful to find out why the crash happens at all. But I guess there are tons of issues which are more important, so well...)

And, no, I didn't use talkback to submit the crash report.