Closed Bug 539813 Opened 15 years ago Closed 14 years ago

Crash in [@ thumbcache.dll@0x1f34] when attempting to save or attach files. Also [@ thumbcache.dll@0x14c1 ], [@ thumbcache.dll@0x1f1d ], [@ thumbcache.dll@0x1f6f ]

Categories

(MailNews Core :: Attachments, defect)

Product:
MailNews Core
Component:
Attachments
Version:
1.9.1 Branch
Platform:
x86_64
Windows Server 2008
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
RESOLVED INVALID

People

(Reporter: themoz, Unassigned)

References

Details

(Keywords: crash, Whiteboard: [Microsoft thumbcache.dll][support][workaround: comment 29, comment 30])

Crash Data

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091204 Thunderbird/3.0

I am using Windows Server 2008 R2 (more or less "Windows 7 Server") as a workstation with Thunderbird 3.  Periodically, when attempting to save a file attachment or open the "File Open" dialog to attach a file, Thunderbird will crash before the dialog appears.

I have not yet been able to successfully isolate the behavior.  By that, I can't reliably recreate it.  It may have something to do with the permissions my non-administrator account has to specific file system paths, but that is just a conjecture at this time.

The following are crash reports caused by this problem:

http://crash-stats.mozilla.com/report/index/6907a83b-3a73-43ef-a342-ef2fd2100106
http://crash-stats.mozilla.com/report/index/6d2b514d-bb04-48d5-9d61-f13712100106
http://crash-stats.mozilla.com/report/index/02508bb7-df07-4910-95b3-36be42100106

Reproducible: Sometimes

Steps to Reproduce:
1. Attempt to save a file attachment, causing the "File Save" dialog to appear.  Sometimes this will cause a crash.
2. Attempt to attach a file, using the "File Open" dialog, which will sometimes cause a crash.

Unfortunately, this is not something I've been able to isolate yet.
Actual Results:  
Most of the time, the dialog appears correctly.  Sometimes, it crashes and in the worst-case scenario, I lose the body of the message I had been composing prior to attaching a file.

Expected Results:  
The "File Open" or "File Save" dialog appear as they do normally.

As I mentioned, I am using a non-administrator account to run Thunderbird.  The issue may be related to NTFS permissions, but that is something I've not yet been able to confirm.
Signature	thumbcache.dll@0x1f34
UUID	6907a83b-3a73-43ef-a342-ef2fd2100106
Time 	2010-01-06 09:20:09.489539
Uptime	303
Last Crash	311 seconds before submission
Product	Thunderbird
Version	3.0
Build ID	20091204171430
Branch	1.9.1
OS	Windows NT
OS Version	6.1.7600
CPU	x86
CPU Info	GenuineIntel family 6 model 26 stepping 4
Crash Reason	EXCEPTION_ACCESS_VIOLATION
Crash Address	0x70fe1f34
User Comments	Saving file attachment.
Processor Notes 	
Crashing Thread
Frame 	Module 	Signature [Expand] 	Source
0 	thumbcache.dll 	thumbcache.dll@0x1f34 	
1 	thumbcache.dll 	thumbcache.dll@0x2023 	
2 	ole32.dll 	CClassCache::CDllPathEntry::DllGetClassObject 	
3 	ole32.dll 	CClassCache::CDllFnPtrMoniker::BindToObjectNoSwitch 	
4 	ole32.dll 	CClassCache::GetClassObject 	
5 	ole32.dll 	CServerContextActivator::CreateInstance 	
6 	ole32.dll 	ActivationPropertiesIn::DelegateCreateInstance 	
7 	ole32.dll 	CApartmentActivator::CreateInstance 	
8 	ole32.dll 	CProcessActivator::CCICallback 	
9 	ole32.dll 	CProcessActivator::AttemptActivation 	
10 	ole32.dll 	CProcessActivator::ActivateByContext 	
11 	ole32.dll 	CProcessActivator::CreateInstance 	
12 	ole32.dll 	ActivationPropertiesIn::DelegateCreateInstance 	
13 	ole32.dll 	CClientContextActivator::CreateInstance 	
14 	ole32.dll 	ActivationPropertiesIn::DelegateCreateInstance 	
15 	ole32.dll 	CClientContextActivator::CreateInstance 	
16 	ole32.dll 	CComActivator::DoCreateInstance 	
17 	ole32.dll 	CoCreateInstanceEx 	
18 	HsSrv.dll 	HsSrv.dll@0xa548 	
19 	HsSrv.dll 	HsSrv.dll@0xa407 	
20 	shell32.dll 	CSetOperationCallback::_LookupThumbnail 	
21 	shell32.dll 	CSetOperationCallback::_LookupThumbnail 	
22 	shell32.dll 	CSetOperationCallback::OnNextBatch 	
23 	shell32.dll 	CEnumTask::_PushBatchToView 	
24 	shell32.dll 	CDefViewSink::OnCollectionChanged 	
25 	shell32.dll 	CEnumTask::_IncrEnumFolder 	
26 	shell32.dll 	CEnumTask::InternalResumeRT 	
27 	shell32.dll 	CRunnableTask::Run 	
28 	shell32.dll 	CShellTask::TT_Run 	
29 	shell32.dll 	CShellTask::MT_Release 	
30 	ole32.dll 	CoInitializeEx 	
31 	shell32.dll 	CShellTaskThread::s_ThreadProc 	
32 	shlwapi.dll 	ExecuteWorkItemThreadProc 	
33 	ntdll.dll 	ntdll.dll@0x69a25 	
34 	ntdll.dll 	ntdll.dll@0x63234 	
35 	kernel32.dll 	kernel32.dll@0x13676 	
36 	ntdll.dll 	ntdll.dll@0x39d71 	
37 	ntdll.dll 	ntdll.dll@0x39d44 	

Show/hide other threads
Thread 0
Frame 	Module 	Signature [Expand] 	Source
0 	user32.dll 	user32.dll@0x19745 	
1 	user32.dll 	user32.dll@0x1951d 	
2 	user32.dll 	user32.dll@0x18bcc 	
3 	comctl32.dll 	SHFusionCreateWindowEx 	
4 	comctl32.dll 	CLVTooltipManager::Initialize 	
5 	comctl32.dll 	CListView::OnCreate 	
6 	comctl32.dll 	CListView::OnCreate 	
7 	comctl32.dll 	CLVHitTestManager::CLVHitTestManager 	
8 	comctl32.dll 	CListView::s_WndProc 	
9 	user32.dll 	user32.dll@0x16237 	
10 	user32.dll 	user32.dll@0x17297 	
11 	user32.dll 	user32.dll@0x17176 	
12 	user32.dll 	user32.dll@0x1942b 	
13 	ntdll.dll 	ntdll.dll@0x100e5 	
14 	user32.dll 	user32.dll@0x1951d 	
15 	user32.dll 	user32.dll@0x18bcc 	
16 	shell32.dll 	SHFusionCreateWindowEx 	
17 	shell32.dll 	CAutoComplete::_OnListViewCreate 	
18 	shell32.dll 	CAutoComplete::_SeeWhatsEnabled 	
19 	shell32.dll 	CAutoComplete::s_DropDownWndProc 	
20 	user32.dll 	user32.dll@0x16237 	
21 	user32.dll 	user32.dll@0x17297 	
22 	user32.dll 	user32.dll@0x17176 	
23 	user32.dll 	user32.dll@0x1942b 	
24 	ntdll.dll 	ntdll.dll@0x100e5 	
25 	user32.dll 	user32.dll@0x1951d 	
26 	user32.dll 	user32.dll@0x18bcc 	
27 	shell32.dll 	SHFusionCreateWindowEx 	
28 	shell32.dll 	CAutoComplete::_SeeWhatsEnabled 	
29 	shell32.dll 	CAutoComplete::SetOptions 	
30 	comdlg32.dll 	AutoComplete 	
31 	comdlg32.dll 	CFileOpenSave::ApplyAutoComplete 	
32 	comdlg32.dll 	CComboBoxExBase::_SetUpAutoComplete 	
33 	comdlg32.dll 	CFileNameComboBox::InitializeControl 	
34 	shell32.dll 	CAppControlHost::CreateHWND 	
35 	shell32.dll 	HWNDFloat::OnHosted 	
36 	dui70.dll 	dui70.dll@0x49384 	
37 	dui70.dll 	dui70.dll@0x49384 	
38 	dui70.dll 	dui70.dll@0x3fd71 	
39 	dui70.dll 	dui70.dll@0x3b086 	
40 	dui70.dll 	dui70.dll@0x48482 	
41 	dui70.dll 	dui70.dll@0x482a5 	
42 	dui70.dll 	dui70.dll@0x43bed 	
43 	shell32.dll 	CSaveControlsModuleInner::_CreateControls 	
44 	shell32.dll 	CSaveControlsModuleInner::SetSite 	
45 	shell32.dll 	CSaveControlsModule::LayoutInitialized 	
46 	shell32.dll 	DUI_SendInitializationToUnknown 	
47 	shell32.dll 	DUI_WalkIUnknownElements 	
48 	shell32.dll 	DUI_WalkIUnknownElements 	
49 	shell32.dll 	DUI_WalkIUnknownElements 	
50 	shell32.dll 	DUI_WalkIUnknownElements 	
51 	shell32.dll 	DUI_WalkIUnknownElements 	
52 	shell32.dll 	DUI_WalkIUnknownElements 	
53 	shell32.dll 	CDUIViewFrame::SetLayoutDefinition 	
54 	shell32.dll 	CExplorerBrowser::_DetermineViewMode 	
55 	shell32.dll 	CExplorerBrowser::SetRect 	
56 	shell32.dll 	CExplorerBrowser::_BrowseObjectInternal 	
57 	shell32.dll 	CExplorerBrowser::_OnBrowseObject 	
58 	shell32.dll 	CExplorerBrowser::SetRect 	
59 	comdlg32.dll 	CFileOpenSave::_BrowseObject 	
60 	comdlg32.dll 	CFileOpenSave::_JumpToInitialLocation 	
61 	comdlg32.dll 	CFileOpenSave::_InitOpenSaveDialog 	
62 	comdlg32.dll 	SHLogicalToPhysicalDPI 	
63 	user32.dll 	user32.dll@0x16237 	
64 	user32.dll 	user32.dll@0x4133e 	
65 	user32.dll 	user32.dll@0x410e1 	
66 	user32.dll 	user32.dll@0x411e6 	
67 	user32.dll 	user32.dll@0x16237 	
68 	user32.dll 	user32.dll@0x168e9 	
69 	user32.dll 	user32.dll@0x17176 	
70 	user32.dll 	user32.dll@0x172f0 	
71 	ntdll.dll 	ntdll.dll@0x100e5 	
72 	user32.dll 	user32.dll@0x31b6d 	
73 	user32.dll 	user32.dll@0x32878 	
74 	user32.dll 	user32.dll@0x327b7 	
75 	user32.dll 	user32.dll@0x32a58 	
76 	comdlg32.dll 	CFileOpenSave::Show 	
77 	comdlg32.dll 	_InvokeNewFileOpenSave 	
78 	comdlg32.dll 	_CreateNewFileOpenSaveInProc 	
79 	comdlg32.dll 	NewGetFileName 	
80 	comdlg32.dll 	NewGetSaveFileName 	
81 	comdlg32.dll 	GetFileName 	
82 	comdlg32.dll 	GetSaveFileNameW 	
83 	thunderbird.exe 	nsFilePicker::ShowW 	widget/src/windows/nsFilePicker.cpp:265
84 	thunderbird.exe 	nsFilePicker::Show 	widget/src/windows/nsFilePicker.cpp:405
85 	thunderbird.exe 	nsMessenger::SaveAttachment 	mailnews/base/src/nsMessenger.cpp:886
86 	xpcom_core.dll 	NS_InvokeByIndex_P 	xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp:101
87 	thunderbird.exe 	XPCWrappedNative::CallMethod 	js/src/xpconnect/src/xpcwrappednative.cpp:2047
88 	thunderbird.exe 	XPC_WN_CallMethod 	js/src/xpconnect/src/xpcwrappednativejsops.cpp:1590
89 	js3250.dll 	js_Invoke 	js/src/jsinterp.cpp:1386
90 	thunderbird.exe 	XPC_WN_GetObjectOpsWithCall 	js/src/xpconnect/src/xpcwrappednativejsops.cpp:1398
91 		@0x85efdff 	

Filename 	Version 	Debug Identifier 	Debug Filename
thumbcache.dll 	6.1.7600.16385 	F9455152F88842E7AFEB15F6252CBA792 	thumbcache.pdb

I've left to threads in this stack trace. the second one is the main thread. the first one is the one where a *Microsoft* library is crashing on its own thread. There is *very* little we can do about this. We have no real recourse for threads which aren't connected to us and are managed by others. Since someone created it, they're probably blocked waiting for a reply, which means our recovery would probably just result in a hung application, which is actually worse (and the hang could potentially happen at some other time). -- We could block the specific library from loading, but that's rather rude, and we're supposed to be able to trust the os which hosts us ;-).

We thankfully have a couple of people from microsoft who talk to us in this bug database, but i don't think any of them really work on the operating system, i believe most of them work on various plugins or certain webapps (excel!/hotmail/live). I've cc'd one, however i don't like asking too many favors of him.

In general it should be possible for you to trigger this using notepad. if you can manage to do that, you can send a report to microsoft and hopefully trigger better/faster action.

http://kb.mozillazine.org/Breakpad lists ways to disable our crash reporter.

If you're certain that you can reproduce this crash, then one thing you could do is disable breakpad, reproduce it a couple of time and send the crashes you get to microsoft.

One kinda odd thing: thumbcache is a system library, but we don't seem to have symbols. I suspect that's because it's from 2008 instead of w7. I've cc'd someone about that also.

on the assumption that we're just missing the symbols for that,
http://developer.mozilla.org/en/How_to_get_a_stacktrace_with_WinDbg

would let you try to get a stack which has a function name for thumbcache. Please feel free to _attach_ the resulting log file.

In terms of trying to get better steps to reproduce, i'd suggest ProcMon from sysinternals.com (owned by microsoft), you're going to want to tune the logging so you don't drown, but it could help.
Severity: normal → critical
Keywords: crash
OS: Windows 7 → Windows Server 2008
Summary: Crash in thumbcache.dll when attempting to save or attach files → Crash in [@ thumbcache.dll@0x1f34] when attempting to save or attach files
We probably don't have symbols for that DLL because the symbol fetching script just runs once a day and samples the 500 most recent crashes, looking for missing symbols among them. We probably don't have a high enough proportion of Server 2008 crashes for them to get noticed.

I manually fetched the symbols, and the top two frames on fist stack are:
0 operator new(unsigned int)
1 DllGetClassObject

not particularly helpful. The top few frames of Thread 0 are:
0 NtUserCreateWindowEx
1 _CreateWindowEx
2 CreateWindowExW

I'll upload these symbols to the symbol server so future crashes will be symbolized. But I agree with timeless in that this is a Microsoft crash.
Thanks for the very detailed replies!  I agree that this is probably out of Mozilla's hands and something Microsoft needs to review.  But nevertheless, I'll see what I can do to collect some additional information just to have it available.
I've not yet been able to reproduce this behavior with any other applications I use.  But searching for thumbcache.dll crashes revealed this similar report at SQL Server tool vendor Redgate:

https://www.red-gate.com/MessageBoard/viewtopic.php?t=10047
On symbol availability, Office module's symbols are not open to the public.

Also, Office2003's mainstream support is ended so what we can do is paid support.  
  Office support: http://support.microsoft.com/lifecycle/?p1=2488 
  Microsoft product lifecycle:	http://support.microsoft.com/?pr=lifecycle
andy: oh right; thanks. Is there anything wrong with us blocklisting the dll? if it causes crashes and isn't supported by Microsoft, it seems like something we should do.
I'm not sure I follow, but I feel it's worth adding that I do not have Office 2003 installed on this particular machine.  Rather, the Office 2010 Beta.

I hadn't realized that thumbcache.dll was part of Office (am I reading you correctly?)
Apologies.  I was replying to bug 478884.

Still waiting for the right owner for this bug.  Sorry for the confusion.
Brian: sorry, hazard of me asking one guy for help in too many places at the same time :).

Andy: thanks again for helping out.
Component: General → Attachments
Product: Thunderbird → MailNews Core
QA Contact: general → attachments
Version: unspecified → 1.9.1 Branch
I am finding no recent examples on crash-stats - last 20 days Thunderbird and 2 days of firefox crashes. And in the January time frame of Brian's crash I see no crashes other than what are probably his.
Bottom line - I see no need for blocklisting.

Andy, any update?
Brian, are you still seeing this crash?
Status: UNCONFIRMED → RESOLVED
Closed: 14 years ago
Resolution: --- → INVALID
Summary: Crash in [@ thumbcache.dll@0x1f34] when attempting to save or attach files → Crash in [@ thumbcache.dll@0x1f34] when attempting to save or attach files. Also [@ thumbcache.dll@0x14c1 ], [@ thumbcache.dll@0x1f1d ], [@ thumbcache.dll@0x1f6f ]
Whiteboard: Microsoft thumbcache.dll
I heard nothing from the Office team on this.
Yes, I am still routinely encountering this issue.  In regular daily usage of Thunderbird it can occur approximately 1-5 times per day on my workstation.  In anecdotal observation, it seems to occur more consistently when the machine has been relatively idle for some time such as when I return to check e-mail after a meeting.

Since the original report, I should add that the issue also occurs in Firefox when attempting to save a file.  (I save files in Firefox more rarely than saving attachments in Thunderbird so I wasn't previously aware of the issue in Firefox.)

Because it occurs so frequently and this bug has not been observed by anyone else, I long ago stopped submitting the crash dumps when prompted to do so.  I figured that would just be unnecessary noise for whomever sifts through those.

I agree that I don't see any reason for this to block any builds.  As far as I can tell, no other users are affected.
Depends on: 585369
My understanding is that thumbcache.dll is part of Windows, not Office.
It is a relief (to a degree, at least) that this behavior has finally been observed by someone else as reported in the bug that Wayne just linked.  Still, the number of people using Thunderbird on Windows Server 2008 R2 is probably quite small.

That said, if there is any bandwidth available to investigate this further, I'd like to help.  Someone had contacted me a while back asking for additional details on this, but I don't think I heard back after I replied.

I've tried several times to catch something interesting using Process Monitor, but so far I've not captured any traces that are useful.  It seems the issue always stops by the time I've got Process Monitor fired up and capturing events.  I can keep trying that, but if there are any other ideas to better diagnose this (within reason; I don't particularly want to install another OS image), please let me know.

Thanks again to all that have spent time researching it to date.
(In reply to comment #15)
> It is a relief (to a degree, at least) that this behavior has finally been
> observed by someone else as reported in the bug that Wayne just linked. 
> Still, the number of people using Thunderbird on Windows Server 2008 R2 is
> probably quite small.
> 
> That said, if there is any bandwidth available to investigate this further,
> I'd like to help.  Someone had contacted me a while back asking for
> additional details on this, but I don't think I heard back after I replied.

if it was december 23, 2010 then it was me.

I have such servers, but never use them for Thunderbird - so I'm not in a position to test.

> I've tried several times to catch something interesting using Process
> Monitor, but so far I've not captured any traces that are useful.  It seems
> the issue always stops by the time I've got Process Monitor fired up and
> capturing events.  I can keep trying that, but if there are any other ideas
> to better diagnose this (within reason; I don't particularly want to install
> another OS image), please let me know.

can you do VMs?


xref getsatisfaction reports:
- http://getsatisfaction.com/mozilla_messaging/topics/thunderbird_crashing_on_windows_server_2008_r2 (lacks stacktrace)
- http://getsatisfaction.com/mozilla_messaging/topics/tb_3_1_6_every_add_on_crashes_sooner_or_later_in_windows_server_2008  (fundisc.dll/CCoMemString::Assign and ntshrui.dll/__delayLoadHelper2) - fundisc is function discovery, ref http://www.pcpr.org/fundisc-dll-error.php
Is this one of those dlls that's obsolete and is/should be blacklisted? Which version of TB are you running? 3.1.10 had some fixes for the dll blacklisting, iirc.
Crash Signature: [@ thumbcache.dll@0x1f34] [@ thumbcache.dll@0x14c1 ] [@ thumbcache.dll@0x1f1d ] [@ thumbcache.dll@0x1f6f ]
I Too am having this problem, all of my employee's are getting this daily.
Thunderbird 12.0.1
Windows Server 2008 R2 Version 6.1 Build 7601: Service pack 1

Thumbcache.dll Version 6.1.7601.17514

I'll collect up some crash id's today and post.
Just noticed in the Logs the previous version of thunderbird (10.0.2.4429) that we had installed was having the same problem.
Made an attempt to place the the thumbcache.dll file into the thunderbird directory, in hope of trying different versions of the dll. however thunderbird continued to load the version for the windows directory. (using process explorer to probe this)
Is there a way to force thunderbird to use the copy of the dll I've saved in the thunderbird directory? I assuming no as I dare say its not thunderbird calling the dll in the first place but the windows common open/save dialogue.
Not that I know of.
Crash Signature: [@ thumbcache.dll@0x1f34] [@ thumbcache.dll@0x14c1 ] [@ thumbcache.dll@0x1f1d ] [@ thumbcache.dll@0x1f6f ] → [@ thumbcache.dll@0x1f34] [@ thumbcache.dll@0x14c1 ] [@ thumbcache.dll@0x1f1d ] [@ thumbcache.dll@0x1f6f ]
We faced this Bug on several Win 2008 TerminalServer R2.
In some single cases these steps were successful in downgrading to 2.0.17, maybe this will help:

ininstall TB via Systemcontrol
clean Registry with CCleaner 
restart WTS and Client
install package 2.0.17
login with every user and check preferences
deactivate any updates via preferences
We have a number of customers working on WTS 2008 R2.
This bug appears there permanently many times a day.
These are systems for productive use, not at home.

Is there any workaround or bugfix we can apply?
Martin, maybe you wanna add some comments on this related bug also: 
https://bugzilla.mozilla.org/show_bug.cgi?id=585369
This isn't really a fix but a temporary workaround:
We installed Thunderbird 64bit (Early bird 10.0)
and haven't had ANY crashes since.
I downloaded the installer from.
http://wiki.mozilla-x86-64.com/Thunderbird:Download

The bonus here is it worked seamlessly with the existing thunderbird profiles, just install and run no mucking around.
@ __security_check_cookie 
is also somewhat common
bp-176548b7-b691-4895-ae51-9028a2130219  TB19

this issue occasionally comes up in support venues
Crash Signature: [@ thumbcache.dll@0x1f34] [@ thumbcache.dll@0x14c1 ] [@ thumbcache.dll@0x1f1d ] [@ thumbcache.dll@0x1f6f ] → [@ thumbcache.dll@0x1f34] [@ thumbcache.dll@0x14c1 ] [@ thumbcache.dll@0x1f1d ] [@ thumbcache.dll@0x1f6f ] [@ __security_check_cookie ]
Whiteboard: Microsoft thumbcache.dll → [Microsoft thumbcache.dll][support][workaround: comment 29, comment 30]
Wayne, thanks very much for the hint with the DEP. I'll switch off this completly on my Terminal-Server today and tell the users, they should report if there would be a next crash on add attachment.

It is very interesting, as i know, that ms office-apps crashes also sometimes on this terminal-server. 

sorry, but i don't understand your last comment exactly. can you explain the context of your link posted?
You need to log in before you can comment on or make changes to this bug.