Closed Bug 551428 Opened 15 years ago Closed 9 years ago

crash moving folder to imap account from another account [@ nsImapMailCopyState::`scalar deleting destructor''(unsigned int)]. memory corruption?

Categories

(MailNews Core :: Networking: IMAP, defect)

x86
Windows Vista
defect
Not set
critical

Tracking

(Not tracked)

RESOLVED WORKSFORME

People

(Reporter: wsmwk, Unassigned)

Details

(Keywords: crash, Whiteboard: [rare])

Crash Data

crash moving folder to imap account from another account [@ nsImapMailCopyState::`scalar deleting destructor''(unsigned int)] #8 crash for v3.0.3, so topcrash no trunk or v3.1 crashes. the crashes I looked at (about 4) are all pop accounts being copied from. although this crash comment claims "Move 2 folders from 1 imap account to another" bp-992b85c8-cbd2-405a-9a7c-d3f732100305 0 @0xb22e04 1 thunderbird.exe nsImapMailCopyState::`scalar deleting destructor' 2 thunderbird.exe nsImapMailCopyState::Release netwerk/cache/src/nsDiskCacheStreams.cpp:297 3 xpcom_core.dll nsCOMPtr_base::~nsCOMPtr_base objdir-tb/mozilla/xpcom/build/nsCOMPtr.cpp:81 4 thunderbird.exe nsImapUrl::~nsImapUrl mailnews/imap/src/nsImapUrl.cpp:110 5 thunderbird.exe nsImapUrl::`scalar deleting destructor' 6 thunderbird.exe nsMsgMailNewsUrl::Release mailnews/base/util/nsMsgMailNewsUrl.cpp:88 7 thunderbird.exe nsPop3URL::Release mailnews/news/src/nsNntpUrl.cpp:81 8 thunderbird.exe XPCJSRuntime::GCCallback js/src/xpconnect/src/xpcjsruntime.cpp:776 9 thunderbird.exe DOMGCCallback dom/src/base/nsJSEnvironment.cpp:3714 10 thunderbird.exe XPCCycleCollectGCCallback js/src/xpconnect/src/nsXPConnect.cpp:411 11 js3250.dll js_GC js/src/jsgc.cpp:3792 12 js3250.dll JS_GC js/src/jsapi.cpp:2459 13 thunderbird.exe nsXPConnect::Collect js/src/xpconnect/src/nsXPConnect.cpp:477 14 xpcom_core.dll nsCycleCollector::Collect xpcom/base/nsCycleCollector.cpp:2389 15 xpcom_core.dll nsCycleCollector_collect xpcom/base/nsCycleCollector.cpp:3048 16 thunderbird.exe nsJSContext::CC dom/src/base/nsJSEnvironment.cpp:3534 17 thunderbird.exe nsJSContext::MaybeCC dom/src/base/nsJSEnvironment.cpp:3602 18 thunderbird.exe nsJSContext::CCIfUserInactive dom/src/base/nsJSEnvironment.cpp:3619 19 thunderbird.exe GCTimerFired dom/src/base/nsJSEnvironment.cpp:3642 20 xpcom_core.dll nsTimerImpl::Fire xpcom/threads/nsTimerImpl.cpp:420 21 xpcom_core.dll nsTimerEvent::Run xpcom/threads/nsTimerImpl.cpp:512 bp-2c0c62da-38b3-47aa-94d9-3de672100306 0 @0x1821609 1 thunderbird.exe nsImapMailCopyState::`scalar deleting destructor' 2 thunderbird.exe nsImapMailCopyState::Release netwerk/cache/src/nsDiskCacheStreams.cpp:297 3 xpcom_core.dll nsCOMPtr_base::~nsCOMPtr_base objdir-tb/mozilla/xpcom/build/nsCOMPtr.cpp:81 4 thunderbird.exe nsImapUrl::~nsImapUrl mailnews/imap/src/nsImapUrl.cpp:110 5 thunderbird.exe nsImapUrl::`scalar deleting destructor' 6 thunderbird.exe nsMsgMailNewsUrl::Release mailnews/base/util/nsMsgMailNewsUrl.cpp:88 7 thunderbird.exe nsPop3URL::Release mailnews/news/src/nsNntpUrl.cpp:81 8 thunderbird.exe XPCJSRuntime::GCCallback js/src/xpconnect/src/xpcjsruntime.cpp:776 9 thunderbird.exe DOMGCCallback dom/src/base/nsJSEnvironment.cpp:3714 10 thunderbird.exe XPCCycleCollectGCCallback js/src/xpconnect/src/nsXPConnect.cpp:411 11 js3250.dll js_GC js/src/jsgc.cpp:3792 12 js3250.dll JS_GC js/src/jsapi.cpp:2459 13 thunderbird.exe nsXPConnect::Collect js/src/xpconnect/src/nsXPConnect.cpp:477
Those are weird stacks - nsPop3URL's would not refer to imap urls, and thus destroying a pop3 url wouldn't cause an imap url to get deleted. That would seem to imply some sort of memory corruption.
not all the stacks have pop on the stack. bp-14af0ffd-f292-4256-9935-10ab42100331 emailed reporter (utefeye) - only crash found with an address "I was trying to movce folders from one account to another, after moving one, i would have to close and reopen program to move the next one.. otherwise, it would not do more then 1 move. also, listing one email as pop, and other one as imap, how can this be changed without creating a new account" bp-bf576224-7edc-4b04-a7e1-711692100331 no pop on this stack (no email address) 0 @0xa23e04 1 thunderbird.exe nsImapMailCopyState::`scalar deleting destructor' 2 thunderbird.exe nsImapMailCopyState::Release mailnews/imap/src/nsImapMailFolder.cpp:7875 3 xpcom_core.dll nsCOMPtr_base::~nsCOMPtr_base objdir-tb/mozilla/xpcom/build/nsCOMPtr.cpp:81 4 thunderbird.exe nsImapUrl::~nsImapUrl mailnews/imap/src/nsImapUrl.cpp:110 5 thunderbird.exe nsImapUrl::`scalar deleting destructor' 6 thunderbird.exe nsMsgMailNewsUrl::Release mailnews/base/util/nsMsgMailNewsUrl.cpp:88 7 thunderbird.exe nsSmtpUrl::Release mailnews/local/src/nsMailboxUrl.cpp:91 "Moving folders from Local to account folders causes a "does not exist" error and subsequent crash." bp-2df69b52-44b7-4495-bc39-b46cd2100330 0 @0x3122e04 1 thunderbird.exe nsImapMailCopyState::`scalar deleting destructor' 2 thunderbird.exe nsImapMailCopyState::Release netwerk/cache/src/nsDiskCacheStreams.cpp:297 3 xpcom_core.dll nsCOMPtr_base::~nsCOMPtr_base objdir-tb/mozilla/xpcom/build/nsCOMPtr.cpp:81 4 thunderbird.exe nsImapUrl::~nsImapUrl mailnews/imap/src/nsImapUrl.cpp:110 5 thunderbird.exe nsImapUrl::`scalar deleting destructor' 6 thunderbird.exe nsMsgMailNewsUrl::Release mailnews/base/util/nsMsgMailNewsUrl.cpp:88 7 thunderbird.exe nsPop3URL::Release mailnews/news/src/nsNntpUrl.cpp:81 bp-53544135-3823-492e-b771-5c3922100402 shortest stack I've seen, no comments unfortunately 0 @0x182b404 1 thunderbird.exe nsImapMailCopyState::`scalar deleting destructor' 2 thunderbird.exe nsImapMailCopyState::Release mailnews/imap/src/nsImapMailFolder.cpp:7875 3 xpcom_core.dll nsProxyReleaseEvent::Run objdir-tb/mozilla/xpcom/build/nsProxyRelease.cpp:52 4 xpcom_core.dll nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:521 5 xpcom_core.dll NS_ProcessNextEvent_P objdir-tb/mozilla/xpcom/build/nsThreadUtils.cpp:247 6 thunderbird.exe nsBaseAppShell::Run widget/src/xpwidgets/nsBaseAppShell.cpp:170 7 thunderbird.exe nsAppStartup::Run toolkit/components/startup/src/nsAppStartup.cpp:193 8 thunderbird.exe XRE_main toolkit/xre/nsAppRunner.cpp:3321 some of the comments... * Uploading to gmail imap * Ordner in Imap Posteingang von anderem konto verschoben (ca. 120 Mails) moving folders. away from desk; maybe system went to screensaver... * I was trying to move three folders from Local Folders to my Exchange mailbox. It appeared to create the folders, but not move the contents - which remained intact as folders in Local Folders. * I was transferring a folder from one IMAP host to another IMAP host. I collapsed a view of the drafts folder, and TBird tanked. * I was copying large amounts (number and size) of messages from one imap account to another. Shredder told me that the destination was out of diskspace. After 10 minutes of inactivity from my side, this crash happened * copy emails from pc to imap and in the same time indexing the emails * Connected to an IMAP server and to an exchange server via IMAP. I can copy one folder but the next folder fails with TRYCREATE folder is not found. After this TB crashes
dup of bug 531568?
POP account -> IMAP account folder copy. Seems to be mostly with large folders, large emails and trees with four+ levels deep. Also subfolders that have a ".", Robert P. Montana, ends up with an extra subfolder and a hang: > Folder > Robert > P Montana
Crash Signature: [@ nsImapMailCopyState::`scalar deleting destructor''(unsigned int)]
nothing in crash-stats for version 11 or newer. Unclear whether then crash is gone, or has morphed.
Whiteboard: [closeme 2012-06-25]
Crash Signature: [@ nsImapMailCopyState::`scalar deleting destructor''(unsigned int)] → [@ nsImapMailCopyState::`scalar deleting destructor''(unsigned int)] [@ @0x0 | nsImapMailCopyState::`scalar deleting destructor''(unsigned int)]
Summary: crash moving folder to imap account from another account [@ nsImapMailCopyState::`scalar deleting destructor''(unsigned int)] → crash moving folder to imap account from another account [@ nsImapMailCopyState::`scalar deleting destructor''(unsigned int)]. memory corruption?
Whiteboard: [closeme 2012-06-25] → [rare]
The topcrash- keyword is not actively maintained and pollutes queries with topcrash.
Keywords: topcrash-
Crash Signature: [@ nsImapMailCopyState::`scalar deleting destructor''(unsigned int)] [@ @0x0 | nsImapMailCopyState::`scalar deleting destructor''(unsigned int)] → [@ nsImapMailCopyState::`scalar deleting destructor''(unsigned int)] [@ @0x0 | nsImapMailCopyState::`scalar deleting destructor''(unsigned int)] [@ nsImapMailCopyState::`scalar deleting destructor''] [@ @0x0 | nsImapMailCopyState::`scalar deleting dest…
between all four signatures there's only a few crashes per month. These either all morphed to signatures covered in other bugs (bug 833406 for example) or the crash is gone
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.