552384 - Crash upon displaying an offending email [@ @0x0 | js_FinalizeObject] [Mac] caused by bad memory

Status: RESOLVED INVALID

(Core :: JavaScript Engine, defect)

Description

[Ferdinando]

User-Agent:       Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; it; rv:1.9.2) Gecko/20100115 Firefox/3.6
Build Identifier: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.8) Gecko/20100227 Lightning/1.0b1 Thunderbird/3.0.3

when clicking on a particular email header to show the content of the email, TB crashes. I tryed creating a new profile, the problem persists. I attach the offendin email.

Reproducible: Always

Steps to Reproduce:
1.click on email header
2.
3.
Actual Results:  
TB crash

Expected Results:  
open the email content

Comment 1

[Ferdinando]

Attachment: offenting email

saved file from microsoft exchange, because unable to open the email from TB

Comment 2

[Ludovic Hirlimann [:Usul]]

Can you provide us with a crash id (http://kb.mozillazine.org/Breakpad) ?

Comment 3

[Ferdinando]

Attachment: last crash ID, submitted

Comment 4

[Ferdinando]

After 2 weeks of work by help desk guys, they realized that the crashes were caused (indirectly?) by RAM defects.

Comment 5

[timeless]

Signature	@0x0 | js_FinalizeObject
UUID	df65fffa-56ab-45be-b76f-1218c2100315
Time 	2010-03-15 13:56:48.162425
Uptime	26
Last Crash	33 seconds before submission
Product	Thunderbird
Version	3.0.3
Build ID	20100227170704
Branch	1.9.1
OS	Mac OS X
OS Version	10.5.8 9L30
CPU	x86
CPU Info	GenuineIntel family 6 model 15 stepping 11
Crash Reason	EXC_BAD_ACCESS / KERN_PROTECTION_FAILURE
Crash Address	0x0
User Comments	
Processor Notes 	
Crashing Thread
Frame 	Module 	Signature [Expand] 	Source
0 		@0x0 	
1 	libmozjs.dylib 	js_FinalizeObject 	js/src/jsobj.cpp:3417
2 	libmozjs.dylib 	js_GC 	js/src/jsgc.cpp:3585
3 	libmozjs.dylib 	JS_GC 	js/src/jsapi.cpp:2459
4 	thunderbird-bin 	nsXPConnect::Collect 	js/src/xpconnect/src/nsXPConnect.cpp:477
5 	libxpcom_core.dylib 	nsCycleCollector::Collect 	xpcom/base/nsCycleCollector.cpp:2389
6 	libxpcom_core.dylib 	nsCycleCollector_collect 	xpcom/base/nsCycleCollector.cpp:3048
7 	thunderbird-bin 	nsJSContext::CC 	dom/src/base/nsJSEnvironment.cpp:3534
8 	thunderbird-bin 	nsJSContext::MaybeCC 	dom/src/base/nsJSEnvironment.cpp:3602
9 	thunderbird-bin 	nsUserActivityObserver::Observe 	dom/src/base/nsJSEnvironment.cpp:287
10 	libxpcom_core.dylib 	nsObserverList::NotifyObservers 	xpcom/ds/nsObserverList.cpp:130
11 	libxpcom_core.dylib 	nsObserverService::NotifyObservers 	xpcom/ds/nsObserverService.cpp:181
12 	thunderbird-bin 	nsUITimerCallback::Notify 	content/events/src/nsEventStateManager.cpp:357
13 	libxpcom_core.dylib 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:423
14 	libxpcom_core.dylib 	nsTimerEvent::Run 	xpcom/threads/nsTimerImpl.cpp:512
15 	libxpcom_core.dylib 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:521
16 	libxpcom_core.dylib 	NS_ProcessPendingEvents_P 	nsThreadUtils.cpp:200
17 	thunderbird-bin 	nsBaseAppShell::NativeEventCallback 	widget/src/xpwidgets/nsBaseAppShell.cpp:121
18 	thunderbird-bin 	nsAppShell::ProcessGeckoEvents 	widget/src/cocoa/nsAppShell.mm:406
19 	CoreFoundation 	CFRunLoopRunSpecific 	
20 	CoreFoundation 	CFRunLoopRunInMode 	
21 	HIToolbox 	RunCurrentEventLoopInMode 	
22 	HIToolbox 	ReceiveNextEventCommon 	
23 	HIToolbox 	BlockUntilNextEventMatchingListInMode 	
24 	AppKit 	_DPSNextEvent 	
25 	AppKit 	-[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] 	
26 	AppKit 	-[NSApplication run] 	
27 	thunderbird-bin 	nsAppShell::Run 	widget/src/cocoa/nsAppShell.mm:759
28 	thunderbird-bin 	nsAppStartup::Run 	toolkit/components/startup/src/nsAppStartup.cpp:193
29 	thunderbird-bin 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3321
30 	thunderbird-bin 	main 	mail/app/nsMailApp.cpp:103
31 	thunderbird-bin 	thunderbird-bin@0x2641 	
32 	thunderbird-bin 	thunderbird-bin@0x2568 	
33 		@0x1

Comment 6

[Wayne Mery (:wsmwk)]

invalid per reporter comment 4