58315 - crash in nsPref::PrefIsLocked()

Status: VERIFIED WORKSFORME

(SeaMonkey :: Preferences, defect, P3)

Description

[(not reading, please use [e-mail] instead)]

to reproduce,

rm -rf ~/.mozilla
cd ns/dist/bin
./netscape -addressbook

we'll automatically migrate your 4.x account, and then launch into addressbook.
in addressbook, the default sidebar channel is the buddy list.

I appear to get the crash as the aim setup dialog pops up.

here's the stack

#0  0x40a59852 in nsPref::PrefIsLocked (this=0x80fa588, pref=0x401a3cd0
"\004®\023", res=0x4) at nsPref.cpp:1164
#1  0x421468e9 in nsCPrefsManager::SetBoolPref (this=0x8493cf8, pref=0x87d3908
"aim.session.firsttime", val=0, buddyName=0x0, global=1) at
/builds/seth/seamonkey/ns/AIMGlue/src/nsCPrefsManager.cpp:249
#2  0x40145f95 in XPTC_InvokeByIndex (that=0x8493cf8, methodIndex=10,
paramCount=4, params=0xbfffddcc) at xptcinvoke_unixish_x86.cpp:134
#3  0x40abbdbd in nsXPCWrappedNativeClass::CallWrappedMethod (this=0x87dcdd8,
cx=0x87b2bd8, wrapper=0x87b2ef0, desc=0x8890898, callMode=CALL_METHOD, argc=4,
argv=0x88c98ec, vp=0xbfffdf50) at xpcwrappednativeclass.cpp:913
#4  0x40abdf17 in WrappedNative_CallMethod (cx=0x87b2bd8, obj=0x88956c0, argc=4,
argv=0x88c98ec, vp=0xbfffdf50) at xpcwrappednativejsops.cpp:228
#5  0x401ecbd4 in js_Invoke (cx=0x87b2bd8, argc=4, flags=0) at jsinterp.c:820
#6  0x40200997 in js_Interpret (cx=0x87b2bd8, result=0xbfffe918) at jsinterp.c:2620
#7  0x401ecc4d in js_Invoke (cx=0x87b2bd8, argc=1, flags=2) at jsinterp.c:837
#8  0x401ecfac in js_InternalInvoke (cx=0x87b2bd8, obj=0x87c3bc0,
fval=142688992, flags=0, argc=1, argv=0xbfffebcc, rval=0xbfffea9c) at jsinterp.c:909
#9  0x401be8a7 in JS_CallFunctionValue (cx=0x87b2bd8, obj=0x87c3bc0,
fval=142688992, argc=1, argv=0xbfffebcc, rval=0xbfffea9c) at jsapi.c:3193
#10 0x4052a66d in nsJSContext::CallEventHandler (this=0x87b2660,
aTarget=0x87c3bc0, aHandler=0x88142e0, argc=1, argv=0xbfffebcc,
aBoolResult=0xbfffeb1c, aReverseReturnResult=0) at nsJSEnvironment.cpp:906
#11 0x4057eebc in nsJSEventListener::HandleEvent (this=0x87e0a18,
aEvent=0x887900c) at nsJSEventListener.cpp:154
#12 0x4145333c in nsEventListenerManager::HandleEventSubType (this=0x8805c88,
aListenerStruct=0x8805d18, aDOMEvent=0x887900c, aCurrentTarget=0x87e6358,
aSubType=1, aPhaseFlags=7) at nsEventListenerManager.cpp:788
#13 0x41454f45 in nsEventListenerManager::HandleEvent (this=0x8805c88,
aPresContext=0x87b8508, aEvent=0xbffff0fc, aDOMEvent=0xbffff0a8,
aCurrentTarget=0x87e6358, aFlags=7, aEventStatus=0xbffff120) at
nsEventListenerManager.cpp:1365
#14 0x4053f4d9 in GlobalWindowImpl::HandleDOMEvent (this=0x87e6348,
aPresContext=0x87b8508, aEvent=0xbffff0fc, aDOMEvent=0xbffff0a8, aFlags=1,
aEventStatus=0xbffff120) at nsGlobalWindow.cpp:511
#15 0x4177ad96 in DocumentViewerImpl::LoadComplete (this=0x87b7348, aStatus=0)
at nsDocumentViewer.cpp:671
#16 0x40f83431 in nsWebShell::OnEndDocumentLoad (this=0x87b3530,
loader=0x87b3c10, channel=0x87b2818, aStatus=0) at nsWebShell.cpp:951
#17 0x40fd8e5c in nsDocLoaderImpl::FireOnEndDocumentLoad (this=0x87b3c10,
aLoadInitiator=0x87b3c10, aDocChannel=0x87b2818, aStatus=0) at nsDocLoader.cpp:804
#18 0x40fd884f in nsDocLoaderImpl::DocLoaderIsEmpty (this=0x87b3c10, aStatus=0)
at nsDocLoader.cpp:610
#19 0x40fd86a7 in nsDocLoaderImpl::OnStopRequest (this=0x87b3c10,
aChannel=0x888c510, aCtxt=0x0, aStatus=0, aMsg=0x4017d990) at nsDocLoader.cpp:552
#20 0x40d690f2 in nsLoadGroup::RemoveChannel (this=0x87b3ca0, channel=0x888c510,
ctxt=0x0, aStatus=0, aStatusArg=0x4017d990) at nsLoadGroup.cpp:566
#21 0x40dcd583 in nsJARChannel::OnStopRequest (this=0x888c510,
jarExtractionTransport=0x8833d80, context=0x0, aStatus=0, aStatusArg=0x4017d990)
at nsJARChannel.cpp:705
#22 0x40d50649 in nsOnStopRequestEvent::HandleEvent (this=0x888ae68) at
nsAsyncStreamListener.cpp:301
#23 0x40d4fbf7 in nsStreamListenerEvent::HandlePLEvent (aEvent=0x886ba48) at
nsAsyncStreamListener.cpp:97
#24 0x4012722e in PL_HandleEvent (self=0x886ba48) at plevent.c:580
#25 0x4012704c in PL_ProcessPendingEvents (self=0x80af508) at plevent.c:513
#26 0x40128e99 in nsEventQueueImpl::ProcessPendingEvents (this=0x80af4e0) at
nsEventQueue.cpp:356
#27 0x407c1704 in event_processor_callback (data=0x80af4e0, source=8,
condition=GDK_INPUT_READ) at nsAppShell.cpp:158
#28 0x407c133f in our_gdk_io_invoke (source=0x8280be0, condition=G_IO_IN,
data=0x82fa588) at nsAppShell.cpp:58
#29 0x409843ca in ?? () from /usr/lib/libglib-1.2.so.0
#30 0x40985a86 in ?? () from /usr/lib/libglib-1.2.so.0
#31 0x40986041 in ?? () from /usr/lib/libglib-1.2.so.0
#32 0x409861e1 in ?? () from /usr/lib/libglib-1.2.so.0
#33 0x408b27a9 in gtk_main ()
#34 0x407c1dfa in nsAppShell::Run (this=0x80b1dc0) at nsAppShell.cpp:335
#35 0x40746414 in ?? () from
/builds/seth/seamonkey/ns/dist/bin/components/libnsappshell.so
#36 0x80561f5 in main1 (argc=2, argv=0xbffffaf4, nativeApp=0x0) at
nsAppRunner.cpp:990
#37 0x805689e in main (argc=2, argv=0xbffffaf4) at nsAppRunner.cpp:1171
#38 0x4037ccb3 in ?? ()

Comment 1

[(not reading, please use [e-mail] instead)]

topcrasher.  I don't think people are crashing this way, but this may be related
to the top crasher.

Comment 2

[Alec Flett]

I need to go look at the talkback reports and see if this is still happening

Comment 3

[Paul Chen]

Bumping off the mozilla0.9 radar, I don't see any traction, and I don't think 
Alec will get to this for 0.9

Comment 4

[Alec Flett]

actually, marking worksforme since I haven't heard about this crash in ages and ages

Comment 5

[Shiva Thirumazhusai]

Moving all the Works For Me bugs to talkback user account for future reference.

Comment 6

[Shiva Thirumazhusai]

We are gathering all the Resolved and WFM bugs which are happened to be topcrash 
bugs and assigning it to talkback. I am marking all of them as RESOLVED WFM.

Comment 7

[sairuh (rarely reading bugmail)]

mass verification of WorksForMe bugs: to find all bugspam pertaining to this,
set your search string to "IfItWorksForSlappyTheSquirrelThenItWFM".

if you think this particular bug is *still* an open issue, please make sure of
the following before reopening:

a. that it's still a problem with ***recent trunk builds*** on the all
appropriate platform[s]

b. provide clear steps to reproduce (unless a good test case is already in the
bug report), making sure it pertains to the original problem (avoid morphing as
much as possible :)