620343 - crash [@ nsMsgXFGroupThread::FindMsgHdr(nsIMsgDBHdr*)] keeps crashing during various things.

Status: RESOLVED WORKSFORME

(MailNews Core :: Backend, defect)

Description

[Linda E.]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.4; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.4; en-US; rv:1.9.2.13) Gecko/20101207 Thunderbird/3.1.7

I had no problem before this last update. (3.1.7) It doesn't quit at start-up but it does all other times, doesn't seem to be a pattern.  It seems to slow down like it's "thinking" and them it crashes/quits. A dialog box always shows up and it reports it to you but I just want to go back to last version.  I had no problems before this update. The update was downloaded by Thunderbird and installed right away. I have an older sage (450mhz) iMac running OSX 10.4.11 and Firefox for my browser. I turned off all plug-ins but lightning but that's off now too.  

Reproducible: Didn't try

Actual Results:  
I just do everything like normal and sometimes it quits when I'm opening an email, sometimes when I'm trying to check mail, sometimes when I'm going between folders...it seems to make no difference what I'm doing.  It seems to crash at least once a day, often 2 or 3 times if I'm online a lot that day.

Expected Results:  
I just want it to stop crashing. I see no pattern where it only does it during a certain action.  I wish it did.

It is the 3.1.7 update that messed everything up.  That's recent.  I don't know what else to say.  I cannot narrow it down to one action or another.  I use no themes or any of that.  Lightning was all I was using and that's off now.  I just used that for a week or so.  Oh, and I played around with the tool bars. Making them for the email window and for the app itself.  It has 50mgs cash I believe, the default. I see where you say "if reporting a crash, note module"etc. I don't know what you mean by that. aren't .dll's Window's only?

Comment 1

[Ludovic Hirlimann [:Usul]]

Could you follow the instructions at http://support.mozillamessaging.com/en-US/kb/Mozilla+Crash+Reporter and give us a crashid ?

Comment 2

[Linda E.]

I just had Thunderbird quit on me twice after filing this bug report. Not ten min. ago.  Once it was trying to delete an email and the other was trying to file an email.

Comment 3

[Wayne Mery (:wsmwk)]

please see ludo's comment

also, you might try safe mode https://support.mozillamessaging.com/en-US/kb/Safe+Mode then please update the bug

Comment 4

[Linda E.]

it crashed/quit again tonight.  I was trying to move an email after closing it.

Comment 5

[Wayne Mery (:wsmwk)]

Providing your crash report ID would allow us to help you better
http://support.mozillamessaging.com/en-US/kb/Mozilla+Crash+Reporter

Comment 6

[Linda E.]

I have gone into the console and tried to get the ID you spoke of.  I have a long blurb (rich text) that I'd like to send you.  Is this all viewable by the public?  Not sure I want to have all my computers inner workings on the net in this day and age.  a short bit of what I found out is pasted in below...

-------console log before I opened the /firefox-bin.crash.log--------

(process:263): Json-CRITICAL **: json_node_get_int: assertion `node != NULL' failed
2010-12-26 14:20:59.927 LittleSnitchDaemon[260] Little Snitch: The application "thunderbird-bin" wants to connect to iw-in-f16.1e100.net (74.125.95.16) on TCP port 993 (imaps)
------------------------------

(process:263): Json-CRITICAL **: json_node_get_int: assertion `node != NULL' failed
2010-12-26 14:31:23.715 GrowlHelperApp[271] Thunderbird: Thunderbird (The current operation on 'Drafts' did not succeed. The mail server for account [e-mail] responded: The specified mailbox does not exist.) - Priority 0
------------------------------
(process:263): Json-CRITICAL **: json_node_get_int: assertion `node != NULL' failed
thunderbird-bin(273,0xa000ed88) malloc: ***  Deallocation of a pointer not malloced: 0x480d150; This could be a double free(), or free() called with the middle of an allocated block; Try setting environment variable MallocHelp to see tools to help debug
------------------------------

It shows a lot of these too...
(process:263): Json-CRITICAL **: json_node_get_int: assertion `node != NULL' failed
2010-12-26 17:30:26.976 GrowlHelperApp[271] Growl: User returned (User activity detected. New notifications will not be sticky by default.) - Priority -1

-------------------------------
FWIW...Grow and lilsnitch I believe are used by logmein. (a program my son talked me into so he can fix my computer from another state)


This below is from the console app crash reporter/firefox-bin.crash.log
there is nothing there for Thunderbird at all.  no listing for T-bird.

**********

Host Name:      chris-imac
Date/Time:      2008-08-25 12:11:59.400 -0700
OS Version:     10.4.8 (Build 8L127)
Report Version: 4

Command: firefox-bin
Path:    /Applications/Firefox 2.app/Contents/MacOS/firefox-bin
Parent:  WindowServer [69]

Version: 2.0.0.16 (2.0.0.16)

PID:    213
Thread: 0

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_INVALID_ADDRESS (0x0001) at 0x3b787d07

Thread 0 Crashed:
0   ...romedia.Flash Player.plugin 	0x06effd70 

There is an awful lot more of this one...
------------------------------
this is the crash report details I clicked send at 6;26 PST

Add-ons: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.1.7
BuildID: 20101207114001
CrashTime: 1293413737
EMCheckCompatibility: true
Email: [e-mail]
FramePoisonBase: 00000000f0dea000
FramePoisonSize: 4096
InstallTime: 1292140989
ProductName: Thunderbird
ReleaseChannel: release
SecondsSinceLastCrash: 65362
StartupTime: 1293400780
Theme: classic/1.0
Throttleable: 1
Vendor: 
Version: 3.1.7

This report also contains technical information about the state of the application when it crashed.

Comment 7

[Wayne Mery (:wsmwk)]

your crash id is not available from the console. please reread http://support.mozillamessaging.com/en-US/kb/Mozilla+Crash+Reporter#Viewing_reports_outside_of_Thunderbird

perhaps your crash is described at Bug 593132 comment 18

Comment 8

[Wayne Mery (:wsmwk)]

Linda, unfortunately the information above is not useful. your crasn information for Thunderbird is at the Thunderbird specific location (not firefox) at ~/Library/Thunderbird/Crash Reports/submitted/ per http://support.mozillamessaging.com/en-US/kb/Mozilla+Crash+Reporter#Viewing_reports_outside_of_Thunderbird  and failing that see https://developer.mozilla.org/En/How_to_get_a_stacktrace_for_a_bug_report#Mac (but substitute the word Thunderbird for Firefox)

please try in the following order
1. https://support.mozillamessaging.com/en-US/kb/Safe+Mode
2. delete global-messages-db.sqlite from thunderbird profile [1]
3. delete Inbox.msf from thunderbird profile [1]

do you have large folders near or over 2GB?
any near or over 4GB?
also, please check how much memory thunderbird is using just prior to the crash

[1] http://support.mozillamessaging.com/en-US/kb/Profiles

Comment 9

[Andrea Garulli]

Hi.
I am having similar problems to those reported by Linda.
Here is a crash id I submitted on Jan 22

bp-ed2ed21e-202c-46c9-a9a5-4ae862110122

My largest folder is 1.2 GB. The total size of my profile is approx 14 GB (yes: I am using thunderbird since long time!)

I am quite new with mac, but nothing happened until I installed version 3.1.7 of Thunderbird. Then, at least three times Thunderbird started quitting repeatedly. Also rebooting did not help, it seems completely casual.

Thanks for any help you can give.

Comment 10

[Wayne Mery (:wsmwk)]

Andrea, you crash is @fts3SegWriterAdd which matches to bug 552050

(we still dont' know what Linda's crash is about)

Comment 11

[Joshua Cranmer [:jcranmer]]

RESOLVED INCOMPLETE due to lack of response to previous question. If you feel this change was made in error, please respond to this bug with your reasons why.

Comment 12

[Linda E.]

I'm sorry, I'm not a techie and all this jargon is giving me a brain freeze.  I have had little problems since I turned off Logmein and the programs that it uses. Plus I stopped using the icons on the email itself and deleted or moved it from the drop down menu instead.  
As for previous request to do a stack trace for a bug report, I did that for Thunderbird and there was no listing. Just for Firefox which is why I submitted that.  I had nothing else. 
I have since went to the library/thunderbird/crash reports/submitted and I have 14 files in that folder. Not sure how to upload all of them.  There is also a file called submit.log and another called lastcrash.  Would any of those help? 
the only thing in the lastcrash document is the number 1294346432.  the other file (submit.log) shows a list of dates it was submitted successfully.-

 [Wed Dec 15 16:00:14 2010] Crash report submitted successfully
[Wed Dec 15 16:48:52 2010] Crash report submitted successfully
[Thu Dec 16 22:00:51 2010] Crash report submitted successfully
[Sat Dec 18 17:05:23 2010] Crash report submitted successfully
[Sun Dec 19 18:16:35 2010] Crash report submitted successfully
[Sun Dec 19 23:24:00 2010] Crash report submitted successfully
[Mon Dec 20 00:44:49 2010] Crash report submitted successfully
[Mon Dec 20 00:46:54 2010] Crash report submitted successfully
[Sat Dec 25 23:31:49 2010] Crash report submitted successfully
[Sun Dec 26 18:26:44 2010] Crash report submitted successfully
[Fri Dec 31 19:53:08 2010] Crash report submitted successfully
[Sat Jan  1 16:03:10 2011] Crash report submitted successfully
[Tue Jan  4 18:09:31 2011] Crash report submitted successfully
[Thu Jan  6 12:42:07 2011] Crash report submitted successfully

I hope something here helps.  I'm sorry I've not gotten back to you sooner.  These programming things overwhelm my tired old brain and I give up.

Comment 13

[Wayne Mery (:wsmwk)]

from library/thunderbird/crash reports/submitted we only need the filenames.
the data was already sent to the server and no longer resides on your Mac

Comment 14

[Wayne Mery (:wsmwk)]

regression perhaps of bug 481824 (3.0b4) as timeless points out for Bug 616229 - crash [@ nsMsgXFGroupThread::SetMsgHdrAt(unsigned int, nsIMsgDBHdr*)]. I can't tell via crash-stats because crash rate is low and it gives me back to june 2010. oldest crash seen is 3.0.4/20100317103207

bp-397187da-f7a7-4c9c-bce9-cab322110104 is one of Linda's crashes
nsMsgXFGroupThread::FindMsgHdr(nsIMsgDBHdr*)
EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash Address	0xa847000
0	thunderbird-bin	nsMsgXFGroupThread::FindMsgHdr	
1	thunderbird-bin	nsMsgGroupThread::RemoveChildHdr	mailnews/base/src/nsMsgGroupThread.cpp:296
2	thunderbird-bin	nsMsgGroupView::OnHdrDeleted	mailnews/base/src/nsMsgGroupView.cpp:710
3	thunderbird-bin	nsMsgSearchDBView::OnHdrDeleted	mailnews/base/src/nsMsgSearchDBView.cpp:250
4	thunderbird-bin	nsMsgDatabase::NotifyHdrDeletedAll	mailnews/db/msgdb/src/nsMsgDatabase.cpp:724
5	thunderbird-bin	nsMsgDatabase::DeleteHeader	mailnews/db/msgdb/src/nsMsgDatabase.cpp:1810
6	thunderbird-bin	nsMsgDatabase::DeleteMessages	mailnews/db/msgdb/src/nsMsgDatabase.cpp:1753
7	thunderbird-bin	nsImapMailFolder::CopyMessagesOffline	mailnews/imap/src/nsImapMailFolder.cpp:7178
8	thunderbird-bin	nsImapMailFolder::CopyMessages	mailnews/imap/src/nsImapMailFolder.cpp:7336
9	thunderbird-bin	nsMsgCopyService::DoNextCopy	mailnews/base/src/nsMsgCopyService.cpp:321
10	thunderbird-bin	nsMsgCopyService::CopyMessages	mailnews/base/src/nsMsgCopyService.cpp:263
11	thunderbird-bin	nsImapMailFolder::DeleteMessages	mailnews/imap/src/nsImapMailFolder.cpp:2405
12	thunderbird-bin	nsMsgSearchDBView::ProcessRequestsInOneFolder	mailnews/base/src/nsMsgSearchDBView.cpp:1097
13	thunderbird-bin	nsMsgSearchDBView::DeleteMessages	mailnews/base/src/nsMsgSearchDBView.cpp:908
14	thunderbird-bin	nsMsgDBView::ApplyCommandToIndices	mailnews/base/src/nsMsgDBView.cpp:2726
15	thunderbird-bin	nsMsgDBView::DoCommand	mailnews/base/src/nsMsgDBView.cpp:2393
16	thunderbird-bin	nsMsgSearchDBView::DoCommand	mailnews/base/src/nsMsgSearchDBView.cpp:807

bp-504bc426-4b5c-427a-860a-0a1a42100623 v3.0.6 is the oldest crash I can pull up

Comment 15

[Wayne Mery (:wsmwk)]

same stack apparently ... nsTArray<nsDOMWorkerFeature*>::IndexOf<nsDOMWorkerFeature*, nsDefaultComparator<nsDOMWorkerFeature*, nsDOMWorkerFeature*> >(nsDOMWorkerFeature* const&, unsigned int, nsDefaultComparator<nsDOMWorkerFeature*, nsDOMWorkerFeature*> const&) | nsMsgXFGroupTh...
bp-9d920e64-a7c8-4812-b11d-27d032110306

Comment 16

[Wayne Mery (:wsmwk)]

Linda, do you still have crashes?


This is exceedingly rare. In last 4 months only 2 crashes of version 10 or newer, both v12.0.1
bp-27b764a4-14b4-4476-a72a-c54ad2120610
bp-ed7b0d52-3e41-4e46-b6b6-7240a2120516

For the prior 4 months, a small number of v8 crashes, such as bp-e15cd626-f6c5-4460-ae19-142982111227

So if Linda no longer crash, then perhaps we close this bug report.

Comment 17

[Wayne Mery (:wsmwk)]

the crash IDs in comment 16 and the following represent two distinct users
bp-27b764a4-14b4-4476-a72a-c54ad2120610
bp-59c5e4c6-bcfc-4094-bf95-e4be12120628

bug 616229 may be related, but it travels through 
 	nsMsgGroupThread::RemoveChildHdr 	mailnews/base/src/nsMsgGroupThread.cpp:298
whereas the crash for this bug travels through
 	nsMsgGroupThread::RemoveChildHdr 	mailnews/base/src/nsMsgGroupThread.cpp:289

Linda's email address fails, so we won't be hearing from her.

Comment 19

[Wayne Mery (:wsmwk)]

xref also bug 646810 

timeless wrote in another bug...
the old code wasn't worried about nulls, the new code
http://hg.mozilla.org/releases/comm-1.9.2/diff/986be3aa6df3/mailnews/base/src/nsMsgGroupThread.cpp#l1.135
passes null to the crashing function


bp-f1b78782-9045-4346-bdd2-7d3562130220 TB17.0.2

0	xul.dll	nsMsgXFGroupThread::FindMsgHdr	mailnews/base/src/nsMsgGroupThread.cpp:835
1	xul.dll	nsMsgGroupThread::RemoveChildHdr	mailnews/base/src/nsMsgGroupThread.cpp:256
2	xul.dll	nsMsgGroupView::OnHdrDeleted	mailnews/base/src/nsMsgGroupView.cpp:651 

bugmail@2220 827 nsMsgViewIndex nsMsgXFGroupThread::FindMsgHdr(nsIMsgDBHdr *hdr)
bugmail@2220 828{
bugmail@2220 829 nsMsgKey msgKey;
bugmail@2220 830 hdr->GetMessageKey(&msgKey);
bugmail@2220 831 nsCOMPtr<nsIMsgFolder> folder;
bugmail@2220 832 hdr->GetFolder(getter_AddRefs(folder));
ehsan@13612  833 uint32_t index = 0;
bugzilla@10479 834 while (true) {
bugmail@2220 835 index = m_keys.IndexOf(msgKey, index);

Comment 20

[Wayne Mery (:wsmwk)]

magnus, does we need testcases for this and the other bugs?  Or is it likely to be resolved via code inspection.  ref bug 616229 comment 2

Comment 21

[Magnus Melin [:mkmelin]]

bug 616229 was a pretty clear case. dunno what's happening in this one...

Comment 22

[Ludovic Hirlimann [:Usul]]

Removing myslef on all the bugs I'm cced on. Please NI me if you need something on MailNews Core bugs from me.

Comment 23

[Wayne Mery (:wsmwk)]

No crashes with any component of the signature in last several months
https://crash-stats.mozilla.com/signature/?date=%3E2016-03-01&signature=nsMsgXFGroupThread%3A%3AFindMsgHdr&_columns=date&_columns=product&_columns=version&_columns=build_id&_columns=platform&_columns=reason&_columns=address&_sort=-date&page=1