This bug was filed from the Socorro interface and is report bp-3d0c18b7-7dac-4c37-b06f-c278e2110127 . ============================================================= 0 @0xffff0f38 1 XUL nsMsgDBView::RemoveRows 2 XUL nsMsgDBView::CollapseByIndex nsMsgDBView.cpp:4800 3 XUL nsMsgThreadedDBView::OnNewHeader nsMsgThreadedDBView.cpp:668 4 XUL nsMsgQuickSearchDBView::AddHdr nsMsgQuickSearchDBView.cpp:174 5 XUL nsMsgThreadedDBView::MoveThreadAt nsMsgThreadedDBView.cpp:814 6 XUL nsMsgThreadedDBView::OnNewHeader nsMsgThreadedDBView.cpp:690 7 XUL nsMsgQuickSearchDBView::AddHdr nsMsgQuickSearchDBView.cpp:174 8 XUL nsMsgQuickSearchDBView::OnSearchHit nsMsgQuickSearchDBView.cpp:328 9 XUL nsMsgSearchSession::AddSearchHit nsMsgSearchSession.cpp:601 10 XUL nsMsgSearchOfflineMail::AddResultElement nsMsgLocalSearch.cpp:818 11 XUL nsMsgSearchOfflineMail::Search nsMsgLocalSearch.cpp:770 12 XUL nsMsgSearchSession::TimeSliceSerial nsMsgSearchSession.cpp:691 13 XUL nsMsgSearchSession::TimerCallback nsMsgSearchSession.cpp:655 14 XUL nsTimerImpl::Fire nsTimerImpl.cpp:425 15 XUL nsTimerEvent::Run nsTimerImpl.cpp:517 16 XUL nsThread::ProcessNextEvent nsThread.cpp:633 17 XUL NS_ProcessPendingEvents_P nsThreadUtils.cpp:200 18 XUL nsBaseAppShell::NativeEventCallback nsBaseAppShell.cpp:135 19 XUL nsAppShell::ProcessGeckoEvents nsAppShell.mm:405 20 CoreFoundation CFRunLoopRunSpecific 21 CoreFoundation CFRunLoopRunInMode 22 HIToolbox RunCurrentEventLoopInMode 23 HIToolbox ReceiveNextEventCommon 24 HIToolbox BlockUntilNextEventMatchingListInMode 25 AppKit _DPSNextEvent 26 AppKit -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] 27 AppKit -[NSApplication run] 28 XUL nsAppShell::Run nsAppShell.mm:752 29 XUL nsAppStartup::Run nsAppStartup.cpp:218 30 XUL XRE_main nsAppRunner.cpp:3775 31 thunderbird-bin main nsMailApp.cpp:101 32 thunderbird-bin thunderbird-bin@0xc75 I was switching to the unread filtered view. Mozilla/5.0 (Macintosh; Intel Mac OS X 10.5; rv:2.0b11pre) Gecko/20110126 Thunderbird/3.3a3pre
likely dup of bug 572883. and there is another signature of memmove | nsTArray_base::ShiftData(unsigned int, unsigned int, unsigned int, unsigned int) | nsMsgDBView::RemoveRows(unsigned int, int)
I was able to reproduce this crash twice in row with the following strs : 1) have a folder with the following settings : i) View -> sort by date, ascending , Threaded ii) View -> Messages -> all iii)View -> Threads -> Unread 2) hit bug 558303 and select that as he last visible thread in your view 3) click the unread button from the quick filter toolbar 4) crash
ludo, does this still reproduce for you?
Adding signatures from recent bp-a2fcade0-d26b-4b39-a211-6c1b72111205 and bp-61e2adb7-4ca7-4e66-91be-14be82120102 which the dupes were filed for.
> Duplicate of this bug: 707618 steps: Not reproducible - what I did was the following : 1) filter my bugmail folder for 'crash' 2) choose unread emails only. > Duplicate of this bug: 714610 I was able to crash TB twice in a row using these STRs. 1) Open bugmail folder 2) Settings are : i) View -> Sort by -> Date, Ascending, Threaded ii) View -> Message -> All iii)View -> Threads -> Unread 3) Enter a term in the filter bar 4) Select unread 5) Select all 6) press M 7) switch to firefox 8) come back to TB 9) press the x to clear the keyword by which you filter
is bp-328ad05e-760f-47da-8fee-cf2a02120102 the same crasher? Seems to be version 8 only, so perhaps not, but too early in morning for me to compare the stacks memmove | nsTArray_base<nsTArrayDefaultAllocator>::ShiftData(unsigned int, unsigned int, unsigned int, unsigned int) | nsMsgDBView::RemoveRows(unsigned int, int)
David I have a copy of the mbox and .msf for you to play with ? do you want them ?
Created attachment 585459 [details] [diff] [review] bullet proof removing of rows this should fix the crash, but there's something unhealthy going on with those STR's that indicates an underlying issue that I haven't had time to diagnose. I can try to generate a try server build with this patch for you, Ludo.
try server builds, if successful, here - http://email@example.com
(In reply to David :Bienvenu from comment #11) > try server builds, if successful, here - > http://ftp.mozilla.org/pub/mozilla.org/thunderbird/try-builds/ > firstname.lastname@example.org This fixed my crashes !!! Thanks David.
Is this Mac OS X only?
no, there's no reason for it to be platform dependent.
so, signature to check for after this lands in a release build v8 memmove | nsTArray_base<nsTArrayDefaultAllocator>::ShiftData(unsigned int, unsigned int, unsigned int, unsigned int) | nsMsgDBView::RemoveRows(unsigned int, int) v7 memmove | nsTArray_base<nsTArrayInfallibleAllocator>::ShiftData(unsigned int, unsigned int, unsigned int, unsigned int) | nsMsgDBView::RemoveRows(unsigned int, int) in contrast to this bug, last bugs to be fixed in this area, almost 2 years ago) were topcrash Bug 534858 - Crash on repeated collapse/expand of threads with subthreads killed by filter Bug 524064 - crash [@memmove | nsTArray_base::ShiftData ...
Comment on attachment 585459 [details] [diff] [review] bullet proof removing of rows I would very love to have this on aurora so I could switch back to using Aurora