Closed
Bug 629487
Opened 13 years ago
Closed 12 years ago
crash [@ nsMsgDBView::RemoveRows]
Categories
(MailNews Core :: Backend, defect)
MailNews Core
Backend
Tracking
(thunderbird11 fixed)
RESOLVED
FIXED
Thunderbird 12.0
Tracking | Status | |
---|---|---|
thunderbird11 | --- | fixed |
People
(Reporter: Usul, Assigned: Bienvenu)
References
Details
(Keywords: crash, reproducible, Whiteboard: [STR comment 2][ccbr][rare])
Crash Data
Attachments
(1 file)
1.00 KB,
patch
|
standard8
:
review+
standard8
:
approval-comm-aurora+
|
Details | Diff | Splinter Review |
This bug was filed from the Socorro interface and is report bp-3d0c18b7-7dac-4c37-b06f-c278e2110127 . ============================================================= 0 @0xffff0f38 1 XUL nsMsgDBView::RemoveRows 2 XUL nsMsgDBView::CollapseByIndex nsMsgDBView.cpp:4800 3 XUL nsMsgThreadedDBView::OnNewHeader nsMsgThreadedDBView.cpp:668 4 XUL nsMsgQuickSearchDBView::AddHdr nsMsgQuickSearchDBView.cpp:174 5 XUL nsMsgThreadedDBView::MoveThreadAt nsMsgThreadedDBView.cpp:814 6 XUL nsMsgThreadedDBView::OnNewHeader nsMsgThreadedDBView.cpp:690 7 XUL nsMsgQuickSearchDBView::AddHdr nsMsgQuickSearchDBView.cpp:174 8 XUL nsMsgQuickSearchDBView::OnSearchHit nsMsgQuickSearchDBView.cpp:328 9 XUL nsMsgSearchSession::AddSearchHit nsMsgSearchSession.cpp:601 10 XUL nsMsgSearchOfflineMail::AddResultElement nsMsgLocalSearch.cpp:818 11 XUL nsMsgSearchOfflineMail::Search nsMsgLocalSearch.cpp:770 12 XUL nsMsgSearchSession::TimeSliceSerial nsMsgSearchSession.cpp:691 13 XUL nsMsgSearchSession::TimerCallback nsMsgSearchSession.cpp:655 14 XUL nsTimerImpl::Fire nsTimerImpl.cpp:425 15 XUL nsTimerEvent::Run nsTimerImpl.cpp:517 16 XUL nsThread::ProcessNextEvent nsThread.cpp:633 17 XUL NS_ProcessPendingEvents_P nsThreadUtils.cpp:200 18 XUL nsBaseAppShell::NativeEventCallback nsBaseAppShell.cpp:135 19 XUL nsAppShell::ProcessGeckoEvents nsAppShell.mm:405 20 CoreFoundation CFRunLoopRunSpecific 21 CoreFoundation CFRunLoopRunInMode 22 HIToolbox RunCurrentEventLoopInMode 23 HIToolbox ReceiveNextEventCommon 24 HIToolbox BlockUntilNextEventMatchingListInMode 25 AppKit _DPSNextEvent 26 AppKit -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] 27 AppKit -[NSApplication run] 28 XUL nsAppShell::Run nsAppShell.mm:752 29 XUL nsAppStartup::Run nsAppStartup.cpp:218 30 XUL XRE_main nsAppRunner.cpp:3775 31 thunderbird-bin main nsMailApp.cpp:101 32 thunderbird-bin thunderbird-bin@0xc75 I was switching to the unread filtered view. Mozilla/5.0 (Macintosh; Intel Mac OS X 10.5; rv:2.0b11pre) Gecko/20110126 Thunderbird/3.3a3pre
Reporter | ||
Updated•13 years ago
|
Component: General → Backend
Product: Thunderbird → MailNews Core
QA Contact: general → backend
Comment 1•13 years ago
|
||
likely dup of bug 572883. and there is another signature of memmove | nsTArray_base::ShiftData(unsigned int, unsigned int, unsigned int, unsigned int) | nsMsgDBView::RemoveRows(unsigned int, int)
Updated•13 years ago
|
Crash Signature: [@ nsMsgDBView::RemoveRows]
Reporter | ||
Comment 2•13 years ago
|
||
I was able to reproduce this crash twice in row with the following strs : 1) have a folder with the following settings : i) View -> sort by date, ascending , Threaded ii) View -> Messages -> all iii)View -> Threads -> Unread 2) hit bug 558303 and select that as he last visible thread in your view 3) click the unread button from the quick filter toolbar 4) crash
Whiteboard: [STR comment 2]
Comment 3•12 years ago
|
||
ludo, does this still reproduce for you?
Crash Signature: [@ nsMsgDBView::RemoveRows] → [@ nsMsgDBView::RemoveRows]
[@ libc-2.13.so@0x7ab84 ]
Comment 6•12 years ago
|
||
Adding signatures from recent bp-a2fcade0-d26b-4b39-a211-6c1b72111205 and bp-61e2adb7-4ca7-4e66-91be-14be82120102 which the dupes were filed for.
Crash Signature: [@ nsMsgDBView::RemoveRows]
[@ libc-2.13.so@0x7ab84 ] → [@ nsMsgDBView::RemoveRows]
[@ libc-2.13.so@0x7ab84 ]
[@ libsystem_c.dylib@0x27d91]
[@ libsystem_c.dylib@0x27d4b]
Comment 7•12 years ago
|
||
> Duplicate of this bug: 707618 steps: Not reproducible - what I did was the following : 1) filter my bugmail folder for 'crash' 2) choose unread emails only. > Duplicate of this bug: 714610 I was able to crash TB twice in a row using these STRs. 1) Open bugmail folder 2) Settings are : i) View -> Sort by -> Date, Ascending, Threaded ii) View -> Message -> All iii)View -> Threads -> Unread 3) Enter a term in the filter bar 4) Select unread 5) Select all 6) press M 7) switch to firefox 8) come back to TB 9) press the x to clear the keyword by which you filter
Keywords: reproducible
Comment 8•12 years ago
|
||
is bp-328ad05e-760f-47da-8fee-cf2a02120102 the same crasher? Seems to be version 8 only, so perhaps not, but too early in morning for me to compare the stacks memmove | nsTArray_base<nsTArrayDefaultAllocator>::ShiftData(unsigned int, unsigned int, unsigned int, unsigned int) | nsMsgDBView::RemoveRows(unsigned int, int)
Reporter | ||
Comment 9•12 years ago
|
||
David I have a copy of the mbox and .msf for you to play with ? do you want them ?
Reporter | ||
Updated•12 years ago
|
Crash Signature: [@ nsMsgDBView::RemoveRows]
[@ libc-2.13.so@0x7ab84 ]
[@ libsystem_c.dylib@0x27d91]
[@ libsystem_c.dylib@0x27d4b] → [@ nsMsgDBView::RemoveRows]
[@ libc-2.13.so@0x7ab84 ]
[@ libsystem_c.dylib@0x27d91]
[@ libsystem_c.dylib@0x27d4b]
[@ libsystem_c.dylib@0x27d80]
Assignee | ||
Comment 10•12 years ago
|
||
this should fix the crash, but there's something unhealthy going on with those STR's that indicates an underlying issue that I haven't had time to diagnose. I can try to generate a try server build with this patch for you, Ludo.
Assignee: nobody → dbienvenu
Assignee | ||
Comment 11•12 years ago
|
||
try server builds, if successful, here - http://ftp.mozilla.org/pub/mozilla.org/thunderbird/try-builds/bienvenu@nventure.com-79dc3d931ae6
Reporter | ||
Comment 12•12 years ago
|
||
(In reply to David :Bienvenu from comment #11) > try server builds, if successful, here - > http://ftp.mozilla.org/pub/mozilla.org/thunderbird/try-builds/ > bienvenu@nventure.com-79dc3d931ae6 This fixed my crashes !!! Thanks David.
Assignee | ||
Comment 14•12 years ago
|
||
no, there's no reason for it to be platform dependent.
OS: Mac OS X → All
Hardware: x86 → All
Assignee | ||
Updated•12 years ago
|
Attachment #585459 -
Flags: review?(mbanner)
Updated•12 years ago
|
Whiteboard: [STR comment 2] → [STR comment 2][ccbr]
Updated•12 years ago
|
Attachment #585459 -
Flags: review?(mbanner) → review+
Comment 15•12 years ago
|
||
so, signature to check for after this lands in a release build v8 memmove | nsTArray_base<nsTArrayDefaultAllocator>::ShiftData(unsigned int, unsigned int, unsigned int, unsigned int) | nsMsgDBView::RemoveRows(unsigned int, int) v7 memmove | nsTArray_base<nsTArrayInfallibleAllocator>::ShiftData(unsigned int, unsigned int, unsigned int, unsigned int) | nsMsgDBView::RemoveRows(unsigned int, int) in contrast to this bug, last bugs to be fixed in this area, almost 2 years ago) were topcrash Bug 534858 - Crash on repeated collapse/expand of threads with subthreads killed by filter Bug 524064 - crash [@memmove | nsTArray_base::ShiftData ...
Whiteboard: [STR comment 2][ccbr] → [STR comment 2][ccbr][rare]
Reporter | ||
Comment 16•12 years ago
|
||
Comment on attachment 585459 [details] [diff] [review] bullet proof removing of rows I would very love to have this on aurora so I could switch back to using Aurora
Attachment #585459 -
Flags: approval-comm-aurora?
Assignee | ||
Comment 17•12 years ago
|
||
http://hg.mozilla.org/comm-central/rev/b63861438954
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Target Milestone: --- → Thunderbird 12.0
Updated•12 years ago
|
Attachment #585459 -
Flags: approval-comm-aurora? → approval-comm-aurora+
Comment 18•12 years ago
|
||
Checked in: http://hg.mozilla.org/releases/comm-aurora/rev/40db7b14d2b0
status-thunderbird11:
--- → fixed
You need to log in
before you can comment on or make changes to this bug.
Description
•