646810 - crash [@ nsMsgXFGroupThread::RemoveChildAt] Mac

Status: RESOLVED WORKSFORME

(MailNews Core :: Backend, defect)

Description

[Wayne Mery (:wsmwk)]

crash [@ nsMsgXFGroupThread::RemoveChildAt]

trunk regression possibly, because only seen on 3.3a2 and 3.3a3.
roughly half the crashes are user seuak
from crash-stats. exists only on Mac.

bp-3a699965-01ee-43bf-8539-05a922110330
EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
0x4053e08
0		@0x7fffffe00800	
1	XUL	nsMsgXFGroupThread::RemoveChildAt	
2	XUL	nsMsgGroupThread::RemoveChildHdr	mailnews/base/src/nsMsgGroupThread.cpp:299
3	XUL	nsMsgGroupView::OnHdrDeleted	mailnews/base/src/nsMsgGroupView.cpp:710
4	XUL	nsMsgSearchDBView::OnHdrDeleted	mailnews/base/src/nsMsgSearchDBView.cpp:252
5	XUL	nsMsgDatabase::NotifyHdrDeletedAll	mailnews/db/msgdb/src/nsMsgDatabase.cpp:839
6	XUL	nsMsgDatabase::DeleteHeader	mailnews/db/msgdb/src/nsMsgDatabase.cpp:1942
7	XUL	nsMsgDatabase::DeleteMessages	mailnews/db/msgdb/src/nsMsgDatabase.cpp:1885
8	XUL	nsImapMailFolder::UpdateImapMailboxInfo	mailnews/imap/src/nsImapMailFolder.cpp:2842

bp-4ed58c91-f3b5-46a8-b6ea-8c1082110328 (seuak)
0		@0x7fffffe007bf	
1	XUL	nsMsgXFGroupThread::RemoveChildAt	
2	XUL	nsMsgGroupThread::RemoveChildHdr	mailnews/base/src/nsMsgGroupThread.cpp:299
3	XUL	nsMsgGroupView::OnHdrDeleted	mailnews/base/src/nsMsgGroupView.cpp:710
4	XUL	nsMsgSearchDBView::OnHdrDeleted	mailnews/base/src/nsMsgSearchDBView.cpp:252
5	XUL	nsMsgDatabase::NotifyHdrDeletedAll	mailnews/db/msgdb/src/nsMsgDatabase.cpp:839
6	XUL	nsMsgDatabase::DeleteHeader	mailnews/db/msgdb/src/nsMsgDatabase.cpp:1942
7	XUL	nsMsgDatabase::DeleteMessage	mailnews/db/msgdb/src/nsMsgDatabase.cpp:1859
8	XUL	nsImapOfflineSync::ProcessNextOperation	mailnews/imap/src/nsImapOfflineSync.cpp:850
9	XUL	nsImapMailFolder::UpdateFolderWithListener	mailnews/imap/src/nsImapMailFolder.cpp:839
10	XUL	nsAutoSyncState::UpdateFolder	mailnews/imap/src/nsAutoSyncState.cpp:436
11	XUL	nsImapMailFolder::InitiateAutoSync	mailnews/imap/src/nsImapMailFolder.cpp:9374

bp-80850a8a-c2d5-441e-abfd-5befc2110323
0		@0x7fffffe007bf	
1	XUL	nsMsgXFGroupThread::RemoveChildAt	
2	XUL	nsMsgGroupThread::RemoveChildHdr	mailnews/base/src/nsMsgGroupThread.cpp:299
3	XUL	nsMsgGroupView::OnHdrDeleted	mailnews/base/src/nsMsgGroupView.cpp:710
4	XUL	nsMsgSearchDBView::OnHdrDeleted	mailnews/base/src/nsMsgSearchDBView.cpp:252
5	XUL	nsMsgDatabase::NotifyHdrDeletedAll	mailnews/db/msgdb/src/nsMsgDatabase.cpp:839
6	XUL	nsMsgDatabase::DeleteHeader	mailnews/db/msgdb/src/nsMsgDatabase.cpp:1942
7	XUL	nsPop3Sink::CheckPartialMessages	mailnews/local/src/nsPop3Sink.cpp:253
8	XUL	nsPop3Sink::EndMailDelivery	mailnews/local/src/nsPop3Sink.cpp:404

Comment 1

[Wayne Mery (:wsmwk)]

still a strong crash for Mac
bp-7f9ac09d-eae3-4907-b499-3f71c2121227
bp-68cb4421-9bf8-42d0-927d-351032121226

Comment 2

[:aceman]

https://bugzilla.mozilla.org/show_bug.cgi?id=616229#c3

Comment 3

[Wayne Mery (:wsmwk)]

bug 616229 fixed with magnus' patch in version 17 appears to not to have helped Mac

signature in version 24 is nsMsgXFGroupThread::RemoveChildAt(int)
bp-37a8232e-ea6c-46ae-b33e-ba6c52131216
0		@0x7fffffe007bf	
1	XUL	nsMsgXFGroupThread::RemoveChildAt(int)	objdir-tb/x86_64/mozilla/dist/include/nsTArray.h
2	XUL	nsMsgGroupThread::RemoveChildHdr(nsIMsgDBHdr*, nsIDBChangeAnnouncer*)	mailnews/base/src/nsMsgGroupThread.cpp
3	XUL	nsMsgGroupView::OnHdrDeleted(nsIMsgDBHdr*, unsigned int, int, nsIDBChangeListener*)	mailnews/base/src/nsMsgGroupView.cpp
4	XUL	nsMsgSearchDBView::OnHdrDeleted(nsIMsgDBHdr*, unsigned int, int, nsIDBChangeListener*)	mailnews/base/src/nsMsgSearchDBView.cpp
5	XUL	nsMsgDatabase::NotifyHdrDeletedAll(nsIMsgDBHdr*, unsigned int, int, nsIDBChangeListener*)	mailnews/db/msgdb/src/nsMsgDatabase.cpp
6	XUL	nsMsgDatabase::DeleteHeader(nsIMsgDBHdr*, nsIDBChangeListener*, bool, bool)	mailnews/db/msgdb/src/nsMsgDatabase.cpp
7	XUL	nsMsgDatabase::DeleteMessages(unsigned int, unsigned int*, nsIDBChangeListener*)	mailnews/db/msgdb/src/nsMsgDatabase.cpp
8	XUL	nsImapMailFolder::UpdateImapMailboxInfo(nsIImapProtocol*, nsIMailboxSpec*)	mailnews/imap/src/nsImapMailFolder.cpp
9	XUL	(anonymous namespace)::SyncRunnable2<nsIImapMailFolderSink, nsIImapProtocol*, nsIMailboxSpec*>::Run()	mailnews/imap/src/nsSyncRunnableHelpers.cpp
10	XUL	nsThread::ProcessNextEvent(bool, bool*)	xpcom/threads/nsThread.cpp 

http://hg.mozilla.org/releases/comm-esr24/annotate/a5e50e44b4c4/mailnews/base/src/nsMsgGroupThread.cpp#l257 
sid@1757 253 if (!(flags & nsMsgMessageFlags::Read))
hg@0     254 ChangeUnreadChildCount(-1);
bugmail@2220 255 nsMsgViewIndex threadIndex = FindMsgHdr(child);
mwu@9431     256 bool wasFirstChild = threadIndex == 0;
bugmail@2220 257 nsresult rv = RemoveChildAt(threadIndex);

Comment 4

[Ludovic Hirlimann [:Usul]]

Removing myslef on all the bugs I'm cced on. Please NI me if you need something on MailNews Core bugs from me.

Comment 5

[Wayne Mery (:wsmwk)]

like bug 620343, there are no crashes with this signature