Closed Bug 709830 Opened 13 years ago Closed 5 years ago

crash nsXULTreeBuilder::IsContainer when trying to subscribe to newsgroups

Categories

(Thunderbird :: General, defect)

8 Branch
defect
Not set
critical

Tracking

(Not tracked)

RESOLVED INCOMPLETE

People

(Reporter: bhearsum, Unassigned)

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-9d22a006-b9ee-4978-ad01-cfe0c2111212 .
============================================================= 

I experienced this crash right after attempting to close the "Manage Newsgroup Subscriptions" window after subscribing to a number of groups. This was done in a newly created profile right after adding the NNTP account.
Version: 8 → 9
bp-a1368ce2-6c94-4e58-b767-f48842111204 also cites newsgroup subscription
Crash Signature: [@ nsXULTreeBuilder::IsContainer] → [@ nsXULTreeBuilder::IsContainer] [@ nsXULTreeBuilder::IsContainer(int, int*)]
I changed the version to 9 originally because :bhearsum's was on 9, but the second one appears to be on version 8.

It looks like the first crash failed with bug 670935 fixed, which would have been my first guess for the cause of the crash.

Which news server had you used and which newsgroup had you subscribed to?
Version: 9 → 8
bug 592633 morphed the signature to ...
 nsXULTreeBuilder::IsContainer(int, bool*) 
bp-f51ebcc8-8615-4332-98b3-ee8c72130710
0	xul.dll	nsXULTreeBuilder::IsContainer	content/xul/templates/src/nsXULTreeBuilder.cpp:547
1	xul.dll	nsTreeBodyFrame::PrefillPropertyArray	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:1947
2	xul.dll	nsTreeBodyFrame::GetItemWithinCellAt	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:1463
3	xul.dll	nsTreeBodyFrame::GetCellAt	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:1638
4	xul.dll	nsTreeBodyFrame::GetCursor	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:2502
5	xul.dll	nsEventStateManager::UpdateCursor	content/events/src/nsEventStateManager.cpp:3574
6	xul.dll	nsEventStateManager::PreHandleEvent	content/events/src/nsEventStateManager.cpp:1062 


bp-b3a6d98f-512f-4dfb-acdb-a179b2121107 9.0.1 crashes at same line# as above
0	xul.dll	nsXULTreeBuilder::IsContainer	content/xul/templates/src/nsXULTreeBuilder.cpp:582
1	xul.dll	nsTreeBodyFrame::PrefillPropertyArray	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:1972
2	xul.dll	nsTreeBodyFrame::PaintRow	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:2921
3	xul.dll	nsTreeBodyFrame::PaintTreeBody	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:2853
4	xul.dll	PaintTreeBody	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:2778
5	xul.dll	nsDisplayGeneric::Paint	layout/base/nsDisplayList.h:1311
6	xul.dll	mozilla::FrameLayerBuilder::DrawThebesLayer	layout/base/FrameLayerBuilder.cpp:2143
7	xul.dll	mozilla::layers::BasicThebesLayer::PaintBuffer	gfx/layers/basic/BasicLayers.cpp:555
8	xul.dll	mozilla::layers::BasicShadowableThebesLayer::PaintBuffer	gfx/layers/basic/BasicLayers.cpp:2273
9	xul.dll	mozilla::layers::BasicThebesLayer::PaintThebes	gfx/layers/basic/BasicLayers.cpp:739
10	xul.dll	mozilla::layers::BasicLayerManager::PaintLayer	gfx/layers/basic/BasicLayers.cpp:1891 0	xul.dll	nsXULTreeBuilder::IsContainer	content/xul/templates/src/nsXULTreeBuilder.cpp:582
1	xul.dll	nsTreeBodyFrame::PrefillPropertyArray	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:1972
2	xul.dll	nsTreeBodyFrame::PaintRow	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:2921
3	xul.dll	nsTreeBodyFrame::PaintTreeBody	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:2853
4	xul.dll	PaintTreeBody	layout/xul/base/src/tree/src/nsTreeBodyFrame.cpp:2778
5	xul.dll	nsDisplayGeneric::Paint	layout/base/nsDisplayList.h:1311
6	xul.dll	mozilla::FrameLayerBuilder::DrawThebesLayer	layout/base/FrameLayerBuilder.cpp:2143
7	xul.dll	mozilla::layers::BasicThebesLayer::PaintBuffer	gfx/layers/basic/BasicLayers.cpp:555
8	xul.dll	mozilla::layers::BasicShadowableThebesLayer::PaintBuffer	gfx/layers/basic/BasicLayers.cpp:2273
9	xul.dll	mozilla::layers::BasicThebesLayer::PaintThebes	gfx/layers/basic/BasicLayers.cpp:739
10	xul.dll	mozilla::layers::BasicLayerManager::PaintLayer	gfx/layers/basic/BasicLayers.cpp:1891 

hg@1 575 nsTreeRows::iterator iter = mRows[aIndex];
hg@1 576
bienvenu@56056 577 PRBool isContainer;
bienvenu@56056 578 iter->mMatch->mResult->GetIsContainer(&isContainer);
hg@1 579 
bienvenu@56056 580 iter->mContainerType = isContainer
bienvenu@56056 581 ? nsTreeRows::eContainerType_Container
bienvenu@56056 582 : nsTreeRows::eContainerType_Noncontainer;
Crash Signature: [@ nsXULTreeBuilder::IsContainer] [@ nsXULTreeBuilder::IsContainer(int, int*)] → [@ nsXULTreeBuilder::IsContainer] [@ nsXULTreeBuilder::IsContainer(int, int*)] [@ nsXULTreeBuilder::IsContainer(int, bool*)]
This could change now as the IsContainer() method was reimplemented differently in nsSubscribableServer instead of the RDF backend.

(In reply to :aceman from comment #4)

This could change now as the IsContainer() method was reimplemented
differently in nsSubscribableServer instead of the RDF backend.

Indeed, no crashes with this signature after 52.x. Not even anything with signature containing nsXULTreeBuilder

Status: NEW → RESOLVED
Crash Signature: [@ nsXULTreeBuilder::IsContainer] [@ nsXULTreeBuilder::IsContainer(int, int*)] [@ nsXULTreeBuilder::IsContainer(int, bool*)] → [@ nsXULTreeBuilder::IsContainer]
Closed: 5 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.