73323 - Mail crashes when i read a message

Status: VERIFIED FIXED

(SeaMonkey :: MailNews: Message Display, defect, P1)

Description

[antonio montagnani]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux 2.2.16-22 i686; en-US; 0.8) Gecko/20010217
BuildID:    2001021712

If i read a particular message Mozilla crashes

Reproducible: Always
Steps to Reproduce:
I will try to forward the same message.Please try to open it

Actual Results:  as you try to oen the message in the in folder, immediate crash

Expected Results:  Make me read the message

Comment 1

[Keyser Sose]

Reporter try downloading the latest nightly and see if you can reproduce the crash.

Comment 2

[scottputterman]

In 73742 it's mentioned this could be a dup of that bug (which in turn could be
a dup of 72447). 

But, we'd need a stack trace and the message to verify it.

Comment 3

[Roland Lammel]

Confirming this problem on WinNT 4.0/SP5.

Simply reproducable:
- Start mozilla
- Start mail/news
- Read the "Welcome" mail from Mozilla
- Scroll down below the picture
... Crash

(The text below, just gets rendered half way, something like "Features")
Image is shown correctly

Comment 4

[Michael Kolmodin]

Similar problem on NT/ latest nightly. In a mailbox with about 100 messages,
always crashes when accessing certain message. The window for the message is
displayed, but before there is anything in it, it crashes.

Dump sent less than an hour ago with my email address as sender.

When I look at the message in Netscape 4.5 (on a Solaris box) the content of the
message is just a broken link. No crash, though.

Comment 5

[Roland Lammel]

With the latest nigthly 2001041804 the crash on reading the Mozilla welcome mail
is gone... whole message displayed.

(WinNT/SP5)

Comment 6

[Michael Kolmodin]

Attachment: IMAP log. One message read OK, then trying to access the thing.

Comment 7

[Michael Kolmodin]

Attachment: Offending message, as seen by "View source" in NS 4.5 /Solaris

Comment 8

[Michael Kolmodin]

Version tested: 
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.8.1+) Gecko/20010418

Comment 9

[Keyser Sose]

Marking NEW.

Comment 10

[Michael Kolmodin]

Bug does not occur on old Solaris 0.8 20010214. The message is displayed as
two GIF lines, nothing else. Looks strange.

Bug does occur on latest Solaris rv 0.8.1+ 20010419.
Since it's exists on both NT and Solaris, I guess platform/OS should be set
to 'All'. I'm not allowed to do that, though.

Comment 11

[Michael Kolmodin]

Still present in 
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9) Gecko/20010505.
Dump sent no more than five minutes ago with my email address as sender
and a reference to bug 73323 in the description field. /m

Comment 12

[Keyser Sose]

Michael can you get the talkback ID for us? Otherwise we cant find the crash
data. Thanks in advance.

Comment 13

[Michael Kolmodin]

Hm... Sure, I jus't don't understand how/where/when I can see the ID when
the dump is created. Any hint?!

BTW, I've reported bugs this way before and someone seems to have been
able to find it - see bug 63186.

Comment 14

[[e-mail] (gone - use [e-mail] instead)]

Attachment: Michael's crash stack.

Comment 15

[(not reading, please use [e-mail] instead)]

thanks for the stack.

we've had a bunch of bugs like this.  nsStdURL::SchemeIs() is deferencing null.
there's a big bug on fixing the url parsing code.  until then, the fix will
involve bulletproofing the caller.

can you attach the message to the bug report?  (copy it to local folder and then
attach the local folder to the bug report)  since you can't view the message in
mozilla, you'll have to copy multiple messages or use 4.x.

that way, we can verify the fix.

Comment 16

[(not reading, please use [e-mail] instead)]

I'm able to save the 4/19 03:01 attachment as foo.eml to reproduce this.

working on a fix now.

Comment 17

[(not reading, please use [e-mail] instead)]

about to attach a fix.  cc'ing pavlov for review.

Comment 18

[(not reading, please use [e-mail] instead)]

Attachment: fix, please review

Comment 19

[(not reading, please use [e-mail] instead)]

this has r=pavlov

he tells me this code is going away when he lands some fixes in his tree, so 
we'll have to check it again after he lands.

pavlov, which bug tracks that?

Comment 20

[(not reading, please use [e-mail] instead)]

fixed.

sr=bienvenu

Comment 21

[esther]

Using build 2001-05-23 on win, mac and linux, I attached the foo.eml to a 
message and was able to read the message without crashing.  I also saved the 
foo.eml and then did a send page. The aswrule.gif displayed as a candycane type 
horizontal bar and the "Sweets Bkgrd.gif" displayed as a faint multicolored 
rectangle.  Not sure what these are suppose to look like, they veiw the way I 
describe above when I open the .gif files in 4.7 browser.  The crash is fixed, 
not sure about pavlov's landing that takes this code away.  For now, verified.