74035 - Trunk Crash in ImageCache after sending mail message [@ ImageCache::Get]

Status: VERIFIED DUPLICATE of bug 76200

(Core :: Graphics: ImageLib, defect, P1)

Description

[lchiang]

Crash in ImageCache after sending mail message

Win32 2001-03-29-09-trunk build.  This may be depend on the particular mail 
message.

1. Select a message
2. Reply.
3. Send
4. Crash occurred.

Stack trace shows ImageLib:  Incident 28435385


 Call Stack:    (Signature = ImageCache::Get 6ad467d7) 
     
   ImageCache::Get                                      
[d:\builds\seamonkey\mozilla\modules\libpr0n\src\ImageCache.cpp, line 122]
   imgLoader::LoadImage                                            
[d:\builds\seamonkey\mozilla\modules\libpr0n\src\imgLoader.cpp, line 80] 
   nsImageFrame::AttributeChanged                                      
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsImageFrame.cpp, line 1458]
   nsCSSFrameConstructor::AttributeChanged                                            
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, 
line 9856]
   StyleSetImpl::AttributeChanged                                            
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleSet.cpp, line 1272]
   PresShell::AttributeChanged                                             
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 4431]
   nsDocument::AttributeChanged                                        
[d:\builds\seamonkey\mozilla\content\base\src\nsDocument.cpp, line 1687]
   nsHTMLDocument::AttributeChanged                                         
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLDocument.cpp, line 
1371]
   nsGenericHTMLElement::SetAttribute                                       
[d:\builds\seamonkey\mozilla\content\html\content\src\nsGenericHTMLElement.cpp, 
line 1404]
   nsHTMLImageElement::SetSrcInner                                         
[d:\builds\seamonkey\mozilla\content\html\content\src\nsHTMLImageElement.cpp, 
line 1078]
   nsHTMLImageElement::SetSrc                                             
[d:\builds\seamonkey\mozilla\content\html\content\src\nsHTMLImageElement.cpp, 
line 1186]
   nsMsgComposeAndSend::ProcessMultipartRelated                                       
[d:\builds\seamonkey\mozilla\mailnews\compose\src\nsMsgSend.cpp, line 1660]
   nsMsgComposeAndSend::HackAttachments                                            
[d:\builds\seamonkey\mozilla\mailnews\compose\src\nsMsgSend.cpp, line 2150]
   nsMsgComposeAndSend::Init                                        
[d:\builds\seamonkey\mozilla\mailnews\compose\src\nsMsgSend.cpp, line 2631] 
   nsMsgComposeAndSend::CreateAndSendMessage                                          
[d:\builds\seamonkey\mozilla\mailnews\compose\src\nsMsgSend.cpp, line 3510]
   nsMsgCompose::_SendMsg                                    
[d:\builds\seamonkey\mozilla\mailnews\compose\src\nsMsgCompose.cpp, line 621]
   nsMsgCompose::SendMsg                                          
[d:\builds\seamonkey\mozilla\mailnews\compose\src\nsMsgCompose.cpp, line 706]
   XPTC_InvokeByIndex                                         
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp, 
line 139]
   nsXPCWrappedNativeClass::CallWrappedMethod                                          
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativeclass.cpp, 
line 937]
   WrappedNative_CallMethod                                            
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp, 
line 245]
   js_Invoke                                         
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 788]
   js_Interpret                                        
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2680]
   js_Invoke                                            
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 804]
   nsXPCWrappedJSClass::CallMethod                                            
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappedjsclass.cpp, line 
876]
   nsXPCWrappedJS::CallMethod                                          
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappedjs.cpp, line 432]
   PrepareAndDispatch                                            
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcstubs.cpp, 
line 102]
   SharedStub                                            
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcstubs.cpp, 
line 124]
   XPTC_InvokeByIndex 
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp, 
line 139] 
   nsXPCWrappedNativeClass::CallWrappedMethod                                           
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativeclass.cpp, 
line 937]
   WrappedNative_CallMethod                                         
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp, 
line 245]
   js_Invoke                                            
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 788]
   js_Interpret                                          
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2680]
   js_Invoke                                           
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 804]
   js_InternalInvoke                                             
[d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 876]
   JS_CallFunctionValue                                             
[d:\builds\seamonkey\mozilla\js\src\jsapi.c, line 3301]
   nsJSContext::CallEventHandler                                           
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 943]
   nsJSEventListener::HandleEvent                                          
[d:\builds\seamonkey\mozilla\dom\src\events\nsJSEventListener.cpp, line 155]
   nsEventListenerManager::HandleEventSubType                                             
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, line 
917]
   nsEventListenerManager::HandleEvent                                            
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, line 
1851]
   nsXULElement::HandleDOMEvent                                            
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 
3634]
   PresShell::HandleDOMEventWithTarget                                            
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5149]
   nsButtonBoxFrame::MouseClicked 
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsButtonBoxFrame.cpp, line 181]
   nsButtonBoxFrame::HandleEvent                                            
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsButtonBoxFrame.cpp, line 128]
   PresShell::HandleEventInternal                                           
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5118]
   PresShell::HandleEventWithTarget                                           
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5081]
   nsEventStateManager::CheckForAndDispatchClick                                        
[d:\builds\seamonkey\mozilla\content\events\src\nsEventStateManager.cpp, line 
2073] 
   nsEventStateManager::PostHandleEvent                                            
[d:\builds\seamonkey\mozilla\content\events\src\nsEventStateManager.cpp, line 
1178] 
   PresShell::HandleEventInternal                                            
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5122] 
   PresShell::HandleEvent                                            
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5036] 
   nsView::HandleEvent                                          
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 372]
   nsViewManager::DispatchEvent                                          
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1982] 
   HandleEvent                                            
[d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 68]
   nsWindow::DispatchEvent                                           
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 692]
   nsWindow::DispatchWindowEvent                                          
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 709]
   nsWindow::DispatchMouseEvent                                             
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3989]  
   ChildWindow::DispatchMouseEvent                                             
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4197] 
   nsWindow::ProcessMessage                                         
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3022]
   nsWindow::WindowProc                                
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 944]

Comment 1

[Jan Carpenter]

This bug is a topcrasher, added topcrash keyword.  
Added [@ ImageCache::Get] for tracking.  

Here are some Comments that might help repro this crash:

   (28566525) URL: Deleted an email...
     (28566527) URL: Read an email...
     (28569507) URL: Read an email...
     (28575353) URL: Read an email...


Here is a recent stack trace:

Incident ID 28393593 
ImageCache::Get 
[d:\builds\seamonkey\mozilla\modules\libpr0n\src\ImageCache.cpp, line 122] 
imgLoader::LoadImage 
[d:\builds\seamonkey\mozilla\modules\libpr0n\src\imgLoader.cpp, line 80] 
nsImageFrame::AttributeChanged 
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsImageFrame.cpp, line 1458] 
nsCSSFrameConstructor::AttributeChanged 
[d:\builds\seamonkey\mozilla\layout\html\style\src\nsCSSFrameConstructor.cpp, 
line 9856] 
StyleSetImpl::AttributeChanged 
[d:\builds\seamonkey\mozilla\content\base\src\nsStyleSet.cpp, line 1272] 
PresShell::AttributeChanged 
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 4431] 
nsDocument::AttributeChanged 
[d:\builds\seamonkey\mozilla\content\base\src\nsDocument.cpp, line 1687] 
nsHTMLDocument::AttributeChanged 
[d:\builds\seamonkey\mozilla\content\html\document\src\nsHTMLDocument.cpp, line 
1370] 
nsGenericHTMLElement::SetAttribute 
[d:\builds\seamonkey\mozilla\content\html\content\src\nsGenericHTMLElement.cpp, 
line 1404] 
nsHTMLImageElement::SetSrcInner 
[d:\builds\seamonkey\mozilla\content\html\content\src\nsHTMLImageElement.cpp, 
line 1078] 
nsHTMLImageElement::SetSrc 
[d:\builds\seamonkey\mozilla\content\html\content\src\nsHTMLImageElement.cpp, 
line 1186] 
nsMsgComposeAndSend::ProcessMultipartRelated 
[d:\builds\seamonkey\mozilla\mailnews\compose\src\nsMsgSend.cpp, line 1660] 
nsMsgComposeAndSend::HackAttachments 
[d:\builds\seamonkey\mozilla\mailnews\compose\src\nsMsgSend.cpp, line 2150] 
nsMsgComposeAndSend::Init 
[d:\builds\seamonkey\mozilla\mailnews\compose\src\nsMsgSend.cpp, line 2631] 
nsMsgComposeAndSend::CreateAndSendMessage 
[d:\builds\seamonkey\mozilla\mailnews\compose\src\nsMsgSend.cpp, line 3510] 
nsMsgCompose::_SendMsg 
[d:\builds\seamonkey\mozilla\mailnews\compose\src\nsMsgCompose.cpp, line 621] 
nsMsgCompose::SendMsg 
[d:\builds\seamonkey\mozilla\mailnews\compose\src\nsMsgCompose.cpp, line 706] 
XPTC_InvokeByIndex 
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp, 
line 139] 
nsXPCWrappedNativeClass::CallWrappedMethod 
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativeclass.cpp, 
line 937] 
WrappedNative_CallMethod 
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp, 
line 245] 
js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 788] 
js_Interpret [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2680] 
js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 804] 
nsXPCWrappedJSClass::CallMethod 
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappedjsclass.cpp, line 
876] 
nsXPCWrappedJS::CallMethod 
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappedjs.cpp, line 432] 
PrepareAndDispatch 
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcstubs.cpp, 
line 102] 
SharedStub 
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcstubs.cpp, 
line 124] 
XPTC_InvokeByIndex 
[d:\builds\seamonkey\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp, 
line 139] 
nsXPCWrappedNativeClass::CallWrappedMethod 
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativeclass.cpp, 
line 937] 
WrappedNative_CallMethod 
[d:\builds\seamonkey\mozilla\js\src\xpconnect\src\xpcwrappednativejsops.cpp, 
line 245] 
js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 788] 
js_Interpret [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 2680] 
js_Invoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 804] 
js_InternalInvoke [d:\builds\seamonkey\mozilla\js\src\jsinterp.c, line 876] 
JS_CallFunctionValue [d:\builds\seamonkey\mozilla\js\src\jsapi.c, line 3301] 
nsJSContext::CallEventHandler 
[d:\builds\seamonkey\mozilla\dom\src\base\nsJSEnvironment.cpp, line 943] 
nsJSEventListener::HandleEvent 
[d:\builds\seamonkey\mozilla\dom\src\events\nsJSEventListener.cpp, line 155] 
nsEventListenerManager::HandleEventSubType 
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, 
line 917] 
nsEventListenerManager::HandleEvent 
[d:\builds\seamonkey\mozilla\content\events\src\nsEventListenerManager.cpp, 
line 1851] 
nsXULElement::HandleDOMEvent 
[d:\builds\seamonkey\mozilla\content\xul\content\src\nsXULElement.cpp, line 
3634] 
PresShell::HandleDOMEventWithTarget 
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5149] 
nsButtonBoxFrame::MouseClicked 
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsButtonBoxFrame.cpp, line 
181] 
nsButtonBoxFrame::HandleEvent 
[d:\builds\seamonkey\mozilla\layout\xul\base\src\nsButtonBoxFrame.cpp, line 
128] 
PresShell::HandleEventInternal 
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5118] 
PresShell::HandleEventWithTarget 
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5081] 
nsEventStateManager::CheckForAndDispatchClick 
[d:\builds\seamonkey\mozilla\content\events\src\nsEventStateManager.cpp, line 
2073] 
nsEventStateManager::PostHandleEvent 
[d:\builds\seamonkey\mozilla\content\events\src\nsEventStateManager.cpp, line 
1178] 
PresShell::HandleEventInternal 
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5122] 
PresShell::HandleEvent 
[d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 5036] 
nsView::HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 372] 
nsViewManager::DispatchEvent 
[d:\builds\seamonkey\mozilla\view\src\nsViewManager.cpp, line 1982] 
HandleEvent [d:\builds\seamonkey\mozilla\view\src\nsView.cpp, line 68] 
nsWindow::DispatchEvent 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 692] 
USER32.dll + 0x1a43f (0x77e8a43f) 
nsWindow::DispatchMouseEvent 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3985] 
ChildWindow::DispatchMouseEvent 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 4193] 
nsWindow::ProcessMessage 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 3018] 
nsWindow::WindowProc 
[d:\builds\seamonkey\mozilla\widget\src\windows\nsWindow.cpp, line 944] 
USER32.dll + 0x1820 (0x77e71820) 

Comment 2

[lchiang]

pavlov - any update to this bug?  Thanks.

Comment 3

[Shiva Thirumazhusai]

Adding qawanted keyword to get reproducible testcase.

Comment 4

[greer]

Adding Trunk to the summary for tracking.

Comment 5

[sairuh (rarely reading bugmail)]

*** Bug 74006 has been marked as a duplicate of this bug. ***

Comment 6

[sairuh (rarely reading bugmail)]

i'm wondering if this might be a dupe of bug 72447? that was marked fixed. if
this issue, however, is still occurring my guess is that it might be another
bug.

Comment 7

[Stuart Parmenter]

this particular crash should be gone, but the real problem is explained in bug 
76200.  marking dup

*** This bug has been marked as a duplicate of 76200 ***

Comment 8

[Terri Preston]

Verified Duplicate