74770 - occasional crash opening mail three-pane window

Status: VERIFIED DUPLICATE of bug 74997

(SeaMonkey :: MailNews: Message Display, defect, P1)

Description

[Chris Waterson]

I occasionally crash opening the mail three-pane window. I'll attach a stack 
trace (which shows the crash to be somewhere deep in the bowels of the 
outliner's style cache).

As best I can tell, I crash when I have new mail messages. (The crash occurs 
immediately after the `ding' that lets me know that...I've got mail!) I looked 
at the skidmarks for a while, and it looks to me that 
StyleSetImpl::ResolvePseudoStyleFor() has itself a bad rules array from 
EnsureArray() (the vtable appears to point to garbage, and I crash calling 
through a pointer to 0x4). Maybe someone is Release()'ing it in 
WalkRuleProcessors()?

Comment 1

[Chris Waterson]

Attachment: stack crawl at crash

Comment 2

[esther]

This is what I found- Modern skin, With today's build 3-4 (not yesterday's 3-3), 
I crash on winme & mac and after exiting the app only if I have messages 
displayed in the thread pane. 
1. All accounts collapsed (no auto login on startup), Thread pane has Account 
Central-File|Exit=no crash
2. IMAP and POP accounts collapsed (no auto login on startup), Local Folders 
expanded, Thread pane has Account Central-File|Exit=no crash
3. IMAP and POP accounts collapsed (no auto login on startup), Local Folders 
expanded, select folder to display messsage in Thread pane, File|Exit=CRASH
With Linux, I crash sometimes in scenarios 1 & 2 but not all the time.  In 
scenario 3 linux crashes all the time.
Waiting for talkback reports. 

Comment 3

[scottputterman]

I just commented in 74735, but it sounds like this bug has more details.  I
crashed a couple of times doing this today using 200104040 on Win 2000.

Comment 4

[Scott MacGregor]

*** Bug 74735 has been marked as a duplicate of this bug. ***

Comment 5

[Scott MacGregor]

this is now a smoketest blocker as I'm marking a smoketest blocker I have as a
dup of this one. Adding the keywords to reflect that. 

Comment 6

[Scott MacGregor]

*** Bug 74997 has been marked as a duplicate of this bug. ***

Comment 7

[kinmoz]

The outliner is causing the ViewManager to recursively paint ... which isn't 
supported.

If I skip over the mOutlinerWidget->Scroll() call in the debugger, in 
nsOutlinerBodyFrame::ScrollInternal(), while my INBOX is loading, I don't crash 
and mail comes up fine.

Comment 8

[(not reading, please use [e-mail] instead)]

I'm still coming up to speed on this bug.

but I recently made the thread pane scroll to the first new message when you
load a folder.

is that change exposing causing this crash?

Comment 9

[Jason Kersey]

I originally got around this crash by deleting mozreg/dat files and trying 
again.  I am now back to crashing right after hitting enter in the password 
dialog.  
http://cyclone/reports/incidenttemplate.CFM?reportID=124&style=0&tc=3&cp=1&ck1=S
User+email+address&cd1=%25kerz%40netscape%2Ecom%25&co1=like&bbid=28760176 is my 
Talkback incident url, if it helps at all.  

Comment 10

[kinmoz]

So I just tried a patch from sspitzer that disables the mail code that scrolls 
to the new message. That doesn't stop the crash.

I think the problem here is that during a paint, the outliner invalidates it's 
scrollbar which causes the maxpos attribute to be set, triggering a scroll that 
does a synchronous paint. If we have to adjust the maxpos during the 
invalidation, we should probably tell ViewManager that we want an asynchronous 
paint during the scroll so that we don't re-enter the ViewManager.

In any case I think this is a bug hyatt should look into.

Comment 11

[(not reading, please use [e-mail] instead)]

*** This bug has been marked as a duplicate of 74997 ***

Comment 12

[esther]

verified dup

Comment 13

[Scott MacGregor]

*** Bug 74988 has been marked as a duplicate of this bug. ***