793447 - crash in libxul when displaying "Next Unread"

Status: RESOLVED DUPLICATE of bug 702165

(SeaMonkey :: MailNews: Message Display, defect)

Description

[Tony Mechelynck [:tonymec]]

This bug was filed from the Socorro interface and is 
report bp-c02549f0-dc62-4b24-b4e1-a815f2120922 .
============================================================= 
Mozilla/5.0 (X11; Linux x86_64; rv:18.0) Gecko/18.0 Firefox/18.0 SeaMonkey/2.15a1 ID:20120921110141 c-c:f181aef1ee3f m-c:3c68fdd4f77a

This crash happened when I hit N (Next Unread) in the 3-pane window. Not reproducible AFAIK.

Here are the dump headings:

Signature 	libxul.so@0x136385c | ld-2.14.1.so@0x10efc More Reports Search
UUID	c02549f0-dc62-4b24-b4e1-a815f2120922
Date Processed	2012-09-22 20:04:18
Uptime	13002
Last Crash	10.1 hours before submission
Install Age	3.6 hours since version was first installed.
Install Time	2012-09-22 16:26:42
Product	SeaMonkey
Version	2.15a1
Build ID	20120921110141
Release Channel	default
OS	Linux
OS Version	0.0.0 Linux 3.1.10-1.16-desktop #1 SMP PREEMPT Wed Jun 27 05:21:40 UTC 2012 (d016078) x86_64
Build Architecture	amd64
Build Architecture Info	family 15 model 4 stepping 1
Crash Reason	SIGSEGV
Crash Address	0x0
User Comments	N ("Next Unread") in 3-pane window
App Notes 	

OpenGL: Mesa Project -- Software Rasterizer -- 2.1 Mesa 7.11 -- texture_from_pixmap

WebGL? WebGL- 

Processor Notes 	This dump is too long and has triggered the automatic truncation routine
EMCheckCompatibility	False
Winsock LSP	

Adapter Vendor ID	
Adapter Device ID	




Socorro has no symbols for this hourly build, but I downloaded the crashreporter-symbols.zip. Let's see… (??? are addresses beyond the end of the symbol table)

0: libxul.so@0x136385c in nsMsgQuickSearchDBView::OnSearchDone
1: ld-2.14.1.so@0x10efc 
2: libnspr4.so in PR_Unlock at nsprpub/pr/src/pthreads/ptsynch.c:205
3: libnspr4.so in PR_ExitMonitor at nsprpub/pr/src/pthreads/ptsynch.c:557
4: libxul.so@0x10379aa in nsXPCWrappedJS::Release
5: libxul.so@0x1389bdc in nsMsgSearchSession::NotifyListenersDone
6: libxul.so@0x138a029 in nsMsgSearchSession::InterruptSearch
7: libxul.so@0x2e670cf in ???
8: libxul.so@0x138a3bb in nsMsgSearchSession::~nsMsgSearchSession (1st instance)
9: libxul.so@0x138a44a in nsMsgSearchSession::~nsMsgSearchSession (2nd instance)
10: libxul.so@0x13894e4 in nsMsgSearchSession::Release
11: libxul.so@0x1033ae6 in XPCJSRuntime::GCCallback
12: libxul.so@0x1b27c0a in Collect
13: libxul.so@0x1ad80c9 in JS_TransplantObject
14: libxul.so@0x1691570 in nsThread::PutEvent
15: libxul.so@0x10c8ac7 in _GLOBAL__I_XrayWrapper.cpp
16: libxul.so@0x1c7751d in js::gc::MarkInternal<JSObject>
17: libxul.so@0x1b15681 in js::IncrementalReferenceBarrier
18: libxul.so@0x10c8ac7 in _GLOBAL__I_XrayWrapper.cpp
19: libxul.so@0x10c98b5 in xpc::TransplantObject
20: libxul.so@0xdc3f96 in nsGlobalWindow::SetNewDocument
21: libxul.so@0xdaff50 in nsGlobalWindow::QueryInterface
22: libxul.so@0x1019de3 in MoveWrapper
23: libxul.so@0x10d9af9 in nsDocShell::GetInterface
24: libxul.so@0xdaeecf in nsGlobalWindow::EnableTimeChangeNotifications
25: libxul.so@0x9f8ee0 in pref_ValueChanged
26: libxul.so@0x1f57001 in ???
27: libxul.so@0x1662564 in NS_TableDrivenQI
28: libxul.so@0x1f4b0ff in ???
29: libxul.so@0x10da1ca in nsDocShell::GetInterface
30: libxul.so@0xbfa605 in nsDocument::QueryInterface
31: libxul.so@0x9f9764 in PREF_GetBoolPref
32: libxul.so@0x166254f in NS_TableDrivenQI
33: libxul.so@0x1f5030f in ???
34: libxul.so@0xd28545 in nsHTMLDocument::QueryInterface
35: libxul.so@0x10da1ca in nsDocShell::GetInterface
36: libxul.so@0x10da1ca in nsDocShell::GetInterface
37: libxul.so@0xa7aaa7 in DocumentViewerImpl::InitInternal
38: libxul.so@0x2e670cf in ???
39: libxul.so@0xc5322e in mozilla::dom::FragmentOrElement::SaveSubtreeState
40: libxul.so@0x1660b10 in nsCOMPtr_base::assign_with_AddRef
etc. to 147 with 101-137 removed by "the automatic truncation routine".

I could continue painstakingly translating the addresses, but only if some dev tells me (before I erase the file) that it's useful. Or I could send you the libxul.so.sym but it's 140317389 bytes long (4.4 million lines).

Comment 1

[Tony Mechelynck [:tonymec]]

Related with bug 702165?

Comment 2

[Tony Mechelynck [:tonymec]]

P.S. Stack looks (to me) similar with that of bp-67259d78-f9bf-4e80-9c6d-364322111025 mentioned as first of two in bug 702165 comment #0.

Comment 3

[Tony Mechelynck [:tonymec]]

(In reply to Tony Mechelynck [:tonymec] from comment #1)
> Related with bug 702165?

Let's assume it is, at least for the moment.