80088 - crash when dragging >1 msg to Trash

Status: VERIFIED DUPLICATE of bug 80097

(SeaMonkey :: MailNews: Message Display, defect, P1)

Description

[sairuh (rarely reading bugmail)]

occurs using 2001.05.10.08 mozilla bits on linux. not a problem on winNT. if i 
drag a single mail message from the thread pane to the Trash, it's fine --but 
when i have selected 2 or more and start to drag them to the Trash, i crash.

sorry, talkback somehow wasn't installed with the verif build. :(

will check if this occurs with dragging to other folders, and if it occurs on 
mac as well...

Comment 1

[sairuh (rarely reading bugmail)]

fwiw, wasn't a problem with bits from 8 May.

Comment 2

[sairuh (rarely reading bugmail)]

not a problem on mac, either. adding pp kw.

also: occurs with both existing and new profiles.

Comment 3

[(not reading, please use [e-mail] instead)]

passing null to memcpy


#0  0x402b58a7 in memcpy (dstpp=0x0, srcpp=0x8991008, len=22)
    at ../sysdeps/generic/memcpy.c:55
#1  0x400acf83 in nsSupportsStringImpl::SetDataWithLength (this=0x87a67b8,
    aLength=22, aData=0x8991008 "text/nsmessageOrfolder") at nsCRT.h:103
#2  0x400acef9 in nsSupportsStringImpl::SetData (this=0x87a67b8,
    aData=0x8991008 "text/nsmessageOrfolder") at nsSupportsPrimitives.cpp:149
#3  0x406569d8 in nsTransferable::GetTransferDataFlavors (this=0x8984d50,
    aDataFlavorList=0xbfffaf34) at nsTransferable.cpp:317
#4  0x406576a2 in nsTransferable::FlavorsTransferableCanExport (
    this=0x8984d50, _retval=0xbfffaf34) at nsTransferable.cpp:593
#5  0x406368ee in nsDragService::IsDataFlavorSupported (this=0x818a7b0,
    aDataFlavor=0x8985b38 "text/nsmessageOrfolder", _retval=0xbfffb078)
    at nsDragService.cpp:430
#6  0x4010abd1 in XPTC_InvokeByIndex (that=0x818a7b4, methodIndex=12,
    paramCount=2, params=0xbfffb068) at xptcinvoke_unixish_x86.cpp:138
#7  0x40592f32 in XPCWrappedNative::CallMethod (ccx=@0xbfffb120,
    mode=CALL_METHOD) at xpcwrappednative.cpp:1815
#8  0x4059b8d2 in XPC_WN_CallMethod (cx=0x83142c0, obj=0x83b94f8, argc=1,
    argv=0x8985cf4, vp=0xbfffb220) at xpcwrappednativejsops.cpp:1249
#9  0x4019a3c6 in js_Invoke (cx=0x83142c0, argc=1, flags=0) at jsinterp.c:813
#10 0x401a4662 in js_Interpret (cx=0x83142c0, result=0xbfffb704)
    at jsinterp.c:2708
#11 0x4019a423 in js_Invoke (cx=0x83142c0, argc=1, flags=2) at jsinterp.c:830
#12 0x4019a64f in js_InternalInvoke (cx=0x83142c0, obj=0x857ac88,
    fval=142167088, flags=0, argc=1, argv=0xbfffb8f4, rval=0xbfffb850)
    at jsinterp.c:902
#13 0x4017bc9f in JS_CallFunctionValue (cx=0x83142c0, obj=0x857ac88,
    fval=142167088, argc=1, argv=0xbfffb8f4, rval=0xbfffb850) at jsapi.c:3342
#14 0x40c2b354 in nsJSContext::CallEventHandler (this=0x830b008,
    aTarget=0x857ac88, aHandler=0x8794c30, argc=1, argv=0xbfffb8f4,
    aBoolResult=0xbfffb8f8, aReverseReturnResult=0) at nsJSEnvironment.cpp:932
#15 0x40c6f716 in nsJSEventListener::HandleEvent (this=0x853bf08,
    aEvent=0x878831c) at nsJSEventListener.cpp:139
#16 0x40e4d4fb in nsEventListenerManager::HandleEventSubType (this=0x83bc410,
    aListenerStruct=0x853bf40, aDOMEvent=0x878831c, aCurrentTarget=0x83bc360,
    aSubType=2, aPhaseFlags=2) at nsEventListenerManager.cpp:1148
#17 0x40e4f7ca in nsEventListenerManager::HandleEvent (this=0x83bc410,
    aPresContext=0x8313918, aEvent=0xbffff278, aDOMEvent=0xbfffe9cc,
    aCurrentTarget=0x83bc360, aFlags=2, aEventStatus=0xbffff188)
    at nsEventListenerManager.cpp:1913
#18 0x40f8e239 in nsXULElement::HandleDOMEvent (this=0x83bc358,
    aPresContext=0x8313918, aEvent=0xbffff278, aDOMEvent=0xbfffe9cc, aFlags=2,
    aEventStatus=0xbffff188) at nsXULElement.cpp:3639
#19 0x40f8e449 in nsXULElement::HandleDOMEvent (this=0x85e45a0,
    aPresContext=0x8313918, aEvent=0xbffff278, aDOMEvent=0xbfffe9cc, aFlags=2,
    aEventStatus=0xbffff188) at nsXULElement.cpp:3663
#20 0x40f8e449 in nsXULElement::HandleDOMEvent (this=0x8715548,
    aPresContext=0x8313918, aEvent=0xbffff278, aDOMEvent=0xbfffe9cc, aFlags=2,
    aEventStatus=0xbffff188) at nsXULElement.cpp:3663
#21 0x40f8e449 in nsXULElement::HandleDOMEvent (this=0x87162e0,
    aPresContext=0x8313918, aEvent=0xbffff278, aDOMEvent=0xbfffe9cc, aFlags=2,
    aEventStatus=0xbffff188) at nsXULElement.cpp:3663
#22 0x40f8e449 in nsXULElement::HandleDOMEvent (this=0x86f1608,
    aPresContext=0x8313918, aEvent=0xbffff278, aDOMEvent=0xbfffe9cc, aFlags=2,
    aEventStatus=0xbffff188) at nsXULElement.cpp:3663
#23 0x40f8e449 in nsXULElement::HandleDOMEvent (this=0x87a33e8,
    aPresContext=0x8313918, aEvent=0xbffff278, aDOMEvent=0xbfffe9cc, aFlags=2,
    aEventStatus=0xbffff188) at nsXULElement.cpp:3663
#24 0x40f8e449 in nsXULElement::HandleDOMEvent (this=0x86f0e70,
    aPresContext=0x8313918, aEvent=0xbffff278, aDOMEvent=0xbfffe9cc, aFlags=2,
    aEventStatus=0xbffff188) at nsXULElement.cpp:3663
#25 0x40f8e449 in nsXULElement::HandleDOMEvent (this=0x87c50e8,
    aPresContext=0x8313918, aEvent=0xbffff278, aDOMEvent=0xbfffe9cc, aFlags=1,
    aEventStatus=0xbffff188) at nsXULElement.cpp:3663
#26 0x41626e03 in ?? ()
   from /builds/seth/seamonkey/mozilla/dist/bin/components/libgklayout.so
#27 0x41626a6d in ?? ()
   from /builds/seth/seamonkey/mozilla/dist/bin/components/libgklayout.so
#28 0x4185d84a in ?? ()
   from /builds/seth/seamonkey/mozilla/dist/bin/components/libgkview.so
#29 0x4185d7ee in ?? ()
   from /builds/seth/seamonkey/mozilla/dist/bin/components/libgkview.so
#30 0x4185d7ee in ?? ()
   from /builds/seth/seamonkey/mozilla/dist/bin/components/libgkview.so
#31 0x4186924e in ?? ()
   from /builds/seth/seamonkey/mozilla/dist/bin/components/libgkview.so
#32 0x4185cf9d in ?? ()
   from /builds/seth/seamonkey/mozilla/dist/bin/components/libgkview.so
#33 0x40641c71 in nsWidget::DispatchEvent (this=0x876fc38, aEvent=0xbffff278,
    aStatus=@0xbffff21c) at nsWidget.cpp:1488
#34 0x406419e9 in nsWidget::DispatchWindowEvent (this=0x876fc38,
    event=0xbffff278) at nsWidget.cpp:1379
#35 0x40641d00 in nsWidget::DispatchMouseEvent (this=0x876fc38,
    aEvent=@0xbffff278) at nsWidget.cpp:1515
#36 0x4064bb6a in nsWindow::OnDragMotionSignal (this=0x8255d30,
    aWidget=0x814a9c0, aDragContext=0x8957028, aX=158, aY=199,
    aTime=1688593827, aData=0x8255d30) at nsWindow.cpp:3129
#37 0x4064b825 in nsWindow::DragMotionSignal (aWidget=0x814a9c0,
    aDragContext=0x8957028, aX=158, aY=199, aTime=1688593827, aData=0x8255d30)
    at nsWindow.cpp:3050
#38 0x40779305 in gtk_marshal_BOOL__POINTER_INT_INT_INT ()
#39 0x4073e65d in gtk_handlers_run ()
#40 0x4073dab2 in gtk_signal_real_emit ()
#41 0x4073bf28 in gtk_signal_emit_by_name ()
#42 0x406e2c1f in gtk_drag_dest_motion ()
#43 0x406e26b0 in gtk_drag_find_widget ()
#44 0x406e1faf in gtk_drag_dest_handle_event ()
#45 0x40710e9a in gtk_main_do_event ()
#46 0x4063b289 in handle_gdk_event (event=0x82625c4, data=0x0)
    at nsGtkEventHandler.cpp:976
#47 0x407b90fb in ?? () from /usr/lib/libgdk-1.2.so.0
#48 0x407e6a86 in g_main_dispatch ()
#49 0x407e7041 in g_main_iterate ()
#50 0x407e71e1 in g_main_run ()
#51 0x407107a9 in gtk_main ()
#52 0x4063002c in nsAppShell::Run (this=0x8101b70) at nsAppShell.cpp:360
#53 0x405ea075 in ?? ()
   from /builds/seth/seamonkey/mozilla/dist/bin/components/libnsappshell.so
#54 0x805171b in main1 (argc=2, argv=0xbffffad4, nativeApp=0x0)
    at nsAppRunner.cpp:1010
#55 0x805239d in main (argc=2, argv=0xbffffad4) at nsAppRunner.cpp:1311
#56 0x4026ecb3 in __libc_start_main (main=0x805221c <main>, argc=2,
    argv=0xbffffad4, init=0x804ba04 <_init>, fini=0x80579c4 <_fini>,
    rtld_fini=0x4000a350, stack_end=0xbffffacc)
    at ../sysdeps/generic/libc-start.c:78

Comment 4

[(not reading, please use [e-mail] instead)]

dr, is it possible your last checkin to 78824 exposed this?

Comment 5

[Dan Rosen]

I caused this. Working on a fix...

Comment 6

[Dan Rosen]

->me

Comment 7

[R.K.Aa.]

there's a fix in bug 80097 

Comment 8

[Dan Rosen]

dup of 80097

*** This bug has been marked as a duplicate of 80097 ***

Comment 9

[sairuh (rarely reading bugmail)]

v