Closed Bug 818305 Opened 12 years ago Closed 8 years ago

refcount? crash in nsImapMailCopyState

Categories

(MailNews Core :: Networking: IMAP, defect)

Product:
MailNews Core
Component:
Networking: IMAP
Platform:
x86
Windows NT
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
RESOLVED WORKSFORME

People

(Reporter: wsmwk, Unassigned)

References

Details

(Keywords: crash)

Crash Data

New crash sig in version 16. ~top 100 crash in version 17 from skimming a few crashes, it looks like version 17 crashes have mozilla::dom::file::FileStreamWrapper::Release on the stack, but version 16 crashes have nsIMAPBodyShell::Release on the stack. But don't take that as gospel. bp-4356f6aa-93fe-4537-bd1d-b49142121204 TB17 0 xul.dll nsImapMailCopyState::~nsImapMailCopyState mailnews/imap/src/nsImapMailFolder.cpp:8185 1 xul.dll nsImapMailCopyState::`vector deleting destructor' 2 xul.dll mozilla::dom::file::FileStreamWrapper::Release dom/file/ArchiveEvent.cpp:15 3 xul.dll nsProxyReleaseEvent::Run parser/html/nsHtml5RefPtr.h:22 4 xul.dll nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:624 bp-57d41742-255a-4ecc-92a1-858b22121204 TB17 has a longer stack, similar to ... bp-73468a03-0de3-4c95-8ecd-60e922121122 TB16 0 xul.dll nsImapMailCopyState::~nsImapMailCopyState mailnews/imap/src/nsImapMailFolder.cpp:8153 1 xul.dll nsImapMailCopyState::`scalar deleting destructor' 2 xul.dll nsIMAPBodyShell::Release dom/plugins/base/nsNPAPIPluginInstance.cpp:153 3 xul.dll nsImapUrl::~nsImapUrl mailnews/imap/src/nsImapUrl.cpp:79 4 xul.dll nsImapUrl::`scalar deleting destructor' 5 xul.dll nsMsgMailNewsUrl::Release mailnews/base/util/nsMsgMailNewsUrl.cpp:57 6 xul.dll nsMailboxUrl::Release mailnews/compose/src/nsSmtpUrl.cpp:714 7 xul.dll nsImapMockChannel::~nsImapMockChannel mailnews/imap/src/nsImapProtocol.cpp:8641 8 xul.dll nsImapMockChannel::`vector deleting destructor' 9 xul.dll nsImapMockChannel::Release mailnews/imap/src/nsImapProtocol.cpp:8610
for Mac and Linux nsImapMailCopyState::~nsImapMailCopyState is in the same code area. bp-2ec87062-2971-4165-84e4-001122121124 0 XUL nsImapMailCopyState::~nsImapMailCopyState 1 XUL nsImapMailCopyState::~nsImapMailCopyState mailnews/imap/src/nsImapMailFolder.cpp:8172 2 XUL nsImapMailCopyState::Release mailnews/imap/src/nsImapMailFolder.cpp:8188 3 XUL nsProxyReleaseEvent::Run objdir-tb/x86_64/mozilla/xpcom/build/nsProxyRelease.cpp:19 And on second examination, I think this is at least partly a continuation of bug 630629
Blocks: 630629
Blocks: 833406
perhaps fixed recounting bug 531568 would be instructive in researching this crash. This signature has the highest count of the nsImapMailCopyState bugs. And this user has several signatures, to cite a few bp-06ebbcba-7401-4f62-86e4-3f9422150222 @0x0 | nsImapMailCopyState::`vector deleting destructor''(unsigned int) bp-654f53aa-1c7f-4360-a002-8de2f2150220 nsImapMailCopyState::~nsImapMailCopyState() bp-2d1b5195-6b12-409b-8fe7-012442150219 nsImapMailFolder::SetUrlState(nsIImapProtocol*, nsIMsgMailNewsUrl*, bool, bool, tag_nsresult)
Blocks: 871622
See Also: → 531568
Summary: crash in nsImapMailCopyState → recount? crash in nsImapMailCopyState
Crash Signature: [@ nsImapMailCopyState::~nsImapMailCopyState()] → [@ nsImapMailCopyState::~nsImapMailCopyState()] [@ nsImapMailCopyState::~nsImapMailCopyState]
Summary: recount? crash in nsImapMailCopyState → refcount? crash in nsImapMailCopyState
Closing because this is near zero (but looks like it was more common in 31.x), and I don't think there's anything actionable here.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.