97719 - memory corruption in CreateInstance from CreateStartOfImapUrl

Status: RESOLVED INCOMPLETE

(MailNews Core :: Networking: IMAP, defect)

Description

[Calum Mackay]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:0.9.3+) Gecko/20010829
BuildID:    2001082910

glacier $ uname -a
SunOS glacier 5.8 Generic_111459-01 sun4u sparc SUNW,Ultra-Enterprise

I've had a couple of crashes; running under watchmalloc:

t@1 (l@5) terminated by signal SEGV (no mapping at the fault address)
current thread: t@1
=>[1] BULEFT2(0xffbedf24, 0x111ce58, 0x1463a38, 0x1462e90, 0x111ce58, glacier $ 
0xff1976b0), at 0xff371d54
  [2] t_splay(0x1463a38, 0x111ce58, 0x1462e90, 0x1463a38, 0x0, 0x0), at 0xff372310
  [3] t_delete(0x1463a38, 0xff384000, 0xffbee168, 0xc6a168, 0x1463a38,
0xffbee448), at 0xff3720d0
  [4] malloc_unlocked(0x110, 0x14d3718, 0xff384000, 0x110, 0x1463a38, 0x0), at
0xff370fac
  [5] malloc(0x110, 0xffbee168, 0xff0ed548, 0xfe8a6a6c, 0x0, 0x0), at 0xff370e64
  [6] __builtin_new(0x110, 0x2, 0xffbee168, 0xffffffff, 0x0, 0x0), at 0xff1def50
  [7] 0xfc931f24(0x0, 0xfc99856c, 0xffbee4a0, 0xfc931f08, 0x0, 0x0), at 0xfc931f23
  [8] CreateInstance__16nsGenericFactoryP11nsISupportsRC4nsIDPPv(0xb3e590, 0x0,
0xfc99856c, 0xffbee4a0, 0xff19a2c4, 0x25), at 0xff19a2f4
  [9]
CreateInstance__22nsComponentManagerImplRC4nsIDP11nsISupportsT1PPv(0x322a8,
0xfc99d308, 0x0, 0xfc99856c, 0xffbee4a0, 0xff1976b0), at 0xff197740
  [10]
CreateInstance__18nsComponentManagerRC4nsIDP11nsISupportsT1PPv(0xfc99d308, 0x0,
0xfc99856c, 0xffbee4a0, 0x0, 0x0), at 0xff1a018c
  [11]
CreateStartOfImapUrl__13nsImapServicePCcPP10nsIImapUrlP12nsIMsgFolderP14nsIUrlListenerR9nsCStringRUs(0x8f,
0x0, 0xffbee4a0, 0xc6a168, 0xc6a1e0, 0xffbee448), at 0xfc97ecc0
  [12]
SelectFolder__13nsImapServiceP13nsIEventQueueP12nsIMsgFolderP14nsIUrlListenerP12nsIMsgWindowPP6nsIURI(0x0,
0x1279b0, 0xc6a168, 0xc6a1e0, 0x0, 0x0), at 0xfc979dec
  [13] UpdateFolder__16nsImapMailFolderP12nsIMsgWindow(0x80000000, 0x0,
0xc6a168, 0xfc94a0f0, 0xffbee5e8, 0xfc8bf698), at 0xfc94a4a0
  [14]
GetNewMessages__16nsImapMailFolderP12nsIMsgWindowP14nsIUrlListener(0x4540f8,
0x0, 0x0, 0xfc94fb58, 0x4d0, 0xffbee6a8), at 0xfc94fe28
  [15] PerformBiff__20nsImapIncomingServer(0x0, 0xfc93e4b4, 0xba6a30,
0xfc9439c0, 0x4d0, 0xa7c), at 0xfc93e568
  [16] PerformBiff__16nsMsgBiffManager(0xbb5f68, 0x1bdb01, 0xe678, 0x0, 0x0,
0x0), at 0xfc5da544
  [17] OnBiffTimer__FP8nsITimerPv(0x13bc4f8, 0xbb5f68, 0xfc5d966c, 0x0, 0x0,
0x0), at 0xfc5d9670
  [18] FireTimeout__10nsTimerGtk(0x13bc4f8, 0x2, 0x1, 0x0, 0x0, 0xffbee8b0), at
0xfca62018
  [19] process_timers__FP11nsVoidArray(0x424360, 0xfca73344, 0xffbee878,
0xffbee7f8, 0xffbee778, 0xffbee548), at 0xfca62200
  [20] TimerCallbackFunc__FPv(0x0, 0xfca62250, 0x15f588, 0xfee1c598, 0xf4240,
0x0), at 0xfca622a8
  [21] 0xfedf7634(0x428520, 0xffbeeab0, 0x0, 0x4, 0x1376608, 0x1), at 0xfedf7633
  [22] 0xfedf5d08(0x46c, 0x46c, 0x4d0, 0xa7c, 0x4d0, 0xa7c), at 0xfedf5d07
  [23] 0xfedf65a8(0xfee1c594, 0xfee1c500, 0x4d0, 0xa7c, 0x4d0, 0xa7c), at 0xfedf65a7
  [24] g_main_run(0x3b5e58, 0xfee7a894, 0x13a0a0, 0x0, 0x0, 0xfe926354), at
0xfedf6ed0
  [25] gtk_main(0x2c00, 0xfdc633d8, 0x13bb40, 0xfe93f00c, 0xfe8a0dd4, 0x0), at
0xfef4b444
  [26] Run__10nsAppShell(0x155db0, 0xfdc635d0, 0x155db0, 0xfe93ed3c, 0x0,
0xffe), at 0xfdc63608
  [27] Run__17nsAppShellService(0x13ebf8, 0xfe939574, 0x13ebf8, 0xfe93a440,
0xffbeec18, 0xff2194e8), at 0xfe939588
  [28] 0x188a8(0x0, 0xffbeeed4, 0x0, 0x5, 0x100d4, 0x0), at 0x188a7
  [29] main(0x0, 0xffbeeed4, 0xffbeeedc, 0x2eeb8, 0x0, 0x0), at 0x19318


Reproducible: Couldn't Reproduce

I have no idea how to reproduce; I wasn't even using Mail at the time,
it crashed while I was browsing in navigator.

Comment 1

[Keyser Sose]

Marking NEW this needs to be looked at.

Comment 2

[Wayne Mery (:wsmwk)]

useful in any way? 

no line numbers. no STR.

Comment 3

[Magnus Melin [:mkmelin]]

Doesn't look like there was ever enough info here. 7 years later, not usable...