MASTER mozilla-thunderbird crashed [@msg_pick_real_name] [@nsMsgComposeAndSend::AddCompFieldRemoteAttachments]
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Mozilla Thunderbird |
Fix Released
|
Critical
|
|||
mozilla-thunderbird (Ubuntu) |
Fix Released
|
High
|
Mozilla Bugs |
Bug Description
Binary package hint: mozilla-thunderbird
Thunderbird loads, brings in another copy of existing email, then quits.
Seems to be every time.
Extract from retraced stacktrace:
...
#3 <signal handler called>
#4 msg_pick_real_name (attachment=
#5 nsMsgComposeAnd
#6 nsMsgComposeAnd
#7 nsMsgComposeAnd
#8 nsMsgComposeAnd
#9 QuotingOutputSt
#10 nsMsgCompose:
#11 nsMsgComposeSer
#12 nsParseNewMailS
...
In Mozilla Bugzilla #315091, Chris-moz (chris-moz) wrote : | #2 |
(In reply to comment #1)
> Can you please post the talkback incident ID?
TB11441144E
In Mozilla Bugzilla #315091, Bienvenu (bienvenu) wrote : | #3 |
Here's the stack trace. Most likely, either attachment or attachment->mURL is null. I suspect the latter. In either case, proposedName is empty, which means we have an attachment w/o a proposed name. I don't know if the attachment is a forwarded message, or if it's an attachment in a message getting forwarded (which I don't think is considered an attachment in this context)
Stack Trace
msg_pick_real_name [e:/builds/
nsMsgComposeAnd
nsMsgComposeAnd
nsMsgComposeAnd
nsMsgComposeAnd
nsMsgCompose:
nsMsgCompose:
nsMsgComposeSer
nsMsgFilterAfte
nsMsgFilterAfte
nsMsgSearchSess
nsMsgSearchSess
nsUrlListenerMa
nsUrlListenerMa
nsImapMailFolde
In Mozilla Bugzilla #315091, Aserkant (aserkant) wrote : | #4 |
I think this crash occurs whatever the criteria is for forwarding. Replying should also be investigated. I saw the same crash when I applied a filter that is expected to forward messages in a folder depending on their importance. The large number of messages should be the main problem.
In Mozilla Bugzilla #315091, Mscott-mozilla (mscott-mozilla) wrote : | #5 |
This is a new top crash most folks seem to be seeing when using a filter rule to forward messages (based on the top crash data I see in talkback).
In Mozilla Bugzilla #315091, Adam Guthrie (ispiked) wrote : | #6 |
*** Bug 323587 has been marked as a duplicate of this bug. ***
In Mozilla Bugzilla #315091, Adam Guthrie (ispiked) wrote : | #7 |
*** Bug 314471 has been marked as a duplicate of this bug. ***
In Mozilla Bugzilla #315091, Jeanmichel-reghem (jeanmichel-reghem) wrote : | #8 |
Maybe there is more information in the bug 301808
In Mozilla Bugzilla #315091, Ebarkovsky (ebarkovsky) wrote : | #9 |
I have same problem, but I think on other reasons. I have reseaved every day mail with zip attachment sized from 1 to 6 Mb, and I have filter on these messages to redirect to other recipients. And I have crash with Access Violation.
Also, I have many filters, and sometimes many messages arrived, but crashes only on specified case.
My OS is Windows 2000, thunderbird version 1.5.0.5 (20060719)
In Mozilla Bugzilla #315091, Vseerror (vseerror) wrote : | #10 |
also linux (no surprise)
for example TB21742801 and TB22933785
Stack Signature msg_pick_
Product ID Thunderbird15
Build ID 2006071913
Trigger Time 2006-08-03 09:48:36.0
Platform LinuxIntel
Operating System Linux 2.6.16.13-4-default
Module thunderbird-bin + (00801421)
User Comments Thunderbird 1.5.0.5 More than 130 emails in inbox. Clicked 'Run Now' on a new message filter for the whole inbox which should forward the message to another email. Then Tbird crashes out. Happened twice.
Trigger Reason SIGSEGV: Segmentation Fault: (signal 11)
Source File, Line No. /builds/
Stack Trace
msg_pick_
nsMsgComposeAnd
nsMsgComposeAnd
nsMsgComposeAnd
nsMsgComposeAnd
nsMsgCompose:
nsMsgCompose:
nsMsgComposeSer
nsMsgFilterAfte
nsMsgSearchSess
nsMsgSearchSess
nsTimerImpl::Fire() [mozilla/
handleTimerEvent() [mozilla/
PL_HandleEvent() [mozilla/
PL_ProcessPendi
nsEventQueueImp
event_processor
libglib-2.0.so.0 + 0x5092d (0xb78f592d)
libglib-2.0.so.0 + 0x27abd (0xb78ccabd)
libglib-2.0.so.0 + 0x2acbf (0xb78cfcbf)
libglib-2.0.so.0 + 0x2b069 (0xb78d0069)
libgtk-x11-2.0.so.0 + 0x1319e4 (0xb7b939e4)
nsAppShell::Run() [mozilla/
nsAppStartup::Run() [mozilla/
XRE_main() [mozilla/
main() [mozilla/
libc.so.6 + 0x1587c (0xb73ec87c)
In Mozilla Bugzilla #315091, Mscott-mozilla (mscott-mozilla) wrote : | #11 |
blocking on a top crash
In Mozilla Bugzilla #315091, Bienvenu (bienvenu) wrote : | #12 |
I can't reproduce this problem on the trunk, perhaps partly because my smtp server limits the number of messages I can send...I'll try 2.0, but I suspect I still won't be able to reproduce it.
In Mozilla Bugzilla #315091, Stephanie Daugherty (sdaugherty-deactivatedaccount) wrote : | #13 |
*** Bug 362188 has been marked as a duplicate of this bug. ***
In Mozilla Bugzilla #315091, Timeless-bemail (timeless-bemail) wrote : | #14 |
*** Bug 366234 has been marked as a duplicate of this bug. ***
In Mozilla Bugzilla #315091, Bienvenu (bienvenu) wrote : | #15 |
there is a theory that forwarding messages with blank subjects causes this issue...I'm not able to reproduce that, but am investigating that theory.
In Mozilla Bugzilla #315091, Bienvenu (bienvenu) wrote : | #16 |
this is fixed in 2.0, I'm reasonably sure, but it's broken in 1.5.0.x - in fact, just trying to do an edit message as new on a message w/o a subject crashes in 1.5.0.x, with a similar stack trace (which I think explains why this is a top crash...). I'm trying to figure out why it's fixed in 2.0
In Mozilla Bugzilla #315091, Bienvenu (bienvenu) wrote : | #17 |
some combination of patches in bug 154332 and bug 188108 fixed this.
In Mozilla Bugzilla #315091, Hskupin (hskupin) wrote : | #18 |
David for the BRANCH_1_8_0 there is no checking if mURL is null:
http://
The null check exists in BRANCH_1_8 and Trunk:
http://
http://
Could this be the cause?
In Mozilla Bugzilla #315091, Bienvenu (bienvenu) wrote : | #19 |
Henrik, I think you're comparing two different call sites to msg_pick_real_name - the null check you refer to on the 1_8 branch and trunk has been there for a long time. But the code is confusing enough that I could be wrong.
In Mozilla Bugzilla #315091, Hskupin (hskupin) wrote : | #20 |
Oh you are right. I was looking inside the wrong function.
If I look at TB28153142W now and click the link to msg_pick_
In Mozilla Bugzilla #315091, Bienvenu (bienvenu) wrote : | #21 |
the fix wasn't to change the code that crashed - the fix was to make it so there's always an attachment name when forwarding mail, so we don't have the crash condition of no name and no url.
In Mozilla Bugzilla #315091, Bienvenu (bienvenu) wrote : | #22 |
*** Bug 368295 has been marked as a duplicate of this bug. ***
Groucho (richard-smith7-gmail) wrote : Thunderbird crashes soon after startup | #23 |
Binary package hint: mozilla-thunderbird
Thunderbird loads, brings in another copy of existing email, then quits.
Seems to be every time.
Danny Staple (danny-orionrobots) wrote : | #24 |
I think more detail may be required here in terms of your setup, what servers/existing mail setup there is.
What version of ubuntu are you using?
If you follow the instructions at https:/
Also try starting thunderbird from a console, and see what output you get, as that may reveal information about the problem too.
Changed in mozilla-thunderbird: | |
status: | Unconfirmed → Needs Info |
Gregor Zattler (telegraph) wrote : | #25 |
same happens here on Ubuntu 6/06 with
mozilla-
Installed: 1.5.0.10-
Candidate: 1.5.0.10-
I created fresh profiles for imap, pop, movemail (every
time I did a rm -rf ~/.mozilla-
3-pane thunderbird window for a second but then it
vanishes:
~$ mozilla-thunderbird
DOUBLE-CLICK: 400 --> -1 THRESHOLD: 8 --> -1
/usr/lib/
30909 Segmentation fault "$prog" ${1+"$@"}
And there is no crash report in /var/crash:
~$ ls -l /var/crash
ls: /var/crash: No such file or directory
Ciao, Gregor
Gregor Zattler (telegraph) wrote : | #26 |
I followed the steps outlined in section "Prior Ubuntu versions" in DebuggingProgra
Gregor Zattler (telegraph) wrote : | #27 |
I forgot to mention: This happens since the last upgrade (yesterday) with a month's worth of updates.
Gregor Zattler (telegraph) wrote : | #28 |
would a strace or ltrace output help? I do not know how to enable core dump, if this would help please instruct me...
Groucho (richard-smith7-gmail) wrote : Re: [Bug 91262] Re: Thunderbird crashes soon after startup | #29 |
Sure. Using TB 1.5.0.10 on Ubuntu 6.10.
If I run from the console I get "Segmentation fault (core dumped)"
It'll take a while to get to the rest of your suggestion, but I will!
On 3/11/07, DannyStaple <email address hidden> wrote:
>
> I think more detail may be required here in terms of your setup, what
> servers/existing mail setup there is.
> What version of ubuntu are you using?
> If you follow the instructions at
> https:/
> dbgsym, then can you reproduce it and get debug information for this crash?
> Also try starting thunderbird from a console, and see what output you get,
> as that may reveal information about the problem too.
>
>
> ** Changed in: mozilla-thunderbird (Ubuntu)
> Status: Unconfirmed => Needs Info
>
> --
> Thunderbird crashes soon after startup
> https:/
>
Gregor Zattler (telegraph) wrote : Re: Thunderbird crashes soon after startup | #30 |
I again. This bug msut have to do with some other (upgraded)
package since downgrading to mozilla-tunderbird version 1.5.9
did not resolve the problem.
I tried to start thunderbird as root:
"sudo mozilla-tunderbird"
then it did *not* crash. All files/directories in and under
~/.mozilla-
the normal user "grfz", as I login as "grfz". But it crashes
when I start it as user grfz.
I did not understand the strace and ltrace output but it
crashes while calling xfree (window properties and such).
If someone is able to read this I would provide the output
from strace and ltrace for a invocation of thunderbirs as
root and as a mere user.
I wrote:
"I followed the steps outlined in section "Prior Ubuntu versions" in
DebuggingProgra
package. Thunderbird now behaves as before and there is no
/var/crash nor a core dump or something."
I have compiled and installed the packages. I think the symbols are
not stripped, but I do not know, what to do with this debug-enabled
programs.
Hope this helps and somebody helps,
Gregor
Freddy Martinez (freddymartinez9) wrote : | #31 |
Can someone (Mozilla Team) take this one?
Changed in mozilla-thunderbird: | |
assignee: | nobody → mozilla-bugs |
John Vivirito (gnomefreak) wrote : | #32 |
Freddy we cant do much with it right now, we dont have any -dbg or -dbgsym packages for thunderbird yet. I will take this and try it and i will talk to Alexander to find out if i cant use icedove packages.
Changed in mozilla-thunderbird: | |
assignee: | mozilla-bugs → gnomefreak |
importance: | Undecided → High |
John Vivirito (gnomefreak) wrote : | #33 |
Can anyone please attach a crash report?
Gregor Zattler (telegraph) wrote : | #34 |
@John Vivirto
as mentioned above I have build packages according to https:/
If you provide me with infos in how to produce a crash report I will provide you with the crash report.
Thanx a bundle,
Gregor
John Vivirito (gnomefreak) wrote : | #35 |
Gregor if you look in /var/crash there should be a crash report in there for mozilla-thunderbird please attach that full crash report.
Gregor Zattler (telegraph) wrote : | #36 |
@John Vivirito:
as I wrote at 2007-03-11:
"And there is no crash report in /var/crash:
~$ ls -l /var/crash
ls: /var/crash: No such file or directory"
grfz@pingu:~$ sudo ls -l /var/|grep crash
grfz@pingu:~$
now I did:
grfz@pingu:~$ sudo mkdir /var/crash
grfz@pingu:~$ sudo ls -l /var/|grep crash
drwxr-xr-x 2 root root 4096 2007-03-16 19:20 crash
and then:
grfz@pingu:~$ sudo rm -rf /home/grfz/
DOUBLE-CLICK: 400 --> -1 THRESHOLD: 8 --> -1 Registering Enigmail account manager extension.
Enigmail account manager extension registered.
DOUBLE-CLICK: 400 --> -1 THRESHOLD: 8 --> -1 /usr/lib/
and after that:
grfz@pingu:~$ sudo ls -l /var/crash/
total 0
sorry, no crash report.
When I build the package acording to https:/
The build dependencies were not installed automatically, apt-get throwed an error message and I aptitude installed the needed packages. Then the build was o. k.
Ciao, gregor
John Vivirito (gnomefreak) wrote : | #37 |
Gregor,
If you move the existing profile and make a new one does this fix the issue? A couple of things sound possible, 1. profile became corrupt and that is why it is crashing(ther eis another bug or 2 like that with thunderbird upgrades. Or 2. an extension or theme is causing this crash. Im gonna have to assume you are still on dapper since the crash log wasnt saved. Apport saves the crash log and was introduced in edgy. Your going to have a hard time getting a backtrace since ther eis no mozilla-
Changed in mozilla-thunderbird: | |
assignee: | gnomefreak → mozilla-bugs |
status: | Needs Info → Rejected |
Groucho (richard-smith7-gmail) wrote : | #38 |
- Groucho crash report Edit (5.4 MiB, text/plain)
I submitted the original bug report. Here is my crash report.
Groucho
John Vivirito (gnomefreak) wrote : | #39 |
OK thank you. We should have a good set of -dbgsym/-dbg by early next week so i will assign this to me for now and when i get home sunday/monday i will look into how far we are with them.
Changed in mozilla-thunderbird: | |
assignee: | mozilla-bugs → gnomefreak |
status: | Rejected → Needs Info |
Gregor Zattler (telegraph) wrote : | #40 |
- ltrace thunderbird as user root Edit (51.3 KiB, text/plain)
Dear John,
0.
perhaps this bug report covers two distinct bugs since original submitter Grouche uses Ubuntu 6.10 whereas I use 6.06 LTS (as posted at 2007-03-11 12:09:39 UTC). Perhaps we (you, since I don't know how to) should split the bug report.
1.
my bug has nothing to do with corrupt profile since every time I reproduce it here I rm -rf /home/grfz/
(as posted at 2007-03-11 12:09:39 UTC)
2.
my bug has nothing to do with a extension or theme wich causes the crash since it also happens if I deinstall the only extension I use: mozilla enigmail. For the following examples I purged it again.
3.
could you please explain me what for the procedere described in
https:/
This is the contents of mozilla-
Format: 1.7
Date: Mon, 5 Mar 2007 11:30:00 +0100
Source: mozilla-thunderbird
Binary: mozilla-
Architecture: i386
Version: 1.5.0.10-
Distribution: dapper-security
Urgency: low
Maintainer: Alexander Sack <email address hidden>
Changed-By: Alexander Sack <email address hidden>
Description:
mozilla-
mozilla-
mozilla-
mozilla-
Changes:
mozilla-
.
* New upstream security update:
- CVE-2007-0008, MFSA 2006-06: SSLv2 Client Integer Underflow
- CVE-2007-0009, MFSA 2006-06: SSLv2 Server Stack Overflow
- CVE-2007-0775, CVE-2007-0776, CVE-2007-0777, MFSA 2007-01:
Crashes with evidence of memory corruption
* drop patches applied upstream: 90_ppc64-build-fix
Files:
fe0edd4e7739fa
eefebb10950c46
0b114c4ea4cf81
8adc62e9a008c4
5.
Here is how I produced the attached strace and ltrace outputs:
I modified /usr/lib/
strace -o /home/grfz/
I started thunderbird like this:
grfz@pingu:~$ sudo rm -rf /home/grfz/
DOUBLE-CLICK: 400 --> -1 THRESHOLD: 8 --> -1 DOUBLE-CLICK: 400 --> -1 THRESHOLD: 8 --> -1 grfz@pingu:~$
--> configuration wizard --> 3 pane window --> no crash; find attached mozilla-
I modified /usr/lib/
John Vivirito (gnomefreak) wrote : | #41 |
Gregory there is no way to split the bug report. Can you please file a new report and attach your file to it assign it to John Vivirito please and i will look at it.
Gregor Zattler (telegraph) wrote : I filed another bug report (93091) (was: Re: [Bug 91262] Re: Thunderbird crashes soon after startup) | #42 |
Hi John,
* John Vivirito <email address hidden> [17. Mär. 2007]:
> Gregory there is no way to split the bug report. Can you please file a
> new report and attach your file to it assign it to John Vivirito please
> and i will look at it.
Thank you very much. I opened bug 93091 and assigned you:
https:/
Ciao, Gregor
--
-... --- .-. . -.. ..--.. ...-.-
In Mozilla Bugzilla #315091, Timeless-bemail (timeless-bemail) wrote : | #43 |
*** Bug 376085 has been marked as a duplicate of this bug. ***
Paul Ivanov (pivanov) wrote : Re: Thunderbird crashes soon after startup | #44 |
- thunderbird crash report Edit (3.4 MiB, text/plain)
I've started having the same issues with thunderbird 1.5.0.10 on ubuntu 6.10.
attaching my crashfile, too, in case Groucho's isn't enough
Paul Ivanov (pivanov) wrote : | #45 |
- crash file for mozilla-thunderbird Edit (3.4 MiB, text/plain)
oops, forgot to check the 'include attachment' button:
Paul Ivanov (pivanov) wrote : | #46 |
- valgrind log Edit (1.9 KiB, application/x-tar)
I looked in mozilla-
+ moz_libdir=
+ MRE_HOME=
+ found=0
+ progname=
+ dirname /usr/bin/
+ curdir=/usr/bin
+ basename /usr/bin/
+ progbase=
+ run_moz=
+ test -x /usr/bin/
+ /bin/pwd
+ here=/home/
+ [ -h /usr/bin/
+ cd /home/pi/Desktop
+ [ 0 = 0 ]
+ [ -x /usr/lib/
+ dist_bin=
+ script_args=
+ debugging=0
+ MOZILLA_
+ [ = beos ]
+ pass_arg_count=0
+ [ 0 -gt 0 ]
+ export MRE_HOME
+ moz_pis_
+ MOZ_USER_
+ MOZ_PIS_API=2
+ MOZ_PIS_
+ MOZ_PIS_
+ MOZ_PIS_
+ export MOZ_PIS_API MOZ_PIS_MOZBINDIR MOZ_PIS_SESSION_PID MOZ_PIS_USER_DIR
+ [ -x /usr/lib/
+ [ -x /home/pi/
+ [ 0 = 1 ]
+ /usr/lib/
DOUBLE-CLICK: 400 --> -1 THRESHOLD: 8 --> -1 Segmentation fault (core dumped)
+ exitcode=139
+ moz_pis_
+ MOZ_USER_
+ MOZ_PIS_API=2
+ MOZ_PIS_
+ MOZ_PIS_
+ MOZ_PIS_
+ export MOZ_PIS_API MOZ_PIS_MOZBINDIR MOZ_PIS_SESSION_PID MOZ_PIS_USER_DIR
+ [ -x /home/pi/
+ [ -x /usr/lib/
+ exit 139
Here also is the valgrind log, as per https:/
Paul Ivanov (pivanov) wrote : | #47 |
Paul Ivanov (pivanov) wrote : | #48 |
- gdb backtrace / registers Edit (3.9 KiB, text/plain)
got a core dump, it's 42 megs, so I won't attach it, let me know if I should upload it somewhere, though, and not sure how useful it is without debugging symbols. here's the backtrace,
Changed in mozilla-thunderbird: | |
assignee: | gnomefreak → mozilla-bugs |
Paul Ivanov (pivanov) wrote : | #49 |
with more updates and reboots, the problem seems to have fixed itself for me.
Hilario J. Montoliu (hjmf) (hmontoliu) wrote : Retraced Stacktrace | #50 |
- Retraced Stacktrace Edit (17.4 KiB, text/plain)
Retrace done.
Extract from retraced stacktrace:
...
#3 <signal handler called>
#4 msg_pick_real_name (attachment=
#5 nsMsgComposeAnd
#6 nsMsgComposeAnd
#7 nsMsgComposeAnd
#8 nsMsgComposeAnd
#9 QuotingOutputSt
#10 nsMsgCompose:
#11 nsMsgComposeSer
#12 nsParseNewMailS
...
Tagging as mt-confirm for further processing
Hilario J. Montoliu (hjmf) (hmontoliu) wrote : Retraced Thread Stacktrace | #51 |
Changed in mozilla-thunderbird: | |
status: | Needs Info → Confirmed |
Hilario J. Montoliu (hjmf) (hmontoliu) wrote : | #52 |
Merging bugs 91262 and bug 104501 as both present almost the same stacktrace.
description: | updated |
Changed in mozilla-thunderbird: | |
status: | Confirmed → In Progress |
Changed in thunderbird: | |
status: | Unknown → Fix Released |
Alexander Sack (asac) wrote : | #53 |
fixed long time ago in tbird 2
Changed in mozilla-thunderbird: | |
status: | In Progress → Fix Released |
Changed in thunderbird: | |
importance: | Unknown → Critical |
Can you please post the talkback incident ID?