thunderbird smiley segfault

[redacted]

When running mozilla-thunderbird 1.5.0.5-0ubuntu0.6.06 any time I am composing an e-mail and I put a smiley face (any one) in the message using the drop-down smiley menu then pressing the spacebar twice and I get a segfault and crash.

DOUBLE-CLICK: 400 --> -1 THRESHOLD: 8 --> -1 /usr/lib/mozilla-thunderbird/run-mozilla.sh: line 131: 11285 Segmentation fault "$prog" ${1+"$@"}

Tried to reinstall. Didn't fix it.

I tried removing my .mozilla-thunderbird folder. Didn't fix it.

I can't find any other reports of this. Can someone try it and confirm this bug?

[redacted (redacted)]

I ran mozilla-thunderbird -g and I reproduced the error and here's what I got:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 46912549399280 (LWP 12036)]
0x00002aaab539e34f in NSGetModule ()
   from /usr/lib/mozilla-thunderbird/components/libspellchecker.so

I hope that helps.

[redacted (redacted)]

I checked what I suspected and it's true. This segfault will only happen if the spell check as you type is turned on. If off, I can do the smiley + two spaces and do a spell check with no problem.

[John Vivirito (gnomefreak)]

Thanks for your bug report. Could you please try to obtain a
backtrace by following the instructions on
       http://wiki.ubuntu.com/DebuggingProgramCrash.
This will greatly aid us in tracking down your problem.

[John Vivirito (gnomefreak)]

Thank you it will be looked into.

[John Lenz (lenz)]

I am getting hit by this bug on Feisty's mozilla thunderbird 1.5.0.10-0ubuntu3 I don't want to report it again, but the bug is marked as needing more info. Do you need another backtrace, or what other information is needed?

[John Lenz (lenz)]

Here is a backtrace with the debug symbols... crash is at mozInlineSpellChecker.cpp:980

[John Lenz (lenz)]

Ok, as you can see, aValue is -1 which is causing the code IsNonwordChar(text[aOffset])) to crash. I applied the following patch to 1.5.0.10-0ubuntu3 source in Feisty, then built with

export DEB_BUILD_OPTIONS="nostrip"
dpkg-buildpackage -b -nc -rfakeroot

causes the crash to disappear and smileys to be spellchecked...

[redacted (redacted)]

Thank you so much! Can you please submit that for consideration in the repository?

[John Lenz (lenz)]

Uh, the comment has a patch on it... "check if aValue is negative" What else do you want submitted? I should note the comment needs a s/aValue/aOffset/g, but the patch is correct.

[redacted (redacted)]

Nothing else needs to be submitted. I just your patch to be added in for the repository version of thunderbird. I'd do it, but I'm not exactly sure how.

[Alexander Sack (asac)]

ok, lets do some progress on this. Will review the patch.

[Henrik Nilsen Omma (henrik)]

I'm not able to reproduce this with Thunderbird 2.0 in Gutsy. Closing as Fix Released.