Bug#510589: confirming icedove crashes (and providing backtraces)

[Daniel Kahn Gillmor]

found 510589 2.0.0.19-1
thanks

I'm seeing this behavior regularly (every couple days) as well.  icedove
crashes with a segfault at odd times, usually after the application has
been open for a while but sometimes nearly immediately at startup.

The crashes seem to be related to checking IMAP folders.  I'm running on
i386, and have two active IMAP accounts plus a local folder.

My only extension is enigmail (re-built from the debian sources with
DEB_BUILD_OPTIONS=nostrip for debugging), and i have icedove-dbg installed.

I have several hundred MB available on /home, and the crashes happen
without

I invoke icedove like this:

 icedove -g

and when a segfault happens, i run "bt" to get a backtrace.  the normal
spew (when not segfaulting) in the console consists of many lines like this:

[New Thread 0xb12a4b90 (LWP 22468)]
[Thread 0xb1ac1b90 (LWP 22467) exited]
[New Thread 0xb1ac1b90 (LWP 22469)]
[Thread 0xb12a4b90 (LWP 22468) exited]
[New Thread 0xb12a4b90 (LWP 22470)]
[New Thread 0xb0aa3b90 (LWP 22471)]
[New Thread 0xb02a2b90 (LWP 22472)]
[New Thread 0xaed70b90 (LWP 22473)]
 *** Gnome Registry Session: no.


The backtraces i've seen from the crashes since i started collecting
them look like one of the following:


> [New Thread 0xab3b5b90 (LWP 18442)]
> 
> Program received signal SIGSEGV, Segmentation fault.
> [Switching to Thread 0xac3b7b90 (LWP 15170)]
> 0xb6d54012 in nsImapUrl::GetMsgFileSpec (this=0x9c94fd8, fileSpec=0xac3b7104)
>     at ../../../dist/include/xpcom/nsISupportsUtils.h:114
> 114	../../../dist/include/xpcom/nsISupportsUtils.h: No such file or directory.
> 	in ../../../dist/include/xpcom/nsISupportsUtils.h
> (gdb) bt
> #0  0xb6d54012 in nsImapUrl::GetMsgFileSpec (this=0x9c94fd8, 
>     fileSpec=0xac3b7104) at ../../../dist/include/xpcom/nsISupportsUtils.h:114
> #1  0xb6d34bb2 in nsImapProtocol::OnAppendMsgFromFile (this=0xb0aa4e0)
>     at nsImapProtocol.cpp:5347
> #2  0xb6d3b5d2 in nsImapProtocol::ProcessAuthenticatedStateURL (this=0xb0aa4e0)
>     at nsImapProtocol.cpp:7312
> #3  0xb6d3bbc7 in nsImapProtocol::ProcessCurrentURL (this=0xb0aa4e0)
>     at nsImapProtocol.cpp:1443
> #4  0xb6d3c5c4 in nsImapProtocol::ImapThreadMainLoop (this=0xb0aa4e0)
>     at nsImapProtocol.cpp:1164
> #5  0xb6d3c772 in nsImapProtocol::Run (this=0xb0aa4e0)
>     at nsImapProtocol.cpp:946
> #6  0xb7e40195 in nsThread::Main (arg=0xac3b558) at nsThread.cpp:118
> #7  0xb7da4861 in ?? () from /usr/lib/libnspr4.so.0d
> #8  0x0ac3b558 in ?? ()
> #9  0x0c703080 in ?? ()
> #10 0xb74c1ff4 in ?? () from /lib/i686/cmov/libc.so.6
> #11 0xb74c0274 in ?? () from /lib/i686/cmov/libc.so.6
> #12 0xb7490ace in ?? () from /lib/i686/cmov/libc.so.6
> #13 0xac3b7364 in ?? ()
> #14 0x0aa9ddc8 in ?? ()
> #15 0xb7d78ff4 in ?? () from /lib/i686/cmov/libpthread.so.0
> #16 0xac3b7b90 in ?? ()
> #17 0x00000000 in ?? ()
> (gdb)

   or:

> [New Thread 0xaee3ab90 (LWP 7882)]
> 
> Program received signal SIGSEGV, Segmentation fault.
> [Switching to Thread 0xade38b90 (LWP 6047)]
> 0x0b946a98 in ?? ()
> (gdb) bt
> #0  0x0b946a98 in ?? ()
> #1  0xb6e79015 in nsImapUrl::GetMsgFileSpec (this=0xb538348, fileSpec=0xade38104)
>     at ../../../dist/include/xpcom/nsISupportsUtils.h:114
> #2  0xb6e59bb2 in nsImapProtocol::OnAppendMsgFromFile (this=0xbe7a858) at nsImapProtocol.cpp:5347
> #3  0xb6e605d2 in nsImapProtocol::ProcessAuthenticatedStateURL (this=0xbe7a858)
>     at nsImapProtocol.cpp:7312
> #4  0xb6e60bc7 in nsImapProtocol::ProcessCurrentURL (this=0xbe7a858) at nsImapProtocol.cpp:1443
> #5  0xb6e615c4 in nsImapProtocol::ImapThreadMainLoop (this=0xbe7a858) at nsImapProtocol.cpp:1164
> #6  0xb6e61772 in nsImapProtocol::Run (this=0xbe7a858) at nsImapProtocol.cpp:946
> #7  0xb7edc195 in nsThread::Main (arg=0xae0c148) at nsThread.cpp:118
> #8  0xb7e41841 in ?? () from /usr/lib/libnspr4.so.0d
> #9  0x0ae0c148 in ?? ()
> #10 0x093b0250 in ?? ()
> ---Type <return> to continue, or q <return> to quit---
> #11 0xb7580ff4 in ?? () from /lib/i686/cmov/libc.so.6
> #12 0xb757f25c in ?? () from /lib/i686/cmov/libc.so.6
> #13 0xb754e9be in ?? () from /lib/i686/cmov/libc.so.6
> #14 0xade38364 in ?? ()
> #15 0x0ae1b698 in ?? ()
> #16 0xb7e15ff4 in ?? () from /lib/i686/cmov/libpthread.so.0
> #17 0xade38b90 in ?? ()
> #18 0x00000000 in ?? ()
> (gdb) 

The file names and line numbers of the backtraces have always been
exactly one or the other of these two chains.

I'm continuing to run icedove within the debugger like this, and i'd be
happy to get more information by inspection from anywhere in the bt if
that's desired.  I'm also happy to rebuild with any propsed patches that
might address these problems.

let me know what else i can do to get to the bottom of this.

	--dkg

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 890 bytes
Desc: OpenPGP digital signature
Url : https://lists.ubuntu.com/archives/ubuntu-mozillateam/attachments/20090602/1e1a7bee/attachment.pgp