Talkback: Crash deleting mail message I'm filing this bug per the Talkback report. Jar filed this twice in Talkback. Here is the stack trace: 0x00000040 nsXULPrototypeDocument::~nsXULPrototypeDocument [d:\builds\seamonkey\mozilla\rdf\content\src\nsXULPrototypeDocument.cpp, line 111] nsXULPrototypeDocument::`scalar deleting destructor' nsXULPrototypeDocument::Release [d:\builds\seamonkey\mozilla\rdf\content\src\nsXULPrototypeDocument.cpp, line 114] nsCOMPtr_base::~nsCOMPtr_base [d:\builds\seamonkey\mozilla\xpcom\base\nsCOMPtr.cpp, line 45] nsXULDocument::~nsXULDocument [d:\builds\seamonkey\mozilla\rdf\content\src\nsXULDocument.cpp, line 444] nsXULDocument::`scalar deleting destructor' nsXULDocument::Release [d:\builds\seamonkey\mozilla\rdf\content\src\nsXULDocument.cpp, line 539] nsCOMPtr_base::~nsCOMPtr_base [d:\builds\seamonkey\mozilla\xpcom\base\nsCOMPtr.cpp, line 45] DocumentViewerImpl::~DocumentViewerImpl [d:\builds\seamonkey\mozilla\layout\base\src\nsDocumentViewer.cpp, line 331] DocumentViewerImpl::`scalar deleting destructor' DocumentViewerImpl::Release [d:\builds\seamonkey\mozilla\layout\base\src\nsDocumentViewer.cpp, line 256] nsWebShell::Embed [d:\builds\seamonkey\mozilla\webshell\src\nsWebShell.cpp, line 871] nsDocumentBindInfo::OnStartRequest [d:\builds\seamonkey\mozilla\webshell\src\nsDocLoader.cpp, line 1397] nsStreamConverter::OnStartRequest [d:\builds\seamonkey\mozilla\mailnews\mime\src\nsStreamConverter.cpp, line 668] nsDocumentOpenInfo::OnStartRequest [d:\builds\seamonkey\mozilla\uriloader\base\nsURILoader.cpp, line 205] nsChannelListener::OnStartRequest [d:\builds\seamonkey\mozilla\webshell\src\nsDocLoader.cpp, line 1583] nsOnStartRequestEvent::HandleEvent [d:\builds\seamonkey\mozilla\netwerk\base\src\nsAsyncStreamListener.cpp, line 199] nsStreamListenerEvent::HandlePLEvent [d:\builds\seamonkey\mozilla\netwerk\base\src\nsAsyncStreamListener.cpp, line 94] PL_HandleEvent [plevent.c, line 523] _md_EventReceiverProc [plevent.c, line 951] USER32.dll + 0x1820 (0x77e71820) I believe jar is using IMAP.

waterson or hyatt?

I wish I could add more info... yes, I use IMAP. This report might have come in while we were trashing memory... so we should watch to see if newer browsers have the same stack trace.

chriss is also seeing this.

Putting on the PDT+ radar.

my debug build just had this crash deleting a message as well. This is the 3rd different crash I've had reading mail today. 21388 and 21408 are the other ones. I wasn't seeing this yesterday so I wonder if there's one bug that's causing corruption of memory and all of these crashes.

reassigning to waterson. I'm not sure if this is Chris's but it looks like the top of the stack is happening in rdf code. Could you take a look at this and reassign if appropriate?

Removing PDT+ until a reproducable circumstances present themselves.

This bug sounds important.... so please try to get more info. IF we are seeing this a lot in Talkback, we'll have to push it to PDT+. For now, we'll let it cook till Monday, and re-eval at the PDT meeting.

got the above stack trace returning to mail after editing a bug. looks different than the one putterman posted. Two things look bizarre: 1. Why is an HTML input's mInner another HTML input? 2. mParent is trash This was in a debug build, nothing looked destroyed.

I have retested on IMAP & POP for today's Linux 12-13-08-M12 commercial build. I didn't see this problem....

lchiang, can you get us a reproducible case? Also, check Talkback reports to see if there have been excessive failures in this code. jar not seeing this anymore...thanks. May be a worksforme. Putting on PDT- for now. Take off if reproducible.

I can't reproduce this. Others in my group also can't. I'll search talkback reports.

I don't think it's deleting mail that is causing a crash. It may be that reading mail is a crash. See talkback incidents: 2371994, 2368581, 2365035, 236803 from today. In all those incidents, the user is reading mail. Perhaps, the crash is when the next message is being displayed after a delete mail operation. http://bugzilla.mozilla.org/show_bug.cgi?id=21436 is a specific, reproducible crash in nsXULPrototypeDocument.cpp line 111 which is the same as this bug report. Perhaps mark this a dup of that one?

talkback incident in my previous comments showing 236803 should be 2363809

marking as WORKSFORME. a lot of good changes to focus, brutal sharing, etc. have gone in since this bug was opened. i haven't been able to reproduce a crash deleting messages.

Using netscape buils 2000011109m13 on win98, and 2000011110m13 on linux and mozilla build 2000011109m13 on mac this works for me too now (I deleted 10 messages in a row on each system to cover comments and suggestions dated 12/13 13:59. Also, bug 21436 mentioned above is verified too. Marking this Verified.