Description of problem: Reproducer: Go to: https://testopia.devel.redhat.com/bugzilla/tr_show_case.cgi?case_id=8681 (some "editor" in javascript). Press second button (the middle one) in the right white text field right after the word "chosen", it stacks for 5s and then crashes. Reproducer_2: Click with third (right) mouse button on random item in Bookmarks toolbar. firefox-3.5-0.20.beta4.fc11.x86_64 xulrunner-1.9.1-0.20.beta4.fc11.x86_64 nss-3.12.3-4.fc11.x86_64 nspr-4.7.3-5.fc11.x86_64 Version-Release number of selected component (if applicable): /usr/lib64/firefox-3.5b4/firefox kernel-2.6.29.3-140.fc11.x86_64 firefox-3.5-0.20.beta4.fc11 How reproducible: always Actual results: crash
Created attachment 344774 [details] backtrace
Just to note that R#1 it crashes FF even without add-ons (disabled vimperator notably), on just need to play a bit in the Testopia UI to trigger the bug.
Hmm, I cannot reproduce it here with identical packages. Some more questions: do you have Gnome or KDE? If KDE, do you use gtk-qt-engine? If yes, this might be a duplicate of bug 501427.
(In reply to comment #3) > Hmm, I cannot reproduce it here with identical packages. Some more questions: > do you have Gnome or KDE? None of them directly. I am running bunch of GNOME apps and also /usr/libexec/gnome-settings-daemon, so, it's GNOME-like environment, btw. the WM is Awesome (not in Fedora). > If KDE, do you use gtk-qt-engine? If yes, this might > be a duplicate of bug 501427. Nope.
The critical part is: Thread 1 (Thread 20486): #0 0x00000033b140ed5b in raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/pt-raise.c:42 #1 0x0000003f72873244 in nsProfileLock::FatalSignalHandler (signo=11) at nsProfileLock.cpp:212 #2 <signal handler called> #3 strcmp () at ../sysdeps/x86_64/strcmp.S:29 #4 0x0000003f7306c82d in nsClipboard::HasDataMatchingFlavors (this=<value optimized out>, aFlavorList=<value optimized out>, aLength=1, aWhichClipboard=<value optimized out>, _retval=0x7fff29c80a1c) at nsClipboard.cpp:448 #5 0x0000003f72e3d243 in nsHTMLEditor::HavePrivateHTMLFlavor (this=<value optimized out>, aClipboard=0x0) at nsHTMLDataTransfer.cpp:1844 #6 0x0000003f72e3f5ff in nsHTMLEditor::Paste (this=0x7f430705f800, aSelectionType=0) at nsHTMLDataTransfer.cpp:1869 #7 0x0000003f72d23ee6 in nsTextEditorMouseListener::MouseClick (this=0x7f430704fd80, aMouseEvent=<value optimized out>) at nsEditorEventListeners.cpp:362 #8 0x0000003f72e7fb45 in nsHTMLEditorMouseListener::MouseClick (this=0x7f430704fd80, aMouseEvent=0x7f43071b9640) at nsHTMLEditorMouseListener.cpp:307 #9 0x0000003f72bbf992 in DispatchToInterface (aIID=<value optimized out>, aMethod=<value optimized out>, aListener=<value optimized out>, aEvent=<value optimized out>) at nsEventListenerManager.cpp:184 #10 nsEventListenerManager::HandleEvent (aIID=<value optimized out>, aMethod=<value optimized out>, aListener=<value optimized out>, aEvent=<value optimized out>) at nsEventListenerManager.cpp:1203 #11 0x0000003f72bdaaea in nsEventTargetChainItem::HandleEvent (this=0x7f430551f8a8, aVisitor=@0x7fff29c81070, aFlags=2, aMayHaveNewListenerManagers=0) at nsEventDispatcher.cpp:236 #12 0x0000003f72bdacb1 in nsEventTargetChainItem::HandleEventTargetChain (this=<value optimized out>, aVisitor=@0x7fff29c81070, aFlags=<value optimized out>, aCallback=0x7fff29c81120, aMayHaveNewListenerManagers=490) at nsEventDispatcher.cpp:324 #13 0x0000003f72bdb0a7 in nsEventDispatcher::Dispatch (aTarget=<value optimized out>, aPresContext=<value optimized out>, aEvent=0x7fff29c81240, aDOMEvent=0x0, aEventStatus=0x7fff29c816fc, aCallback=<value optimized out>) at nsEventDispatcher.cpp:514 #14 0x0000003f72a254ed in PresShell::HandleEventInternal (this=0x7f4307723000, aEvent=0x7fff29c81240, aView=<value optimized out>, aStatus=0x7fff29c816fc) at nsPresShell.cpp:6136 #15 0x0000003f72a25b53 in PresShell::HandleEventWithTarget (this=0x7f4307723000, aEvent=0x7fff29c81240, aFrame=<value optimized out>, aContent=<value optimized out>, aStatus=0x1ea) at nsPresShell.cpp:6041 #16 0x0000003f72bcae71 in nsEventStateManager::CheckForAndDispatchClick (this=0x7f430931d8a0, aPresContext=<value optimized out>, aEvent=0x7fff29c81840, aStatus=0x7fff29c816fc) at nsEventStateManager.cpp:4073 #17 0x0000003f72bcb2c9 in nsEventStateManager::PostHandleEvent (this=0x7f430931d8a0, aPresContext=0x7f4307225c00, aEvent=0x7fff29c81840, aTargetFrame=<value optimized out>, aStatus=0x7fff29c816fc, aView=0x7f4307235400) at nsEventStateManager.cpp:3036 #18 0x0000003f72a255f4 in PresShell::HandleEventInternal (this=0x7f4307723000, aEvent=0x7fff29c81840, aView=<value optimized out>, aStatus=0x7fff29c816fc) at nsPresShell.cpp:6157 #19 0x0000003f72a25c94 in PresShell::HandlePositionedEvent (this=0x7f4307723000, aView=0x7f4307235400, aTargetFrame=0x7fff29c81600, aEvent=0x7fff29c81840, aEventStatus=0x7fff29c816fc) at nsPresShell.cpp:6024 #20 0x0000003f72a26019 in PresShell::HandleEvent (this=0x7f430a046800, aView=0x7f430a079900, aEvent=0x7fff29c81840, aEventStatus=0x7fff29c816fc) at nsPresShell.cpp:5877 #21 0x0000003f72cb0624 in nsViewManager::HandleEvent (this=<value optimized out>, aView=0x7f430a079900, aPoint=<value optimized out>, aEvent=0x7fff29c81840, aCaptured=<value optimized out>) at nsViewManager.cpp:1394 #22 0x0000003f72cb2915 in nsViewManager::DispatchEvent (this=0x7f4309055af0, aEvent=0x7fff29c81840, aStatus=0x7fff29c817fc) at nsViewManager.cpp:1353 #23 0x0000003f72cad4f5 in HandleEvent (aEvent=0x7fff29c81840) at nsView.cpp:167 #24 0x0000003f73052a39 in nsWindow::DispatchEvent (this=0x7f4307319400, aEvent=<value optimized out>, aStatus=@0x7f432191a9f0) at nsWindow.cpp:574 #25 0x0000003f7305b58c in nsWindow::OnButtonReleaseEvent (this=0x7f4307319400, aWidget=<value optimized out>, aEvent=0x7f43073e46a0) at nsWindow.cpp:2808 #26 0x0000003f7305b5e1 in button_release_event_cb (widget=0x7f431699c580, event=0x7f43073e46a0) at nsWindow.cpp:5369 #27 0x00000033ba12fcd8 in _gtk_marshal_BOOLEAN__BOXED (closure=0x7f43169a86a0, return_value=0x7fff29c81ab0, n_param_values=<value optimized out>, param_values=0x7f43073d64c0, invocation_hint=<value optimized out>, marshal_data=0x3f7305b5b7) at gtkmarshalers.c:84 #28 0x00000033b280b8ae in IA__g_closure_invoke (closure=0x7f43169a86a0, return_value=0x7fff29c81ab0, n_param_values=2, param_values=0x7f43073d64c0, invocation_hint=0x7fff29c81a70) at gclosure.c:767 #29 0x00000033b2820ff5 in signal_emit_unlocked_R (node=0x7f43219d5a10, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3247 #30 0x00000033b282229c in IA__g_signal_emit_valist (instance=0x7f431699c580, signal_id=<value optimized out>, detail=0, var_args=0x7fff29c81c60) at gsignal.c:2990 #31 0x00000033b2822963 in IA__g_signal_emit (instance=0x0, signal_id=1932120195, detail=563194352) at gsignal.c:3037 #32 0x00000033ba235ecf in gtk_widget_event_internal (widget=0x7f431699c580, event=0x7f43073e46a0) at gtkwidget.c:4761 #33 0x00000033ba128483 in IA__gtk_propagate_event (widget=0x7f431699c580, event=0x7f43073e46a0) at gtkmain.c:2396 #34 0x00000033ba1294ab in IA__gtk_main_do_event (event=0x7f43073e46a0) at gtkmain.c:1601 #35 0x00000033b744e9dc in gdk_event_dispatch (source=<value optimized out>, callback=<value optimized out>, user_data=<value optimized out>) at gdkevents-x11.c:2364 #36 0x00000033b203818e in g_main_dispatch (context=<value optimized out>) at gmain.c:1814 #37 IA__g_main_context_dispatch (context=<value optimized out>) at gmain.c:2367 #38 0x00000033b203b8e8 in g_main_context_iterate (context=0x7f4321959870, block=<value optimized out>, ---Type <return> to continue, or q <return> to quit--- dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2448 #39 0x00000033b203ba5c in IA__g_main_context_iteration (context=0x7f4321959870, may_block=0) at gmain.c:2511 #40 0x0000003f7307308f in nsBaseAppShell::DoProcessNextNativeEvent (this=0x0, mayWait=1932120195) at nsBaseAppShell.cpp:151 #41 0x0000003f7307319b in nsBaseAppShell::OnProcessNextEvent (this=0x7f431bb3a160, thr=0x7f432193b790, mayWait=1, recursionDepth=<value optimized out>) at nsBaseAppShell.cpp:278 #42 0x0000003f731486f8 in nsThread::ProcessNextEvent (this=0x7f432193b790, mayWait=1, result=0x7fff29c8202c) at nsThread.cpp:497 #43 0x0000003f73119f10 in NS_ProcessNextEvent_P (thread=0x0, mayWait=1932120195) at nsThreadUtils.cpp:227 #44 0x0000003f730732d9 in nsBaseAppShell::Run (this=0x7f431bb3a160) at nsBaseAppShell.cpp:170 #45 0x0000003f72f23a14 in nsAppStartup::Run (this=0x7f431b28a640) at nsAppStartup.cpp:193 #46 0x0000003f7286d4f8 in XRE_main (argc=<value optimized out>, argv=<value optimized out>, aAppData=<value optimized out>) at nsAppRunner.cpp:3298 #47 0x00000000004022ab in main (argc=<value optimized out>, argv=0x7fff29c85a78) at nsXULStub.cpp:385 Current language: auto; currently minimal (gdb)
It's here at sClipboard.cpp:448 for (PRInt32 j = 0; j < n_targets; j++) { gchar *atom_name = gdk_atom_name(targets[j]); >> if (!strcmp(atom_name, aFlavorList[i])) *_retval = PR_TRUE; Unfortunately all values are optimized out.
According to gtk documentation gdk_atom_name() always returns valid pointer so the broken value must be aFlavorList[i].
No, I'm wrong, gdk_atom_name() returns NULL if some broken value is inserted as input...
Moving upstream - https://bugzilla.mozilla.org/show_bug.cgi?id=495392
I can reproduce this reliably on Fedora11 using Thunderbird and Oracle SQL Developer. Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1b3pre) Gecko/20090513 Fedora/3.0-2.3.beta2.fc11 Lightning/1.0pre Thunderbird/3.0b2 1. Install Oracle SQL Developer (java app) from http://www.oracle.com/technology/software/products/sql/index.html 2. Use builtin IcedTea java to start oracle sql developer: [rcampbell@rcampbell-linux ~]$ java -version java version "1.6.0_0" OpenJDK Runtime Environment (IcedTea6 1.5) (fedora-25.b16.fc11-x86_64) OpenJDK 64-Bit Server VM (build 14.0-b15, mixed mode) 3. Go to Help-About in SQL Developer. Ctrl-c (copy) the version number. 4. Create a new message in Thunderbird. Ctrl-p paste the clipboard into the message. Result: You will get the segfault. I get the same stacktrace as posted above so I don't think it would be helpful to post again. Let me know otherwise. **Interesting**: If you try to *start* thunderbird with the clipboard already populated from SQL Developer, Thunderbird will segfault on startup with the following, slightly different stack trace: #0 0x0000003d46e0ed5b in raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/pt-raise.c:42 #1 0x0000003778a1f308 in nsProfileLock::FatalSignalHandler (signo=11) at nsProfileLock.cpp:212 #2 <signal handler called> #3 strcmp () at ../sysdeps/x86_64/strcmp.S:29 #4 0x00007ff94bfcba79 in nsClipboard::HasDataMatchingFlavors (this=<value optimized out>, aFlavorList=<value optimized out>, aLength=2, aWhichClipboard=<value optimized out>, _retval=0x7fff48f83278) at /usr/src/debug/thunderbird-3.0/mozilla/widget/src/gtk2/nsClipboard.cpp:448 #5 0x0000003778678465 in NS_InvokeByIndex_P (that=0x0, methodIndex=1045260144, paramCount=1426114992, params=0xffffffff) at /usr/src/debug/thunderbird-3.0/mozilla/xpcom/reflect/xptcall/src/md/unix/xptcinvoke_x86_64_linux.cpp:208 #6 0x00007ff94c41e007 in XPCWrappedNative::CallMethod (ccx=@0x7fff48f83610, mode=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp:2424 #7 0x00007ff94c426727 in XPC_WN_CallMethod (cx=0x7ff946820000, obj=<value optimized out>, argc=<value optimized out>, argv=<value optimized out>, vp=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp:1583 #8 0x000000388a24c098 in js_Invoke (cx=0x7ff946820000, argc=<value optimized out>, vp=0x7ff946836420, flags=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/jsinterp.cpp:1316 #9 0x000000388a24630e in js_Interpret (cx=0x7ff946820000) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/jsinterp.cpp:5000 #10 0x000000388a24c0f0 in js_Invoke (cx=0x7ff946820000, argc=<value optimized out>, vp=0x7ff9468362f0, flags=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/jsinterp.cpp:1334 #11 0x00007ff94c41a31a in nsXPCWrappedJSClass::CallMethod (this=0x7ff9453b9600, wrapper=<value optimized out>, methodIndex=<value optimized out>, info=0x7ff947989360, nativeParams=0x7fff48f84010) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/xpconnect/src/xpcwrappedjsclass.cpp:1606 #12 0x0000003778679045 in PrepareAndDispatch(struct nsXPTCStubBase *, PRUint32, PRUint64 *, PRUint64 *, double *) (self=0x7ff93e4f6180, methodIndex=<value optimized out>, args=0x7fff48f84190, gpregs=0x7fff48f84110, fpregs=0x7fff48f84140) at /usr/src/debug/thunderbird-3.0/mozilla/xpcom/reflect/xptcall/src/md/unix/xptcstubs_x86_64_linux.cpp:151 #13 0x0000003778678507 in SharedStub () from /usr/lib64/thunderbird-3.0b2/libxpcom_core.so #14 0x0000003778678465 in NS_InvokeByIndex_P (that=0x0, methodIndex=1045260144, paramCount=1426114992, params=0xffffffff) at /usr/src/debug/thunderbird-3.0/mozilla/xpcom/reflect/xptcall/src/md/unix/xptcinvoke_x86_64_linux.cpp:208 #15 0x00007ff94c41e007 in XPCWrappedNative::CallMethod (ccx=@0x7fff48f84760, mode=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp:2424 #16 0x00007ff94c426727 in XPC_WN_CallMethod (cx=0x7ff946820000, obj=<value optimized out>, argc=<value optimized out>, argv=<value optimized out>, vp=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp:1583 #17 0x000000388a24c098 in js_Invoke (cx=0x7ff946820000, argc=<value optimized out>, vp=0x7ff9468362b8, flags=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/jsinterp.cpp:1316 #18 0x000000388a24630e in js_Interpret (cx=0x7ff946820000) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/jsinterp.cpp:5000 #19 0x000000388a24c0f0 in js_Invoke (cx=0x7ff946820000, argc=<value optimized out>, vp=0x7ff946836090, flags=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/jsinterp.cpp:1334 #20 0x000000388a24c46c in js_InternalInvoke (cx=0x7ff946820000, obj=0x7ff9423c2480, fval=140708559482176, flags=0, argc=615, argv=<value optimized out>, rval=0x7fff48f84f08) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/jsinterp.cpp:1391 #21 0x000000388a218da3 in JS_CallFunctionValue (cx=0x0, obj=0x7ff93e4d6770, fval=140708849699248, argc=<value optimized out>, argv=<value optimized out>, rval=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/jsapi.cpp:5265 #22 0x00007ff9470737b5 in nsJSContext::CallEventHandler (this=0x7ff94680b970, aTarget=<value optimized out>, aScope=<value optimized out>, aHandler=0x7ff943b46d40, aargv=0x7ff93e4f61a0, arv=0x7fff48f850f0) at /usr/src/debug/thunderbird-3.0/mozilla/dom/src/base/nsJSEnvironment.cpp:2000 #23 0x00007ff9470ab466 in nsJSEventListener::HandleEvent (this=0x7ff9444a27c0, aEvent=0x7ff93e4f50b0) at /usr/src/debug/thunderbird-3.0/mozilla/dom/src/events/nsJSEventListener.cpp:247 #24 0x00007ff946f79f19 in nsEventListenerManager::HandleEventSubType (this=0x7ff94403ff60, aListenerStruct=<value optimized out>, aListener=0x7ff9444a27c0, aDOMEvent=0x7ff93e4f50b0, aCurrentTarget=0x7ff945333880, aPhaseFlags=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/content/events/src/nsEventListenerManager.cpp:1090 #25 0x00007ff946f7a2c1 in nsEventListenerManager::HandleEvent (this=0x7ff94403ff60, aPresContext=<value optimized out>, aEvent=0x7fff48f85630, aDOMEvent=0x7fff48f854e0, aCurrentTarget=<value optimized out>, aFlags=<value optimized out>, aEventStatus=0x7fff48f854e8) at /usr/src/debug/thunderbird-3.0/mozilla/content/events/src/nsEventListenerManager.cpp:1195 #26 0x00007ff946f94f32 in nsEventTargetChainItem::HandleEvent (this=0x7ff93e4f3038, aVisitor=@0x7fff48f854d0, aFlags=6, aMayHaveNewListenerManagers=1160984704) at /usr/src/debug/thunderbird-3.0/mozilla/content/events/src/nsEventDispatcher.cpp:236 #27 0x00007ff946f95067 in nsEventTargetChainItem::HandleEventTargetChain (this=<value optimized out>, aVisitor=@0x7fff48f854d0, aFlags=<value optimized out>, aCallback=0x0, aMayHaveNewListenerManagers=1) at /usr/src/debug/thunderbird-3.0/mozilla/content/events/src/nsEventDispatcher.cpp:300 #28 0x00007ff946f954ef in nsEventDispatcher::Dispatch (aTarget=<value optimized out>, aPresContext=<value optimized out>, aEvent=0x7fff48f85630, aDOMEvent=0x0, aEventStatus=0x7fff48f856ec, aCallback=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/content/events/src/nsEventDispatcher.cpp:514 #29 0x00007ff947053fc3 in nsXULCommandDispatcher::UpdateCommands (this=0x7ff945ac4ac0, aEventName=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/content/xul/document/src/nsXULCommandDispatcher.cpp:407 #30 0x0000003778678465 in NS_InvokeByIndex_P (that=0x0, methodIndex=1045260144, paramCount=1426114992, params=0xffffffff) at /usr/src/debug/thunderbird-3.0/mozilla/xpcom/reflect/xptcall/src/md/unix/xptcinvoke_x86_64_linux.cpp:208 #31 0x00007ff94c41e007 in XPCWrappedNative::CallMethod (ccx=@0x7fff48f85d00, mode=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/xpconnect/src/xpcwrappednative.cpp:2424 #32 0x00007ff94c426727 in XPC_WN_CallMethod (cx=0x7ff946820000, obj=<value optimized out>, argc=<value optimized out>, argv=<value optimized out>, vp=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp:1583 #33 0x000000388a24c098 in js_Invoke (cx=0x7ff946820000, argc=<value optimized out>, vp=0x7ff946836058, flags=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/jsinterp.cpp:1316 #34 0x000000388a24630e in js_Interpret (cx=0x7ff946820000) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/jsinterp.cpp:5000 #35 0x000000388a24c0f0 in js_Invoke (cx=0x7ff946820000, argc=<value optimized out>, vp=0x7ff946836038, flags=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/jsinterp.cpp:1334 #36 0x000000388a24c46c in js_InternalInvoke (cx=0x7ff946820000, obj=0x7ff946824e00, fval=140708569260608, flags=0, argc=615, argv=<value optimized out>, rval=0x7fff48f864a8) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/jsinterp.cpp:1391 #37 0x000000388a218da3 in JS_CallFunctionValue (cx=0x0, obj=0x7ff93e4d6770, fval=140708849699248, argc=<value optimized out>, argv=<value optimized out>, rval=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/js/src/jsapi.cpp:5265 #38 0x00007ff9470737b5 in nsJSContext::CallEventHandler (this=0x7ff94680b970, aTarget=<value optimized out>, aScope=<value optimized out>, aHandler=0x7ff94449a240, aargv=0x7ff94191b3a8, arv=0x7fff48f86640) at /usr/src/debug/thunderbird-3.0/mozilla/dom/src/base/nsJSEnvironment.cpp:2000 #39 0x00007ff9470898bf in nsGlobalWindow::RunTimeout (this=0x7ff946821000, aTimeout=0x7ff9418108e0) ---Type <return> to continue, or q <return> to quit--- at /usr/src/debug/thunderbird-3.0/mozilla/dom/src/base/nsGlobalWindow.cpp:7664 #40 0x00007ff947089bd6 in nsGlobalWindow::TimerCallback (aTimer=<value optimized out>, aClosure=0x7ff93e4d6770) at /usr/src/debug/thunderbird-3.0/mozilla/dom/src/base/nsGlobalWindow.cpp:7996 #41 0x000000377866f0f5 in nsTimerImpl::Fire (this=0x7ff946865330) at /usr/src/debug/thunderbird-3.0/mozilla/xpcom/threads/nsTimerImpl.cpp:420 #42 0x000000377866f1c4 in nsTimerEvent::Run (this=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/xpcom/threads/nsTimerImpl.cpp:512 #43 0x000000377866cab5 in nsThread::ProcessNextEvent (this=0x7ff95504f1f0, mayWait=1, result=0x7fff48f8678c) at /usr/src/debug/thunderbird-3.0/mozilla/xpcom/threads/nsThread.cpp:510 #44 0x000000377863d984 in NS_ProcessNextEvent_P (thread=0x0, mayWait=1045260144) at nsThreadUtils.cpp:227 #45 0x00007ff94bfd2591 in nsBaseAppShell::Run (this=0x7ff954f0c880) at /usr/src/debug/thunderbird-3.0/mozilla/widget/src/xpwidgets/nsBaseAppShell.cpp:170 #46 0x00007ff94b0d18a2 in nsAppStartup::Run (this=0x7ff94e684980) at /usr/src/debug/thunderbird-3.0/mozilla/toolkit/components/startup/src/nsAppStartup.cpp:192 #47 0x0000003778a195ca in XRE_main (argc=<value optimized out>, argv=<value optimized out>, aAppData=<value optimized out>) at /usr/src/debug/thunderbird-3.0/mozilla/toolkit/xre/nsAppRunner.cpp:3279 #48 0x00000000004019bc in main (argc=1, argv=0x7fff48f86fc8) at /usr/src/debug/thunderbird-3.0/mail/app/nsMailApp.cpp:103
Ryan: Thanks for the reproducer, please make sure upstream (since this BZ is closed UPSTREAM) knows about it. Thanks.
*** Bug 528694 has been marked as a duplicate of this bug. ***
*** Bug 533359 has been marked as a duplicate of this bug. ***
*** Bug 540852 has been marked as a duplicate of this bug. ***
*** Bug 545338 has been marked as a duplicate of this bug. ***
*** Bug 542918 has been marked as a duplicate of this bug. ***
*** Bug 542721 has been marked as a duplicate of this bug. ***