[Bug 440020] New: thunderbird segmentation faults constantly with TLS imap connections

29 Oct 2008

      ...
= { = {mVTable = 0xb7d2b431,
          mData = 0x10011 
, mLength = 63,
          mFlags = 3217162060}, <No data fields>}, <No data fields>},
    mFixedCapacity = 1818845549,
    mFixedBuf = 0x7265732e },
  mStorage =
"ver.\234�ҷer1.time\001\000\000\000\020\000\220�|����\220O�\b\220�S
\t\234��`�շ\220O�\b\000\000\000\000v\237\017�rI"}
        imapState = <value optimized out>
        actionForProposedUrl = <value optimized out>
        msgUrl = { = {mRawPtr = 0xad91fda4}, <No data fields>}
        server = { = {mRawPtr = 0x953de90}, <No data fields>}
#6  0x08859a63 in nsImapIncomingServer::GetImapConnection (this=0x953de90,
    aEventQueue=0x8d0a1a0, aImapUrl=0xad91fda0, aImapConnection=0xbfc200e8)
---Type <return> to continue, or q <return> to quit---
    at nsImapIncomingServer.cpp:757
        i = 2
        rv = 0
        canRunUrlImmediately = 0
        canRunButBusy = 0
        connection = { = {
    mRawPtr = 0xb1f40590}, <No data fields>}
        freeConnection = { = {mRawPtr = 0x0}, <No data fields>}
        isBusy = 1
        isInboxConnection = 0
        redirectorType = {<nsCString> = {<nsCSubstring> =
{
 = {mVTable = 0xb7e3dcc8, mData = 0xad90aa40 "", mLength = 0,
        mFlags = 9}, <No data fields>}, <No data fields>}, <No data fields>}
        maxConnections = 5
        cnt = 5
        userCancelled = <value optimized out>
        requiredState = <value optimized out>
#7  0x0885a85a in nsImapIncomingServer::GetImapConnectionAndLoadUrl (
    this=0x953de90, aClientEventQueue=0x8d0a1a0, aImapUrl=0xad91fda0,
    aConsumer=0x0) at nsImapIncomingServer.cpp:448
        rv = 0
        aProtocol = { = {mRawPtr = 0x0}, <No data fields>}
        mailnewsurl = { = {
---Type <return> to continue, or q <return> to quit---
    mRawPtr = 0xad91fda8}, <No data fields>}
#8  0x08894d41 in nsImapService::GetImapConnectionAndLoadUrl (this=0x8e87a88,
    aClientEventQueue=0x8d0a1a0, aImapUrl=0xad91fda0, aConsumer=0x0,
    aURL=0xbfc20274) at nsImapService.cpp:2159
        aImapServer = { = {
    mRawPtr = 0x953df1c}, <No data fields>}
        rv = 0
        aMsgIncomingServer = { = {
    mRawPtr = 0x953de90}, <No data fields>}
        msgUrl = { = {mRawPtr = 0xad91fda4}, <No data fields>}
#9  0x0889b4b4 in nsImapService::FolderCommand (this=0x8e87a88,
    clientEventQueue=0x8d0a1a0, imapMailFolder=0x9155034,
    urlListener=0x953df2c, command=0x8c37e6b "/folderstatus>", imapAction=22,
    url=0xbfc20274) at nsImapService.cpp:1404
        folderName = {<nsCString> = {<nsCSubstring> = { =
{
mVTable = 0xb7e3dcc8, mData = 0xad920018 "INBOX/personel/darins.net",
        mLength = 25,
        mFlags = 9}, <No data fields>}, <No data fields>}, <No data fields>}
        uri = { = {mRawPtr = 0xad91fda4}, <No data fields>}
        imapUrl = { = {mRawPtr = 0xad91fda0}, <No data fields>}
        urlSpec = {<nsFixedCString> = {<nsCString> = {<nsCSubstring> =
{<nsACStr
ing_internal> = {mVTable = 0xb7e3dcc8,
          mData = 0xad91c7a8
"imap://user_name@imap.domain.com:143/folderst---Ty
https://bugzilla.novell.com/show_bug.cgi?id=440020

           Summary: thunderbird segmentation faults constantly with TLS imap
                    connections
           Product: openSUSE 10.3
           Version: Final
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Firefox
        AssignedTo: bnc-team-mozilla@forge.provo.novell.com
        ReportedBy: darinper@cognigencorp.com
         QAContact: qa@suse.de
          Found By: ---

Thunderbird is very unstable and seg faults quite frequently when configured to
talk TLS to an imap server. When configured to NOT use TLS the client is much
more stable, with the exception of the nss_ldap bugs 439588 and 157078. It is
difficult to reproduce the segmentation faults because the happen randomly.
Some times I can make Tbird crash when clicking on the "get mail" button in
rapid succession, sometimes I won't even be using the application and it
crashes.

Client/Desktop is openSuSE 10.3
MozillaThunderbird-2.0.0.17-5.1 from:
http://download.opensuse.org/repositories/mozilla/openSUSE_10.3/
My account is an LDAP account using nss_ldap and pam_ldap.

Mail Server is openSuSE 10.2
cyrus-imapd-2.2.13-24.2

GDB backtrace

LD_LIBRARY_PATH=/usr/lib/thunderbird gdb /usr/lib/thunderbird/thund
erbird-bin
GNU gdb 6.6.50.20070726-cvs
Copyright (C) 2007 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i586-suse-linux"...
Using host libthread_db library "/lib/libthread_db.so.1".
(gdb) run
Starting program: /usr/lib/thunderbird/thunderbird-bin
[Thread debugging using libthread_db enabled]
[New Thread 0xb6f6f6d0 (LWP 31842)]
[New Thread 0xb6e0ab90 (LWP 31845)]
[New Thread 0xb65b1b90 (LWP 31846)]
[New Thread 0xb5735b90 (LWP 31847)]
[New Thread 0xb49a5b90 (LWP 31848)]
[New Thread 0xb41a4b90 (LWP 31849)]
[New Thread 0xb380db90 (LWP 31850)]
[New Thread 0xb300cb90 (LWP 31851)]
[New Thread 0xb280bb90 (LWP 31852)]
[New Thread 0xb1effb90 (LWP 31853)]
[New Thread 0xb0c38b90 (LWP 31854)]
[New Thread 0xb0437b90 (LWP 31855)]
[New Thread 0xafb36b90 (LWP 31856)]
[New Thread 0xaf335b90 (LWP 31857)]
[New Thread 0xaeb34b90 (LWP 31858)]
[New Thread 0xae333b90 (LWP 31859)]
[Thread 0xaeb34b90 (LWP 31858) exited]
[Thread 0xae333b90 (LWP 31859) exited]
[Thread 0xb300cb90 (LWP 31851) exited]
[Thread 0xb5735b90 (LWP 31847) exited]
[New Thread 0xb5735b90 (LWP 32196)]
[Thread 0xb5735b90 (LWP 32196) exited]
[New Thread 0xb5735b90 (LWP 32230)]
[Thread 0xb380db90 (LWP 31850) exited]
[Thread 0xb280bb90 (LWP 31852) exited]
[New Thread 0xb280bb90 (LWP 32231)]
[New Thread 0xb380db90 (LWP 32232)]
[Thread 0xb280bb90 (LWP 32231) exited]
[Thread 0xb380db90 (LWP 32232) exited]
[New Thread 0xb380db90 (LWP 32238)]
[New Thread 0xb280bb90 (LWP 32239)]
[New Thread 0xb300cb90 (LWP 32265)]
[Thread 0xb380db90 (LWP 32238) exited]
[Thread 0xb300cb90 (LWP 32265) exited]
[New Thread 0xb300cb90 (LWP 32268)]
[Thread 0xb300cb90 (LWP 32268) exited]
[New Thread 0xb300cb90 (LWP 32361)]
[New Thread 0xb380db90 (LWP 32362)]
[New Thread 0xae333b90 (LWP 32365)]
[Thread 0xae333b90 (LWP 32365) exited]
[Thread 0xb380db90 (LWP 32362) exited]
[Thread 0xb300cb90 (LWP 32361) exited]
[New Thread 0xb300cb90 (LWP 32384)]
[New Thread 0xb380db90 (LWP 32385)]
[New Thread 0xae333b90 (LWP 32386)]
[New Thread 0xad6ffb90 (LWP 32390)]
[New Thread 0xacefeb90 (LWP 32391)]
[New Thread 0xac6fdb90 (LWP 32393)]
[Thread 0xad6ffb90 (LWP 32390) exited]
[Thread 0xac6fdb90 (LWP 32393) exited]
[New Thread 0xac6fdb90 (LWP 32398)]
[Thread 0xac6fdb90 (LWP 32398) exited]
[Thread 0xb300cb90 (LWP 32384) exited]
[New Thread 0xb300cb90 (LWP 32425)]
[Thread 0xb300cb90 (LWP 32425) exited]
[New Thread 0xb300cb90 (LWP 32441)]
[New Thread 0xac6fdb90 (LWP 32442)]
[Thread 0xb300cb90 (LWP 32441) exited]
[Thread 0xac6fdb90 (LWP 32442) exited]
[New Thread 0xac6fdb90 (LWP 32499)]
[Thread 0xac6fdb90 (LWP 32499) exited]
[New Thread 0xac6fdb90 (LWP 32523)]
[Thread 0xac6fdb90 (LWP 32523) exited]
[New Thread 0xac6fdb90 (LWP 32546)]
[New Thread 0xb300cb90 (LWP 32547)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb6f6f6d0 (LWP 31842)]
0xb70e86c5 in memcpy () from /lib/libc.so.6
(gdb) bt full
#0  0xb70e86c5 in memcpy () from /lib/libc.so.6
No symbol table info available.
#1  0x08742477 in nsSSLThread::requestRecvMsgPeek (si=0x0, buf=0xbfc1fecf,
    amount=1, flags=2, timeout=0) at nsSSLThread.cpp:172
        return_amount = 1
        realSSLFD = <value optimized out>
#2  0x087346a6 in PSMRecv (fd=0x94df3a0, buf=0xbfc1fecf, amount=1, flags=2,
    timeout=0) at nsNSSIOLayer.cpp:1457
        locker = {<No data fields>}
#3  0xb7d4646d in PR_Recv () from /usr/lib/libnspr4.so
No symbol table info available.
#4  0x081b3684 in nsSocketTransport::IsAlive (this=0xb1f645f8,
    result=0xbfc1ff20) at nsSocketTransport2.cpp:1752
        fd = (PRFileDesc *) 0x94df3a0
        c = 0 '\0'
        rval = <value optimized out>
#5  0x0887bdac in nsImapProtocol::CanHandleUrl (this=0xb1f40590,
    aImapUrl=0xad91fda0, aCanRunUrl=0xbfc20098, hasToWait=0xbfc20094)
    at nsImapProtocol.cpp:1787
        isAlive = <value optimized out>
        rv = 2147500037
        isBusy = 0
        isInboxConnection = 0
---Type <return> to continue, or q <return> to quit---
        inSelectedState = <value optimized out>
        curSelectedUrlFolderName = {<nsFixedCString> = {<nsCString> =
{<nsCSubst
ring> = { = {mVTable = 0xb7d6cff4, mData = 0x0,
          mLength = 3217162172,
          mFlags = 3084172606}, <No data fields>}, <No data fields>},
    mFixedCapacity = 147410832,
    mFixedBuf = 0x4908ccda 
},
  mStorage =
"�l\a\000��Է\000\000\000\000\000\000\000\000���P\a\205\b\220�S\t���
����&���\207jZ\004\000���\202&\035\000\000\000\000\000\000"}
        pendingUrlFolderName = {<nsFixedCString> = {<nsCString> =
{/INBOX/personel/darins.net", mLength = 81,
          mFlags = 65541}, <No data fields>}, <No data fields>},
    mFixedCapacity = 63,
    mFixedBuf = 0xbfc201bc
"imap://user_name@imap.domain.com:143/folderstatus>/"
},
  mStorage =
"imap://user_name@imap.domain.com:143/folderstatus>/\000��\b�\224�\
b"}
        hierarchySeparator = <value optimized out>
        rv = 0
#10 0x0889b6f3 in nsImapService::UpdateFolderStatus (this=0x8e87a88,
    aClientEventQueue=0x8d0a1a0, aImapMailFolder=0x9155034,
    aUrlListener=0x953df2c, aURL=0xbfc20274) at nsImapService.cpp:1429
No locals.
#11 0x08862e11 in nsImapMailFolder::UpdateStatus (this=0x9155010,
    aListener=0x953df2c, aMsgWindow=0x0) at nsImapMailFolder.cpp:1320
        rv = 0
        imapService = { = {
    mRawPtr = 0x8e87a88}, <No data fields>}
        uri = { = {mRawPtr = 0xad91fda4}, <No data fields>}
#12 0x08851c30 in nsImapIncomingServer::OnStopRunningUrl (this=0x953de90,
    url=0xad91b41c, exitCode=0) at nsImapIncomingServer.cpp:2795
        folderCount = 243
        imapAction = 22
---Type <return> to continue, or q <return> to quit---
        rv = <value optimized out>
        msgWindow = { = {mRawPtr = 0x0}, <No data fields>}
        imapUrl = { = {mRawPtr = 0xad91b418}, <No data fields>}
#13 0x0877982c in nsUrlListenerManager::BroadcastChange (this=0xad900de0,
    aUrl=0xad91b41c, notification=nsUrlNotifyStopRunning, aErrorCode=0)
    at nsUrlListenerManager.cpp:107
        listener = { = {mRawPtr = 0x953df2c}, <No data fields>}
        aSupports = { = {mRawPtr = 0x953df2c}, <No data fields>}
        index = 1
#14 0x0877994b in nsUrlListenerManager::OnStopRunningUrl (this=0xad900de0,
    aUrl=0xad91b41c, aErrorCode=0) at nsUrlListenerManager.cpp:123
        rv = <value optimized out>
#15 0x089407a1 in nsMsgMailNewsUrl::SetUrlState (this=0xad91b41c,
    aRunningUrl=0, aExitCode=0) at nsMsgMailNewsUrl.cpp:131
        statusFeedback = { = {mRawPtr = 0x0}, <No data fields>}
#16 0x0885b4c0 in nsImapMailFolder::SetUrlState (this=0x9154c80,
    aProtocol=0x99318d8, aUrl=0xad91b41c, isRunning=0, statusCode=0)
    at nsImapMailFolder.cpp:6339
No locals.
#17 0xb7e20709 in XPTC_InvokeByIndex ()
   from /usr/lib/thunderbird/libxpcom_core.so
No locals.
#18 0xb7e0df47 in EventHandler (self=0xaaa5a58) at nsProxyEvent.cpp:561
---Type <return> to continue, or q <return> to quit---
        rv = <value optimized out>
        info = (nsProxyObjectCallInfo *) 0xb52f8b0
#19 0xb7e07be7 in PL_HandleEvent (self=0xaaa5a58) at plevent.c:688
        result = <value optimized out>
#20 0xb7e07ec7 in PL_ProcessPendingEvents (self=0x8d09de0) at plevent.c:623
        event = (PLEvent *) 0x9651690
        count = 3
#21 0xb7e09d58 in nsEventQueueImpl::ProcessPendingEvents (this=0x8d0a1a0)
    at nsEventQueue.cpp:448
        correctThread = <value optimized out>
        rv = 0
        caller = {mQueue = 0x8d0a1a0, mListener = { = {
      mRawPtr = 0x8d209f4}, <No data fields>}}
#22 0x08293425 in event_processor_callback (source=0x90b7868,
    condition=G_IO_IN, data=0x969b8f8) at nsAppShell.cpp:67
No locals.
#23 0xb77aed2d in ?? () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#24 0x090b7868 in ?? ()
No symbol table info available.
#25 0x00000001 in ?? ()
No symbol table info available.
#26 0xb77efff4 in ?? () from /usr/lib/libglib-2.0.so.0
---Type <return> to continue, or q <return> to quit---
No symbol table info available.
#27 0xbfc2049c in ?? ()
No symbol table info available.
#28 0x090b78b0 in ?? ()
No symbol table info available.
#29 0xbfc204b8 in ?? ()
No symbol table info available.
#30 0xb777f5d6 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
Backtrace stopped: previous frame inner to this frame (corrupt stack?)
(gdb)

-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

bugzilla_noreply＠novell.com

tags

participants (1)