User Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Firefox/52.0 Build ID: 20170321191720 Actual results: gdb) bt #0 0x000000080e39eb78 in nsImapMockChannel::Close() () from /usr/local/lib/thunderbird/libxul.so #1 0x000000080e39ea36 in nsImapMockChannel::~nsImapMockChannel() () from /usr/local/lib/thunderbird/libxul.so #2 0x000000080e39eb29 in nsImapMockChannel::~nsImapMockChannel() () from /usr/local/lib/thunderbird/libxul.so #3 0x000000080e39e83c in nsImapMockChannel::Release() () from /usr/local/lib/thunderbird/libxul.so #4 0x000000080e3acf9c in nsImapService::GetMessageFromUrl(nsIImapUrl*, int, nsIMsgFolder*, nsIImapMessageSink*, nsIMsgWindow*, nsISupports*, bool, nsIURI**) () from /usr/local/lib/thunderbird/libxul.so #5 0x000000080e3ad609 in nsImapService::StreamMessage(char const*, nsISupports*, nsIMsgWindow*, nsIUrlListener*, bool, nsACString_internal const&, bool, nsIURI**) () from /usr/local/lib/thunderbird/libxul.so #6 0x000000080e256f0f in nsOfflineStoreCompactState::CopyNextMessage(bool&) () from /usr/local/lib/thunderbird/libxul.so #7 0x000000080e257198 in nsOfflineStoreCompactState::OnStopRequest(nsIRequest*, nsISupports*, nsresult) () from /usr/local/lib/thunderbird/libxul.so #8 0x000000080e39e6fc in nsImapCacheStreamListener::OnStopRequest(nsIRequest*, nsISupports*, nsresult) () from /usr/local/lib/thunderbird/libxul.so #9 0x000000080eca8b20 in nsInputStreamPump::OnStateStop() () from /usr/local/lib/thunderbird/libxul.so #10 0x000000080eca84df in nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream*) () from /usr/local/lib/thunderbird/libxul.so #11 0x000000080ec1096c in nsInputStreamReadyEvent::Run() () from /usr/local/lib/thunderbird/libxul.so #12 0x000000080ec241b7 in nsThread::ProcessNextEvent(bool, bool*) () from /usr/local/lib/thunderbird/libxul.so #13 0x000000080ec48f9f in NS_ProcessNextEvent(nsIThread*, bool) () from /usr/local/lib/thunderbird/libxul.so #14 0x000000080ef03816 in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) () from /usr/local/lib/thunderbird/libxul.so #15 0x000000080eee3779 in MessageLoop::Run() () from /usr/local/lib/thunderbird/libxul.so #16 0x000000081087b386 in nsBaseAppShell::Run() () from /usr/local/lib/thunderbird/libxul.so #17 0x00000008110f8ab9 in nsAppStartup::Run() () from /usr/local/lib/thunderbird/libxul.so #18 0x00000008111662ab in XREMain::XRE_mainRun() () from /usr/local/lib/thunderbird/libxul.so #19 0x00000008111667ed in XREMain::XRE_main(int, char**, nsXREAppData const*) () from /usr/local/lib/thunderbird/libxul.so #20 0x0000000811166be4 in XRE_main () from /usr/local/lib/thunderbird/libxul.so #21 0x0000000001026cec in main ()

Could you please provide a stacktrace with debug symbols (source file name and line number instead of compiled shared objects) provided? Thanks!

A fair chance this is bug Bug 1158578. Unless this occurred during an intentional shutdown that you initiated.

(In reply to Andre Klapper from comment #1) > Could you please provide a stacktrace with debug symbols (source file name > and line number instead of compiled shared objects) provided? Thanks! Very unfortunately, can't do. I am on FreeBSD and there is no package with debug symbols...

(In reply to Wayne Mery (:wsmwk, NI for questions) from comment #2) > A fair chance this is bug Bug 1158578. > Unless this occurred during an intentional shutdown that you initiated. Looks very likely. I was not shutting down thunderbird and the crash happened right after compacting a folder.

Thanks for the feedback. Let's close it as a duplicate and if 1158578 doesn't fix your issue then this can be reopened. One more question - how long are you running betas, and is this your first crash during compact?

(In reply to Wayne Mery (:wsmwk, NI for questions) from comment #5) > One more question - how long are you running betas, and is this your first > crash during compact? This is the first crash of this nature that I've ever seen. I am not running betas (at least by choice), I am running whatever the latest version is provided via FreeBSD packages. So, I am using 52.0 for three days now.

Although this report is closed I am adding another stack trace. It is similar to the first one, but has some differences, notably some CacheEntry frames: (gdb) bt #0 0x000000080e2571ad in nsOfflineStoreCompactState::OnStopRequest(nsIRequest*, nsISupports*, nsresult) () from /usr/local/lib/thunderbird/libxul.so #1 0x000000080e3a01e2 in nsImapMockChannel::ReadFromImapConnection() () from /usr/local/lib/thunderbird/libxul.so #2 0x000000080e39f37a in nsImapMockChannel::OnCacheEntryAvailable(nsICacheEntry*, bool, nsIApplicationCache*, nsresult) () from /usr/local/lib/thunderbird/libxul.so #3 0x000000080ed42b71 in mozilla::net::CacheEntry::InvokeAvailableCallback(mozilla::net::CacheEntry::Callback const&) () from /usr/local/lib/thunderbird/libxul.so #4 0x000000080ed459db in mozilla::net::CacheEntry::InvokeCallback(mozilla::net::CacheEntry::Callback&) () from /usr/local/lib/thunderbird/libxul.so #5 0x000000080ed453fa in mozilla::net::CacheEntry::InvokeCallbacks(bool) () from /usr/local/lib/thunderbird/libxul.so #6 0x000000080ed43722 in mozilla::net::CacheEntry::InvokeCallbacks() () from /usr/local/lib/thunderbird/libxul.so #7 0x000000080ed4280e in mozilla::net::CacheEntry::AsyncOpen(nsICacheEntryOpenCallback*, unsigned int) () from /usr/local/lib/thunderbird/libxul.so #8 0x000000080ed7b6dc in mozilla::net::CacheStorage::AsyncOpenURI(nsIURI*, nsACString_internal const&, unsigned int, nsICacheEntryOpenCallback*) () from /usr/local/lib/thunderbird/libxul.so #9 0x000000080e39f8ae in nsImapMockChannel::OpenCacheEntry() () from /usr/local/lib/thunderbird/libxul.so #10 0x000000080e3a0727 in nsImapMockChannel::AsyncOpen(nsIStreamListener*, nsISupports*) () from /usr/local/lib/thunderbird/libxul.so #11 0x000000080e3acf66 in nsImapService::GetMessageFromUrl(nsIImapUrl*, int, nsIMsgFolder*, nsIImapMessageSink*, nsIMsgWindow*, nsISupports*, bool, nsIURI**) () from /usr/local/lib/thunderbird/libxul.so #12 0x000000080e3ad609 in nsImapService::StreamMessage(char const*, nsISupports*, nsIMsgWindow*, nsIUrlListener*, bool, nsACString_internal const&, bool, nsIURI**) () from /usr/local/lib/thunderbird/libxul.so #13 0x000000080e256f0f in nsOfflineStoreCompactState::CopyNextMessage(bool&) () from /usr/local/lib/thunderbird/libxul.so #14 0x000000080e257198 in nsOfflineStoreCompactState::OnStopRequest(nsIRequest*, nsISupports*, nsresult) () from /usr/local/lib/thunderbird/libxul.so #15 0x000000080e39e6fc in nsImapCacheStreamListener::OnStopRequest(nsIRequest*, nsISupports*, nsresult) () from /usr/local/lib/thunderbird/libxul.so #16 0x000000080eca8b20 in nsInputStreamPump::OnStateStop() () from /usr/local/lib/thunderbird/libxul.so #17 0x000000080eca84df in nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream*) () from /usr/local/lib/thunderbird/libxul.so #18 0x000000080ec1096c in nsInputStreamReadyEvent::Run() () from /usr/local/lib/thunderbird/libxul.so #19 0x000000080ec241b7 in nsThread::ProcessNextEvent(bool, bool*) () from /usr/local/lib/thunderbird/libxul.so #20 0x000000080ec48f9f in NS_ProcessNextEvent(nsIThread*, bool) () from /usr/local/lib/thunderbird/libxul.so #21 0x000000080ef03816 in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) () from /usr/local/lib/thunderbird/libxul.so #22 0x000000080eee3779 in MessageLoop::Run() () from /usr/local/lib/thunderbird/libxul.so #23 0x000000081087b386 in nsBaseAppShell::Run() () from /usr/local/lib/thunderbird/libxul.so #24 0x00000008110f8ab9 in nsAppStartup::Run() () from /usr/local/lib/thunderbird/libxul.so #25 0x00000008111662ab in XREMain::XRE_mainRun() () from /usr/local/lib/thunderbird/libxul.so #26 0x00000008111667ed in XREMain::XRE_main(int, char**, nsXREAppData const*) () from /usr/local/lib/thunderbird/libxul.so #27 0x0000000811166be4 in XRE_main () from /usr/local/lib/thunderbird/libxul.so #28 0x0000000001026cec in main () A couple more potentially interesting bits: 0x000000080e2571a9 <+505>: mov 0x50(%r14),%rdi => 0x000000080e2571ad <+509>: mov (%rdi),%rax (gdb) p/a $r14 $2 = 0x8297faf80 (gdb) p/a $rdi $3 = 0x5a5a5a5a5a5a5a5a (gdb) x/a $r14 0x8297faf80: 0x5a5a5a5a5a5a5a5a So, it looks like in r14 we had a pointer to freed memory.