User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9a9pre) Gecko/2007100511 Firefox/3.0a9pre Build Identifier: This is a strange bug. When I try to reply to some message with caracters others than letters and numbers (like é, à, or a '), composition window opens and then close, crashing thunderbird. I build a thunderbird using this .mozconfig : "# # See http://www.mozilla.org/build/ for build instructions. # export CC=gcc-4.2 export CXX=g++-4.2 . $topsrcdir/mail/config/mozconfig # Options for 'configure' (same as command-line options). ac_add_options --enable-pango ac_add_options --enable-default-toolkit=cairo-gtk2" When I ran gdb on core file, and enter bt, I got this : "(gdb) core core Core was generated by `./thunderbird-bin'. Program terminated with signal 11, Segmentation fault. #0 0x00002adfab40efcb in ?? () (gdb) bt #0 0x00002adfab40efcb in ?? () #1 0x00002adfab90b293 in ?? () #2 0x0000000000000400 in ?? () #3 0x0000000000000000 in ?? ()" I was suspecting bug 301291 but it seems to be a wrong guess. Reproducible: Always Steps to Reproduce: 1.See details 2. 3. Actual Results: Crash when clicking on reply to message with titles with caracters like é, ' Expected Results: Thunderbird kept running ! :) Using Ubuntu Linux Gutsy Gibbon AMD64, up-to-date.

Got a trace : ./thunderbird -g ./run-mozilla.sh -g ./thunderbird-bin MOZILLA_FIVE_HOME=. LD_LIBRARY_PATH=.:./plugins:. DISPLAY=:0.0 DYLD_LIBRARY_PATH=.:. LIBRARY_PATH=.:./components:. SHLIB_PATH=.:. LIBPATH=.:. ADDON_PATH=. MOZ_PROGRAM=./thunderbird-bin MOZ_TOOLKIT= moz_debug=1 moz_debugger= /usr/bin/gdb ./thunderbird-bin -x /tmp/mozargs.BZ3882 GNU gdb 6.6-debian Copyright (C) 2006 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "x86_64-linux-gnu"... Using host libthread_db library "/lib/libthread_db.so.1". (gdb) run Starting program: /home/fred/logs/mail/mozilla/dist/bin/thunderbird-bin [Thread debugging using libthread_db enabled] [New Thread 47937437975888 (LWP 3887)] [New Thread 1082132816 (LWP 3890)] [New Thread 1090525520 (LWP 3891)] [New Thread 1098918224 (LWP 3892)] [Thread 1082132816 (LWP 3890) exited] [New Thread 1107310928 (LWP 3893)] [New Thread 1115703632 (LWP 3894)] [New Thread 1124096336 (LWP 3896)] [New Thread 1132489040 (LWP 3897)] [Thread 1132489040 (LWP 3897) exited] [Thread 1098918224 (LWP 3892) exited] [Thread 1124096336 (LWP 3896) exited] [Thread 1090525520 (LWP 3891) exited] [Thread 1107310928 (LWP 3893) exited] [Thread 1115703632 (LWP 3894) exited] [New process 3887] [New LWP 3887] Program received signal SIGSEGV, Segmentation fault. Cannot remove breakpoints because program is no longer writable. It might be running in another process. Further execution is probably impossible. 0x00000000007d3ef5 in nsPlainTextSerializer::Write (this=0x31cf790, aStr=@0x31cf968) at ../../../dist/include/string/nsTString.h:134 134 return mData[i]; Could this be related to bugfix for bug 99922 ? Because nsPlainTextSerializer::Write is found only in nsPlainTextSerializer.cpp, modified on 2 october 2007.

No, I think guilty bug is 125928. Because crash happens in text only reply mode !

Which exact build are you using? See bug 398547, which looks like exactly what you're seeing.

I am using an homemade build, using this .mozconfig : # # See http://www.mozilla.org/build/ for build instructions. # export CC=gcc-4.2 export CXX=g++-4.2 . $topsrcdir/mail/config/mozconfig # Options for 'configure' (same as command-line options). ac_add_options --enable-optimize="-Os -march=athlon64 -w -pipe -D_FORTIFY_SOURCE=2" ac_add_options --disable-debug ac_add_options --disable-tests ac_add_options --disable-shared ac_add_options --enable-static ac_add_options --enable-pango ac_add_options --enable-default-toolkit=cairo-gtk2 I guess the patch was added after I made the debug build. I will try again and see if the crash still happen. It will take about an hour before I can tell if the bug is still "alive" or not.

Well, how to say it simply : duplicate of bug 398547. Sorry for the annoyance. At least, I can write mail within thunderbird now ;)