crash [@ hashKey] from talkback server, possibly a topcrash. guessing at component TB50175225 Trying to open the "JUNK" file TB50483926 After marking one email as Junk manually, T-bird crashed. TB50442249 searching for an email by name of sender hashKey [mozilla/xpcom/ds/nsHashtable.cpp, line 87] nsHashtable::Put [mozilla/xpcom/ds/nsHashtable.cpp, line 220] nsMsgGroupView::AddHdrToThread [mozilla/mailnews/base/src/nsMsgGroupView.cpp, line 290] nsMsgGroupView::OpenWithHdrs [mozilla/mailnews/base/src/nsMsgGroupView.cpp, line 357] nsMsgGroupView::Open [mozilla/mailnews/base/src/nsMsgGroupView.cpp, line 73] XPTC_InvokeByIndex [mozilla/xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp, line 102] XPCWrappedNative::CallMethod [mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 2169] XPC_WN_CallMethod [mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1455] js_Invoke [mozilla/js/src/jsinterp.c, line 1387] js_Interpret [mozilla/js/src/jsinterp.c, line 3966] js_Invoke [mozilla/js/src/jsinterp.c, line 1406] js_InternalInvoke [mozilla/js/src/jsinterp.c, line 1481] JS_CallFunctionValue [mozilla/js/src/jsapi.c, line 4367] nsJSContext::CallEventHandler [mozilla/dom/src/base/nsJSEnvironment.cpp, line 1500] nsJSEventListener::HandleEvent [mozilla/dom/src/events/nsJSEventListener.cpp, line 195] nsEventListenerManager::HandleEventSubType [mozilla/content/events/src/nsEventListenerManager.cpp, line 1655] nsEventListenerManager::HandleEvent [mozilla/content/events/src/nsEventListenerManager.cpp, line 1762] nsXULElement::HandleDOMEvent [mozilla/content/xul/content/src/nsXULElement.cpp, line 2237] nsTreeSelection::FireOnSelectHandler [mozilla/layout/xul/base/src/tree/src/nsTreeSelection.cpp, line 789] nsTreeSelection::Select [mozilla/layout/xul/base/src/tree/src/nsTreeSelection.cpp, line 378] XPCWrappedNative::CallMethod [mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 2169] XPC_WN_CallMethod [mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1455] js_Invoke [mozilla/js/src/jsinterp.c, line 1387] js_Interpret [mozilla/js/src/jsinterp.c, line 3966] js_Invoke [mozilla/js/src/jsinterp.c, line 1406] js_InternalInvoke [mozilla/js/src/jsinterp.c, line 1481] JS_CallFunctionValue [mozilla/js/src/jsapi.c, line 4367] nsJSContext::CallEventHandler [mozilla/dom/src/base/nsJSEnvironment.cpp, line 1500] nsJSEventListener::HandleEvent [mozilla/dom/src/events/nsJSEventListener.cpp, line 195] nsXBLPrototypeHandler::ExecuteHandler [mozilla/content/xbl/src/nsXBLPrototypeHandler.cpp, line 513] nsXBLEventHandler::HandleEvent [mozilla/content/xbl/src/nsXBLEventHandler.cpp, line 86] nsEventListenerManager::HandleEventSubType [mozilla/content/events/src/nsEventListenerManager.cpp, line 1655] nsEventListenerManager::HandleEvent [mozilla/content/events/src/nsEventListenerManager.cpp, line 1762] nsXULElement::HandleDOMEvent [mozilla/content/xul/content/src/nsXULElement.cpp, line 2237] PresShell::HandleEventInternal [mozilla/layout/base/nsPresShell.cpp, line 6542] PresShell::HandleEvent [mozilla/layout/base/nsPresShell.cpp, line 6377] nsViewManager::HandleEvent [mozilla/view/src/nsViewManager.cpp, line 2566] nsViewManager::DispatchEvent [mozilla/view/src/nsViewManager.cpp, line 2253] HandleEvent [mozilla/view/src/nsView.cpp, line 174] nsWindow::DispatchEvent [mozilla/widget/src/windows/nsWindow.cpp, line 1319] nsWindow::DispatchMouseEvent [mozilla/widget/src/windows/nsWindow.cpp, line 6329] ChildWindow::DispatchMouseEvent [mozilla/widget/src/windows/nsWindow.cpp, line 6576] nsWindow::WindowProc [mozilla/widget/src/windows/nsWindow.cpp, line 1507] USER32.dll + 0x8734 (0x7e418734) USER32.dll + 0x8816 (0x7e418816)

Since the line in nsMsgGroupView.cpp where we head off the rails was removed on the trunk in bug 384490, I doubt that the Version: Trunk is accurate.

brain dead bug filer. ver=1.8

the easiest way to crash is here: http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/mailnews/base/src/nsMsgGroupView.cpp&mark=277,121,148,268,280-281,289&rev=1.22.2.11#271 nsMsgGroupView::AddHdrToThread 277 nsHashKey *hashKey = AllocHashKeyForHdr(msgHdr); | nsMsgGroupView::AllocHashKeyForHdr | 148 return NS_SUCCEEDED(rv) ? new nsStringKey(stringKey.get()) : nsnull; | 268 return nsnull; failed returned 0 280 nsMsgGroupThread *foundThread = nsnull; 281 bienvenu 1.6 if (hashKey) [no] 289 m_groupsTable.Put(hashKey, foundThread); hashKey = 0 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/xpcom/ds/nsHashtable.cpp&mark=220&rev=MOZILLA_1_8_BRANCH#220 nsHashtable::Put 220 PL_DHashTableOperate(&mHashtable, aKey, PL_DHASH_ADD)); aKey = 0 http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/xpcom/ds/nsHashtable.cpp&mark=87&rev=MOZILLA_1_8_BRANCH#87 hashKey 87 alecf 3.61 return hashKey->HashCode(); hashKey = 0

nsMsgGroupView::OpenWithHdrs(nsISimpleEnumerator*, int, int, int, int*) bp-5f4d142b-4898-491e-9787-7a2192101110 0 thunderbird.exe nsMsgGroupView::OpenWithHdrs mailnews/base/src/nsMsgGroupView.cpp:431 1 thunderbird.exe nsMsgDatabase::MarkHdrReadInDB mailnews/db/msgdb/src/nsMsgDatabase.cpp:1999 2 thunderbird.exe nsMsgDatabase::MarkHdrRead mailnews/db/msgdb/src/nsMsgDatabase.cpp:2430 3 thunderbird.exe nsMsgDatabase::MarkRead mailnews/db/msgdb/src/nsMsgDatabase.cpp:2012 4 thunderbird.exe nsMsgHdr::MarkRead mailnews/db/msgdb/src/nsMsgHdr.cpp:262 5 thunderbird.exe nsMsgDBFolder::MarkMessagesRead mailnews/base/util/nsMsgDBFolder.cpp:4587 6 thunderbird.exe nsImapMailFolder::MarkMessagesRead mailnews/imap/src/nsImapMailFolder.cpp:1940 7 xpcom_core.dll NS_InvokeByIndex_P xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp:102 Did not find nsMsgGroupView::AddHdrToThread in top of stack for any crashes of last 2 weeks. But there are plenty of crashes with Hashtable in sig - http://crash-stats.mozilla.com/query/query?product=Thunderbird&version=ALL%3AALL&range_value=1&range_unit=weeks&date=&query_search=signature&query_type=contains&query=Hashtab&build_id=&process_type=any&hang_type=any&do_query=1

(In reply to timeless from comment #3) > the easiest way to crash is here: > ... It's not clear to me whether we are still susceptible or not to this crash, given the changes of the last few years http://hg.mozilla.org/comm-central/annotate/724e23e39c73/mailnews/base/src/nsMsgGroupView.cpp#l254

I'm marking this bug as WORKSFORME as bug crashlog signature didn't appear from a long time (over half year) in Firefox.