RE: Linux (1999-05-14-08 m6) and (1999-05-14-09 m6) This mail message has an attached message that contains a long file name and special characters. You may obtain this message from my Unix account (/u/fenella/qatest38/nsmail/testfolder and testfolder.msf) And I will also attach it to this bug. Occurs on Linux and Win_nt Reproducible consistently. Here is the stack trace from Linux: #0 0x400c9383 in TryFamily () #1 0x400c93c0 in TryFamily () #2 0x403910cd in PL_HashTableEnumerateEntries () #3 0x400c9ebc in nsFontMetricsGTK::FindFont () #4 0x400cc298 in nsRenderingContextGTK::GetWidth () #5 0x4087f207 in nsTextFrame::Reflow () #6 0x4086f6d8 in nsLineLayout::ReflowFrame () #7 0x40857c67 in nsBlockFrame::ReflowInlineFrame () #8 0x40857af5 in nsBlockFrame::ReflowInlineFrames () #9 0x40856ba3 in nsBlockFrame::ReflowLine () #10 0x408568d6 in nsBlockFrame::ReflowDirtyLines () #11 0x4085615b in nsBlockFrame::Reflow () #12 0x4085443c in nsAreaFrame::Reflow () #13 0x4085d397 in nsContainerFrame::ReflowChild () #14 0x40944bc5 in nsTableCellFrame::Reflow () #15 0x4085d397 in nsContainerFrame::ReflowChild () #16 0x40952146 in nsTableRowFrame::InitialReflow () #17 0x40952df1 in nsTableRowFrame::Reflow () #18 0x4085d397 in nsContainerFrame::ReflowChild () #19 0x409539fc in nsTableRowGroupFrame::ReflowMappedChildren () #20 0x409548d2 in nsTableRowGroupFrame::Reflow () #21 0x4085d397 in nsContainerFrame::ReflowChild () #22 0x4094ae25 in nsTableFrame::ResizeReflowPass1 () #23 0x4094ab36 in nsTableFrame::Reflow () #24 0x4085d397 in nsContainerFrame::ReflowChild () #24 0x4085d397 in nsContainerFrame::ReflowChild () #25 0x409509bc in nsTableOuterFrame::Reflow () #26 0x4085b2e5 in nsBlockReflowContext::ReflowBlock () #27 0x40857590 in nsBlockFrame::ReflowBlockFrame () #28 0x40856b90 in nsBlockFrame::ReflowLine () #29 0x408568d6 in nsBlockFrame::ReflowDirtyLines () #30 0x4085615b in nsBlockFrame::Reflow () #31 0x4085443c in nsAreaFrame::Reflow () #32 0x4085d397 in nsContainerFrame::ReflowChild () #33 0x40944bc5 in nsTableCellFrame::Reflow () #34 0x4085d397 in nsContainerFrame::ReflowChild () #35 0x40952146 in nsTableRowFrame::InitialReflow () #36 0x40952df1 in nsTableRowFrame::Reflow () #37 0x4085d397 in nsContainerFrame::ReflowChild () #38 0x409539fc in nsTableRowGroupFrame::ReflowMappedChildren () #39 0x409548d2 in nsTableRowGroupFrame::Reflow () #40 0x4085d397 in nsContainerFrame::ReflowChild () #41 0x4094ae25 in nsTableFrame::ResizeReflowPass1 () #42 0x4094ab36 in nsTableFrame::Reflow () #43 0x4085d397 in nsContainerFrame::ReflowChild () #44 0x409509bc in nsTableOuterFrame::Reflow () #45 0x4085b2e5 in nsBlockReflowContext::ReflowBlock () #46 0x40857590 in nsBlockFrame::ReflowBlockFrame () #47 0x40856b90 in nsBlockFrame::ReflowLine () #48 0x408568d6 in nsBlockFrame::ReflowDirtyLines () #49 0x4085615b in nsBlockFrame::Reflow () #50 0x4085b2e5 in nsBlockReflowContext::ReflowBlock () #51 0x40857590 in nsBlockFrame::ReflowBlockFrame () #52 0x40856b90 in nsBlockFrame::ReflowLine () #53 0x408568d6 in nsBlockFrame::ReflowDirtyLines () #54 0x4085615b in nsBlockFrame::Reflow () #55 0x4085b2e5 in nsBlockReflowContext::ReflowBlock () #56 0x40857590 in nsBlockFrame::ReflowBlockFrame () #57 0x40856b90 in nsBlockFrame::ReflowLine () #58 0x408568d6 in nsBlockFrame::ReflowDirtyLines () #59 0x4085615b in nsBlockFrame::Reflow () #60 0x4085443c in nsAreaFrame::Reflow () #61 0x4085d397 in nsContainerFrame::ReflowChild () #62 0x408647bf in RootFrame::Reflow () #63 0x4085d397 in nsContainerFrame::ReflowChild () #64 0x408796c4 in nsScrollFrame::Reflow () #65 0x4085d397 in nsContainerFrame::ReflowChild () #66 0x40881998 in ViewportFrame::Reflow () #67 0x408656b4 in nsHTMLReflowCommand::Dispatch () #68 0x40876b4e in PresShell::ProcessReflowCommands () #69 0x40875b23 in PresShell::ExitReflowLock () #70 0x4087762c in PresShell::ContentAppended () #71 0x4096c908 in nsDocument::ContentAppended () #72 0x408ead56 in nsHTMLDocument::ContentAppended () #73 0x408e62bc in HTMLContentSink::WillInterrupt () #74 0x4025d254 in CNavDTD::WillInterruptParse () #75 0x40263d4e in nsParser::ResumeParse () #76 0x40264059 in nsParser::OnDataAvailable () #77 0x402344f2 in nsDocumentBindInfo::OnDataAvailable () #78 0x40222178 in XP_FindContextOfType () #79 0x401e638a in nsNetConverterStream::Write () #80 0x40ce727f in nsMimeEmitter::Write () #81 0x40ce72c9 in nsMimeEmitter::UtilityWrite () #82 0x40ce7089 in nsMimeEmitter::EndAttachment () #83 0x40cb18ac in MimeHeaders_write_attachment_box () #84 0x40cad915 in MimeEncoderWrite () #85 0x40cb735a in MakeAbsoluteURL () #86 0x40cb7059 in MakeAbsoluteURL () #87 0x40cba61d in mime_ReBuffer () #88 0x40cba76b in mime_LineBuffer () #89 0x40cb7d10 in MakeAbsoluteURL () #90 0x40cb5ac0 in MakeAbsoluteURL () #91 0x40cba61d in mime_ReBuffer () #92 0x40cba76b in mime_LineBuffer () #93 0x40cb7d10 in MakeAbsoluteURL () #94 0x40cbad29 in mime_display_stream_write () #95 0x40caad76 in MimePluginInstance::Write () #96 0x401e5d37 in NET_PlainTextConverter () #97 0x40165540 in _init () #98 0x40165b6a in _init () #99 0x401fef3f in NET_ProcessNet () #100 0x40204563 in NET_PollSockets () #101 0x4021d561 in nsNetlibService::NetPollSocketsCallback () #102 0x4013ccfa in TimerImpl::FireTimeout () #103 0x4013d060 in nsTimerExpired () #104 0x80e6aef in g_main_iteration () #105 0x80e6074 in g_list_length () #106 0x80e64ef in g_list_length () #107 0x80e6609 in g_main_iteration () #108 0x8084d73 in gtk_main () #109 0x4008b173 in nsAppShell::Run () #110 0x40016f4a in nsAppShellService::Run () #111 0x8051254 in main () Win_nt stack trace: wait for talkback Unable to test Mac.

From the stack trace, this looks like a layout bug. Can you send me the file that produces this crash or attach it to the bug report. I don't have permissions to go into the directory you mentioned. - rhp

It crashes the same way on Win32, but it's in layout somewhere. Not sure who I should assign this one to? - rhp

Perhaps start with rickg? You may need to put more debug info here so he can see exactly where the crash is in.

Here is the window stack trace for the crash: 0x0200031c nsTableFrame::Reflow [d:\builds\seamonkey\mozilla\layout\html\table\src\nsTableFrame.cpp, line 2499] nsContainerFrame::ReflowChild [d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 408] nsTableOuterFrame::Reflow [d:\builds\seamonkey\mozilla\layout\html\table\src\nsTableOuterFrame.cpp, line 999] nsBlockReflowContext::ReflowBlock [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockReflowContext.cpp, line 228] nsBlockFrame::ReflowBlockFrame [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 2494] nsBlockFrame::ReflowLine [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 1985] nsBlockFrame::ReflowDirtyLines [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 1794] nsBlockFrame::Reflow [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 1200] nsBlockReflowContext::ReflowBlock [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockReflowContext.cpp, line 228] nsBlockFrame::ReflowBlockFrame [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 2494] nsBlockFrame::ReflowLine [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 1985] nsBlockFrame::ReflowDirtyLines [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 1794] nsBlockFrame::Reflow [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 1200] nsBlockReflowContext::ReflowBlock [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockReflowContext.cpp, line 228] nsBlockFrame::ReflowBlockFrame [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 2494] nsBlockFrame::ReflowLine [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 1985] nsBlockFrame::ReflowDirtyLines [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 1794] nsBlockFrame::Reflow [d:\builds\seamonkey\mozilla\layout\html\base\src\nsBlockFrame.cpp, line 1200] nsAreaFrame::Reflow [d:\builds\seamonkey\mozilla\layout\html\base\src\nsAreaFrame.cpp, line 269] nsContainerFrame::ReflowChild [d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 408] RootFrame::Reflow [d:\builds\seamonkey\mozilla\layout\html\base\src\nsHTMLFrame.cpp, line 229] nsContainerFrame::ReflowChild [d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 408] nsScrollFrame::Reflow [d:\builds\seamonkey\mozilla\layout\html\base\src\nsScrollFrame.cpp, line 477] nsContainerFrame::ReflowChild [d:\builds\seamonkey\mozilla\layout\html\base\src\nsContainerFrame.cpp, line 408] ViewportFrame::Reflow [d:\builds\seamonkey\mozilla\layout\html\base\src\nsViewportFrame.cpp, line 438] nsHTMLReflowCommand::Dispatch [d:\builds\seamonkey\mozilla\layout\html\base\src\nsHTMLReflowCommand.cpp, line 169] PresShell::ProcessReflowCommands [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 1217] PresShell::ExitReflowLock [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 650] PresShell::ContentAppended [d:\builds\seamonkey\mozilla\layout\html\base\src\nsPresShell.cpp, line 1630] nsDocument::ContentAppended [d:\builds\seamonkey\mozilla\layout\base\src\nsDocument.cpp, line 1496] nsHTMLDocument::ContentAppended [d:\builds\seamonkey\mozilla\layout\html\document\src\nsHTMLDocument.cpp, line 663] HTMLContentSink::DidBuildModel [d:\builds\seamonkey\mozilla\layout\html\document\src\nsHTMLContentSink.cpp, line 1540] CNavDTD::DidBuildModel [d:\builds\seamonkey\mozilla\htmlparser\src\CNavDTD.cpp, line 576] nsParser::DidBuildModel [d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, line 509] nsParser::ResumeParse [d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, line 859] nsParser::OnStopBinding [d:\builds\seamonkey\mozilla\htmlparser\src\nsParser.cpp, line 1075] nsDocumentBindInfo::OnStopBinding [d:\builds\seamonkey\mozilla\webshell\src\nsDocLoader.cpp, line 1527] OnStopBindingProxyEvent::HandleEvent [d:\builds\seamonkey\mozilla\network\module\nsNetThread.cpp, line 593] StreamListenerProxyEvent::HandlePLEvent [d:\builds\seamonkey\mozilla\network\module\nsNetThread.cpp, line 473] PL_HandleEvent [plevent.c, line 477] _md_EventReceiverProc [plevent.c, line 803] USER32.dll + 0x13ed (0x77e713ed) nsappshell.dll + 0x154a (0x011e154a) apprunner.exe + 0x1ec1 (0x00401ec1) KERNEL32.dll + 0x1b304 (0x77f1b304)

After I get my build this morning, I want to generate an HTML file that will reproduce what is going on here without libmime being involved. Then I will attach it to the bug report. I have a feeling it's a reflow problem on a table with extremely long cell contents. - rhp

I've added a new attachment that is what libmime is producing to crash raptor. - rhp

Reassign to rickg to find the right raptor engineer.

This is a kipp bug, but since it's involving string crap, I'll take care of it.

Moving to m8. I'm on overload.

This didn't get moved to M8. Doing so. Sorry about changing your bug, Rick. I was just looking through the open M7 bugs to see if I could help on any...

Checked in a fix which seems to correct this crash on NT. Can't test mac or linux here (home).

Verified in the June 18 Seamonkey builds. I tested the following builds: Win32 June 18 build (1999061808) installed on Gateway P200 WinNT 4.0 PPC June 18 build (1999061808) installed on PPC 9600/300 Mac OS 8.5.1 Linux June 18 build (1999061808) installed on Compaq P200 RedHat 5.2 I used the security test message that Fenella original used found on our Qatest21 account. I viewed all 22 security messages under POP then retested under IMAP. All test passed on each platform without crashing. Verified as fixed.