There is a problem in Macintosh collation code. The problem is the length of 'key' does not contain one byte for a nul terminator. It should not use strcpy which also copies the terminator since the key may not large enough. http://lxr.mozilla.org/seamonkey/source/intl/locale/src/mac/nsCollationMac.cpp#2 32 232 // No CJK support, just copy the row string. 233 strcpy((char *) key, str); 234 while (*key) { 235 if ((unsigned char) *key < 128) { 236 key++; 237 }

JA localized build crashes at start up because of this problem. It it also reproducible with US build by modifying charsetTitles.properties with the following strings. chardet.off.title = \uff08\u30aa\u30d5\uff09 chardet.alis_charset_detector.title = \u3059\u3079\u3066 chardet.ja_parallel_state_machine.title = \u65e5\u672c\u8a9e chardet.ko_parallel_state_machine.title = \u97d3\u56fd\u8a9e chardet.zhtw_parallel_state_machine.title = \u7e41\u4f53\u4e2d\u56fd\u8a9e chardet.zhcn_parallel_state_machine.title = \u7c21\u4f53\u4e2d\u56fd\u8a9e chardet.zh_parallel_state_machine.title = \u4e2d\u56fd\u8a9e chardet.cjk_parallel_state_machine.title = \u6771\u30a2\u30b8\u30a2 chardet.ruprob.title = \u30ed\u30b7\u30a2\u8a9e chardet.ukprob.title = \u30a6\u30af\u30e9\u30a4\u30ca\u8a9e Other places which uses collation have the same problem potentially.. It is used by mail sort and addressbook sort.

r=ftang

I can reproduce the crash in mail by using the attached data. It contains the message subjects with the same strings as used for auto-detection names in JA localized build. Launch the mail client and click the subject tab a couple of times to sort the messages. It crashes either when I click the tab or when I quit the app. I used today's trunk ppc build (2001-06-18-08-trunk). It does not crash when I use a dll which includes my patch.

still wait for sr.

change status to "ask sfraser to sr= 6/19 9:45 , aslo need a="

Changing QA contact to marina@netscape.com and copying ji@netscape.com.

sr=sfraser

a= asa@mozilla.org for checkin to the trunk. (on behalf of drivers)

checked in

*** Bug 86173 has been marked as a duplicate of this bug. ***

using Naoki's folder sorted ja data in it without a crash ( used 06-28-01 branch), marking verified as fixed