MASTER mozilla-thunderbird crashed [@ nsTextFrame::Paint]

I am using Ubuntu 6.10 and Thunderbird 1.5.0.10.

Yesterday I try to figure out why it happens.
If I change View -> Message Body As -> Simple HTML(or Plain Text) everything works fine, just black and white. I used "Original HTML" and how I understand Thunderbird try to show colors or some specific HTML code and it cause crash.

Egidijus

P.S. If you need some specific data, please write what exactly need.

Under Windows XP professional SP2 and Thunderbird 1.5.0.10 everything works fine.

Hello,

Today I check and everything seems work. I don't know for what reason, but still ir works.

Thanks,
Egidijus

Retrace done.

Extract from retraced stacktrace:
...
#3 <signal handler called>
#4 nsTextFrame::Paint (this=0x8c734a8, aPresContext=0x8b92bc8,
#5 nsContainerFrame::PaintChild (this=0x8c73428,
#6 nsContainerFrame::PushChildren (this=0x8c73428,
#7 nsHTMLContainerFrame::PaintDecorationsAndChildren (
#8 nsInlineFrame::Paint (this=0x8c73428,
#9 nsContainerFrame::PaintChild (this=0x8c73360,
#10 ~nsAreaFrame (this=0x8c73360) at nsAreaFrame.h:55
#11 nsBlockFrame::PaintChildren (this=0x8c73360,
#12 nsHTMLContainerFrame::PaintDecorationsAndChildren (
...

Tagging as mt-confirm for further processing

Retraced Thread Stacktrace

I'm getting a similar stacktrace on Firefox on Debian when scrolling though http://forum.nedlinux.nl/viewtopic.php?id=26078:

#0 0x0837f5ea in nsTextFrame::Paint (this=0xa272b9c, aPresContext=0xa0fbf28,
    aRenderingContext=@0xa1f3860, aDirtyRect=@0xbfcbae10,
    aWhichLayer=eFramePaintLayer_Overlay, aFlags=0) at nsTextFrame.cpp:594
#1 0x08335b9d in nsContainerFrame::PaintChild (this=0xa272afc,
    aPresContext=0xa0fbf28, aRenderingContext=@0xa1f3860,
    aDirtyRect=@0xbfcbaf90, aFrame=0xa272b9c,
    aWhichLayer=eFramePaintLayer_Overlay, aFlags=0) at nsContainerFrame.cpp:282
#2 0x08328f68 in nsBlockFrame::PaintChildren (this=0xa272afc,
    aPresContext=0xa0fbf28, aRenderingContext=@0xa1f3860,
    aDirtyRect=@0xbfcbaf90, aWhichLayer=eFramePaintLayer_Overlay, aFlags=0)
    at nsBlockFrame.cpp:6481
#3 0x0834b71a in nsHTMLContainerFrame::PaintDecorationsAndChildren (
    this=0xa272afc, aPresContext=0xa0fbf28, aRenderingContext=@0xa1f3860,
    aDirtyRect=@0xbfcbaf90, aWhichLayer=eFramePaintLayer_Overlay, aIsBlock=1,
    aFlags=0) at nsHTMLContainerFrame.cpp:136
#4 0x083285ac in nsBlockFrame::Paint (this=0xa272afc, aPresContext=0xa0fbf28,
    aRenderingContext=@0xa1f3860, aDirtyRect=@0xbfcbaf90,
    aWhichLayer=eFramePaintLayer_Overlay, aFlags=0) at nsBlockFrame.cpp:6375
#5 0x08335b9d in nsContainerFrame::PaintChild (this=0xa27294c,
    aPresContext=0xa0fbf28, aRenderingContext=@0xa1f3860,
    aDirtyRect=@0xbfcbb198, aFrame=0xa272afc,
    aWhichLayer=eFramePaintLayer_Overlay, aFlags=0) at nsContainerFrame.cpp:282
#6 0x08328f68 in nsBlockFrame::PaintChildren (this=0xa27294c,
    aPresContext=0xa0fbf28, aRenderingContext=@0xa1f3860,
    aDirtyRect=@0xbfcbb198, aWhichLayer=eFramePaintLayer_Overlay, aFlags=0)
    at nsBlockFrame.cpp:6481
#7 0x0834b71a in nsHTMLContainerFrame::PaintDecorationsAndChildren (
    this=0xa27294c, aPresContext=0xa0fbf28, aRenderingContext=@0xa1f3860,
    aDirtyRect=@0xbfcbb198, aWhichLayer=eFramePaintLayer_Overlay, aIsBlock=1,
    aFlags=0) at nsHTMLContainerFrame.cpp:136

Looks like this crash is due to dangling symlinks in /var/lib/defoma:

  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=367956

Firefox really shouldn't handle those so badly :)

Thank you for taking the time to report this bug and helping to make Ubuntu better. You reported this bug a while ago and there hasn't been any activity in it recently. We were wondering is this still an issue for you? Can you try with latest Ubuntu release? Thanks in advance.

raboof this isnt a firefox bug but a thunderbird one.

True, but the similarities between my firefox trace and hjmf's thunderbird trace suggested that the problem might be common to both FF and TB.

Anyway, this is all quite a while ago, haven't seen it lately.

is anyone still seeing this with latest 2.0 builds in repos?

We are closing this bug report because it lacks an answer to our last request. Please reopen it if you can give us the missing information, and don't hesitate to submit bug reports in the future. To reopen the bug report you can click on the current status, under the Status column, and change the Status back to "New". Thanks again!