LO92274: NOTES CLIENT CRASH WHEN OPENING EMAILS WITH ATTACHMENT IN 9.0.1 FP7

APAR status

• Closed as program error.

Error description

• Customer has shared a email database containing emails coming
  from a particular email id. When opening or previewing the
  email, the notes client crashes with the following crash stack.
  
  ############################################################
  ### thread 1/24: [ NLNOTES:  0a78:  0e00] FATAL THREAD (Panic)
  ### FP=0x002b3958, PC=0x777ef8e1, SP=0x002b38ec
  ### stkbase=0x002c0000, total stksize=241664, used stksize=50964
  ### EAX=0x00000000, EBX=0x00000000, ECX=0x00000000,
  EDX=0x00000000
  ### ESI=0x0000095c, EDI=0x002b3934, CS=0x00000023, SS=0x0000002b
  ### DS=0x0000002b, ES=0x0000002b, FS=0x00000053, GS=0x0000002b
  Flags=0x00200246
  ############################################################
   [ 1] 0x777ef8e1 ntdll.ZwWaitForSingleObject+21
  (95c,493e0,0,698cfe10)
   [ 2] 0x772b1194 kernel32.WaitForSingleObjectEx+67
  (95c,493e0,0,2b4138)
   [ 3] 0x772b1148 kernel32.WaitForSingleObject+18
  (95c,493e0,698c2ab0,2b4585)
  @[ 4] 0x5ef528e4 nnotes.FRSendCommandToService+1268
  (2b415c,2b455c,2b4585,1)
  @[ 5] 0x5ef53d09 nnotes.OSRunExternalScript@8+1241 (2b48d4,1)
  @[ 6] 0x5ef543fc nnotes.FRTerminateWindowsResources+1260
  (1,1010,1,0)
  @[ 7] 0x5ef54af2 nnotes.OSFaultCleanupExt@24+1154
  (3376a70,1010,0,0,0,2b4cfc)
  @[ 8] 0x5ef5508a nnotes.OSFaultCleanup@12+26 (0,1010,0)
  @[ 9] 0x5ef90b64 nnotes.OSNTUnhandledExceptionFilter@4+276
  (2b853c)
  @[10] 0x5ef556a3 nnotes.Panic@4+883 (2b855c)
  @[11] 0x5ed34a9d nnotes.OSVBlockAddr@8+109 (60a7b160,ffff)
  @[12] 0x5efc1f01 nnotes.APCDataBlockAddr@4+33 (ffff)
  @[13] 0x57a4a826 nnotesws.DocStartDeferredObjectLoadEx+614
  (8ecc018,7d45898,2b8754,0)
  @[14] 0x57a4ac22 nnotesws.LoadNextDeferredObject+66
  (8ecc018,0,0,8ecc018)
  @[15] 0x57a4af9c nnotesws.@DocDeferredLoadNotify@8+76
  (2b9000,8ecc018)
  @[16] 0x5707e354 nnotesws.@DocWindowsMessage@24+15700
  (0,0,2b8b5c,2b9000,0,2b8ad8)
  @[17] 0x570846f9 nnotesws.EditInstanceMessage@24+1161
  (8ecc018,1411b2,514,0,0,2b8b54)
  @[18] 0x57083903 nnotesws.CEditSubprogram::SubMessageProc+323
  (7d41418,514,0,0)
  @[19] 0x5705513d nnotesws.MainWndProc@16+8685 (1411b2,514,0,0)
   [20] 0x752b62fa USER32.gapfnScSendMessage+818
  (57052f50,1411b2,514,0)
   [21] 0x752b6d3a USER32.GetThreadDesktop+215
  (0,57052f50,1411b2,514)
   [22] 0x752b77c4 USER32.CharPrevW+312
  (57052f50,0,2b9154,570f0574)
   [23] 0x752b788a USER32.DispatchMessageW+15
  (2b9130,57050000,752b7136,1a0eee)
  @[24] 0x570f0574 nnotesws.NEMMainLoop@4+1188 (13513b0)
  @[25] 0x01351f90 NLNOTES.WinMain@16+3040 (1350000,0,1,0)
  @[26] 0x01352fa4 NLNOTES.__tmainCRTStartup+336
  (fffde000,2bf9a8,77809902,fffde000)
   [27] 0x772b336a kernel32.BaseThreadInitThunk+18
  (fffde000,2876af21,0,0)
   [28] 0x77809902 ntdll.RtlInitializeExceptionChain+99
  (13530e7,fffde000,0,0)
   [29] 0x778098d5 ntdll.RtlInitializeExceptionChain+54
  (13530e7,fffde000,0,0)
  

Local fix

• None available as yet.
  

Problem summary

• The fix is provided to check the data length before assigning
   the object.
  

Problem conclusion

• The fix is provided to check the data length before assigning
   the object.
  

Temporary fix

Comments

• This APAR is associated with SPR# NSJVAM793B.
  The fix is provided to check the data length before assigning
   the object.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  NOTES CLIENT

• Fixed component ID

  5724E6255

Applicable component levels

• R901 PSN

     UP