Version: (using KDE Devel) Installed from: Compiled sources Compiler: gcc 3.4.4 OS: Linux I set up a test case on my website: http://www.arcticnightfall.de/index.php which uses the page.css and works, however http://www.arcticnightfall.de/indexcrash.php which uses pagekonqcrash.css crashes when hovering a menu item on the left side The cause is supposed to be in the "#links li a:hover" section of the css file, either display: list-item; or list-style-image: url(images/list.gif);. Or both. I seeked help in IRC and cartman did a backtrace, thanks for your help: Using host libthread_db library "/lib/libthread_db.so.1". `system-supplied DSO at 0xffffe000' has disappeared; keeping its symbols. [Thread debugging using libthread_db enabled] [New Thread -1233074512 (LWP 27380)] [KCrash handler] #4 0xb6001e94 in addLayers (obj=0x862ff7c, parentLayer=0x862f628, newObject=@0xbfb69a54, beforeChild=@0xbfb69a50) at render_object.cpp:281 #5 0xb6001fa5 in khtml::RenderObject::addLayers (this=0x862ff7c, parentLayer=0x862f628, newObject=0x862ff7c) at render_object.cpp:304 #6 0xb600d3f7 in khtml::RenderContainer::insertChildNode (this=0x862ffe0, child=0x862ff7c, beforeChild=0x863005c) at render_container.cpp:411 #7 0xb600c4b2 in khtml::RenderContainer::addChild (this=0x862ffe0, newChild=0x862ff7c, beforeChild=0x863005c) at render_container.cpp:145 #8 0xb5feb2c6 in khtml::RenderBlock::addChildToFlow (this=0x862ffe0, newChild=0x862ff7c, beforeChild=0x863005c) at render_block.cpp:301 #9 0xb6014bf4 in khtml::RenderFlow::addChild (this=0x862ffe0, newChild=0x862ff7c, beforeChild=0x863005c) at render_flow.cpp:126 #10 0xb6046bac in khtml::RenderListItem::updateMarkerLocation (this=0x862fef4) at render_list.cpp:151 #11 0xb6046c11 in khtml::RenderListItem::calcMinMaxWidth (this=0x862fef4) at render_list.cpp:163 #12 0xb6009c37 in khtml::RenderObject::recalcMinMaxWidths (this=0x862fef4) at render_object.cpp:1847 #13 0xb6009b49 in khtml::RenderObject::recalcMinMaxWidths (this=0x862f5ac) at render_object.cpp:1833 #14 0xb6009b49 in khtml::RenderObject::recalcMinMaxWidths (this=0x862f4b4) at render_object.cpp:1833 #15 0xb6009b49 in khtml::RenderObject::recalcMinMaxWidths (this=0x862efd8) at render_object.cpp:1833 #16 0xb6009b49 in khtml::RenderObject::recalcMinMaxWidths (this=0x862ef5c) at render_object.cpp:1833 #17 0xb6009b49 in khtml::RenderObject::recalcMinMaxWidths (this=0x862ee84) at render_object.cpp:1833 #18 0xb6009b49 in khtml::RenderObject::recalcMinMaxWidths (this=0x862ed68) at render_object.cpp:1833 #19 0xb604991e in khtml::RenderCanvas::layout (this=0x862ed68) at render_canvas.cpp:157 #20 0xb5f0a5a8 in KHTMLView::layout (this=0x8602f08) at khtmlview.cpp:786 #21 0xb5f167c5 in KHTMLView::timerEvent (this=0x8602f08, e=0xbfb6a210) at khtmlview.cpp:3370 #22 0xb7015e9f in QObject::event (this=0x8602f08, e=0xbfb6a210) at qobject.cpp:741 #23 0xb7052825 in QWidget::event (this=0x8602f08, e=0xbfb6a210) at qwidget.cpp:4659 #24 0xb6fb34b7 in QApplication::internalNotify (this=0xbfb6a830, receiver=0x8602f08, e=0xbfb6a210) at qapplication.cpp:2635 #25 0xb6fb3151 in QApplication::notify (this=0xbfb6a830, receiver=0x8602f08, e=0xbfb6a210) at qapplication.cpp:2523 #26 0xb76bc68c in KApplication::notify (this=0xbfb6a830, receiver=0x8602f08, event=0xbfb6a210) at kapplication.cpp:550 #27 0xb7f39122 in QApplication::sendEvent (receiver=0x8602f08, event=0xbfb6a210) at qapplication.h:496 #28 0xb6fa14ca in QEventLoop::activateTimers (this=0x8119b48) at qeventloop_unix.cpp:556 #29 0xb6f5778e in QEventLoop::processEvents (this=0x8119b48, flags=4) at qeventloop_x11.cpp:389 #30 0xb6fc8805 in QEventLoop::enterLoop (this=0x8119b48) at qeventloop.cpp:198 #31 0xb6fc8720 in QEventLoop::exec (this=0x8119b48) at qeventloop.cpp:145 #32 0xb6fb3623 in QApplication::exec (this=0xbfb6a830) at qapplication.cpp:2758 #33 0xb64fe79b in kdemain () from /usr/kde/3.4/lib/libkdeinit_konqueror.so #34 0xb65856c8 in typeinfo name for QGList () from /usr/kde/3.4/lib/libkdeinit_konqueror.so #35 0xbfb6a800 in ?? () #36 0x00000180 in ?? () #37 0xbfb6aef4 in ?? () #38 0x080f7850 in ?? () #39 0xb692e300 in __check_rhosts_file () from /lib/libc.so.6 #40 0x00000000 in ?? () #41 0xbfb6a410 in ?? () #42 0x00000000 in ?? () #43 0x00000001 in ?? () #44 0x00000000 in ?? () #45 0x00000000 in ?? () #46 0x08100714 in ?? () #47 0xbfb6a4e0 in ?? () #48 0xbfb6a450 in ?? () #49 0xb68376d7 in gettext () from /lib/libc.so.6 #50 0xb6920090 in in6addr_any () from /lib/libc.so.6 #51 0xb6422910 in ?? () #52 0xbfb6a448 in ?? () #53 0xb692dff4 in ?? () from /lib/libc.so.6 #54 0xbfb6a525 in ?? () #55 0xbfb6a4e7 in ?? () #56 0xbfb6a830 in ?? () #57 0xbfb6a820 in ?? () #58 0xbfb6a800 in ?? () #59 0xbfb6a7d0 in ?? () #60 0xbfb6a7c0 in ?? () #61 0xbfb6a7b0 in ?? () #62 0x002f2f38 in ?? () #63 0x00000000 in ?? () #64 0x0000015f in ?? () #65 0x0000554f in ?? () #66 0x0000000c in ?? () #67 0xb692dff4 in ?? () from /lib/libc.so.6 #68 0x00000000 in ?? () #69 0x2d465455 in ?? () #70 0x542f2f38 in ?? () #71 0x534e4152 in ?? () #72 0x0054494c in ?? () #73 0xb642c863 in ?? () #74 0xb692017c in in6addr_any () from /lib/libc.so.6 #75 0xb642c750 in ?? () #76 0x081006d8 in ?? () #77 0x00000000 in ?? () #78 0x081028d8 in ?? () #79 0x081791e8 in ?? () #80 0xb6920182 in in6addr_any () from /lib/libc.so.6 #81 0xbfb6a4e0 in ?? () #82 0x00000000 in ?? () #83 0xbfb6a500 in ?? () #84 0x08100720 in ?? () #85 0x0810071c in ?? () #86 0xb642c750 in ?? () #87 0x081006d8 in ?? () #88 0x0000015f in ?? () #89 0xb692dff4 in ?? () from /lib/libc.so.6 #90 0x0000069d in ?? () #91 0x081006d8 in ?? () #92 0xbfb6a66c in ?? () #93 0xb6838ce2 in ngettext () from /lib/libc.so.6 #94 0x0001c30b in ?? () #95 0x00000001 in ?? () #96 0x00000002 in ?? () #97 0x00000003 in ?? () #98 0x00000000 in ?? () #99 0xbfb6a6f0 in ?? () #100 0xbfb6a6f3 in ?? () #101 0x000000c8 in ?? () #102 0xb6923700 in in6addr_any () from /lib/libc.so.6 #103 0x00000007 in ?? () #104 0x00000030 in ?? () #105 0x081005a8 in ?? () #106 0xb7f5faa8 in _dl_rtld_di_serinfo () from /lib/ld-linux.so.2 #107 0xb7f5fdc0 in _dl_rtld_di_serinfo () from /lib/ld-linux.so.2 #108 0xb6904411 in __libc_dlclose () from /lib/libc.so.6 #109 0x00000000 in ?? () #110 0x00000000 in ?? () #111 0x00000002 in ?? () #112 0x00000000 in ?? () #113 0xb7f6e000 in ?? () from /lib/ld-linux.so.2 #114 0xbfb6a890 in ?? () #115 0x080f6ce0 in ?? () #116 0xb692dff4 in ?? () from /lib/libc.so.6 #117 0xb7587254 in ?? () from /usr/kde/3.4/lib/kde3/konqueror.so #118 0xb6bb6ff4 in ?? () from /lib/libdl.so.2 #119 0xbfb6a824 in ?? () #120 0xb6bb598d in ?? () from /lib/libdl.so.2 #121 0x0805edd8 in ?? () #122 0xb6904617 in _dl_sym () from /lib/libc.so.6 #123 0x00000000 in ?? () #124 0x00000002 in ?? () #125 0xb6bb4e36 in dlclose () from /lib/libdl.so.2 #126 0xb7f6dca0 in ?? () from /lib/ld-linux.so.2 #127 0xb7f63821 in _dl_rtld_di_serinfo () from /lib/ld-linux.so.2 #128 0x00000058 in ?? () #129 0xb692dff4 in ?? () from /lib/libc.so.6 #130 0x0000004f in ?? () #131 0xb680c6ac in ?? () #132 0xb6bb4e10 in dlclose () from /lib/libdl.so.2 #133 0x0805ede0 in ?? () #134 0x00000050 in ?? () #135 0x00000000 in ?? () #136 0xb7f6dfd4 in ?? () from /lib/ld-linux.so.2 #137 0xb7f6dca0 in ?? () from /lib/ld-linux.so.2 #138 0xb6bb598d in ?? () from /lib/libdl.so.2 #139 0x0805edd8 in ?? () #140 0xbfb6a6f8 in ?? () #141 0xb7f63803 in _dl_rtld_di_serinfo () from /lib/ld-linux.so.2 #142 0x081014b7 in ?? ()

Confirming on 3.5 SVN.

crashes here too

I get a different crash, but first when exiting the page.

SVN commit 534875 by carewolf: Don't mark parents when you haven't got any. Fixes the only crash I see in bug 117240 BUG: 117240 M +1 -1 render_object.cpp --- branches/KDE/3.5/kdelibs/khtml/rendering/render_object.cpp #534874:534875 @@ -512,7 +512,7 @@ bool alreadyNeededLayout = m_needsLayout; m_needsLayout = b; if (b) { - if (!alreadyNeededLayout && markParents) { + if (!alreadyNeededLayout && markParents && m_parent) { dirtyFormattingContext( false ); markContainingBlocksForLayout(); }