Summary: | Assertion failure in htmltokenizer.cpp:159 | ||
---|---|---|---|
Product: | [Applications] konqueror | Reporter: | Thiago Macieira <thiago> |
Component: | khtml parsing | Assignee: | Konqueror Developers <konq-bugs> |
Status: | RESOLVED FIXED | ||
Severity: | crash | CC: | bialek, dev, d_baron, FalkKroenert, faure, itlistuser, jjm, kjelderg, kollix, kouzinopoulos, lasindi, len, ojo, rfernandes, w.richert, woebbeking |
Priority: | NOR | ||
Version: | 3.4.92 | ||
Target Milestone: | --- | ||
Platform: | Unlisted Binaries | ||
OS: | Linux | ||
Latest Commit: | Version Fixed In: | ||
Attachments: | testcase |
Description
Thiago Macieira
2005-11-12 02:03:01 UTC
Same backtrace as bug 105873 which I can reproduce. Steps to reproduce: 1) Go to www.torrentspy.com 2) click Directory 3) click Linux 4) click Applications (or any other) 5) click any item (like OpenSUSE, but any will do) 6) go Back crash happens, reproducible every time. Can reproduce it, should I provide any data? Suse 10.0, kde 3.5rc1 A URL would be helpful :-) I did give you an URL, but here's an even faster one: http://www.torrentspy.com/directory.asp?mode=sub&id=265&cat=Applications click OpenSUSE, let it load for a bit, then go Back *** Bug 116660 has been marked as a duplicate of this bug. *** *** Bug 116846 has been marked as a duplicate of this bug. *** The reason we're crashing is that we somehow get in a state where we're running JS in a frame, and it asks for the parent document, while the document somehow hasn't been restored. Then, the runtime tries to create a fallback empty document, which destroys the frame running the script Created attachment 13590 [details]
testcase
testcase for at least one variant of the bug. extract it, and click on fs.html,
then follow the instructions
Note: I am not sure I can take it further, since I am afraid I don't understand the restoration code. *** Bug 116713 has been marked as a duplicate of this bug. *** *** Bug 117148 has been marked as a duplicate of this bug. *** *** Bug 117424 has been marked as a duplicate of this bug. *** *** Bug 117467 has been marked as a duplicate of this bug. *** *** Bug 116378 has been marked as a duplicate of this bug. *** *** Bug 117915 has been marked as a duplicate of this bug. *** SVN commit 487251 by ggarand: m_bCleared status must not be overriden though, as the restoration path has already cleared by the time we reach begin(), and might very well be restoring frames. BUG: 116156 M +2 -2 khtml_part.cpp --- branches/KDE/3.5/kdelibs/khtml/khtml_part.cpp #487250:487251 @@ -251,6 +251,7 @@ d->m_paDebugScript = 0; d->m_bMousePressed = false; d->m_bRightMousePressed = false; + d->m_bCleared = false; d->m_paViewDocument = new KAction( i18n( "View Do&cument Source" ), CTRL + Key_U, this, SLOT( slotViewDocumentSource() ), actionCollection(), "viewDocumentSource" ); d->m_paViewFrame = new KAction( i18n( "View Frame Source" ), 0, this, SLOT( slotViewFrameSource() ), actionCollection(), "viewFrameSource" ); d->m_paViewInfo = new KAction( i18n( "View Document Information" ), CTRL+Key_I, this, SLOT( slotViewPageInfo() ), actionCollection(), "viewPageInfo" ); @@ -1874,12 +1875,11 @@ } } + clear(); d->m_bCleared = false; d->m_cacheId = 0; d->m_bComplete = false; d->m_bLoadEventEmitted = false; - clear(); - d->m_bCleared = false; if(url.isValid()) { QString urlString = url.url(); *** Bug 118430 has been marked as a duplicate of this bug. *** *** Bug 118568 has been marked as a duplicate of this bug. *** *** Bug 118568 has been marked as a duplicate of this bug. *** I updated kdelibs to rev. 489438 and it still crashes at www.schloss-esterhazy.at with the same bt. Same problem for me on Gentoo with KDE 3.5.0 final. Happens everytime on ebay whether logged into account or not. *** Bug 119164 has been marked as a duplicate of this bug. *** I still cannot reproduce the crashes. I've tried several of them as reported and I don't see it happening nor assertion failures. On Thursday 29 December 2005 15:09, Thiago Macieira wrote: It's a pitty, but with the page it happend before all the time (www.schloss-esterhazy.at) I can also no longer reproduce it. Can you reproduce it in any of the other websites? On Thursday 29 December 2005 19:41, Thiago Macieira wrote: No, sorry. But I get a lot of nspluginviewer crashes when I click around on www.torrentspy.com ... but all with useless backtrace. *** Bug 119246 has been marked as a duplicate of this bug. *** *** Bug 119719 has been marked as a duplicate of this bug. *** This is believed to be fixed. We cannot reproduce the crash. If you can with a recent Subversion checkout or KDE 3.5.1, let us know. *** Bug 121034 has been marked as a duplicate of this bug. *** 3.5.1 -- is there a way of upgrading to this without rebuilding a whole new installation? I made 3.5 with konstruct. *** Bug 117424 has been marked as a duplicate of this bug. *** |