Version: 3.4.0 (using KDE KDE 3.4.0) Installed from: Unlisted Binary Package Compiler: gcc 3.4.3 20050314 (ALT Linux, build 3.4.3-alt6) OS: Linux Test case HTML page looks like this: <html> <body> <script language='javascript'> function ch(form){ form.submit(); } </script> <form action="" method=POST enctype="multipart/form-data" name='t'> Choose file <input type=file name=Csv> <input type=submit value="Upload" name=upload onClick='ch(this.form)'> </form> </body > </html> On submit button press konqueror is crashed.
Created attachment 11103 [details] testcase attached
Program received signal SIGSEGV, Segmentation fault. KHTMLView::nonPasswordStorableSite (this=0x0, host=@0xbfbfea40) at khtmlview.cpp:2617 2617 if (!d->formCompletions) { (gdb) bt #0 KHTMLView::nonPasswordStorableSite (this=0x0, host=@0xbfbfea40) at khtmlview.cpp:2617 #1 0x29b71578 in DOM::HTMLFormElementImpl::gatherWalletData (this=0x833c000) at html_formimpl.cpp:505 #2 0x29b71abe in DOM::HTMLFormElementImpl::submit (this=0x833c000) at html_formimpl.cpp:567 #3 0x29b719b6 in DOM::HTMLFormElementImpl::prepareSubmit (this=0x833c000) at html_formimpl.cpp:542 #4 0x29b776d4 in DOM::HTMLInputElementImpl::activate (this=0x833d600) at html_formimpl.cpp:1661 #5 0x29b77652 in DOM::HTMLInputElementImpl::defaultEventHandler ( this=0x833d600, evt=0x83204c0) at html_formimpl.cpp:1644 #6 0x29b2c38f in DOM::NodeImpl::dispatchGenericEvent (this=0x833d600, evt=0x83204c0) at dom_nodeimpl.cpp:458 #7 0x29b2bee7 in DOM::NodeImpl::dispatchEvent (this=0x833d600, evt=0x83204c0, exceptioncode=@0xbfbfed38, tempEvent=true) at dom_nodeimpl.cpp:402 #8 0x29b2cc6f in DOM::NodeImpl::dispatchUIEvent (this=0x833d600, _id=3, detail=1) at dom_nodeimpl.cpp:610 #9 0x29b2c406 in DOM::NodeImpl::dispatchGenericEvent (this=0x833d600, evt=0x833d680) at dom_nodeimpl.cpp:462 #10 0x29b2bee7 in DOM::NodeImpl::dispatchEvent (this=0x833d600, evt=0x833d680, exceptioncode=@0xbfbfeeac, tempEvent=true) at dom_nodeimpl.cpp:402 #11 0x29abaf01 in KHTMLView::dispatchMouseEvent (this=0x8385d00, eventId=4, targetNode=0x833d600, targetNodeNonShared=0x833d600, cancelable=true, detail=1, _mouse=0xbfbfef6c, setUnder=true, mouseEventType=1) at khtmlview.cpp:2731 #12 0x29ab3ccd in KHTMLView::viewportMouseReleaseEvent (this=0x8385d00, _mouse=0xbfbff078) at khtmlview.cpp:1226 #13 0x29ab6845 in KHTMLView::eventFilter (this=0x8385d00, o=0x8371700, e=0xbfbff424) at khtmlview.cpp:1872
*** Bug 91456 has been marked as a duplicate of this bug. ***
*** This bug has been marked as a duplicate of 74569 ***