Bug 111113 - [test case] Javascript security alert then konqueror crash
Summary: [test case] Javascript security alert then konqueror crash
Status: RESOLVED FIXED
Alias: None
Product: konqueror
Classification: Applications
Component: khtml (show other bugs)
Version: 3.5
Platform: Compiled Sources Linux
: NOR crash
Target Milestone: ---
Assignee: Konqueror Developers
URL:
Keywords:
: 112758 (view as bug list)
Depends on:
Blocks:
 
Reported: 2005-08-19 20:12 UTC by Dennis
Modified: 2010-05-06 10:38 UTC (History)
7 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Dennis 2005-08-19 20:12:27 UTC
Version:           Konqueror 3.4.90 (Using KDE 3.4.90 (alpha1, >= 20050806)) (using KDE KDE 3.4.90)
Installed from:    Compiled From Sources
Compiler:          gcc version 3.3.5-20050130 (Gentoo Linux 3.3.5.20050130-r1, ssp-3.3.5.20050130-1, pie-8.7.7.1) 
OS:                Linux

When I go to view the below HTML konqueror pops up with a box saying "Access by untrusted page to javascript:1174973462 denied.", and when I hit "OK", konqueror crashes.

HTML Code:
<html>
<head>
</head>
<body>
<EMBED SRC=javascript:1174973462>
</body>

Example URL:
http://www.engrowe.com/konq/embed.html

Backtrace:
Using host libthread_db library "/lib/tls/libthread_db.so.1".
`system-supplied DSO at 0xffffe000' has disappeared; keeping its symbols.
[Thread debugging using libthread_db enabled]
[New Thread -1231509280 (LWP 8487)]
[KCrash handler]
#4  0xffffe410 in __kernel_vsyscall ()
#5  0xb69b9b39 in raise () from /lib/tls/libc.so.6
#6  0xb69bb1b1 in abort () from /lib/tls/libc.so.6
#7  0xb69b3621 in __assert_fail () from /lib/tls/libc.so.6
#8  0xb627ed3f in khtml::RenderReplaced::calcMinMaxWidth ()
   from /home/shrek/kde3.5-alpha1/lib/libkhtml.so.4
#9  0xb6203cb2 in khtml::KHTMLParser::insertNode ()
   from /home/shrek/kde3.5-alpha1/lib/libkhtml.so.4
#10 0xb6203832 in khtml::KHTMLParser::parseToken ()
   from /home/shrek/kde3.5-alpha1/lib/libkhtml.so.4
#11 0xb620de40 in khtml::HTMLTokenizer::processToken ()
   from /home/shrek/kde3.5-alpha1/lib/libkhtml.so.4
#12 0xb620bd25 in khtml::HTMLTokenizer::parseTag ()
   from /home/shrek/kde3.5-alpha1/lib/libkhtml.so.4
#13 0xb620d2de in khtml::HTMLTokenizer::write ()
   from /home/shrek/kde3.5-alpha1/lib/libkhtml.so.4
#14 0xb619a444 in KHTMLPart::write ()
   from /home/shrek/kde3.5-alpha1/lib/libkhtml.so.4
#15 0xb61973c7 in KHTMLPart::slotData ()
   from /home/shrek/kde3.5-alpha1/lib/libkhtml.so.4
#16 0xb61bb79b in KHTMLPart::qt_invoke ()
   from /home/shrek/kde3.5-alpha1/lib/libkhtml.so.4
#17 0xb712f7cc in QObject::activate_signal ()
   from /home/shrek/kde3.5-alpha1/lib/libqt-mt.so.3
#18 0xb7d67294 in KIO::TransferJob::data ()
   from /home/shrek/kde3.5-alpha1/lib/libkio.so.4
#19 0xb7d4efe3 in KIO::TransferJob::slotData ()
   from /home/shrek/kde3.5-alpha1/lib/libkio.so.4
#20 0xb7d677e4 in KIO::TransferJob::qt_invoke ()
   from /home/shrek/kde3.5-alpha1/lib/libkio.so.4
#21 0xb712f7cc in QObject::activate_signal ()
   from /home/shrek/kde3.5-alpha1/lib/libqt-mt.so.3
#22 0xb7d3ecba in KIO::SlaveInterface::data ()
   from /home/shrek/kde3.5-alpha1/lib/libkio.so.4
#23 0xb7d3b032 in KIO::SlaveInterface::dispatch ()
   from /home/shrek/kde3.5-alpha1/lib/libkio.so.4
#24 0xb7d3ad60 in KIO::SlaveInterface::dispatch ()
   from /home/shrek/kde3.5-alpha1/lib/libkio.so.4
#25 0xb7d37b68 in KIO::Slave::gotInput ()
   from /home/shrek/kde3.5-alpha1/lib/libkio.so.4
#26 0xb7d3a4a8 in KIO::Slave::qt_invoke ()
   from /home/shrek/kde3.5-alpha1/lib/libkio.so.4
#27 0xb712f7cc in QObject::activate_signal ()
   from /home/shrek/kde3.5-alpha1/lib/libqt-mt.so.3
#28 0xb712f92d in QObject::activate_signal ()
   from /home/shrek/kde3.5-alpha1/lib/libqt-mt.so.3
#29 0xb746f472 in QSocketNotifier::activated ()
   from /home/shrek/kde3.5-alpha1/lib/libqt-mt.so.3
#30 0xb714bfa0 in QSocketNotifier::event ()
   from /home/shrek/kde3.5-alpha1/lib/libqt-mt.so.3
#31 0xb70d2f1f in QApplication::internalNotify ()
   from /home/shrek/kde3.5-alpha1/lib/libqt-mt.so.3
#32 0xb70d251e in QApplication::notify ()
   from /home/shrek/kde3.5-alpha1/lib/libqt-mt.so.3
#33 0xb7736785 in KApplication::notify ()
   from /home/shrek/kde3.5-alpha1/lib/libkdecore.so.4
#34 0xb70c293a in QEventLoop::activateSocketNotifiers ()
   from /home/shrek/kde3.5-alpha1/lib/libqt-mt.so.3
#35 0xb707b973 in QEventLoop::processEvents ()
   from /home/shrek/kde3.5-alpha1/lib/libqt-mt.so.3
#36 0xb70e5338 in QEventLoop::enterLoop ()
   from /home/shrek/kde3.5-alpha1/lib/libqt-mt.so.3
#37 0xb70e51e8 in QEventLoop::exec ()
   from /home/shrek/kde3.5-alpha1/lib/libqt-mt.so.3
#38 0xb70d3171 in QApplication::exec ()
   from /home/shrek/kde3.5-alpha1/lib/libqt-mt.so.3
#39 0xb682b0dc in kdemain ()
   from /home/shrek/kde3.5-alpha1/lib/libkdeinit_konqueror.so
#40 0xb7651816 in kdeinitmain ()
   from /home/shrek/kde3.5-alpha1/lib/kde3/konqueror.so
#41 0x0804cec3 in launch ()
#42 0x0804e6d1 in handle_launcher_request ()
#43 0x0804ec1d in handle_requests ()
#44 0x0804fd72 in main ()
Comment 1 Tommi Tervo 2005-12-14 15:49:47 UTC
#7  0xb69d2695 in __assert_fail () from /lib/tls/i686/cmov/libc.so.6
#8  0xb61cc6eb in khtml::RenderReplaced::calcMinMaxWidth (this=0x857f758)
    at render_replaced.cpp:66
#9  0xb61897b7 in khtml::KHTMLParser::insertNode (this=0x869f9a8, n=0x867b4d0, 
    flat=true) at htmlparser.cpp:358
#10 0xb6194e5a in khtml::KHTMLParser::parseToken (this=0x869f9a8, t=0x8c0122c)
    at htmlparser.cpp:289
#11 0xb6195028 in khtml::HTMLTokenizer::processToken (this=0x8c011f8)
    at htmltokenizer.cpp:1666
#12 0xb619920e in khtml::HTMLTokenizer::parseTag (this=0x8c011f8, 
    src=@0x8c01328) at htmltokenizer.cpp:1166
#13 0xb6199912 in khtml::HTMLTokenizer::write (this=0x8c011f8, 
    str=@0xbfe7fbe8, appendData=true) at htmltokenizer.cpp:1425
#14 0xb60fcd1b in KHTMLPart::write (this=0x8cf97c8, 
    str=0x81628e0 "<html>\n<head>\n</head>\n<body>\n<EMBED SRC=javascript:1174973462>\n</body>\n", len=71) at khtml_part.cpp:1977
#15 0xb60fe1ff in KHTMLPart::slotData (this=0x8cf97c8, kio_job=0x96ebe78, 
    data=@0xbfe80198) at khtml_part.cpp:1659
#16 0xb611bcd5 in KHTMLPart::qt_invoke (this=0x8cf97c8, _id=16, _o=0xbfe7fe94)
    at khtml_part.moc:501
Comment 2 Tommi Tervo 2005-12-14 15:51:05 UTC
*** Bug 112758 has been marked as a duplicate of this bug. ***
Comment 3 Tommi Tervo 2008-02-05 13:12:23 UTC
test case here: http://panola.kyla.fi/~teve/kde/111113.html

4.0.1 crashes too.

#10 0xb3184ec6 in khtml::RenderReplaced::calcMinMaxWidth
 (this=0x8db7140)
    at /home/teve/src/kdelibs/khtml/rendering/render_replaced.cpp:75
#11 0xb30b914d in khtml::KHTMLParser::insertNode (this=0x8daa940,
 n=0x8db4ce8,
    flat=true) at /home/teve/src/kdelibs/khtml/html/htmlparser.cpp:364
#12 0xb30bd322 in khtml::KHTMLParser::parseToken (this=0x8daa940,
 t=0x8db6864)
    at /home/teve/src/kdelibs/khtml/html/htmlparser.cpp:284
#13 0xb30be2cc in khtml::HTMLTokenizer::processToken (this=0x8db6850)
    at /home/teve/src/kdelibs/khtml/html/htmltokenizer.cpp:1698
#14 0xb30c4a73 in khtml::HTMLTokenizer::parseTag (this=0x8db6850,
    src=@0x8db6d18) at
 /home/teve/src/kdelibs/khtml/html/htmltokenizer.cpp:1190
#15 0xb30c520b in khtml::HTMLTokenizer::write (this=0x8db6850,
    str=@0xbf83b1cc, appendData=true)
    at /home/teve/src/kdelibs/khtml/html/htmltokenizer.cpp:1456
#16 0xb30220e9 in KHTMLPart::write (this=0x8d2ef48,
Comment 4 Christophe Marin 2008-04-17 02:13:56 UTC
Still crashes in trunk (kdelibs r. 797569).

With testcase in comment #3 :

Application: Konqueror (konqueror), signal SIGABRT
[Thread debugging using libthread_db enabled]
[New Thread 0xb61b4720 (LWP 12120)]
[KCrash handler]
#6  0xb7f01410 in __kernel_vsyscall ()
#7  0xb650e085 in raise () from /lib/tls/i686/cmov/libc.so.6
#8  0xb650fa01 in abort () from /lib/tls/i686/cmov/libc.so.6
#9  0xb650710e in __assert_fail () from /lib/tls/i686/cmov/libc.so.6
#10 0xb478fc68 in khtml::RenderReplaced::calcMinMaxWidth (this=0x84b1090)
    at /media/sda7/kde/src/KDE/kdelibs/khtml/rendering/render_replaced.cpp:75
#11 0xb46e85fa in khtml::KHTMLParser::insertNode (this=0x878ae30, 
    n=0x87a4808, flat=true)
    at /media/sda7/kde/src/KDE/kdelibs/khtml/html/htmlparser.cpp:363
#12 0xb46eac79 in khtml::KHTMLParser::parseToken (this=0x878ae30, t=0x878480c)
    at /media/sda7/kde/src/KDE/kdelibs/khtml/html/htmlparser.cpp:284
#13 0xb46eb982 in khtml::HTMLTokenizer::processToken (this=0x87847f8)
    at /media/sda7/kde/src/KDE/kdelibs/khtml/html/htmltokenizer.cpp:1698
#14 0xb46f078c in khtml::HTMLTokenizer::parseTag (this=0x87847f8, 
    src=@0x8784cc0)
    at /media/sda7/kde/src/KDE/kdelibs/khtml/html/htmltokenizer.cpp:1190
#15 0xb46f0eaf in khtml::HTMLTokenizer::write (this=0x87847f8, 
    str=@0xbfd016c8, appendData=true)
    at /media/sda7/kde/src/KDE/kdelibs/khtml/html/htmltokenizer.cpp:1456
#16 0xb4669fdf in KHTMLPart::write (this=0x8727298, 
    data=0x84b7d00 "<html> \n\t <head> \n\t\t  </head> \n\t\t   <body> \n\t\t\t    <EMBED SRC=javascript:1174973462> \n\t\t\t     </body>\n", len=102)
    at /media/sda7/kde/src/KDE/kdelibs/khtml/khtml_part.cpp:1938
#17 0xb466c51c in KHTMLPart::slotData (this=0x8727298, kio_job=0x87103b0, 
    data=@0xbfd01be4)
    at /media/sda7/kde/src/KDE/kdelibs/khtml/khtml_part.cpp:1626
#18 0xb4674186 in KHTMLPart::qt_metacall (this=0x8727298, 
    _c=QMetaObject::InvokeMetaMethod, _id=19, _a=0xbfd01948)
    at /media/sda7/kde/build4/KDE/kdelibs/khtml/khtml_part.moc:264
#19 0xb72264c7 in QMetaObject::activate (sender=0x87103b0, 
    from_signal_index=40, to_signal_index=40, argv=0xbfd01948)
    at kernel/qobject.cpp:3007
#20 0xb7226949 in QMetaObject::activate (sender=0x87103b0, m=0xb7da9a90, 
    local_signal_index=0, argv=0xbfd01948) at kernel/qobject.cpp:3080
#21 0xb7c47e89 in KIO::TransferJob::data (this=0x87103b0, _t1=0x87103b0, 
    _t2=@0xbfd01be4)
    at /media/sda7/kde/build4/KDE/kdelibs/kio/jobclasses.moc:356
#22 0xb7c487e3 in KIO::TransferJob::slotData (this=0x87103b0, 
    _data=@0xbfd01be4) at /media/sda7/kde/src/KDE/kdelibs/kio/kio/job.cpp:921
#23 0xb7c52780 in KIO::TransferJob::qt_metacall (this=0x87103b0, 
    _c=QMetaObject::InvokeMetaMethod, _id=8, _a=0xbfd01a8c)
    at /media/sda7/kde/build4/KDE/kdelibs/kio/jobclasses.moc:337
#24 0xb72264c7 in QMetaObject::activate (sender=0x8123b50, 
    from_signal_index=4, to_signal_index=4, argv=0xbfd01a8c)
    at kernel/qobject.cpp:3007
#25 0xb7226949 in QMetaObject::activate (sender=0x8123b50, m=0xb7dac464, 
    local_signal_index=0, argv=0xbfd01a8c) at kernel/qobject.cpp:3080
#26 0xb7cec203 in KIO::SlaveInterface::data (this=0x8123b50, _t1=@0xbfd01be4)
    at /media/sda7/kde/build4/KDE/kdelibs/kio/slaveinterface.moc:136
#27 0xb7cedbf9 in KIO::SlaveInterface::dispatch (this=0x8123b50, _cmd=100, 
    rawdata=@0xbfd01be4)
    at /media/sda7/kde/src/KDE/kdelibs/kio/kio/slaveinterface.cpp:162
#28 0xb7cee747 in KIO::SlaveInterface::dispatch (this=0x8123b50)
    at /media/sda7/kde/src/KDE/kdelibs/kio/kio/slaveinterface.cpp:90
#29 0xb7ce19b7 in KIO::Slave::gotInput (this=0x8123b50)
    at /media/sda7/kde/src/KDE/kdelibs/kio/kio/slave.cpp:319
#30 0xb7ce2d4d in KIO::Slave::qt_metacall (this=0x8123b50, 
    _c=QMetaObject::InvokeMetaMethod, _id=2, _a=0xbfd01d0c)
    at /media/sda7/kde/build4/KDE/kdelibs/kio/slave.moc:75
#31 0xb72264c7 in QMetaObject::activate (sender=0x8917268, 
    from_signal_index=4, to_signal_index=4, argv=0x0)
    at kernel/qobject.cpp:3007
#32 0xb7226949 in QMetaObject::activate (sender=0x8917268, m=0xb7da92e0, 
    local_signal_index=0, argv=0x0) at kernel/qobject.cpp:3080
#33 0xb7c26567 in KIO::Connection::readyRead (this=0x8917268)
    at /media/sda7/kde/build4/KDE/kdelibs/kio/connection.moc:84
#34 0xb7c27376 in KIO::ConnectionPrivate::dequeue (this=0x87959b8)
    at /media/sda7/kde/src/KDE/kdelibs/kio/kio/connection.cpp:82
#35 0xb7c28195 in KIO::Connection::qt_metacall (this=0x8917268, 
    _c=QMetaObject::InvokeMetaMethod, _id=1, _a=0x85f9130)
    at /media/sda7/kde/build4/KDE/kdelibs/kio/connection.moc:72
#36 0xb722049e in QMetaCallEvent::placeMetaCall (this=0x87f5ad0, 
    object=0x8917268) at kernel/qobject.cpp:535
#37 0xb7224810 in QObject::event (this=0x8917268, e=0x87f5ad0)
    at kernel/qobject.cpp:1137
#38 0xb69068fd in QApplicationPrivate::notify_helper (this=0x805d9d8, 
    receiver=0x8917268, e=0x87f5ad0) at kernel/qapplication.cpp:3766
#39 0xb6906be3 in QApplication::notify (this=0xbfd0275c, receiver=0x8917268, 
    e=0x87f5ad0) at kernel/qapplication.cpp:3360
#40 0xb7882133 in KApplication::notify (this=0xbfd0275c, receiver=0x8917268, 
    event=0x87f5ad0)
    at /media/sda7/kde/src/KDE/kdelibs/kdeui/kernel/kapplication.cpp:311
#41 0xb721163a in QCoreApplication::notifyInternal (this=0xbfd0275c, 
    receiver=0x8917268, event=0x87f5ad0) at kernel/qcoreapplication.cpp:583
#42 0xb7215179 in QCoreApplication::sendEvent (receiver=0x8917268, 
    event=0x87f5ad0)
    at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:215
#43 0xb7211b52 in QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, 
    event_type=0, data=0x804b760) at kernel/qcoreapplication.cpp:1195
#44 0xb7211d03 in QCoreApplication::sendPostedEvents (receiver=0x0, 
    event_type=0) at kernel/qcoreapplication.cpp:1091
#45 0xb7242552 in QCoreApplication::sendPostedEvents ()
    at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:220
#46 0xb7241763 in postEventSourceDispatch (s=0x8060120)
    at kernel/qeventdispatcher_glib.cpp:211
#47 0xb638ebf8 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#48 0xb6391e5e in ?? () from /usr/lib/libglib-2.0.so.0
#49 0x08060098 in ?? ()
#50 0x00000000 in ?? ()
#0  0xb7f01410 in __kernel_vsyscall ()
Comment 5 Drew Fisher 2008-07-03 04:14:18 UTC
Still present in SVN r827448.

Application: Konqueror (konqueror), signal SIGABRT
[Thread debugging using libthread_db enabled]
[New Thread 0xb5d56720 (LWP 16868)]
[New Thread 0xb1913b90 (LWP 18624)]
[KCrash handler]
#6  0xb7eff410 in __kernel_vsyscall ()
#7  0xb60b0085 in raise () from /lib/tls/i686/cmov/libc.so.6
#8  0xb60b1a01 in abort () from /lib/tls/i686/cmov/libc.so.6
#9  0xb60a910e in __assert_fail () from /lib/tls/i686/cmov/libc.so.6
#10 0xb3a6822b in khtml::RenderReplaced::calcMinMaxWidth (this=0x991f7f0)
    at /home/kdedev/kde/src/KDE/kdelibs/khtml/rendering/render_replaced.cpp:76
#11 0xb39912c4 in khtml::KHTMLParser::insertNode (this=0x9916c10, 
    n=0x9a92510, flat=true)
    at /home/kdedev/kde/src/KDE/kdelibs/khtml/html/htmlparser.cpp:442
#12 0xb39955b0 in khtml::KHTMLParser::parseToken (this=0x9916c10, t=0x9a7aecc)
    at /home/kdedev/kde/src/KDE/kdelibs/khtml/html/htmlparser.cpp:293
#13 0xb3996c56 in khtml::HTMLTokenizer::processToken (this=0x9a7aeb8)
    at /home/kdedev/kde/src/KDE/kdelibs/khtml/html/htmltokenizer.cpp:2031
#14 0xb399e6fc in khtml::HTMLTokenizer::parseTag (this=0x9a7aeb8, 
    src=@0x9a7b3a8)
    at /home/kdedev/kde/src/KDE/kdelibs/khtml/html/htmltokenizer.cpp:1515
#15 0xb399efd7 in khtml::HTMLTokenizer::write (this=0x9a7aeb8, 
    str=@0xbfaeb038, appendData=true)
    at /home/kdedev/kde/src/KDE/kdelibs/khtml/html/htmltokenizer.cpp:1789
#16 0xb38e8dba in KHTMLPart::write (this=0x97d84d8, 
    data=0x9a7cbd8 "<html>\n<head>\n</head>\n<body>\n<EMBED SRC=javascript:1174973462>\n</body>\n", len=71)
    at /home/kdedev/kde/src/KDE/kdelibs/khtml/khtml_part.cpp:1956
#17 0xb38ec052 in KHTMLPart::slotData (this=0x97d84d8, kio_job=0x8bbf0f8, 
    data=@0xbfaeb558)
    at /home/kdedev/kde/src/KDE/kdelibs/khtml/khtml_part.cpp:1646
#18 0xb38f5279 in KHTMLPart::qt_metacall (this=0x97d84d8, 
    _c=QMetaObject::InvokeMetaMethod, _id=19, _a=0xbfaeb2c8)
    at /home/kdedev/kde/build/KDE/kdelibs/khtml/khtml_part.moc:264
#19 0xb72aa051 in QMetaObject::activate (sender=0x8bbf0f8, 
    from_signal_index=40, to_signal_index=40, argv=0xbfaeb2c8)
    at kernel/qobject.cpp:3010
#20 0xb72aa5db in QMetaObject::activate (sender=0x8bbf0f8, m=0xb7d980f0, 
    local_signal_index=0, argv=0xbfaeb2c8) at kernel/qobject.cpp:3080
#21 0xb7c17dad in KIO::TransferJob::data (this=0x8bbf0f8, _t1=0x8bbf0f8, 
    _t2=@0xbfaeb558)
    at /home/kdedev/kde/build/KDE/kdelibs/kio/jobclasses.moc:356
#22 0xb7c18743 in KIO::TransferJob::slotData (this=0x8bbf0f8, 
    _data=@0xbfaeb558) at /home/kdedev/kde/src/KDE/kdelibs/kio/kio/job.cpp:926
#23 0xb7c233ac in KIO::TransferJob::qt_metacall (this=0x8bbf0f8, 
    _c=QMetaObject::InvokeMetaMethod, _id=8, _a=0xbfaeb41c)
    at /home/kdedev/kde/build/KDE/kdelibs/kio/jobclasses.moc:337
#24 0xb72aa051 in QMetaObject::activate (sender=0x9aafe20, 
    from_signal_index=4, to_signal_index=4, argv=0xbfaeb41c)
    at kernel/qobject.cpp:3010
#25 0xb72aa5db in QMetaObject::activate (sender=0x9aafe20, m=0xb7d9ab24, 
    local_signal_index=0, argv=0xbfaeb41c) at kernel/qobject.cpp:3080
#26 0xb7cc57f0 in KIO::SlaveInterface::data (this=0x9aafe20, _t1=@0xbfaeb558)
    at /home/kdedev/kde/build/KDE/kdelibs/kio/slaveinterface.moc:136
#27 0xb7cc7410 in KIO::SlaveInterface::dispatch (this=0x9aafe20, _cmd=100, 
    rawdata=@0xbfaeb558)
    at /home/kdedev/kde/src/KDE/kdelibs/kio/kio/slaveinterface.cpp:162
#28 0xb7cc7351 in KIO::SlaveInterface::dispatch (this=0x9aafe20)
    at /home/kdedev/kde/src/KDE/kdelibs/kio/kio/slaveinterface.cpp:90
#29 0xb7cba184 in KIO::Slave::gotInput (this=0x9aafe20)
    at /home/kdedev/kde/src/KDE/kdelibs/kio/kio/slave.cpp:319
#30 0xb7cbb5be in KIO::Slave::qt_metacall (this=0x9aafe20, 
    _c=QMetaObject::InvokeMetaMethod, _id=2, _a=0xbfaeb66c)
    at /home/kdedev/kde/build/KDE/kdelibs/kio/slave.moc:75
#31 0xb72aa051 in QMetaObject::activate (sender=0x9aafc98, 
    from_signal_index=4, to_signal_index=4, argv=0x0)
    at kernel/qobject.cpp:3010
#32 0xb72aa5db in QMetaObject::activate (sender=0x9aafc98, m=0xb7d97780, 
    local_signal_index=0, argv=0x0) at kernel/qobject.cpp:3080
#33 0xb7beb8b7 in KIO::Connection::readyRead (this=0x9aafc98)
    at /home/kdedev/kde/build/KDE/kdelibs/kio/connection.moc:84
#34 0xb7bec7f7 in KIO::ConnectionPrivate::dequeue (this=0x9ab0760)
    at /home/kdedev/kde/src/KDE/kdelibs/kio/kio/connection.cpp:82
#35 0xb7bed725 in KIO::Connection::qt_metacall (this=0x9aafc98, 
    _c=QMetaObject::InvokeMetaMethod, _id=1, _a=0x97d5570)
    at /home/kdedev/kde/build/KDE/kdelibs/kio/connection.moc:72
#36 0xb72a3082 in QMetaCallEvent::placeMetaCall (this=0x9be5b18, 
    object=0x9aafc98) at kernel/qobject.cpp:535
#37 0xb72a7d00 in QObject::event (this=0x9aafc98, e=0x9be5b18)
    at kernel/qobject.cpp:1140
#38 0xb6750f55 in QApplicationPrivate::notify_helper (this=0x805db80, 
    receiver=0x9aafc98, e=0x9be5b18) at kernel/qapplication.cpp:3772
#39 0xb675123b in QApplication::notify (this=0xbfaebff0, receiver=0x9aafc98, 
    e=0x9be5b18) at kernel/qapplication.cpp:3366
#40 0xb77f0421 in KApplication::notify (this=0xbfaebff0, receiver=0x9aafc98, 
    event=0x9be5b18)
    at /home/kdedev/kde/src/KDE/kdelibs/kdeui/kernel/kapplication.cpp:311
#41 0xb729224d in QCoreApplication::notifyInternal (this=0xbfaebff0, 
    receiver=0x9aafc98, event=0x9be5b18) at kernel/qcoreapplication.cpp:587
#42 0xb72967dd in QCoreApplication::sendEvent (receiver=0x9aafc98, 
    event=0x9be5b18)
    at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:215
#43 0xb72927ee in QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, 
    event_type=0, data=0x804b760) at kernel/qcoreapplication.cpp:1198
#44 0xb7292a63 in QCoreApplication::sendPostedEvents (receiver=0x0, 
    event_type=0) at kernel/qcoreapplication.cpp:1091
#45 0xb72c933e in QCoreApplication::sendPostedEvents ()
    at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:220
#46 0xb72c852b in postEventSourceDispatch (s=0x8060300)
    at kernel/qeventdispatcher_glib.cpp:211
#47 0xb5f30bf8 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#48 0xb5f33e5e in ?? () from /usr/lib/libglib-2.0.so.0
#49 0xb5f343ac in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#50 0xb72c778c in QEventDispatcherGlib::processEvents (this=0x805da68, 
    flags=@0xbfaebde4) at kernel/qeventdispatcher_glib.cpp:325
#51 0xb680cdb0 in QGuiEventDispatcherGlib::processEvents (this=0x805da68, 
    flags=@0xbfaebe14) at kernel/qguieventdispatcher_glib.cpp:204
#52 0xb728eaca in QEventLoop::processEvents (this=0xbfaebe9c, 
    flags=@0xbfaebe54) at kernel/qeventloop.cpp:149
#53 0xb728ed09 in QEventLoop::exec (this=0xbfaebe9c, flags=@0xbfaebea4)
    at kernel/qeventloop.cpp:200
#54 0xb7292b84 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:845
#55 0xb6750c6e in QApplication::exec () at kernel/qapplication.cpp:3304
#56 0xb7ee4709 in kdemain (argc=2, argv=0xbfaec304)
    at /home/kdedev/kde/src/KDE/kdebase/apps/konqueror/src/konqmain.cpp:228
#57 0x08048796 in main (argc=)
    at /home/kdedev/kde/build/KDE/kdebase/apps/konqueror/src/konqueror_dummy.cpp:3
#0  0xb7eff410 in __kernel_vsyscall ()
Comment 6 FiNeX 2008-11-22 02:16:38 UTC
Crash reproduced on r887467.
Comment 7 Dario Andres 2009-05-05 20:28:17 UTC
Here using:

Qt: 4.5.1 (qt-copy  960517)
KDE: 4.2.71 (KDE 4.2.71 (KDE 4.3 >= 20090428))
kdelibs svn rev. 963904 / kdebase svn rev. 963904
on ArchLinux i686 - Kernel 2.6.29.1

I can't reproduce the crash. Clicking OK in the messagebox about the JS security alert doesn't crash Konqueror
Comment 8 Raphael Kubo da Costa 2009-05-23 20:50:05 UTC
I can reproduce this crash with trunk (r971932).
Comment 9 Zayed Al-Saidi 2010-05-01 19:21:22 UTC
I can not crash khtml using the test case in comment# 3 using KDE SC Version 4.4.74 (KDE 4.4.74 (KDE 4.5 >= 20100428)) "release 3"
Comment 10 Christophe Marin 2010-05-06 10:38:20 UTC
Time to close this one then.