Bug 134920 - Konqueror crash on facebook.com
Summary: Konqueror crash on facebook.com
Status: RESOLVED FIXED
Alias: None
Product: konqueror
Classification: Applications
Component: khtml (show other bugs)
Version: unspecified
Platform: Compiled Sources Linux
: NOR crash
Target Milestone: ---
Assignee: Konqueror Developers
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-09-30 20:11 UTC by Steve Constable
Modified: 2007-01-05 21:17 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments
Log from crashed session (13.66 KB, text/plain)
2006-11-27 00:11 UTC, Alex Merry
Details
Backtrace to match the previous log (8.00 KB, text/plain)
2006-11-27 00:12 UTC, Alex Merry
Details
Backtrace with patch from Bug #124342 applied (8.00 KB, text/plain)
2006-11-28 23:34 UTC, Alex Merry
Details
An actual backtrace (11.04 KB, text/plain)
2006-12-01 21:43 UTC, Alex Merry
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Steve Constable 2006-09-30 20:11:23 UTC
Version:           3.5.2 (using KDE KDE 3.5.2)
Installed from:    Compiled From Sources
Compiler:          GCC 3.4.4 CFLAGS="-march=k8 -O2 -pipe"
OS:                Linux

The problem site opens up a small window within the document to type in.  Interactions within this window cause a crash.  Here is the backtrace:

(no debugging symbols found)
Using host libthread_db library "/lib/libthread_db.so.1".
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[Thread debugging using libthread_db enabled]
[New Thread 47635616879616 (LWP 2706)]
0x00002b5307ebf1c0 in nanosleep () from /lib/libc.so.6
#0  0x00002b5307ebf1c0 in nanosleep () from /lib/libc.so.6
#1  0x00002b5307ebf060 in sleep () from /lib/libc.so.6
#2  0x00002b5304cf58da in KCrash::startDrKonqi ()
   from /usr/kde/3.5/lib64/libkdecore.so.4
#3  0x00002b5304cf5c0e in KCrash::defaultCrashHandler ()
   from /usr/kde/3.5/lib64/libkdecore.so.4
#4  0x00002b5307e5e820 in killpg () from /lib/libc.so.6
#5  0x0000000000000000 in ?? ()
Comment 1 Philip Rodrigues 2006-10-01 00:33:26 UTC
I don't remember seeing any crashes on facebook. Can you give exact steps to reproduce the problem?
Comment 2 Steve Constable 2006-10-01 01:11:10 UTC
Hi.
I had just finished uploading a photo, then went to tag someone in it.  
That little popup box appeared where you enter who it was, and konqueror 
crashed.  I'm 64 bit by the way, if thats an issue.

Philip Rodrigues wrote:
[bugs.kde.org quoted mail]
Comment 3 Philip Rodrigues 2006-10-01 12:10:58 UTC
Can you reproduce the crash by repeating the same steps?
Comment 4 Alex Merry 2006-10-16 16:34:53 UTC
I can consistently reproduce this crash, but only by clicking a checkbox next to an existing name when tagging a photo. This should make the list disappear and add the tag, but Konqueror instead segfaults.

If you type in a unique name in the list (so that only that name appears, already checked) then click OK, the person is tagged as expected and there is no crash. Similarly for typing in a name that isn't on the list and clicking OK.

This problem is occurring on ArchLinux, but I've had exactly the same problem on a self-built KDE on Linux From Scratch and DIY linux, with or without the --enable-final configure option. I'm 32-bit, so it's not 64-bit specific.
Comment 5 Alex Merry 2006-10-29 15:53:34 UTC
Interestingly, it doesn't crash when you tag a photo when you're looking at just that picture, and select "tag picture" - this works fine. But if you are trying to tag a picture from the "edit album"/"edit photos" page, it will crash. This with KDE 3.5.5.
Comment 6 Alex Merry 2006-11-06 14:47:43 UTC
My mistake - it does segfault when you tag photos from the album view.  However, it does manage to upload the tag before it segfaults - the tag is still there when you start up the browser (or another browser) and look at the photo again.
Comment 7 Justin 2006-11-25 10:36:47 UTC
It does the same thing for me, using KDE 3.5.5 32-bit with Ubuntu 6.10.
Comment 8 Philip Rodrigues 2006-11-25 21:01:02 UTC
Can anyone get a full backtrace for the crash (with debugging information)?
Comment 9 Justin 2006-11-26 07:56:39 UTC
(no debugging symbols found)
Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1".
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[Thread debugging using libthread_db enabled]
[New Thread -1231706448 (LWP 4635)]
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[KCrash handler]
#6  0x00000000 in ?? ()
#7  0xb5fe7382 in DOM::checkChild () from /usr/lib/libkhtml.so.4
#8  0xb6012d42 in DOM::checkChild () from /usr/lib/libkhtml.so.4
#9  0xb5fbfdcf in DOM::XMLAttributeReader::XMLAttributeReader ()
   from /usr/lib/libkhtml.so.4
#10 0xb5fbfec2 in DOM::XMLAttributeReader::XMLAttributeReader ()
   from /usr/lib/libkhtml.so.4
#11 0xb5fc09d1 in DOM::XMLAttributeReader::XMLAttributeReader ()
   from /usr/lib/libkhtml.so.4
#12 0xb5fc0efc in DOM::XMLAttributeReader::XMLAttributeReader ()
   from /usr/lib/libkhtml.so.4
#13 0xb5fa33ce in KHTMLView::focusNextPrevNode () from /usr/lib/libkhtml.so.4
#14 0xb5fa3613 in KHTMLView::focusNextPrevChild () from /usr/lib/libkhtml.so.4
#15 0xb7324b4b in QWidget::focusNextPrevChild () from /usr/lib/libqt-mt.so.3
#16 0xb7324b4b in QWidget::focusNextPrevChild () from /usr/lib/libqt-mt.so.3
#17 0xb7324b4b in QWidget::focusNextPrevChild () from /usr/lib/libqt-mt.so.3
#18 0xb731fed9 in QWidget::hide () from /usr/lib/libqt-mt.so.3
#19 0xb606df25 in non-virtual thunk to DOM::HTMLObjectElementImpl::~HTMLObjectElementImpl() () from /usr/lib/libkhtml.so.4
#20 0x0bc8a208 in ?? ()
#21 0xb77b1f48 in ?? () from /usr/lib/libqt-mt.so.3
#22 0xbfe9a088 in ?? ()
#23 0xb620e164 in ?? () from /usr/lib/libkhtml.so.4
#24 0x0b5d5c54 in ?? ()
#25 0x0b5d5c54 in ?? ()
#26 0xbfe9a028 in ?? ()
#27 0xb606e051 in non-virtual thunk to DOM::HTMLObjectElementImpl::~HTMLObjectElementImpl() () from /usr/lib/libkhtml.so.4
#28 0x0b5d5c54 in ?? ()
#29 0xb620e164 in ?? () from /usr/lib/libkhtml.so.4
#30 0xbfe9a048 in ?? ()
#31 0xb6084f25 in non-virtual thunk to khtml::RenderCheckBox::~RenderCheckBox() () from /usr/lib/libkhtml.so.4
#32 0x0b5d5c54 in ?? ()
#33 0x00000000 in ?? ()
Comment 10 Allan Sandfeld 2006-11-26 13:31:48 UTC
This backtrace is not with debug info.
Comment 11 Philip Rodrigues 2006-11-26 14:52:56 UTC
I can't seem to reproduce the problem with r607234
Comment 12 Maksim Orlovich 2006-11-26 18:15:09 UTC
If this portion of backtrace is valid:
#13 0xb5fa33ce in KHTMLView::focusNextPrevNode () from /usr/lib/libkhtml.so.4 
 #14 0xb5fa3613 in KHTMLView::focusNextPrevChild () from /usr/lib/libkhtml.so.4 
 #15 0xb7324b4b in QWidget::focusNextPrevChild () from /usr/lib/libqt-mt.so.3 
 #16 0xb7324b4b in QWidget::focusNextPrevChild () from /usr/lib/libqt-mt.so.3 
 #17 0xb7324b4b in QWidget::focusNextPrevChild () from /usr/lib/libqt-mt.so.3 
 #18 0xb731fed9 in QWidget::hide
(the rest is nonsense)

then this is fixed in 3.5.x branch.
Comment 13 Alex Merry 2006-11-27 00:11:41 UTC
Created attachment 18705 [details]
Log from crashed session

Log from crashed session.

Actions: log on to Facebook, go to My Photos, select "edit" on an album, click
on the first picture to place a marker, click "Me" in the resulting list.

Result: crash
Comment 14 Alex Merry 2006-11-27 00:12:16 UTC
Created attachment 18706 [details]
Backtrace to match the previous log
Comment 15 Philip Rodrigues 2006-11-28 09:28:13 UTC
Ah, that backtrace looks a bit nicer. Thanks Alex! (Pasting it)

#9  0xb604497c in khtml::Cache::removeFromLRUList ()
   from /opt/kde/lib/libkhtml.so.4
#10 0xb60449f2 in khtml::Cache::insertInLRUList ()
   from /opt/kde/lib/libkhtml.so.4
#11 0xb6044b3e in khtml::CachedObject::setRequest ()
   from /opt/kde/lib/libkhtml.so.4
#12 0xb604621e in khtml::Request::~Request () from /opt/kde/lib/libkhtml.so.4
#13 0xb60508af in QPtrDict<khtml::Request>::deleteItem ()
   from /opt/kde/lib/libkhtml.so.4
#14 0xb5f735f2 in DOM::HTMLGenericFormElementImpl::defaultEventHandler ()
   from /opt/kde/lib/libkhtml.so.4
#15 0xb5f9d662 in DOM::HTMLInputElementImpl::defaultEventHandler ()
   from /opt/kde/lib/libkhtml.so.4
#16 0xb5f4bb29 in DOM::NodeImpl::dispatchGenericEvent ()
   from /opt/kde/lib/libkhtml.so.4
#17 0xb5f4afb2 in DOM::NodeImpl::dispatchEvent ()
   from /opt/kde/lib/libkhtml.so.4
#18 0xb5f4b822 in DOM::NodeImpl::dispatchUIEvent ()
   from /opt/kde/lib/libkhtml.so.4
#19 0xb5f4c014 in DOM::DocumentImpl::setFocusNode ()
   from /opt/kde/lib/libkhtml.so.4
#20 0xb5f2bd77 in KHTMLView::focusNextPrevNode ()
   from /opt/kde/lib/libkhtml.so.4
#21 0xb5f2c324 in KHTMLView::focusNextPrevChild ()
   from /opt/kde/lib/libkhtml.so.4
#22 0xb6e865ae in QWidget::focusNextPrevChild ()
   from /opt/qt/lib/libqt-mt.so.3
#23 0xb6e865ae in QWidget::focusNextPrevChild ()
   from /opt/qt/lib/libqt-mt.so.3
#24 0xb6e865ae in QWidget::focusNextPrevChild ()
   from /opt/qt/lib/libqt-mt.so.3
Comment 16 Alex Merry 2006-11-28 18:38:48 UTC
BTW, I did a quick search for bugs with similar backtraces (search for focusNextPrevNode), and thought I found one that might be a duplicate (Bug #124342), but applying the patch given there doesn't fix the problem.
Comment 17 Maksim Orlovich 2006-11-28 19:16:28 UTC
Thanks for trying that --- what backtrace do you get with that patch applied?
Comment 18 Tommi Tervo 2006-11-28 19:43:33 UTC
Cannot reproduce, svn r602671. Although I got following output to stderr: 
khtml (caret): ERROR: Box contains no node! Crash imminent
Comment 19 Alex Merry 2006-11-28 23:34:42 UTC
Created attachment 18720 [details]
Backtrace with patch from Bug #124342 applied
Comment 20 Maksim Orlovich 2006-11-29 01:24:54 UTC
Are you 100% sure you applied it? That BT should be impossible with that patch in place....
Comment 21 Alex Merry 2006-11-29 13:12:46 UTC
My bad - it's using the system KDE libraries instead of the debug ones I built.  Will have to figure out what's going on there, since ldd shows konqueror as pulling the ones I built.
Comment 22 Alex Merry 2006-11-29 13:34:00 UTC
I've managed to stop Konqueror using the system libraries, but now I can't replicate the bug in my debug build, with or without the patch.  I'll try to look again at some point to see what differences there are between my build and the system build (I disabled some options, for example, to make it build more quickly).
Comment 23 Alex Merry 2006-12-01 21:43:33 UTC
Created attachment 18746 [details]
An actual backtrace

Right.	I've finally managed to sort this out.	It seems the crash fails to
happen when kdelibs and kdebase are built with --enable-debug.	However,
--disable-debug doesn't strip the symbols (for some reason I thought it did). 
So I've now tested it properly, and attached is the actual backtrace.  I then
tried the same with the patch from Bug #124342 applied, and it didn't crash. 
So this is a duplicate of Bug #124342.
Comment 24 Philip Rodrigues 2007-01-05 21:17:34 UTC
Thanks for the testing, Alex. Maks, I hope it's OK to close now