Bug 160568 - Crash when submitting form repeated to iframe (see #133967)
Summary: Crash when submitting form repeated to iframe (see #133967)
Status: RESOLVED WORKSFORME
Alias: None
Product: konqueror
Classification: Applications
Component: general (show other bugs)
Version: unspecified
Platform: Ubuntu Linux
: NOR crash
Target Milestone: ---
Assignee: Konqueror Developers
URL:
Keywords:
: 163581 167931 (view as bug list)
Depends on:
Blocks:
 
Reported: 2008-04-08 17:05 UTC by Martin Fitzpatrick
Modified: 2008-12-02 01:36 UTC (History)
5 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Martin Fitzpatrick 2008-04-08 17:05:15 UTC
Version:            (using KDE 4.0.3)
Installed from:    Ubuntu Packages
OS:                Linux

When reproducing bug #133967 ( http://bugs.kde.org/show_bug.cgi?id=133967 ) Konqueror will crash when repeatedly submitting forms. Bug #133967 refers to a problem when submitting to a frame will submit to the wrong frame when multiple tabs are open in Konqueror. However, submitting this form 3 times will cause a crash (reproducible, every time).

To reproduce:
1. New browser window, go to ( http://bugs.kde.org/attachment.cgi?id=18272&action=view )
2. To crash Konqueror simply submit the form 3 times (from any combination of tabs).
Comment 1 Martin Fitzpatrick 2008-04-08 17:06:09 UTC
[Thread debugging using libthread_db enabled]
[New Thread 0x7fa8d23117a0 (LWP 13776)]
[KCrash handler]
#5  0x00007fa8d13e8d51 in QObject::objectName () from /usr/lib/libQtCore.so.4
#6  0x00007fa8d1ec3f72 in KonqMainWindow::childView ()
   from /usr/lib/kde4/lib/libkdeinit4_konqueror.so
#7  0x00007fa8d1ece9c3 in KonqMainWindow::slotOpenURLRequest ()
   from /usr/lib/kde4/lib/libkdeinit4_konqueror.so
#8  0x00007fa8d1eced39 in KonqMainWindow::qt_metacall ()
   from /usr/lib/kde4/lib/libkdeinit4_konqueror.so
#9  0x00007fa8d13eea30 in QMetaObject::activate ()
   from /usr/lib/libQtCore.so.4
#10 0x00007fa8d02bc52f in KParts::BrowserExtension::openUrlRequestDelayed (
    this=0x7fffda33f350, _t1=<value optimized out>, 
    _t2=<value optimized out>, _t3=<value optimized out>)
    at /build/buildd/kde4libs-4.0.3/obj-x86_64-linux-gnu/kparts/browserextension.moc:284
#11 0x00007fa8d02bee72 in KParts::BrowserExtension::slotEmitOpenUrlRequestDelayed (this=0x12ee320)
    at /build/buildd/kde4libs-4.0.3/kparts/browserextension.cpp:668
#12 0x00007fa8d02bf250 in KParts::BrowserExtension::qt_metacall (
    this=0x12ee320, _c=QMetaObject::InvokeMetaMethod, 
    _id=<value optimized out>, _a=0x7fffda3402c0)
    at /build/buildd/kde4libs-4.0.3/obj-x86_64-linux-gnu/kparts/browserextension.moc:223
#13 0x00007fa8c3aeb3e5 in KHTMLPartBrowserExtension::qt_metacall (
    this=0x7fffda33f350, _c=QMetaObject::InvokeMetaMethod, _id=21680648, 
    _a=0x14ad1f0)
    at /build/buildd/kde4libs-4.0.3/obj-x86_64-linux-gnu/khtml/khtml_ext.moc:84
#14 0x00007fa8d13eea30 in QMetaObject::activate ()
   from /usr/lib/libQtCore.so.4
#15 0x00007fa8d13f49ef in ?? () from /usr/lib/libQtCore.so.4
#16 0x00007fa8d13edcdc in QObject::event () from /usr/lib/libQtCore.so.4
#17 0x00007fa8cf0323eb in QApplicationPrivate::notify_helper ()
   from /usr/lib/libQtGui.so.4
#18 0x00007fa8cf035d73 in QApplication::notify () from /usr/lib/libQtGui.so.4
#19 0x00007fa8d0b0f661 in KApplication::notify (this=0x7fffda341230, 
    receiver=0x1196950, event=0x7fffda340d30)
    at /build/buildd/kde4libs-4.0.3/kdeui/kernel/kapplication.cpp:314
#20 0x00007fa8d13dca20 in QCoreApplication::notifyInternal ()
   from /usr/lib/libQtCore.so.4
#21 0x00007fa8d1400906 in ?? () from /usr/lib/libQtCore.so.4
#22 0x00007fa8d13fd6bd in ?? () from /usr/lib/libQtCore.so.4
#23 0x00007fa8cde25222 in g_main_context_dispatch ()
   from /usr/lib/libglib-2.0.so.0
#24 0x00007fa8cde284d6 in ?? () from /usr/lib/libglib-2.0.so.0
#25 0x00007fa8cde2896f in g_main_context_iteration ()
   from /usr/lib/libglib-2.0.so.0
#26 0x00007fa8d13fdc31 in QEventDispatcherGlib::processEvents ()
   from /usr/lib/libQtCore.so.4
#27 0x00007fa8cf0a823f in ?? () from /usr/lib/libQtGui.so.4
#28 0x00007fa8d13dbf08 in QEventLoop::processEvents ()
   from /usr/lib/libQtCore.so.4
#29 0x00007fa8d13dc026 in QEventLoop::exec () from /usr/lib/libQtCore.so.4
#30 0x00007fa8d13de271 in QCoreApplication::exec ()
   from /usr/lib/libQtCore.so.4
#31 0x00007fa8d1eec1a1 in kdemain ()
   from /usr/lib/kde4/lib/libkdeinit4_konqueror.so
#32 0x00007fa8d1af91c4 in __libc_start_main () from /lib/libc.so.6
#33 0x0000000000400649 in _start ()
#0  0x00007fa8d1b78b81 in nanosleep () from /lib/libc.so.6
Comment 2 Oliver Putz 2008-04-08 17:51:45 UTC
I can confirm this crash with a current SVN build. My (slightly more verbose) backtrace is:

Application: Konqueror (konqueror), signal SIGSEGV
Using host libthread_db library "/lib/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread 0xb625aa20 (LWP 6089)]
[KCrash handler]
#6  QObject::objectName (this=0x0) at kernel/qobject.cpp:1009
#7  0xb7f62592 in KonqMainWindow::childView (this=0x8120650, 
    callingPart=0x845f6d8, name=@0xbf97319c, hostExtension=@0xbf973198, 
    part=0x0)
    at /var/tmp/portage/kde-base/kdebase-9999.4/work/kdebase-9999.4/apps/konqueror/src/konqmainwindow.cpp:2239
#8  0xb7f6eda7 in KonqMainWindow::slotOpenURLRequest (this=0x8120650, 
    url=@0xbf973374, args=@0xbf97337c, browserArgs=@0xbf973380)
    at /var/tmp/portage/kde-base/kdebase-9999.4/work/kdebase-9999.4/apps/konqueror/src/konqmainwindow.cpp:956
#9  0xb7f6f0cd in KonqMainWindow::qt_metacall (this=0x8120650, 
    _c=QMetaObject::InvokeMetaMethod, _id=56, _a=0xbf973334)
    at /var/tmp/portage/kde-base/kdebase-9999.4/work/kdebase_build/apps/konqueror/src/konqmainwindow.moc:321
#10 0xb72952c8 in QMetaObject::activate (sender=0x869fa88, 
    from_signal_index=<value optimized out>, to_signal_index=9, 
    argv=<value optimized out>) at kernel/qobject.cpp:2995
#11 0xb7295a44 in QMetaObject::activate (sender=0x869fa88, m=0xb7e9992c, 
    local_signal_index=5, argv=0xbf973334) at kernel/qobject.cpp:3065
#12 0xb7e84900 in KParts::BrowserExtension::openUrlRequestDelayed (
    this=0x869fa88, _t1=@0xbf973374, _t2=@0xbf97337c, _t3=@0xbf973380)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs_build/kparts/browserextension.moc:285
#13 0xb7e87c7b in KParts::BrowserExtension::slotEmitOpenUrlRequestDelayed (
    this=0x869fa88)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs-9999.4/kparts/browserextension.cpp:668
#14 0xb7e88816 in KParts::BrowserExtension::qt_metacall (this=0x869fa88, 
    _c=QMetaObject::InvokeMetaMethod, _id=42, _a=0xbf973688)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs_build/kparts/browserextension.moc:224
#15 0xb48d421a in KHTMLPartBrowserExtension::qt_metacall (this=0x869fa88, 
    _c=QMetaObject::InvokeMetaMethod, _id=46, _a=0xbf973688)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs_build/khtml/khtml_ext.moc:85
#16 0xb72952c8 in QMetaObject::activate (sender=0x85a6000, 
    from_signal_index=<value optimized out>, to_signal_index=4, 
    argv=<value optimized out>) at kernel/qobject.cpp:2995
#17 0xb7295a44 in QMetaObject::activate (sender=0x85a6000, m=0xb736c9a4, 
    local_signal_index=0, argv=0x0) at kernel/qobject.cpp:3065
#18 0xb729e1b3 in QSingleShotTimer::timeout (this=0x85a6000)
    at .moc/debug-shared/qtimer.moc:74
#19 0xb729e2dc in QSingleShotTimer::timerEvent (this=0x85a6000)
    at kernel/qtimer.cpp:300
#20 0xb7291107 in QObject::event (this=0x85a6000, e=0xbf973bb8)
    at kernel/qobject.cpp:1096
#21 0xb684071f in QApplicationPrivate::notify_helper (this=0x80587c8, 
    receiver=0x85a6000, e=0xbf973bb8) at kernel/qapplication.cpp:3735
#22 0xb68422fa in QApplication::notify (this=0xbf974058, receiver=0x85a6000, 
    e=0xbf973bb8) at kernel/qapplication.cpp:3329
#23 0xb78e97c3 in KApplication::notify (this=0xbf974058, receiver=0x85a6000, 
    event=0xbf973bb8)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs-9999.4/kdeui/kernel/kapplication.cpp:311
#24 0xb727ecf7 in QCoreApplication::notifyInternal (this=0xbf974058, 
    receiver=0x85a6000, event=0xbf973bb8) at kernel/qcoreapplication.cpp:586
#25 0xb72af67b in QTimerInfoList::activateTimers (this=0x8058f5c)
    at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:215
#26 0xb72af751 in QEventDispatcherUNIX::activateTimers (this=0x8057f58)
    at kernel/qeventdispatcher_unix.cpp:837
#27 0xb72af88b in QEventDispatcherUNIX::processEvents (this=0x8057f58, 
    flags=@0xbf973d38) at kernel/qeventdispatcher_unix.cpp:899
#28 0xb68d8cfe in QEventDispatcherX11::processEvents (this=0x8057f58, 
    flags=@0xbf973d64) at kernel/qeventdispatcher_x11.cpp:154
#29 0xb727de61 in QEventLoop::processEvents (this=0xbf973dd0, 
    flags=@0xbf973d98) at kernel/qeventloop.cpp:146
#30 0xb727df8f in QEventLoop::exec (this=0xbf973dd0, flags=@0xbf973dd8)
    at kernel/qeventloop.cpp:197
#31 0xb7280476 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:838
#32 0xb683fe37 in QApplication::exec () at kernel/qapplication.cpp:3267
#33 0xb7f99c17 in kdemain (argc=1, argv=0xbf9743d4)
    at /var/tmp/portage/kde-base/kdebase-9999.4/work/kdebase-9999.4/apps/konqueror/src/konqmain.cpp:218
#34 0x080487e2 in main (argc=0, argv=0x700003e)
    at /var/tmp/portage/kde-base/kdebase-9999.4/work/kdebase_build/apps/konqueror/src/konqueror_dummy.cpp:3
#35 0xb6497fdc in __libc_start_main (main=0x80487c0 <main>, argc=1, 
    ubp_av=0xbf9743d4, init=0x8048810 <__libc_csu_init>, 
    fini=0x8048800 <__libc_csu_fini>, rtld_fini=0xb7fbe100 <_dl_fini>, 
    stack_end=0xbf9743cc) at libc-start.c:229
#36 0x08048731 in _start ()
#0  0xffffe410 in __kernel_vsyscall ()
Comment 3 Martin Fitzpatrick 2008-04-08 19:17:15 UTC
Oliver

Just out of interest how did you produce the longer backtrace: Is this
just dependent on which debug packages you have installed? Just want
to ensure that bug reports I submit are as useful as possible - I
still get a lot of "no debug symbols found" in mine despite adding the
-dbg packages (all of them I can see)

Thanks

On Tue, Apr 8, 2008 at 4:51 PM, Oliver Putz <Regnaron@web.de> wrote:
[bugs.kde.org quoted mail]
Comment 4 Martin Fitzpatrick 2008-04-09 15:55:40 UTC
Changing bug title: this bug can be reproduced without using tabs.
Comment 5 David Palacio 2008-06-01 03:34:39 UTC
Does not crash on Debian/KDE 4.9.80 beta1
Comment 6 David Palacio 2008-06-01 03:35:13 UTC
Correction: Does not crash on Debian/KDE 4.0.80 beta1
Comment 7 Rui G. 2008-06-03 17:22:02 UTC
Well, I can reproduce the crash in trunk r816161. The backtrace is identical to #1 .

It doesn't take 3 clicks. All it matters is to click submit a 2nd time while konqueror is loading the page, ie, when the Stop Button becomes activated. Sometimes it takes 4/5 clicks.
Comment 8 Christophe Marin 2008-06-09 11:46:00 UTC
*** Bug 163581 has been marked as a duplicate of this bug. ***
Comment 9 Frank Reininghaus 2008-08-01 19:09:42 UTC
*** Bug 167931 has been marked as a duplicate of this bug. ***
Comment 10 Dario Andres 2008-11-29 23:06:39 UTC
Here (KDE 4.1.3 on ArchLinux x86_64) I can't reproduce this crash. The first time I tested this using the testcase nothing happened, but a few clicks later, new tabs appeared (pointing to (non-existant) http://bugs.kde.org/testcase2.html), but Konqueror didn't crashed (No matter how many times I pressed the submit button or the clicking speed). Can anyone confirm this behaviour ?
Comment 11 Martin Fitzpatrick 2008-12-02 01:36:40 UTC
I agree. I can no longer reproduce this bug on KDE4.1.x (Kubuntu) - although for some reason Konqueror is now submitting to a different tab (rather than to the target iframe).