Bug 167061 - Crash on clicking a link (assertion failure in render_inline.cpp)
Summary: Crash on clicking a link (assertion failure in render_inline.cpp)
Status: RESOLVED DUPLICATE of bug 158532
Alias: None
Product: konqueror
Classification: Applications
Component: khtml (show other bugs)
Version: unspecified
Platform: Compiled Sources Linux
: NOR crash
Target Milestone: ---
Assignee: Konqueror Developers
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-07-20 08:59 UTC by Daniel Richard G.
Modified: 2008-07-20 15:27 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Daniel Richard G. 2008-07-20 08:59:08 UTC
Version:           4.1.60 (using Devel)
Installed from:    Compiled sources
Compiler:          gcc version 4.1.2 20061115 (prerelease) (Debian 4.1.1-21) 
OS:                Linux

NOTE: The page that triggers this assertion failure contains erotic artwork and is therefore NSFW. (It is an artist's online gallery, however, NOT a porn site.)

1. Load the following page:

http://www.fraisala.com/Gallery/Yiffy (adult content)/Yiffy (adult content)/index2.html

(Yes, the URL includes spaces and parentheses)

2. Click on "Bear and Wabbit". (Left-click or right-click suffices; I believe the problem occurs in drawing the dotted-line focus border around the link text.)

3. Crashandburn with the following:

ASSERT: "bsOrientation(bs) != bsOrientation(nextBS)" in file /scratch/kdesvn/kdelibs/khtml/rendering/render_inline.cpp, line 756

(My copy of render_inline.cpp is at r809453.)
Comment 1 Rui G. 2008-07-20 14:56:12 UTC
Doesn't crash in Opensuse 11.0, Konqueror 4.1.00 .
Comment 2 Christophe Marin 2008-07-20 15:23:04 UTC
Confirmed in trunk (kdelibs rev. 835339) Clicking on the image doesn't make konqueror crash, only the text link below.

BT : 

Application: Konqueror (konqueror), signal SIGABRT

Thread 1 (Thread 0xb611c700 (LWP 4519)):
[KCrash Handler]
#6  0xffffe424 in __kernel_vsyscall ()
#7  0xb64df5e0 in raise () from /lib/i686/cmov/libc.so.6
#8  0xb64e0fb8 in abort () from /lib/i686/cmov/libc.so.6
#9  0xb7369813 in qt_message_output (msgType=QtFatalMsg, 
    buf=0xbfd883f0 "ASSERT: \"bsOrientation(bs) != bsOrientation(nextBS)\" in file /media/kde/src/KDE/kdelibs/khtml/rendering/render_inline.cpp, line 756") at global/qglobal.cpp:2058
#10 0xb7369877 in qFatal (msg=0xb74b5538 "ASSERT: \"%s\" in file %s, line %d") at global/qglobal.cpp:2260
#11 0xb7369c99 in qt_assert (assertion=0xb41e9420 "bsOrientation(bs) != bsOrientation(nextBS)", file=0xb41e93e0 "/media/kde/src/KDE/kdelibs/khtml/rendering/render_inline.cpp", line=756)
    at global/qglobal.cpp:1828
#12 0xb402856a in khtml::RenderInline::paintOutlinePath (this=0xa094f68, p=0xbfd8b12c, tx=344, ty=486, begin=<value optimized out>, end=0xa1f50b8, bs=khtml::RenderObject::BSTop, direction=-1, 
    endingBS=khtml::RenderObject::BSTop) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_inline.cpp:756
#13 0xb402931a in khtml::RenderInline::paintOutlines (this=0xa094f68, p=0xbfd8b12c, _tx=344, _ty=486) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_inline.cpp:595
#14 0xb404bb0f in khtml::RenderFlow::paintLines (this=0xa094ed0, i=@0xbfd8aea4, _tx=344, _ty=486) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_flow.cpp:395
#15 0xb40212b8 in khtml::RenderBlock::paintObject (this=0xa094ed0, pI=@0xbfd8aea4, _tx=344, _ty=486, shouldPaintOutline=false) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_block.cpp:1725
#16 0xb40635ee in khtml::RenderTableCell::paint (this=0xa094ed0, pI=@0xbfd8aea4, _tx=344, _ty=486) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_table.cpp:2872
#17 0xb4064037 in khtml::RenderTableSection::paint (this=0xa09420c, pI=@0xbfd8aea4, tx=344, ty=280) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_table.cpp:1806
#18 0xb406002d in khtml::RenderTable::paint (this=0xa094160, pI=@0xbfd8aea4, _tx=344, _ty=280) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_table.cpp:496
#19 0xb4021312 in khtml::RenderBlock::paintObject (this=0xa0940dc, pI=@0xbfd8aea4, _tx=344, _ty=280, shouldPaintOutline=true) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_block.cpp:1729
#20 0xb4021611 in khtml::RenderBlock::paint (this=0xa0940dc, pI=@0xbfd8aea4, _tx=344, _ty=280) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_block.cpp:1695
#21 0xb4021312 in khtml::RenderBlock::paintObject (this=0x9e4f724, pI=@0xbfd8aea4, _tx=344, _ty=155, shouldPaintOutline=true) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_block.cpp:1729
#22 0xb4021611 in khtml::RenderBlock::paint (this=0x9e4f724, pI=@0xbfd8aea4, _tx=334, _ty=155) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_block.cpp:1695
#23 0xb4021312 in khtml::RenderBlock::paintObject (this=0x9e4f68c, pI=@0xbfd8aea4, _tx=334, _ty=145, shouldPaintOutline=false) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_block.cpp:1729
#24 0xb40635ee in khtml::RenderTableCell::paint (this=0x9e4f68c, pI=@0xbfd8aea4, _tx=334, _ty=145) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_table.cpp:2872
#25 0xb4064037 in khtml::RenderTableSection::paint (this=0x9e4f5d4, pI=@0xbfd8aea4, tx=334, ty=145) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_table.cpp:1806
#26 0xb406002d in khtml::RenderTable::paint (this=0x9e4f4a4, pI=@0xbfd8aea4, _tx=334, _ty=145) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_table.cpp:496
#27 0xb4021312 in khtml::RenderBlock::paintObject (this=0x9e4f36c, pI=@0xbfd8aea4, _tx=334, _ty=145, shouldPaintOutline=false) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_block.cpp:1729
#28 0xb40635ee in khtml::RenderTableCell::paint (this=0x9e4f36c, pI=@0xbfd8aea4, _tx=334, _ty=145) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_table.cpp:2872
#29 0xb4064037 in khtml::RenderTableSection::paint (this=0x9e4e260, pI=@0xbfd8aea4, tx=160, ty=135) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_table.cpp:1806
#30 0xb406002d in khtml::RenderTable::paint (this=0x9e4e130, pI=@0xbfd8aea4, _tx=160, _ty=135) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_table.cpp:496
#31 0xb4021312 in khtml::RenderBlock::paintObject (this=0x9e4df50, pI=@0xbfd8aea4, _tx=10, _ty=10, shouldPaintOutline=true) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_block.cpp:1729
#32 0xb4021611 in khtml::RenderBlock::paint (this=0x9e4df50, pI=@0xbfd8aea4, _tx=10, _ty=10) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_block.cpp:1695
#33 0xb4021312 in khtml::RenderBlock::paintObject (this=0x9e4decc, pI=@0xbfd8aea4, _tx=10, _ty=10, shouldPaintOutline=true) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_block.cpp:1729
#34 0xb4021611 in khtml::RenderBlock::paint (this=0x9e4decc, pI=@0xbfd8aea4, _tx=0, _ty=10) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_block.cpp:1695
#35 0xb4021312 in khtml::RenderBlock::paintObject (this=0x9e4dde4, pI=@0xbfd8aea4, _tx=0, _ty=0, shouldPaintOutline=true) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_block.cpp:1729
#36 0xb4021611 in khtml::RenderBlock::paint (this=0x9e4dde4, pI=@0xbfd8aea4, _tx=0, _ty=0) at /media/kde/src/KDE/kdelibs/khtml/rendering/render_block.cpp:1695
#37 0xb405795a in khtml::RenderLayer::paintLayer (this=0x9e4de68, rootLayer=0x9e4dd80, p=0xbfd8b12c, paintDirtyRect=@0xbfd8b0e8, selectionOnly=false)
    at /media/kde/src/KDE/kdelibs/khtml/rendering/render_layer.cpp:1071
#38 0xb4057ae8 in khtml::RenderLayer::paintLayer (this=0x9e4dd80, rootLayer=0x9e4dd80, p=0xbfd8b12c, paintDirtyRect=@0xbfd8b0e8, selectionOnly=false)
    at /media/kde/src/KDE/kdelibs/khtml/rendering/render_layer.cpp:1092
#39 0xb4057c27 in khtml::RenderLayer::paint (this=0x9e4dd80, p=0xbfd8b12c, damageRect=@0xbfd8b0e8, selectionOnly=<value optimized out>)
    at /media/kde/src/KDE/kdelibs/khtml/rendering/render_layer.cpp:959
#40 0xb3f0d470 in KHTMLView::paintEvent (this=0x9eadf88, e=0xbfd8b7e0) at /media/kde/src/KDE/kdelibs/khtml/khtmlview.cpp:892
#41 0xb6911afc in QWidget::event (this=0x9eadf88, event=0xbfd8b7e0) at kernel/qwidget.cpp:7065
#42 0xb6c74a12 in QFrame::event (this=0x9eadf88, e=0xbfd8b7e0) at widgets/qframe.cpp:657
#43 0xb3f02faf in KHTMLView::widgetEvent (this=0x9eadf88, e=0xbfd8b7e0) at /media/kde/src/KDE/kdelibs/khtml/khtmlview.cpp:2303
#44 0xb3f061e6 in KHTMLView::eventFilter (this=0x9eadf88, o=0xa1c5598, e=0xbfd8b7e0) at /media/kde/src/KDE/kdelibs/khtml/khtmlview.cpp:2167
#45 0xb746065c in QCoreApplicationPrivate::sendThroughObjectEventFilters (this=0x99915f8, receiver=0xa1c5598, event=0xbfd8b7e0) at kernel/qcoreapplication.cpp:694
#46 0xb68b5266 in QApplicationPrivate::notify_helper (this=0x99915f8, receiver=0xa1c5598, e=0xbfd8b7e0) at kernel/qapplication.cpp:3768
#47 0xb68b6ebe in QApplication::notify (this=0xbfd8dc7c, receiver=0xa1c5598, e=0xbfd8b7e0) at kernel/qapplication.cpp:3739
#48 0xb7a89cc1 in KApplication::notify (this=0xbfd8dc7c, receiver=0xa1c5598, event=0xbfd8b7e0) at /media/kde/src/KDE/kdelibs/kdeui/kernel/kapplication.cpp:311
#49 0xb746228b in QCoreApplication::notifyInternal (this=0xbfd8dc7c, receiver=0xa1c5598, event=0xbfd8b7e0) at kernel/qcoreapplication.cpp:583
#50 0xb68c10c3 in QCoreApplication::sendSpontaneousEvent (receiver=0xa1c5598, event=0xbfd8b7e0) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:218
#51 0xb691e42f in qt_sendSpontaneousEvent (receiver=0xa1c5598, event=0xbfd8b7e0) at kernel/qapplication_x11.cpp:4680
#52 0xb69185e1 in QWidgetPrivate::drawWidget (this=0xa08e978, pdev=0x99b127c, rgn=@0xbfd8b94c, offset=@0xbfd8b984, flags=4, sharedPainter=0xa446e90) at kernel/qwidget.cpp:4491
#53 0xb6918ca9 in QWidgetPrivate::paintSiblingsRecursive (this=0xa1f1198, pdev=0x99b127c, siblings=@0xbfd8ba14, index=0, rgn=@0xbfd8bb5c, offset=@0xbfd8bb94, flags=4, sharedPainter=0xa446e90)
    at kernel/qwidget.cpp:4589
#54 0xb691892f in QWidgetPrivate::drawWidget (this=0xa1f1198, pdev=0x99b127c, rgn=@0xbfd8bb5c, offset=@0xbfd8bb94, flags=4, sharedPainter=0xa446e90) at kernel/qwidget.cpp:4532
#55 0xb6918ca9 in QWidgetPrivate::paintSiblingsRecursive (this=0xa1f5118, pdev=0x99b127c, siblings=@0xbfd8bc24, index=1, rgn=@0xbfd8bd6c, offset=@0xbfd8bda4, flags=4, sharedPainter=0xa446e90)
    at kernel/qwidget.cpp:4589
#56 0xb691892f in QWidgetPrivate::drawWidget (this=0xa1f5118, pdev=0x99b127c, rgn=@0xbfd8bd6c, offset=@0xbfd8bda4, flags=4, sharedPainter=0xa446e90) at kernel/qwidget.cpp:4532
#57 0xb6918ca9 in QWidgetPrivate::paintSiblingsRecursive (this=0x9dfead8, pdev=0x99b127c, siblings=@0xbfd8be34, index=1, rgn=@0xbfd8bf7c, offset=@0xbfd8bfb4, flags=4, sharedPainter=0xa446e90)
    at kernel/qwidget.cpp:4589
#58 0xb691892f in QWidgetPrivate::drawWidget (this=0x9dfead8, pdev=0x99b127c, rgn=@0xbfd8bf7c, offset=@0xbfd8bfb4, flags=4, sharedPainter=0xa446e90) at kernel/qwidget.cpp:4532
#59 0xb6918ca9 in QWidgetPrivate::paintSiblingsRecursive (this=0x9df7000, pdev=0x99b127c, siblings=@0xbfd8c044, index=1, rgn=@0xbfd8c18c, offset=@0xbfd8c1c4, flags=4, sharedPainter=0xa446e90)
    at kernel/qwidget.cpp:4589
#60 0xb691892f in QWidgetPrivate::drawWidget (this=0x9df7000, pdev=0x99b127c, rgn=@0xbfd8c18c, offset=@0xbfd8c1c4, flags=4, sharedPainter=0xa446e90) at kernel/qwidget.cpp:4532
#61 0xb6918ca9 in QWidgetPrivate::paintSiblingsRecursive (this=0x9dfb110, pdev=0x99b127c, siblings=@0xbfd8c254, index=0, rgn=@0xbfd8c39c, offset=@0xbfd8c3d4, flags=4, sharedPainter=0xa446e90)
    at kernel/qwidget.cpp:4589
#62 0xb691892f in QWidgetPrivate::drawWidget (this=0x9dfb110, pdev=0x99b127c, rgn=@0xbfd8c39c, offset=@0xbfd8c3d4, flags=4, sharedPainter=0xa446e90) at kernel/qwidget.cpp:4532
#63 0xb6918ca9 in QWidgetPrivate::paintSiblingsRecursive (this=0x99ec238, pdev=0x99b127c, siblings=@0xbfd8c464, index=48, rgn=@0xbfd8c5b0, offset=@0x9998ec4, flags=4, sharedPainter=0xa446e90)
    at kernel/qwidget.cpp:4589
#64 0xb691892f in QWidgetPrivate::drawWidget (this=0x99ec238, pdev=0x99b127c, rgn=@0xbfd8c5b0, offset=@0x9998ec4, flags=5, sharedPainter=0xa446e90) at kernel/qwidget.cpp:4532
#65 0xb6a811c4 in QWidgetBackingStore::cleanRegion (this=0x9998eb8, rgn=@0xbfd8c678, widget=0x99ec038, recursiveCopyToScreen=true) at painting/qbackingstore.cpp:1035
#66 0xb6a81a6a in qt_syncBackingStore (widget=0x99ec038) at painting/qbackingstore.cpp:319
#67 0xb691200d in QWidget::event (this=0x99ec038, event=0xbfd8cd10) at kernel/qwidget.cpp:7209
#68 0xb6c9349a in QMainWindow::event (this=0x99ec038, event=0xbfd8cd10) at widgets/qmainwindow.cpp:1252
#69 0xb7b44d32 in KMainWindow::event (this=0x99ec038, ev=0xbfd8cd10) at /media/kde/src/KDE/kdelibs/kdeui/widgets/kmainwindow.cpp:1008
#70 0xb7b8054c in KXmlGuiWindow::event (this=0x99ec038, ev=0xbfd8cd10) at /media/kde/src/KDE/kdelibs/kdeui/xmlgui/kxmlguiwindow.cpp:122
#71 0xb7f0f128 in KonqMainWindow::event (this=0x99ec038, e=0xbfd8cd10) at /media/kde/src/KDE/kdebase/apps/konqueror/src/konqmainwindow.cpp:5626
#72 0xb68b5289 in QApplicationPrivate::notify_helper (this=0x99915f8, receiver=0x99ec038, e=0xbfd8cd10) at kernel/qapplication.cpp:3772
#73 0xb68b6ebe in QApplication::notify (this=0xbfd8dc7c, receiver=0x99ec038, e=0xbfd8cd10) at kernel/qapplication.cpp:3739
#74 0xb7a89cc1 in KApplication::notify (this=0xbfd8dc7c, receiver=0x99ec038, event=0xbfd8cd10) at /media/kde/src/KDE/kdelibs/kdeui/kernel/kapplication.cpp:311
#75 0xb746228b in QCoreApplication::notifyInternal (this=0xbfd8dc7c, receiver=0x99ec038, event=0xbfd8cd10) at kernel/qcoreapplication.cpp:583
#76 0xb7465dd3 in QCoreApplication::sendEvent (receiver=0x99ec038, event=0xbfd8cd10) at kernel/qcoreapplication.h:215
#77 0xb694849b in QWidgetPrivate::dirtyWidget_sys (this=0x99ec238, rgn=@0xbfd8cd74, updateImmediately=true) at kernel/qwidget_x11.cpp:1508
#78 0xb6a7ed0e in QWidgetBackingStore::dirtyRegion (this=0x9998eb8, rgn=@0xbfd8cddc, widget=0xa1c5598, updateImmediately=true) at painting/qbackingstore.cpp:632
#79 0xb6a8173e in QWidget::repaint (this=0xa1c5598, rgn=@0xbfd8ce7c) at painting/qbackingstore.cpp:1139
#80 0xb690591d in QWidget::repaint (this=0xa1c5598, r=@0xbfd8cee0) at kernel/qwidget.cpp:8727
#81 0xb6905a34 in QWidget::repaint (this=0xa1c5598, x=393, y=495, w=119, h=79) at kernel/qwidget.cpp:8711
#82 0xb3f05ffb in KHTMLView::repaintContents (this=0x9eadf88, x=393, y=495, w=119, h=79) at /media/kde/src/KDE/kdelibs/khtml/khtmlview.cpp:784
#83 0xb3f06726 in KHTMLView::repaintContents (this=0x9eadf88, r=@0xbfd8cfd4) at /media/kde/src/KDE/kdelibs/khtml/khtmlview.cpp:789
#84 0xb3f0c457 in KHTMLView::timerEvent (this=0x9eadf88, e=0xbfd8d804) at /media/kde/src/KDE/kdelibs/khtml/khtmlview.cpp:4078
#85 0xb7474b84 in QObject::event (this=0x9eadf88, e=0xbfd8d804) at kernel/qobject.cpp:1105
#86 0xb69123e7 in QWidget::event (this=0x9eadf88, event=0xbfd8d804) at kernel/qwidget.cpp:7310
#87 0xb6c74a12 in QFrame::event (this=0x9eadf88, e=0xbfd8d804) at widgets/qframe.cpp:657
#88 0xb6d0b5e6 in QAbstractScrollArea::event (this=0x9eadf88, e=0xbfd8d804) at widgets/qabstractscrollarea.cpp:897
#89 0xb6d11ca7 in QScrollArea::event (this=0x9eadf88, e=0xbfd8d804) at widgets/qscrollarea.cpp:297
#90 0xb3f0a1cf in KHTMLView::event (this=0x9eadf88, e=0xbfd8d804) at /media/kde/src/KDE/kdelibs/khtml/khtmlview.cpp:524
#91 0xb68b5289 in QApplicationPrivate::notify_helper (this=0x99915f8, receiver=0x9eadf88, e=0xbfd8d804) at kernel/qapplication.cpp:3772
#92 0xb68b6ebe in QApplication::notify (this=0xbfd8dc7c, receiver=0x9eadf88, e=0xbfd8d804) at kernel/qapplication.cpp:3739
#93 0xb7a89cc1 in KApplication::notify (this=0xbfd8dc7c, receiver=0x9eadf88, event=0xbfd8d804) at /media/kde/src/KDE/kdelibs/kdeui/kernel/kapplication.cpp:311
#94 0xb746228b in QCoreApplication::notifyInternal (this=0xbfd8dc7c, receiver=0x9eadf88, event=0xbfd8d804) at kernel/qcoreapplication.cpp:583
#95 0xb7465dd3 in QCoreApplication::sendEvent (receiver=0x9eadf88, event=0xbfd8d804) at kernel/qcoreapplication.h:215
#96 0xb7493293 in QTimerInfoList::activateTimers (this=0x9994884) at kernel/qeventdispatcher_unix.cpp:563
#97 0xb7490ba4 in timerSourceDispatch (source=0x9994850) at kernel/qeventdispatcher_glib.cpp:166
#98 0xb63582f1 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#99 0xb635b983 in ?? () from /usr/lib/libglib-2.0.so.0
#100 0x09993c98 in ?? ()
#101 0x00000000 in ?? ()

Comment 3 Christophe Marin 2008-07-20 15:27:30 UTC

*** This bug has been marked as a duplicate of 158532 ***