Bug 80903 - <table style="display: block;"> containing an <img> crash
Summary: <table style="display: block;"> containing an <img> crash
Status: RESOLVED DUPLICATE of bug 78205
Alias: None
Product: konqueror
Classification: Applications
Component: khtml (show other bugs)
Version: unspecified
Platform: Compiled Sources Linux
: NOR crash
Target Milestone: ---
Assignee: Konqueror Developers
URL:
Keywords:
: 91516 (view as bug list)
Depends on:
Blocks:
 
Reported: 2004-05-04 17:38 UTC by Olivier Goffart
Modified: 2004-10-18 09:45 UTC (History)
1 user (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Olivier Goffart 2004-05-04 17:38:52 UTC
Version:            (using KDE Devel)
Installed from:    Compiled sources
Compiler:          gcc 3.3.2 
OS:          Linux

I get Konqueror crash while browsing on the net  
(precisely https://e-care.skynet.be/Login/)

I isolated the crash in this simple test case:

<html>
<body >
  <table style="display: block;">
     <tr>
     <td><img src="image.png"></td>
     </tr>
  </table>
</body>
</html>



Strangly, I have to open it twice to make it crash.
The backtrace i get is not interesting.
Comment 1 Tommi Tervo 2004-05-20 21:47:28 UTC
[New Thread 1024 (LWP 29514)]
0x420b48d9 in wait4 () from /lib/i686/libc.so.6
#0  0x420b48d9 in wait4 () from /lib/i686/libc.so.6
#1  0x4213030c in __DTOR_END__ () from /lib/i686/libc.so.6
#2  0x411bdc33 in waitpid () from /lib/i686/libpthread.so.0
#3  0x40733908 in KCrash::defaultCrashHandler (sig=6) at kcrash.cpp:246
#4  0x411bbf05 in pthread_sighandler () from /lib/i686/libpthread.so.0
#5  <signal handler called>
#6  0x42029331 in kill () from /lib/i686/libc.so.6
#7  0x411bbbdb in raise () from /lib/i686/libpthread.so.0
#8  0x4202a8c2 in abort () from /lib/i686/libc.so.6
#9  0x42022ecb in __assert_fail () from /lib/i686/libc.so.6
#10 0x416f776e in DOM::NodeImpl::attach (this=0x841feb8)
    at dom_nodeimpl.cpp:887
#11 0x416f8de3 in DOM::NodeBaseImpl::attach (this=0x841feb8)
    at dom_nodeimpl.cpp:1430
#12 0x41728ad7 in DOM::HTMLImageElementImpl::attach (this=0x841feb8)
    at html_imageimpl.cpp:184
#13 0x41712cb9 in khtml::KHTMLParser::insertNode (this=0x855ca80, n=0x841feb8, 
    flat=true) at htmlparser.cpp:329
#14 0x41712b1a in khtml::KHTMLParser::parseToken (this=0x855ca80, t=0x8558d1c)
    at htmlparser.cpp:279
#15 0x4171b7e1 in khtml::HTMLTokenizer::processToken (this=0x8558ce8)
    at htmltokenizer.cpp:1577
#16 0x41719e9a in khtml::HTMLTokenizer::parseTag (this=0x8558ce8, 
    src=@0x8558dfc) at htmltokenizer.cpp:1090
#17 0x4171aa03 in khtml::HTMLTokenizer::write (this=0x8558ce8, 
    str=@0xbfffe0c0, appendData=true) at htmltokenizer.cpp:1345
#18 0x416ae5e8 in KHTMLPart::write (this=0x84d6748, 
    str=0x85386d0 "<html> \n <body > \n   <table style=\"display: block;\"> \n      <tr> \n      <td><img src=\"image.png\"></td> \n      </tr> \n   </table> \n </body> \n </html> \n", len=150) at khtml_part.cpp:1728
#19 0x416ad04c in KHTMLPart::slotData (this=0x84d6748, kio_job=0x84e4ff0, 
    data=@0xbfffe7b0) at khtml_part.cpp:1416
#20 0x416c657e in KHTMLPart::qt_invoke (this=0x84d6748, _id=16, _o=0xbfffe4e0)
    at khtml_part.moc:470
#21 0x40b8742b in QObject::activate_signal (this=0x84e4ff0, clist=0x84fe108, 
    o=0xbfffe4e0) at kernel/qobject.cpp:2356
#22 0x401b3fca in KIO::StatJob::permanentRedirection (this=0x84e4ff0, 
    t0=0x84e4ff0, t1=@0xbfffe7b0, t2=@0x401a3370) at jobclasses.moc:536
#23 0x401a33c9 in KIO::stat (url=@0x84e4ff0, sideIsSource=176, details=16410, 
    showProgressInfo=85) at job.cpp:752
#24 0x401b474c in KIO::TransferJob::redirection (this=0x84e4ff0, t0=0x12, 
    t1=@0xbfffe600) at jobclasses.moc:750
#25 0x40b8742b in QObject::activate_signal (this=0x8406ea8, clist=0x8528530, 
    o=0xbfffe600) at kernel/qobject.cpp:2356
#26 0x4019883e in KIO::SlaveInterface::messageBox (this=0x8406ea8, 
    type=-1073748048, text=@0x1, _caption=@0x40196dbf, buttonYes=@0x40814ac8, 
    buttonNo=@0x18) at slaveinterface.cpp:515
#27 0x40196fe6 in KIO::SlaveInterface::calcSpeed (this=0x8406ea8)
    at slaveinterface.cpp:220
#28 0x40196ada in operator>> (s=@0x8406ea8, e=@0x4100d7e8)
    at slaveinterface.cpp:81
#29 0x40194a1c in KIO::Slave::hold (this=0x8406ea8, url=@0x4100d7e8)
    at slave.cpp:238
#30 0x40196513 in KIO::Slave::holdSlave (protocol=@0x8406ea8, url=@0x4)
    at slave.cpp:484
#31 0x40b8742b in QObject::activate_signal (this=0x829fd30, clist=0x833f160, 
    o=0xbfffe8e0) at kernel/qobject.cpp:2356
#32 0x40b877e2 in QObject::activate_signal (this=0x829fd30, signal=2, param=23)
    at kernel/qobject.cpp:2449
#33 0x40ecc074 in QSocketNotifier::activated (this=0x829fd30, t0=23)
    at .moc/debug-shared-mt/moc_qsocketnotifier.cpp:85
#34 0x40ba56a6 in QSocketNotifier::event (this=0x829fd30, e=0xbfffeb30)
    at kernel/qsocketnotifier.cpp:280
#35 0x40b28442 in QApplication::internalNotify (this=0xbffff090, 
    receiver=0x829fd30, e=0xbfffeb30) at kernel/qapplication.cpp:2620
#36 0x40b27572 in QApplication::notify (this=0xbffff090, receiver=0x829fd30, 
    e=0xbfffeb30) at kernel/qapplication.cpp:2343
#37 0x406c8faa in KApplication::notify (this=0xbffff090, receiver=0x829fd30, 
    event=0xbfffeb30) at kapplication.cpp:507
#38 0x4005386a in QApplication::sendEvent (receiver=0x829fd30, 
    event=0xbfffeb30) at /opt/qt331post/include/qapplication.h:491
#39 0x40b17a27 in QEventLoop::activateSocketNotifiers (this=0x80a62c0)
    at kernel/qeventloop_unix.cpp:580
#40 0x40ad196b in QEventLoop::processEvents (this=0x80a62c0, flags=4)
    at kernel/qeventloop_x11.cpp:383
#41 0x40b3af91 in QEventLoop::enterLoop (this=0x80a62c0)
    at kernel/qeventloop.cpp:198
#42 0x40b3aeb4 in QEventLoop::exec (this=0x80a62c0)
    at kernel/qeventloop.cpp:145
#43 0x40b285db in QApplication::exec (this=0xbffff090)
    at kernel/qapplication.cpp:2743
#44 0x41322b12 in kdemain (argc=2, argv=0x8061a88) at konq_main.cc:184
#45 0x408558a1 in kdeinitmain (argc=2, argv=0x8061a88) at konqueror_dummy.cc:2
#46 0x0804e1dc in launch (argc=2, _name=0x8060344 "konqueror", 
    args=0x8060357 "\001", cwd=0x0, envc=1, envs=0x8060368 "", 
    reset_env=false, tty=0x0, avoid_loops=false, 
    startup_id_str=0x806036c "v10-dhcp-76-190.ntc.nokia.com;1085078432;391442;5698") at kinit.cpp:604
#47 0x0804f5e1 in handle_launcher_request (sock=8) at kinit.cpp:1170
#48 0x0804fd2d in handle_requests (waitForPid=0) at kinit.cpp:1361
#49 0x08051318 in main (argc=3, argv=0xbffff744, envp=0xbffff754)
    at kinit.cpp:1798
#50 0x42017589 in __libc_start_main () from /lib/i686/libc.so.6
Comment 2 Tommi Tervo 2004-05-20 21:51:13 UTC

*** This bug has been marked as a duplicate of 78205 ***
Comment 3 Tommi Tervo 2004-10-18 09:45:39 UTC
*** Bug 91516 has been marked as a duplicate of this bug. ***