Bug 87495 - konqueror crashes when opening this page
Summary: konqueror crashes when opening this page
Status: RESOLVED FIXED
Alias: None
Product: konqueror
Classification: Applications
Component: khtml (show other bugs)
Version: 3.3
Platform: Compiled Sources Linux
: NOR crash
Target Milestone: ---
Assignee: Konqueror Developers
URL:
Keywords:
: 84913 87483 87525 88129 89067 89322 89898 90024 90614 90818 90931 91666 92380 93315 98774 99696 106944 (view as bug list)
Depends on:
Blocks:
 
Reported: 2004-08-19 12:20 UTC by Daniel
Modified: 2005-06-08 13:22 UTC (History)
17 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Daniel 2004-08-19 12:20:27 UTC
Version:           3.3 (using KDE Devel)
Installed from:    Compiled sources
Compiler:          gcc-3.3.4 
OS:                Linux

konqueror http://www.fehervar.vein.hu/main.php?tip=3

And it crashes. What other info should I send?
Comment 1 Tommi Tervo 2004-08-19 17:01:51 UTC
Using host libthread_db library "/lib/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread 16384 (LWP 4854)]
[KCrash handler]
#5  0x412f20b2 in khtml::TreeShared<DOM::StyleBaseImpl>::ref (this=0x11)
    at shared.h:34
#6  0x412d67c6 in DOM::DocumentImpl::recalcStyleSelector (this=0x83da4c8)
    at dom_docimpl.cpp:1962
#7  0x412d5ef1 in DOM::DocumentImpl::updateStyleSelector (this=0x83da4c8)
    at dom_docimpl.cpp:1855
#8  0x412ec042 in khtml::XMLTokenizer::executeScripts (this=0x85d3fb8)
    at xml_tokenizer.cpp:570
#9  0x412ebcab in khtml::XMLTokenizer::finish (this=0x85d3fb8)
    at xml_tokenizer.cpp:511
#10 0x412d356b in DOM::DocumentImpl::finishParsing (this=0x83da4c8)
    at dom_docimpl.cpp:1218
#11 0x4129885f in KHTMLPart::end (this=0x84cbb50) at khtml_part.cpp:1785
#12 0x41297eb5 in KHTMLPart::slotFinished (this=0x84cbb50, job=0x83da0f8)
    at khtml_part.cpp:1644
#13 0x412b0633 in KHTMLPart::qt_invoke (this=0x84cbb50, _id=20, _o=0xbfffea00)
    at khtml_part.moc:483
#14 0x48b0c516 in QObject::activate_signal () from /opt/qt33/lib/libqt-mt.so.3
#15 0x401da27d in KIO::Job::result (this=0x83da0f8, t0=0x83da0f8)
    at jobclasses.moc:156
#16 0x401c648c in KIO::Job::emitResult (this=0x83da0f8) at job.cpp:207
#17 0x401c7a3e in KIO::SimpleJob::slotFinished (this=0x83da0f8) at job.cpp:524
#18 0x401c9d87 in KIO::TransferJob::slotFinished (this=0x83da0f8)
    at job.cpp:884
#19 0x401dca12 in KIO::TransferJob::qt_invoke (this=0x83da0f8, _id=17, 
    _o=0xbfffecc0) at jobclasses.moc:1050
#20 0x48b0c59c in QObject::activate_signal () from /opt/qt33/lib/libqt-mt.so.3
#21 0x48b0c3c4 in QObject::activate_signal () from /opt/qt33/lib/libqt-mt.so.3
#22 0x401bdb65 in KIO::SlaveInterface::finished (this=0x85920c8)
    at slaveinterface.moc:226
#23 0x401bc214 in KIO::SlaveInterface::dispatch (this=0x85920c8, _cmd=104, 
    rawdata=@0xbfffeea0) at slaveinterface.cpp:255
#24 0x401bbeb6 in KIO::SlaveInterface::dispatch (this=0x85920c8)
    at slaveinterface.cpp:191
#25 0x401b9d5d in KIO::Slave::gotInput (this=0x85920c8) at slave.cpp:294
#26 0x401bb755 in KIO::Slave::qt_invoke (this=0x85920c8, _id=4, _o=0xbfffefc0)
    at slave.moc:113
#27 0x48b0c59c in QObject::activate_signal () from /opt/qt33/lib/libqt-mt.so.3
#28 0x48b0c6fd in QObject::activate_signal () from /opt/qt33/lib/libqt-mt.so.3
#29 0x48e3fb32 in QSocketNotifier::activated ()
   from /opt/qt33/lib/libqt-mt.so.3
#30 0x48b28c60 in QSocketNotifier::event () from /opt/qt33/lib/libqt-mt.so.3
#31 0x48aafeaf in QApplication::internalNotify ()
   from /opt/qt33/lib/libqt-mt.so.3
#32 0x48aaf4ae in QApplication::notify () from /opt/qt33/lib/libqt-mt.so.3
#33 0x407aead7 in KApplication::notify (this=0xbffff6c0, receiver=0x8437c08, 
    event=0xbffff2e0) at kapplication.cpp:495
#34 0x48a9f92a in QEventLoop::activateSocketNotifiers ()
   from /opt/qt33/lib/libqt-mt.so.3
#35 0x48a594b3 in QEventLoop::processEvents () from /opt/qt33/lib/libqt-mt.so.3
#36 0x48ac2218 in QEventLoop::enterLoop () from /opt/qt33/lib/libqt-mt.so.3
#37 0x48ac20c8 in QEventLoop::exec () from /opt/qt33/lib/libqt-mt.so.3
#38 0x48ab0101 in QApplication::exec () from /opt/qt33/lib/libqt-mt.so.3
#39 0x40f26407 in kdemain (argc=2, argv=0x8060860) at konq_main.cc:204
#40 0x40973928 in kdeinitmain (argc=2, argv=0x8060860) at konqueror_dummy.cc:2
#41 0x0804e2b5 in launch (argc=2, _name=0x8072cfc "konqueror", 
    args=0x8072d0f "\001", cwd=0x0, envc=1, envs=0x8072d20 "", 
    reset_env=false, tty=0x0, avoid_loops=false, 
    startup_id_str=0x8072d24 "baron;1092927373;181459;20899_TIME897012499")
    at kinit.cpp:599
#42 0x0804f5c8 in handle_launcher_request (sock=8) at kinit.cpp:1163
#43 0x0804fcbb in handle_requests (waitForPid=0) at kinit.cpp:1364
#44 0x08051325 in main (argc=3, argv=0xbffffd44, envp=0xbffffd54)
    at kinit.cpp:1817
Comment 2 Tommi Tervo 2004-08-20 10:31:13 UTC
*** Bug 87525 has been marked as a duplicate of this bug. ***
Comment 3 Tommi Tervo 2004-08-20 14:44:48 UTC
*** Bug 87483 has been marked as a duplicate of this bug. ***
Comment 4 Tommi Tervo 2004-08-26 14:31:14 UTC
*** Bug 88129 has been marked as a duplicate of this bug. ***
Comment 5 Tommi Tervo 2004-09-08 15:01:30 UTC
*** Bug 89067 has been marked as a duplicate of this bug. ***
Comment 6 Tommi Tervo 2004-09-13 10:01:38 UTC
*** Bug 89322 has been marked as a duplicate of this bug. ***
Comment 7 Tommi Tervo 2004-09-21 08:49:49 UTC
*** Bug 89898 has been marked as a duplicate of this bug. ***
Comment 8 Tommi Tervo 2004-09-23 08:59:38 UTC
*** Bug 90024 has been marked as a duplicate of this bug. ***
Comment 9 Tommi Tervo 2004-10-06 09:41:52 UTC
*** Bug 90818 has been marked as a duplicate of this bug. ***
Comment 10 Tommi Tervo 2004-10-08 09:23:39 UTC
*** Bug 90931 has been marked as a duplicate of this bug. ***
Comment 11 Tommi Tervo 2004-10-12 14:49:30 UTC
*** Bug 84913 has been marked as a duplicate of this bug. ***
Comment 12 Tommi Tervo 2004-10-19 14:20:10 UTC
*** Bug 91666 has been marked as a duplicate of this bug. ***
Comment 13 Johann-Nikolaus Andreae 2004-10-20 17:05:22 UTC
Sibmitting the form on this page:
http://www.kzvk.de/www/frames/01_00_00.asp?aid2=661&mid=396
lets the konqueror crash.
This is reproducebil on kde 3.2.3 (SuSE) and 3.3.0 gentoo.
Comment 14 Stephan Kulow 2004-10-30 17:46:42 UTC
*** Bug 92380 has been marked as a duplicate of this bug. ***
Comment 15 Tommi Tervo 2004-11-01 14:03:58 UTC
*** Bug 90614 has been marked as a duplicate of this bug. ***
Comment 16 S. Burmeister 2004-11-01 23:45:44 UTC
Any progress on this one? It's been three months and this is a reproduceable crash! This bug was discovered two moths before 3.3.1 came out! What is the reason for this bug not being fixed?

http://news.bbc.co.uk/rss/newsonline_world_edition/front_page/rss091.xml as another example.

Still very valid for KDE 3.3.1

Is it that people have to vote to get a crash solved? In that case, please vote for this bug.
Comment 17 Matt Rogers 2004-11-02 01:54:14 UTC
Developers have to find time to fix the bugs. Also, the age of the bug generally doesn't have anything to do with how quickly it gets fixed either. They don't just magically fix themselves, you know. ;)
Comment 18 S. Burmeister 2004-11-02 09:22:41 UTC
> of the bug generally doesn't have anything to do with how quickly it
> gets fixed either. They don't just magically fix themselves, you
> know. ;)

Absolutely! However I thought that crashes have a high priority, so if 
anything gets fixed it should be crashes and I guess there have been 
less important, i.e. non-crashing, bugs that got fixed in those two 
months. But mybe I get that whole priority thing wrong.

Comment 19 Stephan Kulow 2004-11-02 22:09:42 UTC
CVS commit by coolo: 

Avoid crashes on XML documents due to invalid casts
BUG: 87495


  M +4 -0      ChangeLog   1.324
  M +2 -2      xml/dom_docimpl.cpp   1.302


--- kdelibs/khtml/ChangeLog  #1.323:1.324
@@ -1,2 +1,6 @@
+2004-11-02  Stephan Kulow  <coolo@kde.org>
+
+        * xml/dom_docimpl.cpp (recalcStyleSelector): avoid invalid casts on XML documents
+
 2004-11-02  Germain Garand  <germain@ebooksfrance.com>
 

--- kdelibs/khtml/xml/dom_docimpl.cpp  #1.301:1.302
@@ -1873,5 +1873,5 @@ void DocumentImpl::recalcStyleSelector()
 
             }
-            else if (n->id() == ID_LINK || n->id() == ID_STYLE) {
+            else if (n->isHTMLElement() && ( n->id() == ID_LINK || n->id() == ID_STYLE) ) {
                 QString title;
                 if ( n->id() == ID_LINK ) {
@@ -1912,5 +1912,5 @@ void DocumentImpl::recalcStyleSelector()
                 }
             }
-            else if (n->id() == ID_BODY) {
+            else if (n->isHTMLElement() && n->id() == ID_BODY) {
                 // <BODY> element (doesn't contain styles as such but vlink="..." and friends
                 // are treated as style declarations)


Comment 20 Tommi Tervo 2004-11-18 13:12:58 UTC
*** Bug 93315 has been marked as a duplicate of this bug. ***
Comment 21 Tommi Tervo 2005-02-07 14:57:07 UTC
*** Bug 98774 has been marked as a duplicate of this bug. ***
Comment 22 Tommi Tervo 2005-02-18 14:34:29 UTC
*** Bug 99696 has been marked as a duplicate of this bug. ***
Comment 23 Thiago Macieira 2005-06-08 13:22:28 UTC
*** Bug 106944 has been marked as a duplicate of this bug. ***