Version: (using KDE KDE 3.3.0) Installed from: Debian testing/unstable Packages This originates from: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=276487 Konqueror crashes each time I try to load http://conit.com/. Backtrace follows: Using host libthread_db library "/lib/tls/libthread_db.so.1". [Thread debugging using libthread_db enabled] [New Thread 1073813024 (LWP 9855)] [KCrash handler] #3 0x403ed1df in QMemArray<QPoint>::detach () from /usr/lib/libkhtml.so.4 #4 0x403ee6bf in QMemArray<QPoint>::detach () from /usr/lib/libkhtml.so.4 #5 0x40407b86 in QMemArray<QPoint>::detach () from /usr/lib/libkhtml.so.4 #6 0x403ea038 in QMemArray<QPoint>::detach () from /usr/lib/libkhtml.so.4 #7 0x403ea09d in QMemArray<QPoint>::detach () from /usr/lib/libkhtml.so.4 #8 0x403ea09d in QMemArray<QPoint>::detach () from /usr/lib/libkhtml.so.4 #9 0x403ea09d in QMemArray<QPoint>::detach () from /usr/lib/libkhtml.so.4 #10 0x403ea09d in QMemArray<QPoint>::detach () from /usr/lib/libkhtml.so.4 #11 0x40415637 in QMemArray<QPoint>::detach () from /usr/lib/libkhtml.so.4 #12 0x4033088a in KHTMLView::layout () from /usr/lib/libkhtml.so.4 #13 0x40338cd8 in KHTMLView::timerEvent () from /usr/lib/libkhtml.so.4 #14 0x4acb85b3 in QObject::event () from /usr/lib/libqt-mt.so.3 #15 0x4acf0e6f in QWidget::event () from /usr/lib/libqt-mt.so.3 #16 0x4ac5e42f in QApplication::internalNotify () from /usr/lib/libqt-mt.so.3 #17 0x4ac5da2e in QApplication::notify () from /usr/lib/libqt-mt.so.3 #18 0x4b211fc3 in KApplication::notify () from /usr/lib/libkdecore.so.4 #19 0x4ac4dc65 in QEventLoop::activateTimers () from /usr/lib/libqt-mt.so.3 #20 0x4ac074ab in QEventLoop::processEvents () from /usr/lib/libqt-mt.so.3 #21 0x4ac70788 in QEventLoop::enterLoop () from /usr/lib/libqt-mt.so.3 #22 0x4ac70638 in QEventLoop::exec () from /usr/lib/libqt-mt.so.3 #23 0x4ac5e681 in QApplication::exec () from /usr/lib/libqt-mt.so.3 #24 0x4baaab3c in kdemain () from /usr/lib/libkdeinit_konqueror.so #25 0x40004896 in kdeinitmain () from /usr/lib/kde3/konqueror.so #26 0x0804cbb6 in ?? () [...] #32 0x00000013 in ?? () #33 0x4b33f061 in posix_memalign () from /usr/lib/libkdecore.so.4 #34 0x0804e0ab in ?? () [...] #85 0xbffff978 in ?? () #86 0x4a8510d3 in operator delete () from /usr/lib/libstdc++.so.5
For what I can see by testing the source of the page, the crash is caused by the line <frame src="conIT%20Gesellschaft%20f%FCr%20Consulting,%20Software-Entwicklung%20und%20IT-Dienstleistungen%20mbH_files/phead.html" class="phead" name="ptitle" scrolling="no" noresize="noresize"> Crash confirmed on cvs HEAD 15 October 2004
#0 0x41c3987b in khtml::RenderBox::containingBlockWidth (this=0x83b3510) at render_box.cpp:532 #1 0x41c3af50 in khtml::RenderBox::calcReplacedWidth (this=0x83b3510) at render_box.cpp:894 #2 0x41c57e56 in khtml::RenderReplaced::calcMinMaxWidth (this=0x83b3510) at render_replaced.cpp:73 #3 0x41c35d10 in khtml::RenderObject::recalcMinMaxWidths (this=0x83b3510) at render_object.cpp:1756 #4 0x41c35c21 in khtml::RenderObject::recalcMinMaxWidths (this=0x83b345c) at render_object.cpp:1742 #5 0x41c35c21 in khtml::RenderObject::recalcMinMaxWidths (this=0x83b3344) at render_object.cpp:1742 #6 0x41c35c21 in khtml::RenderObject::recalcMinMaxWidths (this=0x83b3280) at render_object.cpp:1742 #7 0x41c35c21 in khtml::RenderObject::recalcMinMaxWidths (this=0x83b3180) at render_object.cpp:1742 #8 0x41c682e4 in khtml::RenderCanvas::layout (this=0x83b3180) at render_canvas.cpp:137 #9 0x41b6dd72 in KHTMLView::layout (this=0x82fa7b8) at khtmlview.cpp:725 #10 0x41b763bd in KHTMLView::timerEvent (this=0x82fa7b8, e=0xbffff640) at khtmlview.cpp:2719 #11 0x40dfb253 in QObject::event () from /opt/qt333/lib/libqt-mt.so.3 #12 0x40e33b0f in QWidget::event () from /opt/qt333/lib/libqt-mt.so.3 #13 0x40da10bf in QApplication::internalNotify () ---Type <return> to continue, or q <return> to quit--- from /opt/qt333/lib/libqt-mt.so.3 #14 0x40da06be in QApplication::notify () from /opt/qt333/lib/libqt-mt.so.3 #15 0x40927ed7 in KApplication::notify (this=0xbffffa20, receiver=0x82fa7b8, event=0xbffff640) at kapplication.cpp:495 #16 0x40d908f5 in QEventLoop::activateTimers () from /opt/qt333/lib/libqt-mt.so.3 #17 0x40d49ccb in QEventLoop::processEvents () from /opt/qt333/lib/libqt-mt.so.3 #18 0x40db3478 in QEventLoop::enterLoop () from /opt/qt333/lib/libqt-mt.so.3 #19 0x40db3328 in QEventLoop::exec () from /opt/qt333/lib/libqt-mt.so.3 #20 0x40da1311 in QApplication::exec () from /opt/qt333/lib/libqt-mt.so.3 #21 0x40073c27 in kdemain (argc=1, argv=0xbffffb74) at konq_main.cc:204 #22 0x08048686 in main (argc=1, argv=0xbffffb74) at konqueror.la.cc:2
CVS commit by ggarand: Fix containingBlock crash BUG: 84576, 91442, 76955 M +2 -2 render_object.cpp 1.275 --- kdelibs/khtml/rendering/render_object.cpp #1.274:1.275 @@ -540,6 +540,6 @@ RenderBlock *RenderObject::containingBlo o = o->parent(); } else { - while(o && ( ( o->isInline() && !o->isReplaced() ) || - o->isTableRow() || o->isTableSection() || o->isTableCol() ) ) + while(o && ( ( o->isInline() && !o->isReplaced() ) || o->isTableRow() || o->isTableSection() || + o->isTableCol() || o->isFrameSet() ) ) o = o->parent(); }