80903 2004-05-04 17:38:52 +0000 <table style="display: block;"> containing an <img> crash 2004-10-18 09:45:39 +0000 1 1 2 Applications konqueror khtml unspecified Compiled Sources Linux RESOLVED DUPLICATE 78205 NOR crash --- 1 ogoffart konqueror-bugs-null kdebugs 0 oldest_to_newest 228805 0 ogoffart 2004-05-04 17:38:52 +0000 Version: (using KDE Devel) Installed from: Compiled sources Compiler: gcc 3.3.2 OS: Linux I get Konqueror crash while browsing on the net (precisely https://e-care.skynet.be/Login/) I isolated the crash in this simple test case: <html> <body > <table style="display: block;"> <tr> <td><img src="image.png"></td> </tr> </table> </body> </html> Strangly, I have to open it twice to make it crash. The backtrace i get is not interesting. 234748 1 tommi.tervo 2004-05-20 21:47:28 +0000 [New Thread 1024 (LWP 29514)] 0x420b48d9 in wait4 () from /lib/i686/libc.so.6 #0 0x420b48d9 in wait4 () from /lib/i686/libc.so.6 #1 0x4213030c in __DTOR_END__ () from /lib/i686/libc.so.6 #2 0x411bdc33 in waitpid () from /lib/i686/libpthread.so.0 #3 0x40733908 in KCrash::defaultCrashHandler (sig=6) at kcrash.cpp:246 #4 0x411bbf05 in pthread_sighandler () from /lib/i686/libpthread.so.0 #5 <signal handler called> #6 0x42029331 in kill () from /lib/i686/libc.so.6 #7 0x411bbbdb in raise () from /lib/i686/libpthread.so.0 #8 0x4202a8c2 in abort () from /lib/i686/libc.so.6 #9 0x42022ecb in __assert_fail () from /lib/i686/libc.so.6 #10 0x416f776e in DOM::NodeImpl::attach (this=0x841feb8) at dom_nodeimpl.cpp:887 #11 0x416f8de3 in DOM::NodeBaseImpl::attach (this=0x841feb8) at dom_nodeimpl.cpp:1430 #12 0x41728ad7 in DOM::HTMLImageElementImpl::attach (this=0x841feb8) at html_imageimpl.cpp:184 #13 0x41712cb9 in khtml::KHTMLParser::insertNode (this=0x855ca80, n=0x841feb8, flat=true) at htmlparser.cpp:329 #14 0x41712b1a in khtml::KHTMLParser::parseToken (this=0x855ca80, t=0x8558d1c) at htmlparser.cpp:279 #15 0x4171b7e1 in khtml::HTMLTokenizer::processToken (this=0x8558ce8) at htmltokenizer.cpp:1577 #16 0x41719e9a in khtml::HTMLTokenizer::parseTag (this=0x8558ce8, src=@0x8558dfc) at htmltokenizer.cpp:1090 #17 0x4171aa03 in khtml::HTMLTokenizer::write (this=0x8558ce8, str=@0xbfffe0c0, appendData=true) at htmltokenizer.cpp:1345 #18 0x416ae5e8 in KHTMLPart::write (this=0x84d6748, str=0x85386d0 "<html> \n <body > \n <table style=\"display: block;\"> \n <tr> \n <td><img src=\"image.png\"></td> \n </tr> \n </table> \n </body> \n </html> \n", len=150) at khtml_part.cpp:1728 #19 0x416ad04c in KHTMLPart::slotData (this=0x84d6748, kio_job=0x84e4ff0, data=@0xbfffe7b0) at khtml_part.cpp:1416 #20 0x416c657e in KHTMLPart::qt_invoke (this=0x84d6748, _id=16, _o=0xbfffe4e0) at khtml_part.moc:470 #21 0x40b8742b in QObject::activate_signal (this=0x84e4ff0, clist=0x84fe108, o=0xbfffe4e0) at kernel/qobject.cpp:2356 #22 0x401b3fca in KIO::StatJob::permanentRedirection (this=0x84e4ff0, t0=0x84e4ff0, t1=@0xbfffe7b0, t2=@0x401a3370) at jobclasses.moc:536 #23 0x401a33c9 in KIO::stat (url=@0x84e4ff0, sideIsSource=176, details=16410, showProgressInfo=85) at job.cpp:752 #24 0x401b474c in KIO::TransferJob::redirection (this=0x84e4ff0, t0=0x12, t1=@0xbfffe600) at jobclasses.moc:750 #25 0x40b8742b in QObject::activate_signal (this=0x8406ea8, clist=0x8528530, o=0xbfffe600) at kernel/qobject.cpp:2356 #26 0x4019883e in KIO::SlaveInterface::messageBox (this=0x8406ea8, type=-1073748048, text=@0x1, _caption=@0x40196dbf, buttonYes=@0x40814ac8, buttonNo=@0x18) at slaveinterface.cpp:515 #27 0x40196fe6 in KIO::SlaveInterface::calcSpeed (this=0x8406ea8) at slaveinterface.cpp:220 #28 0x40196ada in operator>> (s=@0x8406ea8, e=@0x4100d7e8) at slaveinterface.cpp:81 #29 0x40194a1c in KIO::Slave::hold (this=0x8406ea8, url=@0x4100d7e8) at slave.cpp:238 #30 0x40196513 in KIO::Slave::holdSlave (protocol=@0x8406ea8, url=@0x4) at slave.cpp:484 #31 0x40b8742b in QObject::activate_signal (this=0x829fd30, clist=0x833f160, o=0xbfffe8e0) at kernel/qobject.cpp:2356 #32 0x40b877e2 in QObject::activate_signal (this=0x829fd30, signal=2, param=23) at kernel/qobject.cpp:2449 #33 0x40ecc074 in QSocketNotifier::activated (this=0x829fd30, t0=23) at .moc/debug-shared-mt/moc_qsocketnotifier.cpp:85 #34 0x40ba56a6 in QSocketNotifier::event (this=0x829fd30, e=0xbfffeb30) at kernel/qsocketnotifier.cpp:280 #35 0x40b28442 in QApplication::internalNotify (this=0xbffff090, receiver=0x829fd30, e=0xbfffeb30) at kernel/qapplication.cpp:2620 #36 0x40b27572 in QApplication::notify (this=0xbffff090, receiver=0x829fd30, e=0xbfffeb30) at kernel/qapplication.cpp:2343 #37 0x406c8faa in KApplication::notify (this=0xbffff090, receiver=0x829fd30, event=0xbfffeb30) at kapplication.cpp:507 #38 0x4005386a in QApplication::sendEvent (receiver=0x829fd30, event=0xbfffeb30) at /opt/qt331post/include/qapplication.h:491 #39 0x40b17a27 in QEventLoop::activateSocketNotifiers (this=0x80a62c0) at kernel/qeventloop_unix.cpp:580 #40 0x40ad196b in QEventLoop::processEvents (this=0x80a62c0, flags=4) at kernel/qeventloop_x11.cpp:383 #41 0x40b3af91 in QEventLoop::enterLoop (this=0x80a62c0) at kernel/qeventloop.cpp:198 #42 0x40b3aeb4 in QEventLoop::exec (this=0x80a62c0) at kernel/qeventloop.cpp:145 #43 0x40b285db in QApplication::exec (this=0xbffff090) at kernel/qapplication.cpp:2743 #44 0x41322b12 in kdemain (argc=2, argv=0x8061a88) at konq_main.cc:184 #45 0x408558a1 in kdeinitmain (argc=2, argv=0x8061a88) at konqueror_dummy.cc:2 #46 0x0804e1dc in launch (argc=2, _name=0x8060344 "konqueror", args=0x8060357 "\001", cwd=0x0, envc=1, envs=0x8060368 "", reset_env=false, tty=0x0, avoid_loops=false, startup_id_str=0x806036c "v10-dhcp-76-190.ntc.nokia.com;1085078432;391442;5698") at kinit.cpp:604 #47 0x0804f5e1 in handle_launcher_request (sock=8) at kinit.cpp:1170 #48 0x0804fd2d in handle_requests (waitForPid=0) at kinit.cpp:1361 #49 0x08051318 in main (argc=3, argv=0xbffff744, envp=0xbffff754) at kinit.cpp:1798 #50 0x42017589 in __libc_start_main () from /lib/i686/libc.so.6 234749 2 tommi.tervo 2004-05-20 21:51:13 +0000 *** This bug has been marked as a duplicate of 78205 *** 277420 3 tommi.tervo 2004-10-18 09:45:39 +0000 *** Bug 91516 has been marked as a duplicate of this bug. ***