Bug 100346

Summary: Links in pure-CSS popups make Konqueror crash (SIGSEGV)
Product: [Applications] konqueror Reporter: Remigiusz Marcinkiewicz <enleth>
Component: khtmlAssignee: Konqueror Bugs <konqueror-bugs-null>
Status: RESOLVED DUPLICATE    
Severity: crash    
Priority: NOR    
Version First Reported In: unspecified   
Target Milestone: ---   
Platform: Slackware   
OS: Linux   
Latest Commit: Version Fixed/Implemented In:
Sentry Crash Report:

Description Remigiusz Marcinkiewicz 2005-02-27 01:32:51 UTC 
Version:            (using KDE KDE 3.3.2)
Installed from:    Slackware Packages
OS:                Linux

Konqueror crashes on pure-css popups at http://www.rootshell.be/~upadhyay/2005/01/more-fun-with-css-popups.html
Just click on the first link in the text, labeled "hiding". Seems to be 100%-reproducible, but I have no idea what exactly causes KHTML to crash.
I'm afraid I can't afford recompiling KDE to give exact backtrace, but as it's fully reproducible (I've asked several people on different Linux distros to check that, all of them are getting segfaults), you should be able to get far more accurate debug information than me anyway.

Just checked: it's present on KDE 3.4beta2 too.
Comment 1 Thiago Macieira 2005-02-27 02:31:06 UTC 
Confirmed, but it required some moving around.

3.4 RC1:
Using host libthread_db library "/lib/tls/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread -1239676544 (LWP 12183)]
[KCrash handler]
#7  0xb57b87fe in collectHorizontalBoxCoordinates (box=0x84d7038, 
    pointArray=@0xbfffd2d0, bottom=false, limit=-500000) at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_inline.cpp:497
#8  0xb57b8864 in collectHorizontalBoxCoordinates (box=0x8567dd0, 
    pointArray=@0xbfffd2d0, bottom=false, limit=-500000) at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_inline.cpp:508
#9  0xb57b8ee0 in khtml::RenderInline::paintOutlines (this=0x84a989c, 
    p=0x849b418, _tx=88, _ty=234) at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_inline.cpp:632
#10 0xb57b9543 in khtml::RenderInline::paint (this=0x84a989c, i=@0xbfffd860, 
    _tx=88, _ty=234) at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_inline.cpp:276
#11 0xb57b2986 in khtml::RenderBlock::paintObject (this=0x84a97d4, 
    pI=@0xbfffd860, _tx=88, _ty=234, shouldPaintOutline=true) at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:1307
#12 0xb57b2b62 in khtml::RenderBlock::paint (this=0x84a97d4, pI=@0xbfffd860, 
    _tx=88, _ty=234) at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:1263
#13 0xb57b2986 in khtml::RenderBlock::paintObject (this=0x84a9758, 
    pI=@0xbfffd860, _tx=88, _ty=234, shouldPaintOutline=true)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:1307
#14 0xb57b2b62 in khtml::RenderBlock::paint (this=0x84a9758, pI=@0xbfffd860, 
    _tx=88, _ty=234)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:1263
#15 0xb57b2986 in khtml::RenderBlock::paintObject (this=0x84a94e8, 
    pI=@0xbfffd860, _tx=88, _ty=203, shouldPaintOutline=true)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:1307
#16 0xb57b2b62 in khtml::RenderBlock::paint (this=0x84a94e8, pI=@0xbfffd860, 
    _tx=88, _ty=203)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:1263
#17 0xb57b2986 in khtml::RenderBlock::paintObject (this=0x84a93a4, 
    pI=@0xbfffd860, _tx=88, _ty=177, shouldPaintOutline=true)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:1307
#18 0xb57b2b62 in khtml::RenderBlock::paint (this=0x84a93a4, pI=@0xbfffd860, 
    _tx=88, _ty=177)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:1263
#19 0xb57b2652 in khtml::RenderBlock::paintFloats (this=0x0, pI=@0xbfffd860, 
    _tx=26, _ty=0, paintSelection=false)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:1374
#20 0xb57b2a56 in khtml::RenderBlock::paintObject (this=0x84a903c, 
    pI=@0xbfffd860, _tx=26, _ty=0, shouldPaintOutline=true)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:1321
#21 0xb57b2b62 in khtml::RenderBlock::paint (this=0x84a903c, pI=@0xbfffd860, 
    _tx=26, _ty=0)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:1263
#22 0xb57b2986 in khtml::RenderBlock::paintObject (this=0x84a87d0, 
    pI=@0xbfffd860, _tx=0, _ty=0, shouldPaintOutline=true)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:1307
#23 0xb57b2b62 in khtml::RenderBlock::paint (this=0x84a87d0, pI=@0xbfffd860, 
    _tx=0, _ty=0)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:1263
#24 0xb57b2986 in khtml::RenderBlock::paintObject (this=0x84a86f8, 
    pI=@0xbfffd860, _tx=0, _ty=0, shouldPaintOutline=true)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:1307
#25 0xb57b2b62 in khtml::RenderBlock::paint (this=0x84a86f8, pI=@0xbfffd860, 
    _tx=0, _ty=0)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:1263
#26 0xb57db3f1 in khtml::RenderLayer::paintLayer (this=0x84a8774, 
    rootLayer=0x84a869c, p=0x849b418, paintDirtyRect=@0xbfffdb00, 
    selectionOnly=false) at render_layer.h:137
#27 0xb57db1de in khtml::RenderLayer::paintLayer (this=0x84a869c, 
    rootLayer=0x84a869c, p=0x849b418, paintDirtyRect=@0xbfffdb00, 
    selectionOnly=false)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_layer.cpp:810
#28 0xb57db52b in khtml::RenderLayer::paint (this=0xbfffd1d0, p=0x0, 
    damageRect=@0x0, selectionOnly=false)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_layer.cpp:693
#29 0xb56ec7da in KHTMLView::drawContents (this=0x8462c10, p=0xbfffdc60, 
    ex=0, ey=0, ew=899, eh=529) at dom_nodeimpl.h:280
#30 0xb75c5f20 in QScrollView::drawContentsOffset ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#31 0xb75c4d50 in QScrollView::viewportPaintEvent ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#32 0xb75c7368 in QScrollView::eventFilter ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#33 0xb56e4d49 in KHTMLView::eventFilter (this=0x8462c10, o=0x8464648, 
    e=0xbfffe370)
    at /home/thiago/programs/src/kde/kdelibs/khtml/khtmlview.cpp:1904
#34 0xb74a2af7 in QObject::activate_filters ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#35 0xb74a2bc2 in QObject::event ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#36 0xb74e09aa in QWidget::event ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#37 0xb743f031 in QApplication::internalNotify ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#38 0xb743f1d2 in QApplication::notify ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#39 0xb7aa06c6 in KApplication::notify (this=0xbffff050, receiver=0x8464648, 
    event=0xbfffe370)
    at /home/thiago/programs/src/kde/kdelibs/kdecore/kapplication.cpp:549
#40 0xb7407bb9 in QWidget::repaint ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#41 0xb75c5dc8 in QScrollView::repaintContents ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#42 0xb75c5e62 in QScrollView::repaintContents ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#43 0xb56eb945 in KHTMLView::timerEvent (this=0x8462c10, e=0x0)
    at /home/thiago/programs/src/kde/kdelibs/khtml/khtmlview.cpp:3024
#44 0xb74a2c22 in QObject::event ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#45 0xb74e09aa in QWidget::event ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#46 0xb743f031 in QApplication::internalNotify ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#47 0xb743f1d2 in QApplication::notify ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#48 0xb7aa06c6 in KApplication::notify (this=0xbffff050, receiver=0x8462c10, 
    event=0xbfffe990)
    at /home/thiago/programs/src/kde/kdelibs/kdecore/kapplication.cpp:549
#49 0xb74321c0 in QEventLoop::activateTimers ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#50 0xb73e8672 in QEventLoop::processEvents ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#51 0xb74566a7 in QEventLoop::enterLoop ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#52 0xb7456604 in QEventLoop::exec ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#53 0xb743e230 in QApplication::exec ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#54 0xb5dceb5f in kdemain (argc=0, argv=0x0)
    at /home/thiago/programs/src/kde/kdebase/konqueror/konq_main.cc:206
#55 0x0804d9f6 in launch (argc=4, _name=0x808a2dc "konqueror", 
    args=0x808a342 "/home/thiago", cwd=0x808a342 "/home/thiago", envc=49, 
    envs=0x808a96f "", reset_env=true, tty=0x0, avoid_loops=false, 
    startup_id_str=0x0)
    at /home/thiago/programs/src/kde/kdelibs/kinit/kinit.cpp:625
#56 0x0804e1ed in handle_launcher_request (sock=4)
    at /home/thiago/programs/src/kde/kdelibs/kinit/kinit.cpp:1189
#57 0x0804e8b2 in handle_requests (waitForPid=0)
    at /home/thiago/programs/src/kde/kdelibs/kinit/kinit.cpp:1382
#58 0x0804f015 in main (argc=2, argv=0xbffff9b4, envp=0x0)
    at /home/thiago/programs/src/kde/kdelibs/kinit/kinit.cpp:1848
Comment 2 Thiago Macieira 2005-02-27 02:56:24 UTC 

*** This bug has been marked as a duplicate of 97085 ***