Bug 101070

Summary:	konqueror crashes loading the web page http://torresburriel.com/weblog
Product:	[Applications] konqueror	Reporter:	Jorge Arcas <jorge>
Component:	khtml renderer	Assignee:	Konqueror Bugs <konqueror-bugs-null>
Status:	RESOLVED WORKSFORME
Severity:	crash	CC:	lex.lists
Priority:	NOR
Version First Reported In:	unspecified
Target Milestone:	---
Platform:	unspecified
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:
Attachments:	test case attached

Description Jorge Arcas 2005-03-08 00:08:32 UTC

Version:           3.4.0 (using KDE KDE 3.4.0)
Installed from:    Unlisted Binary Package
OS:                Linux

I have been unable to visit the following web page: http://torresburriel.com/weblog

In earlier versions of Konqueror this web page runs without any problem.

I am using konqueror 3.4.0 in Debian GNU/Linux with the debs packages from  alioth.

I,ve discovered that removing:

form,input {
    font-size:11px;
    display:inline;
}

from public.css (the cascade style sheet imported by the web page) fixes the problem.

PS. sorry my poor english.

Comment 1 Isaac Clerencia 2005-03-08 00:35:44 UTC

Hi, I've managed to produce a 29 lines long HTML that causes the crash.
You can get it here:
http://people.warp.es/~isaac/crash.html

BE CAREFUL if you don't want to crash your konqueror :)

Comment 2 Isaac Clerencia 2005-03-08 00:40:55 UTC

Please note that, in my previous HTML sample, if you remove the "form, input" block from CSS *or* the "#foo li" block from CSS *or* the <label> block *or* the <form> *or* the <div> tags in the <form> *or* the <ul> and <li> tags, it no longer crashes.

Comment 3 Philippe Rigault 2005-03-08 02:10:29 UTC

>In earlier versions of Konqueror this web page runs without any problem.
 
It crashes in 3.3.2 too here.

Comment 4 Thiago Macieira 2005-03-08 02:47:36 UTC

Backtrace: 
Using host libthread_db library "/lib/tls/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread -1239680640 (LWP 13226)]
[KCrash handler]
#7  0xffffe410 in ?? ()
#8  0xbfffd1f0 in ?? ()
#9  0x00000006 in ?? ()
#10 0x000033aa in ?? ()
#11 0xb6f0e755 in raise () from /lib/tls/libc.so.6
#12 0xb6f102f9 in abort () from /lib/tls/libc.so.6
#13 0xb6f07941 in __assert_fail () from /lib/tls/libc.so.6
#14 0xb57c87cb in khtml::RenderBlock::createLineBoxes (this=0x8457e30, 
    obj=0x8457bac)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/bidi.cpp:611
#15 0xb57c8738 in khtml::RenderBlock::createLineBoxes (this=0x8457e30, 
    obj=0x8457ab4) at render_object.h:122
#16 0xb57c88a6 in khtml::RenderBlock::constructLine (this=0x8457e30, 
    start=@0xbfffd4f0, end=@0xbfffd4e0) at render_object.h:122
#17 0xb57ccf3b in khtml::RenderBlock::layoutInlineChildren (this=0x8457e30, 
    relayoutChildren=true)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/bidi.cpp:1368
#18 0xb57d60dc in khtml::RenderBlock::layoutBlock (this=0x8457e30, 
    relayoutChildren=true)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:529
#19 0xb57d6679 in khtml::RenderBlock::layout (this=0x0)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:435
#20 0xb58060eb in khtml::RenderTable::layout (this=0x8457a08)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_table.cpp:284
#21 0xb57d4e52 in khtml::RenderBlock::layoutBlockChildren (this=0x84b0e74, 
    relayoutChildren=true) at render_object.h:393
#22 0xb57d6373 in khtml::RenderBlock::layoutBlock (this=0x84b0e74, 
    relayoutChildren=true)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:531
#23 0xb57d6679 in khtml::RenderBlock::layout (this=0x0)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:435
#24 0xb57d4e52 in khtml::RenderBlock::layoutBlockChildren (this=0x84b0648, 
    relayoutChildren=true) at render_object.h:393
#25 0xb57d6373 in khtml::RenderBlock::layoutBlock (this=0x84b0648, 
    relayoutChildren=true)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:531
#26 0xb57d6679 in khtml::RenderBlock::layout (this=0x0)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:435
#27 0xb57ccaf9 in khtml::RenderBlock::layoutInlineChildren (this=0x83b83dc, 
    relayoutChildren=true) at render_object.h:393
#28 0xb57d60dc in khtml::RenderBlock::layoutBlock (this=0x83b83dc, 
    relayoutChildren=true)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:529
#29 0xb57d6679 in khtml::RenderBlock::layout (this=0x0)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:435
#30 0xb57d4e52 in khtml::RenderBlock::layoutBlockChildren (this=0x83b70c4, 
    relayoutChildren=true) at render_object.h:393
#31 0xb57d6373 in khtml::RenderBlock::layoutBlock (this=0x83b70c4, 
    relayoutChildren=true)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:531
#32 0xb57d6679 in khtml::RenderBlock::layout (this=0x0)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:435
#33 0xb57d4e52 in khtml::RenderBlock::layoutBlockChildren (this=0x83b7048, 
    relayoutChildren=true) at render_object.h:393
#34 0xb57d6373 in khtml::RenderBlock::layoutBlock (this=0x83b7048, 
    relayoutChildren=true)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:531
#35 0xb57d6679 in khtml::RenderBlock::layout (this=0x0)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:435
#36 0xb5828d1e in khtml::RenderBody::layout (this=0x83b7048)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_body.cpp:97
#37 0xb57d4e52 in khtml::RenderBlock::layoutBlockChildren (this=0x83b6f70, 
    relayoutChildren=false) at render_object.h:393
#38 0xb57d6373 in khtml::RenderBlock::layoutBlock (this=0x83b6f70, 
    relayoutChildren=false)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:531
#39 0xb57d6679 in khtml::RenderBlock::layout (this=0x0)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:435
#40 0xb57d4e52 in khtml::RenderBlock::layoutBlockChildren (this=0x83b6e58, 
    relayoutChildren=false) at render_object.h:393
#41 0xb57d6373 in khtml::RenderBlock::layoutBlock (this=0x83b6e58, 
    relayoutChildren=false)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:531
#42 0xb57d6679 in khtml::RenderBlock::layout (this=0x0)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_block.cpp:435
#43 0xb58222eb in khtml::RenderCanvas::layout (this=0x83b6e58)
    at /home/thiago/programs/src/kde/kdelibs/khtml/rendering/render_canvas.cpp:160
#44 0xb570b178 in KHTMLView::layout (this=0x85a8d70)
    at /home/thiago/programs/src/kde/kdelibs/khtml/khtmlview.cpp:773
#45 0xb570b95c in KHTMLView::timerEvent (this=0x85a8d70, e=0x0)
    at /home/thiago/programs/src/kde/kdelibs/khtml/khtmlview.cpp:2962
#46 0xb74a2c22 in QObject::event ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#47 0xb74e09aa in QWidget::event ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#48 0xb743f031 in QApplication::internalNotify ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#49 0xb743f1d2 in QApplication::notify ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#50 0xb7aa0706 in KApplication::notify (this=0xbffff050, receiver=0x85a8d70, 
    event=0xbfffe990)
    at /home/thiago/programs/src/kde/kdelibs/kdecore/kapplication.cpp:549
#51 0xb74321c0 in QEventLoop::activateTimers ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#52 0xb73e8672 in QEventLoop::processEvents ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#53 0xb74566a7 in QEventLoop::enterLoop ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#54 0xb7456604 in QEventLoop::exec ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#55 0xb743e230 in QApplication::exec ()
   from /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3
#56 0xb5dcdb4f in kdemain (argc=0, argv=0x0)
    at /home/thiago/programs/src/kde/kdebase/konqueror/konq_main.cc:206
#57 0x0804d9f6 in launch (argc=2, _name=0x8152bfc "konqueror", 
    args=0x8152c10 "\001", cwd=0x0, envc=1, envs=0x8152c21 "", 
    reset_env=false, tty=0x0, avoid_loops=false, startup_id_str=0x0)
    at /home/thiago/programs/src/kde/kdelibs/kinit/kinit.cpp:625
#58 0x0804e1ed in handle_launcher_request (sock=8)
    at /home/thiago/programs/src/kde/kdelibs/kinit/kinit.cpp:1189
#59 0x0804e7a7 in handle_requests (waitForPid=0)
    at /home/thiago/programs/src/kde/kdelibs/kinit/kinit.cpp:1392
#60 0x0804f015 in main (argc=2, argv=0xbffff9b4, envp=0x0)
    at /home/thiago/programs/src/kde/kdelibs/kinit/kinit.cpp:1848

Comment 5 Thiago Macieira 2005-03-08 02:49:01 UTC

Debug output and failed assertion:

konqueror: RenderCanvas(1): 0x86821f8  nl mmk zI: auto  <> (0,0,915,0) [61-61] { mT: 0 qT: 0 mB: 0 qB: 0} layer=0x86822b4
konqueror:   RenderBlock(1): 0x8682310  nl mmk  <html> (0,0,915,0) [61-61] { mT: 0 qT: 0 mB: 0 qB: 0} layer=0x868238c
konqueror:     RenderBody(1): 0x86823e8  nl mmk zI: auto  <body> (0,10,895,0) [41-41] { mT: 10 qT: 0 mB: 10 qB: 0}
konqueror:       RenderBlock(1): 0x8682464  nl mmk zI: auto  <div> (0,0,895,0) [41-41] { mT: 0 qT: 0 mB: 0 qB: 0}
konqueror:         RenderBlock(1): 0x86824e0  nl mmk zI: auto  <ul> (0,0,895,0) [41-41] { mT: 13 qT: 1 mB: 13 qB: 0}
konqueror:           RenderTable(2): 0x868255c  nl mmk zI: auto  <li> (0,0,1,0) [1-1] { mT: 0 qT: 0 mB: 0 qB: 0}
konqueror:             RenderBlock (anonymous)(1): 0x8682920  ci an nl mmk zI: auto  (0,-500000,1,0) [50-50] { mT: 0 qT: 0 mB: 0 qB: 0}
konqueror:               RenderTableSection(1): 0x8682654  an nl mmk zI: auto  (0,0,1,0) [-1--1] { mT: 0 qT: 0 mB: 0 qB: 0}
konqueror:                 RenderTableRow(1): 0x86826bc  an nl mmk zI: auto  (0,0,0,0) [0-0] { mT: 0 qT: 0 mB: 0 qB: 0}
konqueror:                   RenderTableCell(1): 0x86826e8  ci an nl mmk zI: auto  (0,0,0,0) [13382-13382] { mT: 0 qT: 0 mB: 0 qB: 0} [r=0 c=0 rs=1 cs=1]
konqueror:                     RenderText(2): 0x8682608  il mmk zI: auto  <text> (0,0,0,17) [50-58] { mT: 0 qT: 0 mB: 0 qB: 0} " Search: "
konqueror:               RenderInline(3): 0x8682778  il ci mmk zI: auto  <form> (0,0,0,0) [0-0] { mT: 0 qT: 0 mB: 0 qB: 0} continuation=0x86828a4
konqueror:                 RenderText(3): 0x86827dc  il mmk zI: auto  <text> (0,0,0,17) [0-4] { mT: 0 qT: 0 mB: 0 qB: 0} " "
konqueror:             RenderBlock (anonymous)(1): 0x86828a4  an nl mmk zI: auto  (0,-500000,0,0) [65-65] { mT: 0 qT: 0 mB: 0 qB: 0} continuation=0x8682a18
konqueror:               RenderBlock(2): 0x8682828  ci nl mmk zI: auto  <div> (0,-500000,0,0) [65-65] { mT: 0 qT: 0 mB: 0 qB: 0}
konqueror:                 RenderSubmitButton(1): 0x8682aa4  il rp nl mmk zI: auto  <input> (0,-500000,65,0) [65-65] { mT: 0 qT: 0 mB: 0 qB: 0}
konqueror:                 RenderText(2): 0x8682b18  il nl mmk zI: auto  <text> (0,0,0,17) [0-4] { mT: 0 qT: 0 mB: 0 qB: 0} " "
konqueror:             RenderBlock (anonymous)(1): 0x868299c  ci an nl mmk zI: auto  (0,-500000,0,0) [0-0] { mT: 0 qT: 0 mB: 0 qB: 0}
konqueror:               RenderInline(3): 0x8682a18  il ci nl mmk zI: auto  <form> (0,0,0,0) [0-0] { mT: 0 qT: 0 mB: 0 qB: 0}
 this object = 0x8682920, [
0: /usr/local/kde3-20050305/lib/libkdecore.so.4(_Z11kdBacktracei+0x46) [0xb7aaffd6]
1: /usr/local/kde3-20050305/lib/libkdecore.so.4(_Z11kdBacktracev+0x2a) [0xb7ab036a]
2: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57c85e4]
3: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57c88a6]
4: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57ccf3b]
5: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57d60dc]
6: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57d6679]
7: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb58060eb]
8: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57d4e52]
9: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57d6373]
10: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57d6679]
11: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57d4e52]
12: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57d6373]
13: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57d6679]
14: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57d4e52]
15: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57d6373]
16: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57d6679]
17: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb5828d1e]
18: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57d4e52]
19: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57d6373]
20: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57d6679]
21: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57d4e52]
22: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57d6373]
23: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb57d6679]
24: /usr/local/kde3-20050305/lib/libkhtml.so.4 [0xb58222eb]
25: /usr/local/kde3-20050305/lib/libkhtml.so.4(_ZN9KHTMLView6layoutEv+0x108) [0xb570b178]
26: /usr/local/kde3-20050305/lib/libkhtml.so.4(_ZN9KHTMLView10timerEventEP11QTimerEvent+0x5fc) [0xb570b95c]
27: /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN7QObject5eventEP6QEvent+0xe2) [0xb74a2c22]
28: /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN7QWidget5eventEP6QEvent+0x22) [0xb74e09aa]
29: /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN12QApplication14internalNotifyEP7QObjectP6QEvent+0x85) [0xb743f031]
30: /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN12QApplication6notifyEP7QObjectP6QEvent+0x7e) [0xb743f1d2]
31: /usr/local/kde3-20050305/lib/libkdecore.so.4(_ZN12KApplication6notifyEP7QObjectP6QEvent+0x1e6) [0xb7aa0706]
32: /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN10QEventLoop14activateTimersEv+0x280) [0xb74321c0]
33: /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN10QEventLoop13processEventsEj+0x6b2) [0xb73e8672]
34: /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN10QEventLoop9enterLoopEv+0x4b) [0xb74566a7]
35: /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN10QEventLoop4execEv+0x24) [0xb7456604]
36: /home/thiago/programs/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN12QApplication4execEv+0x20) [0xb743e230]
37: /usr/local/kde3-20050305/lib/libkdeinit_konqueror.so(kdemain+0x50f) [0xb5dcdb4f]
38: konqueror [kdeinit] konqueror --preload [0x804d9f6]
39: konqueror [kdeinit] konqueror --preload [0x804e1ed]
40: konqueror [kdeinit] konqueror --preload [0x804e7a7]
41: konqueror [kdeinit] konqueror --preload [0x804f015]
42: /lib/tls/libc.so.6(__libc_start_main+0xe0) [0xb6efae20]
43: konqueror [kdeinit] konqueror --preload [0x804b131]
]

konqueror [kdeinit] konqueror --preload: /home/thiago/programs/src/kde/kdelibs/khtml/rendering/bidi.cpp:596: khtml::InlineFlowBox* khtml::RenderBlock::createLineBoxes(khtml::RenderObject*): Assertiva `obj->isInlineFlow() || obj == this' falhou.

Comment 6 Jorge Arcas 2005-03-08 10:33:16 UTC

In earlier versions of Konqueror this web page used a different cascade style sheet.

For this reason it didn't crash for me.

Comment 7 Leo Spalteholz 2005-03-24 10:00:05 UTC

The link to the weblog no longer crashes Konq (3.4, debian unstable) but the test case still does.

Comment 8 Tommi Tervo 2005-06-29 12:39:37 UTC

Created attachment 11620 [details]
test case attached

Attaching testcase here so it won't vanish. Trunk 429877 crashes.

Comment 9 Charles Samuels 2006-10-02 06:57:57 UTC

None of the cases crash here anymore in 3.5.3 or r591211

Will close this bug soon if I don't get another confirming test case.

Comment 10 lexual 2006-10-02 23:32:10 UTC

Closing worksforme.