Bug 118104

Version:            (using KDE KDE 3.5.0)
Installed from:    Compiled From Sources
Compiler:          gcc version 3.3.4 -march=athlon-tbird -Os & -O2
OS:                Linux

This is hard to explain how to reproduce, but easy _to_ reproduce.

Go to http://paul.merton.ox.ac.uk/science/ and at the bottom are the links to the 'webring' stuff.  Select 'next' and hope that you go here: http://www.geocities.com/RainForest/Andes/1555/comedy.html (going to that page 'clean' doesn't produce the crash).

When you do the above, and the next webring page loads, there will be 2 pop-up windows saying 'This page is radioactive!'.  Click 'Cancel' -> crash.

Here is GDB output and full backtrace:


...
...
khtml (part):  was still parsing... calling end
khtml (part):  was still parsing... calling end
kio (Scheduler): Scheduler: killing slave 2587
kio (Slave): killing slave pid=2587 (http://geocities.com)
kio (KIOJob): Job::kill this=0x85e1528 KIO::TransferJob m_progressId=0 quietly=true
kio (Scheduler): Scheduler: killing slave 2598
kio (Slave): killing slave pid=2598 (http://themis.geocities.yahoo.com)
kio (KIOJob): Job::kill this=0x866a5b0 KIO::TransferJob m_progressId=0 quietly=true
khtml: closeChildDialogs: closing dialog [KDialogBase pointer (0x85ce2e8) to widget warningYesNoList, geometry=258x105+373+292]
khtml (part): saveState this=0x8353718 '' saving URL http://www.geocities.com/RainForest/Andes/1555/comedy.html
khtml (part):     saveState this=0x84e1c28 'm1134297078112' saving URL http://www.geocities.com/RainForest/Andes/1555/comedy.html?200511
khtml (part):     saveState this=0x84cc1f8 't1134297078112' saving URL http://www.geocities.com/js_source/tab04.html
khtml (part):     saveState this=0x8524b08 's1134297078112' saving URL http://www.geocities.com/js_source/adframe06.html
konqueror: KonqMainWindow::setLocationBarURL: url = http://paul.merton.ox.ac.uk/science/
konqueror: changeViewMode: serviceType is text/html serviceName is khtml current service name is khtml
khtml: closeChildDialogs: closing dialog [KDialogBase pointer (0x85ce2e8) to widget warningYesNoList, geometry=258x105+373+292]
konqueror: htmltokenizer.cpp:159: void khtml::HTMLTokenizer::reset(): Assertion `m_executingScript == 0' failed.

Program received signal SIGABRT, Aborted.
0x415bf1b1 in kill () from /lib/libc.so.6
(gdb) bt
#0  0x415bf1b1 in kill () from /lib/libc.so.6
#1  0x414529c1 in pthread_kill () from /lib/libpthread.so.0
#2  0x41452ccb in raise () from /lib/libpthread.so.0
#3  0x415bedf4 in raise () from /lib/libc.so.6
#4  0x415c05a8 in abort () from /lib/libc.so.6
#5  0x415b856c in __assert_fail () from /lib/libc.so.6
#6  0x416beee0 in _IO_2_1_stdout_ () from /lib/libc.so.6
#7  0xbfcb56b7 in ?? ()
#8  0x416b7fe6 in in6addr_loopback () from /lib/libc.so.6
#9  0x424ccd0b in typeinfo name for KStaticDeleter<QPtrList<DOM::DocumentImpl> > ()
   from /home/nick/kde3.5/lib/libkhtml.so.4
#10 0x0000009f in ?? ()
#11 0x424cf1c0 in typeinfo name for KStaticDeleter<QPtrList<DOM::DocumentImpl> > ()
   from /home/nick/kde3.5/lib/libkhtml.so.4
#12 0x416b7fe6 in in6addr_loopback () from /lib/libc.so.6
#13 0x424ccd2d in typeinfo name for KStaticDeleter<QPtrList<DOM::DocumentImpl> > ()
   from /home/nick/kde3.5/lib/libkhtml.so.4
#14 0x4000a490 in _dl_map_object_deps () from /lib/ld-linux.so.2
Previous frame inner to this frame (corrupt stack?)



Thanks,

Nick