Bug 128021

Version:           3.5.2 (using KDE 3.5.2, Debian Package 4:3.5.2-2+b1 (testing/unstable))
Compiler:          Target: i486-linux-gnu
OS:                Linux (i686) release 2.6.12.4

This can be reproduced every time I try to edit one of my comments on http://reddit.com

It looks like the BorderValue reference which is retrieved in CollapsedBorderValue RenderTableCell::collapsedLeftBorder() in line 2230:

&prevCell->style()->borderRight()

is invalid. I tried assigning it to a local BorderValue stack variable which caused a crash as well.

The BT:

#5  0xb7e1ac01 in khtml::CollapsedBorderValue::style (this=0x2)
    at render_style.h:267
#6  0xb7e15877 in compareBorders (border1=@0xbf9e45b8, border2=@0xbf9e4568)
    at render_table.cpp:2202
#7  0xb7e15a01 in khtml::RenderTableCell::collapsedLeftBorder (this=0x86b73e0)
    at render_table.cpp:2230
#8  0xb7e1674c in khtml::RenderTableCell::borderLeft (this=0x86b73e0)
    at render_table.cpp:2447
#9  0xb7ddd99e in khtml::RenderBlock::calcMinMaxWidth (this=0x86b73e0)
    at render_block.cpp:2508
#10 0xb7e15238 in khtml::RenderTableCell::calcMinMaxWidth (this=0x86b73e0)
    at render_table.cpp:2069
#11 0xb7df3b69 in khtml::RenderObject::recalcMinMaxWidths (this=0x86b73e0)
    at render_object.cpp:1885
#12 0xb7df3a91 in khtml::RenderObject::recalcMinMaxWidths (this=0x866f004)
    at render_object.cpp:1871
#13 0xb7df3a91 in khtml::RenderObject::recalcMinMaxWidths (this=0x85eed4c)
    at render_object.cpp:1871
#14 0xb7df3a91 in khtml::RenderObject::recalcMinMaxWidths (this=0x85eec9c)
    at render_object.cpp:1871
#15 0xb7df3a91 in khtml::RenderObject::recalcMinMaxWidths (this=0x85eeb9c)
    at render_object.cpp:1871
#16 0xb7df3a91 in khtml::RenderObject::recalcMinMaxWidths (this=0x85eea70)
    at render_object.cpp:1871
#17 0xb7df3a91 in khtml::RenderObject::recalcMinMaxWidths (this=0x860d3f0)
    at render_object.cpp:1871
#18 0xb7df3a91 in khtml::RenderObject::recalcMinMaxWidths (this=0x856dbd4)
    at render_object.cpp:1871
#19 0xb7df3a91 in khtml::RenderObject::recalcMinMaxWidths (this=0x856c67c)
    at render_object.cpp:1871
#20 0xb7df3a91 in khtml::RenderObject::recalcMinMaxWidths (this=0x856c598)
    at render_object.cpp:1871
#21 0xb7df3a91 in khtml::RenderObject::recalcMinMaxWidths (this=0x856c470)
    at render_object.cpp:1871
#22 0xb7e34ffc in khtml::RenderCanvas::layout (this=0x856c470)
    at render_canvas.cpp:159
#23 0xb7d13c74 in KHTMLView::layout (this=0x832b4a0) at khtmlview.cpp:825
#24 0xb7d13fa2 in KHTMLView::timerEvent (this=0x832b4a0, e=0xbf9e4f18)
    at khtmlview.cpp:3418
#25 0xb67d8786 in QObject::event () from /usr/lib/libqt-mt.so.3
#26 0xb6815b9a in QWidget::event () from /usr/lib/libqt-mt.so.3
#27 0xb677187a in QApplication::internalNotify () from /usr/lib/libqt-mt.so.3
#28 0xb67725f5 in QApplication::notify () from /usr/lib/libqt-mt.so.3
#29 0xb6f0702e in KApplication::notify (this=0xbf9e527c, receiver=0x832b4a0, 
    event=0xbf9e4f18) at kapplication.cpp:550
#30 0xb7d16b5e in QApplication::sendEvent (receiver=0x55, event=0xbf9e4f18)
    at qapplication.h:520
#31 0xb6763305 in QEventLoop::activateTimers () from /usr/lib/libqt-mt.so.3
#32 0xb6716d2a in QEventLoop::processEvents () from /usr/lib/libqt-mt.so.3
#33 0xb678a255 in QEventLoop::enterLoop () from /usr/lib/libqt-mt.so.3
#34 0xb678a17a in QEventLoop::exec () from /usr/lib/libqt-mt.so.3
#35 0xb677038d in QApplication::exec () from /usr/lib/libqt-mt.so.3
#36 0xb7b1d17c in kdemain () from /usr/lib/libkdeinit_konqueror.so