| Summary: | kjs makes konqueror crash on http://ratp.fr/ | ||
|---|---|---|---|
| Product: | [Applications] konqueror | Reporter: | Thierry Vignaud <tvignaud> |
| Component: | kjs | Assignee: | Konqueror Developers <konq-bugs> |
| Status: | RESOLVED DUPLICATE | ||
| Severity: | crash | ||
| Priority: | NOR | ||
| Version: | unspecified | ||
| Target Milestone: | --- | ||
| Platform: | Mandriva RPMs | ||
| OS: | Linux | ||
| Latest Commit: | Version Fixed In: | ||
| Sentry Crash Report: | |||
|
Description
Thierry Vignaud
2006-11-05 21:00:11 UTC
I got a different backtrace:
khtml (jscript): [virtual KJS::Value KJS::DOMNamedNodesCollection::tryGet(KJS::ExecState*, const KJS::Identifier&) const] 1
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1234233680 (LWP 15787)]
0xb60534c6 in typeinfo name for khtml::TreeShared<DOM::NodeImpl> ()
from /opt/kde354/lib/libkhtml.so.4
(gdb)
(gdb) bt
#0 0xb60534c6 in typeinfo name for khtml::TreeShared<DOM::NodeImpl> ()
from /opt/kde354/lib/libkhtml.so.4
#1 0xb5e17fc9 in khtml::TreeShared<DOM::NodeImpl>::removedLastRef (
this=0x88c1b20) at ../../khtml/misc/shared.h:57
#2 0xb5dac1e0 in khtml::TreeShared<DOM::NodeImpl>::deref (this=0x88c1b20)
at ../../khtml/misc/shared.h:63
#3 0xb601e84c in ~Node (this=0x87110fc) at dom_node.cpp:173
#4 0xb5f54099 in ~DOMNode (this=0x87110d0) at kjs_dom.cpp:108
#5 0xb5fa1ba3 in ~DOMElement (this=0x87110d0)
at ../../khtml/ecma/kjs_dom.h:141
#6 0xb5fa1c2f in ~HTMLElement (this=0x87110d0)
at ../../khtml/ecma/kjs_html.h:58
#7 0xb5b73da6 in KJS::Collector::collect () at collector.cpp:222
#8 0xb5b740b8 in KJS::Collector::allocate (s=44) at collector.cpp:85
#9 0xb5bb4a7b in KJS::ValueImp::operator new (s=44) at value.cpp:84
#10 0xb5b98237 in KJS::StringObjectImp::construct (this=0x838b088,
exec=0xbfd8568c, args=@0xbfd84f4c) at string_object.cpp:609
#11 0xb5ff8360 in KJS::Object::construct (this=0xbfd84f58, exec=0xbfd8568c,
args=@0xbfd84f4c) at ../../kjs/object.h:698
#12 0xb5ba30e3 in KJS::StringImp::toObject (this=0x866aeb8, exec=0xbfd8568c)
at internal.cpp:229
#13 0xb5bb4665 in KJS::ValueImp::dispatchToObject (this=0x866aeb8,
exec=0xbfd8568c) at value.cpp:209
khtml (jscript): [virtual KJS::Value KJS::DOMNamedNodesCollection::tryGet(KJS::ExecState*, const KJS::Identifier&) const] 1 ==15832== ==15832== Invalid read of size 4 ==15832== at 0x6A081A7: khtml::TreeShared<DOM::NodeImpl>::deref() (shared.h:61) ==15832== by 0x6C7A84B: DOM::Node::~Node() (dom_node.cpp:173) ==15832== by 0x6BB0098: KJS::DOMNode::~DOMNode() (kjs_dom.cpp:108) ==15832== by 0x6BFDBA2: KJS::DOMElement::~DOMElement() (kjs_dom.h:141) ==15832== by 0x6BFDC2E: KJS::HTMLElement::~HTMLElement() (kjs_html.h:58) ==15832== by 0x6D8DDA5: KJS::Collector::collect() (collector.cpp:222) ==15832== by 0x6D8E0B7: KJS::Collector::allocate(unsigned) (collector.cpp:85) ==15832== by 0x6DCEA7A: KJS::ValueImp::operator new(unsigned) (value.cpp:84) ==15832== by 0x6DCEF9C: KJS::String::String(KJS::UString const&) (value.cpp:335) ==15832== by 0x6DADCA8: KJS::StringProtoFuncImp::call(KJS::ExecState*, KJS::Object&, KJS::List const&) (string_object.cpp:209) ==15832== by 0x6DD121F: KJS::Object::call(KJS::ExecState*, KJS::Object&, KJS::List const&) (object.cpp:73) ==15832== by 0x6DD13F8: KJS::ObjectImp::defaultValue(KJS::ExecState*, KJS::Type) const (object.cpp:320) |