Bug 157957

Summary: konqueror crashes visiting http://www.rad.sik.si/ (different backtrace)
Product: [Applications] konqueror Reporter: Oliver Putz <Regnaron>
Component: generalAssignee: Konqueror Developers <konq-bugs>
Status: RESOLVED DUPLICATE    
Severity: crash    
Priority: NOR    
Version: unspecified   
Target Milestone: ---   
Platform: unspecified   
OS: Linux   
Latest Commit: Version Fixed In:
Sentry Crash Report:

Description Oliver Putz 2008-02-17 07:25:26 UTC 
Version:           4.00.62 (KDE 4.0.62 >= 20080213) (using 4.00.62 (KDE 4.0.62 >= 20080213), Gentoo)
Compiler:          i686-pc-linux-gnu-gcc
OS:                Linux (i686) release 2.6.23-gentoo-r6

I tried to reproduce bug #157929. Indeed, konqueror crashes for me on the given website (http://www.rad.sik.si/), but I get a completely different backtrace from the one in bug #157929, so I decided to open a new bug for this one. I use kdelibs r774814. Below you can find a backtrace of the crash as well as a Valgrind log.

Application: Konqueror (konqueror), signal SIGABRT
Using host libthread_db library "/lib/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread 0xb6432a10 (LWP 7666)]
[KCrash handler]
#6  0xffffe410 in __kernel_vsyscall ()
#7  0xb665e1f1 in *__GI_raise (sig=6)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#8  0xb665f9b8 in *__GI_abort () at abort.c:88
#9  0xb669ab78 in malloc_printerr (action=2, 
    str=0xb6746ee4 "free(): invalid pointer", ptr=0x1df2) at malloc.c:5892
#10 0xb669c7e5 in *__GI___libc_free (mem=0x847a790) at malloc.c:3586
#11 0xb684b011 in operator delete ()
   from /usr/lib/gcc/i686-pc-linux-gnu/4.1.2/libstdc++.so.6
#12 0xb684b06d in operator delete[] ()
   from /usr/lib/gcc/i686-pc-linux-gnu/4.1.2/libstdc++.so.6
#13 0xb4635887 in ~PNGLoader (this=0x84ac560)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs-9999.4/khtml/imload/decoders/pngloader.cpp:229
#14 0xb4630375 in khtmlImLoad::Image::processEOF (this=0x8675fe8)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs-9999.4/khtml/imload/image.cpp:208
#15 0xb45576a4 in khtml::CachedImage::data (this=0x82c4408, 
    _buffer=@0x8676754, eof=true)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs-9999.4/khtml/misc/loader.cpp:861
#16 0xb4556b79 in khtml::Loader::slotFinished (this=0x814cf50, job=0x866e208)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs-9999.4/khtml/misc/loader.cpp:1299
#17 0xb4556e61 in khtml::Loader::qt_metacall (this=0x814cf50, 
    _c=QMetaObject::InvokeMetaMethod, _id=3, _a=0xbfea87ac)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs_build/khtml/loader.moc:126
#18 0xb73501f4 in QMetaObject::activate (sender=0x866e208, 
    from_signal_index=7, to_signal_index=7, argv=<value optimized out>)
    at kernel/qobject.cpp:3081
#19 0xb7350d94 in QMetaObject::activate (sender=0x866e208, m=0xb7c573a8, 
    local_signal_index=3, argv=0xbfea87ac) at kernel/qobject.cpp:3140
#20 0xb7b55044 in KJob::result (this=0x866e208, _t1=0x866e208)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs_build/kdecore/kjob.moc:185
#21 0xb7b55582 in KJob::emitResult (this=0x866e208)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs-9999.4/kdecore/jobs/kjob.cpp:290
#22 0xb7d0e2d8 in KIO::SimpleJob::slotFinished (this=0x866e208)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs-9999.4/kio/kio/job.cpp:491
#23 0xb7d0e68a in KIO::TransferJob::slotFinished (this=0x866e208)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs-9999.4/kio/kio/job.cpp:961
#24 0xb7d15223 in KIO::TransferJob::qt_metacall (this=0x866e208, 
    _c=QMetaObject::InvokeMetaMethod, _id=47, _a=0xbfea8e34)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs_build/kio/jobclasses.moc:335
#25 0xb73501f4 in QMetaObject::activate (sender=0x83116e0, 
    from_signal_index=8, to_signal_index=8, argv=<value optimized out>)
    at kernel/qobject.cpp:3081
#26 0xb7350d94 in QMetaObject::activate (sender=0x83116e0, m=0xb7e81024, 
    local_signal_index=4, argv=0x0) at kernel/qobject.cpp:3140
#27 0xb7db6d76 in KIO::SlaveInterface::finished (this=0x83116e0)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs_build/kio/slaveinterface.moc:160
#28 0xb7db893a in KIO::SlaveInterface::dispatch (this=0x83116e0, _cmd=104, 
    rawdata=@0xbfea9014)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs-9999.4/kio/kio/slaveinterface.cpp:176
#29 0xb7db9596 in KIO::SlaveInterface::dispatch (this=0x83116e0)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs-9999.4/kio/kio/slaveinterface.cpp:90
#30 0xb7dabc07 in KIO::Slave::gotInput (this=0x83116e0)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs-9999.4/kio/kio/slave.cpp:319
#31 0xb7dad15d in KIO::Slave::qt_metacall (this=0x83116e0, 
    _c=QMetaObject::InvokeMetaMethod, _id=2, _a=0xbfea9534)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs_build/kio/slave.moc:74
#32 0xb73501f4 in QMetaObject::activate (sender=0x8358958, 
    from_signal_index=4, to_signal_index=4, argv=<value optimized out>)
    at kernel/qobject.cpp:3081
#33 0xb7350d94 in QMetaObject::activate (sender=0x8358958, m=0xb7e7df20, 
    local_signal_index=0, argv=0x0) at kernel/qobject.cpp:3140
#34 0xb7ce6b43 in KIO::Connection::readyRead (this=0x8358958)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs_build/kio/connection.moc:83
#35 0xb7ce79c6 in KIO::ConnectionPrivate::dequeue (this=0x83073c0)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs-9999.4/kio/kio/connection.cpp:82
#36 0xb7ce8775 in KIO::Connection::qt_metacall (this=0x8358958, 
    _c=QMetaObject::InvokeMetaMethod, _id=1, _a=0x865f190)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs_build/kio/connection.moc:71
#37 0xb734b2f9 in QMetaCallEvent::placeMetaCall (this=0x8301538, 
    object=0x8358958) at kernel/qobject.cpp:536
#38 0xb734e017 in QObject::event (this=0x8358958, e=0x1df2)
    at kernel/qobject.cpp:1122
#39 0xb69dde8a in QApplicationPrivate::notify_helper (this=0x8058cd0, 
    receiver=0x8358958, e=0x8301538) at kernel/qapplication.cpp:3556
#40 0xb69df77a in QApplication::notify (this=0xbfea9f48, receiver=0x8358958, 
    e=0x8301538) at kernel/qapplication.cpp:3115
#41 0xb791f8a3 in KApplication::notify (this=0xbfea9f48, receiver=0x8358958, 
    event=0x8301538)
    at /var/tmp/portage/kde-base/kdelibs-9999.4/work/kdelibs-9999.4/kdeui/kernel/kapplication.cpp:311
#42 0xb733cd7b in QCoreApplication::notifyInternal (this=0xbfea9f48, 
    receiver=0x8358958, event=0x8301538) at kernel/qcoreapplication.cpp:530
#43 0xb733e21a in QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, 
    event_type=0, data=0x804ce50) at kernel/qcoreapplication.h:200
#44 0xb7366905 in QEventDispatcherUNIX::processEvents (this=0x8058790, 
    flags=@0xbfea9c28) at kernel/qeventdispatcher_unix.cpp:858
#45 0xb6a67cce in QEventDispatcherX11::processEvents (this=0x8058790, 
    flags=@0xbfea9c54) at kernel/qeventdispatcher_x11.cpp:145
#46 0xb733c191 in QEventLoop::processEvents (this=0xbfea9cc0, 
    flags=@0xbfea9c88) at kernel/qeventloop.cpp:140
#47 0xb733c29a in QEventLoop::exec (this=0xbfea9cc0, flags=@0xbfea9cc8)
    at kernel/qeventloop.cpp:186
#48 0xb733e626 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:759
#49 0xb69dd487 in QApplication::exec () at kernel/qapplication.cpp:3053
#50 0xb7fc3a47 in kdemain (argc=4, argv=0xbfeaa2c4)
    at /var/tmp/portage/kde-base/kdebase-9999.4/work/kdebase-9999.4/apps/konqueror/src/konqmain.cpp:218
#51 0x080487e2 in main (argc=)
    at /var/tmp/portage/kde-base/kdebase-9999.4/work/kdebase_build/apps/konqueror/src/konqueror_dummy.cpp:3
#52 0xb664afdc in __libc_start_main (main=0x80487c0 <main>, argc=4, 
    ubp_av=0xbfeaa2c4, init=0x8048810 <__libc_csu_init>, 
    fini=0x8048800 <__libc_csu_fini>, rtld_fini=0xb7fe8100 <_dl_fini>, 
    stack_end=0xbfeaa2bc) at libc-start.c:229
#53 0x08048731 in _start ()
#0  0xffffe410 in __kernel_vsyscall ()


Valgrind log (seems to be somewhat buggy itself, hope it is helpful nonetheless):
==8111== Memcheck, a memory error detector.
==8111== Copyright (C) 2002-2007, and GNU GPL'd, by Julian Seward et al.
==8111== Using LibVEX rev 1732, a library for dynamic binary translation.
==8111== Copyright (C) 2004-2007, and GNU GPL'd, by OpenWorks LLP.
==8111== Using valgrind-3.2.3, a dynamic binary instrumentation framework.
==8111== Copyright (C) 2000-2007, and GNU GPL'd, by Julian Seward et al.
==8111== 
==8111== My PID = 8111, parent PID = 8103.  Prog and args are:
==8111==    konqueror
==8111==    http://www.rad.sik.si/
==8111== 
--8111-- 
--8111-- Command line
--8111--    konqueror
--8111--    http://www.rad.sik.si/
--8111-- Startup, with flags:
--8111--    --log-file=bugreports/konquerorWeirdValgrind
--8111--    -v
--8111-- Contents of /proc/version:
--8111--   Linux version 2.6.23-gentoo-r6 (root@Remus) (gcc version 4.1.2 20070214 ( (gdc 0.24, using dmd 1.020)) (Gentoo 4.1.2 p1.0.2)) #1 SMP PREEMPT Mon Feb 4 10:50:31 EST 2008
--8111-- Arch and hwcaps: X86, x86-sse1-sse2
--8111-- Page sizes: currently 4096, max supported 4096
--8111-- Valgrind library directory: /usr/lib/valgrind
--8111-- Reading syms from /lib/ld-2.6.1.so (0x4000000)
--8111-- Reading debug info from /usr/lib/debug/lib/ld-2.6.1.so.debug...
--8111-- Reading syms from /usr/kde/svn/bin/konqueror (0x8048000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/bin/konqueror.debug...
--8111-- Reading syms from /usr/lib/valgrind/x86-linux/memcheck (0x38000000)
--8111--    object doesn't have a symbol table
--8111--    object doesn't have a dynamic symbol table
--8111-- Reading suppressions file: /usr/lib/valgrind/default.supp
--8111-- REDIR: 0x4015330 (index) redirected to 0x3801D067 (???)
--8111-- Reading syms from /usr/lib/valgrind/x86-linux/vgpreload_core.so (0x401D000)
--8111--    object doesn't have a symbol table
--8111-- Reading syms from /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so (0x401F000)
--8111--    object doesn't have a symbol table
==8111== WARNING: new redirection conflicts with existing -- ignoring it
--8111--     new: 0x04015330 (index     ) R-> 0x04021F16 index
--8111-- REDIR: 0x40154D0 (strlen) redirected to 0x402204E (strlen)
--8111-- Reading syms from /usr/kde/svn/lib/libkdeinit4_konqueror.so (0x4024000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/libkdeinit4_konqueror.so.debug...
--8111-- Reading syms from /usr/kde/svn/lib/libkonquerorprivate.so.4.1.0 (0x40E8000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/libkonquerorprivate.so.4.1.0.debug...
--8111-- Reading syms from /usr/kde/svn/lib/libkonq.so.5.1.0 (0x40FC000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/libkonq.so.5.1.0.debug...
--8111-- Reading syms from /usr/kde/svn/lib/libkparts.so.4.1.0 (0x4136000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/libkparts.so.4.1.0.debug...
--8111-- Reading syms from /usr/kde/svn/lib/libkio.so.5.1.0 (0x4175000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/libkio.so.5.1.0.debug...
--8111-- Reading syms from /usr/kde/svn/lib/libkdecore.so.5.1.0 (0x439F000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/libkdecore.so.5.1.0.debug...
--8111-- Reading syms from /usr/kde/svn/lib/libkdeui.so.5.1.0 (0x4580000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/libkdeui.so.5.1.0.debug...
--8111-- Reading syms from /usr/lib/qt4/libQtSvg.so.4.3.3 (0x4883000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/qt4/libQtSvg.so.4.3.3.debug...
--8111-- Reading syms from /usr/lib/libSM.so.6.0.0 (0x4900000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/libSM.so.6.0.0.debug...
--8111-- Reading syms from /usr/lib/libICE.so.6.3.0 (0x4908000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/libICE.so.6.3.0.debug...
--8111-- Reading syms from /usr/lib/libX11.so.6.2.0 (0x491F000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/libX11.so.6.2.0.debug...
--8111-- Reading syms from /usr/lib/libXext.so.6.4.0 (0x49F3000)
--8111--    object doesn't have a symbol table
--8111-- Reading syms from /usr/lib/libXft.so.2.1.2 (0x49FE000)
--8111--    object doesn't have a symbol table
--8111-- Reading syms from /usr/lib/libXau.so.6.0.0 (0x4A0D000)
--8111--    object doesn't have a symbol table
--8111-- Reading syms from /usr/lib/libXdmcp.so.6.0.0 (0x4A10000)
--8111--    object doesn't have a symbol table
--8111-- Reading syms from /usr/lib/libXpm.so.4.11.0 (0x4A15000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/libXpm.so.4.11.0.debug...
--8111-- Reading syms from /usr/lib/libXtst.so.6.1.0 (0x4A25000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/libXtst.so.6.1.0.debug...
--8111-- Reading syms from /usr/lib/libXcursor.so.1.0.2 (0x4A2B000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/libXcursor.so.1.0.2.debug...
--8111-- Reading syms from /usr/lib/libXfixes.so.3.1.0 (0x4A34000)
--8111--    object doesn't have a symbol table
--8111-- Reading syms from /usr/lib/libstreamanalyzer.so.0.5.7 (0x4A38000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/libstreamanalyzer.so.0.5.7.debug...
--8111-- Reading syms from /usr/lib/libstreams.so.0.5.7 (0x4A9B000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/libstreams.so.0.5.7.debug...
--8111-- Reading syms from /usr/lib/qt4/libQtNetwork.so.4.3.3 (0x4AC8000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/qt4/libQtNetwork.so.4.3.3.debug...
--8111-- Reading syms from /lib/libz.so.1.2.3 (0x4B7B000)
--8111--    object doesn't have a symbol table
--8111-- Reading syms from /lib/libbz2.so.1.0.4 (0x4B8A000)
--8111--    object doesn't have a symbol table
--8111-- Reading syms from /lib/libresolv-2.6.1.so (0x4B97000)
--8111-- Reading debug info from /usr/lib/debug/lib/libresolv-2.6.1.so.debug...
--8111-- Reading syms from /usr/kde/svn/lib/libsolid.so.4.1.0 (0x4BA9000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/libsolid.so.4.1.0.debug...
--8111-- Reading syms from /usr/lib/qt4/libQtCore.so.4.3.3 (0x4C0C000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/qt4/libQtCore.so.4.3.3.debug...
--8111-- Reading syms from /lib/libpthread-2.6.1.so (0x4DC5000)
--8111-- Reading debug info from /usr/lib/debug/lib/libpthread-2.6.1.so.debug...
--8111-- Reading syms from /usr/lib/qt4/libQtDBus.so.4.3.3 (0x4DDD000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/qt4/libQtDBus.so.4.3.3.debug...
--8111-- Reading syms from /usr/lib/qt4/libQtXml.so.4.3.3 (0x4E49000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/qt4/libQtXml.so.4.3.3.debug...
--8111-- Reading syms from /usr/lib/qt4/libQtGui.so.4.3.3 (0x4EBA000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/qt4/libQtGui.so.4.3.3.debug...
--8111-- Reading syms from /lib/libacl.so.1.1.0 (0x5724000)
--8111--    object doesn't have a symbol table
--8111-- Reading syms from /lib/libattr.so.1.1.0 (0x572B000)
--8111--    object doesn't have a symbol table
--8111-- Reading syms from /usr/lib/libXrender.so.1.3.0 (0x5730000)
--8111--    object doesn't have a symbol table
--8111-- Reading syms from /usr/kde/svn/lib/libkutils.so.4.1.0 (0x5738000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/libkutils.so.4.1.0.debug...
--8111-- Reading syms from /usr/lib/gcc/i686-pc-linux-gnu/4.1.2/libstdc++.so.6.0.8 (0x577D000)
--8111--    object doesn't have a symbol table
--8111-- Reading syms from /lib/libm-2.6.1.so (0x5865000)
--8111-- Reading debug info from /usr/lib/debug/lib/libm-2.6.1.so.debug...
--8111-- Reading syms from /usr/lib/gcc/i686-pc-linux-gnu/4.1.2/libgcc_s.so.1 (0x588B000)
--8111--    object doesn't have a symbol table
--8111-- Reading syms from /lib/libc-2.6.1.so (0x5897000)
--8111-- Reading debug info from /usr/lib/debug/lib/libc-2.6.1.so.debug...
--8111-- Reading syms from /usr/lib/libpng12.so.0.22.0 (0x59C9000)
--8111--    object doesn't have a symbol table
--8111-- Reading syms from /usr/lib/libXrandr.so.2.1.0 (0x59E7000)
--8111--    object doesn't have a symbol table
--8111-- Reading syms from /usr/lib/libfreetype.so.6.3.16 (0x59ED000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/libfreetype.so.6.3.16.debug...
--8111-- Reading syms from /usr/lib/libfontconfig.so.1.3.0 (0x5A5F000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/libfontconfig.so.1.3.0.debug...
--8111-- Reading syms from /lib/librt-2.6.1.so (0x5A86000)
--8111-- Reading debug info from /usr/lib/debug/lib/librt-2.6.1.so.debug...
--8111-- Reading syms from /lib/libdl-2.6.1.so (0x5A8F000)
--8111-- Reading debug info from /usr/lib/debug/lib/libdl-2.6.1.so.debug...
--8111-- Reading syms from /usr/lib/libxml2.so.2.6.30 (0x5A93000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/libxml2.so.2.6.30.debug...
--8111-- Reading syms from /usr/lib/libdbus-1.so.3.2.0 (0x5B83000)
--8111--    object doesn't have a symbol table
--8111-- Reading syms from /usr/lib/libexpat.so.1.5.2 (0x5BAE000)
--8111--    object doesn't have a symbol table
==8111== Conditional jump or move depends on uninitialised value(s)
==8111==    at 0x400A9B5: _dl_relocate_object (do-rel.h:65)
==8111==    by 0x400454C: dl_main (rtld.c:2214)
==8111==    by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239)
==8111==    by 0x400124E: _dl_start (rtld.c:327)
==8111==    by 0x40008A6: (within /lib/ld-2.6.1.so)
==8111== 
==8111== Conditional jump or move depends on uninitialised value(s)
==8111==    at 0x400A9BD: _dl_relocate_object (do-rel.h:68)
==8111==    by 0x400454C: dl_main (rtld.c:2214)
==8111==    by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239)
==8111==    by 0x400124E: _dl_start (rtld.c:327)
==8111==    by 0x40008A6: (within /lib/ld-2.6.1.so)
==8111== 
==8111== Conditional jump or move depends on uninitialised value(s)
==8111==    at 0x400B053: _dl_relocate_object (do-rel.h:104)
==8111==    by 0x400454C: dl_main (rtld.c:2214)
==8111==    by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239)
==8111==    by 0x400124E: _dl_start (rtld.c:327)
==8111==    by 0x40008A6: (within /lib/ld-2.6.1.so)
==8111== 
==8111== Conditional jump or move depends on uninitialised value(s)
==8111==    at 0x400AAF3: _dl_relocate_object (do-rel.h:117)
==8111==    by 0x400454C: dl_main (rtld.c:2214)
==8111==    by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239)
==8111==    by 0x400124E: _dl_start (rtld.c:327)
==8111==    by 0x40008A6: (within /lib/ld-2.6.1.so)
==8111== 
==8111== Conditional jump or move depends on uninitialised value(s)
==8111==    at 0x400A9B5: _dl_relocate_object (do-rel.h:65)
==8111==    by 0x4004169: dl_main (rtld.c:2284)
==8111==    by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239)
==8111==    by 0x400124E: _dl_start (rtld.c:327)
==8111==    by 0x40008A6: (within /lib/ld-2.6.1.so)
==8111== 
==8111== Conditional jump or move depends on uninitialised value(s)
==8111==    at 0x400A9BD: _dl_relocate_object (do-rel.h:68)
==8111==    by 0x4004169: dl_main (rtld.c:2284)
==8111==    by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239)
==8111==    by 0x400124E: _dl_start (rtld.c:327)
==8111==    by 0x40008A6: (within /lib/ld-2.6.1.so)
==8111== 
==8111== Conditional jump or move depends on uninitialised value(s)
==8111==    at 0x400AAF3: _dl_relocate_object (do-rel.h:117)
==8111==    by 0x4004169: dl_main (rtld.c:2284)
==8111==    by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239)
==8111==    by 0x400124E: _dl_start (rtld.c:327)
==8111==    by 0x40008A6: (within /lib/ld-2.6.1.so)
--8111-- REDIR: 0x5904980 (memset) redirected to 0x40226B8 (memset)
--8111-- REDIR: 0x5904E20 (memcpy) redirected to 0x4022241 (memcpy)
--8111-- REDIR: 0x5903AB0 (rindex) redirected to 0x4021E66 (rindex)
--8111-- REDIR: 0x59036F0 (strlen) redirected to 0x402203B (strlen)
--8111-- REDIR: 0x5831540 (operator new(unsigned)) redirected to 0x4021986 (operator new(unsigned))
--8111-- REDIR: 0x5900400 (malloc) redirected to 0x4021303 (malloc)
--8111-- REDIR: 0x5900810 (realloc) redirected to 0x40213A5 (realloc)
--8111-- REDIR: 0x5904910 (memmove) redirected to 0x40226D5 (memmove)
--8111-- REDIR: 0x5900080 (calloc) redirected to 0x4020754 (calloc)
--8111-- REDIR: 0x5903900 (strncmp) redirected to 0x402214E (strncmp)
--8111-- REDIR: 0x59031A0 (strcmp) redirected to 0x4022193 (strcmp)
--8111-- REDIR: 0x5831680 (operator new[](unsigned)) redirected to 0x40216A2 (operator new[](unsigned))
--8111-- REDIR: 0x58FE7B0 (free) redirected to 0x4020F6B (free)
--8111-- REDIR: 0x582FFF0 (operator delete(void*)) redirected to 0x4020CC3 (operator delete(void*))
--8111-- REDIR: 0x5903030 (index) redirected to 0x4021EFC (index)
--8111-- REDIR: 0x59049E0 (mempcpy) redirected to 0x4022740 (mempcpy)
--8111-- Reading syms from /usr/lib/gconv/UTF-16.so (0x48E1000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/gconv/UTF-16.so.debug...
--8111-- REDIR: 0x5903210 (strcpy) redirected to 0x4022074 (strcpy)
--8111-- REDIR: 0x5830050 (operator delete[](void*)) redirected to 0x4020993 (operator delete[](void*))
--8111-- REDIR: 0x5902E80 (strcat) redirected to 0x4021F4A (strcat)
--8111-- REDIR: 0x5904620 (bcmp) redirected to 0x4022543 (bcmp)
--8111-- REDIR: 0x5903A00 (strncpy) redirected to 0x40220CE (strncpy)
--8111-- REDIR: 0x5904480 (memchr) redirected to 0x402221D (memchr)
--8111-- memcheck GC: 1024 nodes, 1024 survivors (100.0%)
--8111-- memcheck GC: increase table size to 2048
--8111-- memcheck GC: 2048 nodes, 2048 survivors (100.0%)
--8111-- memcheck GC: increase table size to 4096
--8111-- memcheck GC: 4096 nodes, 3452 survivors ( 84.2%)
--8111-- memcheck GC: increase table size to 8192
--8111-- REDIR: 0x59037A0 (strnlen) redirected to 0x4022021 (strnlen)
--8111-- Reading syms from /usr/kde/svn/lib/kde4/plugins/styles/oxygen.so (0x6325000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/plugins/styles/oxygen.so.debug...
--8111-- memcheck GC: 8192 nodes, 7517 survivors ( 91.7%)
--8111-- memcheck GC: increase table size to 16384
--8111-- REDIR: 0x59056E0 (rawmemchr) redirected to 0x402272E (rawmemchr)
--8111-- REDIR: 0x5904B70 (stpcpy) redirected to 0x4022595 (stpcpy)
--8111-- Reading syms from /usr/kde/svn/lib/kde4/libkshorturifilter.so (0x7BEB000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/libkshorturifilter.so.debug...
--8111-- REDIR: 0x40158A0 (stpcpy) redirected to 0x40225F6 (stpcpy)
--8111-- Reading syms from /usr/kde/svn/lib/kde4/libkurisearchfilter.so (0x7BF8000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/libkurisearchfilter.so.debug...
--8111-- Reading syms from /usr/lib/qt4/libQt3Support.so.4.3.3 (0x7C14000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/qt4/libQt3Support.so.4.3.3.debug...
--8111-- Reading syms from /usr/kde/svn/lib/libkpty.so.4.1.0 (0x7F17000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/libkpty.so.4.1.0.debug...
--8111-- Reading syms from /usr/kde/svn/lib/libkfile.so.4.1.0 (0x7F20000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/libkfile.so.4.1.0.debug...
--8111-- Reading syms from /usr/kde/svn/lib/libkde3support.so.4.1.0 (0x884B000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/libkde3support.so.4.1.0.debug...
--8111-- Reading syms from /lib/libutil-2.6.1.so (0x7FB9000)
--8111-- Reading debug info from /usr/lib/debug/lib/libutil-2.6.1.so.debug...
--8111-- Reading syms from /usr/lib/libutempter.so.1.1.5 (0x7FBD000)
--8111--    object doesn't have a symbol table
--8111-- Reading syms from /usr/lib/qt4/libQtSql.so.4.3.3 (0x7FBF000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/qt4/libQtSql.so.4.3.3.debug...
--8111-- Reading syms from /usr/kde/svn/lib/kde4/liblocaldomainurifilter.so (0x7F93000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/liblocaldomainurifilter.so.debug...
--8111-- Reading syms from /lib/libnsl-2.6.1.so (0x7F9A000)
--8111-- Reading debug info from /usr/lib/debug/lib/libnsl-2.6.1.so.debug...
--8111-- Reading syms from /usr/kde/svn/lib/kde4/libkuriikwsfilter.so (0x7FFB000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/libkuriikwsfilter.so.debug...
--8111-- Reading syms from /usr/kde/svn/lib/kde4/libfixhosturifilter.so (0x7FB1000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/libfixhosturifilter.so.debug...
--8111-- memcheck GC: 16384 nodes, 15813 survivors ( 96.5%)
--8111-- memcheck GC: increase table size to 32768
--8111-- memcheck GC: 32768 nodes, 29211 survivors ( 89.1%)
--8111-- memcheck GC: increase table size to 65536
--8111-- memcheck GC: 65536 nodes, 57715 survivors ( 88.0%)
--8111-- memcheck GC: increase table size to 131072
--8111-- Reading syms from /usr/lib/qt4/plugins/imageformats/libqgif.so (0x800E000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/qt4/plugins/imageformats/libqgif.so.debug...
--8111-- Reading syms from /usr/lib/qt4/plugins/imageformats/libqjpeg.so (0x8015000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/qt4/plugins/imageformats/libqjpeg.so.debug...
--8111-- Reading syms from /usr/lib/libjpeg.so.62.0.0 (0x922E000)
--8111--    object doesn't have a symbol table
--8111-- Reading syms from /usr/lib/qt4/plugins/imageformats/libqmng.so (0x9247000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/qt4/plugins/imageformats/libqmng.so.debug...
--8111-- Reading syms from /usr/lib/qt4/plugins/imageformats/libqsvg.so (0x8020000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/qt4/plugins/imageformats/libqsvg.so.debug...
--8111-- Reading syms from /usr/lib/qt4/plugins/imageformats/libqtiff.so (0x9296000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/qt4/plugins/imageformats/libqtiff.so.debug...
--8111-- Reading syms from /usr/kde/svn/lib/kde4/plugins/imageformats/kimg_dds.so (0x8025000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/plugins/imageformats/kimg_dds.so.debug...
--8111-- Reading syms from /usr/kde/svn/lib/kde4/plugins/imageformats/kimg_eps.so (0x802E000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/plugins/imageformats/kimg_eps.so.debug...
--8111-- Reading syms from /usr/kde/svn/lib/kde4/plugins/imageformats/kimg_ico.so (0x8037000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/plugins/imageformats/kimg_ico.so.debug...
--8111-- Reading syms from /usr/kde/svn/lib/kde4/plugins/imageformats/kimg_pcx.so (0x92E6000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/plugins/imageformats/kimg_pcx.so.debug...
--8111-- Reading syms from /usr/kde/svn/lib/kde4/plugins/imageformats/kimg_psd.so (0x92F0000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/plugins/imageformats/kimg_psd.so.debug...
--8111-- Reading syms from /usr/kde/svn/lib/kde4/plugins/imageformats/kimg_rgb.so (0x92F7000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/plugins/imageformats/kimg_rgb.so.debug...
--8111-- Reading syms from /usr/kde/svn/lib/kde4/plugins/imageformats/kimg_tga.so (0x9303000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/plugins/imageformats/kimg_tga.so.debug...
--8111-- Reading syms from /usr/kde/svn/lib/kde4/plugins/imageformats/kimg_xcf.so (0x930B000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/plugins/imageformats/kimg_xcf.so.debug...
--8111-- Reading syms from /usr/kde/svn/lib/kde4/plugins/imageformats/kimg_xview.so (0x9320000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/plugins/imageformats/kimg_xview.so.debug...
--8111-- REDIR: 0x59057B0 (strchrnul) redirected to 0x4022716 (strchrnul)
--8111-- Reading syms from /lib/libnss_compat-2.6.1.so (0x934C000)
--8111-- Reading debug info from /usr/lib/debug/lib/libnss_compat-2.6.1.so.debug...
--8111-- Reading syms from /lib/libnss_nis-2.6.1.so (0x9354000)
--8111-- Reading debug info from /usr/lib/debug/lib/libnss_nis-2.6.1.so.debug...
--8111-- Reading syms from /lib/libnss_files-2.6.1.so (0x935E000)
--8111-- Reading debug info from /usr/lib/debug/lib/libnss_files-2.6.1.so.debug...
--8111-- Reading syms from /usr/kde/svn/lib/kde4/konq_aboutpage.so (0x9326000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/konq_aboutpage.so.debug...
--8111-- Reading syms from /usr/kde/svn/lib/libktexteditor.so.4.1.0 (0x9368000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/libktexteditor.so.4.1.0.debug...
--8111-- Reading syms from /usr/kde/svn/lib/libkjs.so.4.1.0 (0x9396000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/libkjs.so.4.1.0.debug...
--8111-- Reading syms from /usr/kde/svn/lib/libphonon.so.4.2.0 (0x943E000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/libphonon.so.4.2.0.debug...
--8111-- Reading syms from /usr/lib/libgif.so.4.1.6 (0x9339000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/libgif.so.4.1.6.debug...
--8111-- Reading syms from /usr/kde/svn/lib/libkhtml.so.5.1.0 (0x94A5000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/libkhtml.so.5.1.0.debug...
--8111-- Reading syms from /usr/lib/libpcre.so.0.0.1 (0x9932000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/libpcre.so.0.0.1.debug...
--8111-- Reading syms from /usr/lib/libpcreposix.so.0.0.0 (0x9341000)
--8111-- Reading debug info from /usr/lib/debug/usr/lib/libpcreposix.so.0.0.0.debug...
--8111-- Reading syms from /usr/kde/svn/lib/kde4/khtml_kget.so (0x947F000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/khtml_kget.so.debug...
--8111-- Reading syms from /usr/kde/svn/lib/kde4/libkhtmlkttsdplugin.so (0x9344000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/libkhtmlkttsdplugin.so.debug...
==8111== 
==8111== Conditional jump or move depends on uninitialised value(s)
==8111==    at 0x4B7E293: (within /lib/libz.so.1.2.3)
==8111== 
==8111== Conditional jump or move depends on uninitialised value(s)
==8111==    at 0x4B7E29E: (within /lib/libz.so.1.2.3)
==8111== 
==8111== Conditional jump or move depends on uninitialised value(s)
==8111==    at 0x4B7E2A9: (within /lib/libz.so.1.2.3)
==8111== 
==8111== Conditional jump or move depends on uninitialised value(s)
==8111==    at 0x4B7E25C: (within /lib/libz.so.1.2.3)
==8111== 
==8111== Conditional jump or move depends on uninitialised value(s)
==8111==    at 0x4B7E267: (within /lib/libz.so.1.2.3)
==8111== 
==8111== Conditional jump or move depends on uninitialised value(s)
==8111==    at 0x4B7E272: (within /lib/libz.so.1.2.3)
==8111== 
==8111== Conditional jump or move depends on uninitialised value(s)
==8111==    at 0x4B7E27D: (within /lib/libz.so.1.2.3)
==8111== 
==8111== Conditional jump or move depends on uninitialised value(s)
==8111==    at 0x4B7E288: (within /lib/libz.so.1.2.3)
--8111-- Reading syms from /usr/kde/svn/lib/kde4/libkhtmlpart.so (0x9493000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/libkhtmlpart.so.debug...
--8111-- memcheck GC: 131072 nodes, 119349 survivors ( 91.0%)
--8111-- memcheck GC: increase table size to 262144
--8111-- Reading syms from /usr/kde/svn/lib/kde4/katepart.so (0xADEA000)
--8111-- Reading debug info from /usr/lib/debug/usr/kde/svn/lib/kde4/katepart.so.debug...
--8111-- memcheck GC: 262144 nodes, 238298 survivors ( 90.9%)
--8111-- memcheck GC: increase table size to 524288
==8111== 
==8111== Invalid write of size 1
==8111==    at 0x40222FA: memcpy (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==8111==    by 0x59D0316: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E0067: png_progressive_combine_row (in /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x98099E1: khtmlImLoad::PNGLoader::haveRow(unsigned, int, unsigned char*) (pngloader.cpp:196)
==8111==    by 0x9809A54: khtmlImLoad::PNGLoader::dispHaveRow(png_struct_def*, unsigned char*, unsigned long, int) (pngloader.cpp:71)
==8111==    by 0x59DFFC9: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E072F: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E0BC6: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E0D57: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1B52: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1BBA: png_process_data (in /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x980983A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254)
==8111==  Address 0x5C027D4 is 0 bytes after a block of size 100 alloc'd
==8111==    at 0x402171D: operator new[](unsigned) (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==8111==    by 0x9809C1E: khtmlImLoad::PNGLoader::haveInfo() (pngloader.cpp:176)
==8111==    by 0x9809CBF: khtmlImLoad::PNGLoader::dispHaveInfo(png_struct_def*, png_info_struct*) (pngloader.cpp:66)
==8111==    by 0x59DFF7D: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1641: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1B44: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1BBA: png_process_data (in /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x980983A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254)
==8111==    by 0x9804FFF: khtmlImLoad::Image::processData(unsigned char*, int) (image.cpp:150)
==8111==    by 0x972B68A: khtml::CachedImage::data(QBuffer&, bool) (loader.cpp:856)
==8111==    by 0x9728FF0: khtml::Loader::slotData(KIO::Job*, QByteArray const&) (loader.cpp:1360)
==8111==    by 0x972AE80: khtml::Loader::qt_metacall(QMetaObject::Call, int, void**) (loader.moc:127)
==8111== 
==8111== Invalid write of size 1
==8111==    at 0x40222FF: memcpy (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==8111==    by 0x59D0316: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E0067: png_progressive_combine_row (in /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x98099E1: khtmlImLoad::PNGLoader::haveRow(unsigned, int, unsigned char*) (pngloader.cpp:196)
==8111==    by 0x9809A54: khtmlImLoad::PNGLoader::dispHaveRow(png_struct_def*, unsigned char*, unsigned long, int) (pngloader.cpp:71)
==8111==    by 0x59DFFC9: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E072F: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E0BC6: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E0D57: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1B52: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1BBA: png_process_data (in /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x980983A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254)
==8111==  Address 0x5C027D5 is 1 bytes after a block of size 100 alloc'd
==8111==    at 0x402171D: operator new[](unsigned) (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==8111==    by 0x9809C1E: khtmlImLoad::PNGLoader::haveInfo() (pngloader.cpp:176)
==8111==    by 0x9809CBF: khtmlImLoad::PNGLoader::dispHaveInfo(png_struct_def*, png_info_struct*) (pngloader.cpp:66)
==8111==    by 0x59DFF7D: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1641: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1B44: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1BBA: png_process_data (in /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x980983A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254)
==8111==    by 0x9804FFF: khtmlImLoad::Image::processData(unsigned char*, int) (image.cpp:150)
==8111==    by 0x972B68A: khtml::CachedImage::data(QBuffer&, bool) (loader.cpp:856)
==8111==    by 0x9728FF0: khtml::Loader::slotData(KIO::Job*, QByteArray const&) (loader.cpp:1360)
==8111==    by 0x972AE80: khtml::Loader::qt_metacall(QMetaObject::Call, int, void**) (loader.moc:127)
==8111== 
==8111== Invalid write of size 1
==8111==    at 0x4022305: memcpy (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==8111==    by 0x59D0316: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E0067: png_progressive_combine_row (in /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x98099E1: khtmlImLoad::PNGLoader::haveRow(unsigned, int, unsigned char*) (pngloader.cpp:196)
==8111==    by 0x9809A54: khtmlImLoad::PNGLoader::dispHaveRow(png_struct_def*, unsigned char*, unsigned long, int) (pngloader.cpp:71)
==8111==    by 0x59DFFC9: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E072F: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E0BC6: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E0D57: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1B52: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1BBA: png_process_data (in /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x980983A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254)
==8111==  Address 0x5C027D6 is 2 bytes after a block of size 100 alloc'd
==8111==    at 0x402171D: operator new[](unsigned) (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==8111==    by 0x9809C1E: khtmlImLoad::PNGLoader::haveInfo() (pngloader.cpp:176)
==8111==    by 0x9809CBF: khtmlImLoad::PNGLoader::dispHaveInfo(png_struct_def*, png_info_struct*) (pngloader.cpp:66)
==8111==    by 0x59DFF7D: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1641: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1B44: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1BBA: png_process_data (in /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x980983A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254)
==8111==    by 0x9804FFF: khtmlImLoad::Image::processData(unsigned char*, int) (image.cpp:150)
==8111==    by 0x972B68A: khtml::CachedImage::data(QBuffer&, bool) (loader.cpp:856)
==8111==    by 0x9728FF0: khtml::Loader::slotData(KIO::Job*, QByteArray const&) (loader.cpp:1360)
==8111==    by 0x972AE80: khtml::Loader::qt_metacall(QMetaObject::Call, int, void**) (loader.moc:127)
==8111== 
==8111== Invalid write of size 1
==8111==    at 0x402230E: memcpy (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==8111==    by 0x59D0316: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E0067: png_progressive_combine_row (in /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x98099E1: khtmlImLoad::PNGLoader::haveRow(unsigned, int, unsigned char*) (pngloader.cpp:196)
==8111==    by 0x9809A54: khtmlImLoad::PNGLoader::dispHaveRow(png_struct_def*, unsigned char*, unsigned long, int) (pngloader.cpp:71)
==8111==    by 0x59DFFC9: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E072F: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E0BC6: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E0D57: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1B52: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1BBA: png_process_data (in /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x980983A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254)
==8111==  Address 0x5C027D7 is 3 bytes after a block of size 100 alloc'd
==8111==    at 0x402171D: operator new[](unsigned) (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==8111==    by 0x9809C1E: khtmlImLoad::PNGLoader::haveInfo() (pngloader.cpp:176)
==8111==    by 0x9809CBF: khtmlImLoad::PNGLoader::dispHaveInfo(png_struct_def*, png_info_struct*) (pngloader.cpp:66)
==8111==    by 0x59DFF7D: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1641: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1B44: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1BBA: png_process_data (in /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x980983A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254)
==8111==    by 0x9804FFF: khtmlImLoad::Image::processData(unsigned char*, int) (image.cpp:150)
==8111==    by 0x972B68A: khtml::CachedImage::data(QBuffer&, bool) (loader.cpp:856)
==8111==    by 0x9728FF0: khtml::Loader::slotData(KIO::Job*, QByteArray const&) (loader.cpp:1360)
==8111==    by 0x972AE80: khtml::Loader::qt_metacall(QMetaObject::Call, int, void**) (loader.moc:127)
==8111== 
==8111== Invalid write of size 1
==8111==    at 0x402231E: memcpy (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==8111==    by 0x59D0595: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E0067: png_progressive_combine_row (in /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x98099E1: khtmlImLoad::PNGLoader::haveRow(unsigned, int, unsigned char*) (pngloader.cpp:196)
==8111==    by 0x9809A54: khtmlImLoad::PNGLoader::dispHaveRow(png_struct_def*, unsigned char*, unsigned long, int) (pngloader.cpp:71)
==8111==    by 0x59DFFC9: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E07EB: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E0BC6: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E0D57: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1B52: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1BBA: png_process_data (in /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x980983A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254)
==8111==  Address 0x5C027D8 is 4 bytes after a block of size 100 alloc'd
==8111==    at 0x402171D: operator new[](unsigned) (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==8111==    by 0x9809C1E: khtmlImLoad::PNGLoader::haveInfo() (pngloader.cpp:176)
==8111==    by 0x9809CBF: khtmlImLoad::PNGLoader::dispHaveInfo(png_struct_def*, png_info_struct*) (pngloader.cpp:66)
==8111==    by 0x59DFF7D: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1641: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1B44: (within /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x59E1BBA: png_process_data (in /usr/lib/libpng12.so.0.22.0)
==8111==    by 0x980983A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254)
==8111==    by 0x9804FFF: khtmlImLoad::Image::processData(unsigned char*, int) (image.cpp:150)
==8111==    by 0x972B68A: khtml::CachedImage::data(QBuffer&, bool) (loader.cpp:856)
==8111==    by 0x9728FF0: khtml::Loader::slotData(KIO::Job*, QByteArray const&) (loader.cpp:1360)
==8111==    by 0x972AE80: khtml::Loader::qt_metacall(QMetaObject::Call, int, void**) (loader.moc:127)

valgrind: m_mallocfree.c:194 (get_bszB_as_is): Assertion 'bszB_lo == bszB_hi' failed.
valgrind: Heap block lo/hi size mismatch: lo = 4325442, hi = 0.
Probably caused by overrunning/underrunning a heap block's bounds.

==8111==    at 0x38010D37: (within /usr/lib/valgrind/x86-linux/memcheck)
==8111==    by 0x38010F49: (within /usr/lib/valgrind/x86-linux/memcheck)
==8111==    by 0x38016AE6: (within /usr/lib/valgrind/x86-linux/memcheck)
==8111==    by 0x38016B2A: (within /usr/lib/valgrind/x86-linux/memcheck)
==8111==    by 0x380172B6: (within /usr/lib/valgrind/x86-linux/memcheck)
==8111==    by 0x38027975: (within /usr/lib/valgrind/x86-linux/memcheck)
==8111==    by 0x38001340: (within /usr/lib/valgrind/x86-linux/memcheck)
==8111==    by 0x380015ED: (within /usr/lib/valgrind/x86-linux/memcheck)
==8111==    by 0x38027E3C: (within /usr/lib/valgrind/x86-linux/memcheck)
==8111==    by 0x38029093: (within /usr/lib/valgrind/x86-linux/memcheck)
==8111==    by 0x38040938: (within /usr/lib/valgrind/x86-linux/memcheck)

sched status:
  running_tid=1

Thread 1: status = VgTs_Runnable
==8111==    at 0x4020FE6: free (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==8111==    by 0x4C3DF7C: qFree(void*) (qglobal.cpp:1965)
==8111==    by 0x505D1FC: QVector<QPointF>::free(QVectorTypedData<QPointF>*) (qvector.h:406)
==8111==    by 0x5146F93: QX11PaintEngine::updateState(QPaintEngineState const&) (qvector.h:103)
==8111==    by 0x50A98C9: QPainterPrivate::updateState(QPainterState*) (qpainter.cpp:600)
==8111==    by 0x50AB049: QPainter::setClipRect(QRect const&, Qt::ClipOperation) (qpainter.cpp:1984)
==8111==    by 0x95726AD: KHTMLView::paintEvent(QPaintEvent*) (khtmlview.cpp:847)
==8111==    by 0x50114E2: QWidget::event(QEvent*) (qwidget.cpp:6270)
==8111==    by 0x5354072: QFrame::event(QEvent*) (qframe.cpp:655)
==8111==    by 0x956636E: KHTMLView::widgetEvent(QEvent*) (khtmlview.cpp:2277)
==8111==    by 0x95694AD: KHTMLView::eventFilter(QObject*, QEvent*) (khtmlview.cpp:2139)
==8111==    by 0x4FBED9A: QApplicationPrivate::notify_helper(QObject*, QEvent*) (qapplication.cpp:3548)
==8111==    by 0x4FC06DE: QApplication::notify(QObject*, QEvent*) (qapplication.cpp:3115)
==8111==    by 0x47258A2: KApplication::notify(QObject*, QEvent*) (kapplication.cpp:311)
==8111==    by 0x4D10D7A: QCoreApplication::notifyInternal(QObject*, QEvent*) (qcoreapplication.cpp:530)
==8111==    by 0x501748D: qt_sendSpontaneousEvent(QObject*, QEvent*) (qcoreapplication.h:203)
==8111==    by 0x5150855: QWidgetPrivate::drawWidget(QPaintDevice*, QRegion const&, QPoint const&, int) (qbackingstore.cpp:1210)
==8111==    by 0x5150F4A: QWidgetBackingStore::paintSiblingsRecursive(QPaintDevice*, QList<QObject*> const&, int, QRegion const&, QPoint const&, int) (qbackingstore.cpp:1113)
==8111==    by 0x51503D6: QWidgetPrivate::drawWidget(QPaintDevice*, QRegion const&, QPoint const&, int) (qbackingstore.cpp:1246)
==8111==    by 0x5150F4A: QWidgetBackingStore::paintSiblingsRecursive(QPaintDevice*, QList<QObject*> const&, int, QRegion const&, QPoint const&, int) (qbackingstore.cpp:1113)
==8111==    by 0x51503D6: QWidgetPrivate::drawWidget(QPaintDevice*, QRegion const&, QPoint const&, int) (qbackingstore.cpp:1246)
==8111==    by 0x5150F4A: QWidgetBackingStore::paintSiblingsRecursive(QPaintDevice*, QList<QObject*> const&, int, QRegion const&, QPoint const&, int) (qbackingstore.cpp:1113)
==8111==    by 0x51503D6: QWidgetPrivate::drawWidget(QPaintDevice*, QRegion const&, QPoint const&, int) (qbackingstore.cpp:1246)
==8111==    by 0x5150F4A: QWidgetBackingStore::paintSiblingsRecursive(QPaintDevice*, QList<QObject*> const&, int, QRegion const&, QPoint const&, int) (qbackingstore.cpp:1113)
==8111==    by 0x51503D6: QWidgetPrivate::drawWidget(QPaintDevice*, QRegion const&, QPoint const&, int) (qbackingstore.cpp:1246)
==8111==    by 0x5150F4A: QWidgetBackingStore::paintSiblingsRecursive(QPaintDevice*, QList<QObject*> const&, int, QRegion const&, QPoint const&, int) (qbackingstore.cpp:1113)
==8111==    by 0x51503D6: QWidgetPrivate::drawWidget(QPaintDevice*, QRegion const&, QPoint const&, int) (qbackingstore.cpp:1246)
==8111==    by 0x5150F4A: QWidgetBackingStore::paintSiblingsRecursive(QPaintDevice*, QList<QObject*> const&, int, QRegion const&, QPoint const&, int) (qbackingstore.cpp:1113)
==8111==    by 0x51503D6: QWidgetPrivate::drawWidget(QPaintDevice*, QRegion const&, QPoint const&, int) (qbackingstore.cpp:1246)
==8111==    by 0x51514A1: QWidgetBackingStore::cleanRegion(QRegion const&, QWidget*, bool) (qbackingstore.cpp:1012)
==8111==    by 0x5151D7E: QWidget::repaint(QRegion const&) (qbackingstore.cpp:1280)
==8111==    by 0x5008FFE: QWidget::repaint(QRect const&) (qwidget.cpp:7844)
==8111==    by 0x50090FE: QWidget::repaint(int, int, int, int) (qwidget.cpp:7834)
==8111==    by 0x956925C: KHTMLView::repaintContents(int, int, int, int) (khtmlview.cpp:755)
==8111==    by 0x9569AE5: KHTMLView::repaintContents(QRect const&) (khtmlview.cpp:760)
==8111==    by 0x9571D35: KHTMLView::timerEvent(QTimerEvent*) (khtmlview.cpp:3925)
==8111==    by 0x4D22268: QObject::event(QEvent*) (qobject.cpp:1086)
==8111==    by 0x5010FE1: QWidget::event(QEvent*) (qwidget.cpp:6510)
==8111==    by 0x5354072: QFrame::event(QEvent*) (qframe.cpp:655)
==8111==    by 0x53EDA9E: QAbstractScrollArea::event(QEvent*) (qabstractscrollarea.cpp:880)
==8111==    by 0x53F1CEE: QScrollArea::event(QEvent*) (qscrollarea.cpp:285)
==8111==    by 0x956FB78: KHTMLView::event(QEvent*) (khtmlview.cpp:496)
==8111==    by 0x4FBEE89: QApplicationPrivate::notify_helper(QObject*, QEvent*) (qapplication.cpp:3556)
==8111==    by 0x4FC06DE: QApplication::notify(QObject*, QEvent*) (qapplication.cpp:3115)
==8111==    by 0x47258A2: KApplication::notify(QObject*, QEvent*) (kapplication.cpp:311)
==8111==    by 0x4D10D7A: QCoreApplication::notifyInternal(QObject*, QEvent*) (qcoreapplication.cpp:530)
==8111==    by 0x4D39EFA: QTimerInfoList::activateTimers() (qcoreapplication.h:200)
==8111==    by 0x4D39FD0: QEventDispatcherUNIX::activateTimers() (qeventdispatcher_unix.cpp:828)
==8111==    by 0x4D3A9AA: QEventDispatcherUNIX::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (qeventdispatcher_unix.cpp:890)
==8111==    by 0x5048CCD: QEventDispatcherX11::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (qeventdispatcher_x11.cpp:145)
==8111==    by 0x4D10190: QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (qeventloop.cpp:140)
==8111==    by 0x4D10299: QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) (qeventloop.cpp:186)
==8111==    by 0x4D12625: QCoreApplication::exec() (qcoreapplication.cpp:759)
==8111==    by 0x4FBE486: QApplication::exec() (qapplication.cpp:3053)
==8111==    by 0x40D2A46: kdemain (konqmain.cpp:218)
==8111==    by 0x80487E1: main (konqueror_dummy.cpp:3)


Note: see also the FAQ.txt in the source distribution.
It contains workarounds to several common problems.

If that doesn't help, please report this bug to: www.valgrind.org

In the bug report, send all the above text, the valgrind
version, and what Linux distro you are using.  Thanks.
Comment 1 Oliver Putz 2008-02-17 07:34:36 UTC 

*** This bug has been marked as a duplicate of 156623 ***