| Summary: | konqueror crashes visiting http://cybertiggyr.com/gene/dfx/ (QPixmap::isNull) | ||
|---|---|---|---|
| Product: | [Applications] konqueror | Reporter: | Oliver Putz <Regnaron> |
| Component: | general | Assignee: | Konqueror Developers <konq-bugs> |
| Status: | RESOLVED DUPLICATE | ||
| Severity: | crash | ||
| Priority: | NOR | ||
| Version: | unspecified | ||
| Target Milestone: | --- | ||
| Platform: | unspecified | ||
| OS: | Linux | ||
| Latest Commit: | Version Fixed In: | ||
| Sentry Crash Report: | |||
|
Description
Oliver Putz
2008-03-17 20:21:20 UTC
Valgrind log: ==9682== Memcheck, a memory error detector. ==9682== Copyright (C) 2002-2007, and GNU GPL'd, by Julian Seward et al. ==9682== Using LibVEX rev 1732, a library for dynamic binary translation. ==9682== Copyright (C) 2004-2007, and GNU GPL'd, by OpenWorks LLP. ==9682== Using valgrind-3.2.3, a dynamic binary instrumentation framework. ==9682== Copyright (C) 2000-2007, and GNU GPL'd, by Julian Seward et al. ==9682== For more details, rerun with: -v ==9682== ==9682== My PID = 9682, parent PID = 9552. Prog and args are: ==9682== konqueror ==9682== http://cybertiggyr.com/gene/dfx/ ==9682== ==9682== Conditional jump or move depends on uninitialised value(s) ==9682== at 0x400A9B5: _dl_relocate_object (do-rel.h:65) ==9682== by 0x400454C: dl_main (rtld.c:2214) ==9682== by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239) ==9682== by 0x400124E: _dl_start (rtld.c:327) ==9682== by 0x40008A6: (within /lib/ld-2.6.1.so) ==9682== ==9682== Conditional jump or move depends on uninitialised value(s) ==9682== at 0x400A9BD: _dl_relocate_object (do-rel.h:68) ==9682== by 0x400454C: dl_main (rtld.c:2214) ==9682== by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239) ==9682== by 0x400124E: _dl_start (rtld.c:327) ==9682== by 0x40008A6: (within /lib/ld-2.6.1.so) ==9682== ==9682== Conditional jump or move depends on uninitialised value(s) ==9682== at 0x400B053: _dl_relocate_object (do-rel.h:104) ==9682== by 0x400454C: dl_main (rtld.c:2214) ==9682== by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239) ==9682== by 0x400124E: _dl_start (rtld.c:327) ==9682== by 0x40008A6: (within /lib/ld-2.6.1.so) ==9682== ==9682== Conditional jump or move depends on uninitialised value(s) ==9682== at 0x400AAF3: _dl_relocate_object (do-rel.h:117) ==9682== by 0x400454C: dl_main (rtld.c:2214) ==9682== by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239) ==9682== by 0x400124E: _dl_start (rtld.c:327) ==9682== by 0x40008A6: (within /lib/ld-2.6.1.so) ==9682== ==9682== Conditional jump or move depends on uninitialised value(s) ==9682== at 0x400A9B5: _dl_relocate_object (do-rel.h:65) ==9682== by 0x4004169: dl_main (rtld.c:2284) ==9682== by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239) ==9682== by 0x400124E: _dl_start (rtld.c:327) ==9682== by 0x40008A6: (within /lib/ld-2.6.1.so) ==9682== ==9682== Conditional jump or move depends on uninitialised value(s) ==9682== at 0x400A9BD: _dl_relocate_object (do-rel.h:68) ==9682== by 0x4004169: dl_main (rtld.c:2284) ==9682== by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239) ==9682== by 0x400124E: _dl_start (rtld.c:327) ==9682== by 0x40008A6: (within /lib/ld-2.6.1.so) ==9682== ==9682== Conditional jump or move depends on uninitialised value(s) ==9682== at 0x400AAF3: _dl_relocate_object (do-rel.h:117) ==9682== by 0x4004169: dl_main (rtld.c:2284) ==9682== by 0x4013C45: _dl_sysdep_start (dl-sysdep.c:239) ==9682== by 0x400124E: _dl_start (rtld.c:327) ==9682== by 0x40008A6: (within /lib/ld-2.6.1.so) ==9682== ==9682== Syscall param write(buf) points to uninitialised byte(s) ==9682== at 0x4E98FAB: (within /lib/libpthread-2.6.1.so) ==9682== by 0x495A767: _X11TransWrite (Xtrans.c:900) ==9682== by 0x4954066: _XFlushInt (XlibInt.c:675) ==9682== by 0x495415E: _XReply (XlibInt.c:1708) ==9682== by 0x493D5B4: XGetWindowProperty (GetProp.c:64) ==9682== by 0x493CA8D: XGetWMHints (GetHints.c:118) ==9682== by 0x50FF8B7: QWidgetPrivate::setWindowIcon_sys(bool) (qwidget_x11.cpp:1160) ==9682== by 0x50CCC48: QWidget::create(unsigned long, bool, bool) (qwidget.cpp:1227) ==9682== by 0x50CD749: QWidgetPrivate::createWinId(unsigned long) (qwidget.cpp:1967) ==9682== by 0x50CD857: QWidgetPrivate::setWindowTitle_helper(QString const&) (qwidget.cpp:4783) ==9682== by 0x50CDD51: QWidget::setWindowTitle(QString const&) (qwidget.cpp:4814) ==9682== by 0x47E6FCF: KMainWindowPrivate::init(KMainWindow*) (kmainwindow.cpp:266) ==9682== Address 0x5F5A973 is 363 bytes inside a block of size 16,384 alloc'd ==9682== at 0x40207D3: calloc (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0x4945578: XOpenDisplay (OpenDis.c:289) ==9682== by 0x50E928D: qt_init(QApplicationPrivate*, int, _XDisplay*, unsigned long, unsigned long) (qapplication_x11.cpp:1640) ==9682== by 0x507EA28: QApplicationPrivate::construct(_XDisplay*, unsigned long, unsigned long) (qapplication.cpp:737) ==9682== by 0x507F5C3: QApplication::QApplication(int&, char**, bool, int) (qapplication.cpp:698) ==9682== by 0x472865E: KApplication::KApplication(bool) (kapplication.cpp:346) ==9682== by 0x404B6F0: KonquerorApplication::KonquerorApplication() (konqapplication.cpp:29) ==9682== by 0x40D0D00: kdemain (konqmain.cpp:67) ==9682== by 0x80487E1: main (konqueror_dummy.cpp:3) ==9682== ==9682== Syscall param write(buf) points to uninitialised byte(s) ==9682== at 0x4E98FAB: (within /lib/libpthread-2.6.1.so) ==9682== by 0x495A767: _X11TransWrite (Xtrans.c:900) ==9682== by 0x4954066: _XFlushInt (XlibInt.c:675) ==9682== by 0x4939202: XFlush (Flush.c:41) ==9682== by 0x50FE262: QWidgetPrivate::setCursor_sys(QCursor const&) (qwidget_x11.cpp:1077) ==9682== by 0x50CB7C5: QWidget::setCursor(QCursor const&) (qwidget.cpp:4055) ==9682== by 0x5461FA9: QLineEditPrivate::init(QString const&) (qlineedit.cpp:2657) ==9682== by 0x546AFCA: QLineEdit::QLineEdit(QWidget*) (qlineedit.cpp:269) ==9682== by 0x47E14CB: KLineEdit::KLineEdit(QWidget*) (klineedit.cpp:176) ==9682== by 0x4082578: KonqComboLineEdit::KonqComboLineEdit(QWidget*) (konqcombo.cpp:824) ==9682== by 0x4086C2C: KonqCombo::KonqCombo(QWidget*) (konqcombo.cpp:138) ==9682== by 0x40943DF: KonqMainWindow::initCombo() (konqmainwindow.cpp:2949) ==9682== Address 0x5F5AC81 is 1,145 bytes inside a block of size 16,384 alloc'd ==9682== at 0x40207D3: calloc (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0x4945578: XOpenDisplay (OpenDis.c:289) ==9682== by 0x50E928D: qt_init(QApplicationPrivate*, int, _XDisplay*, unsigned long, unsigned long) (qapplication_x11.cpp:1640) ==9682== by 0x507EA28: QApplicationPrivate::construct(_XDisplay*, unsigned long, unsigned long) (qapplication.cpp:737) ==9682== by 0x507F5C3: QApplication::QApplication(int&, char**, bool, int) (qapplication.cpp:698) ==9682== by 0x472865E: KApplication::KApplication(bool) (kapplication.cpp:346) ==9682== by 0x404B6F0: KonquerorApplication::KonquerorApplication() (konqapplication.cpp:29) ==9682== by 0x40D0D00: kdemain (konqmain.cpp:67) ==9682== by 0x80487E1: main (konqueror_dummy.cpp:3) ==9682== ==9682== Syscall param write(buf) points to uninitialised byte(s) ==9682== at 0x4E98FAB: (within /lib/libpthread-2.6.1.so) ==9682== by 0x490C4FF: _IceTransWrite (Xtrans.c:900) ==9682== by 0x491104B: _IceWrite (misc.c:369) ==9682== by 0x4911106: IceFlush (misc.c:82) ==9682== by 0x48FFFAB: SmcSetProperties (sm_client.c:397) ==9682== by 0x50D72A8: sm_setProperty(char const*, char const*, int, SmPropValue*) (qapplication_x11.cpp:5116) ==9682== by 0x50DA859: sm_setProperty(QString const&, QString const&) (qapplication_x11.cpp:5131) ==9682== by 0x50EA81C: sm_performSaveYourself(QSessionManagerPrivate*) (qapplication_x11.cpp:5195) ==9682== by 0x50EB396: sm_saveYourselfCallback(_SmcConn*, void*, int, int, int, int) (qapplication_x11.cpp:5174) ==9682== by 0x4903395: _SmcProcessMessage (sm_process.c:252) ==9682== by 0x4914BF8: IceProcessMessages (process.c:344) ==9682== by 0x50D7793: QSmSocketReceiver::socketActivated(int) (qapplication_x11.cpp:5313) ==9682== Address 0x5EB6144 is 12 bytes inside a block of size 1,024 alloc'd ==9682== at 0x40207D3: calloc (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0x490AA94: IceOpenConnection (connect.c:211) ==9682== by 0x49002DD: SmcOpenConnection (sm_client.c:135) ==9682== by 0x50DD964: QSessionManager::QSessionManager(QApplication*, QString&, QString&) (qapplication_x11.cpp:5356) ==9682== by 0x507DEC3: QApplicationPrivate::initialize() (qapplication.cpp:844) ==9682== by 0x507EA30: QApplicationPrivate::construct(_XDisplay*, unsigned long, unsigned long) (qapplication.cpp:738) ==9682== by 0x507F5C3: QApplication::QApplication(int&, char**, bool, int) (qapplication.cpp:698) ==9682== by 0x472865E: KApplication::KApplication(bool) (kapplication.cpp:346) ==9682== by 0x404B6F0: KonquerorApplication::KonquerorApplication() (konqapplication.cpp:29) ==9682== by 0x40D0D00: kdemain (konqmain.cpp:67) ==9682== by 0x80487E1: main (konqueror_dummy.cpp:3) ==9682== ==9682== Syscall param write(buf) points to uninitialised byte(s) ==9682== at 0x4E98FAB: (within /lib/libpthread-2.6.1.so) ==9682== by 0x495A767: _X11TransWrite (Xtrans.c:900) ==9682== by 0x4954066: _XFlushInt (XlibInt.c:675) ==9682== by 0x4934859: XCheckTypedEvent (ChkTypEv.c:70) ==9682== by 0x50E6295: QApplication::x11ProcessEvent(_XEvent*) (qapplication_x11.cpp:3159) ==9682== by 0x510DC74: QEventDispatcherX11::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (qeventdispatcher_x11.cpp:134) ==9682== by 0x4D9BE60: QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (qeventloop.cpp:146) ==9682== by 0x4D9BF8E: QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) (qeventloop.cpp:197) ==9682== by 0x4D9E475: QCoreApplication::exec() (qcoreapplication.cpp:838) ==9682== by 0x5074E36: QApplication::exec() (qapplication.cpp:3267) ==9682== by 0x40D2646: kdemain (konqmain.cpp:218) ==9682== by 0x80487E1: main (konqueror_dummy.cpp:3) ==9682== Address 0x5F5A82D is 37 bytes inside a block of size 16,384 alloc'd ==9682== at 0x40207D3: calloc (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0x4945578: XOpenDisplay (OpenDis.c:289) ==9682== by 0x50E928D: qt_init(QApplicationPrivate*, int, _XDisplay*, unsigned long, unsigned long) (qapplication_x11.cpp:1640) ==9682== by 0x507EA28: QApplicationPrivate::construct(_XDisplay*, unsigned long, unsigned long) (qapplication.cpp:737) ==9682== by 0x507F5C3: QApplication::QApplication(int&, char**, bool, int) (qapplication.cpp:698) ==9682== by 0x472865E: KApplication::KApplication(bool) (kapplication.cpp:346) ==9682== by 0x404B6F0: KonquerorApplication::KonquerorApplication() (konqapplication.cpp:29) ==9682== by 0x40D0D00: kdemain (konqmain.cpp:67) ==9682== by 0x80487E1: main (konqueror_dummy.cpp:3) ==9682== ==9682== Syscall param write(buf) points to uninitialised byte(s) ==9682== at 0x4E98FAB: (within /lib/libpthread-2.6.1.so) ==9682== by 0x495A767: _X11TransWrite (Xtrans.c:900) ==9682== by 0x4954066: _XFlushInt (XlibInt.c:675) ==9682== by 0x4934979: XCheckTypedWindowEvent (ChkTypWEv.c:72) ==9682== by 0x50DB195: QETWidget::translateConfigEvent(_XEvent const*) (qapplication_x11.cpp:4741) ==9682== by 0x50E5903: QApplication::x11ProcessEvent(_XEvent*) (qapplication_x11.cpp:3119) ==9682== by 0x510DC74: QEventDispatcherX11::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (qeventdispatcher_x11.cpp:134) ==9682== by 0x4D9BE60: QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (qeventloop.cpp:146) ==9682== by 0x4D9BF8E: QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) (qeventloop.cpp:197) ==9682== by 0x4D9E475: QCoreApplication::exec() (qcoreapplication.cpp:838) ==9682== by 0x5074E36: QApplication::exec() (qapplication.cpp:3267) ==9682== by 0x40D2646: kdemain (konqmain.cpp:218) ==9682== Address 0x5F5A82D is 37 bytes inside a block of size 16,384 alloc'd ==9682== at 0x40207D3: calloc (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0x4945578: XOpenDisplay (OpenDis.c:289) ==9682== by 0x50E928D: qt_init(QApplicationPrivate*, int, _XDisplay*, unsigned long, unsigned long) (qapplication_x11.cpp:1640) ==9682== by 0x507EA28: QApplicationPrivate::construct(_XDisplay*, unsigned long, unsigned long) (qapplication.cpp:737) ==9682== by 0x507F5C3: QApplication::QApplication(int&, char**, bool, int) (qapplication.cpp:698) ==9682== by 0x472865E: KApplication::KApplication(bool) (kapplication.cpp:346) ==9682== by 0x404B6F0: KonquerorApplication::KonquerorApplication() (konqapplication.cpp:29) ==9682== by 0x40D0D00: kdemain (konqmain.cpp:67) ==9682== by 0x80487E1: main (konqueror_dummy.cpp:3) ==9682== ==9682== Syscall param write(buf) points to uninitialised byte(s) ==9682== at 0x4E98FAB: (within /lib/libpthread-2.6.1.so) ==9682== by 0x495A767: _X11TransWrite (Xtrans.c:900) ==9682== by 0x4954066: _XFlushInt (XlibInt.c:675) ==9682== by 0x4936779: _XFlushGCCache (CrGC.c:325) ==9682== by 0x494D465: XSetClipMask (SetClMask.c:45) ==9682== by 0x5224F88: QX11PaintEngine::updateBrush(QBrush const&, QPointF const&) (qpaintengine_x11.cpp:186) ==9682== by 0x522BA2F: QX11PaintEngine::updateState(QPaintEngineState const&) (qpaintengine_x11.cpp:985) ==9682== by 0x51786C4: QPainterPrivate::updateState(QPainterState*) (qpainter.cpp:891) ==9682== by 0x5180B28: QPainter::drawRects(QRectF const*, int) (qpainter.cpp:2907) ==9682== by 0x64DD3CC: QPainter::drawRect(QRectF const&) (qpainter.h:582) ==9682== by 0x64DC75C: OxygenScrollbar::horizontal(int, int, int) const (scrollbar.cpp:253) ==9682== by 0x64D5EEA: OxygenStyleHelper::horizontalScrollBar(QColor const&, int, int, int) (helper.cpp:699) ==9682== Address 0x5F5A957 is 335 bytes inside a block of size 16,384 alloc'd ==9682== at 0x40207D3: calloc (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0x4945578: XOpenDisplay (OpenDis.c:289) ==9682== by 0x50E928D: qt_init(QApplicationPrivate*, int, _XDisplay*, unsigned long, unsigned long) (qapplication_x11.cpp:1640) ==9682== by 0x507EA28: QApplicationPrivate::construct(_XDisplay*, unsigned long, unsigned long) (qapplication.cpp:737) ==9682== by 0x507F5C3: QApplication::QApplication(int&, char**, bool, int) (qapplication.cpp:698) ==9682== by 0x472865E: KApplication::KApplication(bool) (kapplication.cpp:346) ==9682== by 0x404B6F0: KonquerorApplication::KonquerorApplication() (konqapplication.cpp:29) ==9682== by 0x40D0D00: kdemain (konqmain.cpp:67) ==9682== by 0x80487E1: main (konqueror_dummy.cpp:3) ==9682== ==9682== Conditional jump or move depends on uninitialised value(s) ==9682== at 0x4BCB272: (within /lib/libz.so.1.2.3) ==9682== ==9682== Conditional jump or move depends on uninitialised value(s) ==9682== at 0x4BCB212: (within /lib/libz.so.1.2.3) ==9682== ==9682== Syscall param write(buf) points to uninitialised byte(s) ==9682== at 0x4E98FAB: (within /lib/libpthread-2.6.1.so) ==9682== by 0x495A767: _X11TransWrite (Xtrans.c:900) ==9682== by 0x4954066: _XFlushInt (XlibInt.c:675) ==9682== by 0x4954B64: _XEventsQueued (XlibInt.c:743) ==9682== by 0x4946ADB: XEventsQueued (Pending.c:44) ==9682== by 0x510DD6B: QEventDispatcherX11::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (qeventdispatcher_x11.cpp:81) ==9682== by 0x4D9BE60: QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (qeventloop.cpp:146) ==9682== by 0x4D9BF8E: QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) (qeventloop.cpp:197) ==9682== by 0x4D9E475: QCoreApplication::exec() (qcoreapplication.cpp:838) ==9682== by 0x5074E36: QApplication::exec() (qapplication.cpp:3267) ==9682== by 0x40D2646: kdemain (konqmain.cpp:218) ==9682== by 0x80487E1: main (konqueror_dummy.cpp:3) ==9682== Address 0x5F5AB87 is 895 bytes inside a block of size 16,384 alloc'd ==9682== at 0x40207D3: calloc (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0x4945578: XOpenDisplay (OpenDis.c:289) ==9682== by 0x50E928D: qt_init(QApplicationPrivate*, int, _XDisplay*, unsigned long, unsigned long) (qapplication_x11.cpp:1640) ==9682== by 0x507EA28: QApplicationPrivate::construct(_XDisplay*, unsigned long, unsigned long) (qapplication.cpp:737) ==9682== by 0x507F5C3: QApplication::QApplication(int&, char**, bool, int) (qapplication.cpp:698) ==9682== by 0x472865E: KApplication::KApplication(bool) (kapplication.cpp:346) ==9682== by 0x404B6F0: KonquerorApplication::KonquerorApplication() (konqapplication.cpp:29) ==9682== by 0x40D0D00: kdemain (konqmain.cpp:67) ==9682== by 0x80487E1: main (konqueror_dummy.cpp:3) ==9682== ==9682== Invalid write of size 1 ==9682== at 0x40222FF: memcpy (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0x5B4E30E: png_combine_row (pngrutil.c:2305) ==9682== by 0x5B5E07B: png_progressive_combine_row (pngpread.c:1564) ==9682== by 0xB0C1401: khtmlImLoad::PNGLoader::haveRow(unsigned, int, unsigned char*) (pngloader.cpp:196) ==9682== by 0xB0C1474: khtmlImLoad::PNGLoader::dispHaveRow(png_struct_def*, unsigned char*, unsigned long, int) (pngloader.cpp:71) ==9682== by 0x5B5DFDD: png_push_have_row (pngpread.c:1550) ==9682== by 0x5B5E748: png_push_process_row (pngpread.c:847) ==9682== by 0x5B5EBDF: png_process_IDAT_data (pngpread.c:798) ==9682== by 0x5B5ED70: png_push_read_IDAT (pngpread.c:729) ==9682== by 0x5B5FB6B: png_process_some_data (pngpread.c:61) ==9682== by 0x5B5FBD3: png_process_data (pngpread.c:36) ==9682== by 0xB0C125A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254) ==9682== Address 0x6345EA1 is 0 bytes after a block of size 81 alloc'd ==9682== at 0x402171D: operator new[](unsigned) (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0xB0C163E: khtmlImLoad::PNGLoader::haveInfo() (pngloader.cpp:176) ==9682== by 0xB0C16DF: khtmlImLoad::PNGLoader::dispHaveInfo(png_struct_def*, png_info_struct*) (pngloader.cpp:66) ==9682== by 0x5B5DF91: png_push_have_info (pngpread.c:1536) ==9682== by 0x5B5F65A: png_push_read_chunk (pngpread.c:301) ==9682== by 0x5B5FB5D: png_process_some_data (pngpread.c:56) ==9682== by 0x5B5FBD3: png_process_data (pngpread.c:36) ==9682== by 0xB0C125A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254) ==9682== by 0xB0BCA6F: khtmlImLoad::Image::processData(unsigned char*, int) (image.cpp:150) ==9682== by 0xAFE216A: khtml::CachedImage::data(QBuffer&, bool) (loader.cpp:856) ==9682== by 0xAFDFAD0: khtml::Loader::slotData(KIO::Job*, QByteArray const&) (loader.cpp:1360) ==9682== by 0xAFE1960: khtml::Loader::qt_metacall(QMetaObject::Call, int, void**) (loader.moc:128) ==9682== ==9682== Invalid write of size 1 ==9682== at 0x4022305: memcpy (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0x5B4E30E: png_combine_row (pngrutil.c:2305) ==9682== by 0x5B5E07B: png_progressive_combine_row (pngpread.c:1564) ==9682== by 0xB0C1401: khtmlImLoad::PNGLoader::haveRow(unsigned, int, unsigned char*) (pngloader.cpp:196) ==9682== by 0xB0C1474: khtmlImLoad::PNGLoader::dispHaveRow(png_struct_def*, unsigned char*, unsigned long, int) (pngloader.cpp:71) ==9682== by 0x5B5DFDD: png_push_have_row (pngpread.c:1550) ==9682== by 0x5B5E748: png_push_process_row (pngpread.c:847) ==9682== by 0x5B5EBDF: png_process_IDAT_data (pngpread.c:798) ==9682== by 0x5B5ED70: png_push_read_IDAT (pngpread.c:729) ==9682== by 0x5B5FB6B: png_process_some_data (pngpread.c:61) ==9682== by 0x5B5FBD3: png_process_data (pngpread.c:36) ==9682== by 0xB0C125A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254) ==9682== Address 0x6345EA2 is 1 bytes after a block of size 81 alloc'd ==9682== at 0x402171D: operator new[](unsigned) (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0xB0C163E: khtmlImLoad::PNGLoader::haveInfo() (pngloader.cpp:176) ==9682== by 0xB0C16DF: khtmlImLoad::PNGLoader::dispHaveInfo(png_struct_def*, png_info_struct*) (pngloader.cpp:66) ==9682== by 0x5B5DF91: png_push_have_info (pngpread.c:1536) ==9682== by 0x5B5F65A: png_push_read_chunk (pngpread.c:301) ==9682== by 0x5B5FB5D: png_process_some_data (pngpread.c:56) ==9682== by 0x5B5FBD3: png_process_data (pngpread.c:36) ==9682== by 0xB0C125A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254) ==9682== by 0xB0BCA6F: khtmlImLoad::Image::processData(unsigned char*, int) (image.cpp:150) ==9682== by 0xAFE216A: khtml::CachedImage::data(QBuffer&, bool) (loader.cpp:856) ==9682== by 0xAFDFAD0: khtml::Loader::slotData(KIO::Job*, QByteArray const&) (loader.cpp:1360) ==9682== by 0xAFE1960: khtml::Loader::qt_metacall(QMetaObject::Call, int, void**) (loader.moc:128) ==9682== ==9682== Invalid write of size 1 ==9682== at 0x402230E: memcpy (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0x5B4E30E: png_combine_row (pngrutil.c:2305) ==9682== by 0x5B5E07B: png_progressive_combine_row (pngpread.c:1564) ==9682== by 0xB0C1401: khtmlImLoad::PNGLoader::haveRow(unsigned, int, unsigned char*) (pngloader.cpp:196) ==9682== by 0xB0C1474: khtmlImLoad::PNGLoader::dispHaveRow(png_struct_def*, unsigned char*, unsigned long, int) (pngloader.cpp:71) ==9682== by 0x5B5DFDD: png_push_have_row (pngpread.c:1550) ==9682== by 0x5B5E748: png_push_process_row (pngpread.c:847) ==9682== by 0x5B5EBDF: png_process_IDAT_data (pngpread.c:798) ==9682== by 0x5B5ED70: png_push_read_IDAT (pngpread.c:729) ==9682== by 0x5B5FB6B: png_process_some_data (pngpread.c:61) ==9682== by 0x5B5FBD3: png_process_data (pngpread.c:36) ==9682== by 0xB0C125A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254) ==9682== Address 0x6345EA3 is 2 bytes after a block of size 81 alloc'd ==9682== at 0x402171D: operator new[](unsigned) (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0xB0C163E: khtmlImLoad::PNGLoader::haveInfo() (pngloader.cpp:176) ==9682== by 0xB0C16DF: khtmlImLoad::PNGLoader::dispHaveInfo(png_struct_def*, png_info_struct*) (pngloader.cpp:66) ==9682== by 0x5B5DF91: png_push_have_info (pngpread.c:1536) ==9682== by 0x5B5F65A: png_push_read_chunk (pngpread.c:301) ==9682== by 0x5B5FB5D: png_process_some_data (pngpread.c:56) ==9682== by 0x5B5FBD3: png_process_data (pngpread.c:36) ==9682== by 0xB0C125A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254) ==9682== by 0xB0BCA6F: khtmlImLoad::Image::processData(unsigned char*, int) (image.cpp:150) ==9682== by 0xAFE216A: khtml::CachedImage::data(QBuffer&, bool) (loader.cpp:856) ==9682== by 0xAFDFAD0: khtml::Loader::slotData(KIO::Job*, QByteArray const&) (loader.cpp:1360) ==9682== by 0xAFE1960: khtml::Loader::qt_metacall(QMetaObject::Call, int, void**) (loader.moc:128) ==9682== ==9682== Invalid write of size 1 ==9682== at 0x40222FA: memcpy (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0x5B4E30E: png_combine_row (pngrutil.c:2305) ==9682== by 0x5B5E07B: png_progressive_combine_row (pngpread.c:1564) ==9682== by 0xB0C1401: khtmlImLoad::PNGLoader::haveRow(unsigned, int, unsigned char*) (pngloader.cpp:196) ==9682== by 0xB0C1474: khtmlImLoad::PNGLoader::dispHaveRow(png_struct_def*, unsigned char*, unsigned long, int) (pngloader.cpp:71) ==9682== by 0x5B5DFDD: png_push_have_row (pngpread.c:1550) ==9682== by 0x5B5E748: png_push_process_row (pngpread.c:847) ==9682== by 0x5B5EBDF: png_process_IDAT_data (pngpread.c:798) ==9682== by 0x5B5ED70: png_push_read_IDAT (pngpread.c:729) ==9682== by 0x5B5FB6B: png_process_some_data (pngpread.c:61) ==9682== by 0x5B5FBD3: png_process_data (pngpread.c:36) ==9682== by 0xB0C125A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254) ==9682== Address 0x6345EA4 is 3 bytes after a block of size 81 alloc'd ==9682== at 0x402171D: operator new[](unsigned) (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0xB0C163E: khtmlImLoad::PNGLoader::haveInfo() (pngloader.cpp:176) ==9682== by 0xB0C16DF: khtmlImLoad::PNGLoader::dispHaveInfo(png_struct_def*, png_info_struct*) (pngloader.cpp:66) ==9682== by 0x5B5DF91: png_push_have_info (pngpread.c:1536) ==9682== by 0x5B5F65A: png_push_read_chunk (pngpread.c:301) ==9682== by 0x5B5FB5D: png_process_some_data (pngpread.c:56) ==9682== by 0x5B5FBD3: png_process_data (pngpread.c:36) ==9682== by 0xB0C125A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254) ==9682== by 0xB0BCA6F: khtmlImLoad::Image::processData(unsigned char*, int) (image.cpp:150) ==9682== by 0xAFE216A: khtml::CachedImage::data(QBuffer&, bool) (loader.cpp:856) ==9682== by 0xAFDFAD0: khtml::Loader::slotData(KIO::Job*, QByteArray const&) (loader.cpp:1360) ==9682== by 0xAFE1960: khtml::Loader::qt_metacall(QMetaObject::Call, int, void**) (loader.moc:128) ==9682== ==9682== Invalid write of size 1 ==9682== at 0x402231E: memcpy (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0x5B4E30E: png_combine_row (pngrutil.c:2305) ==9682== by 0x5B5E07B: png_progressive_combine_row (pngpread.c:1564) ==9682== by 0xB0C1401: khtmlImLoad::PNGLoader::haveRow(unsigned, int, unsigned char*) (pngloader.cpp:196) ==9682== by 0xB0C1474: khtmlImLoad::PNGLoader::dispHaveRow(png_struct_def*, unsigned char*, unsigned long, int) (pngloader.cpp:71) ==9682== by 0x5B5DFDD: png_push_have_row (pngpread.c:1550) ==9682== by 0x5B5E748: png_push_process_row (pngpread.c:847) ==9682== by 0x5B5EBDF: png_process_IDAT_data (pngpread.c:798) ==9682== by 0x5B5ED70: png_push_read_IDAT (pngpread.c:729) ==9682== by 0x5B5FB6B: png_process_some_data (pngpread.c:61) ==9682== by 0x5B5FBD3: png_process_data (pngpread.c:36) ==9682== by 0xB0C125A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254) ==9682== Address 0x6345EF0 is not stack'd, malloc'd or (recently) free'd ==9682== ==9682== Invalid write of size 1 ==9682== at 0x402231E: memcpy (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0x5B4E58D: png_combine_row (pngrutil.c:2483) ==9682== by 0x5B5E07B: png_progressive_combine_row (pngpread.c:1564) ==9682== by 0xB0C1401: khtmlImLoad::PNGLoader::haveRow(unsigned, int, unsigned char*) (pngloader.cpp:196) ==9682== by 0xB0C1474: khtmlImLoad::PNGLoader::dispHaveRow(png_struct_def*, unsigned char*, unsigned long, int) (pngloader.cpp:71) ==9682== by 0x5B5DFDD: png_push_have_row (pngpread.c:1550) ==9682== by 0x5B5E804: png_push_process_row (pngpread.c:878) ==9682== by 0x5B5EBDF: png_process_IDAT_data (pngpread.c:798) ==9682== by 0x5B5ED70: png_push_read_IDAT (pngpread.c:729) ==9682== by 0x5B5FB6B: png_process_some_data (pngpread.c:61) ==9682== by 0x5B5FBD3: png_process_data (pngpread.c:36) ==9682== by 0xB0C125A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254) ==9682== Address 0x6345EA8 is 7 bytes after a block of size 81 alloc'd ==9682== at 0x402171D: operator new[](unsigned) (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0xB0C163E: khtmlImLoad::PNGLoader::haveInfo() (pngloader.cpp:176) ==9682== by 0xB0C16DF: khtmlImLoad::PNGLoader::dispHaveInfo(png_struct_def*, png_info_struct*) (pngloader.cpp:66) ==9682== by 0x5B5DF91: png_push_have_info (pngpread.c:1536) ==9682== by 0x5B5F65A: png_push_read_chunk (pngpread.c:301) ==9682== by 0x5B5FB5D: png_process_some_data (pngpread.c:56) ==9682== by 0x5B5FBD3: png_process_data (pngpread.c:36) ==9682== by 0xB0C125A: khtmlImLoad::PNGLoader::processData(unsigned char*, int) (pngloader.cpp:254) ==9682== by 0xB0BCA6F: khtmlImLoad::Image::processData(unsigned char*, int) (image.cpp:150) ==9682== by 0xAFE216A: khtml::CachedImage::data(QBuffer&, bool) (loader.cpp:856) ==9682== by 0xAFDFAD0: khtml::Loader::slotData(KIO::Job*, QByteArray const&) (loader.cpp:1360) ==9682== by 0xAFE1960: khtml::Loader::qt_metacall(QMetaObject::Call, int, void**) (loader.moc:128) valgrind: m_mallocfree.c:194 (get_bszB_as_is): Assertion 'bszB_lo == bszB_hi' failed. valgrind: Heap block lo/hi size mismatch: lo = 4285529967, hi = 4294880405. Probably caused by overrunning/underrunning a heap block's bounds. ==9682== at 0x38010D37: (within /usr/lib/valgrind/x86-linux/memcheck) ==9682== by 0x38010F49: (within /usr/lib/valgrind/x86-linux/memcheck) ==9682== by 0x38016AE6: (within /usr/lib/valgrind/x86-linux/memcheck) ==9682== by 0x38016B2A: (within /usr/lib/valgrind/x86-linux/memcheck) ==9682== by 0x38016B50: (within /usr/lib/valgrind/x86-linux/memcheck) ==9682== by 0x38016D0B: (within /usr/lib/valgrind/x86-linux/memcheck) ==9682== by 0x3801796D: (within /usr/lib/valgrind/x86-linux/memcheck) ==9682== by 0x380016C3: (within /usr/lib/valgrind/x86-linux/memcheck) ==9682== by 0x38027E79: (within /usr/lib/valgrind/x86-linux/memcheck) ==9682== by 0x38029093: (within /usr/lib/valgrind/x86-linux/memcheck) ==9682== by 0x38040938: (within /usr/lib/valgrind/x86-linux/memcheck) sched status: running_tid=1 Thread 1: status = VgTs_Runnable ==9682== at 0x4021454: realloc (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==9682== by 0x4CA0893: qRealloc(void*, unsigned) (qmalloc.cpp:67) ==9682== by 0x4CC6959: QListData::realloc(int) (qlistdata.cpp:113) ==9682== by 0x4CC6AC6: QListData::append() (qlistdata.cpp:133) ==9682== by 0x4CAE156: QList<QByteArray>::append(QByteArray const&) (qlist.h:427) ==9682== by 0x4D2E027: QIODevice::close() (qlist.h:302) ==9682== by 0x4D15FDC: QBuffer::close() (qbuffer.cpp:344) ==9682== by 0xAFE2172: khtml::CachedImage::data(QBuffer&, bool) (loader.cpp:858) ==9682== by 0xAFDFAD0: khtml::Loader::slotData(KIO::Job*, QByteArray const&) (loader.cpp:1360) ==9682== by 0xAFE1960: khtml::Loader::qt_metacall(QMetaObject::Call, int, void**) (loader.moc:128) ==9682== by 0x4DB32C7: QMetaObject::activate(QObject*, int, int, void**) (qobject.cpp:2995) ==9682== by 0x4DB3A43: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3065) ==9682== by 0x421EEE6: KIO::TransferJob::data(KIO::Job*, QByteArray const&) (jobclasses.moc:356) ==9682== by 0x421F9C2: KIO::TransferJob::slotData(QByteArray const&) (job.cpp:921) ==9682== by 0x422A1F9: KIO::TransferJob::qt_metacall(QMetaObject::Call, int, void**) (jobclasses.moc:337) ==9682== by 0x4DB32C7: QMetaObject::activate(QObject*, int, int, void**) (qobject.cpp:2995) ==9682== by 0x4DB3A43: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3065) ==9682== by 0x42CBBC0: KIO::SlaveInterface::data(QByteArray const&) (slaveinterface.moc:136) ==9682== by 0x42CD5F8: KIO::SlaveInterface::dispatch(int, QByteArray const&) (slaveinterface.cpp:163) ==9682== by 0x42CE2C5: KIO::SlaveInterface::dispatch() (slaveinterface.cpp:90) ==9682== by 0x42C0926: KIO::Slave::gotInput() (slave.cpp:319) ==9682== by 0x42C1E7C: KIO::Slave::qt_metacall(QMetaObject::Call, int, void**) (slave.moc:75) ==9682== by 0x4DB32C7: QMetaObject::activate(QObject*, int, int, void**) (qobject.cpp:2995) ==9682== by 0x4DB3A43: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3065) ==9682== by 0x41FBC62: KIO::Connection::readyRead() (connection.moc:84) ==9682== by 0x41FCAE5: KIO::ConnectionPrivate::dequeue() (connection.cpp:82) ==9682== by 0x41FD894: KIO::Connection::qt_metacall(QMetaObject::Call, int, void**) (connection.moc:72) ==9682== by 0x4DACB78: QMetaCallEvent::placeMetaCall(QObject*) (qobject.cpp:535) ==9682== by 0x4DAEEDD: QObject::event(QEvent*) (qobject.cpp:1131) ==9682== by 0x507571E: QApplicationPrivate::notify_helper(QObject*, QEvent*) (qapplication.cpp:3735) ==9682== by 0x50772F9: QApplication::notify(QObject*, QEvent*) (qapplication.cpp:3329) ==9682== by 0x4729022: KApplication::notify(QObject*, QEvent*) (kapplication.cpp:311) ==9682== by 0x4D9CCF6: QCoreApplication::notifyInternal(QObject*, QEvent*) (qcoreapplication.cpp:586) ==9682== by 0x4D9E058: QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) (qcoreapplication.h:215) ==9682== by 0x4DCD7A7: QEventDispatcherUNIX::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (qeventdispatcher_unix.cpp:867) ==9682== by 0x510DCFD: QEventDispatcherX11::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (qeventdispatcher_x11.cpp:154) ==9682== by 0x4D9BE60: QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (qeventloop.cpp:146) ==9682== by 0x4D9BF8E: QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) (qeventloop.cpp:197) ==9682== by 0x4D9E475: QCoreApplication::exec() (qcoreapplication.cpp:838) ==9682== by 0x5074E36: QApplication::exec() (qapplication.cpp:3267) ==9682== by 0x40D2646: kdemain (konqmain.cpp:218) ==9682== by 0x80487E1: main (konqueror_dummy.cpp:3) Note: see also the FAQ.txt in the source distribution. It contains workarounds to several common problems. If that doesn't help, please report this bug to: www.valgrind.org In the bug report, send all the above text, the valgrind version, and what Linux distro you are using. Thanks. |