| Summary: | [testcase] Konqueror crashes when going to www.onlineweg.de (due to negative z-index in iframe) | ||
|---|---|---|---|
| Product: | [Applications] konqueror | Reporter: | gmud <geroxp> |
| Component: | khtml | Assignee: | Konqueror Developers <konq-bugs> |
| Status: | RESOLVED FIXED | ||
| Severity: | crash | CC: | andresbajotierra, eli, frank78ac, germain, maksim, rdieter |
| Priority: | NOR | ||
| Version: | 4.1.0 | ||
| Target Milestone: | --- | ||
| Platform: | unspecified | ||
| OS: | Linux | ||
| Latest Commit: | Version Fixed In: | ||
| Sentry Crash Report: | |||
| Attachments: |
1st part of a test case (1x1 pixel GIF image)
2nd part of the test case (HTML file) |
||
|
Description
gmud
2008-08-19 19:08:13 UTC
Using KDE 4.1.1 (KDE 4.1.0 (4.1 >= 20080722)) (KDEmod) in ArchLinux i686: I can reproduce this bug Also reproducible using: kdelibs4.2 svn rev.849324 kdebase4.2 svn rev.849337 Created attachment 26941 [details]
1st part of a test case (1x1 pixel GIF image)
Created attachment 26942 [details]
2nd part of the test case (HTML file)
This reduced testcase crashes 4.1 and today's SVN trunk for me with the same backtrace as in the original report. The HTML page contains an iframe which is to show a 1x1 pixel GIF image. The CSS attriutes 'style="position:absolute;z-index:-2"' in the <iframe> tag are needed to get the crash.
I looked into this a bit further: 1. It seems to crash for any image in the iframe. HTML pages in the iframe work fine. 2. It seems to crash for any negative z-index. Positive indices and zero work fine. 3. The backtrace looks similar to the one I pasted in https://bugs.kde.org/show_bug.cgi?id=119292#c5 a while ago (all frames starting from #8 appear in that bt as well). Maybe the crash issue in that report (the original report was about a rendering problem) is related to the problem we have here. *** Bug 169642 has been marked as a duplicate of this bug. *** mmh... copy/paste mistake of mine in render_layer. I have to verify the algorithm though. ah ah, I was already meditating how cruel is the wrath of senility, but it turns out I didn't do that CnP mistake. r784843 Bad bad dfaure. No more cookies for you, no sir! (gah... he actually CC'd me the change, and I saw nothing, so cookie-jail for me too ;-/ ) SVN commit 855320 by ggarand:
revert part of r784843
-> copy/paste error
BUG: 169447
M +1 -1 render_layer.cpp
--- trunk/KDE/kdelibs/khtml/rendering/render_layer.cpp #855319:855320
@@ -397,7 +397,7 @@
}
}
}
- count = sc->m_negZOrderList ? sc->m_negZOrderList->count() : 0;
+ count = sc->m_posZOrderList ? sc->m_posZOrderList->count() : 0;
if ( count > 0 ) {
needUpdate = true;
for (uint i = 0; i < count; i++) {
|