Bug 215640

Version:            (using KDE 4.3.2)
Compiler:          gcc 4.4.2 
OS:                Linux
Installed from:    Fedora RPMs

Almost every time I visit http://mirrors.fedoraproject.org/publiclist/, Konqueror hangs, chewing up 100% CPU. After attaching GDB, I got the following backtrace. I've repeated this a few times, the backtrace is always the same (except for some variable values). 

khtml::RenderTableSection::addCell (this=0x2daca58, cell=0x2daccb8, row=<value optimized out>)                               
    at /usr/src/debug/kdelibs-4.3.2/khtml/rendering/render_table.cpp:1242                                                    
1242                    lowestCol = cellsWithColSpanZero.lowerBound( 0 ).key();                                              

Thread 1 (Thread 0x7f0309818840 (LWP 3183)):
#0  khtml::RenderTableSection::addCell (this=0x2daca58, cell=0x2daccb8, row=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.2/khtml/rendering/render_table.cpp:1242
        lowestCol = 0
        cSpan = <value optimized out>
        nCols = 11
        rSpan = <value optimized out>
        col = 1
        set = <value optimized out>
        columnsToAvoid = {{p = {static shared_null = {ref = {_q_value = 57551}, alloc = 0, begin = 0, end = 0, sharable =
    1, array = {0x0}}, d = 0x30f6e39c80}, d = 0x30f6e39c80}}
#1  0x00000034dcb36d74 in khtml::RenderTableSection::recalcCells (this=0x2daca58)
    at /usr/src/debug/kdelibs-4.3.2/khtml/rendering/render_table.cpp:1976
        cell = 0x2daccb8
        row = 0x2dacb00
#2  0x00000034dcb36ef5 in khtml::RenderTableCell::calcMinMaxWidth (this=0x2dacdf0)
    at /usr/src/debug/kdelibs-4.3.2/khtml/rendering/render_table.cpp:2493
No locals.
#3  0x00000034dcb08a7a in khtml::RenderObject::recalcMinMaxWidths (this=0x2dacdf0)
    at /usr/src/debug/kdelibs-4.3.2/khtml/rendering/render_object.cpp:2693
        child = 0x0
        cmin = <value optimized out>
        cmax = <value optimized out>
#4  0x00000034dcb089e0 in khtml::RenderObject::recalcMinMaxWidths (this=0x2dacb00)
    at /usr/src/debug/kdelibs-4.3.2/khtml/rendering/render_object.cpp:2679
        test = true
        child = 0x2dacdf0
        cmin = 86
        cmax = 86
#5  0x00000034dcb089e0 in khtml::RenderObject::recalcMinMaxWidths (this=0x2daca58)
    at /usr/src/debug/kdelibs-4.3.2/khtml/rendering/render_object.cpp:2679
        test = true
        child = 0x2dacb00
        cmin = -1
        cmax = -1
#6  0x00000034dcb089e0 in khtml::RenderObject::recalcMinMaxWidths (this=0x2dac780)
    at /usr/src/debug/kdelibs-4.3.2/khtml/rendering/render_object.cpp:2679
        test = true
        child = 0x2daca58
        cmin = -1
        cmax = -1
#7  0x00000034dcb089e0 in khtml::RenderObject::recalcMinMaxWidths (this=0x2dac6b8)
    at /usr/src/debug/kdelibs-4.3.2/khtml/rendering/render_object.cpp:2679
        test = true
        child = 0x2dac780
        cmin = 408
        cmax = 408
#8  0x00000034dcb089e0 in khtml::RenderObject::recalcMinMaxWidths (this=0x2dac5f0)
    at /usr/src/debug/kdelibs-4.3.2/khtml/rendering/render_object.cpp:2679
        test = true
        child = 0x2dac6b8
        cmin = 408
        cmax = 408
#9  0x00000034dcb089e0 in khtml::RenderObject::recalcMinMaxWidths (this=0x2d335c8)
    at /usr/src/debug/kdelibs-4.3.2/khtml/rendering/render_object.cpp:2679
        test = true
        child = 0x2dac5f0
        cmin = 792
        cmax = 2146
#10 0x00000034dcb089e0 in khtml::RenderObject::recalcMinMaxWidths (this=0x2d33190)
    at /usr/src/debug/kdelibs-4.3.2/khtml/rendering/render_object.cpp:2679
        test = true
        child = 0x2d335c8
        cmin = 960
        cmax = 960
#11 0x00000034dcb089e0 in khtml::RenderObject::recalcMinMaxWidths (this=0x2d330c8)
    at /usr/src/debug/kdelibs-4.3.2/khtml/rendering/render_object.cpp:2679
        test = true
        child = 0x2d33190
        cmin = 960
        cmax = 960
#12 0x00000034dcb089e0 in khtml::RenderObject::recalcMinMaxWidths (this=0x2d32f48)
    at /usr/src/debug/kdelibs-4.3.2/khtml/rendering/render_object.cpp:2679
        test = true
        child = 0x2d330c8
        cmin = 978
        cmax = 978
#13 0x00000034dcb089e0 in khtml::RenderObject::recalcMinMaxWidths (this=0x2d32d50)
    at /usr/src/debug/kdelibs-4.3.2/khtml/rendering/render_object.cpp:2679
        test = false
        child = 0x2d32f48
        cmin = 0
        cmax = 0
#14 0x00000034dcb5709f in khtml::RenderCanvas::layout (this=0x2d32d50)
    at /usr/src/debug/kdelibs-4.3.2/khtml/rendering/render_canvas.cpp:178
        oldHeight = 565
#15 0x00000034dc9ca8e6 in KHTMLView::layout (this=0x2fd3190) at /usr/src/debug/kdelibs-4.3.2/khtml/khtmlview.cpp:1010
        document = <value optimized out>
        canvas = 0x2d32d50
        ref = <value optimized out>
        root = <value optimized out>
#16 0x00000034dc9caefe in KHTMLView::timerEvent (this=0x2fd3190, e=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.2/khtml/khtmlview.cpp:4160
        updateRegion = {x1 = 0, y1 = 0, x2 = 1023, y2 = 24}
        rects = {{p = 0x7fffc2bfe660, d = 0x7fffc2bfe660}}
#17 0x00000030f6b4e08e in QObject::event (this=0x2fd3190, e=0x7fffc2bfecb0) at kernel/qobject.cpp:1074
No locals.
#18 0x00000030f83dd47f in QWidget::event (this=0x2fd3190, event=0x7fffc2bfecb0) at kernel/qwidget.cpp:7951
No locals.
#19 0x00000030f8735a16 in QFrame::event (this=0x2fd3190, e=0x7fffc2bfecb0) at widgets/qframe.cpp:559
        result = <value optimized out>
#20 0x00000030f87c4211 in QAbstractScrollArea::event (this=0x2fd3190, e=0x7fffc2bfecb0)
    at widgets/qabstractscrollarea.cpp:918
        d = 0x23ec4e0
#21 0x00000034dc9cd143 in KHTMLView::event (this=0x2fd3190, e=<value optimized out>)
    at /usr/src/debug/kdelibs-4.3.2/khtml/khtmlview.cpp:546
No locals.
#22 0x00000030f838f65c in QApplicationPrivate::notify_helper (this=0x1609ea0, receiver=0x2fd3190, e=0x7fffc2bfecb0)
    at kernel/qapplication.cpp:4065
        consumed = <value optimized out>
#23 0x00000030f83968ce in QApplication::notify (this=<value optimized out>, receiver=0x2fd3190, e=0x7fffc2bfecb0)
    at kernel/qapplication.cpp:4030
        res = <value optimized out>
#24 0x00000034d6611786 in KApplication::notify (this=0x7fffc2bff140, receiver=0x2fd3190, event=0x7fffc2bfecb0)
    at /usr/src/debug/kdelibs-4.3.2/kdeui/kernel/kapplication.cpp:302
No locals.
#25 0x00000030f6b3ee6c in QCoreApplication::notifyInternal (this=0x7fffc2bff140, receiver=0x2fd3190, event=0x7fffc2bfecb0)
    at kernel/qcoreapplication.cpp:610
        threadData = 0x15ecfa0
        returnValue = <value optimized out>
        result = false
        cbdata = {0x2fd3190, 0x7fffc2bfecb0, 0x7fffc2bfec4f}
#26 0x00000030f6b698d2 in sendEvent (event=<value optimized out>, receiver=<value optimized out>)
    at kernel/qcoreapplication.h:213
No locals.
#27 QTimerInfoList::activateTimers (event=<value optimized out>, receiver=<value optimized out>)
    at kernel/qeventdispatcher_unix.cpp:580
        e = {<QEvent> = {_vptr.QEvent = 0x30f6e36490, d = 0x0, t = 1, posted = 0, spont = 0, m_accept = 1, reserved = 65},
          id = 2}
        firstTime = false
        n_act = 0
        saveFirstTimerInfo = 0x0
        currentTime = {tv_sec = 2280, tv_usec = 838490}
        maxCount = <value optimized out>
        saveCurrentTimerInfo = 0x0
#28 0x00000030f6b6729d in timerSourceDispatch (source=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:165
No locals.
#29 0x0000003bce03922e in g_main_dispatch (context=<value optimized out>) at gmain.c:1960
        dispatch = 0x30f6b67290 <timerSourceDispatch(GSource*, GSourceFunc, gpointer)>
        was_in_call = 0
        user_data = 0x0
        callback = 0
        cb_funcs = 0x0
        cb_data = <value optimized out>
        current_source_link = {data = 0x160db00, next = 0x0}
        source = 0x160db00
        current = 0x160bbb0
        i = <value optimized out>
#30 IA__g_main_context_dispatch (context=<value optimized out>) at gmain.c:2513
No locals.
#31 0x0000003bce03cc18 in g_main_context_iterate (context=0x160c920, block=<value optimized out>,
    dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2591
        max_priority = 0
        timeout = 0
        some_ready = 1
        nfds = 18
        allocated_nfds = <value optimized out>
        fds = <value optimized out>
        __PRETTY_FUNCTION__ = "g_main_context_iterate"
#32 0x0000003bce03cd3a in IA__g_main_context_iteration (context=0x160c920, may_block=1) at gmain.c:2654
        retval = 1
#33 0x00000030f6b671e6 in QEventDispatcherGlib::processEvents (this=0x15ec7b0, flags=<value optimized out>)
    at kernel/qeventdispatcher_glib.cpp:327
        d = 0x160a0d0
        canWait = true
        result = <value optimized out>
#34 0x00000030f8421ffe in QGuiEventDispatcherGlib::processEvents (this=<value optimized out>, flags=<value optimized out>)
    at kernel/qguieventdispatcher_glib.cpp:202
        d = 0x160a0d0
        returnValue = <value optimized out>
#35 0x00000030f6b3d772 in QEventLoop::processEvents (this=<value optimized out>, flags=...) at kernel/qeventloop.cpp:149
        d = 0x1609d60
#36 0x00000030f6b3db44 in QEventLoop::exec (this=0x7fffc2bfef50, flags=...) at kernel/qeventloop.cpp:201
        d = 0x1609d60
        app = 0x7fffc2bff140
#37 0x00000030f6b3fcd9 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:888
        threadData = 0x15ecfa0
        eventLoop = {<QObject> = {_vptr.QObject = 0x30f6e384f0, static staticMetaObject = {d = {superdata = 0x0,
                stringdata = 0x30f6bd34e0 "QObject", data = 0x30f6bd3580, extradata = 0x30f6e31580}}, d_ptr = 0x1609d60,
            static staticQtMetaObject = {d = {superdata = 0x0, stringdata = 0x30f6bdcd60 "Qt", data = 0x30f6be00e0,
                extradata = 0x0}}}, static staticMetaObject = {d = {superdata = 0x30f6e31560, stringdata =
    0x30f6be51e0 "QEventLoop", data = 0x30f6be5200, extradata = 0x0}}}
        returnCode = -1
#38 0x00000034d7ecf4c3 in kdemain (argc=-670038648, argv=0x1)
    at /usr/src/debug/kdebase-4.3.2/apps/konqueror/src/konqmain.cpp:257
        app = {<KApplication> = {<QApplication> = {<QCoreApplication> = {<QObject> = {_vptr.QObject = 0x34d80f7390,
                  static staticMetaObject = {d = {superdata = 0x0, stringdata = 0x30f6bd34e0 "QObject", data =
    0x30f6bd3580, extradata = 0x30f6e31580}}, d_ptr = 0x1609ea0, static staticQtMetaObject = {d = {superdata = 0x0,
                      stringdata = 0x30f6bdcd60 "Qt", data = 0x30f6be00e0, extradata = 0x0}}}, static staticMetaObject = {
                  d = {superdata = 0x30f6e31560, stringdata = 0x30f6be5280 "QCoreApplication", data = 0x30f6be5320,
                    extradata = 0x0}}, static self = 0x7fffc2bff140}, static staticMetaObject = {d = {superdata =
    0x30f6e38580, stringdata = 0x30f8994280 "QApplication", data = 0x30f8994480, extradata = 0x0}}},
            static staticMetaObject = {d = {superdata = 0x30f8d90760, stringdata = 0x34d6771920 "KApplication", data =
    0x34d6771ac0, extradata = 0x0}}, static loadedByKdeinit = false, static KApp = 0x7fffc2bff140, d = 0x1644a30},
          static staticMetaObject = {d = {superdata = 0x34d69fc420, stringdata = 0x34d7ed1660 "KonquerorApplication",
              data = 0x34d7ed1740, extradata = 0x0}}, closed_by_sm = false}
        __PRETTY_FUNCTION__ = "int kdemain(int, char**)"
        options = {d = 0x1608830}
        args = <value optimized out>
        crashlog_file = {<QTemporaryFile> = {<QFile> = {<QIODevice> = {<QObject> = {_vptr.QObject = 0x34d627d0f0,
                  static staticMetaObject = {d = {superdata = 0x0, stringdata = 0x30f6bd34e0 "QObject", data =
    0x30f6bd3580, extradata = 0x30f6e31580}}, d_ptr = 0x16928c0, static staticQtMetaObject = {d = {superdata = 0x0,
                      stringdata = 0x30f6bdcd60 "Qt", data = 0x30f6be00e0, extradata = 0x0}}}, static staticMetaObject = {
                  d = {superdata = 0x30f6e31560, stringdata = 0x30f6be44e0 "QIODevice", data = 0x30f6be4540, extradata =
    0x0}}}, static staticMetaObject = {d = {superdata = 0x30f6e376a0, stringdata = 0x30f6be4480 "QFile", data =
    0x30f6be44a0, extradata = 0x0}}}, static staticMetaObject = {d = {superdata = 0x30f6e37560, stringdata =
    0x30f6be4600 "QTemporaryFile", data = 0x30f6be4620, extradata = 0x0}}}, d = 0x16deb20}
#39 0x0000003bcc81eb1d in __libc_start_main (main=<value optimized out>, argc=<value optimized out>,
    ubp_av=<value optimized out>, init=<value optimized out>, fini=<value optimized out>, rtld_fini=<value optimized out>,
    stack_end=<value optimized out>) at libc-start.c:220
        result = <value optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, 2995520432239634194, 4196144, 140736460749664, 0, 0,
    -2995530877780269294, 3018996101574387474}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x3bcc40e22f, 0x0}, data = {
              prev = 0x0, cleanup = 0x0, canceltype = -868163025}}}
        not_first_call = <value optimized out>
#40 0x0000000000400759 in _start ()
No symbol table info available.