Bug 217670

Summary:	Pages with javascript crash konqueror embedded
Product:	[Applications] konqueror	Reporter:	Tony <tahoward>
Component:	kjs	Assignee:	Konqueror Developers <konq-bugs>
Status:	RESOLVED UNMAINTAINED
Severity:	crash	CC:	andrew.crouthamel, cpigat242, jhartman, kevin.kofler
Priority:	NOR
Version:	unspecified
Target Milestone:	---
Platform:	Unlisted Binaries
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:
Attachments:	Potential fix for the crash

Description Tony 2009-12-07 01:48:44 UTC

Application that crashed: mythbrowser
Version of the application: v0.32
KDE Version: 4.3.3 (KDE 4.3.3)
Qt Version: 4.5.3
Operating System: Linux 2.6.31.5-127.fc12.i686.PAE i686
Distribution: "Fedora release 12 (Constantine)"

What I was doing when the application crashed:
I'm using MythBrowser from the latest MythTV .21.  On Fedora 9, everything works.  On Fedora 11 and 12, I get this error immediately after visiting any page with Javascript, such as http://www.slashdot.org.  I've seen this error on a Pentium 4, a Pentium M, and a Core 2 Duo.  Except for the part about happening on ARM, the symtoms reported here: http://old.nabble.com/Crash-on-arm-td14735115.html seem to match, and the given fix to ustring.cpp also seems to fix the problem.

 -- Backtrace:
Application: mythbrowser (mythbrowser), signal: Segmentation fault
[KCrash Handler]
#6  0x0033944f in kjs_dtoa () from /usr/lib/libkjs.so.1
#7  0x0033e9a0 in KJS::UString::from(double) () from /usr/lib/libkjs.so.1
#8  0x0033ec97 in KJS::NumberImp::toString(KJS::ExecState*) const () from /usr/lib/libkjs.so.1
#9  0x003472ab in KJS::ValueImp::dispatchToString(KJS::ExecState*) const () from /usr/lib/libkjs.so.1
#10 0x00351b03 in KJS::add(KJS::ExecState*, KJS::Value const&, KJS::Value const&, char) () from /usr/lib/libkjs.so.1
#11 0x00372af3 in ?? () from /usr/lib/libkjs.so.1
#12 0x00331b44 in ?? () from /usr/lib/libkjs.so.1
#13 0x00370096 in ?? () from /usr/lib/libkjs.so.1
#14 0x0036ff9c in ?? () from /usr/lib/libkjs.so.1
#15 0x00375c1e in ?? () from /usr/lib/libkjs.so.1
#16 0x0037149a in ?? () from /usr/lib/libkjs.so.1
#17 0x00377ea0 in ?? () from /usr/lib/libkjs.so.1
#18 0x0035996a in KJS::DeclaredFunctionImp::execute(KJS::ExecState*) () from /usr/lib/libkjs.so.1
#19 0x0035afa7 in KJS::FunctionImp::call(KJS::ExecState*, KJS::Object&, KJS::List const&) () from /usr/lib/libkjs.so.1
#20 0x0035b0d4 in KJS::Object::call(KJS::ExecState*, KJS::Object&, KJS::List const&) () from /usr/lib/libkjs.so.1
#21 0x003748c9 in ?? () from /usr/lib/libkjs.so.1
#22 0x00372351 in ?? () from /usr/lib/libkjs.so.1
#23 0x0037149a in ?? () from /usr/lib/libkjs.so.1
#24 0x00377ea0 in ?? () from /usr/lib/libkjs.so.1
#25 0x003766ae in ?? () from /usr/lib/libkjs.so.1
#26 0x00376b1b in KJS::Interpreter::evaluate(KJS::UString const&, KJS::Value const&) () from /usr/lib/libkjs.so.1
#27 0x049f2ebd in ?? () from /usr/lib/libkhtml.so.4
#28 0x0481d07a in KHTMLPart::executeScript(QString const&, int, DOM::Node const&, QString const&) () from /usr/lib/libkhtml.so.4
#29 0x048a5819 in ?? () from /usr/lib/libkhtml.so.4
#30 0x048b7fc8 in ?? () from /usr/lib/libkhtml.so.4
#31 0x0497709a in ?? () from /usr/lib/libkhtml.so.4
#32 0x0497fb99 in ?? () from /usr/lib/libkhtml.so.4
#33 0x0497df2e in ?? () from /usr/lib/libkhtml.so.4
#34 0x0497e152 in ?? () from /usr/lib/libkhtml.so.4
#35 0x01345482 in QObject::activate_signal(QConnectionList*, QUObject*) () from /usr/lib/qt-3.3/lib/libqt-mt.so.3
#36 0x01b534c6 in KIO::Job::result(KIO::Job*) () from /usr/lib/libkio.so.4
#37 0x01b9003e in KIO::Job::emitResult() () from /usr/lib/libkio.so.4
#38 0x01b90d1f in KIO::SimpleJob::slotFinished() () from /usr/lib/libkio.so.4
#39 0x01b91395 in KIO::TransferJob::slotFinished() () from /usr/lib/libkio.so.4
#40 0x01b85468 in KIO::TransferJob::qt_invoke(int, QUObject*) () from /usr/lib/libkio.so.4
#41 0x01345482 in QObject::activate_signal(QConnectionList*, QUObject*) () from /usr/lib/qt-3.3/lib/libqt-mt.so.3
#42 0x013475b4 in QObject::activate_signal(int) () from /usr/lib/qt-3.3/lib/libqt-mt.so.3
#43 0x01b4672d in KIO::SlaveInterface::finished() () from /usr/lib/libkio.so.4
#44 0x01bbf416 in KIO::SlaveInterface::dispatch(int, QMemArray<char> const&) () from /usr/lib/libkio.so.4
#45 0x01bb58c7 in KIO::SlaveInterface::dispatch() () from /usr/lib/libkio.so.4
#46 0x01b6952d in KIO::Slave::gotInput() () from /usr/lib/libkio.so.4
#47 0x01baacc0 in KIO::Slave::qt_invoke(int, QUObject*) () from /usr/lib/libkio.so.4
#48 0x01345482 in QObject::activate_signal(QConnectionList*, QUObject*) () from /usr/lib/qt-3.3/lib/libqt-mt.so.3
#49 0x01346c25 in QObject::activate_signal(int, int) () from /usr/lib/qt-3.3/lib/libqt-mt.so.3
#50 0x016da221 in QSocketNotifier::activated(int) () from /usr/lib/qt-3.3/lib/libqt-mt.so.3
#51 0x01367557 in QSocketNotifier::event(QEvent*) () from /usr/lib/qt-3.3/lib/libqt-mt.so.3
#52 0x012dcc75 in QApplication::internalNotify(QObject*, QEvent*) () from /usr/lib/qt-3.3/lib/libqt-mt.so.3
#53 0x012de983 in QApplication::notify(QObject*, QEvent*) () from /usr/lib/qt-3.3/lib/libqt-mt.so.3
#54 0x065cb82c in KApplication::notify(QObject*, QEvent*) () from /usr/lib/libkdecore.so.4
#55 0x012d0554 in QEventLoop::activateSocketNotifiers() () from /usr/lib/qt-3.3/lib/libqt-mt.so.3
#56 0x01285a54 in QEventLoop::processEvents(unsigned int) () from /usr/lib/qt-3.3/lib/libqt-mt.so.3
#57 0x012f7710 in QEventLoop::enterLoop() () from /usr/lib/qt-3.3/lib/libqt-mt.so.3
#58 0x05eabc9a in MythDialog::exec() () from /usr/mythtv-test/lib/libmyth-0.21.so.0
#59 0x08051a1b in main ()

Reported using DrKonqi

Comment 1 Tony 2009-12-07 01:52:12 UTC

Created attachment 38888 [details]
Potential fix for the crash

Here's the patch I found that seems to fix the problem.

Comment 2 Maksim Orlovich 2009-12-07 21:05:52 UTC

Do you know what compiler this was built with? 
Perhaps http://websvn.kde.org/?view=revision&revision=960321 fixes things?

Comment 3 Tony 2009-12-08 05:34:43 UTC

These are Fedora 12 binaries.  It ships with GCC 4.2.2 - I'm guessing that's what they built with.  I couldn't get the patch to apply cleanly to my level of code, but my version doesn't contain the fix you mentioned, so it probably is the same issue.

Comment 4 Kevin Kofler 2009-12-08 14:49:01 UTC

The commit is from KDE 4, this crash is with the KDE 3 compatibility kdelibs3.

Comment 5 Maksim Orlovich 2009-12-08 16:05:51 UTC

The commit is to dtoa.cpp, which is third party code that's basically unchanged.

Comment 6 Christophe Marin 2011-10-29 12:34:15 UTC

*** Bug 285014 has been marked as a duplicate of this bug. ***

Comment 7 Andrew Crouthamel 2018-11-01 13:41:28 UTC

Dear Bug Submitter,

This bug has been stagnant for a long time. Could you help us out and re-test if the bug is valid in the latest version? I am setting the status to NEEDSINFO pending your response, please change the Status back to REPORTED when you respond.

Thank you for helping us make KDE software even better for everyone!

Comment 8 Kevin Kofler 2018-11-03 13:51:29 UTC

This crash was reported against KHTML/KJS from kdelibs 3.5.10 (!). If it cannot be reproduced with KF5, I propose we close it as UNMAINTAINED.

Comment 9 Andrew Crouthamel 2018-11-05 02:45:06 UTC

Thanks for the update!