Bug 223583

Application: kate (3.3.90)
KDE Platform Version: 4.3.90 (KDE 4.3.90 (KDE 4.4 RC1))
Qt Version: 4.6.0
Operating System: Linux 2.6.31-17-generic i686
Distribution: Ubuntu 9.10

-- Information about the crash:
In the provided css example, when you delete the last paragraphe by selecting from the end of the css to the comment "/*  classement gestion */" included, and pressing Backspace. If you press on backspace again, Kate crash.

The crash can be reproduced every time.

 -- Backtrace:
Application: Kate (kdeinit4), signal: Segmentation fault
[Current thread is 1 (Thread 0xb7869700 (LWP 7250))]

Thread 2 (Thread 0xb6000b70 (LWP 7251)):
#0  0x0088d422 in __kernel_vsyscall ()
#1  0x00225e15 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2  0x0280ebb7 in WTF::TCMalloc_PageHeap::scavengerThread (this=0x28e81a0) at ../3rdparty/javascriptcore/JavaScriptCore/wtf/FastMalloc.cpp:2304
#3  0x0280ec01 in WTF::TCMalloc_PageHeap::runScavengerThread (context=0x28e81a0) at ../3rdparty/javascriptcore/JavaScriptCore/wtf/FastMalloc.cpp:1438
#4  0x0022180e in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#5  0x048b08de in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 1 (Thread 0xb7869700 (LWP 7250)):
[KCrash Handler]
#6  KateLineLayout::viewLineCount (this=0x0) at ../../kate/render/katelinelayout.cpp:173
#7  0x022e8eac in KateLayoutCache::viewLine (this=0xa0deee0, realCursor=...) at ../../kate/render/katelayoutcache.cpp:395
#8  0x022e94df in KateLayoutCache::textLayout (this=0xa0deee0, realCursor=...) at ../../kate/render/katelayoutcache.cpp:337
#9  0x02359d71 in KateViewInternal::makeVisible (this=0xa0ddb30, c=..., endCol=-1, force=false, center=false, calledExternally=false) at ../../kate/view/kateviewinternal.cpp:690
#10 0x0235a4d0 in KateViewInternal::updateCursor (this=0xa0ddb30, newCursor=..., force=true, center=<value optimized out>, calledExternally=<value optimized out>)
    at ../../kate/view/kateviewinternal.cpp:1912
#11 0x0235b25b in KateViewInternal::editEnd (this=0xa0ddb30, editTagLineStart=68, editTagLineEnd=68, tagFrom=true) at ../../kate/view/kateviewinternal.cpp:3397
#12 0x02339969 in KateView::editEnd (this=0xa0da7d8, editTagLineStart=68, editTagLineEnd=68, tagFrom=<value optimized out>) at ../../kate/view/kateview.cpp:1603
#13 0x022a26e4 in KateDocument::editEnd (this=0x9edbc90) at ../../kate/document/katedocument.cpp:981
#14 0x022a9796 in KateDocument::removeText (this=0x9edbc90, _range=..., block=false) at ../../kate/document/katedocument.cpp:825
#15 0x022ab4dd in KateDocument::backspace (this=0x9edbc90, view=0xa0da7d8, c=...) at ../../kate/document/katedocument.cpp:2874
#16 0x0234ee21 in KateViewInternal::doBackspace (this=0xa0ddb30) at ../../kate/view/kateviewinternal.cpp:854
#17 0x0233ccac in KateView::backspace (this=0xa0da7d8) at ../../kate/view/kateview.cpp:2296
#18 0x02341b14 in KateView::qt_metacall (this=0xa0da7d8, _c=QMetaObject::InvokeMetaMethod, _id=51, _a=0xbfb63e08) at ./kateview.moc:373
#19 0x010e311a in QMetaObject::metacall (object=0xa0da7d8, cl=QMetaObject::ReadProperty, idx=90, argv=0xbfb63e08) at kernel/qmetaobject.cpp:237
#20 0x010f189b in QMetaObject::activate (sender=0xa161cf8, m=0x349ed98, local_signal_index=1, argv=0xbfb63e08) at kernel/qobject.cpp:3294
#21 0x02b78a39 in QAction::triggered (this=0xa161cf8, _t1=false) at .moc/release-shared/moc_qaction.cpp:263
#22 0x02b7abac in QAction::activate (this=0xa161cf8, event=QAction::Trigger) at kernel/qaction.cpp:1245
#23 0x02b7c4f8 in QAction::event (this=0x9e5ad38, e=0x0) at kernel/qaction.cpp:1162
#24 0x00991573 in KAction::event (this=0xa161cf8, event=0xbfb642b8) at ../../kdeui/actions/kaction.cpp:129
#25 0x02b7f19c in QApplicationPrivate::notify_helper (this=0x9d94e10, receiver=0xa161cf8, e=0xbfb642b8) at kernel/qapplication.cpp:4242
#26 0x02b85df7 in QApplication::notify (this=0xbfb65164, receiver=0xa161cf8, e=0xbfb642b8) at kernel/qapplication.cpp:3661
#27 0x00a7b67a in KApplication::notify (this=0xbfb65164, receiver=0xa161cf8, event=0xbfb642b8) at ../../kdeui/kernel/kapplication.cpp:302
#28 0x010ddeab in QCoreApplication::notifyInternal (this=0xbfb65164, receiver=0xa161cf8, event=0xbfb642b8) at kernel/qcoreapplication.cpp:704
#29 0x02bbff7d in QCoreApplication::sendEvent (this=0x9d94ebc, e=0xbfb646c4) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:215
#30 QShortcutMap::dispatchEvent (this=0x9d94ebc, e=0xbfb646c4) at kernel/qshortcutmap.cpp:879
#31 0x02bc1d5e in QShortcutMap::tryShortcutEvent (this=0x9d94ebc, o=0xa0ddb30, e=0xbfb646c4) at kernel/qshortcutmap.cpp:364
#32 0x02b87979 in QApplication::notify (this=0xbfb65164, receiver=0xa0ddb30, e=0xbfb646c4) at kernel/qapplication.cpp:3703
#33 0x00a7b67a in KApplication::notify (this=0xbfb65164, receiver=0xa0ddb30, event=0xbfb646c4) at ../../kdeui/kernel/kapplication.cpp:302
#34 0x010ddeab in QCoreApplication::notifyInternal (this=0xbfb65164, receiver=0xa0ddb30, event=0xbfb646c4) at kernel/qcoreapplication.cpp:704
#35 0x02b8007e in QCoreApplication::sendSpontaneousEvent (receiver=0xa0ddb30, event=0x9e5ad38) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:218
#36 qt_sendSpontaneousEvent (receiver=0xa0ddb30, event=0x9e5ad38) at kernel/qapplication.cpp:5219
#37 0x02c37840 in QKeyMapper::sendKeyEvent (keyWidget=0xa0ddb30, grab=false, type=QEvent::KeyPress, code=16777219, modifiers=..., text=..., autorepeat=<value optimized out>, 
    count=<value optimized out>, nativeScanCode=22, nativeVirtualKey=65288, nativeModifiers=16) at kernel/qkeymapper_x11.cpp:1861
#38 0x02c39d89 in QKeyMapperPrivate::translateKeyEvent (this=0x9dc1ce8, keyWidget=0xa0ddb30, event=0xbfb64d7c, grab=false) at kernel/qkeymapper_x11.cpp:1831
#39 0x02c0d4c7 in QApplication::x11ProcessEvent (this=0xbfb65164, event=0xbfb64d7c) at kernel/qapplication_x11.cpp:3394
#40 0x02c3d04a in x11EventSourceDispatch (s=0x9db0b40, callback=0, user_data=0x0) at kernel/qguieventdispatcher_glib.cpp:146
#41 0x06a63e88 in g_main_context_dispatch () from /lib/libglib-2.0.so.0
#42 0x06a67730 in ?? () from /lib/libglib-2.0.so.0
#43 0x06a67863 in g_main_context_iteration () from /lib/libglib-2.0.so.0
#44 0x01109bd5 in QEventDispatcherGlib::processEvents (this=0x9db1050, flags=...) at kernel/qeventdispatcher_glib.cpp:407
#45 0x02c3cb75 in QGuiEventDispatcherGlib::processEvents (this=0x9db1050, flags=...) at kernel/qguieventdispatcher_glib.cpp:202
#46 0x010dc4c9 in QEventLoop::processEvents (this=0xbfb65074, flags=) at kernel/qeventloop.cpp:149
#47 0x010dc91a in QEventLoop::exec (this=0xbfb65074, flags=...) at kernel/qeventloop.cpp:201
#48 0x010e0b0f in QCoreApplication::exec () at kernel/qcoreapplication.cpp:981
#49 0x02b7f237 in QApplication::exec () at kernel/qapplication.cpp:3570
#50 0x08317a25 in kdemain () from /usr/lib/libkdeinit4_kate.so
#51 0x0804dff7 in launch (argc=<value optimized out>, _name=<value optimized out>, args=<value optimized out>, cwd=0x0, envc=1, envs=0x9d490a9 "DISPLAY=:0.0", reset_env=false, tty=0x0, 
    avoid_loops=false, startup_id_str=0x9d490ba "portable;1263997690;950472;1826_TIME26139013") at ../../kinit/kinit.cpp:706
#52 0x0804ec15 in handle_launcher_request (sock=<value optimized out>, who=<value optimized out>) at ../../kinit/kinit.cpp:1198
#53 0x0804f08c in handle_requests (waitForPid=<value optimized out>) at ../../kinit/kinit.cpp:1391
#54 0x0804fe27 in main (argc=4, argv=0xbfb660b4, envp=0xbfb660c8) at ../../kinit/kinit.cpp:1830

Possible duplicates by query: bug 223345, bug 219853, bug 206972, bug 204865.

Reported using DrKonqi