| Summary: | Konqueror crash if this URL open: http://underverse.su/viewtopic.php?t=10420 | ||
|---|---|---|---|
| Product: | [Applications] konqueror | Reporter: | grio <grio> |
| Component: | khtml | Assignee: | Konqueror Developers <konq-bugs> |
| Status: | RESOLVED WORKSFORME | ||
| Severity: | crash | CC: | andreas_nordal_4, eshkinkot, justin.zobel, neto_lins, rasasi78, tommi.tervo |
| Priority: | NOR | ||
| Version First Reported In: | 4.4.2 | ||
| Target Milestone: | --- | ||
| Platform: | Ubuntu | ||
| OS: | Linux | ||
| Latest Commit: | Version Fixed In: | ||
| Sentry Crash Report: | |||
|
Description
grio
2010-05-23 20:30:13 UTC
==10131== Invalid read of size 1 ==10131== at 0xF05E5F7: khtml::RenderObject::isFloating() const (render_object.h:324) ==10131== by 0xF1BBBC3: khtml::requiresLineBox(khtml::BidiIterator&) (bidi.cpp:1827) ==10131== by 0xF1BE122: khtml::RenderBlock::findNextLineBreak(khtml::BidiIterator&, khtml::BidiState&) (bidi.cpp:1898) ==10131== by 0xF1C1198: khtml::RenderBlock::layoutInlineChildren(bool, int) (bidi.cpp:1506) ==10131== by 0xF1CCF82: khtml::RenderBlock::layoutBlock(bool) (render_block.cpp:834) ==10131== by 0xF1CD484: khtml::RenderBlock::layout() (render_block.cpp:737) ==10131== by 0xF074E50: khtml::RenderObject::layoutIfNeeded() (render_object.h:480) ==10131== by 0xF1CC74F: khtml::RenderBlock::layoutBlockChildren(bool) (render_block.cpp:1557) ==10131== by 0xF1CCF93: khtml::RenderBlock::layoutBlock(bool) (render_block.cpp:836) ==10131== by 0xF1CD484: khtml::RenderBlock::layout() (render_block.cpp:737) ==10131== by 0xF074E50: khtml::RenderObject::layoutIfNeeded() (render_object.h:480) ==10131== by 0xF1CC74F: khtml::RenderBlock::layoutBlockChildren(bool) (render_block.cpp:1557) ==10131== by 0xF1CCF93: khtml::RenderBlock::layoutBlock(bool) (render_block.cpp:836) ==10131== by 0xF1CD484: khtml::RenderBlock::layout() (render_block.cpp:737) ==10131== by 0xF074E50: khtml::RenderObject::layoutIfNeeded() (render_object.h:480) ==10131== by 0xF1CC74F: khtml::RenderBlock::layoutBlockChildren(bool) (render_block.cpp:1557) ==10131== by 0xF1CCF93: khtml::RenderBlock::layoutBlock(bool) (render_block.cpp:836) ==10131== by 0xF2130A2: khtml::RenderTableCell::layout() (render_table.cpp:2527) ==10131== by 0xF213D20: khtml::RenderTableRow::layout() (render_table.cpp:2310) ==10131== by 0xF074E50: khtml::RenderObject::layoutIfNeeded() (render_object.h:480) ==10131== by 0xF1F029D: khtml::RenderContainer::layout() (render_container.cpp:640) ==10131== by 0xF21ACFA: khtml::RenderTable::layout() (render_table.cpp:347) ==10131== by 0xF074E50: khtml::RenderObject::layoutIfNeeded() (render_object.h:480) ==10131== by 0xF1CC74F: khtml::RenderBlock::layoutBlockChildren(bool) (render_block.cpp:1557) ==10131== by 0xF1CCF93: khtml::RenderBlock::layoutBlock(bool) (render_block.cpp:836) ==10131== by 0xF1CD484: khtml::RenderBlock::layout() (render_block.cpp:737) ==10131== by 0xF074E50: khtml::RenderObject::layoutIfNeeded() (render_object.h:480) ==10131== by 0xF1CC74F: khtml::RenderBlock::layoutBlockChildren(bool) (render_block.cpp:1557) ==10131== by 0xF1CCF93: khtml::RenderBlock::layoutBlock(bool) (render_block.cpp:836) ==10131== by 0xF2130A2: khtml::RenderTableCell::layout() (render_table.cpp:2527) ==10131== by 0xF213D20: khtml::RenderTableRow::layout() (render_table.cpp:2310) ==10131== by 0xF074E50: khtml::RenderObject::layoutIfNeeded() (render_object.h:480) ==10131== by 0xF1F029D: khtml::RenderContainer::layout() (render_container.cpp:640) ==10131== by 0xF21ACFA: khtml::RenderTable::layout() (render_table.cpp:347) ==10131== by 0xF074E50: khtml::RenderObject::layoutIfNeeded() (render_object.h:480) ==10131== by 0xF1CC74F: khtml::RenderBlock::layoutBlockChildren(bool) (render_block.cpp:1557) ==10131== by 0xF1CCF93: khtml::RenderBlock::layoutBlock(bool) (render_block.cpp:836) ==10131== by 0xF1CD484: khtml::RenderBlock::layout() (render_block.cpp:737) ==10131== by 0xF074E50: khtml::RenderObject::layoutIfNeeded() (render_object.h:480) ==10131== by 0xF1CC74F: khtml::RenderBlock::layoutBlockChildren(bool) (render_block.cpp:1557) ==10131== by 0xF1CCF93: khtml::RenderBlock::layoutBlock(bool) (render_block.cpp:836) ==10131== by 0xF1CD484: khtml::RenderBlock::layout() (render_block.cpp:737) ==10131== by 0xF074E50: khtml::RenderObject::layoutIfNeeded() (render_object.h:480) ==10131== by 0xF1CC74F: khtml::RenderBlock::layoutBlockChildren(bool) (render_block.cpp:1557) ==10131== by 0xF1CCF93: khtml::RenderBlock::layoutBlock(bool) (render_block.cpp:836) ==10131== by 0xF1CD484: khtml::RenderBlock::layout() (render_block.cpp:737) ==10131== by 0xF074E50: khtml::RenderObject::layoutIfNeeded() (render_object.h:480) ==10131== by 0xF1CC74F: khtml::RenderBlock::layoutBlockChildren(bool) (render_block.cpp:1557) ==10131== by 0xF1CCF93: khtml::RenderBlock::layoutBlock(bool) (render_block.cpp:836) ==10131== by 0xF1CD484: khtml::RenderBlock::layout() (render_block.cpp:737) ==10131== Address 0x97767ba is 34 bytes inside a block of size 68 free'd ==10131== at 0x4023996: free (vg_replace_malloc.c:325) ==10131== by 0xF2042D5: khtml::RenderArena::free(unsigned int, void*) (render_arena.cpp:122) ==10131== by 0xF1E2712: khtml::RenderObject::arenaDelete(khtml::RenderArena*, void*) (render_object.cpp:2400) ==10131== by 0xF1E27D7: khtml::RenderObject::detach() (render_object.cpp:2385) ==10131== by 0xF201A9A: khtml::RenderText::detach() (render_text.cpp:729) ==10131== by 0xF11A8FB: DOM::NodeImpl::detach() (dom_nodeimpl.cpp:976) ==10131== by 0xF11FB09: DOM::NodeBaseImpl::removeChild(DOM::NodeImpl*, int&) (dom_nodeimpl.cpp:1749) ==10131== by 0xF2FD5B9: DOMNodeProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (kjs_dom.cpp:649) ==10131== by 0xF33A705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==10131== by 0xFC88D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==10131== by 0xFC64409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==10131== by 0xF33A705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==10131== by 0xFC45D29: KJS::FunctionProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function_object.cpp:123) ==10131== by 0xF33A705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==10131== by 0xFC88D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==10131== by 0xFC64409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==10131== by 0xF33A705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==10131== by 0xFC88D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==10131== by 0xFC64409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==10131== by 0xF33A705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==10131== by 0xFC88D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==10131== by 0xFC64409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==10131== by 0xF33A705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==10131== by 0xFC88D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==10131== by 0xFC64409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==10131== by 0xF33A705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==10131== by 0xFC45DD3: KJS::FunctionProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function_object.cpp:139) ==10131== by 0xF33A705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==10131== by 0xFC88D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==10131== by 0xFC64409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==10131== by 0xF33A705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==10131== by 0xFC88D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==10131== by 0xFC64409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==10131== by 0xF33A705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==10131== by 0xFC88D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==10131== by 0xFC64409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==10131== by 0xF33A705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==10131== by 0xFC88D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==10131== by 0xFC64409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==10131== by 0xF33A705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==10131== by 0xFC88D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==10131== by 0xFC64409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==10131== by 0xF33A705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==10131== by 0xFC45DD3: KJS::FunctionProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function_object.cpp:139) ==10131== by 0xF33A705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==10131== by 0xFC88D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==10131== by 0xFC64409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==10131== by 0xF33A705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==10131== by 0xFC88D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==10131== by 0xFC64409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) *** Bug 253814 has been marked as a duplicate of this bug. *** *** Bug 255818 has been marked as a duplicate of this bug. *** *** Bug 263290 has been marked as a duplicate of this bug. *** Bug 263290 has a partially reduced testcase. *** Bug 266463 has been marked as a duplicate of this bug. *** Thank you for the crash report. As it has been a while since this was reported, can you please test and confirm if this issue is still occurring or if this bug report can be marked as resolved. I have set the bug status to "needsinfo" pending your response, please change back to "reported" or "resolved/worksforme" when you respond, thank you. Dear Bug Submitter, This bug has been in NEEDSINFO status with no change for at least 15 days. Please provide the requested information as soon as possible and set the bug status as REPORTED. Due to regular bug tracker maintenance, if the bug is still in NEEDSINFO status with no change in 30 days the bug will be closed as RESOLVED > WORKSFORME due to lack of needed information. For more information about our bug triaging procedures please read the wiki located here: https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging If you have already provided the requested information, please mark the bug as REPORTED so that the KDE team knows that the bug is ready to be confirmed. Thank you for helping us make KDE software even better for everyone! Hi: I'm not seeing this crashing on konqueror 20.08.3 either using KHTML engine or webengine. Debian unstable KDE Frameworks 5.77.0 Qt 5.15.2 Thanks for the update Raul. I'm marking this as resolved. If anyone else is still experiencing the issue please feel free to reopen this report. |