Summary: | Crash on adsl.free.fr | ||
---|---|---|---|
Product: | [Applications] konqueror | Reporter: | Christophe Marin <christophe> |
Component: | khtml | Assignee: | Konqueror Developers <konq-bugs> |
Status: | RESOLVED FIXED | ||
Severity: | crash | CC: | majewsky, maksim |
Priority: | NOR | ||
Version: | SVN | ||
Target Milestone: | --- | ||
Platform: | openSUSE | ||
OS: | Linux | ||
URL: | http://adsl.free.fr | ||
Latest Commit: | Version Fixed In: | ||
Sentry Crash Report: |
Description
Christophe Marin
2010-05-28 10:55:55 UTC
Ack. ==6850== Invalid read of size 4 ==6850== at 0xD14C696: khtml::DynamicDomRestyler::restyleDependent(DOM::ElementImpl*, khtml::StructuralDependencyType) (dom_restyler.cpp:67) ==6850== by 0xD12AFF8: DOM::ElementImpl::structureChanged() (dom_elementimpl.cpp:924) ==6850== by 0xD121182: DOM::NodeBaseImpl::insertBefore(DOM::NodeImpl*, DOM::NodeImpl*, int&) (dom_nodeimpl.cpp:1640) ==6850== by 0xD2FE679: DOMNodeProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (kjs_dom.cpp:653) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC46DD3: KJS::FunctionProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function_object.cpp:139) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC46DD3: KJS::FunctionProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function_object.cpp:139) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC46DD3: KJS::FunctionProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function_object.cpp:139) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC46DD3: KJS::FunctionProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function_object.cpp:139) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) Erk, forgot the rest of the trace: ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xD35EBD9: KJS::JSEventListener::handleEvent(DOM::Event&) (kjs_events.cpp:106) ==6850== Address 0xc3a1228 is 0 bytes inside a block of size 56 free'd ==6850== at 0x40236AD: operator delete(void*) (vg_replace_malloc.c:346) ==6850== by 0xD178DC4: DOM::HTMLDivElementImpl::~HTMLDivElementImpl() (html_blockimpl.h:37) ==6850== by 0xD113994: khtml::TreeShared<DOM::EventTargetImpl>::removedLastRef() (shared.h:59) ==6850== by 0xD0764EE: khtml::TreeShared<DOM::EventTargetImpl>::deref() (shared.h:65) ==6850== by 0xD122532: WTF::SharedPtr<DOM::NodeImpl>::~SharedPtr() (SharedPtr.h:35) ==6850== by 0xD2F6634: KJS::DOMNode::~DOMNode() (kjs_dom.cpp:142) ==6850== by 0xD321C77: KJS::DOMElement::~DOMElement() (kjs_dom.h:175) ==6850== by 0xD321CE7: KJS::HTMLElement::~HTMLElement() (kjs_html.h:66) ==6850== by 0xDC27002: KJS::Collector::collect() (collector.cpp:712) ==6850== by 0xDC277D6: KJS::Collector::allocate(unsigned int) (collector.cpp:331) ==6850== by 0xDC6873C: KJS::JSCell::operator new(unsigned int) (value.cpp:41) ==6850== by 0xDC5110A: KJS::StringImp::toObject(KJS::ExecState*) const (internal.cpp:99) ==6850== by 0xD371153: KJS::JSValue::toObject(KJS::ExecState*) const (value.h:492) ==6850== by 0xDC85A02: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:707) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC46DD3: KJS::FunctionProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function_object.cpp:139) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC46DD3: KJS::FunctionProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function_object.cpp:139) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC46DD3: KJS::FunctionProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function_object.cpp:139) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) ==6850== by 0xDC65409: KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (function.cpp:172) ==6850== by 0xD33B705: KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) (object.h:616) ==6850== by 0xDC89D00: KJS::Machine::runBlock(KJS::ExecState*, WTF::Vector<unsigned char, 0u> const&, KJS::ExecState*) (codes.def:1209) *** Bug 239878 has been marked as a duplicate of this bug. *** dependencies on a non-inDocument() or displayed elements, which are not cleared as the element isn't detached. Probably should clear the dependencies in ~ instead (there are other ways of triggering such a scenario, like getComputedStyle). Not sure why it'd crash in adding of dependencies for you, though. SVN commit 1132486 by orlovich: Don't create dangerous spurious dependencies on querySelector[All] -- they can get dangly. BUG: 239846 M +7 -3 cssstyleselector.cpp M +2 -1 cssstyleselector.h WebSVN link: http://websvn.kde.org/?view=rev&revision=1132486 |