Bug 243217

Summary: javascript-induced crash
Product: [Applications] konqueror Reporter: Cyrille Dunant <cyrille.dunant>
Component: khtmlAssignee: Konqueror Developers <konq-bugs>
Status: RESOLVED WORKSFORME    
Severity: major CC: aiacovitti, benderamp, Craig.Magina, maksim, pascal, rasasi78
Priority: NOR    
Version: unspecified   
Target Milestone: ---   
Platform: openSUSE   
OS: Linux   
Latest Commit: Version Fixed In:
Sentry Crash Report:

Description Cyrille Dunant 2010-06-30 04:14:34 UTC
Application: konqueror (4.4.90 (KDE 4.4.90 (KDE 4.5 RC1)) "release 2")
KDE Platform Version: 4.4.90 (KDE 4.4.90 (KDE 4.5 RC1)) "release 2"
Qt Version: 4.7.0
Operating System: Linux 2.6.31.12-0.2-desktop x86_64
Distribution: "openSUSE 11.2 (x86_64)"

-- Information about the crash:
- What I was doing when the application crashed:

The crash occured after following an internal wired.com link.

a popup appeared sayng:

bad JSON: %7B%22method%22%3A%20%22cookieFailure%22%2C%20%22params%22%3A%20%5Bnull%5D%2C%20%22id%22%3A%20null%7D

-- Backtrace:
Application: Konqueror (kdeinit4), signal: Segmentation fault
[Current thread is 1 (Thread 0x7f4f504e4760 (LWP 7407))]

Thread 7 (Thread 0x7f4f39128710 (LWP 13370)):
#0  0x00007f4f4ee86709 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00007f4f4f113a82 in QWaitCondition::wait(QMutex*, unsigned long) () from /usr/lib64/libQtCore.so.4
#2  0x00007f4f4f109312 in QThreadPoolThread::run() () from /usr/lib64/libQtCore.so.4
#3  0x00007f4f4f112f5e in QThreadPrivate::start(void*) () from /usr/lib64/libQtCore.so.4
#4  0x00007f4f4ee81a4f in start_thread () from /lib64/libpthread.so.0
#5  0x00007f4f4dc3282d in clone () from /lib64/libc.so.6
#6  0x0000000000000000 in ?? ()

Thread 6 (Thread 0x7f4f32de7710 (LWP 13371)):
#0  0x00007f4f4ee86709 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00007f4f4f113a82 in QWaitCondition::wait(QMutex*, unsigned long) () from /usr/lib64/libQtCore.so.4
#2  0x00007f4f4f109312 in QThreadPoolThread::run() () from /usr/lib64/libQtCore.so.4
#3  0x00007f4f4f112f5e in QThreadPrivate::start(void*) () from /usr/lib64/libQtCore.so.4
#4  0x00007f4f4ee81a4f in start_thread () from /lib64/libpthread.so.0
#5  0x00007f4f4dc3282d in clone () from /lib64/libc.so.6
#6  0x0000000000000000 in ?? ()

Thread 5 (Thread 0x7f4f2e989710 (LWP 13372)):
#0  0x00007f4f4ee86709 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00007f4f4f113a82 in QWaitCondition::wait(QMutex*, unsigned long) () from /usr/lib64/libQtCore.so.4
#2  0x00007f4f4f109312 in QThreadPoolThread::run() () from /usr/lib64/libQtCore.so.4
#3  0x00007f4f4f112f5e in QThreadPrivate::start(void*) () from /usr/lib64/libQtCore.so.4
#4  0x00007f4f4ee81a4f in start_thread () from /lib64/libpthread.so.0
#5  0x00007f4f4dc3282d in clone () from /lib64/libc.so.6
#6  0x0000000000000000 in ?? ()

Thread 4 (Thread 0x7f4f336b7710 (LWP 13373)):
#0  0x00007f4f4ee86709 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00007f4f4f113a82 in QWaitCondition::wait(QMutex*, unsigned long) () from /usr/lib64/libQtCore.so.4
#2  0x00007f4f4f109312 in QThreadPoolThread::run() () from /usr/lib64/libQtCore.so.4
#3  0x00007f4f4f112f5e in QThreadPrivate::start(void*) () from /usr/lib64/libQtCore.so.4
#4  0x00007f4f4ee81a4f in start_thread () from /lib64/libpthread.so.0
#5  0x00007f4f4dc3282d in clone () from /lib64/libc.so.6
#6  0x0000000000000000 in ?? ()

Thread 3 (Thread 0x7f4f27351710 (LWP 13376)):
#0  0x00007f4f4ee86709 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00007f4f2d478671 in metronom_sync_loop () from /usr/lib64/libxine.so.1
#2  0x00007f4f4ee81a4f in start_thread () from /lib64/libpthread.so.0
#3  0x00007f4f4dc3282d in clone () from /lib64/libc.so.6
#4  0x0000000000000000 in ?? ()

Thread 2 (Thread 0x7f4f250dd710 (LWP 13378)):
#0  0x00007f4f4dc296b3 in poll () from /lib64/libc.so.6
#1  0x00007f4f4ad32fd4 in ?? () from /usr/lib64/libglib-2.0.so.0
#2  0x00007f4f4ad33510 in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0
#3  0x00007f4f4f231ca6 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#4  0x00007f4f4f204872 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#5  0x00007f4f4f204c5c in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#6  0x00007f4f4f10ffdd in QThread::exec() () from /usr/lib64/libQtCore.so.4
#7  0x00007f4f2d6d33b4 in Phonon::MediaSource::type() const () from /usr/lib64/kde4/plugins/phonon_backend/phonon_xine.so
#8  0x00007f4f4f112f5e in QThreadPrivate::start(void*) () from /usr/lib64/libQtCore.so.4
#9  0x00007f4f4ee81a4f in start_thread () from /lib64/libpthread.so.0
#10 0x00007f4f4dc3282d in clone () from /lib64/libc.so.6
#11 0x0000000000000000 in ?? ()

Thread 1 (Thread 0x7f4f504e4760 (LWP 7407)):
[KCrash Handler]
#6  0x00007f4f4dbe1bb1 in memcpy () from /lib64/libc.so.6
#7  0x00007f4f3740de9b in KJS::ActivationImp::performTearOff (this=<value optimized out>) at /usr/include/bits/string3.h:52
#8  0x00007f4f3740dff8 in KJS::FunctionImp::callAsFunction (this=<value optimized out>, exec=0x7fffc03020a0, thisObj=<value optimized out>, args=...)
    at /usr/src/debug/kdelibs-4.4.90/kjs/function.cpp:177
#9  0x00007f4f3742dfdc in call (args=<value optimized out>, thisObj=<value optimized out>, exec=<value optimized out>, this=<value optimized out>) at /usr/src/debug/kdelibs-4.4.90/kjs/object.h:616
#10 KJS::Machine::runBlock (args=<value optimized out>, thisObj=<value optimized out>, exec=<value optimized out>, this=<value optimized out>) at codes.def:1204
#11 0x00007f4f3740dfe1 in KJS::FunctionImp::callAsFunction (this=0x7f4f31a488c0, exec=0x7fffc0302910, thisObj=<value optimized out>, args=...) at /usr/src/debug/kdelibs-4.4.90/kjs/function.cpp:172
#12 0x00007f4f3742dfdc in call (args=<value optimized out>, thisObj=<value optimized out>, exec=<value optimized out>, this=<value optimized out>) at /usr/src/debug/kdelibs-4.4.90/kjs/object.h:616
#13 KJS::Machine::runBlock (args=<value optimized out>, thisObj=<value optimized out>, exec=<value optimized out>, this=<value optimized out>) at codes.def:1204
#14 0x00007f4f3740dfe1 in KJS::FunctionImp::callAsFunction (this=0x7f4f31d17f80, exec=0x38e6ef0, thisObj=<value optimized out>, args=...) at /usr/src/debug/kdelibs-4.4.90/kjs/function.cpp:172
#15 0x00007f4f37d1157f in call (args=..., thisObj=0x7f4f38250400, exec=0x38e6ef0, this=<value optimized out>) at /usr/src/debug/kdelibs-4.4.90/kjs/object.h:616
#16 KJS::ScheduledAction::execute (args=..., thisObj=0x7f4f38250400, exec=0x38e6ef0, this=<value optimized out>) at /usr/src/debug/kdelibs-4.4.90/khtml/ecma/kjs_window.cpp:2200
#17 0x00007f4f37d1b5b3 in KJS::WindowQObject::timerEvent (this=0x38e8890) at /usr/src/debug/kdelibs-4.4.90/khtml/ecma/kjs_window.cpp:2376
#18 0x00007f4f4f217c89 in QObject::event(QEvent*) () from /usr/lib64/libQtCore.so.4
#19 0x00007f4f4e38f4cc in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/lib64/libQtGui.so.4
#20 0x00007f4f4e397bbd in QApplication::notify(QObject*, QEvent*) () from /usr/lib64/libQtGui.so.4
#21 0x00007f4f4ff311b6 in KApplication::notify (this=0x7fffc0306a80, receiver=0x38e8890, event=0x7fffc03032f0) at /usr/src/debug/kdelibs-4.4.90/kdeui/kernel/kapplication.cpp:309
#22 0x00007f4f4f205b4c in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/lib64/libQtCore.so.4
#23 0x00007f4f4f23513a in QTimerInfoList::activateTimers() () from /usr/lib64/libQtCore.so.4
#24 0x00007f4f4f231f64 in idleTimerSourceDispatch(_GSource*, int (*)(void*), void*) () from /usr/lib64/libQtCore.so.4
#25 0x00007f4f4ad32a93 in g_main_context_dispatch () from /usr/lib64/libglib-2.0.so.0
#26 0x00007f4f4ad33270 in ?? () from /usr/lib64/libglib-2.0.so.0
#27 0x00007f4f4ad33510 in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0
#28 0x00007f4f4f231c53 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#29 0x00007f4f4e4407ce in QGuiEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtGui.so.4
#30 0x00007f4f4f204872 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#31 0x00007f4f4f204c5c in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#32 0x00007f4f4e85b7ce in QDialog::exec() () from /usr/lib64/libQtGui.so.4
#33 0x00007f4f4feb39fd in KMessageBox::createKMessageBox (dialog=0x92b62c0, icon=<value optimized out>, text=..., strlist=<value optimized out>, ask=..., checkboxReturn=0x0, options=..., details=
    ..., notifyType=Critical) at /usr/src/debug/kdelibs-4.4.90/kdeui/dialogs/kmessagebox.cpp:336
#34 0x00007f4f4feb4224 in KMessageBox::createKMessageBox (dialog=0x92b62c0, icon=Critical, text=..., strlist=..., ask=..., checkboxReturn=0x0, options=..., details=...)
    at /usr/src/debug/kdelibs-4.4.90/kdeui/dialogs/kmessagebox.cpp:151
#35 0x00007f4f4feb4eb2 in KMessageBox::errorListWId (parent_id=98566276, text=..., strlist=..., caption=..., options=...) at /usr/src/debug/kdelibs-4.4.90/kdeui/dialogs/kmessagebox.cpp:846
#36 0x00007f4f4feb509f in KMessageBox::error (parent=<value optimized out>, text=<value optimized out>, caption=..., options=<value optimized out>)
    at /usr/src/debug/kdelibs-4.4.90/kdeui/dialogs/kmessagebox.cpp:813
#37 0x00007f4f37d1c516 in KJS::WindowFunc::callAsFunction (this=0x7f4f2fb97e00, exec=0x7fffc0304a80, thisObj=<value optimized out>, args=...)
    at /usr/src/debug/kdelibs-4.4.90/khtml/ecma/kjs_window.cpp:1835
#38 0x00007f4f3742dfdc in call (args=<value optimized out>, thisObj=<value optimized out>, exec=<value optimized out>, this=<value optimized out>) at /usr/src/debug/kdelibs-4.4.90/kjs/object.h:616
#39 KJS::Machine::runBlock (args=<value optimized out>, thisObj=<value optimized out>, exec=<value optimized out>, this=<value optimized out>) at codes.def:1204
#40 0x00007f4f3740dfe1 in KJS::FunctionImp::callAsFunction (this=0x7f4f312dd540, exec=0x7fffc03052f0, thisObj=<value optimized out>, args=...) at /usr/src/debug/kdelibs-4.4.90/kjs/function.cpp:172
#41 0x00007f4f3742dfdc in call (args=<value optimized out>, thisObj=<value optimized out>, exec=<value optimized out>, this=<value optimized out>) at /usr/src/debug/kdelibs-4.4.90/kjs/object.h:616
#42 KJS::Machine::runBlock (args=<value optimized out>, thisObj=<value optimized out>, exec=<value optimized out>, this=<value optimized out>) at codes.def:1204
#43 0x00007f4f3740dfe1 in KJS::FunctionImp::callAsFunction (this=0x7f4f31c94200, exec=0x7fffc0305b60, thisObj=<value optimized out>, args=...) at /usr/src/debug/kdelibs-4.4.90/kjs/function.cpp:172
#44 0x00007f4f3742dfdc in call (args=<value optimized out>, thisObj=<value optimized out>, exec=<value optimized out>, this=<value optimized out>) at /usr/src/debug/kdelibs-4.4.90/kjs/object.h:616
#45 KJS::Machine::runBlock (args=<value optimized out>, thisObj=<value optimized out>, exec=<value optimized out>, this=<value optimized out>) at codes.def:1204
#46 0x00007f4f3740dfe1 in KJS::FunctionImp::callAsFunction (this=0x7f4f312d2800, exec=0x5f48c00, thisObj=<value optimized out>, args=...) at /usr/src/debug/kdelibs-4.4.90/kjs/function.cpp:172
#47 0x00007f4f37d1157f in call (args=..., thisObj=0x7f4f38250100, exec=0x5f48c00, this=<value optimized out>) at /usr/src/debug/kdelibs-4.4.90/kjs/object.h:616
#48 KJS::ScheduledAction::execute (args=..., thisObj=0x7f4f38250100, exec=0x5f48c00, this=<value optimized out>) at /usr/src/debug/kdelibs-4.4.90/khtml/ecma/kjs_window.cpp:2200
#49 0x00007f4f37d1b5b3 in KJS::WindowQObject::timerEvent (this=0x10fa630) at /usr/src/debug/kdelibs-4.4.90/khtml/ecma/kjs_window.cpp:2376
#50 0x00007f4f4f217c89 in QObject::event(QEvent*) () from /usr/lib64/libQtCore.so.4
#51 0x00007f4f4e38f4cc in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/lib64/libQtGui.so.4
#52 0x00007f4f4e397bbd in QApplication::notify(QObject*, QEvent*) () from /usr/lib64/libQtGui.so.4
#53 0x00007f4f4ff311b6 in KApplication::notify (this=0x7fffc0306a80, receiver=0x10fa630, event=0x7fffc0306540) at /usr/src/debug/kdelibs-4.4.90/kdeui/kernel/kapplication.cpp:309
#54 0x00007f4f4f205b4c in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/lib64/libQtCore.so.4
#55 0x00007f4f4f23513a in QTimerInfoList::activateTimers() () from /usr/lib64/libQtCore.so.4
#56 0x00007f4f4f231f88 in ?? () from /usr/lib64/libQtCore.so.4
#57 0x00000000006afec0 in ?? ()
#58 0x00007f4f4ad32a93 in g_main_context_dispatch () from /usr/lib64/libglib-2.0.so.0
#59 0x00007f4f4ad33270 in ?? () from /usr/lib64/libglib-2.0.so.0
#60 0x00007f4f4ad33510 in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0
#61 0x00007f4f4f231c53 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#62 0x00007f4f4e4407ce in QGuiEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtGui.so.4
#63 0x00007f4f4f204872 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#64 0x00007f4f4f204c5c in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#65 0x00007f4f4f209bc9 in QCoreApplication::exec() () from /usr/lib64/libQtCore.so.4
#66 0x00007f4f40c21dba in kdemain (argc=<value optimized out>, argv=<value optimized out>) at /usr/src/debug/kdebase-4.4.90/apps/konqueror/src/konqmain.cpp:228
#67 0x00000000004070d9 in _start ()

Reported using DrKonqi
Comment 1 Maksim Orlovich 2010-06-30 15:25:56 UTC
*** Bug 243167 has been marked as a duplicate of this bug. ***
Comment 2 Maksim Orlovich 2010-06-30 15:30:42 UTC
Seems like some shared comments script, seems fairly common...
Comment 3 David Faure 2010-06-30 19:58:08 UTC
SVN commit 1144752 by dfaure:

Restore KDE3 behavior in KUrl("a", "#b"), b is supposed to be the encoded query, not the decoded one.
This should fix 243217 according to Maksim, I'll let him retest.
CCBUG: 243217


 M  +2 -2      io/kurl.cpp  
 M  +4 -3      io/kurl.h  
 M  +4 -0      tests/kurltest.cpp  


WebSVN link: http://websvn.kde.org/?view=rev&revision=1144752
Comment 4 Maksim Orlovich 2010-07-09 18:51:33 UTC
*** Bug 244018 has been marked as a duplicate of this bug. ***
Comment 5 Maksim Orlovich 2010-07-11 20:00:32 UTC
*** Bug 244235 has been marked as a duplicate of this bug. ***
Comment 6 Raúl 2011-01-17 13:02:58 UTC
Hello:

Is this confirmed to be fixed? Last message suggests a test was expected.
I think I had this crash on 4.4.5, what KDE release is supposed to have the fix?

Regards,
Comment 7 Andrea Iacovitti 2012-08-07 14:23:53 UTC
(In reply to comment #3)
> SVN commit 1144752 by dfaure:
> 
> Restore KDE3 behavior in KUrl("a", "#b"), b is supposed to be the encoded
> query, not the decoded one.
> This should fix 243217 according to Maksim, I'll let him retest.
> CCBUG: 243217
> 
> 
>  M  +2 -2      io/kurl.cpp  
>  M  +4 -3      io/kurl.h  
>  M  +4 -0      tests/kurltest.cpp  
> 
> 
> WebSVN link: http://websvn.kde.org/?view=rev&revision=1144752

The above commit causes a regression as reported in #303618
Comment 8 Justin Zobel 2022-10-13 04:47:27 UTC
Thank you for reporting this bug in KDE software. As it has been a while since this issue was reported and confirmed, can we please ask you to see if you can reproduce the issue with a recent software version?

If you can reproduce the issue, please change the status to "CONFIRMED" when replying. Thank you!
Comment 9 Bug Janitor Service 2022-10-28 05:02:14 UTC
Dear Bug Submitter,

This bug has been in NEEDSINFO status with no change for at least
15 days. Please provide the requested information as soon as
possible and set the bug status as REPORTED. Due to regular bug
tracker maintenance, if the bug is still in NEEDSINFO status with
no change in 30 days the bug will be closed as RESOLVED > WORKSFORME
due to lack of needed information.

For more information about our bug triaging procedures please read the
wiki located here:
https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

If you have already provided the requested information, please
mark the bug as REPORTED so that the KDE team knows that the bug is
ready to be confirmed.

Thank you for helping us make KDE software even better for everyone!
Comment 10 Bug Janitor Service 2022-11-12 05:15:00 UTC
This bug has been in NEEDSINFO status with no change for at least
30 days. The bug is now closed as RESOLVED > WORKSFORME
due to lack of needed information.

For more information about our bug triaging procedures please read the
wiki located here:
https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

Thank you for helping us make KDE software even better for everyone!