| Summary: | Konqueror Crashes when i go to a website | ||
|---|---|---|---|
| Product: | [Plasma] Oxygen | Reporter: | Daniel Taylor <kingorgg> |
| Component: | style | Assignee: | Hugo Pereira Da Costa <hugo.pereira.da.costa> |
| Status: | RESOLVED FIXED | ||
| Severity: | crash | CC: | aiacovitti, cfeck, chris.kerr, clarkm1, cvnielsen, dgkn.gs, francesco.ro79, gatoso, govik, hugo.pereira.da.costa, j.r.hudson, jacek.krukowski, jospoortvliet, jure.slak, kde, krissn, krystian, luizromario, m.wege, maris.kde, mtadeunet, nicafyl, nick, oneforall, piovisqui, redtab013, robert.styles.forsyth, rohan, shai, tlueber, utopialandia |
| Priority: | NOR | ||
| Version: | unspecified | ||
| Target Milestone: | --- | ||
| Platform: | Ubuntu | ||
| OS: | Linux | ||
| Latest Commit: | Version Fixed In: | 4.8.3 | |
| Sentry Crash Report: | |||
| Attachments: |
New crash information added by DrKonqi
New crash information added by DrKonqi New crash information added by DrKonqi New crash information added by DrKonqi |
||
|
Description
Daniel Taylor
2010-08-29 21:49:31 UTC
Hmm. Related to 245691, but probably different, too (can't reproduce, though) -- this happens to access the backlink even earlier, due to funky interaction with some oxygen hacks. ==13080== ==13080== Invalid read of size 4 ==13080== at 0x16C01928: QPointer<DOM::HTMLPartContainerElementImpl>::operator->() const (qpointer.h:74) ==13080== by 0x16EF82AC: KHTMLView::resizeEvent(QResizeEvent*) (khtmlview.cpp:874) ==13080== by 0x52ADEE1: QWidget::event(QEvent*) (qwidget.cpp:8198) ==13080== by 0x56A7764: QFrame::event(QEvent*) (qframe.cpp:557) ==13080== by 0x5735E00: QAbstractScrollArea::viewportEvent(QEvent*) (qabstractscrollarea.cpp:1036) ==13080== by 0x16EFF09F: KHTMLView::viewportEvent(QEvent*) (khtmlview.cpp:2151) ==13080== by 0x5738775: QAbstractScrollAreaFilter::eventFilter(QObject*, QEvent*) (qabstractscrollarea_p.h:100) ==13080== by 0x4F6AFA5: QCoreApplicationPrivate::sendThroughObjectEventFilters(QObject*, QEvent*) (qcoreapplication.cpp:841) ==13080== by 0x5254C33: QApplicationPrivate::notify_helper(QObject*, QEvent*) (qapplication.cpp:4298) ==13080== by 0x525CCA3: QApplication::notify(QObject*, QEvent*) (qapplication.cpp:4267) ==13080== by 0x498414B: KApplication::notify(QObject*, QEvent*) (kapplication.cpp:302) ==13080== by 0x4F6AE0D: QCoreApplication::notifyInternal(QObject*, QEvent*) (qcoreapplication.cpp:726) ==13080== by 0x52A75E2: QWidgetPrivate::sendPendingMoveAndResizeEvents(bool, bool) (qcoreapplication.h:215) ==13080== by 0x52A7523: QWidgetPrivate::sendPendingMoveAndResizeEvents(bool, bool) (qwidget.cpp:7124) ==13080== by 0x52A7523: QWidgetPrivate::sendPendingMoveAndResizeEvents(bool, bool) (qwidget.cpp:7124) ==13080== by 0x52A7523: QWidgetPrivate::sendPendingMoveAndResizeEvents(bool, bool) (qwidget.cpp:7124) ==13080== by 0x52A7523: QWidgetPrivate::sendPendingMoveAndResizeEvents(bool, bool) (qwidget.cpp:7124) ==13080== by 0x52A7523: QWidgetPrivate::sendPendingMoveAndResizeEvents(bool, bool) (qwidget.cpp:7124) ==13080== by 0x52A7523: QWidgetPrivate::sendPendingMoveAndResizeEvents(bool, bool) (qwidget.cpp:7124) ==13080== by 0x52A7523: QWidgetPrivate::sendPendingMoveAndResizeEvents(bool, bool) (qwidget.cpp:7124) ==13080== by 0x52A7523: QWidgetPrivate::sendPendingMoveAndResizeEvents(bool, bool) (qwidget.cpp:7124) ==13080== by 0x52AEF90: QWidgetPrivate::prepareToRender(QRegion const&, QFlags<QWidget::RenderFlag>) (qwidget.cpp:5187) ==13080== by 0x52B0343: QWidget::render(QPaintDevice*, QPoint const&, QRegion const&, QFlags<QWidget::RenderFlag>) (qwidget.cpp:4895) ==13080== by 0x6E221ED: Oxygen::TransitionWidget::grabWidget(QPixmap&, QWidget*, QRect&) const (oxygentransitionwidget.cpp:227) ==13080== by 0x6E2172F: Oxygen::TransitionWidget::grab(QWidget*, QRect) (oxygentransitionwidget.cpp:90) ==13080== by 0x6E17944: Oxygen::ComboBoxData::animate() (oxygencomboboxdata.cpp:136) ==13080== by 0x6E173AE: Oxygen::ComboBoxData::indexChanged() (oxygencomboboxdata.cpp:54) ==13080== by 0x6E17173: Oxygen::ComboBoxData::qt_metacall(QMetaObject::Call, int, void**) (oxygencomboboxdata.moc:77) ==13080== by 0x4F70EFC: QMetaObject::metacall(QObject*, QMetaObject::Call, int, void**) (qmetaobject.cpp:237) ==13080== by 0x4F7FFE7: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3295) ==13080== by 0x567A004: QComboBox::currentIndexChanged(int) (moc_qcombobox.cpp:302) ==13080== by 0x567A09E: QComboBoxPrivate::_q_emitCurrentIndexChanged(QModelIndex const&) (qcombobox.cpp:1250) ==13080== by 0x567BA74: QComboBoxPrivate::_q_rowsRemoved(QModelIndex const&, int, int) (qcombobox.cpp:1053) ==13080== by 0x567E8D5: QComboBox::qt_metacall(QMetaObject::Call, int, void**) (moc_qcombobox.cpp:200) ==13080== by 0x4A3E1C4: KComboBox::qt_metacall(QMetaObject::Call, int, void**) (kcombobox.moc:106) ==13080== by 0x4F70EFC: QMetaObject::metacall(QObject*, QMetaObject::Call, int, void**) (qmetaobject.cpp:237) ==13080== by 0x4F7FFE7: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3295) ==13080== by 0x4FCB984: QAbstractItemModel::rowsRemoved(QModelIndex const&, int, int) (moc_qabstractitemmodel.cpp:195) ==13080== by 0x4F6531A: QAbstractItemModel::endRemoveRows() (qabstractitemmodel.cpp:2467) ==13080== by 0x5879335: QStandardItemModelPrivate::rowsRemoved(QStandardItem*, int, int) (qstandarditemmodel.cpp:589) ==13080== by 0x58797EF: QStandardItem::removeRows(int, int) (qstandarditemmodel.cpp:1630) ==13080== by 0x58798DE: QStandardItemModel::removeRows(int, int, QModelIndex const&) (qstandarditemmodel.cpp:2800) ==13080== by 0x5679B38: QComboBox::clear() (qcombobox.cpp:2607) ==13080== by 0x16D34769: khtml::RenderSelect::updateFromElement() (render_form.cpp:1708) ==13080== by 0x16C881E7: DOM::HTMLElementImpl::recalcStyle(DOM::NodeImpl::StyleChange) (html_elementimpl.cpp:238) ==13080== by 0x16C52841: DOM::ElementImpl::recalcStyle(DOM::NodeImpl::StyleChange) (dom _elementimpl.cpp:1018) ==13080== by 0x16C881C3: DOM::HTMLElementImpl::recalcStyle(DOM::NodeImpl::StyleChange) (html_elementimpl.cpp:235) ==13080== by 0x16C52841: DOM::ElementImpl::recalcStyle(DOM::NodeImpl::StyleChange) (dom_elementimpl.cpp:1018) ==13080== by 0x16C881C3: DOM::HTMLElementImpl::recalcStyle(DOM::NodeImpl::StyleChange) (html_elementimpl.cpp:235) ==13080== by 0x16C52841: DOM::ElementImpl::recalcStyle(DOM::NodeImpl::StyleChange) (dom_elementimpl.cpp:1018) ==13080== Address 0x8 is not stack'd, malloc'd or (recently) free'd *** Bug 251255 has been marked as a duplicate of this bug. *** *** Bug 252163 has been marked as a duplicate of this bug. *** *** Bug 252850 has been marked as a duplicate of this bug. *** *** Bug 253050 has been marked as a duplicate of this bug. *** Hmm, 4.5.1 crashes every time but current trunk build doesn't. 1172284 likely fixed this. *** Bug 256110 has been marked as a duplicate of this bug. *** *** Bug 258444 has been marked as a duplicate of this bug. *** *** Bug 259215 has been marked as a duplicate of this bug. *** *** Bug 255584 has been marked as a duplicate of this bug. *** *** Bug 260608 has been marked as a duplicate of this bug. *** *** Bug 262979 has been marked as a duplicate of this bug. *** *** Bug 263421 has been marked as a duplicate of this bug. *** Created attachment 57700 [details]
New crash information added by DrKonqi
konqueror (4.6.00 (4.6.0)) on KDE Platform 4.6.00 (4.6.0) using Qt 4.7.2
- What I was doing when the application crashed:
I was looking at the tvguide.com site and when I clicked on "TV Listings" under the "What's on TV" Link It crashes.
-- Backtrace (Reduced):
#6 isNull (this=<value optimized out>) at /usr/include/QtCore/qsharedpointer_impl.h:558
#7 KHTMLView::resizeEvent (this=<value optimized out>) at /usr/src/debug/kdelibs-4.6.0/khtml/khtmlview.cpp:861
#8 0x00007f24d3fb4ba2 in QWidget::event(QEvent*) () from /usr/lib64/libQtGui.so.4
#9 0x00007f24d4361716 in QFrame::event(QEvent*) () from /usr/lib64/libQtGui.so.4
#10 0x00007f24d4ba97c7 in QCoreApplicationPrivate::sendThroughObjectEventFilters(QObject*, QEvent*) () from /usr/lib64/libQtCore.so.4
FYI with KHTML as default it crashes as described; going to the website with WebKit KPart simply hangs Konqi ;-) *** Bug 267787 has been marked as a duplicate of this bug. *** *** Bug 268929 has been marked as a duplicate of this bug. *** *** Bug 269992 has been marked as a duplicate of this bug. *** *** Bug 270837 has been marked as a duplicate of this bug. *** *** Bug 271621 has been marked as a duplicate of this bug. *** debugfull build doesn't crash, here is vg log from 4.6.2 ==26356== Invalid read of size 4 ==26356== at 0xB31A85E: KHTMLView::resizeEvent(QResizeEvent*) (qsharedpointer_impl.h:558) ==26356== by 0x53C4BE1: QWidget::event(QEvent*) (qwidget.cpp:8413) ==26356== by 0x57DEB44: QFrame::event(QEvent*) (qframe.cpp:557) ==26356== by 0x58702B0: QAbstractScrollArea::viewportEvent(QEvent*) (qabstractscrollarea.cpp:1043) ==26356== by 0xB30532F: KHTMLView::viewportEvent(QEvent*) (khtmlview.cpp:1997) ==26356== by 0x5872BA5: QAbstractScrollAreaFilter::eventFilter(QObject*, QEvent*) (qabstractscrollarea_p.h:100) ==26356== by 0x506FEF5: QCoreApplicationPrivate::sendThroughObjectEventFilters(QObject*, QEvent*) (qcoreapplication.cpp:846) ==26356== by 0x53696B3: QApplicationPrivate::notify_helper(QObject*, QEvent*) (qapplication.cpp:4458) ==26356== by 0x5372553: QApplication::notify(QObject*, QEvent*) (qapplication.cpp:4341) ==26356== by 0x4960A60: KApplication::notify(QObject*, QEvent*) (kapplication.cpp:311) ==26356== by 0x506FD5D: QCoreApplication::notifyInternal(QObject*, QEvent*) (qcoreapplication.cpp:731) ==26356== by 0x53C0262: QWidgetPrivate::sendPendingMoveAndResizeEvents(bool, bool) (qcoreapplication.h:215) ==26356== by 0x53C01A3: QWidgetPrivate::sendPendingMoveAndResizeEvents(bool, bool) (qwidget.cpp:7341) ==26356== by 0x53C01A3: QWidgetPrivate::sendPendingMoveAndResizeEvents(bool, bool) (qwidget.cpp:7341) ==26356== by 0x53C01A3: QWidgetPrivate::sendPendingMoveAndResizeEvents(bool, bool) (qwidget.cpp:7341) ==26356== by 0x53C01A3: QWidgetPrivate::sendPendingMoveAndResizeEvents(bool, bool) (qwidget.cpp:7341) ==26356== by 0x53C01A3: QWidgetPrivate::sendPendingMoveAndResizeEvents(bool, bool) (qwidget.cpp:7341) ==26356== by 0x53C01A3: QWidgetPrivate::sendPendingMoveAndResizeEvents(bool, bool) (qwidget.cpp:7341) ==26356== by 0x53C01A3: QWidgetPrivate::sendPendingMoveAndResizeEvents(bool, bool) (qwidget.cpp:7341) ==26356== by 0x53C01A3: QWidgetPrivate::sendPendingMoveAndResizeEvents(bool, bool) (qwidget.cpp:7341) ==26356== by 0x53C27E0: QWidgetPrivate::prepareToRender(QRegion const&, QFlags<QWidget::RenderFlag>) (qwidget.cpp:5308) ==26356== by 0x53C2D8F: QWidgetPrivate::render(QPaintDevice*, QPoint const&, QRegion const&, QFlags<QWidget::RenderFlag>, bool) (qwidget.cpp:5561) ==26356== by 0x53C2F4F: QWidget::render(QPaintDevice*, QPoint const&, QRegion const&, QFlags<QWidget::RenderFlag>) (qwidget.cpp:5091) ==26356== by 0x710B648: ??? (in /usr/lib/kde4/plugins/styles/oxygen.so) ==26356== by 0x710C32A: ??? (in /usr/lib/kde4/plugins/styles/oxygen.so) ==26356== by 0x7103B03: ??? (in /usr/lib/kde4/plugins/styles/oxygen.so) ==26356== by 0x71035BA: ??? (in /usr/lib/kde4/plugins/styles/oxygen.so) ==26356== by 0x710368C: ??? (in /usr/lib/kde4/plugins/styles/oxygen.so) ==26356== by 0x50765FC: QMetaObject::metacall(QObject*, QMetaObject::Call, int, void**) (qmetaobject.cpp:237) ==26356== by 0x50867FB: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3278) ==26356== by 0x57B0974: QComboBox::currentIndexChanged(int) (moc_qcombobox.cpp:302) ==26356== by 0x57B0A0E: QComboBoxPrivate::_q_emitCurrentIndexChanged(QModelIndex const&) (qcombobox.cpp:1264) ==26356== by 0x57B23E4: QComboBoxPrivate::_q_rowsRemoved(QModelIndex const&, int, int) (qcombobox.cpp:1067) ==26356== by 0x57B55D5: QComboBox::qt_metacall(QMetaObject::Call, int, void**) (moc_qcombobox.cpp:200) ==26356== by 0x4B2E791: KComboBox::qt_metacall(QMetaObject::Call, int, void**) (kcombobox.moc:106) ==26356== by 0x50765FC: QMetaObject::metacall(QObject*, QMetaObject::Call, int, void**) (qmetaobject.cpp:237) ==26356== by 0x50867FB: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3278) ==26356== by 0x50D4A14: QAbstractItemModel::rowsRemoved(QModelIndex const&, int, int) (moc_qabstractitemmodel.cpp:195) ==26356== by 0x5069D61: QAbstractItemModel::endRemoveRows() (qabstractitemmodel.cpp:2466) ==26356== by 0x59B9095: QStandardItemModelPrivate::rowsRemoved(QStandardItem*, int, int) (qstandarditemmodel.cpp:589) ==26356== by 0x59B92EF: QStandardItem::removeRows(int, int) (qstandarditemmodel.cpp:1630) ==26356== by 0x59B93DE: QStandardItemModel::removeRows(int, int, QModelIndex const&) (qstandarditemmodel.cpp:2800) ==26356== Address 0x8 is not stack'd, malloc'd or (recently) free'd *** Bug 270979 has been marked as a duplicate of this bug. *** *** Bug 265223 has been marked as a duplicate of this bug. *** *** Bug 267462 has been marked as a duplicate of this bug. *** *** Bug 270509 has been marked as a duplicate of this bug. *** Çok çaba gösterdiniz,teşekkürler. 2011/5/7 Dawit Alemayehu <adawit@kde.org> > https://bugs.kde.org/show_bug.cgi?id=249453 > > > Dawit Alemayehu <adawit@kde.org> changed: > > What |Removed |Added > > ---------------------------------------------------------------------------- > CC| |j.r.hudson@virginmedia.com > > > > > --- Comment #24 from Dawit Alemayehu <adawit kde org> 2011-05-07 06:22:22 > --- > *** Bug 270979 has been marked as a duplicate of this bug. *** > > -- > Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email > ------- You are receiving this mail because: ------- > You are on the CC list for the bug. > *** Bug 272682 has been marked as a duplicate of this bug. *** *** Bug 273883 has been marked as a duplicate of this bug. *** *** Bug 262006 has been marked as a duplicate of this bug. *** Created attachment 61494 [details]
New crash information added by DrKonqi
akregator (1.6.6) on KDE Platform 4.6.4 (4.6.4) using Qt 4.7.3
- What I was doing when the application crashed:
The somewhat unique info in this is that it happened in Akregator. I have a feed set to open an item's web page, and when I tried to open such an item (equivalent to a browsing operation, I guess) Akregator crashed.
-- Backtrace (Reduced):
#7 isNull (this=0xa7402b0) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:558
#8 KHTMLView::resizeEvent (this=0xa7402b0) at ../../khtml/khtmlview.cpp:861
#9 0xb67dd4f1 in QWidget::event (this=0xa7402b0, event=0xbf866294) at kernel/qwidget.cpp:8413
#10 0xb6bde295 in QFrame::event (this=0xa7402b0, e=0xbf866294) at widgets/qframe.cpp:557
#11 0xb6c70331 in QAbstractScrollArea::viewportEvent (this=0xa7402b0, e=0xbf866294) at widgets/qabstractscrollarea.cpp:1043
In case it matters, the page that caused the crash in comment #32 was http://endstone.net/2011/06/30/6-06/. However, opening it in Konqueror worked fine, and after that trying again in Akregator also worked. Ok, this just happened again: Opening the page from Akregator (in a fresh user session) crashed, then opening the page in Konqueror and then again in Akregator works flawlessly. Could it be a cache issue? Created attachment 62302 [details]
New crash information added by DrKonqi
konqueror (4.6.00 (4.6.0) "release 6") on KDE Platform 4.6.00 (4.6.0) "release 6" using Qt 4.7.1
- What I was doing when the application crashed:
Started up Konqueror in a new session, entered URL of a bank with a flashed home page -- instant crash. Repeats every time. www.providentbanknj.com
Why can't Konqueror include or add a workable flash plugin, either OSS or FLOSS? Why does the flash plugin facility fail every time?
openSUSE 11.4, KDE 4.6,00, Konqueror 4,6,00
-- Backtrace (Reduced):
#7 0xae9ea89e in KHTMLView::resizeEvent(QResizeEvent*) () from /usr/lib/libkhtml.so.5
#8 0xb6316592 in QWidget::event(QEvent*) () from /usr/lib/libQtGui.so.4
#9 0xb6724ed5 in QFrame::event(QEvent*) () from /usr/lib/libQtGui.so.4
#10 0xb67b68a1 in QAbstractScrollArea::viewportEvent(QEvent*) () from /usr/lib/libQtGui.so.4
#11 0xae9d5300 in KHTMLView::viewportEvent(QEvent*) () from /usr/lib/libkhtml.so.5
I can reproduce the crash in 4.6.5 by going to tvguide.com and clicking on "TV Listings" under the "What's on TV" (see comment #0). However if i do not use the default oxigen style (e.g. run "konqueror -style plastique") the crash doesn't happen (see comment #1). Created attachment 62326 [details]
New crash information added by DrKonqi
konqueror (4.7.00 (4.7.0)) on KDE Platform 4.7.00 (4.7.0) using Qt 4.7.3
I can confirm - 4.7.0 doesn't crash with different style (konqueror -style plastique). It's a Oxygen issue. If Oxygen style is used, it's instantly crashes when visiting www.providentbanknj.com
-- Backtrace (Reduced):
#6 isNull (this=<value optimized out>) at /usr/include/qt4/QtCore/qsharedpointer_impl.h:558
#7 KHTMLView::resizeEvent (this=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.7.0/work/kdelibs-4.7.0/khtml/khtmlview.cpp:861
#8 0x00007fd15e9164f1 in QWidget::event (this=0x1512d30, event=0x7fff6c3cadd0) at kernel/qwidget.cpp:8413
#9 0x00007fd15eca0d16 in QFrame::event (this=0x1512d30, e=0x7fff6c3cadd0) at widgets/qframe.cpp:557
#10 0x00007fd15f6f90b6 in QCoreApplicationPrivate::sendThroughObjectEventFilters (this=<value optimized out>, receiver=0x1512690, event=0x7fff6c3cadd0) at kernel/qcoreapplication.cpp:846
Can't reproduce here :( One workaround (at least for the first crash report) would be to disable oxygen's animations. (either "all animations" from the default oxygen style config dialog), or just the "combobox transitions" from oxygen-settings (typed in krunner or terminal). PS: the fact that the crash is non reproducable is due (I believe) to some race condition (inside Qt). All 'hack' codes done by oxygen for the combobox animations are actually totally legit, Qt wise, but I have seen issues multiple times (in Qt's internal) when calling QWidget::render (which should allow to draw widgets "offline" via calls to ::paintEvent() on, e.g. a pixmap). *** Bug 278620 has been marked as a duplicate of this bug. *** Kontact crashes on any site(in new tab) from kde-look feed when KMPlayer part is used for flash. I think it should helps to reproduce bug. Do you need stack trace? *** Bug 282579 has been marked as a duplicate of this bug. *** The workaround is to disable oxygen's animations. Not very satisfactory, but since I cannot reproduce (nor understand the actual reason for the crash) ... *** Bug 287210 has been marked as a duplicate of this bug. *** *** Bug 290539 has been marked as a duplicate of this bug. *** Hugo, bug 290539 has steps to reproduce, I hope it is reproducible for you (did not test, needs JavaScript...) ... still unable to reproduce, after doing as instructed in bug 290539. I guess I could simply disable all animations for widgets that are children of khtmlview ... But being unable to reproduce nor check, well ... ok. I'll try to post a possible patch here, to let daring users give it a shot ... I can still reproduce with kde 4.8.1/qt 4.8.0 by connecting to http://www.tvguide.com/Listings/ Git commit 6f8d94f5c2ff8078cfcfcc1f9ce6d23d815cd86c by Andrea Iacovitti. Committed on 13/04/2012 at 12:24. Pushed by aiacovitti into branch 'KDE/4.8'. Check for null pointer. Fix crash that could occur when oxygen animations are enabled. Related: bug 297967, bug 297901, bug 285158, bug 271466 FIXED-IN: 4.8.3 M +1 -1 khtml/khtmlview.cpp http://commits.kde.org/kdelibs/6f8d94f5c2ff8078cfcfcc1f9ce6d23d815cd86c |