Bug 271901

Summary: Kmail crash when opening SPAM mail
Product: [Applications] konqueror Reporter: admin
Component: khtmlAssignee: Konqueror Developers <konq-bugs>
Status: RESOLVED WORKSFORME    
Severity: crash    
Priority: NOR    
Version: 4.5.1   
Target Milestone: ---   
Platform: Ubuntu   
OS: Linux   
Latest Commit: Version Fixed In:
Sentry Crash Report:
Attachments: source of spam mail

Description admin 2011-04-28 07:13:04 UTC 
Application: kontact (4.4.6)
KDE Platform Version: 4.5.1 (KDE 4.5.1)
Qt Version: 4.7.0
Operating System: Linux 2.6.35-28-generic-pae i686
Distribution: Ubuntu 10.10

-- Information about the crash:
- What I was doing when the application crashed:
Every time I open a specific spam mail kmail crashes!
I will attatch the spam mail.

The crash can be reproduced every time.

-- Backtrace:
Application: Kontact (kontact), signal: Segmentation fault
[Current thread is 1 (Thread 0xb3043730 (LWP 8624))]

Thread 2 (Thread 0xaacfab70 (LWP 8656)):
#0  0xb780d424 in __kernel_vsyscall ()
#1  0xb5f3ddf6 in poll () from /lib/libc.so.6
#2  0xb4183a1b in g_poll () from /lib/libglib-2.0.so.0
#3  0xb417643c in ?? () from /lib/libglib-2.0.so.0
#4  0xb4176848 in g_main_context_iteration () from /lib/libglib-2.0.so.0
#5  0xb625659f in QEventDispatcherGlib::processEvents (this=0xa7b1ab8, flags=...) at kernel/qeventdispatcher_glib.cpp:417
#6  0xb6226609 in QEventLoop::processEvents (this=0xaacfa270, flags=) at kernel/qeventloop.cpp:149
#7  0xb6226a8a in QEventLoop::exec (this=0xaacfa270, flags=...) at kernel/qeventloop.cpp:201
#8  0xb6122b7e in QThread::exec (this=0xa8a6600) at thread/qthread.cpp:490
#9  0xb620535b in QInotifyFileSystemWatcherEngine::run (this=0xa8a6600) at io/qfilesystemwatcher_inotify.cpp:248
#10 0xb6125df9 in QThreadPrivate::start (arg=0xa8a6600) at thread/qthread_unix.cpp:266
#11 0xb4471cc9 in start_thread () from /lib/libpthread.so.0
#12 0xb5f4c69e in clone () from /lib/libc.so.6

Thread 1 (Thread 0xb3043730 (LWP 8624)):
[KCrash Handler]
#8  0xb589b837 in KHTMLPart::slotFinished (this=0x0, job=0x0) at ../../khtml/khtml_part.cpp:1932
#9  0xb589ba44 in KHTMLPart::slotViewPageInfo (this=0x0) at ../../khtml/khtml_part.cpp:3811
#10 0xb5997a47 in DOM::HTMLIFrameElementImpl::computeContent (this=0xb5e29ff4) at ../../khtml/html/html_baseimpl.cpp:830
#11 0xb599821c in DOM::HTMLFrameElementImpl::computeContent (this=0xae21280) at ../../khtml/html/html_baseimpl.cpp:419
#12 0xb593cd24 in deref (this=0xae21288, __in_chrg=<value optimized out>) at ../../khtml/misc/shared.h:63
#13 DOM::ElementImpl::~ElementImpl (this=0xae21288, __in_chrg=<value optimized out>) at ../../khtml/xml/dom_elementimpl.cpp:428
#14 0xb5973c81 in deref (this=0xabe46d0, __in_chrg=<value optimized out>) at ../../khtml/misc/shared.h:65
#15 WTF::RefPtr<DOM::HTMLHeadElementImpl>::~RefPtr (this=0xabe46d0, __in_chrg=<value optimized out>) at ../../kjs/wtf/RefPtr.h:51
#16 0xb5974543 in operator= (this=0xabe46d0, source=...) at /usr/include/qt4/QtCore/qlist.h:429
#17 operator= (this=0xabe46d0, source=...) at ../../khtml/misc/stringit.h:110
#18 khtml::HTMLTokenizer::setSrc (this=0xabe46d0, source=...) at ../../khtml/html/htmltokenizer.cpp:2175
#19 0xb597bfe6 in derefId (this=0xabbda08, src=...) at ../../khtml/misc/idstring.h:151
#20 ~IDString (this=0xabbda08, src=...) at ../../khtml/misc/idstring.h:74
#21 khtml::HTMLTokenizer::parseTag (this=0xabbda08, src=...) at ../../khtml/html/htmltokenizer.cpp:1262
#22 0xb597dbc1 in khtml::HTMLTokenizer::write (this=0xabbda08, str=..., appendData=false) at ../../khtml/html/htmltokenizer.cpp:1886
#23 0xb591fc89 in DOM::DocumentImpl::setStyleSheet (this=0xab5a7a0, url=..., sheet=..., mimetype=...) at ../../khtml/xml/dom_docimpl.cpp:2699
#24 0xb591fe5b in ~QString (title=...) at /usr/include/qt4/QtCore/qstring.h:882
#25 DOM::DOMImplementationImpl::createHTMLDocument (title=...) at ../../khtml/xml/dom_docimpl.cpp:297
#26 0xb5b9e6ce in ?? () at ../../khtml/dom/html_document.cpp:229 from /usr/lib/libkhtml.so.5
#27 0xae5bcb18 in KMail::HTMLQuoteColorer::process (this=0xbfe167a0, htmlSource=...) at ../../kmail/htmlquotecolorer.cpp:46
#28 0xae4080a4 in operator+= (block=<value optimized out>) at /usr/include/qt4/QtCore/qstring.h:281
#29 KMail::writeSimpleSigstatHeader (block=<value optimized out>) at ../../kmail/objecttreeparser.cpp:2335
#30 0xae42523b in (anonymous namespace)::TextPlainBodyPartFormatter::~TextPlainBodyPartFormatter (this=0xa89aef8, __in_chrg=<value optimized out>) at ../../kmail/bodypartformatter.cpp:106
#31 0xae41822b in setProcessed (this=0xbfe16970, node=0xae58cd8) at ../../kmail/partNode.h:207
#32 setProcessed (this=0xbfe16970, node=0xae58cd8) at ../../kmail/partNode.h:207
#33 setProcessed (this=0xbfe16970, node=0xae58cd8) at ../../kmail/partNode.h:205
#34 setProcessed (this=0xbfe16970, node=0xae58cd8) at ../../kmail/partNode.h:207
#35 setProcessed (this=0xbfe16970, node=0xae58cd8) at ../../kmail/partNode.h:207
#36 KMail::ObjectTreeParser::parseObjectTree (this=0xbfe16970, node=0xae58cd8) at ../../kmail/objecttreeparser.cpp:263
#37 0xae418747 in operator<< (this=0xbfe16bd0, node=0xbfe16970) at /usr/include/qt4/QtCore/qdebug.h:111
#38 KMail::ObjectTreeParser::parseObjectTree (this=0xbfe16bd0, node=0xbfe16970) at ../../kmail/objecttreeparser.cpp:314
#39 0xae418948 in ~QString (this=0xaec6220, node=0xaec6220) at /usr/include/qt4/QtCore/qstring.h:882
#40 ~Stream (this=0xaec6220, node=0xaec6220) at /usr/include/qt4/QtCore/qdebug.h:64
#41 ~QDebug (this=0xaec6220, node=0xaec6220) at /usr/include/qt4/QtCore/qdebug.h:88
#42 KMail::ObjectTreeParser::parseObjectTree (this=0xaec6220, node=0xaec6220) at ../../kmail/objecttreeparser.cpp:314
#43 0xae4250fb in ?? () at ../../kmail/bodypartformatter.cpp:72 from /usr/lib/libkmailprivate.so.4
#44 0xae41822b in setProcessed (this=0xbfe16bd0, node=0xac585b0) at ../../kmail/partNode.h:207
#45 setProcessed (this=0xbfe16bd0, node=0xac585b0) at ../../kmail/partNode.h:207
#46 setProcessed (this=0xbfe16bd0, node=0xac585b0) at ../../kmail/partNode.h:205
#47 setProcessed (this=0xbfe16bd0, node=0xac585b0) at ../../kmail/partNode.h:207
#48 setProcessed (this=0xbfe16bd0, node=0xac585b0) at ../../kmail/partNode.h:207
#49 KMail::ObjectTreeParser::parseObjectTree (this=0xbfe16bd0, node=0xac585b0) at ../../kmail/objecttreeparser.cpp:263
#50 0xae26a789 in operator<< (this=0xa507c28, aUrl=..., aPos=...) at /usr/include/qt4/QtCore/qdebug.h:111
#51 KMReaderWin::slotUrlPopup (this=0xa507c28, aUrl=..., aPos=...) at ../../kmail/kmreaderwin.cpp:1997
#52 0xae25a973 in KMReaderWin::renderAttachments (this=0x0, node=0xa507c28, bgColor=...) at ../../kmail/kmreaderwin.cpp:3034
#53 0xae25ab7d in operator+= (this=0x1, node=0xa507c28, bgColor=...) at /usr/include/qt4/QtCore/qstring.h:281
#54 KMReaderWin::renderAttachments (this=0x1, node=0xa507c28, bgColor=...) at ../../kmail/kmreaderwin.cpp:3057
#55 0xae25b473 in QString (this=0xaa127b0) at /usr/include/qt4/QtCore/qstring.h:426
#56 KMReaderWin::displayMessage (this=0xaa127b0) at ../../kmail/kmreaderwin.cpp:1538
#57 0xae254b6f in KMReaderWin::slotUrlClicked (this=0xa507c28) at ../../kmail/kmreaderwin.cpp:2615
#58 0xae26e3dd in i18n (this=0xa507c28, node=0x0) at /usr/include/klocalizedstring.h:632
#59 KMReaderWin::slotEditAttachment (this=0xa507c28, node=0x0) at ../../kmail/kmreaderwin.cpp:2836
#60 0xb622d8ca in QMetaObject::metacall (object=0xa507c28, cl=109, idx=62, argv=0xbfe17068) at kernel/qmetaobject.cpp:237
#61 0xb62406ad in QMetaObject::activate (sender=0xaa04870, m=0xae8430b0, local_signal_index=0, argv=0xbfe16278) at kernel/qobject.cpp:3280
#62 0xae48f0d3 in node_copy (this=0xaa04870, alloc=178333616) at /usr/include/qt4/QtCore/qlist.h:391
#63 QList<QPointer<KMFolderImap> >::detach_helper (this=0xaa04870, alloc=178333616) at /usr/include/qt4/QtCore/qlist.h:695
#64 0xae49c1f6 in KMail::ImapJob::slotGetMessageResult (this=0xaa04870, job=0xab59888) at ../../kmail/imapjob.cpp:369
#65 0xae49e45f in KMail::ImapJob::qt_metacall (this=0xaa04870, _c=QMetaObject::InvokeMetaMethod, _id=12, _a=0xbfe17218) at ./imapjob.moc:93
#66 0xb622d8ca in QMetaObject::metacall (object=0xaa04870, cl=109, idx=12, argv=0xbfe17218) at kernel/qmetaobject.cpp:237
#67 0xb62406ad in QMetaObject::activate (sender=0xab59888, m=0xb65dbb48, local_signal_index=3, argv=0xbfe16278) at kernel/qobject.cpp:3280
#68 0xb64688a3 in KJob::totalSize (this=0xab59888, _t1=0xab59888, _t2=13075145935367962627) at ./kjob.moc:236
#69 0xb6468c08 in KJob::suspend (this=0xab59888) at ../../kdecore/jobs/kjob.cpp:132
#70 0xb5590480 in KIO::MultiGetJobPrivate::findCurrentEntry (this=0xab597e0) at ../../kio/kio/job.cpp:2761
#71 0xb5590960 in KIO::MultiGetJob::slotFinished (this=0xab59888) at ../../kio/kio/job.cpp:2802
#72 0xb558e453 in KIO::StatJob::slotFinished (this=0xab59888) at ../../kio/kio/job.cpp:901
#73 0xb622d8ca in QMetaObject::metacall (object=0xab59888, cl=109, idx=47, argv=0xab59888) at kernel/qmetaobject.cpp:237
#74 0xb62406ad in QMetaObject::activate (sender=0xa811d30, m=0xb573f944, local_signal_index=4, argv=0xbfe16278) at kernel/qobject.cpp:3280
#75 0xb5648fc7 in KIO::SlaveInterfacePrivate::messageBox (this=0xa811d30, type=-1075743112, text=..., caption=..., buttonYes=..., buttonNo=..., dontAskAgainName=...) at ../../kio/kio/slaveinterface.cpp:417
#76 0xb564c768 in QString (this=0xb5648f99) at /usr/include/qt4/QtCore/qstring.h:426
#77 KIO::TCPSlaveBase::verifyServerCertificate (this=0xb5648f99) at ../../kio/kio/tcpslavebase.cpp:799
#78 0xb5649483 in KIO::SlaveInterfacePrivate::messageBox (this=0xa811d30, type=176233776, text=..., caption=..., buttonYes=..., buttonNo=..., dontAskAgainName=...) at ../../kio/kio/slaveinterface.cpp:447
#79 0xb563bfe8 in i18n<QString> (protocol=..., url=..., error=@0x1e, error_text=...) at ../../kdecore/localization/klocalizedstring.h:645
#80 KIO::Slave::createSlave (protocol=..., url=..., error=@0x1e, error_text=...) at ../../kio/kio/slave.cpp:437
#81 0xb563c1f3 in QList (protocol=..., url=..., error=@0x1e, error_text=...) at /usr/include/qt4/QtCore/qlist.h:118
#82 QStringList (protocol=..., url=..., error=@0x1e, error_text=...) at /usr/include/qt4/QtCore/qstringlist.h:71
#83 KIO::Slave::createSlave (protocol=..., url=..., error=@0x1e, error_text=...) at ../../kio/kio/slave.cpp:451
#84 0xb622d8ca in QMetaObject::metacall (object=0xa811d30, cl=109, idx=30, argv=0xbfe177dc) at kernel/qmetaobject.cpp:237
#85 0xb62406ad in QMetaObject::activate (sender=0xa812530, m=0xb573c500, local_signal_index=0, argv=0xbfe16278) at kernel/qobject.cpp:3280
#86 0xb5555e17 in KIO::SocketConnectionBackend::connectToRemote (this=0xa4f8a18, url=...) at ../../kio/kio/connection.cpp:178
#87 0xb555817e in ~QList (this=0xa4f8a18, path=...) at /usr/include/qt4/QtCore/qlist.h:716
#88 ~QStringList (this=0xa4f8a18, path=...) at /usr/include/qt4/QtCore/qstringlist.h:67
#89 ~QForeachContainer (this=0xa4f8a18, path=...) at /usr/include/qt4/QtCore/qglobal.h:2240
#90 KIO::CopyJobPrivate::shouldSkip (this=0xa4f8a18, path=...) at ../../kio/kio/copyjob.cpp:855
#91 0xb55582ae in KIO::trash (src=..., flags=) at ../../kio/kio/copyjob.cpp:2138
#92 0xb622d8ca in QMetaObject::metacall (object=0xa812530, cl=109, idx=5, argv=0xa891950) at kernel/qmetaobject.cpp:237
#93 0xb6238df6 in QMetaCallEvent::placeMetaCall (this=0xacf2830, object=0xa812530) at kernel/qobject.cpp:534
#94 0xb623a6a2 in QObject::event (this=0xa812530, e=0xbfe1631c) at kernel/qobject.cpp:1219
#95 0xb670efdc in QApplicationPrivate::notify_helper (this=0xa017c90, receiver=0xa812530, e=0xacf2830) at kernel/qapplication.cpp:4396
#96 0xb671504e in QApplication::notify (this=0xbfe18134, receiver=0xa812530, e=0xacf2830) at kernel/qapplication.cpp:3798
#97 0xb728468a in KApplication::qt_metacall (this=0xbfe18134, _c=176235824, _id=181348400, _a=0xb43eeff4) at ./kapplication.moc:85
#98 0xb6227b3b in QCoreApplication::notifyInternal (this=0xbfe18134, receiver=0xa812530, event=0xacf2830) at kernel/qcoreapplication.cpp:732
#99 0xb622ad8b in sendEvent (receiver=0x0, event_type=0, data=0x9ff0ea0) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:215
#100 QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x9ff0ea0) at kernel/qcoreapplication.cpp:1373
#101 0xb622af4d in QCoreApplication::sendPostedEvents (receiver=0x0, event_type=0) at kernel/qcoreapplication.cpp:1266
#102 0xb6256a74 in sendPostedEvents (s=0xa013f10) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:220
#103 postEventSourceDispatch (s=0xa013f10) at kernel/qeventdispatcher_glib.cpp:277
#104 0xb4172855 in g_main_context_dispatch () from /lib/libglib-2.0.so.0
#105 0xb4176668 in ?? () from /lib/libglib-2.0.so.0
#106 0xb4176848 in g_main_context_iteration () from /lib/libglib-2.0.so.0
#107 0xb6256565 in QEventDispatcherGlib::processEvents (this=0x9ff0b60, flags=...) at kernel/qeventdispatcher_glib.cpp:415
#108 0xb67d0be5 in QGuiEventDispatcherGlib::processEvents (this=0x9ff0b60, flags=...) at kernel/qguieventdispatcher_glib.cpp:204
#109 0xb6226609 in QEventLoop::processEvents (this=0xbfe18094, flags=) at kernel/qeventloop.cpp:149
#110 0xb6226a8a in QEventLoop::exec (this=0xbfe18094, flags=...) at kernel/qeventloop.cpp:201
#111 0xb622b00f in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1009
#112 0xb670de07 in QApplication::exec () at kernel/qapplication.cpp:3672
#113 0x0804b132 in main (argc=1, argv=0xbfe18354) at ../../../kontact/src/main.cpp:224

Reported using DrKonqi
Comment 1 admin 2011-04-28 07:18:56 UTC 
Created attachment 59383 [details]
source of spam mail

this is the source of the spam mail which crashes kmail
Comment 2 Tommi Tervo 2011-04-28 16:18:05 UTC 
That email contains basically link to this site:
http://www.taobao.com/go/chn/tbk_channel/channelcode.php?pid=mm_26107585_0_0&amp;eventid=101329

No crash for me

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.6001.19046"></HEAD>
<BODY><IFRAME id=alimamaifrm height=2432 marginHeight=0 border=0 
src="http://www.taobao.com/go/chn/tbk_channel/channelcode.php?pid=mm_26107585_0_0&amp;eventid=101329" 
frameBorder=0 width="100%" name=alimamaifrm marginWidth=0 
scrolling=no></IFRAME></BODY></HTML>
Comment 3 Andrew Crouthamel 2018-10-29 22:22:01 UTC 
Dear Bug Submitter,

This bug has been stagnant for a long time. Could you help us out and re-test if the bug is valid in the latest version? I am setting the status to NEEDSINFO pending your response, please change the Status back to REPORTED when you respond.

Thank you for helping us make KDE software even better for everyone!
Comment 4 Bug Janitor Service 2018-11-13 14:32:16 UTC 
Dear Bug Submitter,

This bug has been in NEEDSINFO status with no change for at least
15 days. Please provide the requested information as soon as
possible and set the bug status as REPORTED. Due to regular bug
tracker maintenance, if the bug is still in NEEDSINFO status with
no change in 30 days the bug will be closed as RESOLVED > WORKSFORME
due to lack of needed information.

For more information about our bug triaging procedures please read the
wiki located here:
https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

If you have already provided the requested information, please
mark the bug as REPORTED so that the KDE team knows that the bug is
ready to be confirmed.

Thank you for helping us make KDE software even better for everyone!
Comment 5 Bug Janitor Service 2018-11-29 04:50:51 UTC 
This bug has been in NEEDSINFO status with no change for at least
30 days. The bug is now closed as RESOLVED > WORKSFORME
due to lack of needed information.

For more information about our bug triaging procedures please read the
wiki located here:
https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

Thank you for helping us make KDE software even better for everyone!