Summary: | Konqueror/Webkit and Rekonq crash trying to upload an image to g+ | ||
---|---|---|---|
Product: | [Unmaintained] kio | Reporter: | Andreas Krohn <Hamburger1984> |
Component: | general | Assignee: | Andrea Diamantini <adjam7> |
Status: | RESOLVED UPSTREAM | ||
Severity: | crash | CC: | adawit, adjam7, anavarrog, babysick, robert.sevcik, roger.luedecke |
Priority: | NOR | ||
Version: | 4.7 | ||
Target Milestone: | --- | ||
Platform: | Fedora RPMs | ||
OS: | Linux | ||
Latest Commit: | Version Fixed In: | ||
Sentry Crash Report: | |||
Attachments: |
New crash information added by DrKonqi
New crash information added by DrKonqi |
Description
Andreas Krohn
2011-10-14 08:27:21 UTC
Created attachment 65070 [details]
New crash information added by DrKonqi
rekonq (0.7.90) on KDE Platform 4.7.2 (4.7.2) using Qt 4.7.4
- What I was doing when the application crashed:
I was uploading a photo to google+, a popup was launched and rekonq chrased.
-- Backtrace (Reduced):
#6 data (this=0x7fff09657dd8) at ../../include/QtCore/../../src/corelib/tools/qscopedpointer.h:135
[...]
#9 QIODevice::read (this=0x0, data=0x64d5e58 "0^M\006", maxSize=65536) at io/qiodevice.cpp:760
#10 0x00007f1ba088874b in QIODevice::read (this=0x0, maxSize=<optimized out>) at io/qiodevice.cpp:964
#11 0x00007f1ba4808cf4 in WebCore::FormDataIODevice::readData (this=0x5a1e410, destination=0x6865748 " W\206\006", size=65536) at platform/network/qt/QNetworkReplyHandler.cpp:130
#12 0x00007f1ba0887fd0 in QIODevice::read (this=0x5a1e410, data=0x6865748 " W\206\006", maxSize=65536) at io/qiodevice.cpp:858
Created attachment 65122 [details]
New crash information added by DrKonqi
rekonq (0.8.0) on KDE Platform 4.7.2 (4.7.2) using Qt 4.7.4
- What I was doing when the application crashed:
Uploading picture to picasaweb or google+
- Custom settings of the application:
I was in private browsing
-- Backtrace (Reduced):
#7 data (this=0x4) at ../../include/QtCore/../../src/corelib/tools/qscopedpointer.h:135
[...]
#10 QIODevice::read (this=0x0, data=0xcbd45e0 "\314\314\314\377\377\377\377\377\377\377\377\377\314\314\314\377\314\314\314\377\377\377\377\377\377\377\377\377\314\314\314\377\314\314\314\377\377\377\377\377\377\377\377\377\314\314\314\377\314\314\314\377\377\377\377\377\377\377\377\377\314\314\314\377\314\314\314\377\377\377\377\377\377\377\377\377\314\314\314\377\314\314\314\377\377\377\377\377\377\377\377\377\314\314\314\377\314\314\314\377\377\377\377\377\377\377\377\377\314\314\314\377\314\314\314\377\377\377\377\377\377\377\377\377\314\314\314\377\314\314\314\377\377\377\377\377\377\377\377\377\314\314\314\377\314\314\314\377\377\377\377\377\377\377\377\377\314\314\314\377\314\314\314\377\377\377\377\377\377\377\377\377\314\314\314\377\314\314\314\377\377\377\377\377\377\377\377\377\314\314\314\377\314\314\314\377\377\377\377\377"..., maxSize=65536) at io/qiodevice.cpp:760
#11 0x063b448a in QIODevice::read (this=0x0, maxSize=<optimized out>) at io/qiodevice.cpp:964
#12 0x018a5677 in WebCore::FormDataIODevice::readData (this=0xca5ddf0, destination=0xcbabf20 " 42_1a_", size=65536) at platform/network/qt/QNetworkReplyHandler.cpp:130
#13 0x063b3bf0 in QIODevice::read (this=0xca5ddf0, data=0xcbabf20 " 42_1a_", maxSize=65536) at io/qiodevice.cpp:858
The same happens with konqueror/webkit with the following backtrace: #0 0xb6da32ca in QIODevice::read(char*, long long) () from /SW/TRUNK/INSTALL/lib/libQtCore.so.4 #1 0xb6da3caa in QIODevice::read(long long) () from /SW/TRUNK/INSTALL/lib/libQtCore.so.4 #2 0xacc23c87 in WebCore::FormDataIODevice::readData(char*, long long) () from /SW/TRUNK/INSTALL/lib/libQtWebKit.so.4 #3 0xb6da33f9 in QIODevice::read(char*, long long) () from /SW/TRUNK/INSTALL/lib/libQtCore.so.4 #4 0xb6da3caa in QIODevice::read(long long) () from /SW/TRUNK/INSTALL/lib/libQtCore.so.4 #5 0xb78423e5 in KIO::TransferJobPrivate::slotDataReqFromDevice (this=0x9657528) at /SW/SRC/kdelibs/kio/kio/job.cpp:1301 #6 0xb78490aa in KIO::TransferJob::qt_static_metacall (_o=0x9a57068, _c=QMetaObject::InvokeMetaMethod, _id=17, _a=0xbfffe620) at /SW/TRUNK/BUILD/kdelibs/kio/jobclasses.moc:398 #7 0xb6e33141 in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /SW/TRUNK/INSTALL/lib/libQtCore.so.4 #8 0xb78ef3ff in KIO::SlaveInterface::dataReq (this=0x8b795b8) at /SW/TRUNK/BUILD/kdelibs/kio/slaveinterface.moc:166 #9 0xb78ec9f5 in KIO::SlaveInterface::dispatch (this=0x8b795b8, _cmd=101, rawdata=...) at /SW/SRC/kdelibs/kio/kio/slaveinterface.cpp:163 #10 0xb78ec6c2 in KIO::SlaveInterface::dispatch (this=0x8b795b8) at /SW/SRC/kdelibs/kio/kio/slaveinterface.cpp:88 #11 0xb78e23be in KIO::Slave::gotInput (this=0x8b795b8) at /SW/SRC/kdelibs/kio/kio/slave.cpp:344 #12 0xb78e34ba in KIO::Slave::qt_static_metacall (_o=0x8b795b8, _c=QMetaObject::InvokeMetaMethod, _id=2, _a=0xbfffe900) at /SW/TRUNK/BUILD/kdelibs/kio/slave.moc:57 #13 0xb6e33141 in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /SW/TRUNK/INSTALL/lib/libQtCore.so.4 #14 0xb781055d in KIO::Connection::readyRead (this=0x8b2fce8) at /SW/TRUNK/BUILD/kdelibs/kio/connection.moc:106 #15 0xb780d228 in KIO::ConnectionPrivate::dequeue (this=0x8b2fc20) at /SW/SRC/kdelibs/kio/kio/connection.cpp:82 #16 0xb78103dc in KIO::Connection::qt_static_metacall (_o=0x8b2fce8, _c=QMetaObject::InvokeMetaMethod, _id=1, _a=0x9243900) at /SW/TRUNK/BUILD/kdelibs/kio/connection.moc:56 #17 0xb6e2e551 in QMetaCallEvent::placeMetaCall(QObject*) () from /SW/TRUNK/INSTALL/lib/libQtCore.so.4 #18 0xb6e377cb in QObject::event(QEvent*) () from /SW/TRUNK/INSTALL/lib/libQtCore.so.4 #19 0xb627c4b4 in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /SW/TRUNK/INSTALL/lib/libQtGui.so.4 #20 0xb62819d3 in QApplication::notify(QObject*, QEvent*) () from /SW/TRUNK/INSTALL/lib/libQtGui.so.4 #21 0xb747481a in KApplication::notify (this=0xbffff210, receiver=0x8b2fce8, event=0x91fbbc0) at /SW/SRC/kdelibs/kdeui/kernel/kapplication.cpp:311 #22 0xb6e1c59e in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /SW/TRUNK/INSTALL/lib/libQtCore.so.4 #23 0xb6e202c0 in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) () from /SW/TRUNK/INSTALL/lib/libQtCore.so.4 #24 0xb6e205fc in QCoreApplication::sendPostedEvents(QObject*, int) () from /SW/TRUNK/INSTALL/lib/libQtCore.so.4 #25 0xb6e4f1e4 in ?? () from /SW/TRUNK/INSTALL/lib/libQtCore.so.4 ---Type <return> to continue, or q <return> to quit--- #26 0xb58e7faf in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0 #27 0xb58e86e0 in ?? () from /usr/lib/libglib-2.0.so.0 #28 0xb58e897a in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0 #29 0xb6e4f5d7 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /SW/TRUNK/INSTALL/lib/libQtCore.so.4 #30 0xb63308fa in ?? () from /SW/TRUNK/INSTALL/lib/libQtGui.so.4 #31 0xb6e1b10d in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /SW/TRUNK/INSTALL/lib/libQtCore.so.4 #32 0xb6e1b3a9 in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /SW/TRUNK/INSTALL/lib/libQtCore.so.4 #33 0xb6e206aa in QCoreApplication::exec() () from /SW/TRUNK/INSTALL/lib/libQtCore.so.4 #34 0xb627a3c4 in QApplication::exec() () from /SW/TRUNK/INSTALL/lib/libQtGui.so.4 #35 0xb7f94172 in kdemain (argc=1, argv=0xbffff494) at /SW/SRC/kde-baseapps/konqueror/src/konqmain.cpp:227 #36 0x080485b9 in main (argc=1, argv=0xbffff494) at /SW/TRUNK/BUILD/kde-baseapps/konqueror/src/konqueror_dummy.cpp:3 While it doesn't with QtTestBrowser (also if it does not really upload the image). *** Bug 286554 has been marked as a duplicate of this bug. *** Git commit 8ea1d57508ca9a377dd8c98c003a16c37bd69f0f by Dawit Alemayehu. Committed on 15/11/2011 at 01:39. Pushed by adawit into branch 'KDE/4.7'. Do not crash when QNetworkRequest::ContentLength is either 0 or not specified for a PostOperation. CCBUG: 283967 M +5 -3 kio/kio/accessmanager.cpp http://commits.kde.org/kdelibs/8ea1d57508ca9a377dd8c98c003a16c37bd69f0f Crash is fixed by the commit shown in comment #5. The fact that uploading the image does not work is an upstream issue and as such reported there. See https://bugs.webkit.org/show_bug.cgi?id=72329. Git commit e30905e3ab51652bbfabdb3b7d9eece4b62f39be by Dawit Alemayehu. Committed on 17/11/2011 at 17:11. Pushed by adawit into branch 'KDE/4.7'. In sendBody if the specified content-length is 0, then simply return without any attempt to obtain data to send to the server. Prevents potential crashes in the screwed up client code. See bug # below. CCBUG: 283967 M +4 -0 kioslave/http/http.cpp http://commits.kde.org/kdelibs/e30905e3ab51652bbfabdb3b7d9eece4b62f39be Git commit f715a2b85347db55ca2d159eb10b9d9cd10f7fac by Dawit Alemayehu. Committed on 18/11/2011 at 23:42. Pushed by adawit into branch 'KDE/4.7'. Revert commit 8ea1d575 because it causes regression. The mitgation for the crash reported in bug# 283967 is now handled at the ioslave level, kio_http to be precise. CCMAIL:dfaure@kde.org CCBUG: 283967 M +1 -6 kio/kio/accessmanager.cpp M +3 -3 kioslave/http/http.cpp http://commits.kde.org/kdelibs/f715a2b85347db55ca2d159eb10b9d9cd10f7fac *** Bug 287694 has been marked as a duplicate of this bug. *** |