| Summary: | [testcase] Konqueror crashes with sigsegv | ||
|---|---|---|---|
| Product: | [Applications] konqueror | Reporter: | Graeme Hewson <bugs> |
| Component: | khtml | Assignee: | Konqueror Bugs <konqueror-bugs-null> |
| Status: | RESOLVED FIXED | ||
| Severity: | crash | CC: | aiacovitti, don-redhat-zxy, kde, rasasi78 |
| Priority: | NOR | Keywords: | testcase |
| Version First Reported In: | 4.9.2 | ||
| Target Milestone: | --- | ||
| Platform: | Ubuntu | ||
| OS: | Linux | ||
| Latest Commit: | http://commits.kde.org/kdelibs/218cce8e53e378ab5f269636d768ac1c7aa1f70b | Version Fixed/Implemented In: | 4.11.4 |
| Sentry Crash Report: | |||
| Attachments: |
text copy/pasted from ABRT
reduced testcase |
||
|
Description
Graeme Hewson
2012-06-25 17:01:20 UTC
Are you using khtml 4.8.4? You can check running the followin command in konsole: dpkg -l | grep libkhtml5 I can confirm, opensuse 4.8.4 and self built 4.8.4+ from yesterday crashes. Yes, dpkg shows 4:4.8.4a-0ubuntu0.1~ppa2 Created attachment 74326 [details]
text copy/pasted from ABRT
I don't know whether this is the same bug, but at least it's sigsegv killing konqueror. This is using fedora 16, about says:Konqueror Version 4.8.5 (4.8.5) Using KDE Development Platform 4.8.5 (4.8.5) It seems reproducible - I was trying to add members to a yahoo group. The infuriating thing is that ABRT leads me through this long process that ends up refusing to file the bug cause "the backtrace is unusable". I have lots of huge core files. Anyhow, the attachment is what I see in the ABRT window, copy/pasted Don: That doesn't seem to be the same kind of crash as mine. The fact that they both have SIGSEGV doesn't mean anything. I think the message you're seeing means you need to install the debug symbols. See, for instance, https://bugzilla.redhat.com/show_bug.cgi?id=750616. Problem still reproducible on 4.9.2, so updating version number for ticket. Created attachment 74337 [details]
reduced testcase
Looks like a NULL pointer dereference:
(gdb) bt
#0 0x00007fffe372fd9a in khtml::RenderBlock::nodeAtPoint (this=0xcf8110, info=..., _x=_x@entry=184, _y=_y@entry=8, _tx=10, _ty=_ty@entry=10, hitTestAction=hitTestAction@entry=HitTestAll, inBox=inBox@entry=false)
at ../../khtml/rendering/render_block.cpp:2802
#1 0x00007fffe372fe47 in khtml::RenderBlock::nodeAtPoint (this=0xcf7ec8, info=..., _x=184, _y=8, _tx=0, _ty=0, hitTestAction=HitTestChildrenOnly, inBox=false) at ../../khtml/rendering/render_block.cpp:2805
#2 0x00007fffe375c96d in khtml::RenderLayer::nodeAtPointForLayer (this=0xcf7f90, rootLayer=rootLayer@entry=0xcf7e10, info=..., xMousePos=xMousePos@entry=184, yMousePos=yMousePos@entry=8, hitTestRect=...)
at ../../khtml/rendering/render_layer.cpp:1254
#3 0x00007fffe375c773 in khtml::RenderLayer::nodeAtPointForLayer (this=this@entry=0xcf7e10, rootLayer=rootLayer@entry=0xcf7e10, info=..., xMousePos=xMousePos@entry=184, yMousePos=yMousePos@entry=8, hitTestRect=...)
at ../../khtml/rendering/render_layer.cpp:1232
#4 0x00007fffe375cad2 in khtml::RenderLayer::nodeAtPoint (this=0xcf7e10, info=..., x=184, y=8) at ../../khtml/rendering/render_layer.cpp:1193
#5 0x00007fffe36b580f in DOM::MouseEventImpl::computeLayerPos (this=this@entry=0xd43870) at ../../khtml/xml/dom2_eventsimpl.cpp:531
#6 0x00007fffe36b6ca5 in DOM::MouseEventImpl::MouseEventImpl (this=0xd43870, _id=<optimized out>, canBubbleArg=<optimized out>, cancelableArg=<optimized out>, viewArg=<optimized out>, detailArg=<optimized out>,
screenXArg=184, screenYArg=78, clientXArg=184, clientYArg=8, pageXArg=184, pageYArg=8, ctrlKeyArg=false, altKeyArg=false, shiftKeyArg=false, metaKeyArg=false, buttonArg=65535, relatedTargetArg=0xd0e1b0, qe=0x0,
isDoubleClick=false, orient=DOM::MouseEventImpl::ONone) at ../../khtml/xml/dom2_eventsimpl.cpp:511
#7 0x00007fffe35ef613 in KHTMLView::dispatchMouseEvent (this=this@entry=0xb0e980, eventId=eventId@entry=7, targetNode=targetNode@entry=0xcca7c0, targetNodeNonShared=<optimized out>, cancelable=cancelable@entry=false,
detail=detail@entry=0, _mouse=_mouse@entry=0x7fffffffcce0, setUnder=setUnder@entry=true, mouseEventType=mouseEventType@entry=4, orient=orient@entry=0) at ../../khtml/khtmlview.cpp:3561
#8 0x00007fffe35f691a in KHTMLView::mouseMoveEvent (this=0xb0e980, _mouse=0x7fffffffcce0) at ../../khtml/khtmlview.cpp:1350
#9 0x00007ffff4470e44 in QWidget::event (this=0xb0e980, event=0x7fffffffcce0) at kernel/qwidget.cpp:8356
#10 0x00007ffff481bd36 in QFrame::event (this=0xb0e980, e=0x7fffffffcce0) at widgets/qframe.cpp:557
#11 0x00007fffe35f5b55 in KHTMLView::widgetEvent (this=0xb0e980, e=<optimized out>) at ../../khtml/khtmlview.cpp:2209
#12 0x00007fffe35f61c0 in KHTMLView::eventFilter (this=0xb0e980, o=0xb2cf00, e=0x7fffffffcce0) at ../../khtml/khtmlview.cpp:2054
#13 0x00007ffff52f4cc6 in QCoreApplicationPrivate::sendThroughObjectEventFilters (this=<optimized out>, receiver=0xb2cf00, event=0x7fffffffcce0) at kernel/qcoreapplication.cpp:1025
#14 0x00007ffff44216dc in QApplicationPrivate::notify_helper (this=this@entry=0x62f6b0, receiver=receiver@entry=0xb2cf00, e=e@entry=0x7fffffffcce0) at kernel/qapplication.cpp:4552
#15 0x00007ffff44263eb in QApplication::notify (this=<optimized out>, receiver=0xb2cf00, e=0x7fffffffcce0) at kernel/qapplication.cpp:4099
#16 0x00007ffff5d80886 in KApplication::notify (this=0x7fffffffdb20, receiver=0xb2cf00, event=0x7fffffffcce0) at ../../kdeui/kernel/kapplication.cpp:311
#17 0x00007ffff52f4b5e in QCoreApplication::notifyInternal (this=0x7fffffffdb20, receiver=0xb2cf00, event=0x7fffffffcce0) at kernel/qcoreapplication.cpp:915
#18 0x00007ffff442254b in sendEvent (event=<optimized out>, receiver=<optimized out>) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:231
#19 QApplicationPrivate::sendMouseEvent (receiver=0xb2cf00, event=0x7fffffffcce0, alienWidget=0xb2cf00, nativeWidget=0x67da30, buttonDown=0x7ffff4ef72a8, lastMouseReceiver=..., spontaneous=true)
at kernel/qapplication.cpp:3167
#20 0x00007ffff449cfc4 in QETWidget::translateMouseEvent (this=this@entry=0x67da30, event=event@entry=0x7fffffffd450) at kernel/qapplication_x11.cpp:4523
#21 0x00007ffff449bd51 in QApplication::x11ProcessEvent (this=0x7fffffffdb20, event=0x7fffffffd450) at kernel/qapplication_x11.cpp:3646
#22 0x00007ffff44c2bc2 in x11EventSourceDispatch (s=0x62f270, callback=0, user_data=0x0) at kernel/qguieventdispatcher_glib.cpp:146
#23 0x00007ffff0650355 in g_main_context_dispatch () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#24 0x00007ffff0650688 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#25 0x00007ffff0650744 in g_main_context_iteration () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#26 0x00007ffff5323276 in QEventDispatcherGlib::processEvents (this=0x603b30, flags=...) at kernel/qeventdispatcher_glib.cpp:424
#27 0x00007ffff44c283e in QGuiEventDispatcherGlib::processEvents (this=<optimized out>, flags=...) at kernel/qguieventdispatcher_glib.cpp:204
#28 0x00007ffff52f38af in QEventLoop::processEvents (this=this@entry=0x7fffffffd820, flags=...) at kernel/qeventloop.cpp:149
#29 0x00007ffff52f3b38 in QEventLoop::exec (this=0x7fffffffd820, flags=...) at kernel/qeventloop.cpp:204
#30 0x00007ffff52f8cf8 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1187
#31 0x00007ffff7bad062 in kdemain () from /usr/lib/kde4/libkdeinit/libkdeinit4_konqueror.so
#32 0x00007ffff778fead in __libc_start_main (main=<optimized out>, argc=<optimized out>, ubp_av=<optimized out>, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffffffdd98)
at libc-start.c:228
#33 0x0000000000400771 in _start ()
(gdb) x/1i $pc
=> 0x7fffe372fd9a <khtml::RenderBlock::nodeAtPoint(khtml::RenderObject::NodeInfo&, int, int, int, int, HitTestAction, bool)+394>: callq *0x58(%rax)
(gdb) i r rax
rax 0x0 0
*** Bug 320145 has been marked as a duplicate of this bug. *** Git commit 218cce8e53e378ab5f269636d768ac1c7aa1f70b by Andrea Iacovitti. Committed on 02/11/2013 at 12:16. Pushed by aiacovitti into branch 'KDE/4.11'. Remove the object from the floatingObject list too in RenderObject::removeFromObjectLists, otherwise FloatingObject.node become a dangling pointer. Related: bug 215719 FIXED-IN: 4.11.4 M +7 -0 khtml/rendering/render_object.cpp http://commits.kde.org/kdelibs/218cce8e53e378ab5f269636d768ac1c7aa1f70b |