Bug 305676

Summary: Crash on https://getsatisfaction.com/ [@ khtml::InlineFlowBox::deleteLine]
Product: [Applications] konqueror Reporter: Graeme Hewson <bugs>
Component: khtmlAssignee: Konqueror Bugs <konqueror-bugs-null>
Status: RESOLVED UNMAINTAINED    
Severity: crash CC: fn, j.mairboeck, jlp
Priority: NOR Keywords: testcase
Version First Reported In: 4.9.0   
Target Milestone: ---   
Platform: Ubuntu   
OS: Linux   
URL: https://getsatisfaction.com/kobo/
Latest Commit: Version Fixed/Implemented In:
Sentry Crash Report:
Attachments: New crash information added by DrKonqi

Description Graeme Hewson 2012-08-23 17:11:58 UTC 
Application: konqueror (4.9.00)
KDE Platform Version: 4.9.00
Qt Version: 4.8.1
Operating System: Linux 3.2.0-29-generic x86_64
Distribution: Ubuntu 12.04.1 LTS

-- Information about the crash:
- What I was doing when the application crashed:

Go to https://getsatisfaction.com/kobo/
Enter anything in the Search Topics box (it doesn't matter if the text is found or not).
On the search results page, move the mouse cursor near one of the links in the grey area near the top (Questions, Ideas, etc).
Crash occurs.

The crash can be reproduced every time.

-- Backtrace:
Application: Konqueror (konqueror), signal: Segmentation fault
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[Current thread is 1 (Thread 0x7fa9651a1780 (LWP 4608))]

Thread 3 (Thread 0x7fa948f66700 (LWP 4614)):
#0  timerSourcePrepare (source=0x7fa944002600, timeout=0x7fa948f65c6c) at kernel/qeventdispatcher_glib.cpp:160
#1  0x00007fa95d91d846 in g_main_context_prepare () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#2  0x00007fa95d91df5b in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#3  0x00007fa95d91e164 in g_main_context_iteration () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#4  0x00007fa9624ec426 in QEventDispatcherGlib::processEvents (this=0x7fa9440008c0, flags=...) at kernel/qeventdispatcher_glib.cpp:426
#5  0x00007fa9624bbc82 in QEventLoop::processEvents (this=<optimized out>, flags=...) at kernel/qeventloop.cpp:149
#6  0x00007fa9624bbed7 in QEventLoop::exec (this=0x7fa948f65dd0, flags=...) at kernel/qeventloop.cpp:204
#7  0x00007fa9623bafa7 in QThread::exec (this=<optimized out>) at thread/qthread.cpp:501
#8  0x00007fa96249b9ff in QInotifyFileSystemWatcherEngine::run (this=0x38ac8b0) at io/qfilesystemwatcher_inotify.cpp:248
#9  0x00007fa9623bdfcb in QThreadPrivate::start (arg=0x38ac8b0) at thread/qthread_unix.cpp:298
#10 0x00007fa95dfdee9a in start_thread (arg=0x7fa948f66700) at pthread_create.c:308
#11 0x00007fa964a084bd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#12 0x0000000000000000 in ?? ()

Thread 2 (Thread 0x7fa943be8700 (LWP 4615)):
#0  0x00007fffb65c18de in ?? ()
#1  0x00007fa95dbcf15d in __GI_clock_gettime (clock_id=<optimized out>, tp=<optimized out>) at ../sysdeps/unix/clock_gettime.c:116
#2  0x00007fa962414bb4 in do_gettime (frac=0x7fa943be7b98, sec=0x7fa943be7b90) at tools/qelapsedtimer_unix.cpp:123
#3  qt_gettime () at tools/qelapsedtimer_unix.cpp:140
#4  0x00007fa9624ecb8d in QTimerInfoList::updateCurrentTime (this=0x7fa93c002860) at kernel/qeventdispatcher_unix.cpp:343
#5  0x00007fa9624ecec3 in QTimerInfoList::timerWait (this=0x7fa93c002860, tm=...) at kernel/qeventdispatcher_unix.cpp:450
#6  0x00007fa9624eb97c in timerSourcePrepareHelper (src=<optimized out>, timeout=0x7fa943be7c6c) at kernel/qeventdispatcher_glib.cpp:136
#7  0x00007fa9624eba25 in timerSourcePrepare (source=<optimized out>, timeout=<optimized out>) at kernel/qeventdispatcher_glib.cpp:169
#8  0x00007fa95d91d846 in g_main_context_prepare () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#9  0x00007fa95d91df5b in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#10 0x00007fa95d91e164 in g_main_context_iteration () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#11 0x00007fa9624ec426 in QEventDispatcherGlib::processEvents (this=0x7fa93c0008c0, flags=...) at kernel/qeventdispatcher_glib.cpp:426
#12 0x00007fa9624bbc82 in QEventLoop::processEvents (this=<optimized out>, flags=...) at kernel/qeventloop.cpp:149
#13 0x00007fa9624bbed7 in QEventLoop::exec (this=0x7fa943be7dd0, flags=...) at kernel/qeventloop.cpp:204
#14 0x00007fa9623bafa7 in QThread::exec (this=<optimized out>) at thread/qthread.cpp:501
#15 0x00007fa9637419be in KIO::NameLookUpThread::run (this=0x39ce000) at ../../kio/kio/hostinfo.cpp:226
#16 0x00007fa9623bdfcb in QThreadPrivate::start (arg=0x39ce000) at thread/qthread_unix.cpp:298
#17 0x00007fa95dfdee9a in start_thread (arg=0x7fa943be8700) at pthread_create.c:308
#18 0x00007fa964a084bd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#19 0x0000000000000000 in ?? ()

Thread 1 (Thread 0x7fa9651a1780 (LWP 4608)):
[KCrash Handler]
#6  0x00007fa9516445b5 in khtml::InlineFlowBox::deleteLine (this=0x4b796d8, arena=0x43a2510) at ../../khtml/rendering/render_line.cpp:208
#7  0x00007fa9516445bb in khtml::InlineFlowBox::deleteLine (this=0x4b79740, arena=0x43a2510) at ../../khtml/rendering/render_line.cpp:208
#8  0x00007fa9515db863 in khtml::RenderBlock::layoutInlineChildren (this=0x4b5a688, relayoutChildren=false, breakBeforeLine=0) at ../../khtml/rendering/bidi.cpp:1462
#9  0x00007fa9515e5bac in khtml::RenderBlock::layoutBlock (this=0x4b5a688, relayoutChildren=<optimized out>) at ../../khtml/rendering/render_block.cpp:845
#10 0x00007fa9515db68b in layoutIfNeeded (this=0x4b5a688) at ../../khtml/rendering/render_object.h:480
#11 khtml::RenderBlock::layoutInlineChildren (this=0x4ac9b98, relayoutChildren=false, breakBeforeLine=0) at ../../khtml/rendering/bidi.cpp:1410
#12 0x00007fa9515e5bac in khtml::RenderBlock::layoutBlock (this=0x4ac9b98, relayoutChildren=<optimized out>) at ../../khtml/rendering/render_block.cpp:845
#13 0x00007fa9515e52cc in layoutIfNeeded (this=0x4ac9b98) at ../../khtml/rendering/render_object.h:480
#14 layoutIfNeeded (this=0x4ac9b98) at ../../khtml/rendering/render_block.cpp:1483
#15 khtml::RenderBlock::layoutBlockChildren (this=0x4ac9078, relayoutChildren=false) at ../../khtml/rendering/render_block.cpp:1568
#16 0x00007fa9515e59c4 in khtml::RenderBlock::layoutBlock (this=0x4ac9078, relayoutChildren=<optimized out>) at ../../khtml/rendering/render_block.cpp:847
#17 0x00007fa9515e52cc in layoutIfNeeded (this=0x4ac9078) at ../../khtml/rendering/render_object.h:480
#18 layoutIfNeeded (this=0x4ac9078) at ../../khtml/rendering/render_block.cpp:1483
#19 khtml::RenderBlock::layoutBlockChildren (this=0x4ac9140, relayoutChildren=false) at ../../khtml/rendering/render_block.cpp:1568
#20 0x00007fa9515e59c4 in khtml::RenderBlock::layoutBlock (this=0x4ac9140, relayoutChildren=<optimized out>) at ../../khtml/rendering/render_block.cpp:847
#21 0x00007fa9515e52cc in layoutIfNeeded (this=0x4ac9140) at ../../khtml/rendering/render_object.h:480
#22 layoutIfNeeded (this=0x4ac9140) at ../../khtml/rendering/render_block.cpp:1483
#23 khtml::RenderBlock::layoutBlockChildren (this=0x4a99ec8, relayoutChildren=false) at ../../khtml/rendering/render_block.cpp:1568
#24 0x00007fa9515e59c4 in khtml::RenderBlock::layoutBlock (this=0x4a99ec8, relayoutChildren=<optimized out>) at ../../khtml/rendering/render_block.cpp:847
#25 0x00007fa9515e52cc in layoutIfNeeded (this=0x4a99ec8) at ../../khtml/rendering/render_object.h:480
#26 layoutIfNeeded (this=0x4a99ec8) at ../../khtml/rendering/render_block.cpp:1483
#27 khtml::RenderBlock::layoutBlockChildren (this=0x38f3898, relayoutChildren=false) at ../../khtml/rendering/render_block.cpp:1568
#28 0x00007fa9515e59c4 in khtml::RenderBlock::layoutBlock (this=0x38f3898, relayoutChildren=<optimized out>) at ../../khtml/rendering/render_block.cpp:847
#29 0x00007fa9515e52cc in layoutIfNeeded (this=0x38f3898) at ../../khtml/rendering/render_object.h:480
#30 layoutIfNeeded (this=0x38f3898) at ../../khtml/rendering/render_block.cpp:1483
#31 khtml::RenderBlock::layoutBlockChildren (this=0x38f2460, relayoutChildren=false) at ../../khtml/rendering/render_block.cpp:1568
#32 0x00007fa9515e59c4 in khtml::RenderBlock::layoutBlock (this=0x38f2460, relayoutChildren=<optimized out>) at ../../khtml/rendering/render_block.cpp:847
#33 0x00007fa9515e52cc in layoutIfNeeded (this=0x38f2460) at ../../khtml/rendering/render_object.h:480
#34 layoutIfNeeded (this=0x38f2460) at ../../khtml/rendering/render_block.cpp:1483
#35 khtml::RenderBlock::layoutBlockChildren (this=0x38f2398, relayoutChildren=false) at ../../khtml/rendering/render_block.cpp:1568
#36 0x00007fa9515e59c4 in khtml::RenderBlock::layoutBlock (this=0x38f2398, relayoutChildren=<optimized out>) at ../../khtml/rendering/render_block.cpp:847
#37 0x00007fa951640c3f in khtml::RenderBody::layout (this=0x38f2398) at ../../khtml/rendering/render_body.cpp:91
#38 0x00007fa9515e52cc in layoutIfNeeded (this=0x38f2398) at ../../khtml/rendering/render_object.h:480
#39 layoutIfNeeded (this=0x38f2398) at ../../khtml/rendering/render_block.cpp:1483
#40 khtml::RenderBlock::layoutBlockChildren (this=0x38f2218, relayoutChildren=false) at ../../khtml/rendering/render_block.cpp:1568
#41 0x00007fa9515e59c4 in khtml::RenderBlock::layoutBlock (this=0x38f2218, relayoutChildren=<optimized out>) at ../../khtml/rendering/render_block.cpp:847
#42 0x00007fa9515e52cc in layoutIfNeeded (this=0x38f2218) at ../../khtml/rendering/render_object.h:480
#43 layoutIfNeeded (this=0x38f2218) at ../../khtml/rendering/render_block.cpp:1483
#44 khtml::RenderBlock::layoutBlockChildren (this=0x38f2020, relayoutChildren=false) at ../../khtml/rendering/render_block.cpp:1568
#45 0x00007fa9515e59c4 in khtml::RenderBlock::layoutBlock (this=0x38f2020, relayoutChildren=<optimized out>) at ../../khtml/rendering/render_block.cpp:847
#46 0x00007fa95163d0b2 in khtml::RenderCanvas::layout (this=0x38f2020) at ../../khtml/rendering/render_canvas.cpp:191
#47 0x00007fa9514a826b in KHTMLView::layout (this=0x2a72180) at ../../khtml/khtmlview.cpp:1007
#48 0x00007fa9514a92d6 in KHTMLView::timerEvent (this=0x2a72180, e=<optimized out>) at ../../khtml/khtmlview.cpp:4013
#49 0x00007fa9624d6179 in QObject::event (this=0x2a72180, e=<optimized out>) at kernel/qobject.cpp:1157
#50 0x00007fa961612b7b in QWidget::event (this=0x2a72180, event=0x7fffb6510710) at kernel/qwidget.cpp:8821
#51 0x00007fa9619d33b6 in QFrame::event (this=0x2a72180, e=0x7fffb6510710) at widgets/qframe.cpp:557
#52 0x00007fa961a554c3 in QAbstractScrollArea::event (this=0x2a72180, e=0x7fffb6510710) at widgets/qabstractscrollarea.cpp:996
#53 0x00007fa95149ee23 in KHTMLView::event (this=0x2a72180, e=0x7fffb6510710) at ../../khtml/khtmlview.cpp:546
#54 0x00007fa9615c2894 in notify_helper (e=0x7fffb6510710, receiver=0x2a72180, this=0x226d470) at kernel/qapplication.cpp:4559
#55 QApplicationPrivate::notify_helper (this=0x226d470, receiver=0x2a72180, e=0x7fffb6510710) at kernel/qapplication.cpp:4531
#56 0x00007fa9615c7713 in QApplication::notify (this=0x7fffb6510b40, receiver=0x2a72180, e=0x7fffb6510710) at kernel/qapplication.cpp:4420
#57 0x00007fa962f22456 in KApplication::notify (this=0x7fffb6510b40, receiver=0x2a72180, event=0x7fffb6510710) at ../../kdeui/kernel/kapplication.cpp:311
#58 0x00007fa9624bce9c in QCoreApplication::notifyInternal (this=0x7fffb6510b40, receiver=0x2a72180, event=0x7fffb6510710) at kernel/qcoreapplication.cpp:876
#59 0x00007fa9624ee1f2 in sendEvent (event=0x7fffb6510710, receiver=<optimized out>) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:231
#60 QTimerInfoList::activateTimers (this=0x226f340) at kernel/qeventdispatcher_unix.cpp:611
#61 0x00007fa9624ebc0d in timerSourceDispatch (source=<optimized out>) at kernel/qeventdispatcher_glib.cpp:186
#62 timerSourceDispatch (source=<optimized out>) at kernel/qeventdispatcher_glib.cpp:180
#63 0x00007fa95d91dd53 in g_main_context_dispatch () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#64 0x00007fa95d91e0a0 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#65 0x00007fa95d91e164 in g_main_context_iteration () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#66 0x00007fa9624ec3bf in QEventDispatcherGlib::processEvents (this=0x223bb30, flags=...) at kernel/qeventdispatcher_glib.cpp:424
#67 0x00007fa96166ad5e in QGuiEventDispatcherGlib::processEvents (this=<optimized out>, flags=...) at kernel/qguieventdispatcher_glib.cpp:204
#68 0x00007fa9624bbc82 in QEventLoop::processEvents (this=<optimized out>, flags=...) at kernel/qeventloop.cpp:149
#69 0x00007fa9624bbed7 in QEventLoop::exec (this=0x7fffb6510970, flags=...) at kernel/qeventloop.cpp:204
#70 0x00007fa9624c0f67 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1148
#71 0x00007fa964d8a28a in kdemain () from /usr/lib/kde4/libkdeinit/libkdeinit4_konqueror.so
#72 0x00007fa96493776d in __libc_start_main (main=0x400640, argc=2, ubp_av=0x7fffb65114f8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffb65114e8) at libc-start.c:226
#73 0x0000000000400671 in _start ()

Possible duplicates by query: bug 271693, bug 253056, bug 251159.

Reported using DrKonqi
Comment 1 Jekyll Wu 2012-08-23 18:17:07 UTC 
*** Bug 253056 has been marked as a duplicate of this bug. ***
Comment 2 Graeme Hewson 2013-10-20 07:56:04 UTC 
Problem doesn't occur in 4.11.2; closing bug.
Comment 3 Jure Repinc 2015-03-29 09:38:50 UTC 
I get this crash in version 4.14.6 when I visit this page http://news.slashdot.org/story/15/03/28/1233231/european-commission-will-increase-use-of-open-source-software
Should this be reopened?
Comment 4 Graeme Hewson 2015-03-29 09:53:34 UTC 
I'm unable to reproduce this on 4.14.2 (in fact, the search box on Slashdot doesn't work on that page, whichever browser I use). I suggest you open your own bug.
Comment 5 Joachim Mairböck 2022-05-25 17:08:07 UTC 
Created attachment 149215 [details]
New crash information added by DrKonqi

konqueror (5.0.97) using Qt 5.12.7

- What I was doing when the application crashed:
I got this crash a few times in a row when restoring my session from the previous time, so I don't know exactly what site caused it. Sometimes it works though and then Konqueror finally runs (after 10 tries or so).

-- Backtrace (Reduced):
#5  0x00007fd54ba11198 in khtml::InlineFlowBox::deleteLine (this=0x55805babda08, arena=0x5580592cdcf0) at /usr/src/debug/khtml-5.76.0-bp153.2.2.1.x86_64/src/rendering/render_line.cpp:222
#6  0x00007fd54ba11198 in khtml::InlineFlowBox::deleteLine (this=0x55805babda70, arena=0x5580592cdcf0) at /usr/src/debug/khtml-5.76.0-bp153.2.2.1.x86_64/src/rendering/render_line.cpp:222
#7  0x00007fd54ba11198 in khtml::InlineFlowBox::deleteLine (this=0x55805babdad8, arena=0x5580592cdcf0) at /usr/src/debug/khtml-5.76.0-bp153.2.2.1.x86_64/src/rendering/render_line.cpp:222
#8  0x00007fd54ba11198 in khtml::InlineFlowBox::deleteLine (this=0x55805babdb40, arena=0x5580592cdcf0) at /usr/src/debug/khtml-5.76.0-bp153.2.2.1.x86_64/src/rendering/render_line.cpp:222
#9  0x00007fd54b9a32bc in khtml::RenderBlock::layoutInlineChildren (this=this@entry=0x55805bf7be08, relayoutChildren=relayoutChildren@entry=false, breakBeforeLine=breakBeforeLine@entry=0) at /usr/src/debug/khtml-5.76.0-bp153.2.2.1.x86_64/src/rendering/bidi.cpp:1551
Comment 6 Christoph Cullmann 2024-05-06 18:38:57 UTC 
Dear user,

KHTML (and KJS) was a long time more or less unmaintained and got removed in KF6.

Please migrate to use a QWebEngine based HTML component.

We will do no further fixes or improvements to the KF5 branches of these components beside important security fixes.

For security issues, please see:

https://kde.org/info/security/

Sorry that we did not fix this issue during the life-time of KHTML.

Greetings
Christoph Cullmann