Bug 318889

Application: kontact (4.10.2)
KDE Platform Version: 4.10.2 (Compiled from sources)
Qt Version: 4.8.4
Operating System: Linux 3.8.5-gentoo x86_64
Distribution: "NAME=Gentoo"

-- Information about the crash:
- What I was doing when the application crashed:

Whether I hit "r" to reply, or "a" to reply to all, kontact/kmail crashes, but only for one specific email.  Other emails are fine.

When I restart kontact, it starts up, and the reply window opens as well, all filled out, except the "From" and "Subject" lines are blank.  I'm not sure what is about this particular email that makes it do this.  Unfortunately, the email itself is somewhat proprietary, so I can't easily share it here.  I'm not sure if the backtrace gives any ideas on where the problem might be, I'm hoping so.

(When I fill in the from/subject lines, the response seems to be sent okay.)

The crash can be reproduced every time.

-- Backtrace:
Application: Kontact (kontact), signal: Aborted
Using host libthread_db library "/lib64/libthread_db.so.1".
[Current thread is 1 (Thread 0x7f2d9c7ae7c0 (LWP 7678))]

Thread 3 (Thread 0x7f2d827db700 (LWP 7679)):
#0  0x00007f2d93e8759c in pthread_cond_wait () from /lib64/libpthread.so.0
#1  0x00007f2d98c7c654 in WTF::TCMalloc_PageHeap::runScavengerThread(void*) () from /usr/lib64/qt4/libQtWebKit.so.4
#2  0x00007f2d93e82d96 in start_thread () from /lib64/libpthread.so.0
#3  0x00007f2d999d446d in clone () from /lib64/libc.so.6

Thread 2 (Thread 0x7f2d81eda700 (LWP 7680)):
#0  0x00007f2d999cb6a3 in poll () from /lib64/libc.so.6
#1  0x00007f2d92e3ccf6 in g_main_context_iterate.clone.6 () from /usr/lib64/libglib-2.0.so.0
#2  0x00007f2d92e3ce14 in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0
#3  0x00007f2d9afa7906 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/qt4/libQtCore.so.4
#4  0x00007f2d9af6dc72 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/qt4/libQtCore.so.4
#5  0x00007f2d9af6deb7 in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/qt4/libQtCore.so.4
#6  0x00007f2d9ae4a708 in QThread::exec() () from /usr/lib64/qt4/libQtCore.so.4
#7  0x00007f2d9ae4daee in QThreadPrivate::start(void*) () from /usr/lib64/qt4/libQtCore.so.4
#8  0x00007f2d93e82d96 in start_thread () from /lib64/libpthread.so.0
#9  0x00007f2d999d446d in clone () from /lib64/libc.so.6

Thread 1 (Thread 0x7f2d9c7ae7c0 (LWP 7678)):
[KCrash Handler]
#6  0x00007f2d9991eaa5 in raise () from /lib64/libc.so.6
#7  0x00007f2d9991fda5 in abort () from /lib64/libc.so.6
#8  0x00007f2d9ae42a14 in qt_message_output(QtMsgType, char const*) () from /usr/lib64/qt4/libQtCore.so.4
#9  0x00007f2d9ae42b9f in qt_message(QtMsgType, char const*, __va_list_tag*) () from /usr/lib64/qt4/libQtCore.so.4
#10 0x00007f2d9ae42d44 in qFatal(char const*, ...) () from /usr/lib64/qt4/libQtCore.so.4
#11 0x00007f2d9a457d8f in QTextLine::height() const () from /usr/lib64/qt4/libQtGui.so.4
#12 0x00007f2d9a4aef03 in QTextDocumentLayoutPrivate::layoutFlow(QTextFrame::iterator, QTextLayoutStruct*, int, int, QFixed) () from /usr/lib64/qt4/libQtGui.so.4
#13 0x00007f2d9a4abed0 in QTextDocumentLayoutPrivate::layoutFrame(QTextFrame*, int, int, QFixed, QFixed, QFixed) () from /usr/lib64/qt4/libQtGui.so.4
#14 0x00007f2d9a4ac468 in QTextDocumentLayoutPrivate::layoutFrame(QTextFrame*, int, int, QFixed) () from /usr/lib64/qt4/libQtGui.so.4
#15 0x00007f2d9a4ac738 in QTextDocumentLayout::doLayout(int, int, int) () from /usr/lib64/qt4/libQtGui.so.4
#16 0x00007f2d9a4acbfb in QTextDocumentLayout::documentChanged(int, int, int) () from /usr/lib64/qt4/libQtGui.so.4
#17 0x00007f2d9a4874da in QTextDocumentPrivate::finishEdit() () from /usr/lib64/qt4/libQtGui.so.4
#18 0x00007f2d9a4b82b9 in QTextCursor::removeSelectedText() () from /usr/lib64/qt4/libQtGui.so.4
#19 0x00007f2d3bb6ea93 in KPIMTextEdit::TextEdit::loadImage(QImage const&, QString const&, QString const&) () from /usr/lib64/libkpimtextedit.so.4
#20 0x00007f2d397e694d in Message::ComposerViewBase::collectImages(KMime::Content*) () from /usr/lib64/libmessagecomposer.so.4
#21 0x00007f2d397f18f0 in Message::ComposerViewBase::setMessage(boost::shared_ptr<KMime::Message> const&) () from /usr/lib64/libmessagecomposer.so.4
#22 0x00007f2d3a2322d7 in KMComposeWin::setMessage(boost::shared_ptr<KMime::Message> const&, bool, bool, bool, bool, bool) () from /usr/lib64/libkmailprivate.so.4
#23 0x00007f2d3a235d10 in KMComposeWin::KMComposeWin(boost::shared_ptr<KMime::Message> const&, bool, bool, KMail::Composer::TemplateContext, unsigned int, QString const&, QString const&) () from /usr/lib64/libkmailprivate.so.4
#24 0x00007f2d3a236e4d in KMail::makeComposer(boost::shared_ptr<KMime::Message> const&, bool, bool, KMail::Composer::TemplateContext, unsigned int, QString const&, QString const&) () from /usr/lib64/libkmailprivate.so.4
#25 0x00007f2d3a1bfac6 in KMReplyCommand::execute() () from /usr/lib64/libkmailprivate.so.4
#26 0x00007f2d3a1c1901 in KMCommand::slotPostTransfer(KMCommand::Result) () from /usr/lib64/libkmailprivate.so.4
#27 0x00007f2d9af87b7f in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib64/qt4/libQtCore.so.4
#28 0x00007f2d3a1c15ee in KMCommand::messagesTransfered(KMCommand::Result) () from /usr/lib64/libkmailprivate.so.4
#29 0x00007f2d3a1c6dc2 in KMCommand::slotJobFinished() () from /usr/lib64/libkmailprivate.so.4
#30 0x00007f2d9af87b7f in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/lib64/qt4/libQtCore.so.4
#31 0x00007f2d9b44a842 in KJob::result(KJob*) () from /usr/lib64/libkdecore.so.5
#32 0x00007f2d9b44a880 in KJob::emitResult() () from /usr/lib64/libkdecore.so.5
#33 0x00007f2d9af8e33e in QObject::event(QEvent*) () from /usr/lib64/qt4/libQtCore.so.4
#34 0x00007f2d9a173e12 in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/lib64/qt4/libQtGui.so.4
#35 0x00007f2d9a179e5b in QApplication::notify(QObject*, QEvent*) () from /usr/lib64/qt4/libQtGui.so.4
#36 0x00007f2d9bad2d06 in KApplication::notify(QObject*, QEvent*) () from /usr/lib64/libkdeui.so.5
#37 0x00007f2d9af7011c in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/lib64/qt4/libQtCore.so.4
#38 0x00007f2d9af73c43 in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) () from /usr/lib64/qt4/libQtCore.so.4
#39 0x00007f2d9afa7433 in postEventSourceDispatch(_GSource*, int (*)(void*), void*) () from /usr/lib64/qt4/libQtCore.so.4
#40 0x00007f2d92e3c9f2 in g_main_context_dispatch () from /usr/lib64/libglib-2.0.so.0
#41 0x00007f2d92e3cd58 in g_main_context_iterate.clone.6 () from /usr/lib64/libglib-2.0.so.0
#42 0x00007f2d92e3ce14 in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0
#43 0x00007f2d9afa789f in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/qt4/libQtCore.so.4
#44 0x00007f2d9a2308be in QGuiEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/qt4/libQtGui.so.4
#45 0x00007f2d9af6dc72 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/qt4/libQtCore.so.4
#46 0x00007f2d9af6deb7 in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/qt4/libQtCore.so.4
#47 0x00007f2d9af74055 in QCoreApplication::exec() () from /usr/lib64/qt4/libQtCore.so.4
#48 0x0000000000403be9 in main ()

Reported using DrKonqi