Bug 386234

Summary: Plasma crashes when I click "Copy inner HTML" in Firefox DevTools Inspector
Product: [Plasma] plasmashell Reporter: Igor Zhuravlov <zhuravlov.ip>
Component: generic-crashAssignee: Plasma Bugs List <plasma-bugs-null>
Status: RESOLVED WORKSFORME    
Severity: crash CC: justin.zobel, plasma-bugs-null
Priority: NOR Keywords: drkonqi
Version First Reported In: 5.8.6   
Target Milestone: 1.0   
Platform: openSUSE   
OS: Linux   
Latest Commit: Version Fixed/Implemented In:
Sentry Crash Report:

Description Igor Zhuravlov 2017-10-27 06:01:39 UTC 
Application: plasmashell (5.8.6)

Qt Version: 5.6.1
Frameworks Version: 5.26.0
Operating System: Linux 4.4.90-18.32-default x86_64
Distribution: "openSUSE Leap 42.2"

-- Information about the crash:
- What I was doing when the application crashed:
1. Start Firefox
2. Enter URL of the HTML page with big table in our inner corporate server.
3. Right-click on any element inside this table, select the bottom option "Inspect element" from pull-down menu.
4. Scroll to enveloping <tbody> element, right-click on it.
5. Select an option "Copy -> Inner HTML" from pull-down menu.

Then Plasma crashes, and there is no clipboard changes.

The crash can be reproduced every time.

-- Backtrace:
Application: Plasma (plasmashell), signal: Segmentation fault
Using host libthread_db library "/lib64/libthread_db.so.1".
[Current thread is 1 (Thread 0x7f5274f76900 (LWP 4014))]

Thread 8 (Thread 0x7f51b50f1700 (LWP 4556)):
#0  0x00007f526e48320d in poll () at /lib64/libc.so.6
#1  0x00007f526ab4b314 in  () at /usr/lib64/libglib-2.0.so.0
#2  0x00007f526ab4b42c in g_main_context_iteration () at /usr/lib64/libglib-2.0.so.0
#3  0x00007f526ed9033b in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () at /usr/lib64/libQt5Core.so.5
#4  0x00007f526ed3dfeb in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () at /usr/lib64/libQt5Core.so.5
#5  0x00007f526eb78f1a in QThread::exec() () at /usr/lib64/libQt5Core.so.5
#6  0x00007f51a16718f7 in KCupsConnection::run() () at /usr/lib64/libkcupslib.so
#7  0x00007f526eb7d9e9 in  () at /usr/lib64/libQt5Core.so.5
#8  0x00007f526dc8c744 in start_thread () at /lib64/libpthread.so.0
#9  0x00007f526e48baad in clone () at /lib64/libc.so.6

Thread 7 (Thread 0x7f51b5972700 (LWP 4224)):
#0  0x00007f526ab48679 in  () at /usr/lib64/libglib-2.0.so.0
#1  0x00007f526ab4a8fb in g_main_context_prepare () at /usr/lib64/libglib-2.0.so.0
#2  0x00007f526ab4b230 in  () at /usr/lib64/libglib-2.0.so.0
#3  0x00007f526ab4b42c in g_main_context_iteration () at /usr/lib64/libglib-2.0.so.0
#4  0x00007f526ed9033b in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () at /usr/lib64/libQt5Core.so.5
#5  0x00007f526ed3dfeb in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () at /usr/lib64/libQt5Core.so.5
#6  0x00007f526eb78f1a in QThread::exec() () at /usr/lib64/libQt5Core.so.5
#7  0x00007f5272a09632 in  () at /usr/lib64/libQt5Quick.so.5
#8  0x00007f526eb7d9e9 in  () at /usr/lib64/libQt5Core.so.5
#9  0x00007f526dc8c744 in start_thread () at /lib64/libpthread.so.0
#10 0x00007f526e48baad in clone () at /lib64/libc.so.6

Thread 6 (Thread 0x7f51bed67700 (LWP 4143)):
#0  0x00007f526dc910bf in pthread_cond_wait@@GLIBC_2.3.2 () at /lib64/libpthread.so.0
#1  0x00007f5249e42533 in  () at /usr/lib64/dri/r600_dri.so
#2  0x00007f5249e41d57 in  () at /usr/lib64/dri/r600_dri.so
#3  0x00007f526dc8c744 in start_thread () at /lib64/libpthread.so.0
#4  0x00007f526e48baad in clone () at /lib64/libc.so.6

Thread 5 (Thread 0x7f524b5a6700 (LWP 4141)):
#0  0x00007f526dc910bf in pthread_cond_wait@@GLIBC_2.3.2 () at /lib64/libpthread.so.0
#1  0x00007f527465093b in  () at /usr/lib64/libQt5Script.so.5
#2  0x00007f5274650969 in  () at /usr/lib64/libQt5Script.so.5
#3  0x00007f526dc8c744 in start_thread () at /lib64/libpthread.so.0
#4  0x00007f526e48baad in clone () at /lib64/libc.so.6

Thread 4 (Thread 0x7f5251385700 (LWP 4122)):
#0  0x00007f526e48320d in poll () at /lib64/libc.so.6
#1  0x00007f526ab4b314 in  () at /usr/lib64/libglib-2.0.so.0
#2  0x00007f526ab4b42c in g_main_context_iteration () at /usr/lib64/libglib-2.0.so.0
#3  0x00007f526ed9033b in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () at /usr/lib64/libQt5Core.so.5
#4  0x00007f526ed3dfeb in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () at /usr/lib64/libQt5Core.so.5
#5  0x00007f526eb78f1a in QThread::exec() () at /usr/lib64/libQt5Core.so.5
#6  0x00007f5271e869d8 in  () at /usr/lib64/libQt5Qml.so.5
#7  0x00007f526eb7d9e9 in  () at /usr/lib64/libQt5Core.so.5
#8  0x00007f526dc8c744 in start_thread () at /lib64/libpthread.so.0
#9  0x00007f526e48baad in clone () at /lib64/libc.so.6

Thread 3 (Thread 0x7f5252db9700 (LWP 4096)):
#0  0x00007f526e48320d in poll () at /lib64/libc.so.6
#1  0x00007f526ab4b314 in  () at /usr/lib64/libglib-2.0.so.0
#2  0x00007f526ab4b42c in g_main_context_iteration () at /usr/lib64/libglib-2.0.so.0
#3  0x00007f526ed9033b in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () at /usr/lib64/libQt5Core.so.5
#4  0x00007f526ed3dfeb in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () at /usr/lib64/libQt5Core.so.5
#5  0x00007f526eb78f1a in QThread::exec() () at /usr/lib64/libQt5Core.so.5
#6  0x00007f5271e869d8 in  () at /usr/lib64/libQt5Qml.so.5
#7  0x00007f526eb7d9e9 in  () at /usr/lib64/libQt5Core.so.5
#8  0x00007f526dc8c744 in start_thread () at /lib64/libpthread.so.0
#9  0x00007f526e48baad in clone () at /lib64/libc.so.6

Thread 2 (Thread 0x7f5262101700 (LWP 4024)):
#0  0x00007f526e47f28d in read () at /lib64/libc.so.6
#1  0x00007f526ab8b670 in  () at /usr/lib64/libglib-2.0.so.0
#2  0x00007f526ab4ae49 in g_main_context_check () at /usr/lib64/libglib-2.0.so.0
#3  0x00007f526ab4b2a8 in  () at /usr/lib64/libglib-2.0.so.0
#4  0x00007f526ab4b42c in g_main_context_iteration () at /usr/lib64/libglib-2.0.so.0
#5  0x00007f526ed9033b in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () at /usr/lib64/libQt5Core.so.5
#6  0x00007f526ed3dfeb in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () at /usr/lib64/libQt5Core.so.5
#7  0x00007f526eb78f1a in QThread::exec() () at /usr/lib64/libQt5Core.so.5
#8  0x00007f526f8f9295 in  () at /usr/lib64/libQt5DBus.so.5
#9  0x00007f526eb7d9e9 in  () at /usr/lib64/libQt5Core.so.5
#10 0x00007f526dc8c744 in start_thread () at /lib64/libpthread.so.0
#11 0x00007f526e48baad in clone () at /lib64/libc.so.6

Thread 1 (Thread 0x7f5274f76900 (LWP 4014)):
[KCrash Handler]
#6  0x00007f5271d618fe in QV4::SimpleArrayData::markObjects(QV4::Heap::Base*, QV4::ExecutionEngine*) () at /usr/lib64/libQt5Qml.so.5
#7  0x00007f5271c6343d in  () at /usr/lib64/libQt5Qml.so.5
#8  0x00007f5271c63cda in QV4::MemoryManager::mark() () at /usr/lib64/libQt5Qml.so.5
#9  0x00007f5271c64950 in QV4::MemoryManager::runGC() () at /usr/lib64/libQt5Qml.so.5
#10 0x00007f5271c65a58 in QV4::MemoryManager::allocData(unsigned long, unsigned long) () at /usr/lib64/libQt5Qml.so.5
#11 0x00007f5271d61f8d in QV4::ArrayData::realloc(QV4::Object*, QV4::Heap::ArrayData::Type, unsigned int, bool) () at /usr/lib64/libQt5Qml.so.5
#12 0x00007f5271d9fe21 in  () at /usr/lib64/libQt5Qml.so.5
#13 0x00007f5271d7f580 in QV4::BuiltinFunction::call(QV4::Managed const*, QV4::CallData*) () at /usr/lib64/libQt5Qml.so.5
#14 0x00007f5271de43e2 in QV4::Runtime::callProperty(QV4::ExecutionEngine*, int, QV4::CallData*) () at /usr/lib64/libQt5Qml.so.5
#15 0x00007f51a7d1b52f in  ()
#16 0x0000000000000000 in  ()

Reported using DrKonqi
Comment 1 Igor Zhuravlov 2017-10-27 06:12:48 UTC 
One correction: after crash the clipboard contains two items: topmost is empty, and previous contains the text copied. So, the text copying was succeed, in some sense.
Comment 2 Justin Zobel 2020-11-23 04:10:39 UTC 
Thanks for the report Igor but it's a bit hard to reproduce if it is specific to an internal URL.

Can you please test or provide a public URL where this issue is still occurring or if this bug report can be marked as resolved. I've set the bug status to "needsinfo" pending your response, please change back to "reported" or "resolved" when you respond, thanks.
Comment 3 Bug Janitor Service 2020-12-08 04:34:02 UTC 
Dear Bug Submitter,

This bug has been in NEEDSINFO status with no change for at least
15 days. Please provide the requested information as soon as
possible and set the bug status as REPORTED. Due to regular bug
tracker maintenance, if the bug is still in NEEDSINFO status with
no change in 30 days the bug will be closed as RESOLVED > WORKSFORME
due to lack of needed information.

For more information about our bug triaging procedures please read the
wiki located here:
https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

If you have already provided the requested information, please
mark the bug as REPORTED so that the KDE team knows that the bug is
ready to be confirmed.

Thank you for helping us make KDE software even better for everyone!
Comment 4 Igor Zhuravlov 2020-12-08 06:53:30 UTC 
I don't remember that URL. Other big tables are processed okay. So, I cannot reproduce this crash.