Bug 73338

Version:            (using KDE Devel)
Installed from:    Compiled sources
Compiler:          GCC 3.3 
OS:          Linux

Using today's (Janauary 23th 2004) KDE CVS snapshot, Konqueror occasionally crashes when viewing http://www.w3.org/QA/.

Occasionally means "Three out of five times" for me. If it doesn't crash immediately, closing Konqueror and then visiting the same page again apparently always causes a crash. I do not know any way to work around this problem.

The crash causes the following backtrace:

[New Thread 16384 (LWP 23086)]
0x415b7cf7 in waitpid () from /lib/libpthread.so.0
#0  0x415b7cf7 in waitpid () from /lib/libpthread.so.0
#1  0x40935607 in KCrash::defaultCrashHandler(int) (sig=11)
    at ../../kdelibs/kdecore/kcrash.cpp:246
#2  0x415b6895 in __pthread_sighandler () from /lib/libpthread.so.0
#3  <signal handler called>
#4  0x41ee19f8 in khtml::RenderBox::calcVerticalMargins() (this=0x839140c)
    at ../../../kdelibs/khtml/rendering/render_box.cpp:903
#5  0x41ee1325 in khtml::RenderBox::calcHeight() (this=0x839140c)
    at ../../../kdelibs/khtml/rendering/render_box.cpp:787
#6  0x41ef00d2 in khtml::RenderImage::setPixmap(QPixmap const&, QRect const&, khtml::CachedImage*) (this=0x839140c, p=@0x839e660, r=@0xbfffe0d0, o=0x83a03c8)
    at ../../../kdelibs/khtml/rendering/render_image.cpp:154
#7  0x41f40e82 in khtml::CachedImage::ref(khtml::CachedObjectClient*) (
    this=0x83a03c8, c=0x839140c) at ../../../kdelibs/khtml/misc/loader.cpp:465
#8  0x41ef176f in khtml::RenderImage::updateImage(khtml::CachedImage*) (
    this=0x839140c, new_image=0x83a03c8)
    at ../../../kdelibs/khtml/rendering/render_image.cpp:412
#9  0x41eefc78 in khtml::RenderImage::setContentObject(khtml::CachedObject*) (
    this=0x839140c, co=0x83a03f0)
    at ../../../kdelibs/khtml/rendering/render_image.cpp:91
#10 0x41edd83a in khtml::RenderContainer::updatePseudoChild(khtml::RenderStyle::PseudoId, khtml::RenderObject*) (this=0x83ac7a0, type=BEFORE, child=0x83ac810)
    at ../../../kdelibs/khtml/rendering/render_container.cpp:270
#11 0x41ec5f38 in khtml::RenderBlock::setStyle(khtml::RenderStyle*) (
    this=0x83ac7a0, _style=0x8397fe8)
    at ../../../kdelibs/khtml/rendering/render_block.cpp:94
#12 0x41e7f462 in DOM::ElementImpl::recalcStyle(DOM::NodeImpl::StyleChange) (
    this=0x8364d00, change=NoChange)
    at ../../../kdelibs/khtml/xml/dom_elementimpl.cpp:495
#13 0x41e9fad1 in DOM::HTMLElementImpl::recalcStyle(DOM::NodeImpl::StyleChange)
    (this=0x8364d00, ch=NoChange)
    at ../../../kdelibs/khtml/html/html_elementimpl.cpp:262
#14 0x41e7f510 in DOM::ElementImpl::recalcStyle(DOM::NodeImpl::StyleChange) (
    this=0x8364848, change=NoChange)
    at ../../../kdelibs/khtml/xml/dom_elementimpl.cpp:513
#15 0x41e9fad1 in DOM::HTMLElementImpl::recalcStyle(DOM::NodeImpl::StyleChange)
    (this=0x8364848, ch=NoChange)
    at ../../../kdelibs/khtml/html/html_elementimpl.cpp:262
#16 0x41e7f510 in DOM::ElementImpl::recalcStyle(DOM::NodeImpl::StyleChange) (
    this=0x8364808, change=NoChange)
    at ../../../kdelibs/khtml/xml/dom_elementimpl.cpp:513
#17 0x41e9fad1 in DOM::HTMLElementImpl::recalcStyle(DOM::NodeImpl::StyleChange)
    (this=0x8364808, ch=NoChange)
    at ../../../kdelibs/khtml/html/html_elementimpl.cpp:262
#18 0x41e7f510 in DOM::ElementImpl::recalcStyle(DOM::NodeImpl::StyleChange) (
    this=0x8363a38, change=NoChange)
    at ../../../kdelibs/khtml/xml/dom_elementimpl.cpp:513
#19 0x41e9fad1 in DOM::HTMLElementImpl::recalcStyle(DOM::NodeImpl::StyleChange)
    (this=0x8363a38, ch=NoChange)
    at ../../../kdelibs/khtml/html/html_elementimpl.cpp:262
#20 0x41e7f510 in DOM::ElementImpl::recalcStyle(DOM::NodeImpl::StyleChange) (
    this=0x835e8f8, change=NoChange)
    at ../../../kdelibs/khtml/xml/dom_elementimpl.cpp:513
#21 0x41e9fad1 in DOM::HTMLElementImpl::recalcStyle(DOM::NodeImpl::StyleChange)
    (this=0x835e8f8, ch=NoChange)
    at ../../../kdelibs/khtml/html/html_elementimpl.cpp:262
#22 0x41e6b5ed in DOM::DocumentImpl::recalcStyle(DOM::NodeImpl::StyleChange) (
    this=0x833aee0, change=NoChange)
    at ../../../kdelibs/khtml/xml/dom_docimpl.cpp:974
#23 0x41e6b6f9 in DOM::DocumentImpl::updateRendering() (this=0x833aee0)
    at ../../../kdelibs/khtml/xml/dom_docimpl.cpp:1007
#24 0x41e6da87 in DOM::DocumentImpl::prepareMouseEvent(bool, int, int, DOM::NodeImpl::MouseEvent*) (this=0x833aee0, readonly=false, _x=464, _y=267, 
    ev=0xbfffe640) at ../../../kdelibs/khtml/xml/dom_docimpl.cpp:1562
#25 0x41e14d75 in KHTMLView::viewportMouseMoveEvent(QMouseEvent*) (
    this=0x8294140, _mouse=0xbfffeb20)
    at ../../../kdelibs/khtml/khtmlview.cpp:763
#26 0x40f026a0 in QScrollView::eventFilter(QObject*, QEvent*) (this=0x8294140, 
    obj=0x82d34e8, e=0xbfffeb20) at widgets/qscrollview.cpp:1512
#27 0x41e171a2 in KHTMLView::eventFilter(QObject*, QEvent*) (this=0x8294140, 
    o=0x82d34e8, e=0xbfffeb20) at ../../../kdelibs/khtml/khtmlview.cpp:1391
#28 0x40db4185 in QObject::activate_filters(QEvent*) (this=0x82d34e8, 
    e=0xbfffeb20) at kernel/qobject.cpp:902
#29 0x40db3ff6 in QObject::event(QEvent*) (this=0x82d34e8, e=0xbfffeb20)
    at kernel/qobject.cpp:735
#30 0x40df99fe in QWidget::event(QEvent*) (this=0x82d34e8, e=0xbfffeb20)
    at kernel/qwidget.cpp:4408
#31 0x40d45697 in QApplication::internalNotify(QObject*, QEvent*) (
    this=0xbffff0a0, receiver=0x82d34e8, e=0xbfffeb20)
    at kernel/qapplication.cpp:2582
#32 0x40d44d93 in QApplication::notify(QObject*, QEvent*) (this=0xbffff0a0, 
    receiver=0x82d34e8, e=0xbfffeb20) at kernel/qapplication.cpp:2368
#33 0x408ac30d in KApplication::notify(QObject*, QEvent*) (this=0xbffff0a0, 
    receiver=0x82d34e8, event=0xbfffeb20)
    at ../../kdelibs/kdecore/kapplication.cpp:505
#34 0x40ccd463 in QApplication::sendSpontaneousEvent(QObject*, QEvent*) (
    receiver=0x82d34e8, event=0xbfffeb20) at kernel/qapplication.h:495
#35 0x40cc5fb4 in QETWidget::translateMouseEvent(_XEvent const*) (
    this=0x82d34e8, event=0xbfffee40) at kernel/qapplication_x11.cpp:4442
#36 0x40cc39df in QApplication::x11ProcessEvent(_XEvent*) (this=0xbffff0a0, 
    event=0xbfffee40) at kernel/qapplication_x11.cpp:3617
#37 0x40ce0940 in QEventLoop::processEvents(unsigned) (this=0x80b46b8, flags=4)
    at kernel/qeventloop_x11.cpp:192
#38 0x40d5ede4 in QEventLoop::enterLoop() (this=0x80b46b8)
    at kernel/qeventloop.cpp:198
#39 0x40d5ed00 in QEventLoop::exec() (this=0x80b46b8)
    at kernel/qeventloop.cpp:145
#40 0x40d45853 in QApplication::exec() (this=0xbffff0a0)
    at kernel/qapplication.cpp:2705
#41 0x4006f6af in kdemain (argc=2, argv=0xbffff1f4)
    at /home/frerich/src/kde/kdebase/konqueror/konq_main.cc:184
#42 0x0804864a in main (argc=2, argv=0xbffff1f4)
    at ../konqueror/kdeinit_konqueror.cpp:2
#43 0x4170e8ae in __libc_start_main () from /lib/libc.so.6

Also, when running "konqueror http://www.w3.org/QA/" from a console, I see the following output:

[..]
libkonq: ## addToHistory: http://www.w3.org/QA/ Typed URL: , Title: W3C - Quality Assurance
konqueror: [void KonqView::setLoading(bool, bool)] loading=false hasPending=false
khtml (part): DONE: 472
khtml (render): 0x839140c: RenderImage(RenderObject): No containingBlock!
khtml (render): [
0: /opt/kde-cvs/lib/libkdecore.so.4(_Z11kdBacktracei+0x3a) [0x408bf860]
1: /opt/kde-cvs/lib/libkdecore.so.4(_Z11kdBacktracev+0x1f) [0x408bfad3]
2: /opt/kde-cvs/lib/libkhtml.so.4(_ZNK5khtml12RenderObject15containingBlockEv+0x311) [0x41ed63f3]
3: /opt/kde-cvs/lib/libkhtml.so.4(_ZN5khtml9RenderBox9calcWidthEv+0x109) [0x41ee09c9]
4: /opt/kde-cvs/lib/libkhtml.so.4(_ZN5khtml11RenderImage9setPixmapERK7QPixmapRK5QRectPNS_11CachedImageE+0x43b) [0x41ef00bb]
5: /opt/kde-cvs/lib/libkhtml.so.4(_ZN5khtml11CachedImage3refEPNS_18CachedObjectClientE+0xea) [0x41f40e82]
6: /opt/kde-cvs/lib/libkhtml.so.4(_ZN5khtml11RenderImage11updateImageEPNS_11CachedImageE+0x93) [0x41ef176f]
7: /opt/kde-cvs/lib/libkhtml.so.4(_ZN5khtml11RenderImage16setContentObjectEPNS_12CachedObjectE+0x60) [0x41eefc78]
8: /opt/kde-cvs/lib/libkhtml.so.4(_ZN5khtml15RenderContainer17updatePseudoChildENS_11RenderStyle8PseudoIdEPNS_12RenderObjectE+0x422) [0x41edd83a]
9: /opt/kde-cvs/lib/libkhtml.so.4(_ZN5khtml11RenderBlock8setStyleEPNS_11RenderStyleE+0x160) [0x41ec5f38]
10: /opt/kde-cvs/lib/libkhtml.so.4(_ZN3DOM11ElementImpl11recalcStyleENS_8NodeImpl11StyleChangeE+0x218) [0x41e7f462]
11: /opt/kde-cvs/lib/libkhtml.so.4(_ZN3DOM15HTMLElementImpl11recalcStyleENS_8NodeImpl11StyleChangeE+0x21) [0x41e9fad1]
12: /opt/kde-cvs/lib/libkhtml.so.4(_ZN3DOM11ElementImpl11recalcStyleENS_8NodeImpl11StyleChangeE+0x2c6) [0x41e7f510]
13: /opt/kde-cvs/lib/libkhtml.so.4(_ZN3DOM15HTMLElementImpl11recalcStyleENS_8NodeImpl11StyleChangeE+0x21) [0x41e9fad1]
14: /opt/kde-cvs/lib/libkhtml.so.4(_ZN3DOM11ElementImpl11recalcStyleENS_8NodeImpl11StyleChangeE+0x2c6) [0x41e7f510]
15: /opt/kde-cvs/lib/libkhtml.so.4(_ZN3DOM15HTMLElementImpl11recalcStyleENS_8NodeImpl11StyleChangeE+0x21) [0x41e9fad1]
16: /opt/kde-cvs/lib/libkhtml.so.4(_ZN3DOM11ElementImpl11recalcStyleENS_8NodeImpl11StyleChangeE+0x2c6) [0x41e7f510]
17: /opt/kde-cvs/lib/libkhtml.so.4(_ZN3DOM15HTMLElementImpl11recalcStyleENS_8NodeImpl11StyleChangeE+0x21) [0x41e9fad1]
18: /opt/kde-cvs/lib/libkhtml.so.4(_ZN3DOM11ElementImpl11recalcStyleENS_8NodeImpl11StyleChangeE+0x2c6) [0x41e7f510]
19: /opt/kde-cvs/lib/libkhtml.so.4(_ZN3DOM15HTMLElementImpl11recalcStyleENS_8NodeImpl11StyleChangeE+0x21) [0x41e9fad1]
20: /opt/kde-cvs/lib/libkhtml.so.4(_ZN3DOM12DocumentImpl11recalcStyleENS_8NodeImpl11StyleChangeE+0x373) [0x41e6b5ed]
21: /opt/kde-cvs/lib/libkhtml.so.4(_ZN3DOM12DocumentImpl15updateRenderingEv+0x47) [0x41e6b6f9]
22: /opt/kde-cvs/lib/libkhtml.so.4(_ZN3DOM12DocumentImpl17prepareMouseEventEbiiPNS_8NodeImpl10MouseEventE+0x2bf) [0x41e6da87]
23: /opt/kde-cvs/lib/libkhtml.so.4(_ZN9KHTMLView22viewportMouseMoveEventEP11QMouseEvent+0xf1) [0x41e14d75]
24: /home/frerich/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN11QScrollView11eventFilterEP7QObjectP6QEvent+0x19a) [0x40f026a0]
25: /opt/kde-cvs/lib/libkhtml.so.4(_ZN9KHTMLView11eventFilterEP7QObjectP6QEvent+0x70a) [0x41e171a2]
26: /home/frerich/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN7QObject16activate_filtersEP6QEvent+0x7f) [0x40db4185]
27: /home/frerich/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN7QObject5eventEP6QEvent+0x42) [0x40db3ff6]
28: /home/frerich/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN7QWidget5eventEP6QEvent+0x22) [0x40df99fe]
29: /home/frerich/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN12QApplication14internalNotifyEP7QObjectP6QEvent+0x27d) [0x40d45697]
30: /home/frerich/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN12QApplication6notifyEP7QObjectP6QEvent+0x4e1) [0x40d44d93]
31: /opt/kde-cvs/lib/libkdecore.so.4(_ZN12KApplication6notifyEP7QObjectP6QEvent+0x55f) [0x408ac30d]
32: /home/frerich/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN12QApplication20sendSpontaneousEventEP7QObjectP6QEvent+0x4d) [0x40ccd463]
33: /home/frerich/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN9QETWidget19translateMouseEventEPK7_XEvent+0xf02) [0x40cc5fb4]
34: /home/frerich/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN12QApplication15x11ProcessEventEP7_XEvent+0x111f) [0x40cc39df]
35: /home/frerich/src/kde/qt-copy/lib/libqt-mt.so.3(_ZN10QEventLoop13processEventsEj+0x148) [0x40ce0940]
36: /home/frerich/src/kde/qt-copy/lib/libqt-mt.so.3 (_ZN10QEventLoop9enterLoopEv+0x66) [0x40khtml (render):

After looking at the backtrace, it seems that RenderBlock::containingBlock() returns a dangling pointer for some reason.