Bug 75353

Summary: Konqueror crashes when trying to submit a form
Product: [Applications] konqueror Reporter: Dan <DanMoinescu>
Component: khtml formsAssignee: Konqueror Developers <konq-bugs>
Status: RESOLVED DUPLICATE    
Severity: crash CC: faure, freespirit74, m0ns00n, mss, t.zachmann
Priority: NOR    
Version: unspecified   
Target Milestone: ---   
Platform: RedHat Enterprise Linux   
OS: Linux   
Latest Commit: Version Fixed In:
Sentry Crash Report:
Attachments: Konqueror crashes after trying to focus the second input element

Description Dan 2004-02-16 14:52:27 UTC 
Version:           3.2.0-0.1 (using KDE KDE 3.2.0)
Installed from:    RedHat RPMs
OS:          Linux

Go to
http://www.yellowpages.ie/extra/phonebook.html

In the "Business Search" section, enter town: "Gortboy" (without quotes). Leave "Name of business" empty. Click Search.

A JavaScript pop-up shows up, saying "You must enter business name". When clicking OK, Konqueror crashes.


Backtrace follows:

(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...[New Thread 16384 (LWP 1266)]
0x41347876 in waitpid ()
   from /lib/libpthread.so.0
#0  0x41347876 in waitpid () from /lib/libpthread.so.0
#1  0x40878791 in KCrash::defaultCrashHandler(int) ()
   from /usr/lib/libkdecore.so.4
#2  0x413465cd in __pthread_sighandler () from /lib/libpthread.so.0
#3  <signal handler called>
#4  0x40c2ee77 in QObject::inherits(char const*) const ()
   from /usr/lib/qt-3.2/lib/libqt-mt.so.3
#5  0x41c846e9 in KHTMLPartBrowserExtension::updateEditActions() ()
   from /usr/lib/libkhtml.so.4
#6  0x41c83e5a in KHTMLPartBrowserExtension::editableWidgetFocused(QWidget*) ()
   from /usr/lib/libkhtml.so.4
#7  0x41cd9c3b in QPtrList<DOM::HTMLGenericFormElementImpl>::deleteItem(void*)
    () from /usr/lib/libkhtml.so.4
#8  0x41cdd522 in QPtrList<DOM::HTMLGenericFormElementImpl>::deleteItem(void*)
    () from /usr/lib/libkhtml.so.4
#9  0x41ca41a9 in KStaticDeleter<QPtrList<DOM::DocumentImpl> >::~KStaticDeleter() () from /usr/lib/libkhtml.so.4
#10 0x41ca3ed2 in KStaticDeleter<QPtrList<DOM::DocumentImpl> >::~KStaticDeleter() () from /usr/lib/libkhtml.so.4
#11 0x41ca473f in KStaticDeleter<QPtrList<DOM::DocumentImpl> >::~KStaticDeleter() () from /usr/lib/libkhtml.so.4
#12 0x41c9f364 in KHTMLInfoDlg::metaObject() const ()
   from /usr/lib/libkhtml.so.4
#13 0x41cdd4e9 in QPtrList<DOM::HTMLGenericFormElementImpl>::deleteItem(void*)
    () from /usr/lib/libkhtml.so.4
#14 0x41df938d in DOM::HTMLInputElement::focus() () from /usr/lib/libkhtml.so.4
#15 0x41d83020 in NamedTagLengthDeterminer::operator()(DOM::NodeImpl*) ()
   from /usr/lib/libkhtml.so.4
#16 0x41d5c317 in findAttr(char const*, unsigned) ()
   from /usr/lib/libkhtml.so.4
#17 0x41add970 in KJS::Object::call(KJS::ExecState*, KJS::Object&, KJS::List const&) () from /usr/lib/libkjs.so.1
#18 0x41aab97d in KJS::NumberImp::type() const () from /usr/lib/libkjs.so.1
#19 0x41ab005a in KJS::NumberImp::type() const () from /usr/lib/libkjs.so.1
#20 0x41ab69ec in KJS::NumberImp::type() const () from /usr/lib/libkjs.so.1
#21 0x41aafe6f in KJS::NumberImp::type() const () from /usr/lib/libkjs.so.1
#22 0x41ab03fe in KJS::NumberImp::type() const () from /usr/lib/libkjs.so.1
#23 0x41ab6976 in KJS::NumberImp::type() const () from /usr/lib/libkjs.so.1
#24 0x41aafe6f in KJS::NumberImp::type() const () from /usr/lib/libkjs.so.1
#25 0x41ab5ec3 in KJS::NumberImp::type() const () from /usr/lib/libkjs.so.1
#26 0x41ad8abc in KJS::DeclaredFunctionImp::execute(KJS::ExecState*) ()
   from /usr/lib/libkjs.so.1
#27 0x41ad7e92 in KJS::FunctionImp::call(KJS::ExecState*, KJS::Object&, KJS::List const&) () from /usr/lib/libkjs.so.1
#28 0x41add970 in KJS::Object::call(KJS::ExecState*, KJS::Object&, KJS::List const&) () from /usr/lib/libkjs.so.1
#29 0x41aab97d in KJS::NumberImp::type() const () from /usr/lib/libkjs.so.1
#30 0x41aa9d38 in KJS::NumberImp::type() const () from /usr/lib/libkjs.so.1
#31 0x41ab323e in KJS::NumberImp::type() const () from /usr/lib/libkjs.so.1
#32 0x41ab6976 in KJS::NumberImp::type() const () from /usr/lib/libkjs.so.1
#33 0x41aafe6f in KJS::NumberImp::type() const () from /usr/lib/libkjs.so.1
#34 0x41ab5ec3 in KJS::NumberImp::type() const () from /usr/lib/libkjs.so.1
#35 0x41ad8abc in KJS::DeclaredFunctionImp::execute(KJS::ExecState*) ()
   from /usr/lib/libkjs.so.1
#36 0x41ad7e92 in KJS::FunctionImp::call(KJS::ExecState*, KJS::Object&, KJS::List const&) () from /usr/lib/libkjs.so.1
#37 0x41add970 in KJS::Object::call(KJS::ExecState*, KJS::Object&, KJS::List const&) () from /usr/lib/libkjs.so.1
#38 0x41dbb7b1 in TestFunctionImp::implementsCall() const ()
   from /usr/lib/libkhtml.so.4
#39 0x41ca4a59 in KStaticDeleter<QPtrList<DOM::DocumentImpl> >::~KStaticDeleter() () from /usr/lib/libkhtml.so.4
#40 0x41ca40a7 in KStaticDeleter<QPtrList<DOM::DocumentImpl> >::~KStaticDeleter() () from /usr/lib/libkhtml.so.4
#41 0x41ca3ed2 in KStaticDeleter<QPtrList<DOM::DocumentImpl> >::~KStaticDeleter() () from /usr/lib/libkhtml.so.4
#42 0x41c4a383 in KHTMLView::dispatchMouseEvent(int, DOM::NodeImpl*, bool, int, QMouseEvent*, bool, int) () from /usr/lib/libkhtml.so.4
#43 0x41c45dad in KHTMLView::viewportMouseReleaseEvent(QMouseEvent*) ()
   from /usr/lib/libkhtml.so.4
#44 0x41c46f46 in KHTMLView::eventFilter(QObject*, QEvent*) ()
   from /usr/lib/libkhtml.so.4
#45 0x40c2f25e in QObject::activate_filters(QEvent*) ()
   from /usr/lib/qt-3.2/lib/libqt-mt.so.3
#46 0x40c2f18c in QObject::event(QEvent*) ()
   from /usr/lib/qt-3.2/lib/libqt-mt.so.3
#47 0x40c665af in QWidget::event(QEvent*) ()
   from /usr/lib/qt-3.2/lib/libqt-mt.so.3
#48 0x40bd5faf in QApplication::internalNotify(QObject*, QEvent*) ()
   from /usr/lib/qt-3.2/lib/libqt-mt.so.3
#49 0x40bd56b1 in QApplication::notify(QObject*, QEvent*) ()
   from /usr/lib/qt-3.2/lib/libqt-mt.so.3
#50 0x407e622d in KApplication::notify(QObject*, QEvent*) ()
   from /usr/lib/libkdecore.so.4
#51 0x40b6eee8 in QETWidget::translateMouseEvent(_XEvent const*) ()
   from /usr/lib/qt-3.2/lib/libqt-mt.so.3
#52 0x40b6c7fc in QApplication::x11ProcessEvent(_XEvent*) ()
   from /usr/lib/qt-3.2/lib/libqt-mt.so.3
#53 0x40b829f1 in QEventLoop::processEvents(unsigned) ()
   from /usr/lib/qt-3.2/lib/libqt-mt.so.3
#54 0x40be96d8 in QEventLoop::enterLoop() ()
   from /usr/lib/qt-3.2/lib/libqt-mt.so.3
#55 0x40be9588 in QEventLoop::exec() () from /usr/lib/qt-3.2/lib/libqt-mt.so.3
#56 0x40bd6201 in QApplication::exec() ()
   from /usr/lib/qt-3.2/lib/libqt-mt.so.3
#57 0x4006ab8c in kdemain () from /usr/lib/libkdeinit_konqueror.so
#58 0x0804866b in kdemain ()
#59 0x4149f62d in __libc_start_main () from /lib/libc.so.6
Comment 1 Jan Schaefer 2004-02-17 09:31:01 UTC 
I can confirm this.
Comment 2 Stephan Kulow 2004-02-18 11:38:32 UTC 
*** Bug 75493 has been marked as a duplicate of this bug. ***
Comment 3 Stephan Kulow 2004-02-18 11:39:06 UTC 
*** Bug 73541 has been marked as a duplicate of this bug. ***
Comment 4 Harri Porten 2004-02-23 11:41:25 UTC 
*** Bug 75903 has been marked as a duplicate of this bug. ***
Comment 5 David Faure 2004-02-23 11:43:29 UTC 
Very ugly crash due to re-entrancy in QClipboard (!).
editableWidgetBlurred is called when updateEditActions calls QMimeSource::provides. It's easy to add a null-pointer check to workaround it, but it's definitely a Qt bug IMHO.

2: libkhtml.so.4(_ZN25KHTMLPartBrowserExtension21editableWidgetBlurredEP7QWidget+0x22) [0x41b67764]
3: libkhtml.so.4(_ZN3DOM26HTMLGenericFormElementImpl19defaultEventHandlerEPNS_9EventImplE+0x486) [0x41bc1d94]
4: libkhtml.so.4(_ZN3DOM20HTMLInputElementImpl19defaultEventHandlerEPNS_9EventImplE+0x3b1) [0x41bc5837]
5: libkhtml.so.4(_ZN3DOM8NodeImpl20dispatchGenericEventEPNS_9EventImplERi+0x35f) [0x41b880ff]
6: libkhtml.so.4(_ZN3DOM8NodeImpl13dispatchEventEPNS_9EventImplERib+0x5a) [0x41b87d10]
7: libkhtml.so.4(_ZN3DOM8NodeImpl15dispatchUIEventEii+0xc1) [0x41b88747]
8: libkhtml.so.4(_ZN3DOM12DocumentImpl12setFocusNodeEPNS_8NodeImplE+0xda) [0x41b80612]
9: libkhtml.so.4(_ZN5khtml12RenderWidget11eventFilterEP7QObjectP6QEvent+0x116) [0x41c105ba]
10: libqt-mt.so.3(_ZN7QObject16activate_filtersEP6QEvent+0x7e) [0x40ddbad8]
11: libqt-mt.so.3(_ZN7QObject5eventEP6QEvent+0x42) [0x40ddb94a]
12: libqt-mt.so.3(_ZN7QWidget5eventEP6QEvent+0x23) [0x40e1589b]
13: libqt-mt.so.3(_ZN12QApplication14internalNotifyEP7QObjectP6QEvent+0x259) [0x40d7b16f]
14: libqt-mt.so.3(_ZN12QApplication6notifyEP7QObjectP6QEvent+0x92b) [0x40d7ad9f]
15: libkdecore.so.4(_ZN12KApplication6notifyEP7QObjectP6QEvent+0x55f) [0x408aa0f5]
16: libkparts.so.2(_ZN12QApplication9sendEventEP7QObjectP6QEvent+0x4d) [0x40196773]
17: libqt-mt.so.3(_ZN7QWidget8setFocusEv+0x1f6) [0x40e1301e]
18: libqt-mt.so.3(_ZN12QApplication15setActiveWindowEP7QWidget+0x4cc) [0x40d7c9c2]
19: libqt-mt.so.3(_ZN12QApplication15x11ProcessEventEP7_XEvent+0x12f1) [0x40d0874d]
20: libqt-mt.so.3(_ZN10QEventLoop13processEventsEj+0x148) [0x40d224b8]
21: libqt-mt.so.3(_Z22qt_xclb_wait_for_eventP9_XDisplaymiP7_XEventi+0xfd) [0x40d13937]
22: libqt-mt.so.3(_ZNK17QClipboardWatcher15getDataInFormatEm+0xbe) [0x40d163b6]
23: libqt-mt.so.3(_ZNK17QClipboardWatcher6formatEi+0x91) [0x40d15abf]
24: libqt-mt.so.3(_ZNK11QMimeSource8providesEPKc+0x2f) [0x40dcf285]
25: libkhtml.so.4(_ZN25KHTMLPartBrowserExtension17updateEditActionsEv+0x120) [0x41b6817e]
26: libkhtml.so.4(_ZN25KHTMLPartBrowserExtension21editableWidgetFocusedEP7QWidget+0xa2) [0x41b67662]
27: libkhtml.so.4(_ZN3DOM26HTMLGenericFormElementImpl19defaultEventHandlerEPNS_9EventImplE+0x234) [0x41bc1b42]
Comment 6 dpavlotzky 2004-02-25 23:34:23 UTC 
Created attachment 4890 [details]
Konqueror crashes after trying to focus the second input element

I just submitted bug #76143 which is probably related to this bug. I found
#76143 while trying to create a small testcase to reproduce the crash.

I've attached the testcase. It's probably not neccessary anymore since you
allready seem to have found the problem...

Should I mark #76143 as duplicate?
Comment 7 Stephan Kulow 2004-02-26 15:17:17 UTC 
*** Bug 76192 has been marked as a duplicate of this bug. ***
Comment 8 LEFEBVRE Christophe 2004-02-29 02:23:33 UTC 
I have the same problem. I use Gentoo, KDE 3.2.0, Kernel 2.4.22-gentoo-r7.

(no debugging symbols found)...Using host libthread_db library "/lib/libthread_db.so.1".
(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...[Thread debugging using libthread_db enabled]
[New Thread 16384 (LWP 15962)]

0x49b595b8 in waitpid () from /lib/libpthread.so.0
#0  0x49b595b8 in waitpid () from /lib/libpthread.so.0
#1  0x4a85fc34 in ?? () from /usr/kde/3.2/lib/libkdecore.so.4
#2  0x4a79cd11 in KCrash::defaultCrashHandler(int) ()
   from /usr/kde/3.2/lib/libkdecore.so.4
#3  0x08089ae8 in ?? ()
#4  0x08089b0c in ?? ()
#5  0xbfffd608 in ?? ()
#6  0x49b5dc98 in __JCR_LIST__ () from /lib/libpthread.so.0
#7  0x08089ae8 in ?? ()
#8  0x00003e66 in ?? ()
#9  0x00000400 in ?? ()
#10 0x00000400 in ?? ()
#11 0x08089b1c in ?? ()
#12 0x4a5f59f0 in __JCR_LIST__ () from /usr/qt/3/lib/libqt-mt.so.3
#13 0xbfffd628 in ?? ()
#14 0x4a42e546 in QRecursiveMutexPrivate::unlock() ()
   from /usr/qt/3/lib/libqt-mt.so.3
Comment 9 Maksim Orlovich 2004-03-05 04:10:41 UTC 
Dirk put in a workaround for this http://lists.kde.org/?l=kde-cvs&m=107827066721575&w=2, 
and backported this, so I am merging this into the main "QClipboard in Qt3.2 is broken ..." bug

*** This bug has been marked as a duplicate of 61412 ***
Comment 10 Stephan Kulow 2004-03-05 12:05:35 UTC 
On Friday 05 March 2004 04:10, Maksim Orlovich wrote:
> ------- You are receiving this mail because: -------
> You are on the CC list for the bug, or are watching someone who is.
>       
> http://bugs.kde.org/show_bug.cgi?id=75353      
> maksim kde org changed:
> 
>            What    |Removed                     |Added
> ----------------------------------------------------------------------------
>              Status|NEW                         |RESOLVED
>          Resolution|                            |DUPLICATE
> 
> 
> 
> ------- Additional Comments From maksim kde org  2004-03-05 04:10 -------
> Dirk put in a workaround for this http://lists.kde.org/?l=kde-cvs&m=107827066721575&w=2, 
That commit has to be reverted as it breaks even more often now ;(

Greetings, Stephan