Bug 79069

Summary:	Konqueror crashes when interpreting strings in javascript dialog
Product:	[Applications] konqueror	Reporter:	Raga Prong <ragaprong>
Component:	khtml ecma	Assignee:	Konqueror Bugs <konqueror-bugs-null>
Status:	RESOLVED DUPLICATE
Severity:	crash
Priority:	NOR
Version First Reported In:	3.2.1
Target Milestone:	---
Platform:	Debian testing
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description Raga Prong 2004-04-04 21:57:08 UTC

Version:           3.2.1 (using KDE KDE 3.2.1)
Installed from:    Debian testing/unstable Packages
OS:          Linux

My daily updated Konqueror 3.2.1 crashes when ever I enter a URL into a Javascript dialogue which is meant to generate BBCode for a board system. The length of the string was about 50 chars. The javascript was meant to surround it with [IMG][/IMG] tags.

 And this is the crash report: 
 ... 
 (no debugging symbols found)...(no debugging symbols found)... 
 (no debugging symbols found)...0x40fb8bd8 in waitpid () 
 from /lib/libpthread.so.0 
 #0 0x40fb8bd8 in waitpid () from /lib/libpthread.so.0 
 #1 0x40809b78 in lt_dlfree () from /usr/lib/libkdecore.so.4 
 #2 0x40fb7815 in __pthread_sighandler () from /lib/libpthread.so.0 
 #3 0x411f54a8 in __libc_sigaction () from /lib/libc.so.6 
 #4 0x41c8ab79 in KHTMLPartBrowserExtension::updateEditActions() () 
 from /usr/lib/libkhtml.so.4 
 #5 0x41c8a2ea in KHTMLPartBrowserExtension::editableWidgetFocused(QWidget*) () 
 from /usr/lib/libkhtml.so.4 
 #6 0x41cddd1c in DOM::removeForbidden(int, unsigned short*) () 
 from /usr/lib/libkhtml.so.4 
 #7 0x41ca89ce in KStaticDeleter<KHTMLPageCache>::~KStaticDeleter() () 
 from /usr/lib/libkhtml.so.4 
 #8 0x41ca8752 in KStaticDeleter<KHTMLPageCache>::~KStaticDeleter() () 
 from /usr/lib/libkhtml.so.4 
 #9 0x41ca8f6f in KStaticDeleter<KHTMLPageCache>::~KStaticDeleter() () 
 from /usr/lib/libkhtml.so.4 
 #10 0x41ca52e4 in KStaticDeleter<KHTMLPageCache>::~KStaticDeleter() () 
 from /usr/lib/libkhtml.so.4 
 #11 0x41ce5fb9 in DOM::removeForbidden(int, unsigned short*) () 
 from /usr/lib/libkhtml.so.4 
 #12 0x41e0a55d in DOM::HTMLTextAreaElement::focus() () 
 from /usr/lib/libkhtml.so.4 
 #13 0x41d8c8ef in QPtrDict<khtml::CachedObjectClient>::deleteItem(void*) () 
 from /usr/lib/libkhtml.so.4 
 #14 0x41d69597 in QPtrDict<khtml::CachedObjectClient>::deleteItem(void*) () 
 from /usr/lib/libkhtml.so.4 
 #15 0x41eda2e0 in KJS::Object::call(KJS::ExecState*, KJS::Object&, KJS::List const&) () from /usr/lib/libkjs.so.1 
 #16 0x41eac44d in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #17 0x41eb0b2a in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #18 0x41eb7446 in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #19 0x41eb093f in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #20 0x41eb6993 in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #21 0x41ed5a0c in KJS::DeclaredFunctionImp::execute(KJS::ExecState*) () 
 from /usr/lib/libkjs.so.1 
 #22 0x41ed4de2 in KJS::FunctionImp::call(KJS::ExecState*, KJS::Object&, KJS::List const&) () from /usr/lib/libkjs.so.1 
 #23 0x41eda2e0 in KJS::Object::call(KJS::ExecState*, KJS::Object&, KJS::List const&) () from /usr/lib/libkjs.so.1 
 #24 0x41eac44d in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #25 0x41eb0b2a in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #26 0x41eb74bc in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #27 0x41eb093f in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #28 0x41eb6993 in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #29 0x41ed5a0c in KJS::DeclaredFunctionImp::execute(KJS::ExecState*) () 
 from /usr/lib/libkjs.so.1 
 #30 0x41ed4de2 in KJS::FunctionImp::call(KJS::ExecState*, KJS::Object&, KJS::List const&) () from /usr/lib/libkjs.so.1 
 #31 0x41eda2e0 in KJS::Object::call(KJS::ExecState*, KJS::Object&, KJS::List const&) () from /usr/lib/libkjs.so.1 
 #32 0x41eac44d in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #33 0x41eb0b2a in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #34 0x41eb74bc in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #35 0x41eb093f in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #36 0x41eb0ece in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #37 0x41eb7446 in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #38 0x41eb093f in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #39 0x41eb6993 in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #40 0x41ed5a0c in KJS::DeclaredFunctionImp::execute(KJS::ExecState*) () 
 from /usr/lib/libkjs.so.1 
 #41 0x41ed4de2 in KJS::FunctionImp::call(KJS::ExecState*, KJS::Object&, KJS::List const&) () from /usr/lib/libkjs.so.1 
 #42 0x41eda2e0 in KJS::Object::call(KJS::ExecState*, KJS::Object&, KJS::List const&) () from /usr/lib/libkjs.so.1 
 #43 0x41eac44d in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #44 0x41eb0b2a in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #45 0x41eb7446 in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #46 0x41eb093f in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #47 0x41eb6993 in KJS::roundValue(KJS::ExecState*, KJS::Value const&) () 
 from /usr/lib/libkjs.so.1 
 #48 0x41ed5a0c in KJS::DeclaredFunctionImp::execute(KJS::ExecState*) () 
 from /usr/lib/libkjs.so.1 
 #49 0x41ed4de2 in KJS::FunctionImp::call(KJS::ExecState*, KJS::Object&, KJS::List const&) () from /usr/lib/libkjs.so.1 
 #50 0x41eda2e0 in KJS::Object::call(KJS::ExecState*, KJS::Object&, KJS::List const&) () from /usr/lib/libkjs.so.1 
 #51 0x41dbd2c0 in TestFunctionImp::call(KJS::ExecState*, KJS::Object&, KJS::List const&) () from /usr/lib/libkhtml.so.4 
 #52 0x41ca9293 in KStaticDeleter<KHTMLPageCache>::~KStaticDeleter() () 
 from /usr/lib/libkhtml.so.4 
 #53 0x41ca890b in KStaticDeleter<KHTMLPageCache>::~KStaticDeleter() () 
 from /usr/lib/libkhtml.so.4 
 #54 0x41ca8752 in KStaticDeleter<KHTMLPageCache>::~KStaticDeleter() () 
 from /usr/lib/libkhtml.so.4 
 #55 0x41c5c581 in KHTMLView::dispatchMouseEvent(int, DOM::NodeImpl*, bool, int, QMouseEvent*, bool, int) () from /usr/lib/libkhtml.so.4 
 #56 0x41c57edd in KHTMLView::viewportMouseReleaseEvent(QMouseEvent*) () 
 from /usr/lib/libkhtml.so.4 
 #57 0x41c590f6 in KHTMLView::eventFilter(QObject*, QEvent*) () 
 from /usr/lib/libkhtml.so.4 
 #58 0x40b0692e in QObject::activate_filters(QEvent*) () 
 from /usr/lib/libqt-mt.so.3 
 #59 0x40b0685c in QObject::event(QEvent*) () from /usr/lib/libqt-mt.so.3 
 #60 0x40b3dd1f in QWidget::event(QEvent*) () from /usr/lib/libqt-mt.so.3 
 #61 0x40aad47f in QApplication::internalNotify(QObject*, QEvent*) () 
 from /usr/lib/libqt-mt.so.3 
 #62 0x40aacb81 in QApplication::notify(QObject*, QEvent*) () 
 from /usr/lib/libqt-mt.so.3 
 #63 0x406b89ed in KApplication::notify(QObject*, QEvent*) () 
 from /usr/lib/libkdecore.so.4 
 #64 0x40a452e8 in QETWidget::translateMouseEvent(_XEvent const*) () 
 from /usr/lib/libqt-mt.so.3 
 #65 0x40a42e12 in QApplication::x11ProcessEvent(_XEvent*) () 
 from /usr/lib/libqt-mt.so.3 
 #66 0x40a58f01 in QEventLoop::processEvents(unsigned) () 
 from /usr/lib/libqt-mt.so.3 
 #67 0x40ac0ce8 in QEventLoop::enterLoop() () from /usr/lib/libqt-mt.so.3 
 #68 0x40ac0b98 in QEventLoop::exec() () from /usr/lib/libqt-mt.so.3 
 #69 0x40aad6d1 in QApplication::exec() () from /usr/lib/libqt-mt.so.3 
 #70 0x4150ec2c in kdemain () from /usr/lib/libkdeinit_konqueror.so 
 #71 0x40018866 in kdeinitmain () from /usr/lib/kde3/konqueror.so 
 #72 0x0804cc16 in strcpy () 
 #73 0x0804e0fb in strcpy () 
 #74 0x0804e61e in strcpy () 
 #75 0x0804f61d in strcpy () 
 #76 0x411e1dc6 in __libc_start_main () from /lib/libc.so.6

Comment 1 Maksim Orlovich 2004-06-10 22:38:39 UTC


*** This bug has been marked as a duplicate of 61412 ***