Bug 79071

Summary: konqueror SEGVs when image display/undisplay is done with CSS
Product: [Applications] konqueror Reporter: Dominique Devriese <devriese>
Component: khtmlAssignee: Konqueror Bugs <konqueror-bugs-null>
Status: RESOLVED FIXED    
Severity: crash    
Priority: NOR    
Version First Reported In: unspecified   
Target Milestone: ---   
Platform: Debian testing   
OS: Linux   
Latest Commit: Version Fixed/Implemented In:
Sentry Crash Report:
Attachments: A file causing the crash.
The backtrace ( with debugging symbols )

Description Dominique Devriese 2004-04-04 22:49:46 UTC 
Version:            (using KDE KDE 3.2.1)
Installed from:    Debian testing/unstable Packages

Note: this is a forward of the following Debian bug report:
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=241291
I have confirmed it on my system.
I'm including the text from the original bug report below, the file causing the crash and the backtrace as an attachment, let me know if you need more info.

Here follows the text from the original bug report:
  While testing some updates to my website, I found that konqueror would
  SEGV while viewing a certain page while displaying and undisplaying
  images with CSS.

  A short example of some code that causes konqueror to SEGV (the image
  used/existance does not matter):
( the example is cut from the text, and included as an attachment )
Comment 1 Dominique Devriese 2004-04-04 22:51:44 UTC 
Created attachment 5533 [details]
A file causing the crash.
Comment 2 Dominique Devriese 2004-04-04 22:52:22 UTC 
Created attachment 5534 [details]
The backtrace ( with debugging symbols )
Comment 3 Maksim Orlovich 2004-04-04 23:03:34 UTC 
Please paste the backtraces, and don't attach them. Thank you. 

[New Thread 1098325440 (LWP 18390)]
0x412a63ee in __waitpid_nocancel () from /lib/tls/libpthread.so.0
#0  0x412a63ee in __waitpid_nocancel () from /lib/tls/libpthread.so.0
#1  0x40933e58 in KCrash::defaultCrashHandler(int) (sig=11) at kcrash.cpp:246
#2  <signal handler called>
#3  0x41dc5fa3 in khtml::RenderBlock::nodeAtPoint(khtml::RenderObject::NodeInfo&, int, int, int, int, HitTestAction, bool) (this=0x834b79c, info=@0xbfffe540, 
    _x=51, _y=33, _tx=0, _ty=0, hitTestAction=HitTestAll, inBox=false)
    at render_block.cpp:1860
#4  0x41dc6086 in khtml::RenderBlock::nodeAtPoint(khtml::RenderObject::NodeInfo&, int, int, int, int, HitTestAction, bool) (this=0x834b6e4, info=@0xbfffe540, 
    _x=51, _y=33, _tx=0, _ty=0, hitTestAction=HitTestChildrenOnly, inBox=false)
    at render_block.cpp:1861
#5  0x41de2505 in khtml::RenderLayer::nodeAtPointForLayer(khtml::RenderLayer*, khtml::RenderObject::NodeInfo&, int, int, QRect const&) (this=0x834b754, 
    rootLayer=0x834b69c, info=@0xbfffe540, xMousePos=51, yMousePos=33, 
    hitTestRect=@0xbfffe490) at render_layer.cpp:818
#6  0x41de2425 in khtml::RenderLayer::nodeAtPointForLayer(khtml::RenderLayer*, khtml::RenderObject::NodeInfo&, int, int, QRect const&) (this=0x834b69c, 
    rootLayer=0x834b69c, info=@0xbfffe540, xMousePos=51, yMousePos=33, 
    hitTestRect=@0xbfffe490) at render_layer.cpp:810
#7  0x41de22c8 in khtml::RenderLayer::nodeAtPoint(khtml::RenderObject::NodeInfo&, int, int) (this=0x834b69c, info=@0xbfffe540, x=51, y=33)
    at render_layer.cpp:772
#8  0x41d69f67 in DOM::DocumentImpl::prepareMouseEvent(bool, int, int, DOM::NodeImpl::MouseEvent*) (this=0x8312778, readonly=true, _x=51, _y=33, ev=0xbfffe600)
    at dom_docimpl.cpp:1565
#9  0x41d20b3b in KHTMLView::dispatchMouseEvent(int, DOM::NodeImpl*, bool, int, QMouseEvent*, bool, int) (this=0x83765e8, eventId=8, targetNode=0x80ea428, 
    cancelable=false, detail=0, _mouse=0xbfffeca0, setUnder=true, 
    mouseEventType=4) at khtmlview.cpp:1975
#10 0x41d1ba50 in KHTMLView::viewportMouseMoveEvent(QMouseEvent*) (
    this=0x83765e8, _mouse=0xbfffeca0) at khtmlview.cpp:791
#11 0x40ece425 in QScrollView::eventFilter(QObject*, QEvent*) ()
   from /usr/lib/libqt-mt.so.3
#12 0x41d1deec in KHTMLView::eventFilter(QObject*, QEvent*) (this=0x83765e8, 
    o=0x837e1e0, e=0xbfffeca0) at khtmlview.cpp:1412
#13 0x40da97b9 in QObject::activate_filters(QEvent*) ()
   from /usr/lib/libqt-mt.so.3
#14 0x40da9637 in QObject::event(QEvent*) () from /usr/lib/libqt-mt.so.3
#15 0x40de35e1 in QWidget::event(QEvent*) () from /usr/lib/libqt-mt.so.3
#16 0x40d48ba3 in QApplication::internalNotify(QObject*, QEvent*) ()
   from /usr/lib/libqt-mt.so.3
#17 0x40d483cb in QApplication::notify(QObject*, QEvent*) ()
   from /usr/lib/libqt-mt.so.3
#18 0x408c5424 in KApplication::notify(QObject*, QEvent*) (this=0xbffff220, 
    receiver=0x837e1e0, event=0xbfffeca0) at kapplication.cpp:506
#19 0x40cde442 in QApplication::sendSpontaneousEvent(QObject*, QEvent*) ()
   from /usr/lib/libqt-mt.so.3
#20 0x40cd7adb in QETWidget::translateMouseEvent(_XEvent const*) ()
   from /usr/lib/libqt-mt.so.3
#21 0x40cd57c7 in QApplication::x11ProcessEvent(_XEvent*) ()
   from /usr/lib/libqt-mt.so.3
#22 0x40cef697 in QEventLoop::processEvents(unsigned) ()
   from /usr/lib/libqt-mt.so.3
#23 0x40d5ea75 in QEventLoop::enterLoop() () from /usr/lib/libqt-mt.so.3
#24 0x40d5e98e in QEventLoop::exec() () from /usr/lib/libqt-mt.so.3
#25 0x40d48d0f in QApplication::exec() () from /usr/lib/libqt-mt.so.3
#26 0x4008650f in kdemain (argc=2, argv=0xbffff3a4) at konq_main.cc:184
#27 0x080485f6 in main (argc=2, argv=0xbffff3a4) at konqueror.la.cc:2
Comment 4 Tommi Tervo 2004-04-15 15:20:38 UTC 
No crash, unstable 3.2.2 packages.
Comment 5 Dominique Devriese 2004-04-15 16:25:05 UTC 
Fix confirmed, closing.