Bug 85004

Version:           3.2.2 (using KDE 3.2.2, compiled sources)
Compiler:          gcc version 3.3.3
OS:                Linux (i686) release 2.6.6

konqueror always crashes while it tries to open any of the links in 
http://sources.redhat.com/gdb/current/onlinedocs/gdb_toc.html#SEC_Contents .
It also happens with a local copy of these html files.

This is the backtrace:

 [New Thread 1097010144 (LWP 1891)]
0xffffe410 in ?? ()
#0  0xffffe410 in ?? ()
#1  <signal handler called>
#2  0xffffe410 in ?? ()
#3  0x414f24c7 in *__GI_abort () at ../sysdeps/generic/abort.c:88
#4  0x414ea5cf in *__GI___assert_fail (
    assertion=0xfffffe00 <Address 0xfffffe00 out of bounds>, 
    file=0xfffffe00 <Address 0xfffffe00 out of bounds>, line=4294966784, 
    function=0x8052c0c "À']A") at assert.c:83
#5  0x41c1a7ff in khtml::RenderBlock::layoutBlock(bool) ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#6  0x41c1a3a5 in khtml::RenderBlock::layout() ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#7  0x41c1b84f in khtml::RenderBlock::layoutBlockChildren(bool) ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#8  0x41c1a850 in khtml::RenderBlock::layoutBlock(bool) ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#9  0x41c1a3a5 in khtml::RenderBlock::layout() ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#10 0x41c1b84f in khtml::RenderBlock::layoutBlockChildren(bool) ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#11 0x41c1a850 in khtml::RenderBlock::layoutBlock(bool) ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#12 0x41c1a3a5 in khtml::RenderBlock::layout() ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#13 0x41c1b84f in khtml::RenderBlock::layoutBlockChildren(bool) ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#14 0x41c1a850 in khtml::RenderBlock::layoutBlock(bool) ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#15 0x41c1a3a5 in khtml::RenderBlock::layout() ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#16 0x41c5d815 in khtml::RenderBody::layout() ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#17 0x41c1b84f in khtml::RenderBlock::layoutBlockChildren(bool) ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#18 0x41c1a850 in khtml::RenderBlock::layoutBlock(bool) ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#19 0x41c1a3a5 in khtml::RenderBlock::layout() ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#20 0x41c1b84f in khtml::RenderBlock::layoutBlockChildren(bool) ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#21 0x41c1a850 in khtml::RenderBlock::layoutBlock(bool) ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#22 0x41c1a3a5 in khtml::RenderBlock::layout() ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#23 0x41c5673a in khtml::RenderCanvas::layout() ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#24 0x41b7429a in KHTMLView::layout() () from /opt/kde3.2.2/lib/libkhtml.so.4
#25 0x41b7cfcc in KHTMLView::timerEvent(QTimerEvent*) ()
   from /opt/kde3.2.2/lib/libkhtml.so.4
#26 0x40b8fa63 in QObject::event(QEvent*) ()
   from /usr/local/qt/lib/libqt-mt.so.3
#27 0x40bcffbf in QWidget::event(QEvent*) ()
   from /usr/local/qt/lib/libqt-mt.so.3
#28 0x40b2b4af in QApplication::internalNotify(QObject*, QEvent*) ()
   from /usr/local/qt/lib/libqt-mt.so.3
#29 0x40b2aa75 in QApplication::notify(QObject*, QEvent*) ()
   from /usr/local/qt/lib/libqt-mt.so.3
#30 0x406f329d in KApplication::notify(QObject*, QEvent*) ()
   from /opt/kde3.2.2/lib/libkdecore.so.4
#31 0x40b18d94 in QEventLoop::activateTimers() ()
   from /usr/local/qt/lib/libqt-mt.so.3
#32 0x40acd342 in QEventLoop::processEvents(unsigned) ()
   from /usr/local/qt/lib/libqt-mt.so.3
#33 0x40b40268 in QEventLoop::enterLoop() ()
   from /usr/local/qt/lib/libqt-mt.so.3
#34 0x40b40118 in QEventLoop::exec() () from /usr/local/qt/lib/libqt-mt.so.3
#35 0x40b2b711 in QApplication::exec() () from /usr/local/qt/lib/libqt-mt.so.3
#36 0x416fe22c in kdemain () from /opt/kde3.2.2/lib/libkdeinit_konqueror.so
#37 0x416b8916 in kdeinitmain () from /opt/kde3.2.2/lib/kde3/konqueror.so
#38 0x0804ccc6 in launch(int, char const*, char const*, char const*, int, char const*, bool, char const*, bool, char const*) ()
#39 0x0804e301 in handle_launcher_request(int) ()
#40 0x0804e86d in handle_requests(int) ()
#41 0x0804f995 in main ()
#42 0x414ddfd4 in __libc_start_main (main=0x804f470 <main>, argc=3, 
    ubp_av=0xbffff984, init=0x8050600 <__libc_csu_init>, 
    fini=0x8050630 <__libc_csu_fini>, rtld_fini=0x400152e0 <_rtld_local_ro>, 
    stack_end=0xbffff97c) at ../sysdeps/generic/libc-start.c:209

I don't think this is like any of the already resolved bugs about konqueror crashes.