Bug 91442

Summary:	crash when loading http://conit.com/
Product:	[Applications] konqueror	Reporter:	Riku Voipio <nchip>
Component:	khtml renderer	Assignee:	Konqueror Bugs <konqueror-bugs-null>
Status:	RESOLVED FIXED
Severity:	crash
Priority:	NOR
Version First Reported In:	unspecified
Target Milestone:	---
Platform:	Debian testing
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:

Description Riku Voipio 2004-10-16 14:49:27 UTC

Version:            (using KDE KDE 3.3.0)
Installed from:    Debian testing/unstable Packages

This originates from:
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=276487

Konqueror crashes each time I try to load http://conit.com/.

Backtrace follows:

Using host libthread_db library "/lib/tls/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread 1073813024 (LWP 9855)]
[KCrash handler]
#3  0x403ed1df in QMemArray<QPoint>::detach () from /usr/lib/libkhtml.so.4
#4  0x403ee6bf in QMemArray<QPoint>::detach () from /usr/lib/libkhtml.so.4
#5  0x40407b86 in QMemArray<QPoint>::detach () from /usr/lib/libkhtml.so.4
#6  0x403ea038 in QMemArray<QPoint>::detach () from /usr/lib/libkhtml.so.4
#7  0x403ea09d in QMemArray<QPoint>::detach () from /usr/lib/libkhtml.so.4
#8  0x403ea09d in QMemArray<QPoint>::detach () from /usr/lib/libkhtml.so.4
#9  0x403ea09d in QMemArray<QPoint>::detach () from /usr/lib/libkhtml.so.4
#10 0x403ea09d in QMemArray<QPoint>::detach () from /usr/lib/libkhtml.so.4
#11 0x40415637 in QMemArray<QPoint>::detach () from /usr/lib/libkhtml.so.4
#12 0x4033088a in KHTMLView::layout () from /usr/lib/libkhtml.so.4
#13 0x40338cd8 in KHTMLView::timerEvent () from /usr/lib/libkhtml.so.4
#14 0x4acb85b3 in QObject::event () from /usr/lib/libqt-mt.so.3
#15 0x4acf0e6f in QWidget::event () from /usr/lib/libqt-mt.so.3
#16 0x4ac5e42f in QApplication::internalNotify () from /usr/lib/libqt-mt.so.3
#17 0x4ac5da2e in QApplication::notify () from /usr/lib/libqt-mt.so.3
#18 0x4b211fc3 in KApplication::notify () from /usr/lib/libkdecore.so.4
#19 0x4ac4dc65 in QEventLoop::activateTimers () from /usr/lib/libqt-mt.so.3
#20 0x4ac074ab in QEventLoop::processEvents () from /usr/lib/libqt-mt.so.3
#21 0x4ac70788 in QEventLoop::enterLoop () from /usr/lib/libqt-mt.so.3
#22 0x4ac70638 in QEventLoop::exec () from /usr/lib/libqt-mt.so.3
#23 0x4ac5e681 in QApplication::exec () from /usr/lib/libqt-mt.so.3
#24 0x4baaab3c in kdemain () from /usr/lib/libkdeinit_konqueror.so
#25 0x40004896 in kdeinitmain () from /usr/lib/kde3/konqueror.so
#26 0x0804cbb6 in ?? ()
[...]
#32 0x00000013 in ?? ()
#33 0x4b33f061 in posix_memalign () from /usr/lib/libkdecore.so.4
#34 0x0804e0ab in ?? ()
[...]
#85 0xbffff978 in ?? ()
#86 0x4a8510d3 in operator delete () from /usr/lib/libstdc++.so.5

Comment 1 Anne-Marie Mahfouf 2004-10-17 01:13:40 UTC

For what I can see by testing the source of the page, the crash is caused by the line
<frame src="conIT%20Gesellschaft%20f%FCr%20Consulting,%20Software-Entwicklung%20und%20IT-Dienstleistungen%20mbH_files/phead.html" class="phead" name="ptitle" scrolling="no" noresize="noresize">

Crash confirmed on cvs HEAD 15 October 2004

Comment 2 Tommi Tervo 2004-10-18 09:55:10 UTC

#0  0x41c3987b in khtml::RenderBox::containingBlockWidth (this=0x83b3510)
    at render_box.cpp:532
#1  0x41c3af50 in khtml::RenderBox::calcReplacedWidth (this=0x83b3510)
    at render_box.cpp:894
#2  0x41c57e56 in khtml::RenderReplaced::calcMinMaxWidth (this=0x83b3510)
    at render_replaced.cpp:73
#3  0x41c35d10 in khtml::RenderObject::recalcMinMaxWidths (this=0x83b3510)
    at render_object.cpp:1756
#4  0x41c35c21 in khtml::RenderObject::recalcMinMaxWidths (this=0x83b345c)
    at render_object.cpp:1742
#5  0x41c35c21 in khtml::RenderObject::recalcMinMaxWidths (this=0x83b3344)
    at render_object.cpp:1742
#6  0x41c35c21 in khtml::RenderObject::recalcMinMaxWidths (this=0x83b3280)
    at render_object.cpp:1742
#7  0x41c35c21 in khtml::RenderObject::recalcMinMaxWidths (this=0x83b3180)
    at render_object.cpp:1742
#8  0x41c682e4 in khtml::RenderCanvas::layout (this=0x83b3180)
    at render_canvas.cpp:137
#9  0x41b6dd72 in KHTMLView::layout (this=0x82fa7b8) at khtmlview.cpp:725
#10 0x41b763bd in KHTMLView::timerEvent (this=0x82fa7b8, e=0xbffff640)
    at khtmlview.cpp:2719
#11 0x40dfb253 in QObject::event () from /opt/qt333/lib/libqt-mt.so.3
#12 0x40e33b0f in QWidget::event () from /opt/qt333/lib/libqt-mt.so.3
#13 0x40da10bf in QApplication::internalNotify ()
---Type <return> to continue, or q <return> to quit---
   from /opt/qt333/lib/libqt-mt.so.3
#14 0x40da06be in QApplication::notify () from /opt/qt333/lib/libqt-mt.so.3
#15 0x40927ed7 in KApplication::notify (this=0xbffffa20, receiver=0x82fa7b8,
    event=0xbffff640) at kapplication.cpp:495
#16 0x40d908f5 in QEventLoop::activateTimers ()
   from /opt/qt333/lib/libqt-mt.so.3
#17 0x40d49ccb in QEventLoop::processEvents ()
   from /opt/qt333/lib/libqt-mt.so.3
#18 0x40db3478 in QEventLoop::enterLoop () from /opt/qt333/lib/libqt-mt.so.3
#19 0x40db3328 in QEventLoop::exec () from /opt/qt333/lib/libqt-mt.so.3
#20 0x40da1311 in QApplication::exec () from /opt/qt333/lib/libqt-mt.so.3
#21 0x40073c27 in kdemain (argc=1, argv=0xbffffb74) at konq_main.cc:204
#22 0x08048686 in main (argc=1, argv=0xbffffb74) at konqueror.la.cc:2

Comment 3 Germain Garand 2004-11-26 11:02:34 UTC

CVS commit by ggarand: 

Fix containingBlock crash

BUG: 84576, 91442, 76955


  M +2 -2      render_object.cpp   1.275


--- kdelibs/khtml/rendering/render_object.cpp  #1.274:1.275
@@ -540,6 +540,6 @@ RenderBlock *RenderObject::containingBlo
             o = o->parent();
     } else {
-        while(o && ( ( o->isInline() && !o->isReplaced() ) ||
-              o->isTableRow() || o->isTableSection() || o->isTableCol() ) )
+        while(o && ( ( o->isInline() && !o->isReplaced() ) || o->isTableRow() || o->isTableSection() ||
+                       o->isTableCol() || o->isFrameSet() ) )
             o = o->parent();
     }