Bug 169826 - Konqueror crashes when toggling Caret Mode (F7) 2/3 times on some pages not completely loaded
Summary: Konqueror crashes when toggling Caret Mode (F7) 2/3 times on some pages not c...
Status: RESOLVED UNMAINTAINED
Alias: None
Product: konqueror
Classification: Applications
Component: khtml (show other bugs)
Version: unspecified
Platform: unspecified Linux
: NOR crash
Target Milestone: ---
Assignee: Konqueror Developers
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-08-26 00:57 UTC by Dario Andres
Modified: 2024-05-06 18:39 UTC (History)
6 users (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:


Attachments
Simple Proposed patch (661 bytes, patch)
2009-05-13 06:27 UTC, Dario Andres
Details
New crash information added by DrKonqi (7.35 KB, text/plain)
2011-09-20 21:07 UTC, Manuel Stol
Details
New crash information added by DrKonqi (3.83 KB, text/plain)
2021-01-01 21:57 UTC, Raúl
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Dario Andres 2008-08-26 00:57:31 UTC
Version:           Version 4.1.1 (KDE 4.1.0 (4.1 >= 20080722)) (using KDE 4.1.0)
Compiler:          gcc 
OS:                Linux
Installed from:    Unlisted Binary Package

Using KDE 4.1.1 (KDE 4.1.0 (4.1 >= 20080722)) (KDEmod) in ArchLinux i686

Steps to reproduce:
- Open Konqueror
- Load some site (example url : http://www.clarin.com )
Before the site is loaded (inmediatly after you press Return) press F7 (Toggle Caret Mode) two or three times.
Konqueror crashes.

This may also happen with another sites.
This bug is also reproducible using KDE4.2 svn (kdelibs rev.851858 and kdebase rev.851866)

Here is the backtrace:

Aplicación: Konqueror (konqueror), señal SIGSEGV
[Thread debugging using libthread_db enabled]
[New Thread 0xb6339700 (LWP 4970)]
[KCrash handler]
#6  setCaretInvisibleIfNeeded (part=0x8409028)
    at /home/jan/Source/packages/kde41/work/kdelibs/src/kdelibs-4.1.0/khtml/khtml_part.cpp:2701
#7  0xb450008a in KHTMLPart::setCaretMode (this=0x8409028, enable=false)
    at /home/jan/Source/packages/kde41/work/kdelibs/src/kdelibs-4.1.0/khtml/khtml_part.cpp:2717
#8  0xb4500265 in KHTMLPart::slotToggleCaretMode (this=0x8409028)
    at /home/jan/Source/packages/kde41/work/kdelibs/src/kdelibs-4.1.0/khtml/khtml_part.cpp:7339
#9  0xb4511b80 in KHTMLPart::qt_metacall (this=0x8409028, 
    _c=QMetaObject::InvokeMetaMethod, _id=83, _a=0xbf998a7c)
    at /home/jan/Source/packages/kde41/work/kdelibs/src/build/khtml/khtml_part.moc:328
#10 0xb748a8d7 in QMetaObject::activate () from /usr/lib/libQtCore.so.4
#11 0xb748abb9 in QMetaObject::activate () from /usr/lib/libQtCore.so.4
#12 0xb6a2bfe2 in QAction::triggered () from /usr/lib/libQtGui.so.4
#13 0xb6a2c868 in QAction::activate () from /usr/lib/libQtGui.so.4
#14 0xb6a2efeb in QAction::event () from /usr/lib/libQtGui.so.4
#15 0xb6a80320 in QWidgetAction::event () from /usr/lib/libQtGui.so.4
#16 0xb6a30f13 in QApplicationPrivate::notify_helper ()
   from /usr/lib/libQtGui.so.4
#17 0xb6a37a1c in QApplication::notify () from /usr/lib/libQtGui.so.4
#18 0xb7a2aedc in KApplication::notify (this=0xbf999d94, receiver=0x878fd38, 
    event=0xbf998e54)
    at /home/jan/Source/packages/kde41/work/kdelibs/src/kdelibs-4.1.0/kdeui/kernel/kapplication.cpp:311
#19 0xb747a30c in QCoreApplication::notifyInternal ()
   from /usr/lib/libQtCore.so.4
#20 0xb6a619de in ?? () from /usr/lib/libQtGui.so.4
#21 0xbf999d94 in ?? ()
#22 0x0878fd38 in ?? ()
#23 0xbf998e54 in ?? ()
#24 0x00000000 in ?? ()
#0  0xb7f7f424 in __kernel_vsyscall ()

(backtrace for KDE4.2 is the same, it only changes the some line numbers in source files)
Comment 1 Dario Andres 2008-08-26 00:58:48 UTC
I forgot to say: I discovered this bug when trying to reproduce bug 155597, so it may be related to this.
Comment 2 Dario Andres 2008-10-04 18:50:24 UTC
Using KDE 4.1.2 (KDE 4.1.2) (KDEmod):
I can still reproduce this bug.
Comment 3 Dario Andres 2008-12-11 23:27:11 UTC
I can still reproduce this bug using:

Qt: 4.4.3
KDE: 4.1.85 (KDE 4.1.85 (KDE 4.2 Beta2))
kdelibs svn rev. 895869 / kdebase svn rev. 895869

Backtrace:

Application: Konqueror (konqueror), signal SIGSEGV
0x00007ff6890baed1 in nanosleep () from /lib/libc.so.6
[Current thread is 0 (LWP 15860)]

Thread 2 (Thread 0x4162a950 (LWP 15865)):
#0  0x00007ff68b4b6fcd in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#1  0x00007ff68b723ae7 in QWaitCondition::wait () from /usr/lib/libQtCore.so.4
#2  0x00007ff68b71b1f9 in ?? () from /usr/lib/libQtCore.so.4
#3  0x00007ff68b722d79 in ?? () from /usr/lib/libQtCore.so.4
#4  0x00007ff68b4b2fe7 in start_thread () from /lib/libpthread.so.0
#5  0x00007ff6890eb23d in clone () from /lib/libc.so.6
#6  0x0000000000000000 in ?? ()

Thread 1 (Thread 0x7ff68e2c5750 (LWP 15860)):
[KCrash Handler]
#5  setCaretInvisibleIfNeeded (part=0x1bc4c90) at /home/kde-devel/kde/src/KDE/kdelibs/khtml/khtml_part.cpp:2791
#6  0x00007ff67f3951a5 in KHTMLPart::setCaretMode (this=0x1bc4c90, enable=false) at /home/kde-devel/kde/src/KDE/kdelibs/khtml/khtml_part.cpp:2807
#7  0x00007ff67f3a57ad in KHTMLPart::qt_metacall (this=0x1bc4c90, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x7fff96400fe0)
    at /home/kde-devel/kde/build/KDE/kdelibs/khtml/khtml_part.moc:327
#8  0x00007ff68b805d00 in QMetaObject::activate () from /usr/lib/libQtCore.so.4
#9  0x00007ff68ac0e367 in QAction::triggered () from /usr/lib/libQtGui.so.4
#10 0x00007ff68ac0eb24 in QAction::activate () from /usr/lib/libQtGui.so.4
#11 0x00007ff68ac11767 in QAction::event () from /usr/lib/libQtGui.so.4
#12 0x00007ff68c52c103 in KAction::event (this=0x0, event=0x7fff96401550) at /home/kde-devel/kde/src/KDE/kdelibs/kdeui/actions/kaction.cpp:88
#13 0x00007ff68ac134dd in QApplicationPrivate::notify_helper () from /usr/lib/libQtGui.so.4
#14 0x00007ff68ac1986a in QApplication::notify () from /usr/lib/libQtGui.so.4
#15 0x00007ff68c60300b in KApplication::notify (this=0x7fff96402cc0, receiver=0x1c74ff0, event=0x7fff96401550) at /home/kde-devel/kde/src/KDE/kdelibs/kdeui/kernel/kapplication.cpp:307
#16 0x00007ff68b7f43d1 in QCoreApplication::notifyInternal () from /usr/lib/libQtCore.so.4
#17 0x00007ff68ac43ced in ?? () from /usr/lib/libQtGui.so.4
#18 0x00007ff68ac454ea in ?? () from /usr/lib/libQtGui.so.4
#19 0x00007ff68ac1a94a in QApplication::notify () from /usr/lib/libQtGui.so.4
#20 0x00007ff68c60300b in KApplication::notify (this=0x7fff96402cc0, receiver=0x1c1a9c0, event=0x7fff96401a40) at /home/kde-devel/kde/src/KDE/kdelibs/kdeui/kernel/kapplication.cpp:307
#21 0x00007ff68b7f43d1 in QCoreApplication::notifyInternal () from /usr/lib/libQtCore.so.4
#22 0x00007ff68ac90e84 in ?? () from /usr/lib/libQtGui.so.4
#23 0x00007ff68ac92f27 in ?? () from /usr/lib/libQtGui.so.4
#24 0x00007ff68ac703e5 in QApplication::x11ProcessEvent () from /usr/lib/libQtGui.so.4
#25 0x00007ff68ac94744 in ?? () from /usr/lib/libQtGui.so.4
#26 0x00007ff68766daa2 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#27 0x00007ff68767121d in g_main_context_iterate () from /usr/lib/libglib-2.0.so.0
#28 0x00007ff6876713db in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#29 0x00007ff68b81889f in QEventDispatcherGlib::processEvents () from /usr/lib/libQtCore.so.4
#30 0x00007ff68ac93fff in ?? () from /usr/lib/libQtGui.so.4
#31 0x00007ff68b7f2d42 in QEventLoop::processEvents () from /usr/lib/libQtCore.so.4
#32 0x00007ff68b7f2ed5 in QEventLoop::exec () from /usr/lib/libQtCore.so.4
#33 0x00007ff68b7f5025 in QCoreApplication::exec () from /usr/lib/libQtCore.so.4
#34 0x00007ff68dfbdae9 in kdemain (argc=<value optimized out>, argv=<value optimized out>) at /home/kde-devel/kde/src/KDE/kdebase/apps/konqueror/src/konqmain.cpp:257
#35 0x00007ff68903a3f6 in __libc_start_main () from /lib/libc.so.6
#36 0x00000000004007c9 in _start ()

Comment 4 Tommi Tervo 2008-12-21 10:37:05 UTC
==16879== Invalid read of size 4                                                 
==16879==    at 0x9E7E3A0: _ZL25setCaretInvisibleIfNeededP9KHTMLPart (khtml_part.cpp:2791)                                                                        
==16879==    by 0x9EA31E0: KHTMLPart::setCaretMode(bool) (khtml_part.cpp:2807)   
==16879==    by 0x9EA3359: KHTMLPart::slotToggleCaretMode() (khtml_part.cpp:7008)
==16879==    by 0x9EB592F: KHTMLPart::qt_metacall(QMetaObject::Call, int, void**) (khtml_part.moc:327)                                                            
==16879==    by 0x4DAB73F: QMetaObject::activate(QObject*, int, int, void**) (in /usr/lib/libQtCore.so.4.4.3)                                                     
==16879==    by 0x4DABB3F: QMetaObject::activate(QObject*, QMetaObject const*, int, int, void**) (in /usr/lib/libQtCore.so.4.4.3)
==16879==    by 0x4FAA590: QAction::triggered(bool) (in /usr/lib/libQtGui.so.4.4.3)
==16879==    by 0x4FAAEFE: QAction::activate(QAction::ActionEvent) (in /usr/lib/libQtGui.so.4.4.3)
==16879==    by 0x4FAE3DA: QAction::event(QEvent*) (in /usr/lib/libQtGui.so.4.4.3)
==16879==    by 0x46BD728: KAction::event(QEvent*) (kaction.cpp:88)
==16879==    by 0x4FB082B: QApplicationPrivate::notify_helper(QObject*, QEvent*)(in /usr/lib/libQtGui.so.4.4.3)
==16879==    by 0x4FB86CD: QApplication::notify(QObject*, QEvent*) (in /usr/lib/libQtGui.so.4.4.3)
==16879==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
Comment 5 Dario Andres 2009-01-04 20:20:35 UTC
Here using:

Qt: 4.4.3 + qt-copy-patches-889120
KDE: 4.1.87 (KDE 4.1.87 (KDE 4.2 >= 20090101))
kdelibs svn rev. 905636 / kdebase svn rev. 905636
on ArchLinux x86_64 - Kernel 2.6.27.10

I can still reproduce the crash when loading the site: www.lanacion.com.ar and pressing F7 several times.

Backtrace:

Application: Konqueror (konqueror), signal SIGSEGV
0x00007f3574abf001 in nanosleep () from /lib/libc.so.6

Thread 1 (Thread 0x7f3579b39750 (LWP 14011)):
[KCrash Handler]
#5  setCaretInvisibleIfNeeded (part=0x16e2ca0) at /home/kde-devel/kde/src/KDE/kdelibs/khtml/khtml_part.cpp:2796
#6  0x00007f356a8b92b5 in KHTMLPart::setCaretMode (this=0x16e2ca0, enable=false) at /home/kde-devel/kde/src/KDE/kdelibs/khtml/khtml_part.cpp:2812
#7  0x00007f356a8c98bd in KHTMLPart::qt_metacall (this=0x16e2ca0, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x7fff81c7a800)
    at /home/kde-devel/kde/build/KDE/kdelibs/khtml/khtml_part.moc:327
#8  0x00007f3577276ac0 in QMetaObject::activate (sender=0x1884c90, from_signal_index=<value optimized out>, to_signal_index=6, argv=0x1cb7f00) at kernel/qobject.cpp:3028
#9  0x00007f3576612a57 in QAction::triggered (this=0x0, _t1=false) at .moc/debug-shared/moc_qaction.cpp:216
#10 0x00007f3576613204 in QAction::activate (this=0x1884c90, event=<value optimized out>) at kernel/qaction.cpp:1125
#11 0x00007f3576616862 in QAction::event (this=0x1884c90, e=0x7fff81c7ad90) at kernel/qaction.cpp:1044
#12 0x00007f3577faa503 in KAction::event (this=0x0, event=0x7fff81c7ad90) at /home/kde-devel/kde/src/KDE/kdelibs/kdeui/actions/kaction.cpp:88
#13 0x00007f35766180ad in QApplicationPrivate::notify_helper (this=0x10be800, receiver=0x1884c90, e=0x7fff81c7ad90) at kernel/qapplication.cpp:3803
#14 0x00007f357661f40e in QApplication::notify (this=0x7fff81c7c510, receiver=0x1884c90, e=0x7fff81c7ad90) at kernel/qapplication.cpp:3768
#15 0x00007f357808155b in KApplication::notify (this=0x7fff81c7c510, receiver=0x1884c90, event=0x7fff81c7ad90) at /home/kde-devel/kde/src/KDE/kdelibs/kdeui/kernel/kapplication.cpp:307
#16 0x00007f3577261d90 in QCoreApplication::notifyInternal (this=0x7fff81c7c510, receiver=0x1884c90, event=0x7fff81c7ad90) at kernel/qcoreapplication.cpp:583
#17 0x00007f357664d0fa in QShortcutMap::dispatchEvent (this=<value optimized out>, e=0x7fff81c7b280) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:209
#18 0x00007f357664ed3a in QShortcutMap::tryShortcutEvent (this=0x10be910, w=<value optimized out>, e=0x7fff81c7b280) at kernel/qshortcutmap.cpp:362
#19 0x00007f3576620492 in QApplication::notify (this=<value optimized out>, receiver=0x18378e0, e=0x7fff81c7b280) at kernel/qapplication.cpp:3430
#20 0x00007f357808155b in KApplication::notify (this=0x7fff81c7c510, receiver=0x18378e0, event=0x7fff81c7b280) at /home/kde-devel/kde/src/KDE/kdelibs/kdeui/kernel/kapplication.cpp:307
#21 0x00007f3577261d90 in QCoreApplication::notifyInternal (this=0x7fff81c7c510, receiver=0x18378e0, event=0x7fff81c7b280) at kernel/qcoreapplication.cpp:583
#22 0x00007f357669ce14 in QKeyMapper::sendKeyEvent (keyWidget=0x18378e0, grab=<value optimized out>, type=QEvent::KeyPress, code=16777270, modifiers={i = -2117617760}, text=@0x7fff81c7b790, 
    autorepeat=false, count=1, nativeScanCode=73, nativeVirtualKey=65476, nativeModifiers=16) at kernel/qkeymapper_x11.cpp:1652
#23 0x00007f357669eea7 in QKeyMapperPrivate::translateKeyEvent (this=0x10eea40, keyWidget=0x18378e0, event=0x7fff81c7bf70, grab=208) at kernel/qkeymapper_x11.cpp:1623
#24 0x00007f357667b4a8 in QApplication::x11ProcessEvent (this=0x7fff81c7c510, event=0x7fff81c7bf70) at kernel/qapplication_x11.cpp:3055
#25 0x00007f35766a0724 in x11EventSourceDispatch (s=0x10c2080, callback=0, user_data=0x0) at kernel/qguieventdispatcher_glib.cpp:142
#26 0x00007f3572c54aa2 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#27 0x00007f3572c5821d in g_main_context_iterate () from /usr/lib/libglib-2.0.so.0
#28 0x00007f3572c583db in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#29 0x00007f3577288cdf in QEventDispatcherGlib::processEvents (this=0x1094170, flags=<value optimized out>) at kernel/qeventdispatcher_glib.cpp:319
#30 0x00007f357669ff7f in QGuiEventDispatcherGlib::processEvents (this=0x0, flags=<value optimized out>) at kernel/qguieventdispatcher_glib.cpp:198
#31 0x00007f35772609c2 in QEventLoop::processEvents (this=<value optimized out>, flags={i = -2117615008}) at kernel/qeventloop.cpp:143
#32 0x00007f3577260b55 in QEventLoop::exec (this=0x7fff81c7c2a0, flags={i = -2117614928}) at kernel/qeventloop.cpp:190
#33 0x00007f35772658f7 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:845
#34 0x00007f3579833b19 in kdemain (argc=<value optimized out>, argv=<value optimized out>) at /home/kde-devel/kde/src/KDE/kdebase/apps/konqueror/src/konqmain.cpp:257
#35 0x00007f3574a3e546 in __libc_start_main () from /lib/libc.so.6
#36 0x00000000004007c9 in _start ()

Comment 6 Dario Andres 2009-02-18 21:14:30 UTC
Still valid here using:

Qt: 4.5.0-rc1
KDE: 4.2.63 (KDE 4.2.63 (KDE 4.3 >= 20090212))
kdelibs svn rev. 927117 / kdebase svn rev. 927117
on ArchLinux i686 - Kernel 2.6.28.4
Comment 7 Dario Andres 2009-05-13 06:19:25 UTC
From "static void setCaretInvisibleIfNeeded(KHTMLPart *part)":

"khtml::KHTMLPartAccessor::caret(part).caretPos().node()" is 0
Just checking that pointer before accessing to its member will fix the crash
Comment 8 Dario Andres 2009-05-13 06:27:34 UTC
Created attachment 33603 [details]
Simple Proposed patch
Comment 9 Raúl 2009-08-14 11:14:05 UTC
Hello. Still found on 4.3.
Regards.
Comment 10 Jaime Torres 2009-08-14 18:11:29 UTC
@Dario: Use reviewboard to speed up your patch adoption.

This also happens to kmail in trunk (4.3.63):

Application: KMail (kmail), signal: Segmentation fault
[KCrash Handler]
#5  0x00007fe77b2b9ba1 in setCaretInvisibleIfNeeded (part=0x161be50) at /g/kde4svn/kdelibs/khtml/khtml_part.cpp:2846
#6  0x00007fe77b2b9e58 in KHTMLPart::setCaretMode (this=0x161be50, enable=false) at /g/kde4svn/kdelibs/khtml/khtml_part.cpp:2862
#7  0x00007fe77b2cacbd in KHTMLPart::qt_metacall (this=0x161be50, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x7fffa7ddefc0) at /g/kde4svn/build/kdelibs/khtml/khtml_part.moc:337
#8  0x00007fe77fd58fa4 in QMetaObject::activate (sender=0x15fe040, from_signal_index=<value optimized out>, to_signal_index=6, argv=0x0) at /g/kde4svn/qt-copy/src/corelib/kernel/qobject.cpp:3120
#9  0x00007fe77e970a67 in QAction::triggered (this=0x0, _t1=false) at .moc/debug-shared/moc_qaction.cpp:236
#10 0x00007fe77e971e00 in QAction::activate (this=0x15fe040, event=<value optimized out>) at /g/kde4svn/qt-copy/src/gui/kernel/qaction.cpp:1160
#11 0x00007fe77e975412 in QAction::event (this=0x15fe040, e=0x7fffa7ddf540) at /g/kde4svn/qt-copy/src/gui/kernel/qaction.cpp:1079
#12 0x00007fe78303b073 in KAction::event (this=0x15fe040, event=0x7fffa7ddf540) at /g/kde4svn/kdelibs/kdeui/actions/kaction.cpp:88
#13 0x00007fe77e976fbd in QApplicationPrivate::notify_helper (this=0x1148db0, receiver=0x15fe040, e=0x7fffa7ddf540) at /g/kde4svn/qt-copy/src/gui/kernel/qapplication.cpp:4057
#14 0x00007fe77e97d67e in QApplication::notify (this=0x7fffa7de1d40, receiver=0x15fe040, e=0x7fffa7ddf540) at /g/kde4svn/qt-copy/src/gui/kernel/qapplication.cpp:4022
#15 0x00007fe7830f7ece in KApplication::notify (this=0x7fffa7de1d40, receiver=0x15fe040, event=0x7fffa7ddf540) at /g/kde4svn/kdelibs/kdeui/kernel/kapplication.cpp:302
#16 0x00007fe77fd41173 in QCoreApplication::notifyInternal (this=0x7fffa7de1d40, receiver=0x15fe040, event=0x7fffa7ddf540) at /g/kde4svn/qt-copy/src/corelib/kernel/qcoreapplication.cpp:610
#17 0x00007fe77e9b0e4a in QShortcutMap::dispatchEvent (this=<value optimized out>, e=0x7fffa7ddfa60) at ../../include/QtCore/../../../../kde4svn/qt-copy/src/corelib/kernel/qcoreapplication.h:213
#18 0x00007fe77e9b300c in QShortcutMap::tryShortcutEvent (this=0x1148ec8, o=<value optimized out>, e=0x7fffa7ddfa60) at /g/kde4svn/qt-copy/src/gui/kernel/qshortcutmap.cpp:369
#19 0x00007fe77e97e726 in QApplication::notify (this=0x7fffa7de1d40, receiver=0x153b280, e=0x7fffa7ddfa60) at /g/kde4svn/qt-copy/src/gui/kernel/qapplication.cpp:3646
#20 0x00007fe7830f7ece in KApplication::notify (this=0x7fffa7de1d40, receiver=0x153b280, event=0x7fffa7ddfa60) at /g/kde4svn/kdelibs/kdeui/kernel/kapplication.cpp:302
#21 0x00007fe77fd41173 in QCoreApplication::notifyInternal (this=0x7fffa7de1d40, receiver=0x153b280, event=0x7fffa7ddfa60) at /g/kde4svn/qt-copy/src/corelib/kernel/qcoreapplication.cpp:610
#22 0x00007fe77ea11754 in QKeyMapper::sendKeyEvent (keyWidget=0x153b280, grab=<value optimized out>, type=QEvent::KeyPress, code=16777270, modifiers={i = -1478623344}, text=@0x7fffa7ddff80, 
    autorepeat=false, count=1, nativeScanCode=73, nativeVirtualKey=65476, nativeModifiers=16) at /g/kde4svn/qt-copy/src/gui/kernel/qkeymapper_x11.cpp:1675
#23 0x00007fe77ea139c9 in QKeyMapperPrivate::translateKeyEvent (this=0x1195c40, keyWidget=0x153b280, event=0x7fffa7de1870, grab=72) at /g/kde4svn/qt-copy/src/gui/kernel/qkeymapper_x11.cpp:1645
#24 0x00007fe77e9ece6e in QApplication::x11ProcessEvent (this=0x7fffa7de1d40, event=0x7fffa7de1870) at /g/kde4svn/qt-copy/src/gui/kernel/qapplication_x11.cpp:3459
#25 0x00007fe77ea154bc in x11EventSourceDispatch (s=0x114b400, callback=0, user_data=0x0) at /g/kde4svn/qt-copy/src/gui/kernel/qguieventdispatcher_glib.cpp:146
#26 0x00007fe774e510fb in g_main_context_dispatch () from /usr/lib64/libglib-2.0.so.0
#27 0x00007fe774e548cd in ?? () from /usr/lib64/libglib-2.0.so.0
#28 0x00007fe774e54a8b in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0
#29 0x00007fe77fd6d0ef in QEventDispatcherGlib::processEvents (this=0x10a0800, flags=<value optimized out>) at /g/kde4svn/qt-copy/src/corelib/kernel/qeventdispatcher_glib.cpp:324
#30 0x00007fe77ea14c0f in QGuiEventDispatcherGlib::processEvents (this=0x0, flags=<value optimized out>) at /g/kde4svn/qt-copy/src/gui/kernel/qguieventdispatcher_glib.cpp:202
#31 0x00007fe77fd3fcb2 in QEventLoop::processEvents (this=<value optimized out>, flags={i = -1478616224}) at /g/kde4svn/qt-copy/src/corelib/kernel/qeventloop.cpp:149
#32 0x00007fe77fd4007d in QEventLoop::exec (this=0x7fffa7de1ba0, flags={i = -1478616144}) at /g/kde4svn/qt-copy/src/corelib/kernel/qeventloop.cpp:200
#33 0x00007fe77fd42424 in QCoreApplication::exec () at /g/kde4svn/qt-copy/src/corelib/kernel/qcoreapplication.cpp:888
#34 0x00000000004031d5 in main (argc=<value optimized out>, argv=<value optimized out>) at /g/kde4svn/kdepim/kmail/main.cpp:146
Comment 11 Dario Andres 2009-08-14 20:30:55 UTC
@Jaime: the patch was not "approved" by the devs (I asked at #khtml directly); as it was just a dirty workaround to a bad situation (that should not happen).
Comment 12 Manuel Stol 2011-09-20 21:07:46 UTC
Created attachment 63804 [details]
New crash information added by DrKonqi

konqueror (4.7.1 (4.7.1)) on KDE Platform 4.7.1 (4.7.1) using Qt 4.7.4

- What I was doing when the application crashed:
  1. Start op Konqueror.
      Konqueror starts withe its default 'Be free' page.
  2. Press the following keys:
      F2  F3  F4  F5  F6  F7  F8
      F2  F3  F4  F5  F6  F7
  3. Pressing F7 the second time crashes Konqueror.

-- Backtrace (Reduced):
#6  0x00007fcc685677ba in setCaretInvisibleIfNeeded (part=0xab9c40) at /usr/src/debug/kdelibs-4.7.1/khtml/khtml_part.cpp:2846
#7  0x00007fcc6858387a in setCaretMode (enable=false, this=0xab9c40) at /usr/src/debug/kdelibs-4.7.1/khtml/khtml_part.cpp:2862
#8  KHTMLPart::setCaretMode (this=0xab9c40, enable=false) at /usr/src/debug/kdelibs-4.7.1/khtml/khtml_part.cpp:2850
#9  0x00007fcc68593a74 in KHTMLPart::qt_metacall (this=0xab9c40, _c=QMetaObject::InvokeMetaMethod, _id=86, _a=0x7ffff7b320e0) at /usr/src/debug/kdelibs-4.7.1/build/khtml/khtml_part.moc:345
[...]
#11 0x00007fcc7f0b45d2 in QAction::triggered (this=<optimized out>, _t1=false) at .moc/release-shared/moc_qaction.cpp:263
Comment 13 Justin Zobel 2020-12-17 05:23:01 UTC
Thank you for the crash report.

As it has been a while since this was reported, can you please test and confirm if this issue is still occurring or if this bug report can be marked as resolved.

I have set the bug status to "needsinfo" pending your response, please change back to "reported" or "resolved/worksforme" when you respond, thank you.
Comment 14 Bug Janitor Service 2021-01-01 04:34:11 UTC
Dear Bug Submitter,

This bug has been in NEEDSINFO status with no change for at least
15 days. Please provide the requested information as soon as
possible and set the bug status as REPORTED. Due to regular bug
tracker maintenance, if the bug is still in NEEDSINFO status with
no change in 30 days the bug will be closed as RESOLVED > WORKSFORME
due to lack of needed information.

For more information about our bug triaging procedures please read the
wiki located here:
https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

If you have already provided the requested information, please
mark the bug as REPORTED so that the KDE team knows that the bug is
ready to be confirmed.

Thank you for helping us make KDE software even better for everyone!
Comment 15 Raúl 2021-01-01 21:57:21 UTC
Created attachment 134448 [details]
New crash information added by DrKonqi

konqueror (20.12.0) using Qt 5.15.2

- What I was doing when the application crashed:

What I did to reproduce is following what Darío already explained:
"
I can still reproduce the crash when loading the site: www.lanacion.com.ar and pressing F7 several times.
"

-- Backtrace (Reduced):
#4  0x00007fcf69a7ef4f in setCaretInvisibleIfNeeded(KHTMLPart*) (part=0x556d6f716a10) at ./src/khtml_part.cpp:2988
#5  0x00007fd0169aa540 in doActivate<false>(QObject*, int, void**) (sender=0x556d6ffdd480, signal_index=4, argv=0x7ffe984415d0) at kernel/qobject.cpp:3898
#6  0x00007fd017606b62 in QAction::triggered(bool) () at /lib/x86_64-linux-gnu/libQt5Widgets.so.5
#7  0x00007fd0176093a1 in QAction::activate(QAction::ActionEvent) () at /lib/x86_64-linux-gnu/libQt5Widgets.so.5
#8  0x00007fd017609f67 in QAction::event(QEvent*) () at /lib/x86_64-linux-gnu/libQt5Widgets.so.5
Comment 16 Raúl 2021-01-01 22:09:15 UTC
Valgrind log excerpt:

==34965== Conditional jump or move depends on uninitialised value(s)
==34965==    at 0x1C2C3485: ???
==34965==    by 0xD4C7877: ???
==34965== 
==34965== Conditional jump or move depends on uninitialised value(s)
==34965==    at 0x1C2C3485: ???
==34965==    by 0xD0EDCB7: ???
==34965== 
==34965== Invalid read of size 8
==34965==    at 0x1D97BF4F: setCaretInvisibleIfNeeded(KHTMLPart*) (khtml_part.cpp:2988)
==34965==    by 0x686753F: void doActivate<false>(QObject*, int, void**) (qobject.cpp:3898)
==34965==    by 0x57BAB61: QAction::triggered(bool) (in /usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5.15.2)
==34965==    by 0x57BD3A0: QAction::activate(QAction::ActionEvent) (in /usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5.15.2)
==34965==    by 0x57BDF66: QAction::event(QEvent*) (in /usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5.15.2)
==34965==    by 0x57C115E: QApplicationPrivate::notify_helper(QObject*, QEvent*) (in /usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5.15.2)
==34965==    by 0x6830F29: QCoreApplication::notifyInternal2(QObject*, QEvent*) (qcoreapplication.cpp:1063)
==34965==    by 0x602DC7A: QShortcutMap::dispatchEvent(QKeyEvent*) (qshortcutmap.cpp:675)
==34965==    by 0x602E63A: QShortcutMap::tryShortcut(QKeyEvent*) (qshortcutmap.cpp:343)
==34965==    by 0x5FD7CAD: QWindowSystemInterface::handleShortcutEvent(QWindow*, unsigned long, int, QFlags<Qt::KeyboardModifier>, unsigned int, unsigned int, unsigned int, QString const&, bool, unsigned short) (qwindowsysteminterface.cpp:477)
==34965==    by 0x5FFA49A: QGuiApplicationPrivate::processKeyEvent(QWindowSystemInterfacePrivate::KeyEvent*) (qguiapplication.cpp:2395)
==34965==    by 0x5FD464B: QWindowSystemInterface::sendWindowSystemEvents(QFlags<QEventLoop::ProcessEventsFlag>) (qwindowsysteminterface.cpp:1169)
==34965==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
==34965== 
KCrash: crashing... crashRecursionCounter = 2
KCrash: Application Name = konqueror path = /usr/bin pid = 34965
KCrash: Arguments: /usr/bin/konqueror www.lanacion.com.ar 
KCrash: Attempting to start /usr/lib/x86_64-linux-gnu/libexec/drkonqi
Comment 17 Christoph Cullmann 2024-05-06 18:39:16 UTC
Dear user,

KHTML (and KJS) was a long time more or less unmaintained and got removed in KF6.

Please migrate to use a QWebEngine based HTML component.

We will do no further fixes or improvements to the KF5 branches of these components beside important security fixes.

For security issues, please see:

https://kde.org/info/security/

Sorry that we did not fix this issue during the life-time of KHTML.

Greetings
Christoph Cullmann