Version: 4.1.96 (KDE 4.1.96 (KDE 4.2 RC1)) (using 4.1.96 (KDE 4.1.96 (KDE 4.2 RC1)), Debian packages) Compiler: cc OS: Linux (i686) release 2.6.26-1-686 I can consistently crash konqueror by visiting the site: http://shop1auto.rtrk.com.au firefox renders correctly. $ konqueror http://shop1auto.rtrk.com.au konqueror(12831) FixHostUriFilter::filterUri: FixHostUriFilter::filterUri: KUrl("http://shop1auto.rtrk.com.au") konqueror(12831) KonqViewManager::setCurrentProfile: "webbrowsing" localPath= "/home/mark/.kde4/share/apps/konqueror/profiles/webbrowsing" konqueror(12831) KHTMLRun::foundMimeType: finished KCrash: Application 'konqueror' crashing... sock_file=/home/mark/.kde4/socket-hp/kdeinit4__0 Application: Konqueror (konqueror), signal SIGABRT [Current thread is 0 (LWP 12831)] Thread 2 (Thread 0xb3f66b90 (LWP 12846)): #0 0xb7ef8424 in __kernel_vsyscall () #1 0xb61fa352 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/i686/cmov/libpthread.so.0 #2 0xb7d8c854 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/i686/cmov/libc.so.6 #3 0xb700251c in QWaitCondition::wait (this=0x913e780, mutex=0x913e77c, time=30000) at thread/qwaitcondition_unix.cpp:80 #4 0xb6ff77c6 in QThreadPoolThread::run (this=0x95ca358) at concurrent/qthreadpool.cpp:135 #5 0xb700152e in QThreadPrivate::start (arg=0x95ca358) at thread/qthread_unix.cpp:185 #6 0xb61f64c0 in start_thread () from /lib/i686/cmov/libpthread.so.0 #7 0xb7d7e6de in clone () from /lib/i686/cmov/libc.so.6 Thread 1 (Thread 0xb5edd6c0 (LWP 12831)): [KCrash Handler] #6 0xb7ef8424 in __kernel_vsyscall () #7 0xb7cc9640 in raise () from /lib/i686/cmov/libc.so.6 #8 0xb7ccb018 in abort () from /lib/i686/cmov/libc.so.6 #9 0xb7d0c653 in malloc_printerr () from /lib/i686/cmov/libc.so.6 #10 0xb7d0e7c5 in free () from /lib/i686/cmov/libc.so.6 #11 0xb27c297c in ~CSSParser (this=0xbf912208) at ../../khtml/css/cssparser.cpp:135 #12 0xb27aa8b4 in DOM::CSSStyleSheetImpl::parseString (this=0x9749470, string=@0xbf9122ac, strict=<value optimized out>) at ../../khtml/css/css_stylesheetimpl.cpp:287 #13 0xb27b10bb in DOM::CSSImportRuleImpl::setStyleSheet (this=0x956e8f0, url=@0x96d8ad0, sheetStr=@0x96d8b0c, charset=@0xbf912324, mimetype=@0xbf91231c) at ../../khtml/css/css_ruleimpl.cpp:156 #14 0xb280683c in khtml::CachedCSSStyleSheet::checkNotify (this=0x96d8ac8) at ../../khtml/misc/loader.cpp:301 #15 0xb2806bb6 in khtml::CachedCSSStyleSheet::data (this=0x96d8ac8, buffer=@0x96b5794, eof=true) at ../../khtml/misc/loader.cpp:291 #16 0xb28010d2 in khtml::Loader::slotFinished (this=0x950eb00, job=0x9749fa0) at ../../khtml/misc/loader.cpp:1402 #17 0xb2807207 in khtml::Loader::qt_metacall (this=0x950eb00, _c=QMetaObject::InvokeMetaMethod, _id=3, _a=0xbf91250c) at ./loader.moc:129 #18 0xb7105be0 in QMetaObject::activate (sender=0x9749fa0, from_signal_index=7, to_signal_index=7, argv=0xbf91250c) at kernel/qobject.cpp:3031 #19 0xb7106962 in QMetaObject::activate (sender=0x9749fa0, m=0xb747c4a8, local_signal_index=3, argv=0xbf91250c) at kernel/qobject.cpp:3101 #20 0xb7321973 in KJob::result (this=0x9749fa0, _t1=0x9749fa0) at ./kjob.moc:186 #21 0xb7321e89 in KJob::emitResult (this=0x9749fa0) at ../../kdecore/jobs/kjob.cpp:294 #22 0xb791bdd5 in KIO::SimpleJob::slotFinished (this=0x9749fa0) at ../../kio/kio/job.cpp:489 #23 0xb7921853 in KIO::TransferJob::slotFinished (this=0x9749fa0) at ../../kio/kio/job.cpp:957 #24 0xb7922a4b in KIO::TransferJob::qt_metacall (this=0x9749fa0, _c=QMetaObject::InvokeMetaMethod, _id=7, _a=0xbf912748) at ./jobclasses.moc:336 #25 0xb7105be0 in QMetaObject::activate (sender=0x94c1578, from_signal_index=8, to_signal_index=8, argv=0x0) at kernel/qobject.cpp:3031 #26 0xb7106962 in QMetaObject::activate (sender=0x94c1578, m=0xb7ad8a64, local_signal_index=4, argv=0x0) at kernel/qobject.cpp:3101 #27 0xb79e7e77 in KIO::SlaveInterface::finished (this=0x94c1578) at ./slaveinterface.moc:163 #28 0xb79ebc47 in KIO::SlaveInterface::dispatch (this=0x94c1578, _cmd=104, rawdata=@0xbf912914) at ../../kio/kio/slaveinterface.cpp:175 #29 0xb79e8357 in KIO::SlaveInterface::dispatch (this=0x94c1578) at ../../kio/kio/slaveinterface.cpp:91 #30 0xb79d975d in KIO::Slave::gotInput (this=0x94c1578) at ../../kio/kio/slave.cpp:322 #31 0xb79da8d3 in KIO::Slave::qt_metacall (this=0x94c1578, _c=QMetaObject::InvokeMetaMethod, _id=2, _a=0xbf912a28) at ./slave.moc:75 #32 0xb7105be0 in QMetaObject::activate (sender=0x9418ba0, from_signal_index=4, to_signal_index=4, argv=0x0) at kernel/qobject.cpp:3031 #33 0xb7106962 in QMetaObject::activate (sender=0x9418ba0, m=0xb7ad5540, local_signal_index=0, argv=0x0) at kernel/qobject.cpp:3101 #34 0xb78e2757 in KIO::Connection::readyRead (this=0x9418ba0) at ./connection.moc:84 #35 0xb78e4819 in KIO::ConnectionPrivate::dequeue (this=0x95d2760) at ../../kio/kio/connection.cpp:82 #36 0xb78e49a6 in KIO::Connection::qt_metacall (this=0x9418ba0, _c=QMetaObject::InvokeMetaMethod, _id=1, _a=0x9680f90) at ./connection.moc:72 #37 0xb70fed7b in QMetaCallEvent::placeMetaCall (this=0x974af30, object=0x9418ba0) at kernel/qobject.cpp:529 #38 0xb71008f1 in QObject::event (this=0x9418ba0, e=0x974af30) at kernel/qobject.cpp:1155 #39 0xb67e679c in QApplicationPrivate::notify_helper (this=0x90fd518, receiver=0x9418ba0, e=0x974af30) at kernel/qapplication.cpp:3803 #40 0xb67ee61e in QApplication::notify (this=0xbf9133b8, receiver=0x9418ba0, e=0x974af30) at kernel/qapplication.cpp:3393 #41 0xb76577fd in KApplication::notify (this=0xbf9133b8, receiver=0x9418ba0, event=0x974af30) at ../../kdeui/kernel/kapplication.cpp:307 #42 0xb70f10e1 in QCoreApplication::notifyInternal (this=0xbf9133b8, receiver=0x9418ba0, event=0x974af30) at kernel/qcoreapplication.cpp:587 #43 0xb70f1d65 in QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x90efed8) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:209 #44 0xb70f1f5d in QCoreApplication::sendPostedEvents (receiver=0x0, event_type=0) at kernel/qcoreapplication.cpp:1091 #45 0xb711b99f in postEventSourceDispatch (s=0x90ffae0) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:214 #46 0xb62421b8 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0 #47 0xb6245853 in ?? () from /usr/lib/libglib-2.0.so.0 #48 0x090ffa58 in ?? () #49 0x00000000 in ?? () Mark
==29545== Invalid read of size 2 ==29545== at 0x16903864: DOM::CSSParser::lex() (tokenizer.cpp:725) ==29545== by 0x169041F3: DOM::CSSParser::lex(void*) (cssparser.cpp:2572) ==29545== by 0x1693111A: _ZL8cssyylexP7YYSTYPE (parser.cpp:356) ==29545== by 0x1693167B: cssyyparse(void*) (parser.cpp:1946) ==29545== by 0x1690CD12: DOM::CSSParser::runParser(int) (cssparser.cpp:166) ==29545== by 0x1690D477: DOM::CSSParser::parseSheet(DOM::CSSStyleSheetImpl*, DOM::DOMString const&) (cssparser.cpp:184) ==29545== by 0x168EA73A: DOM::CSSStyleSheetImpl::parseString(DOM::DOMString const&, bool) (css_stylesheetimpl.cpp:286) ==29545== by 0x168F0DB3: DOM::CSSImportRuleImpl::setStyleSheet(DOM::DOMString const&, DOM::DOMString const&, DOM::DOMString const&, DOM::DOMString const&) (css_ruleimpl.cpp:156) ==29545== by 0x1694D68B: khtml::CachedCSSStyleSheet::checkNotify() (loader.cpp:301) ==29545== by 0x16954663: khtml::CachedCSSStyleSheet::data(QBuffer&, bool) (loader.cpp:291) ==29545== by 0x1694FDBD: khtml::Loader::slotFinished(KJob*) (loader.cpp:1402) ==29545== by 0x1695021D: khtml::Loader::qt_metacall(QMetaObject::Call, int, void**) (loader.moc:129) ==29545== by 0x7556A3A: QMetaObject::activate(QObject*, int, int, void**) (qobject.cpp:3028) ==29545== by 0x7556EB0: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3101) ==29545== by 0x6DF0044: KJob::result(KJob*) (kjob.moc:186) ==29545== by 0x6DF0528: KJob::emitResult() (kjob.cpp:294) ==29545== by 0x5B1FA66: KIO::SimpleJob::slotFinished() (job.cpp:489) ==29545== by 0x5B1FE32: KIO::TransferJob::slotFinished() (job.cpp:957) ==29545== by 0x5B2650D: KIO::TransferJob::qt_metacall(QMetaObject::Call, int, void**) (jobclasses.moc:336) ==29545== by 0x7556A3A: QMetaObject::activate(QObject*, int, int, void**) (qobject.cpp:3028) ==29545== by 0x7556EB0: QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (qobject.cpp:3101) ==29545== by 0x5BC4B27: KIO::SlaveInterface::finished() (slaveinterface.moc:163) ==29545== by 0x5BC65D9: KIO::SlaveInterface::dispatch(int, QByteArray const&) (slaveinterface.cpp:175) ==29545== by 0x5BC64B6: KIO::SlaveInterface::dispatch() (slaveinterface.cpp:91) ==29545== by 0x5BBA1B6: KIO::Slave::gotInput() (slave.cpp:322) ==29545== by 0x5BBB3BE: KIO::Slave::qt_metacall(QMetaObject::Call, int, void**) (slave.moc:75)
*** This bug has been marked as a duplicate of bug 167318 ***