Version: (using KDE 4.2.2) OS: Linux Installed from: Compiled From Sources When visiting www.mezzacotta.net, which has a computer generated SVG file in it, konqueror crashes. The SVG file is likely to be well formed, not only because it is computer generated but also because both FireFox and webkit (web browser plasmoid) load and render it fine. I ran konqueror from SVN with full debugging and got the following output at the end: konqueror(2710)/khtml (xml) DOM::DocumentImpl::determineParseMode: using strict parseMode konqueror(2710) DOM::DocumentImpl::createSVGElement: "{ns:2,[http://www.w3.org/2000/svg] local:323,[svg]}" konqueror(2710) DOM::DocumentImpl::createSVGElement: svg text: "{ns:2,[http://www.w3.org/2000/svg] local:200,[text]}" konqueror(2710) WebCore::SVGSVGElement::parseMappedAttribute: parse attribute: "svg" "http://www.w3.org/2000/svg" konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: parse: "svg" "http://www.w3.org/2000/svg" id= 262467 konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: propId 0 konqueror(2710) WebCore::SVGSVGElement::parseMappedAttribute: parse attribute: "xmlns" "http://www.w3.org/2000/svg" konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: parse: "xmlns" "http://www.w3.org/2000/svg" id= 262701 konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: propId 0 konqueror(2710) WebCore::SVGSVGElement::parseMappedAttribute: parse attribute: "xlink" "http://www.w3.org/1999/xlink" konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: parse: "xlink" "http://www.w3.org/1999/xlink" id= 262702 konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: propId 0 konqueror(2710) WebCore::SVGSVGElement::parseMappedAttribute: parse attribute: "version" "1.0" konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: parse: "version" "1.0" id= 65744 konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: propId 0 konqueror(2710) WebCore::SVGSVGElement::parseMappedAttribute: parse attribute: "width" "820" konqueror(2710) WebCore::SVGSVGElement::parseMappedAttribute: set width "820" konqueror(2710) WebCore::SVGElement::addCSSProperty: called with: 106 "820" konqueror(2710) WebCore::SVGSVGElement::parseMappedAttribute: parse attribute: "height" "320" konqueror(2710) WebCore::SVGSVGElement::parseMappedAttribute: set height "320" konqueror(2710) WebCore::SVGElement::addCSSProperty: called with: 50 "320" konqueror(2710) WebCore::SVGSVGElement::createRenderer: create RenderSVGRoot from <svg> element konqueror(2710) DOM::DocumentImpl::createSVGElement: "{ns:2,[http://www.w3.org/2000/svg] local:271,[defs]}" konqueror(2710) DOM::DocumentImpl::createSVGElement: svg text: "{ns:2,[http://www.w3.org/2000/svg] local:200,[text]}" konqueror(2710) DOM::DocumentImpl::createSVGElement: "{ns:2,[http://www.w3.org/2000/svg] local:321,[rect]}" konqueror(2710) DOM::DocumentImpl::createSVGElement: svg text: "{ns:2,[http://www.w3.org/2000/svg] local:200,[text]}" konqueror(2710) WebCore::SVGRectElement::parseMappedAttribute: called with "id" "panel" konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: parse: "id" "panel" id= 65764 konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: propId 0 konqueror(2710) WebCore::SVGRectElement::parseMappedAttribute: called with "x" "10" konqueror(2710) WebCore::SVGRectElement::parseMappedAttribute: called with "y" "10" konqueror(2710) WebCore::SVGRectElement::parseMappedAttribute: called with "width" "250" konqueror(2710) WebCore::SVGRectElement::parseMappedAttribute: called with "height" "160" konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: send svg load event konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: true true konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: false konqueror(2710) DOM::DocumentImpl::createSVGElement: "{ns:2,[http://www.w3.org/2000/svg] local:310,[linearGradient]}" konqueror(2710) DOM::DocumentImpl::createSVGElement: svg text: "{ns:2,[http://www.w3.org/2000/svg] local:200,[text]}" konqueror(2710) WebCore::SVGURIReference::parseMappedAttribute: parse "id" "background_fill" konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: parse: "id" "background_fill" id= 65764 konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: propId 0 konqueror(2710) DOM::DocumentImpl::createSVGElement: "{ns:2,[http://www.w3.org/2000/svg] local:322,[stop]}" konqueror(2710) DOM::DocumentImpl::createSVGElement: svg text: "{ns:2,[http://www.w3.org/2000/svg] local:200,[text]}" konqueror(2710) WebCore::SVGStopElement::parseMappedAttribute: parse offset: "0" konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: parse: "style" "stop-color:#92927c; stop-opacity:1" id= 65626 konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: handle style konqueror(2710) WebCore::SVGGradientElement::canvasResource: request gradient paint server konqueror(2710) WebCore::SVGPaintServerLinearGradient::SVGPaintServerLinearGradient: create LinearGradient Paint server konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: send svg load event konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: true true konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: false konqueror(2710) DOM::DocumentImpl::createSVGElement: "{ns:2,[http://www.w3.org/2000/svg] local:322,[stop]}" konqueror(2710) DOM::DocumentImpl::createSVGElement: svg text: "{ns:2,[http://www.w3.org/2000/svg] local:200,[text]}" konqueror(2710) WebCore::SVGStopElement::parseMappedAttribute: parse offset: "1" konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: parse: "style" "stop-color:#a6a9a1; stop-opacity:1" id= 65626 konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: handle style konqueror(2710) WebCore::SVGGradientElement::canvasResource: request gradient paint server konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: send svg load event konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: true true konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: false konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: send svg load event konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: true true konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: false konqueror(2710) DOM::DocumentImpl::createSVGElement: "{ns:2,[http://www.w3.org/2000/svg] local:310,[linearGradient]}" konqueror(2710) DOM::DocumentImpl::createSVGElement: svg text: "{ns:2,[http://www.w3.org/2000/svg] local:200,[text]}" konqueror(2710) WebCore::SVGURIReference::parseMappedAttribute: parse "id" "background_panel_1" konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: parse: "id" "background_panel_1" id= 65764 konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: propId 0 konqueror(2710) WebCore::SVGURIReference::parseMappedAttribute: parse "href" "#background_fill" konqueror(2710) WebCore::SVGURIReference::parseMappedAttribute: set href base value "#background_fill" konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: send svg load event konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: true true konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: false konqueror(2710) DOM::DocumentImpl::createSVGElement: "{ns:2,[http://www.w3.org/2000/svg] local:310,[linearGradient]}" konqueror(2710) DOM::DocumentImpl::createSVGElement: svg text: "{ns:2,[http://www.w3.org/2000/svg] local:200,[text]}" konqueror(2710) WebCore::SVGURIReference::parseMappedAttribute: parse "id" "background_panel_2" konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: parse: "id" "background_panel_2" id= 65764 konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: propId 0 konqueror(2710) WebCore::SVGURIReference::parseMappedAttribute: parse "href" "#background_fill" konqueror(2710) WebCore::SVGURIReference::parseMappedAttribute: set href base value "#background_fill" konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: send svg load event konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: true true konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: false konqueror(2710) DOM::DocumentImpl::createSVGElement: "{ns:2,[http://www.w3.org/2000/svg] local:310,[linearGradient]}" konqueror(2710) DOM::DocumentImpl::createSVGElement: svg text: "{ns:2,[http://www.w3.org/2000/svg] local:200,[text]}" konqueror(2710) WebCore::SVGURIReference::parseMappedAttribute: parse "id" "background_panel_3" konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: parse: "id" "background_panel_3" id= 65764 konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: propId 0 konqueror(2710) WebCore::SVGURIReference::parseMappedAttribute: parse "href" "#background_fill" konqueror(2710) WebCore::SVGURIReference::parseMappedAttribute: set href base value "#background_fill" konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: send svg load event konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: true true konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: false konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: send svg load event konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: true true konqueror(2710) WebCore::SVGElement::sendSVGLoadEventIfPossible: false konqueror(2710) DOM::DocumentImpl::createSVGElement: "{ns:2,[http://www.w3.org/2000/svg] local:267,[clipPath]}" konqueror(2710) DOM::DocumentImpl::createSVGElement: svg text: "{ns:2,[http://www.w3.org/2000/svg] local:200,[text]}" konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: parse: "id" "panel_clip" id= 65764 konqueror(2710) WebCore::SVGStyledElement::parseMappedAttribute: propId 0 konqueror(2710) DOM::DocumentImpl::createSVGElement: "{ns:2,[http://www.w3.org/2000/svg] local:329,[use]}" konqueror(2710) DOM::DocumentImpl::createSVGElement: svg text: "{ns:2,[http://www.w3.org/2000/svg] local:200,[text]}" konqueror(2710) WebCore::SVGURIReference::parseMappedAttribute: parse "href" "#panel" konqueror(2710) WebCore::SVGURIReference::parseMappedAttribute: set href base value "#panel" konqueror: /home/kde-devel/kdesvn/kdelibs/khtml/svg/SVGUseElement.cpp:551: void WebCore::SVGUseElement::buildShadowTree(WebCore::SVGElement*, WebCore::SVGElementInstance*): Assertion `newChildPtr' failed. KCrash: crashing... crashRecursionCounter = 2 KCrash: Application Name = konqueror path = <unknown> pid = 2710 sock_file=/home/kde-devel/.kdesvn/socket-thoth/kdeinit4__1 I had a look at the line with that assert on it but it was not obvious what would make it fail. This consitently happens every time I view mezzacotta in either konqueror (or akregator). Below is the backtrace, just in case it helps. Application: Konqueror (konqueror), signal SIGABRT 0x0000003c48ea7f81 in nanosleep () from /lib64/libc.so.6 [Current thread is 1 (Thread 0x7f89d0914750 (LWP 2710))] Thread 1 (Thread 0x7f89d0914750 (LWP 2710)): [KCrash Handler] #5 0x0000003c48e32f05 in raise () from /lib64/libc.so.6 #6 0x0000003c48e34a73 in abort () from /lib64/libc.so.6 #7 0x0000003c48e2bef9 in __assert_fail () from /lib64/libc.so.6 #8 0x00007f89c5fbdc1f in WebCore::SVGUseElement::buildShadowTree (this=0x2586070, target=0x2581190, targetInstance=0x2585f60) at /home/kde-devel/kdesvn/kdelibs/khtml/svg/SVGUseElement.cpp:551 #9 0x00007f89c5fbe6a0 in WebCore::SVGUseElement::buildPendingResource (this=0x2586070) at /home/kde-devel/kdesvn/kdelibs/khtml/svg/SVGUseElement.cpp:330 #10 0x00007f89c5d227a0 in DOM::NodeBaseImpl::addChild (this=0x2585dc0, newChild=0x2586070) at /home/kde-devel/kdesvn/kdelibs/khtml/xml/dom_nodeimpl.cpp:1808 #11 0x00007f89c5d42179 in khtml::XMLHandler::startElement (this=0x2522d68, namespaceURI=<value optimized out>, qName=<value optimized out>, atts=@0x2516fa8) at /home/kde-devel/kdesvn/kdelibs/khtml/xml/xml_tokenizer.cpp:215 #12 0x00007f89d31680da in QXmlSimpleReaderPrivate::processElementEmptyTag (this=0x2516f20) at /var/tmp/qt-x11-src-4.5.1/src/xml/sax/qxml.cpp:3987 #13 0x00007f89d316a0b9 in QXmlSimpleReaderPrivate::parseElement (this=0x2516f20) at /var/tmp/qt-x11-src-4.5.1/src/xml/sax/qxml.cpp:3955 #14 0x00007f89d3169518 in QXmlSimpleReaderPrivate::parseContent (this=0x2516f20) at /var/tmp/qt-x11-src-4.5.1/src/xml/sax/qxml.cpp:4408 #15 0x00007f89d316a00b in QXmlSimpleReaderPrivate::parseElement (this=0x2516f20) at /var/tmp/qt-x11-src-4.5.1/src/xml/sax/qxml.cpp:3934 #16 0x00007f89d3169518 in QXmlSimpleReaderPrivate::parseContent (this=0x2516f20) at /var/tmp/qt-x11-src-4.5.1/src/xml/sax/qxml.cpp:4408 #17 0x00007f89d316a00b in QXmlSimpleReaderPrivate::parseElement (this=0x2516f20) at /var/tmp/qt-x11-src-4.5.1/src/xml/sax/qxml.cpp:3934 #18 0x00007f89d316fb1f in QXmlSimpleReaderPrivate::parseBeginOrContinue (this=0x2516f20, state=<value optimized out>, incremental=true) at /var/tmp/qt-x11-src-4.5.1/src/xml/sax/qxml.cpp:3479 #19 0x00007f89d316ff94 in QXmlSimpleReader::parseContinue (this=<value optimized out>) at /var/tmp/qt-x11-src-4.5.1/src/xml/sax/qxml.cpp:3456 #20 0x00007f89c5d40a16 in khtml::XMLTokenizer::write (this=0x2522d30, str=<value optimized out>, appendData=<value optimized out>) at /home/kde-devel/kdesvn/kdelibs/khtml/xml/xml_tokenizer.cpp:481 #21 0x00007f89c5ccbf15 in KHTMLPart::write (this=<value optimized out>, data=0x2515f28 ".0\" encoding=\"UTF-8\" standalone=\"no\"?>\n<svg\n xmlns:svg=\"http://www.w3.org/2000/svg\"\n xmlns=\"http://www.w3.org/2000/svg\"\n xmlns:xlink=\"http://www.w3.org/1999/xlink\"\n version=\"1.0\"\n width=\"820"..., len=<value optimized out>) at /home/kde-devel/kdesvn/kdelibs/khtml/khtml_part.cpp:2093 #22 0x00007f89c5cce107 in KHTMLPart::slotData (this=0x21f91a0, kio_job=<value optimized out>, data=@0x7fffdc745f70) at /home/kde-devel/kdesvn/kdelibs/khtml/khtml_part.cpp:1778 #23 0x00007f89c5cd4c18 in KHTMLPart::qt_metacall (this=0x21f91a0, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x7fffdc745c50) at /home/kde-devel/kdesvn/build/kdelibs/khtml/khtml_part.moc:271 #24 0x00007f89d1f29751 in QMetaObject::activate (sender=0x225c770, from_signal_index=<value optimized out>, to_signal_index=40, argv=0xffffffffffffffff) at /var/tmp/qt-x11-src-4.5.1/src/corelib/kernel/qobject.cpp:3111 #25 0x00007f89d378b934 in KIO::TransferJob::data (this=0xa96, _t1=0x225c770, _t2=<value optimized out>) at /home/kde-devel/kdesvn/build/kdelibs/kio/jobclasses.moc:364 #26 0x00007f89d3795639 in KIO::TransferJob::qt_metacall (this=0x225c770, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0x7fffdc745d60) at /home/kde-devel/kdesvn/build/kdelibs/kio/jobclasses.moc:344 #27 0x00007f89d1f29751 in QMetaObject::activate (sender=0x21f6840, from_signal_index=<value optimized out>, to_signal_index=4, argv=0xffffffffffffffff) at /var/tmp/qt-x11-src-4.5.1/src/corelib/kernel/qobject.cpp:3111 #28 0x00007f89d38299c2 in KIO::SlaveInterface::data (this=0xa96, _t1=<value optimized out>) at /home/kde-devel/kdesvn/build/kdelibs/kio/slaveinterface.moc:140 #29 0x00007f89d382b0a8 in KIO::SlaveInterface::dispatch (this=0x21f6840, _cmd=100, rawdata=<value optimized out>) at /home/kde-devel/kdesvn/kdelibs/kio/kio/slaveinterface.cpp:163 #30 0x00007f89d382b9e8 in KIO::SlaveInterface::dispatch (this=0x21f6840) at /home/kde-devel/kdesvn/kdelibs/kio/kio/slaveinterface.cpp:91 #31 0x00007f89d38209ca in KIO::Slave::gotInput (this=0x21f6840) at /home/kde-devel/kdesvn/kdelibs/kio/kio/slave.cpp:322 #32 0x00007f89d3821a90 in KIO::Slave::qt_metacall (this=0x21f6840, _c=QMetaObject::InvokeMetaMethod, _id=0, _a=0x7fffdc7460b0) at /home/kde-devel/kdesvn/build/kdelibs/kio/slave.moc:76 #33 0x00007f89d1f29751 in QMetaObject::activate (sender=0x2220250, from_signal_index=<value optimized out>, to_signal_index=4, argv=0xffffffffffffffff) at /var/tmp/qt-x11-src-4.5.1/src/corelib/kernel/qobject.cpp:3111 #34 0x00007f89d376833b in KIO::ConnectionPrivate::dequeue (this=0x2233f30) at /home/kde-devel/kdesvn/kdelibs/kio/kio/connection.cpp:82 #35 0x00007f89d37690e2 in KIO::Connection::qt_metacall (this=0x2220250, _c=QMetaObject::InvokeMetaMethod, _id=0, _a=0x218fc10) at /home/kde-devel/kdesvn/build/kdelibs/kio/connection.moc:73 #36 0x00007f89d1f2450d in QObject::event (this=0x2220250, e=0x2510820) at /var/tmp/qt-x11-src-4.5.1/src/corelib/kernel/qobject.cpp:1109 #37 0x00007f89d132b39f in QApplicationPrivate::notify_helper (this=0x1c466e0, receiver=0x2220250, e=0x2510820) at /var/tmp/qt-x11-src-4.5.1/src/gui/kernel/qapplication.cpp:4057 #38 0x00007f89d132edde in QApplication::notify (this=0x7fffdc746c60, receiver=0x2220250, e=0x2510820) at /var/tmp/qt-x11-src-4.5.1/src/gui/kernel/qapplication.cpp:3953 #39 0x00007f89d2d2948e in KApplication::notify (this=0x7fffdc746c60, receiver=0x2220250, event=0x2510820) at /home/kde-devel/kdesvn/kdelibs/kdeui/kernel/kapplication.cpp:307 #40 0x00007f89d1f14994 in QCoreApplication::notifyInternal (this=0x7fffdc746c60, receiver=0x2220250, event=0x2510820) at /var/tmp/qt-x11-src-4.5.1/src/corelib/kernel/qcoreapplication.cpp:610 #41 0x00007f89d1f15a76 in QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x1c29150) at /var/tmp/qt-x11-src-4.5.1/src/corelib/kernel/qcoreapplication.h:213 #42 0x00007f89d1f3e0d3 in QCoreApplication::sendPostedEvents () at /var/tmp/qt-x11-src-4.5.1/src/corelib/kernel/qcoreapplication.h:218 #43 postEventSourceDispatch (s=<value optimized out>) at /var/tmp/qt-x11-src-4.5.1/src/corelib/kernel/qeventdispatcher_glib.cpp:209 #44 0x00000033336377bb in g_main_context_dispatch () from /lib64/libglib-2.0.so.0 #45 0x000000333363af8d in ?? () from /lib64/libglib-2.0.so.0 #46 0x000000333363b14b in g_main_context_iteration () from /lib64/libglib-2.0.so.0 #47 0x00007f89d1f3e3be in QEventDispatcherGlib::processEvents (this=0x1c28920, flags=<value optimized out>) at /var/tmp/qt-x11-src-4.5.1/src/corelib/kernel/qeventdispatcher_glib.cpp:324 #48 0x00007f89d13b8f6f in QGuiEventDispatcherGlib::processEvents (this=0xa96, flags=<value optimized out>) at /var/tmp/qt-x11-src-4.5.1/src/gui/kernel/qguieventdispatcher_glib.cpp:202 #49 0x00007f89d1f13d25 in QEventLoop::processEvents (this=<value optimized out>, flags=@0x7fffdc7469b0) at /var/tmp/qt-x11-src-4.5.1/src/corelib/kernel/qeventloop.cpp:149 #50 0x00007f89d1f1406a in QEventLoop::exec (this=0x7fffdc7469f0, flags=@0x7fffdc746a00) at /var/tmp/qt-x11-src-4.5.1/src/corelib/kernel/qeventloop.cpp:200 #51 0x00007f89d1f15e19 in QCoreApplication::exec () at /var/tmp/qt-x11-src-4.5.1/src/corelib/kernel/qcoreapplication.cpp:888 #52 0x00007f89d4502c12 in kdemain (argc=<value optimized out>, argv=<value optimized out>) at /home/kde-devel/kdesvn/kdebase/apps/konqueror/src/konqmain.cpp:257 #53 0x0000003c48e1e576 in __libc_start_main () from /lib64/libc.so.6 #54 0x00000000004007b9 in _start ()
Created attachment 33370 [details] The svg file that (presumably) causes the crash This is probably the SVg that causes issues, as I believe only this SVG is loaded by akregator when it too crashes.
*** This bug has been marked as a duplicate of bug 185555 ***