Application: kontact (4.4.5) KDE Platform Version: 4.5.00 (KDE 4.5.0) Qt Version: 4.7.0 Operating System: Linux 2.6.32-24-generic i686 Distribution: Ubuntu 10.04.1 LTS -- Information about the crash: - What I was doing when the application crashed: Received new mail in inbox. Selected inbox and kmail crashed when it tried to open the bad html email. Restarting would pop open the window then crash. Deleted the email file from the ~/.kde/share/apps/kmail/mail/inbox/cur and kmail restarted fine. The crash can be reproduced every time. -- Backtrace: Application: Kontact (kontact), signal: Segmentation fault [KCrash Handler] #7 0x02f03087 in KHTMLPart::findFrameParent (this=0x0, callingPart=0x0, f=..., childFrame=0xbfabd70c) at ../../khtml/khtml_part.cpp:5185 #8 0x02f032a4 in KHTMLPart::findFrame (this=0x0, f=...) at ../../khtml/khtml_part.cpp:5215 #9 0x02ffc537 in DOM::HTMLFrameElementImpl::ensureUniqueName (this=0xa51bba0) at ../../khtml/html/html_baseimpl.cpp:277 #10 0x02ffccfc in DOM::HTMLIFrameElementImpl::parseAttribute (this=0xa51bba0, attr=0xa51ba24) at ../../khtml/html/html_baseimpl.cpp:748 #11 0x02fa26a4 in DOM::ElementImpl::setAttributeMap (this=0xa51bba8, list=0xa51b8a8) at ../../khtml/xml/dom_elementimpl.cpp:586 #12 0x02fd8eb1 in khtml::KHTMLParser::parseToken (this=0xa4c6980, t=0xa4c518c) at ../../khtml/html/htmlparser.cpp:278 #13 0x02fd9773 in khtml::HTMLTokenizer::processToken (this=0xa4c5178) at ../../khtml/html/htmltokenizer.cpp:2040 #14 0x02fe12ce in khtml::HTMLTokenizer::parseTag (this=0xa4c5178, src=...) at ../../khtml/html/htmltokenizer.cpp:1501 #15 0x02fe2cb1 in khtml::HTMLTokenizer::write (this=0xa4c5178, str=..., appendData=false) at ../../khtml/html/htmltokenizer.cpp:1798 #16 0x02f85729 in DOM::DocumentImpl::write (this=0xa4d8318, text=...) at ../../khtml/xml/dom_docimpl.cpp:1688 #17 0x02f858eb in DOM::DocumentImpl::write (this=0xa4d8318, text=...) at ../../khtml/xml/dom_docimpl.cpp:1677 #18 0x031ffe6e in DOM::HTMLDocument::write (this=0xbfabdb90, text=...) at ../../khtml/dom/html_document.cpp:218 #19 0xb349d558 in ?? () from /usr/lib/libkmailprivate.so.4 #20 0xb32efbe4 in ?? () from /usr/lib/libkmailprivate.so.4 #21 0xb330c3fb in ?? () from /usr/lib/libkmailprivate.so.4 #22 0xb32ff5ab in ?? () from /usr/lib/libkmailprivate.so.4 #23 0xb3159089 in ?? () from /usr/lib/libkmailprivate.so.4 #24 0xb3149a63 in ?? () from /usr/lib/libkmailprivate.so.4 #25 0xb3149c4d in ?? () from /usr/lib/libkmailprivate.so.4 #26 0xb315ca04 in ?? () from /usr/lib/libkmailprivate.so.4 #27 0x05bcb6ca in QMetaObject::metacall (object=0xa13dc28, cl=QMetaObject::InvokeMetaMethod, idx=33, argv=0xbfabe1fc) at kernel/qmetaobject.cpp:237 #28 0x05bde455 in QMetaObject::activate (sender=0xa13dc80, m=0x5cf75a4, local_signal_index=0, argv=0x0) at kernel/qobject.cpp:3280 #29 0x05c2fba7 in QTimer::timeout (this=0xa13dc80) at .moc/release-shared/moc_qtimer.cpp:134 #30 0x05be3ffe in QTimer::timerEvent (this=0xa13dc80, e=0xbfabe730) at kernel/qtimer.cpp:271 #31 0x05bd82c4 in QObject::event (this=0xa13dc80, e=0xbfabd76c) at kernel/qobject.cpp:1183 #32 0x00f4d0cc in QApplicationPrivate::notify_helper (this=0x9b0c0a0, receiver=0xa13dc80, e=0xbfabe730) at kernel/qapplication.cpp:4389 #33 0x00f5311e in QApplication::notify (this=0xbfabea94, receiver=0xa13dc80, e=0xbfabe730) at kernel/qapplication.cpp:3791 #34 0x00c0282a in KApplication::notify (this=0xbfabea94, receiver=0xa13dc80, event=0xbfabe730) at ../../kdeui/kernel/kapplication.cpp:310 #35 0x05bc596b in QCoreApplication::notifyInternal (this=0xbfabea94, receiver=0xa13dc80, event=0xbfabe730) at kernel/qcoreapplication.cpp:732 #36 0x05bf76d6 in QCoreApplication::sendEvent (this=0x9b16434) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:215 #37 QTimerInfoList::activateTimers (this=0x9b16434) at kernel/qeventdispatcher_unix.cpp:602 #38 0x05bf44a4 in timerSourceDispatch (source=0x9b16400) at kernel/qeventdispatcher_glib.cpp:184 #39 0x07e015e5 in g_main_context_dispatch () from /lib/libglib-2.0.so.0 #40 0x07e052d8 in ?? () from /lib/libglib-2.0.so.0 #41 0x07e054b8 in g_main_context_iteration () from /lib/libglib-2.0.so.0 #42 0x05bf4195 in QEventDispatcherGlib::processEvents (this=0x9b0a3e8, flags=...) at kernel/qeventdispatcher_glib.cpp:412 #43 0x0100e3b5 in QGuiEventDispatcherGlib::processEvents (this=0x9b0a3e8, flags=...) at kernel/qguieventdispatcher_glib.cpp:204 #44 0x05bc4419 in QEventLoop::processEvents (this=0xbfabe9f4, flags=) at kernel/qeventloop.cpp:149 #45 0x05bc489a in QEventLoop::exec (this=0xbfabe9f4, flags=...) at kernel/qeventloop.cpp:201 #46 0x05bc8e4f in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1009 #47 0x00f4bef7 in QApplication::exec () at kernel/qapplication.cpp:3665 #48 0x0804b472 in _start () Reported using DrKonqi
*** Bug 248955 has been marked as a duplicate of this bug. ***
*** Bug 249366 has been marked as a duplicate of this bug. ***
*** Bug 249424 has been marked as a duplicate of this bug. ***
Created attachment 51248 [details] New crash information added by DrKonqi kontact (4.4.5) on KDE Platform 4.5.00 (KDE 4.5.0) using Qt 4.7.0 steps to reproduce: 1. open the certifiedhumane.org newsletter email sent on 2010-09-02 (subject "Certified Humane® Farm Highlighted on CNN"). 2. crash. -- Backtrace (Reduced): #6 KHTMLPart::findFrameParent (this=0x0, callingPart=0x0, f=..., childFrame=0x7fff08d74958) at ../../khtml/khtml_part.cpp:5185 #7 0x00007fa5faff51c5 in KHTMLPart::findFrame (this=0x0, f=...) at ../../khtml/khtml_part.cpp:5215 #8 0x00007fa5fb0dd726 in DOM::HTMLFrameElementImpl::ensureUniqueName (this=0x3c65bf0) at ../../khtml/html/html_baseimpl.cpp:277 #9 0x00007fa5fb0ddeb3 in DOM::HTMLIFrameElementImpl::parseAttribute (this=0x3c65bf0, attr=0x3c659d0) at ../../khtml/html/html_baseimpl.cpp:748 #10 0x00007fa5fb087945 in DOM::ElementImpl::setAttributeMap (this=0x3c65c00, list=<value optimized out>) at ../../khtml/xml/dom_elementimpl.cpp:586
*** Bug 246076 has been marked as a duplicate of this bug. ***
*** Bug 248602 has been marked as a duplicate of this bug. ***
@Maksim, is this a bug for Konqueror/khtml ?
*** Bug 251968 has been marked as a duplicate of this bug. ***
*** Bug 253467 has been marked as a duplicate of this bug. ***
*** Bug 254375 has been marked as a duplicate of this bug. ***
*** Bug 254583 has been marked as a duplicate of this bug. ***
I noticed and I can confirm that kmail crashes if the HTML code contains a Flash video elements
Created attachment 52971 [details] New crash information added by DrKonqi kmail (1.13.5) on KDE Platform 4.5.2 (KDE 4.5.2) using Qt 4.7.0 - What I was doing when the application crashed: Clicked on an email confirmation from Expedia. I will attach the raw source of the email momentarily. -- Backtrace (Reduced): #6 KHTMLPart::findFrameParent (this=0x0, callingPart=0x0, f=..., childFrame=0x7fff6fc839d0) at /var/tmp/portage/kde-base/kdelibs-4.5.2/work/kdelibs-4.5.2/khtml/khtml_part.cpp:5185 #7 0x00007ff95a61053e in KHTMLPart::findFrame (this=<value optimized out>, f=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.5.2/work/kdelibs-4.5.2/khtml/khtml_part.cpp:5215 #8 0x00007ff95a708c26 in DOM::HTMLFrameElementImpl::ensureUniqueName (this=0x1b4ee40) at /var/tmp/portage/kde-base/kdelibs-4.5.2/work/kdelibs-4.5.2/khtml/html/html_baseimpl.cpp:277 #9 0x00007ff95a709cfb in DOM::HTMLIFrameElementImpl::parseAttribute (this=0x1b4ee40, attr=0x1c59e90) at /var/tmp/portage/kde-base/kdelibs-4.5.2/work/kdelibs-4.5.2/khtml/html/html_baseimpl.cpp:748 #10 0x00007ff95a6a7de0 in DOM::ElementImpl::setAttributeMap (this=0x1b4ee50, list=<value optimized out>) at /var/tmp/portage/kde-base/kdelibs-4.5.2/work/kdelibs-4.5.2/khtml/xml/dom_elementimpl.cpp:586
Created attachment 52972 [details] source of email that causes crash
Created attachment 53310 [details] New crash information added by DrKonqi kmail (1.13.5) on KDE Platform 4.5.3 (KDE 4.5.3) using Qt 4.7.0 - What I was doing when the application crashed: Selected a confirmation E-Mail by expedia in KMail. After restarting KMail the same crash repeats when selecting this E-Mail. -- Backtrace (Reduced): #7 0x09010567 in KHTMLPart::findFrameParent (this=0x0, callingPart=0x0, f=..., childFrame=0xbfd6eebc) at ../../khtml/khtml_part.cpp:5185 #8 0x09010774 in KHTMLPart::findFrame (this=0x0, f=...) at ../../khtml/khtml_part.cpp:5215 #9 0x091095a7 in DOM::HTMLFrameElementImpl::ensureUniqueName (this=0xa36df00) at ../../khtml/html/html_baseimpl.cpp:277 #10 0x09109d7c in DOM::HTMLIFrameElementImpl::parseAttribute (this=0xa36df00, attr=0xa48cf40) at ../../khtml/html/html_baseimpl.cpp:748 #11 0x090ae8b4 in DOM::ElementImpl::setAttributeMap (this=0xa36df08, list=0xa497fb0) at ../../khtml/xml/dom_elementimpl.cpp:586
Bug 256583 contains a part of the html message that causes a crash.
*** Bug 256978 has been marked as a duplicate of this bug. ***
*** Bug 256956 has been marked as a duplicate of this bug. ***
*** Bug 256583 has been marked as a duplicate of this bug. ***
*** Bug 256551 has been marked as a duplicate of this bug. ***
Bug 256011 contains an HTML copy of the email that causes the crash at https://bugs.kde.org/attachment.cgi?id=53125 From bug 255150: - What I was doing when the application crashed: KMail crashes when clicking to email item in the emails list. Usually it's the first item in the list and email contains HTML code. To be more exact, all the crashes appeared on clicking on LiveJournal reminder email of some comment on the post (I also can send this email to someone trying to reproduce the bug). https://bugs.kde.org/show_bug.cgi?id=254893#c2 contains other useful testcase information
*** Bug 256011 has been marked as a duplicate of this bug. ***
*** Bug 255150 has been marked as a duplicate of this bug. ***
*** Bug 254893 has been marked as a duplicate of this bug. ***
Created attachment 53448 [details] html attachment which seems to contain Google Maps
*** Bug 257121 has been marked as a duplicate of this bug. ***
*** Bug 257500 has been marked as a duplicate of this bug. ***
Created attachment 53639 [details] This e-mail causes kmail to crash if I try to view its contents Kmail crashes like this relatively often since I upgraded to KDE 4.5.x. This did not happen in 4.4.x. It crashes when trying to show some specific messages, both when I try to open then in their own window (if preview panel is not enabled) or if I select them in the messages list panel (if preview panel is enabled). This can be easily reproduced. When I get one of these problematic e-mails, kmail crashes every time I try to view them. The only way that I know of to continue using kmail normally once I get one of these messages is to disable the preview panel, delete the message without trying to open it and them re-enable the preview panel again. I'm attaching a message that always crashes kmail when I try to open it.
Should be fixed in r1201412 and r1201413 (accidentally sent the commit to a dupe and not this report): SVN commit 1201412 by orlovich: Don't crash when someone (e.g. kmail) passes in some html w/o a KHTMLPart that contains a named iframe. It'd be best if HTMLQuoteColorer in kmail 4.4 were changed to use the part just in case, though.
[Comment from a bug triager] The full commit log is on bug 257500 comment 3 and bug 257500 comment 4.
*** Bug 258391 has been marked as a duplicate of this bug. ***
Created attachment 54014 [details] New crash information added by DrKonqi kmail (1.13.5) on KDE Platform 4.5.1 (KDE 4.5.1) using Qt 4.7.0 - What I was doing when the application crashed: Trying to open just one email from lenovo. All others open fine. -- Backtrace (Reduced): #6 KHTMLPart::findFrameParent (this=0x0, callingPart=0x0, f=..., childFrame=0x7fff62f21e28) at ../../khtml/khtml_part.cpp:5185 #7 0x00007f3aab7bf835 in KHTMLPart::findFrame (this=0x0, f=...) at ../../khtml/khtml_part.cpp:5215 #8 0x00007f3aab8a7176 in DOM::HTMLFrameElementImpl::ensureUniqueName (this=0x30a8cc0) at ../../khtml/html/html_baseimpl.cpp:277 #9 0x00007f3aab8a7923 in DOM::HTMLIFrameElementImpl::parseAttribute (this=0x30a8cc0, attr=0x30a8b80) at ../../khtml/html/html_baseimpl.cpp:748 #10 0x00007f3aab8508d5 in DOM::ElementImpl::setAttributeMap (this=0x30a8cd0, list=<value optimized out>) at ../../khtml/xml/dom_elementimpl.cpp:586
Created attachment 54055 [details] New crash information added by DrKonqi kontact (4.4.6) on KDE Platform 4.5.1 (KDE 4.5.1) using Qt 4.7.0 - What I was doing when the application crashed: Open a email in HTML mode (html mail, switch from text mode view to html view) -- Backtrace (Reduced): #6 KHTMLPart::findFrameParent (this=0x0, callingPart=0x0, f=..., childFrame=0x7fffcc352578) at ../../khtml/khtml_part.cpp:5185 #7 0x00007f75cccf2835 in KHTMLPart::findFrame (this=0x0, f=...) at ../../khtml/khtml_part.cpp:5215 #8 0x00007f75ccdda176 in DOM::HTMLFrameElementImpl::ensureUniqueName (this=0x2235370) at ../../khtml/html/html_baseimpl.cpp:277 #9 0x00007f75ccdda923 in DOM::HTMLIFrameElementImpl::parseAttribute (this=0x2235370, attr=0x2146a90) at ../../khtml/html/html_baseimpl.cpp:748 #10 0x00007f75ccd838d5 in DOM::ElementImpl::setAttributeMap (this=0x2235380, list=<value optimized out>) at ../../khtml/xml/dom_elementimpl.cpp:586
*** Bug 258674 has been marked as a duplicate of this bug. ***
*** Bug 260344 has been marked as a duplicate of this bug. ***
*** Bug 261339 has been marked as a duplicate of this bug. ***
*** Bug 266244 has been marked as a duplicate of this bug. ***
*** Bug 262769 has been marked as a duplicate of this bug. ***
*** Bug 263731 has been marked as a duplicate of this bug. ***
Created attachment 57286 [details] New crash information added by DrKonqi kmail (1.13.5) on KDE Platform 4.5.1 (KDE 4.5.1) using Qt 4.7.0 - What I was doing when the application crashed: Opened an Email heavy with HTML. Some messages lost all details upon restart (Kmail no longer knew what date they were received), opening these Emails retrieves the data. -- Backtrace (Reduced): #6 KHTMLPart::findFrameParent (this=0x0, callingPart=0x0, f=..., childFrame=0x7fff62d9b808) at ../../khtml/khtml_part.cpp:5185 #7 0x00007fcbd719b835 in KHTMLPart::findFrame (this=0x0, f=...) at ../../khtml/khtml_part.cpp:5215 #8 0x00007fcbd7283176 in DOM::HTMLFrameElementImpl::ensureUniqueName (this=0x1bc4010) at ../../khtml/html/html_baseimpl.cpp:277 #9 0x00007fcbd7283923 in DOM::HTMLIFrameElementImpl::parseAttribute (this=0x1bc4010, attr=0x1bc3870) at ../../khtml/html/html_baseimpl.cpp:748 #10 0x00007fcbd722c8d5 in DOM::ElementImpl::setAttributeMap (this=0x1bc4020, list=<value optimized out>) at ../../khtml/xml/dom_elementimpl.cpp:586
Created attachment 57307 [details] New crash information added by DrKonqi kontact (4.4.6) on KDE Platform 4.5.1 (KDE 4.5.1) using Qt 4.7.0 - What I was doing when the application crashed: Received an email, Clicked on it to view and was waiting for it to display. I will attach the raw email that causes the crash. -- Backtrace (Reduced): #6 KHTMLPart::findFrameParent (this=0x0, callingPart=0x0, f=..., childFrame=0x7fff92a9b158) at ../../khtml/khtml_part.cpp:5185 #7 0x00007f3474553835 in KHTMLPart::findFrame (this=0x0, f=...) at ../../khtml/khtml_part.cpp:5215 #8 0x00007f347463b176 in DOM::HTMLFrameElementImpl::ensureUniqueName (this=0x3aafd40) at ../../khtml/html/html_baseimpl.cpp:277 #9 0x00007f347463b923 in DOM::HTMLIFrameElementImpl::parseAttribute (this=0x3aafd40, attr=0x3aafae0) at ../../khtml/html/html_baseimpl.cpp:748 #10 0x00007f34745e48d5 in DOM::ElementImpl::setAttributeMap (this=0x3aafd50, list=<value optimized out>) at ../../khtml/xml/dom_elementimpl.cpp:586
Created attachment 57308 [details] crash test case Email that causes crash. Downloaded from gmail's web interface.
This is fixed already in KDE SC 4.5.5 and later. Regards
*** Bug 266648 has been marked as a duplicate of this bug. ***
*** Bug 281087 has been marked as a duplicate of this bug. ***