(In reply to comment #0)
> Version:           unspecified (using KDE 4.5.1) 
> OS:                Linux
> 
> Dolphin crashes whenever I mouse mouse cursor over the file
> php-5.3.2-Win32-VC9-x86.msi. Sometimes Dolphin crashes without displaying any
> bug.The details are shown below.I am using Kubuntu 10.04 and I upgraded to KDE
> 4.5.1 by specifying software source as:
> http://ppa.launchpad.net/kubuntu-ppa/backports/ubuntu
> 
> The crash report is given below:
> 
> Application: Dolphin (dolphin), signal: Segmentation fault
> [Current thread is 1 (Thread 0xb776d710 (LWP 2239))]
> 
> Thread 3 (Thread 0xb5507b70 (LWP 2243)):
> #0  0x00872e16 in clock_gettime () from /lib/tls/i686/cmov/librt.so.1
> #1  0x0331a48b in ?? () from /usr/lib/libQtCore.so.4
> #2  0x033f0965 in ?? () from /usr/lib/libQtCore.so.4
> #3  0x033f09aa in ?? () from /usr/lib/libQtCore.so.4
> #4  0x033eea38 in ?? () from /usr/lib/libQtCore.so.4
> #5  0x033eeac5 in ?? () from /usr/lib/libQtCore.so.4
> #6  0x061c1aca in g_main_context_prepare () from /lib/libglib-2.0.so.0
> #7  0x061c1ee9 in ?? () from /lib/libglib-2.0.so.0
> #8  0x061c24b8 in g_main_context_iteration () from /lib/libglib-2.0.so.0
> #9  0x033ee82f in
> QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) ()
> from /usr/lib/libQtCore.so.4
> #10 0x033bea99 in
> QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from
> /usr/lib/libQtCore.so.4
> #11 0x033bef1a in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) ()
> from /usr/lib/libQtCore.so.4
> #12 0x032bbc5e in QThread::exec() () from /usr/lib/libQtCore.so.4
> #13 0x0339d9ab in ?? () from /usr/lib/libQtCore.so.4
> #14 0x032bef39 in ?? () from /usr/lib/libQtCore.so.4
> #15 0x00b5f96e in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
> #16 0x00f45a4e in clone () from /lib/tls/i686/cmov/libc.so.6
> 
> Thread 2 (Thread 0xb3c0eb70 (LWP 2265)):
> [KCrash Handler]
> #7  0x00853508 in
> Strigi::OleInputStream::Private::Private(Strigi::OleInputStream*,
> Strigi::StreamBase<char>*) () from /usr/lib/libstreams.so.0
> #8  0x00853896 in
> Strigi::OleInputStream::OleInputStream(Strigi::StreamBase<char>*) () from
> /usr/lib/libstreams.so.0
> #9  0x00e06852 in ?? () from /usr/lib/libstreamanalyzer.so.0
> #10 0x00df19e2 in ?? () from /usr/lib/libstreamanalyzer.so.0
> #11 0x010f3692 in ?? () from /usr/lib/libkio.so.5
> #12 0x010f5808 in KFileMetaInfo::KFileMetaInfo(QString const&, QString const&,
> QFlags<KFileMetaInfo::What>) () from /usr/lib/libkio.so.5
> #13 0x011f71ab in ?? () from /usr/lib/libkio.so.5
> #14 0x032bef39 in ?? () from /usr/lib/libQtCore.so.4
> #15 0x00b5f96e in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
> #16 0x00f45a4e in clone () from /lib/tls/i686/cmov/libc.so.6
> 
> Thread 1 (Thread 0xb776d710 (LWP 2239)):
> #0  0x00bb3422 in __kernel_vsyscall ()
> #1  0x00f37b86 in poll () from /lib/tls/i686/cmov/libc.so.6
> #2  0x00c50d60 in ?? () from /usr/lib/libxcb.so.1
> #3  0x00c512cb in ?? () from /usr/lib/libxcb.so.1
> #4  0x00c51667 in xcb_writev () from /usr/lib/libxcb.so.1
> #5  0x008d9d79 in _XSend () from /usr/lib/libX11.so.6
> #6  0x008c6112 in ?? () from /usr/lib/libX11.so.6
> #7  0x008c631a in XPutImage () from /usr/lib/libX11.so.6
> #8  0x08ca2619 in QX11PixmapData::fromImage(QImage const&,
> QFlags<Qt::ImageConversionFlag>) () from /usr/lib/libQtGui.so.4
> #9  0x08c8b63c in QPixmap::fromImage(QImage const&,
> QFlags<Qt::ImageConversionFlag>) () from /usr/lib/libQtGui.so.4
> #10 0x08c8bb0a in operator>>(QDataStream&, QPixmap&) () from
> /usr/lib/libQtGui.so.4
> #11 0x05e23bfd in ?? () from /usr/lib/libkdeui.so.5
> #12 0x05e2c16f in KIconLoader::loadIcon(QString const&, KIconLoader::Group,
> int, int, QStringList const&, QString*, bool) const () from
> /usr/lib/libkdeui.so.5
> #13 0x05e2d2ba in KIconLoader::loadMimeTypeIcon(QString const&,
> KIconLoader::Group, int, int, QStringList const&, QString*) const () from
> /usr/lib/libkdeui.so.5
> #14 0x010dccdc in KFileItem::pixmap(int, int) const () from
> /usr/lib/libkio.so.5
> #15 0x0061cf22 in ?? () from /usr/lib/kde4/libkdeinit/libkdeinit4_dolphin.so
> #16 0x0061e765 in ?? () from /usr/lib/kde4/libkdeinit/libkdeinit4_dolphin.so
> #17 0x033c5d4a in QMetaObject::metacall(QObject*, QMetaObject::Call, int,
> void**) () from /usr/lib/libQtCore.so.4
> #18 0x033d8ab5 in QMetaObject::activate(QObject*, QMetaObject const*, int,
> void**) () from /usr/lib/libQtCore.so.4
> #19 0x01129463 in KIO::PreviewJob::failed(KFileItem const&) () from
> /usr/lib/libkio.so.5
> #20 0x0112e36a in ?? () from /usr/lib/libkio.so.5
> #21 0x0112e60e in KIO::PreviewJob::qt_metacall(QMetaObject::Call, int, void**)
> () from /usr/lib/libkio.so.5
> #22 0x033c5d4a in QMetaObject::metacall(QObject*, QMetaObject::Call, int,
> void**) () from /usr/lib/libQtCore.so.4
> #23 0x033d1226 in QMetaCallEvent::placeMetaCall(QObject*) () from
> /usr/lib/libQtCore.so.4
> #24 0x033d2ac2 in QObject::event(QEvent*) () from /usr/lib/libQtCore.so.4
> #25 0x08b8f77c in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from
> /usr/lib/libQtGui.so.4
> #26 0x08b957ce in QApplication::notify(QObject*, QEvent*) () from
> /usr/lib/libQtGui.so.4
> #27 0x05e7aa9a in KApplication::notify(QObject*, QEvent*) () from
> /usr/lib/libkdeui.so.5
> #28 0x033bffeb in QCoreApplication::notifyInternal(QObject*, QEvent*) () from
> /usr/lib/libQtCore.so.4
> #29 0x033c324b in QCoreApplicationPrivate::sendPostedEvents(QObject*, int,
> QThreadData*) () from /usr/lib/libQtCore.so.4
> #30 0x033c340d in QCoreApplication::sendPostedEvents(QObject*, int) () from
> /usr/lib/libQtCore.so.4
> #31 0x033eed04 in ?? () from /usr/lib/libQtCore.so.4
> #32 0x061be5e5 in g_main_context_dispatch () from /lib/libglib-2.0.so.0
> #33 0x061c22d8 in ?? () from /lib/libglib-2.0.so.0
> #34 0x061c24b8 in g_main_context_iteration () from /lib/libglib-2.0.so.0
> #35 0x033ee7f5 in
> QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) ()
> from /usr/lib/libQtCore.so.4
> #36 0x08c50de5 in ?? () from /usr/lib/libQtGui.so.4
> #37 0x033bea99 in
> QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from
> /usr/lib/libQtCore.so.4
> #38 0x033bef1a in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) ()
> from /usr/lib/libQtCore.so.4
> #39 0x033c34cf in QCoreApplication::exec() () from /usr/lib/libQtCore.so.4
> #40 0x08b8e5a7 in QApplication::exec() () from /usr/lib/libQtGui.so.4
> #41 0x006192bb in kdemain () from
> /usr/lib/kde4/libkdeinit/libkdeinit4_dolphin.so
> #42 0x080485fb in _start ()
> 
> 
> Reproducible: Always
> 
> Steps to Reproduce:
> Whenever I take Dolphin and point to icon of php-5.3.2-Win32-VC9-x86.msi, it
> crashes.
> 
> Actual Results:  
> Dolphin crashed.


There was a typing error at line:
> Dolphin crashes whenever I mouse mouse cursor over the file

It is: Dolphin crashes whenever I move mouse pointer and point it to file php-5.3.2-Win32-VC9-x86.msi

Thanks for the bug report! Could you upload the problematic file here or provide a link to a location where we can download it?

Message from the reporter (please do not send additional information by mail, add it directly as a comment here):

-------------

The file can be downloaded from the link: http://windows.php.net/downloads/releases/archives/php-5.3.2-Win32-VC9-x86.msi

I am using Kubuntu 10.04 (KDE version 4.5.1) currently and I no longer need the windows version of PHP.But I wonder why Dolphin keeps crashing when I point to php-5.3.2-Win32-VC9-x86.msi.

-------------

Thanks for the information. I could reproduce the crash, which is most likely a bug in the Strigi analyzers, in trunk (more verbose backtrace below) and reported it upstream at

https://sourceforge.net/tracker/?func=detail&aid=3072945&group_id=171000&atid=856302

Thread 2 (Thread 0x7fa074a0b710 (LWP 22401)):
[KCrash Handler]
#6  0x00007fa07f139e2a in Strigi::readLittleEndianInt32 (c=0x7fa06d1b5c10 <Address 0x7fa06d1b5c10 out of bounds>) at /home/kde-devel/kde/src/kdesupport/strigi/libstreams/include/strigi/textutils.h:78
#7  0x00007fa07f139064 in Strigi::OleInputStream::Private::Private (this=0xcd60f0, s=0x7fa074a0a620, input=0x7e8020) at /home/kde-devel/kde/src/kdesupport/strigi/libstreams/lib/oleinputstream.cpp:208
#8  0x00007fa07f138acf in Strigi::OleInputStream::OleInputStream (this=0x7fa074a0a620, input=0x7e8020) at /home/kde-devel/kde/src/kdesupport/strigi/libstreams/lib/oleinputstream.cpp:151
#9  0x00007fa07f454618 in OleEndAnalyzer::analyze (this=0xcbb400, ar=..., in=0x7e8020) at /home/kde-devel/kde/src/kdesupport/strigi/libstreamanalyzer/lib/endanalyzers/oleendanalyzer.cpp:377
#10 0x00007fa07f43087a in Strigi::StreamAnalyzerPrivate::analyze (this=0x8132a0, idx=..., input=0x7e8020) at /home/kde-devel/kde/src/kdesupport/strigi/libstreamanalyzer/lib/streamanalyzer.cpp:424
#11 0x00007fa07f430362 in Strigi::StreamAnalyzer::analyze (this=0x7fa074a0a930, idx=..., input=0x7fa074a0a8a0)
    at /home/kde-devel/kde/src/kdesupport/strigi/libstreamanalyzer/lib/streamanalyzer.cpp:365
#12 0x00007fa085b7ac6a in KFileMetaInfoPrivate::init (this=0xd734e0, stream=..., url=..., mtime=1285102364, w=...) at /home/kde-devel/kde/src/KDE/kdelibs/kio/kio/kfilemetainfo.cpp:256
#13 0x00007fa085b7af48 in KFileMetaInfo::KFileMetaInfo (this=0x7fa074a0ab60, path=..., w=...) at /home/kde-devel/kde/src/KDE/kdelibs/kio/kio/kfilemetainfo.cpp:285
#14 0x00007fa085c4d663 in KLoadFileMetaDataThread::run (this=0x828140) at /home/kde-devel/kde/src/KDE/kdelibs/kio/kfile/kloadfilemetadatathread.cpp:142
#15 0x00007fa082c1aafc in QThreadPrivate::start (arg=0x828140) at thread/qthread_unix.cpp:274
#16 0x00007fa082963a4f in start_thread () from /lib64/libpthread.so.0
#17 0x00007fa08124c82d in clone () from /lib64/libc.so.6
#18 0x0000000000000000 in ?? ()

This issue was reported against strigi upstream. But running xmlindexer or rdfindexer on that file does not crash strigi. So I'm not sure it's really strigi's fault that dolphin crashes, which it does indeed.

*** Bug 257384 has been marked as a duplicate of this bug. ***

*** Bug 256558 has been marked as a duplicate of this bug. ***

*** Bug 257728 has been marked as a duplicate of this bug. ***

*** Bug 258468 has been marked as a duplicate of this bug. ***

*** Bug 259393 has been marked as a duplicate of this bug. ***

I can reproduce with an msi file on opensuse and strigi 0.7.3

Application: Konqueror (kdeinit4), signal: Segmentation fault
[Current thread is 1 (Thread 0x7f30a3e3a760 (LWP 4147))]

Thread 4 (Thread 0x7f30877b7710 (LWP 4150)):
#0  0xffffffffff600177 in ?? ()
#1  0x00007ffff01c07a1 in ?? ()
#2  0x00007f309e6362a3 in clock_gettime () from /lib64/librt.so.1
#3  0x00007f30a2a4f522 in ?? () from /usr/lib64/libQtCore.so.4
#4  0x00007f30a2b134ad in ?? () from /usr/lib64/libQtCore.so.4
#5  0x00007f30a2b13835 in ?? () from /usr/lib64/libQtCore.so.4
#6  0x00007f30a2b122ec in ?? () from /usr/lib64/libQtCore.so.4
#7  0x00007f30a2b12395 in ?? () from /usr/lib64/libQtCore.so.4
#8  0x00007f309e38df7f in g_main_context_prepare () from /usr/lib64/libglib-2.0.so.0
#9  0x00007f309e38ee69 in ?? () from /usr/lib64/libglib-2.0.so.0
#10 0x00007f309e38f510 in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0
#11 0x00007f30a2b12ae6 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#12 0x00007f30a2ae7262 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#13 0x00007f30a2ae7475 in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#14 0x00007f30a29fa1a4 in QThread::exec() () from /usr/lib64/libQtCore.so.4
#15 0x00007f30a2ac8918 in ?? () from /usr/lib64/libQtCore.so.4
#16 0x00007f30a29fca1e in ?? () from /usr/lib64/libQtCore.so.4
#17 0x00007f30a276da4f in start_thread () from /lib64/libpthread.so.0
#18 0x00007f30a152582d in clone () from /lib64/libc.so.6
#19 0x0000000000000000 in ?? ()

Thread 3 (Thread 0x7f308a95e710 (LWP 4155)):
#0  0x00007f30a151ee13 in select () from /lib64/libc.so.6
#1  0x00007f30a2ac827d in ?? () from /usr/lib64/libQtCore.so.4
#2  0x00007f30a29fca1e in ?? () from /usr/lib64/libQtCore.so.4
#3  0x00007f30a276da4f in start_thread () from /lib64/libpthread.so.0
#4  0x00007f30a152582d in clone () from /lib64/libc.so.6
#5  0x0000000000000000 in ?? ()

Thread 2 (Thread 0x7f3089f0f710 (LWP 4158)):
[KCrash Handler]
#6  readLittleEndianInt32 (this=0xf61fe0, s=<value optimized out>, input=<value optimized out>) at /usr/src/debug/strigi-0.7.3/libstreams/include/strigi/textutils.h:78
#7  Strigi::OleInputStream::Private::Private (this=0xf61fe0, s=<value optimized out>, input=<value optimized out>) at /usr/src/debug/strigi-0.7.3/libstreams/lib/oleinputstream.cpp:208
#8  0x00007f309a40db02 in Strigi::OleInputStream::OleInputStream (this=<value optimized out>, input=<value optimized out>) at /usr/src/debug/strigi-0.7.3/libstreams/lib/oleinputstream.cpp:151
#9  0x00007f309b768366 in OleEndAnalyzer::analyze (this=0xf90df0, ar=..., in=<value optimized out>) at /usr/src/debug/strigi-0.7.3/libstreamanalyzer/lib/endanalyzers/oleendanalyzer.cpp:377
#10 0x00007f309b74a482 in Strigi::StreamAnalyzerPrivate::analyze (this=0x1a, idx=..., input=0xecec50) at /usr/src/debug/strigi-0.7.3/libstreamanalyzer/lib/streamanalyzer.cpp:424
#11 0x00007f309bf69205 in ?? () from /usr/lib64/libkio.so.5
#12 0x00007f309bff8b38 in KFileMetaInfo::KFileMetaInfo(QString const&, QString const&, QFlags<KFileMetaInfo::What>) () from /usr/lib64/libkio.so.5
#13 0x00007f309c01641e in ?? () from /usr/lib64/libkio.so.5
#14 0x00007f30a29fca1e in ?? () from /usr/lib64/libQtCore.so.4
#15 0x00007f30a276da4f in start_thread () from /lib64/libpthread.so.0
#16 0x00007f30a152582d in clone () from /lib64/libc.so.6
#17 0x0000000000000000 in ?? ()

Thread 1 (Thread 0x7f30a3e3a760 (LWP 4147)):
#0  0x00007f30a151c6b3 in poll () from /lib64/libc.so.6
#1  0x00007f309f49dc0a in ?? () from /usr/lib64/libxcb.so.1
#2  0x00007f309f49edaf in xcb_wait_for_reply () from /usr/lib64/libxcb.so.1
#3  0x00007f30a331ec33 in _XReply () from /usr/lib64/libX11.so.6
#4  0x00007f30a3313f7d in XTranslateCoordinates () from /usr/lib64/libX11.so.6
#5  0x00007f30a1d1bb5e in QWidget::mapFromGlobal (this=<value optimized out>, pos=<value optimized out>) at kernel/qwidget_x11.cpp:1323
#6  0x00007f30a1c89644 in QApplicationPrivate::dispatchEnterLeave (enter=0xad1990, leave=<value optimized out>) at kernel/qapplication.cpp:2772
#7  0x00007f30a1d065a1 in QApplication::x11ProcessEvent (this=0x7ffff01a7080, event=0x7ffff01a6b30) at kernel/qapplication_x11.cpp:3560
#8  0x00007f30a1d2e212 in x11EventSourceDispatch (s=0x6e4310, callback=0, user_data=0x0) at kernel/qguieventdispatcher_glib.cpp:146
#9  0x00007f309e38ea93 in g_main_context_dispatch () from /usr/lib64/libglib-2.0.so.0
#10 0x00007f309e38f270 in ?? () from /usr/lib64/libglib-2.0.so.0
#11 0x00007f309e38f510 in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0
#12 0x00007f30a2b12a8f in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#13 0x00007f30a1d2deae in QGuiEventDispatcherGlib::processEvents (this=<value optimized out>, flags=<value optimized out>) at kernel/qguieventdispatcher_glib.cpp:204
#14 0x00007f30a2ae7262 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#15 0x00007f30a2ae7475 in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib64/libQtCore.so.4
#16 0x00007f30a2aeb8db in QCoreApplication::exec() () from /usr/lib64/libQtCore.so.4
#17 0x00007f30936472da in kdemain () from /usr/lib64/libkdeinit4_konqueror.so
#18 0x0000000000407609 in launch (argc=1, _name=0x6a10c8 "konqueror", args=<value optimized out>, cwd=0x0, envc=<value optimized out>, envs=<value optimized out>, reset_env=false, tty=0x0, 
    avoid_loops=false, startup_id_str=0x40b397 "0") at /usr/src/debug/kdelibs-4.5.95/kinit/kinit.cpp:730
#19 0x0000000000408125 in handle_launcher_request (sock=8, who=<value optimized out>) at /usr/src/debug/kdelibs-4.5.95/kinit/kinit.cpp:1222
#20 0x000000000040889a in handle_requests (waitForPid=<value optimized out>) at /usr/src/debug/kdelibs-4.5.95/kinit/kinit.cpp:1415
#21 0x00000000004094f0 in main (argc=4, argv=0x7ffff01a89f8, envp=0x7ffff01a8a20) at /usr/src/debug/kdelibs-4.5.95/kinit/kinit.cpp:1903

In fact it does even crash xmlindexer when using the openSUSE rpm! But if I compile strigi myself it does not crash.

openSUSE rpm:
Could not load '/usr/lib64/strigi/strigiea_ffmpeg.so':libstreamanalyzer.so.0: Kann die Shared-Object-Datei nicht öffnen: Datei oder Verzeichnis nicht gefunden
Could not load '/usr/lib64/strigi/strigita_mp4.so':libstreamanalyzer.so.0: Kann die Shared-Object-Datei nicht öffnen: Datei oder Verzeichnis nicht gefunden
 <file uri='/home/rabauke/Ablage/temp/phhp-5.3.2-Win32-VC9-x86.msi' mtime='0'>
  <value name='http://www.semanticdesktop.org/ontologies/2007/01/19/nie#isPartOf'></value>
  <value name='http://www.semanticdesktop.org/ontologies/2007/01/19/nie#url'>/home/rabauke/Ablage/temp/phhp-5.3.2-Win32-VC9-x86.msi</value>
  <value name='http://www.semanticdesktop.org/ontologies/2007/01/19/nie#lastModified'>0</value>
  <value name='http://www.w3.org/1999/02/22-rdf-syntax-ns#type'>http://www.semanticdesktop.org/ontologies/2007/03/22/nfo#FileDataObject</value>
  <value name='http://www.semanticdesktop.org/ontologies/2007/03/22/nfo#fileName'>phhp-5.3.2-Win32-VC9-x86.msi</value>
  <value name='http://strigi.sf.net/ontologies/0.9#depth'>0</value>
 </file>
</metadata>
*** glibc detected *** /usr/bin/xmlindexer: free(): invalid pointer: 0x00000000006978e0 ***
======= Backtrace: =========
/lib64/libc.so.6(+0x73226)[0x7ffff7102226]
/usr/lib64/libstdc++.so.6(_ZNSsD1Ev+0x39)[0x7ffff748feb9]
/lib64/libc.so.6(+0x354e1)[0x7ffff70c44e1]
/lib64/libc.so.6(+0x35535)[0x7ffff70c4535]
/lib64/libc.so.6(__libc_start_main+0x104)[0x7ffff70adb84]
/usr/bin/xmlindexer[0x405769]
======= Memory map: ========
00400000-00411000 r-xp 00000000 08:01 701                                /usr/bin/xmlindexer
00610000-00611000 r--p 00010000 08:01 701                                /usr/bin/xmlindexer
00611000-00612000 rw-p 00011000 08:01 701                                /usr/bin/xmlindexer
00612000-00759000 rw-p 00000000 00:00 0                                  [heap]
7fffe9030000-7fffe9032000 r-xp 00000000 08:01 1180748                    /usr/lib64/gconv/CP1252.so
7fffe9032000-7fffe9231000 ---p 00002000 08:01 1180748                    /usr/lib64/gconv/CP1252.so
7fffe9231000-7fffe9232000 r--p 00001000 08:01 1180748                    /usr/lib64/gconv/CP1252.so
7fffe9232000-7fffe9233000 rw-p 00002000 08:01 1180748                    /usr/lib64/gconv/CP1252.so
7fffe9233000-7fffe9236000 r-xp 00000000 08:01 38298                      /usr/lib64/strigi/strigita_sid.so
7fffe9236000-7fffe9436000 ---p 00003000 08:01 38298                      /usr/lib64/strigi/strigita_sid.so
7fffe9436000-7fffe9437000 r--p 00003000 08:01 38298                      /usr/lib64/strigi/strigita_sid.so
7fffe9437000-7fffe9438000 rw-p 00004000 08:01 38298                      /usr/lib64/strigi/strigita_sid.so
7fffe9438000-7fffe945e000 r-xp 00000000 08:01 38290                      /usr/lib64/strigi/strigila_xpm.so
7fffe945e000-7fffe965e000 ---p 00026000 08:01 38290                      /usr/lib64/strigi/strigila_xpm.so
7fffe965e000-7fffe965f000 r--p 00026000 08:01 38290                      /usr/lib64/strigi/strigila_xpm.so
7fffe965f000-7fffe9660000 rw-p 00027000 08:01 38290                      /usr/lib64/strigi/strigila_xpm.so
7fffe9660000-7fffe9686000 r-xp 00000000 08:01 38287                      /usr/lib64/strigi/strigila_deb.so
7fffe9686000-7fffe9886000 ---p 00026000 08:01 38287                      /usr/lib64/strigi/strigila_deb.so
7fffe9886000-7fffe9887000 r--p 00026000 08:01 38287                      /usr/lib64/strigi/strigila_deb.so
7fffe9887000-7fffe9888000 rw-p 00027000 08:01 38287                      /usr/lib64/strigi/strigila_deb.so
7fffe9888000-7fffe98af000 r-xp 00000000 08:01 38284                      /usr/lib64/strigi/strigiea_riff.so
7fffe98af000-7fffe9aaf000 ---p 00027000 08:01 38284                      /usr/lib64/strigi/strigiea_riff.so
7fffe9aaf000-7fffe9ab0000 r--p 00027000 08:01 38284                      /usr/lib64/strigi/strigiea_riff.so
7fffe9ab0000-7fffe9ab1000 rw-p 00028000 08:01 38284                      /usr/lib64/strigi/strigiea_riff.so
7fffe9ab1000-7fffe9ab2000 r-xp 00000000 08:01 38299                      /usr/lib64/strigi/strigita_wav.so
7fffe9ab2000-7fffe9cb1000 ---p 00001000 08:01 38299                      /usr/lib64/strigi/strigita_wav.so
7fffe9cb1000-7fffe9cb2000 r--p 00000000 08:01 38299                      /usr/lib64/strigi/strigita_wav.so
7fffe9cb2000-7fffe9cb3000 rw-p 00001000 08:01 38299                      /usr/lib64/strigi/strigita_wav.so
7fffe9cb3000-7fffe9cbc000 r-xp 00000000 08:01 30817                      /usr/lib64/strigi/strigila_mobi.so
7fffe9cbc000-7fffe9ebb000 ---p 00009000 08:01 30817                      /usr/lib64/strigi/strigila_mobi.so
7fffe9ebb000-7fffe9ebc000 r--p 00008000 08:01 30817                      /usr/lib64/strigi/strigila_mobi.so
7fffe9ebc000-7fffe9ebd000 rw-p 00009000 08:01 30817                      /usr/lib64/strigi/strigila_mobi.so
7fffe9ebd000-7fffe9ee2000 r-xp 00000000 08:01 38294                      /usr/lib64/strigi/strigita_gif.so
7fffe9ee2000-7fffea0e2000 ---p 00025000 08:01 38294                      /usr/lib64/strigi/strigita_gif.so
7fffea0e2000-7fffea0e3000 r--p 00025000 08:01 38294                      /usr/lib64/strigi/strigita_gif.so
7fffea0e3000-7fffea0e4000 rw-p 00026000 08:01 38294                      /usr/lib64/strigi/strigita_gif.so
7fffea0e4000-7fffea0e5000 r-xp 00000000 08:01 38292                      /usr/lib64/strigi/strigita_avi.so
7fffea0e5000-7fffea2e4000 ---p 00001000 08:01 38292                      /usr/lib64/strigi/strigita_avi.so
7fffea2e4000-7fffea2e5000 r--p 00000000 08:01 38292                      /usr/lib64/strigi/strigita_avi.so
7fffea2e5000-7fffea2e6000 rw-p 00001000 08:01 38292                      /usr/lib64/strigi/strigita_avi.so
7fffea2e6000-7fffea2e9000 r-xp 00000000 08:01 13195                      /usr/lib64/strigi/strigiea_dvi.so
7fffea2e9000-7fffea4e8000 ---p 00003000 08:01 13195                      /usr/lib64/strigi/strigiea_dvi.so
7fffea4e8000-7fffea4e9000 r--p 00002000 08:01 13195                      /usr/lib64/strigi/strigiea_dvi.so
7fffea4e9000-7fffea4ea000 rw-p 00003000 08:01 13195                      /usr/lib64/strigi/strigiea_dvi.so
7fffea4ea000-7fffea522000 r-xp 00000000 08:01 1180387                    /usr/lib64/libjpeg.so.8.0.1
7fffea522000-7fffea721000 ---p 00038000 08:01 1180387                    /usr/lib64/libjpeg.so.8.0.1
7fffea721000-7fffea722000 r--p 00037000 08:01 1180387                    /usr/lib64/libjpeg.so.8.0.1
7fffea722000-7fffea723000 rw-p 00038000 08:01 1180387                    /usr/lib64/libjpeg.so.8.0.1
7fffea723000-7fffea784000 r-xp 00000000 08:01 1177882                    /usr/lib64/libtiff.so.3.9.2
7fffea784000-7fffea984000 ---p 00061000 08:01 1177882                    /usr/lib64/libtiff.so.3.9.2
7fffea984000-7fffea986000 r--p 00061000 08:01 1177882                    /usr/lib64/libtiff.so.3.9.2
7fffea986000-7fffea987000 rw-p 00063000 08:01 1177882                    /usr/lib64/libtiff.so.3.9.2
7fffea987000-7fffea98a000 r-xp 00000000 08:01 13181                      /usr/lib64/strigi/strigiea_tiff.so
7fffea98a000-7fffeab8a000 ---p 00003000 08:01 13181                      /usr/lib64/strigi/strigiea_tiff.so
7fffeab8a000-7fffeab8b000 r--p 00003000 08:01 13181                      /usr/lib64/strigi/strigiea_tiff.so
7fffeab8b000-7fffeab8c000 rw-p 00004000 08:01 13181                      /usr/lib64/strigi/strigiea_tiff.so
7fffeab8c000-7fffeabb2000 r-xp 00000000 08:01 38288                      /usr/lib64/strigi/strigila_namespaceharvester.so
7fffeabb2000-7fffeadb2000 ---p 00026000 08:01 38288                      /usr/lib64/strigi/strigila_namespaceharvester.so
7fffeadb2000-7fffeadb3000 r--p 00026000 08:01 38288                      /usr/lib64/strigi/strigila_namespaceharvester.so
7fffeadb3000-7fffeadb4000 rw-p 00027000 08:01 38288                      /usr/lib64/strigi/strigila_namespaceharvester.so
Program received signal SIGABRT, Aborted.
0x00007ffff70c19e5 in raise () from /lib64/libc.so.6
(gdb) bt
#0  0x00007ffff70c19e5 in raise () from /lib64/libc.so.6
#1  0x00007ffff70c2ee6 in abort () from /lib64/libc.so.6
#2  0x00007ffff70fcc53 in __libc_message () from /lib64/libc.so.6
#3  0x00007ffff7102226 in malloc_printerr () from /lib64/libc.so.6
#4  0x00007ffff748feb9 in std::basic_string<char, std::char_traits<char>, std::allocator<char> >::~basic_string() () from /usr/lib64/libstdc++.so.6
#5  0x00007ffff70c44e1 in __run_exit_handlers () from /lib64/libc.so.6
#6  0x00007ffff70c4535 in exit () from /lib64/libc.so.6
#7  0x00007ffff70adb84 in __libc_start_main () from /lib64/libc.so.6
#8  0x0000000000405769 in _start () at ../sysdeps/x86_64/elf/start.S:113

compiled from source:

xmlindexer php-5.3.2-Win32-VC9-x86.msi 
<?xml version='1.0' encoding='UTF-8'?>
<metadata>
 <file uri='php-5.3.2-Win32-VC9-x86.msi' mtime='1295337978'>
  <value name='http://www.semanticdesktop.org/ontologies/2007/01/19/nie#isPartOf'></value>
  <value name='http://www.semanticdesktop.org/ontologies/2007/01/19/nie#url'>php-5.3.2-Win32-VC9-x86.msi</value>
  <value name='http://www.semanticdesktop.org/ontologies/2007/01/19/nie#mimeType'>application/x-ole-storage</value>
  <value name='http://www.semanticdesktop.org/ontologies/2007/01/19/nie#mimeType'>application/x-ole-storage</value>
  <value name='http://www.semanticdesktop.org/ontologies/2007/01/19/nie#lastModified'>1295337978</value>
  <value name='http://www.semanticdesktop.org/ontologies/2007/01/19/nie#contentSize'>28035584</value>
  <value name='http://www.w3.org/1999/02/22-rdf-syntax-ns#type'>http://www.semanticdesktop.org/ontologies/2007/03/22/nfo#Document</value>
  <value name='http://www.w3.org/1999/02/22-rdf-syntax-ns#type'>http://www.semanticdesktop.org/ontologies/2007/03/22/nfo#FileDataObject</value>
  <value name='http://www.semanticdesktop.org/ontologies/2007/01/19/nie#title'>Installation Database</value>
  <value name='http://www.semanticdesktop.org/ontologies/2007/01/19/nie#keyword'>Installer</value>
  <value name='http://www.semanticdesktop.org/ontologies/2007/03/22/nfo#fileName'>php-5.3.2-Win32-VC9-x86.msi</value>
  <value name='http://www.semanticdesktop.org/ontologies/2007/01/19/nie#comment'>PHP</value>
  <value name='http://www.semanticdesktop.org/ontologies/2007/01/19/nie#subject'>PHP 5.3.2 Installer</value>
  <value name='http://strigi.sf.net/ontologies/0.9#depth'>0</value>
 </file>
</metadata>

Created attachment 56317 [details]
fix crash but problem still remains

Heya,
I made a fix that checks for negative offsets which should only happen with a specific value (-2), but it's -3 so there is something else wrong

Created attachment 56408 [details]
check if we are limited to 64k

The cause for the crash is not in the OleInputStream but in KFileMetaInfo which limits the file size to be scanned to 64k http://api.kde.org/4.x-api/kdelibs-apidocs/kio/html/classKFileMetaInfo.html#a751ee65896b390895abb00c09f2503b0

OleInputStream tries detecting a too small file but fails here as the FileInputStream also assumes the file is only 64k big.

Anyways, I made a small patch to look out for the 64k filesize which is a good hint we are beeing limited by KFileMetaInfo, regretably 64k is a valid file size for ole compund documents.

Still as far as I can tell this code might also crash with truncated file sizes without beeing limited by another force within kde, but because of a broken file, so I'll add a few checks later on to make sure we don't try reading over the eof, but these are needed in quite a few places so consider this a fix for the regular appearing crash, not the irregular ones =)

Karsten, thanks for your analysis! I don't know much about Strigi and KFileMetaInfo, but I remember that there were problems some time ago which were also related to the size limitation.

@Peter: Can you comment on Karsten's findings and tell whether it makes sense to submit the Strigi patch to the Strigi developers for review?

Created attachment 56563 [details]
proper patch for the bug

I made a new patch which tries setting a min/max bound for the filesize, there still is a 64k error margin in case the file is truncated, on a simple testcase this is catched by some other code though, I mailed the strigi-devel list myself with that patch, this also catches the 64k boundary imposed by KFileMetaInfo

Thanks Karsten for your analyses and the patch! I don't know the details of the OleInputStream, but it is correct to fix it in OleInputStream and not in KFileMetaInfo: All strigi-analyzers must be able to deal with a limited size of streams and also may not crash on corrupt data. Please just let us know when there is some reply from the strigi-devel list :-)

I had same crash on different file (MS Excel) and last (proper) patch from Karsten König fixed issue. Thanks!
Gentoo ~AMD64 
KDE SC 4.6.0 
Strigi 0.7.2

Git commit d1254968eac95f4d9d8c47552e27f0cc40e6aed9 by Peter Penz.
Committed on 27/02/2011 at 20:01.
Pushed by ppenz into branch 'master'.

KFileMetaDataProvider: Don't crash if a Strigi analyzer crashes

Some Strigi analyzers are still unstable and crash under certain circumstances. This patch moves the reading of the meta-data into a custom process instead of doing it in a thread, which assures that a crashing Strigi analyzer does not result in crashing Dolphin or Konqueror when hovering some items.

FIXED-IN: 4.7.0
BUG: 257964
BUG: 258715
BUG: 262299
BUG: 263468
BUG: 263502
BUG: 264254
BUG: 234799
BUG: 251462
BUG: 251701
BUG: 258918
BUG: 192377
BUG: 195564
BUG: 199368
BUG: 210841
BUG: 245376
BUG: 246461
BUG: 246901
BUG: 249150
BUG: 261952
BUG: 249876
BUG: 179376
BUG: 179417
BUG: 179420
BUG: 181591
BUG: 183269
BUG: 183722
BUG: 185667
BUG: 188596
BUG: 191864
BUG: 193112
BUG: 205813
BUG: 244621
BUG: 245451
BUG: 248214
BUG: 249655
BUG: 249876
BUG: 265549
BUG: 267079

M  +11   -1    kio/CMakeLists.txt     
M  +68   -38   kio/kfile/kfilemetadataprovider.cpp     
M  +2    -1    kio/kfile/kfilemetadataprovider_p.h     
A  +174  -0    kio/kfile/kfilemetadatareader.cpp         [License: LGPL (v2+)]
M  +0    -2    kio/kfile/kfilemetadatawidget.cpp     
D  +0    -178  kio/kfile/kloadfilemetadatathread.cpp     
D  +0    -96   kio/kfile/kloadfilemetadatathread_p.h     

http://commits.kde.org/kdelibs/d1254968eac95f4d9d8c47552e27f0cc40e6aed9

*** Bug 262525 has been marked as a duplicate of this bug. ***

*** Bug 271822 has been marked as a duplicate of this bug. ***

Created attachment 59585 [details]
New crash information added by DrKonqi

dolphin (1.6.1) on KDE Platform 4.6.2 (4.6.2) using Qt 4.7.2

- What I was doing when the application crashed:

Навел курсор на файл с расширением *.MSI. После чего Dolphin закрылся и выдал сообщение об ошибке. И так каждый раз при наведение курсора на  2GISShell-3.0.9.2.msi

-- Backtrace (Reduced):
#7  readLittleEndianInt32 (this=0xaac2f528, s=0xb0267f5c, input=0xaac0a628) at /build/buildd/strigi-0.7.2/src/streams/textutils.h:78
#8  Strigi::OleInputStream::Private::Private (this=0xaac2f528, s=0xb0267f5c, input=0xaac0a628) at /build/buildd/strigi-0.7.2/src/streams/oleinputstream.cpp:208
#9  0xb50a76f6 in Strigi::OleInputStream::OleInputStream (this=0xb0267f5c, input=0xaac0a628) at /build/buildd/strigi-0.7.2/src/streams/oleinputstream.cpp:151
#10 0xb574fb6a in OleEndAnalyzer::analyze (this=0xaac06520, ar=..., in=0xaac0a628) at /build/buildd/strigi-0.7.2/src/streamanalyzer/endanalyzers/oleendanalyzer.cpp:377
#11 0xb57385ba in Strigi::StreamAnalyzerPrivate::analyze (this=0x980a7c8, idx=..., input=0xaac0a628) at /build/buildd/strigi-0.7.2/src/streamanalyzer/streamanalyzer.cpp:421