78624 – TESTCASE - crash in khtml::RenderBlock::layout() when an <ul> is inside a <dl compact> block

Bug 78624 - TESTCASE - crash in khtml::RenderBlock::layout() when an <ul> is inside a <dl compact> block

Summary: TESTCASE - crash in khtml::RenderBlock::layout() when an <ul> is inside a <dl...

Status:	RESOLVED DUPLICATE of bug 75806

Alias:	None

Product:	konqueror
Classification:	Applications
Component:	khtml (show other bugs)
Version:	3.2.1
Platform:	Compiled Sources Linux

Importance:	NOR crash
Target Milestone:	---
Assignee:	Konqueror Developers

URL:
Keywords:

Depends on:
Blocks:

Reported:	2004-03-28 18:24 UTC by Jeroen Wijnhout
Modified:	2004-04-01 21:27 UTC (History)
CC List:	0 users

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:

Attachments
Add an attachment

Note You need to log in before you can comment on or make changes to this bug.

Description Jeroen Wijnhout 2004-03-28 18:24:47 UTC

Version:           3.2.1 (using KDE KDE 3.2.1)
Installed from:    Compiled From Sources
Compiler:          gcc version 3.3.1 (SuSE Linux)
OS:          Linux (i686) release 2.4.21-199-athlon

I'm running recent KDE_3_2_BRANCH, this is from a the Kile reference manual, it hasn't changed since long. The file always displayed without a crash, until a few days ago. Guess it is a regression in 3_2_BRANCH.

The original file was 6000 lines long, but I've been able to cut it down to only a few lines.

best,
Jeroen

testfile:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>

<body>

<!--
	this works ok
-->
<dl compact>
	<dt>dt
	<dd>dd
</dl>

<!-- 
	this works ok, so it's not just the <ul> in the <dl>
-->
<dl>
	<dt>dt
	<dd>dd
		<ul>
			<li>ok
		</ul>
</dl>

<!--
	this dl block causes a crash, apparently is the <ul> in combination with <dl compact>
-->
<dl compact>
	<dt>dt
	<dd>dd
		<ul>
			<li>boom!
		</ul>
</dl>

</body>
</html>



backtrace:
[New Thread 16384 (LWP 23516)]
0x4147ca86 in waitpid () from /lib/i686/libpthread.so.0
#0  0x4147ca86 in waitpid () from /lib/i686/libpthread.so.0
#1  0x409303b7 in KCrash::defaultCrashHandler(int) (sig=6)
    at /home/kde-dev/kde/src/kdelibs/kdecore/kcrash.cpp:246
#2  0x4147b96c in __pthread_sighandler () from /lib/i686/libpthread.so.0
#3  <signal handler called>
#4  0x415f9b71 in kill () from /lib/i686/libc.so.6
#5  0x41478cf1 in pthread_kill () from /lib/i686/libpthread.so.0
#6  0x4147900b in raise () from /lib/i686/libpthread.so.0
#7  0x415f9904 in raise () from /lib/i686/libc.so.6
#8  0x415fae8c in abort () from /lib/i686/libc.so.6
#9  0x415f2e84 in __assert_fail () from /lib/i686/libc.so.6
#10 0x4219207e in khtml::RenderBlock::layoutBlock(bool) (this=0x82be3c4, 
    relayoutChildren=false)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_block.cpp:428
#11 0x42191ace in khtml::RenderBlock::layout() (this=0x82be3c4)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_block.cpp:420
#12 0x42192e11 in khtml::RenderBlock::layoutBlockChildren(bool) (
    this=0x82be478, relayoutChildren=false)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_block.cpp:824
#13 0x42191e4e in khtml::RenderBlock::layoutBlock(bool) (this=0x82be478, 
    relayoutChildren=false)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_block.cpp:501
#14 0x42191ace in khtml::RenderBlock::layout() (this=0x82be478)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_block.cpp:420
#15 0x42192e11 in khtml::RenderBlock::layoutBlockChildren(bool) (
    this=0x82be354, relayoutChildren=true)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_block.cpp:824
#16 0x42191e4e in khtml::RenderBlock::layoutBlock(bool) (this=0x82be354, 
    relayoutChildren=true)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_block.cpp:501
#17 0x42191ace in khtml::RenderBlock::layout() (this=0x82be354)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_block.cpp:420
#18 0x42192e11 in khtml::RenderBlock::layoutBlockChildren(bool) (
    this=0x82bdd3c, relayoutChildren=true)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_block.cpp:824
#19 0x42191e4e in khtml::RenderBlock::layoutBlock(bool) (this=0x82bdd3c, 
    relayoutChildren=true)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_block.cpp:501
#20 0x42191ace in khtml::RenderBlock::layout() (this=0x82bdd3c)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_block.cpp:420
#21 0x421d710e in khtml::RenderBody::layout() (this=0x82bdd3c)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_body.cpp:91
#22 0x42192e11 in khtml::RenderBlock::layoutBlockChildren(bool) (
    this=0x82bdc84, relayoutChildren=true)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_block.cpp:824
#23 0x42191e4e in khtml::RenderBlock::layoutBlock(bool) (this=0x82bdc84, 
    relayoutChildren=true)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_block.cpp:501
#24 0x42191ace in khtml::RenderBlock::layout() (this=0x82bdc84)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_block.cpp:420
#25 0x42192e11 in khtml::RenderBlock::layoutBlockChildren(bool) (
    this=0x82bdba0, relayoutChildren=false)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_block.cpp:824
#26 0x42191e4e in khtml::RenderBlock::layoutBlock(bool) (this=0x82bdba0, 
    relayoutChildren=false)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_block.cpp:501
#27 0x42191ace in khtml::RenderBlock::layout() (this=0x82bdba0)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_block.cpp:420
#28 0x421d010f in khtml::RenderCanvas::layout() (this=0x82bdba0)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_canvas.cpp:168
#29 0x420e6066 in KHTMLView::layout() (this=0x82985d0)
    at /home/kde-dev/kde/src/kdelibs/khtml/khtmlview.cpp:610
#30 0x421d07b9 in khtml::RenderCanvas::close() (this=0x82bdba0)
    at /home/kde-dev/kde/src/kdelibs/khtml/rendering/render_canvas.cpp:300
#31 0x4213f2e5 in DOM::DocumentImpl::close() (this=0x82b2c70)
    at /home/kde-dev/kde/src/kdelibs/khtml/xml/dom_docimpl.cpp:1168
#32 0x4216f38c in DOM::HTMLDocumentImpl::close() (this=0x82b2c70)
    at /home/kde-dev/kde/src/kdelibs/khtml/html/html_documentimpl.cpp:292
#33 0x421045a3 in KHTMLPart::checkEmitLoadEvent() (this=0x8299180)
    at /home/kde-dev/kde/src/kdelibs/khtml/khtml_part.cpp:2064
#34 0x4210352a in KHTMLPart::slotFinishedParsing() (this=0x8299180)
    at /home/kde-dev/kde/src/kdelibs/khtml/khtml_part.cpp:1801
#35 0x4211b9ac in KHTMLPart::qt_invoke(int, QUObject*) (this=0x8299180, 
    _id=20, _o=0xbfffdce0) at khtml_part.moc:474
#36 0x40d6469b in QObject::activate_signal(QConnectionList*, QUObject*) ()
   from /usr/lib/qt3/lib/libqt-mt.so.3
#37 0x40d64464 in QObject::activate_signal(int) ()
   from /usr/lib/qt3/lib/libqt-mt.so.3
#38 0x42144885 in DOM::DocumentImpl::finishedParsing() (this=0x82b2c70)
    at qmetaobject.h:261
#39 0x42144909 in DOM::DocumentImpl::qt_emit(int, QUObject*) (this=0xbfffdce0, 
    _id=-1073750796, _o=0xbfffde00) at dom_docimpl.moc:97
#40 0x421701d3 in DOM::HTMLDocumentImpl::qt_emit(int, QUObject*) (
    this=0x82b2c70, _id=2, _o=0xbfffde00) at html_documentimpl.moc:91
#41 0x40d646ce in QObject::activate_signal(QConnectionList*, QUObject*) ()
   from /usr/lib/qt3/lib/libqt-mt.so.3
#42 0x40d64464 in QObject::activate_signal(int) ()
   from /usr/lib/qt3/lib/libqt-mt.so.3
#43 0x421587c5 in khtml::Tokenizer::finishedParsing() (this=0x82c2538)
    at qmetaobject.h:261
#44 0x4216645f in khtml::HTMLTokenizer::end() (this=0xbfffde14)
    at /home/kde-dev/kde/src/kdelibs/khtml/html/htmltokenizer.cpp:1472
#45 0x421667be in khtml::HTMLTokenizer::finish() (this=0xbfffde00)
    at /home/kde-dev/kde/src/kdelibs/khtml/html/htmltokenizer.cpp:1517
#46 0x4213f46a in DOM::DocumentImpl::finishParsing() (this=0x0)
    at /home/kde-dev/kde/src/kdelibs/khtml/xml/dom_docimpl.cpp:1200
#47 0x42103269 in KHTMLPart::end() (this=0x8299180)
    at /home/kde-dev/kde/src/kdelibs/khtml/khtml_part.cpp:1752
#48 0x421027b7 in KHTMLPart::slotFinished(KIO::Job*) (this=0x8299180, 
    job=0x82673f8) at /home/kde-dev/kde/src/kdelibs/khtml/khtml_part.cpp:1611
#49 0x4211b9c0 in KHTMLPart::qt_invoke(int, QUObject*) (this=0x8299180, 
    _id=19, _o=0xbfffe110) at qucom_p.h:312
#50 0x40d645b8 in QObject::activate_signal(QConnectionList*, QUObject*) ()
   from /usr/lib/qt3/lib/libqt-mt.so.3
#51 0x4032c476 in KIO::Job::result(KIO::Job*) (this=0x82673f8, t0=0x82673f8)
    at jobclasses.moc:156
#52 0x40316c02 in KIO::Job::emitResult() (this=0x82673f8)
    at /home/kde-dev/kde/src/kdelibs/kio/kio/job.cpp:207
#53 0x40318413 in KIO::SimpleJob::slotFinished() (this=0x82673f8)
    at /home/kde-dev/kde/src/kdelibs/kio/kio/job.cpp:524
#54 0x4031b2f1 in KIO::TransferJob::slotFinished() (this=0x82673f8)
    at /home/kde-dev/kde/src/kdelibs/kio/kio/job.cpp:822
#55 0x4032d9cb in KIO::TransferJob::qt_invoke(int, QUObject*) (this=0x82673f8, 
    _id=17, _o=0xbfffe4b0) at jobclasses.moc:800
#56 0x40d6469b in QObject::activate_signal(QConnectionList*, QUObject*) ()
   from /usr/lib/qt3/lib/libqt-mt.so.3
#57 0x40d64464 in QObject::activate_signal(int) ()
   from /usr/lib/qt3/lib/libqt-mt.so.3
#58 0x403099e8 in KIO::SlaveInterface::finished() (this=0x82224b0)
    at qmetaobject.h:261
#59 0x40306c52 in KIO::SlaveInterface::dispatch(int, QMemArray<char> const&) (
    this=0x82224b0, _cmd=104, rawdata=@0xbfffe4c4)
    at /home/kde-dev/kde/src/kdelibs/kio/kio/slaveinterface.cpp:255
#60 0x4030615e in KIO::SlaveInterface::dispatch() (this=0x82224b0)
    at /home/kde-dev/kde/src/kdelibs/kio/kio/slaveinterface.cpp:191
#61 0x403032ee in KIO::Slave::gotInput() (this=0x82224b0)
    at /home/kde-dev/kde/src/kdelibs/kio/kio/slave.cpp:294
#62 0x403056cc in KIO::Slave::qt_invoke(int, QUObject*) (this=0x82224b0, 
    _id=4, _o=0xbfffe940) at slave.moc:113
#63 0x40d6469b in QObject::activate_signal(QConnectionList*, QUObject*) ()
   from /usr/lib/qt3/lib/libqt-mt.so.3
#64 0x40d647da in QObject::activate_signal(int, int) ()
   from /usr/lib/qt3/lib/libqt-mt.so.3
#65 0x41093d90 in QSocketNotifier::activated(int) ()
   from /usr/lib/qt3/lib/libqt-mt.so.3
#66 0x40d817f0 in QSocketNotifier::event(QEvent*) ()
   from /usr/lib/qt3/lib/libqt-mt.so.3
#67 0x40d026d6 in QApplication::internalNotify(QObject*, QEvent*) ()
   from /usr/lib/qt3/lib/libqt-mt.so.3
#68 0x40d019fe in QApplication::notify(QObject*, QEvent*) ()
   from /usr/lib/qt3/lib/libqt-mt.so.3
#69 0x4089194d in KApplication::notify(QObject*, QEvent*) (this=0xbffff1d0, 
    receiver=0x81110a8, event=0xbfffed30)
    at /home/kde-dev/kde/src/kdelibs/kdecore/kapplication.cpp:507
#70 0x40ceedf5 in QEventLoop::activateSocketNotifiers() ()
   from /usr/lib/qt3/lib/libqt-mt.so.3
#71 0x40caa1f6 in QEventLoop::processEvents(unsigned) ()
   from /usr/lib/qt3/lib/libqt-mt.so.3
#72 0x40d16980 in QEventLoop::enterLoop() ()
   from /usr/lib/qt3/lib/libqt-mt.so.3
#73 0x40d16876 in QEventLoop::exec() () from /usr/lib/qt3/lib/libqt-mt.so.3
#74 0x40d0296f in QApplication::exec() () from /usr/lib/qt3/lib/libqt-mt.so.3
#75 0x4006a500 in kdemain (argc=2, argv=0xbffff324)
    at /home/kde-dev/kde/src/kdebase/konqueror/konq_main.cc:184
#76 0x08048677 in main (argc=2, argv=0xbffff324) at konqueror.la.cc:2

Comment 1 Tommi Tervo 2004-04-01 21:27:26 UTC


*** This bug has been marked as a duplicate of 75806 ***