Bug#241291: konqueror SEGVs when image display/undisplay is done with CSS
Package: konqueror
Version: 4:3.2.1-1
While testing some updates to my website, I found that konqueror would
SEGV while viewing a certain page while displaying and undisplaying
images with CSS.
A short example of some code that causes konqueror to SEGV (the image
used/existance does not matter):
-----Example-----
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
"http://www.w3.org/TR/xhtml11/DTD/xhtml11-strict.dtd";>
<html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<style type="text/css">
body{float: left;}
ul li img{display: none;}
ul li:hover > img{display: inline; float: right;}
</style>
<title>An almost contentless website</title>
</head>
<body>
<ul>
<li>foo<img src="/usr/share/bmp/Skins/Default/main.bmp" alt="foo" />
</li>
</ul>
</body>
</html>
---End example---
---GDB output----
(gdb) run index.html
Starting program: /usr/bin/konqueror index.html
(no debugging symbols found)...(no debugging symbols found)...(no
debugging symbols found)...(no debugging symbols found)...(no debugging
symbols found)...(no debugging symbols found)...(no debugging symbols
found)...(no debugging symbols found)...(no debugging symbols
found)...(no debugging symbols found)...(no debugging symbols
found)...(no debugging symbols found)...(no debugging symbols
found)...(no debugging symbols found)...(no debugging symbols
found)...(no debugging symbols found)...(no debugging symbols
found)...(no debugging symbols found)...(no debugging symbols
found)...[New Thread 1086082112 (LWP 22202)]
(no debugging symbols found)...(no debugging symbols found)...(no
debugging symbols found)...(no debugging symbols found)...(no debugging
symbols found)...(no debugging symbols found)...(no debugging symbols
found)...(no debugging symbols found)...(no debugging symbols
found)...(no debugging symbols found)...(no debugging symbols
found)...(no debugging symbols found)...(no debugging symbols found)...
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1086082112 (LWP 22202)]
0x41ace217 in QMemArray<QPoint>::detach() () from /usr/lib/libkhtml.so.4
(gdb) bt
#0 0x41ace217 in QMemArray<QPoint>::detach() () from /usr/lib/libkhtml.so.4
#1 0x41ace2b3 in QMemArray<QPoint>::detach() () from /usr/lib/libkhtml.so.4
#2 0x41ae4863 in QMemArray<QPoint>::detach() () from /usr/lib/libkhtml.so.4
#3 0x41ae46b0 in QMemArray<QPoint>::detach() () from /usr/lib/libkhtml.so.4
#4 0x41ae4544 in QMemArray<QPoint>::detach() () from /usr/lib/libkhtml.so.4
#5 0x41a7a11c in KStaticDeleter<KHTMLPageCache>::~KStaticDeleter() ()
from /usr/lib/libkhtml.so.4
#6 0x41a3316e in KHTMLView::dispatchMouseEvent(int, DOM::NodeImpl*, bool, int,
QMouseEvent*, bool, int) () from /usr/lib/libkhtml.so.4
#7 0x41a2e58f in KHTMLView::viewportMouseMoveEvent(QMouseEvent*) ()
from /usr/lib/libkhtml.so.4
#8 0x438a189b in QScrollView::eventFilter(QObject*, QEvent*) ()
from /usr/lib/libqt-mt.so.3
#9 0x41a30001 in KHTMLView::eventFilter(QObject*, QEvent*) ()
from /usr/lib/libkhtml.so.4
#10 0x43790c4e in QObject::activate_filters(QEvent*) ()
from /usr/lib/libqt-mt.so.3
#11 0x43790b7c in QObject::event(QEvent*) () from /usr/lib/libqt-mt.so.3
#12 0x437c803f in QWidget::event(QEvent*) () from /usr/lib/libqt-mt.so.3
#13 0x4373779f in QApplication::internalNotify(QObject*, QEvent*) ()
from /usr/lib/libqt-mt.so.3
#14 0x43736ea1 in QApplication::notify(QObject*, QEvent*) ()
from /usr/lib/libqt-mt.so.3
---Type <return> to continue, or q <return> to quit---
#15 0x407d99ed in KApplication::notify(QObject*, QEvent*) ()
from /usr/lib/libkdecore.so.4
#16 0x436cf608 in QETWidget::translateMouseEvent(_XEvent const*) ()
from /usr/lib/libqt-mt.so.3
#17 0x436cd132 in QApplication::x11ProcessEvent(_XEvent*) ()
from /usr/lib/libqt-mt.so.3
#18 0x436e3221 in QEventLoop::processEvents(unsigned) ()
from /usr/lib/libqt-mt.so.3
#19 0x4374b008 in QEventLoop::enterLoop() () from /usr/lib/libqt-mt.so.3
#20 0x4374aeb8 in QEventLoop::exec() () from /usr/lib/libqt-mt.so.3
#21 0x437379f1 in QApplication::exec() () from /usr/lib/libqt-mt.so.3
#22 0x4005ac2c in kdemain () from /usr/lib/libkdeinit_konqueror.so
#23 0x080485fb in ?? ()
#24 0x00000002 in ?? ()
#25 0xbffff734 in ?? ()
#26 0xbffff734 in ?? ()
#27 0x4102e79a in __libc_start_main () from /lib/tls/i686/cmov/libc.so.6
#28 0x4114f06c in ?? () from /lib/tls/i686/cmov/libc.so.6
(gdb) cont
Continuing.
KCrash: Application 'konqueror' crashing...
Detaching after fork from child process 22205.
Program exited with code 0375.
(gdb) quit
---End output----
kernel: 2.6.4
libc6: 2.3.2.ds1-11
libkonq4: 4:3.2.1-1
konq-plugins: 4:3.2.1-1
kdelibs4: 4.3.2.1-1
libart-2.0-2: 2.3.16-3
libfam0c102: 2.7.0-5
libgcc1: 1:3.3.3-5
libice6: 4.3.0-7
libjpeg62: 6b-9
libpcre3: 4.5-1.1
libpng12-0: 1.2.5.0-5
libqt3c102-mt: 3:3.2.3-2
libsm6: 4.3.0-7
libstdc++5: 1:3.3.3-5
libx11-6: 4.3.0-7
libxext6: 4.3.0-7
libxrender1: 0.8.3-7
zlib1g: 1:1.2.1-5
kcontrol: 4:3.2.1-1
kdebase-kio-plugins: 4:3.2.1-1
kdesktop: 4:3.2.1-1
kfind: 4:3.2.1-1
--
Seneca
seneca-cunningham@rogers.com
Reply to: